Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts.
2023/09/10 02:54:12 ignoring optional flag "sandboxArg"="0"
2023/09/10 02:54:12 parsed 1 programs
2023/09/10 02:54:13 executed programs: 0
[ 76.627432][ T5377] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 76.670038][ T4433] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 76.677561][ T4433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 76.685984][ T4433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 76.695371][ T4433] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 76.703444][ T4433] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 76.711611][ T4433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 76.799673][ T5384] chnl_net:caif_netlink_parms(): no params data found
[ 76.843109][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.850523][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.857855][ T5384] bridge_slave_0: entered allmulticast mode
[ 76.864889][ T5384] bridge_slave_0: entered promiscuous mode
[ 76.872319][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.879805][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.887691][ T5384] bridge_slave_1: entered allmulticast mode
[ 76.894647][ T5384] bridge_slave_1: entered promiscuous mode
[ 76.914903][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.924721][ T9] cfg80211: failed to load regulatory.db
[ 76.938330][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.973176][ T5384] team0: Port device team_slave_0 added
[ 76.981881][ T5384] team0: Port device team_slave_1 added
[ 77.011525][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 77.020139][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.048781][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.060744][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.067755][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 77.095286][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 77.126273][ T5384] hsr_slave_0: entered promiscuous mode
[ 77.132606][ T5384] hsr_slave_1: entered promiscuous mode
[ 77.699934][ T5384] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.711246][ T5384] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.721712][ T5384] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.733456][ T5384] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.759101][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.766896][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.774566][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.781808][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.806007][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.815669][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.868778][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.897900][ T5384] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.911063][ T23] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.918749][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.935388][ T23] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.943225][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.981920][ T5384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 77.993459][ T5384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 78.126165][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.169811][ T5384] veth0_vlan: entered promiscuous mode
[ 78.184003][ T5384] veth1_vlan: entered promiscuous mode
[ 78.219397][ T5384] veth0_macvtap: entered promiscuous mode
[ 78.229713][ T5384] veth1_macvtap: entered promiscuous mode
[ 78.248075][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.264390][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.277646][ T5384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.288924][ T5384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.298556][ T5384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.308713][ T5384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.377694][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.397439][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.425417][ T5031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.434338][ T5031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.704939][ T5456] loop0: detected capacity change from 0 to 32768
[ 78.717625][ T5456] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 78.755658][ T5456] XFS (loop0): Ending clean mount
[ 78.763491][ T5456] XFS (loop0): Quotacheck needed: Please wait.
[ 78.764979][ T5032] Bluetooth: hci0: command 0x0409 tx timeout
[ 78.778946][ T5456] XFS (loop0): Quotacheck: Done.
[ 78.788495][ T28] audit: type=1804 audit(1694314455.779:2): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3895841543/syzkaller.Mub2eg/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 78.860779][ T28] audit: type=1804 audit(1694314455.819:3): pid=5456 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3895841543/syzkaller.Mub2eg/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 78.943669][ T5456] BUG: Bad page map in process syz-executor.0 pte:fffff9a91c120 pmd:7ef9e067
[ 78.953104][ T5456] page:ffffea000195b8c0 refcount:9 mapcount:-1 mapping:ffff888075b15190 index:0x3 pfn:0x656e3
[ 78.964028][ T5456] head:ffffea000195b800 order:2 entire_mapcount:0 nr_pages_mapped:8388607 pincount:0
[ 78.973911][ T5456] memcg:ffff888023d52000
[ 78.978449][ T5456] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 78.986085][ T5456] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.997454][ T5456] page_type: 0xffffffff()
[ 79.001895][ T5456] raw: 00fff00000000000 ffffea000195b801 dead000000000122 dead000000000400
[ 79.010787][ T5456] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 79.020233][ T5456] head: 00fff0000000816c ffffea0001b3b948 ffff8880142af030 ffff888075b15190
[ 79.029444][ T5456] head: 0000000000000000 ffff8880295fbc80 00000009ffffffff ffff888023d52000
[ 79.038681][ T5456] page dumped because: bad pte
[ 79.043512][ T5456] page_owner tracks the page as allocated
[ 79.049355][ T5456] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5456, tgid 5455 (syz-executor.0), ts 78822082874, free_ts 15468294632
[ 79.073391][ T5456] post_alloc_hook+0x1e6/0x210
[ 79.078183][ T5456] get_page_from_freelist+0x31db/0x3360
[ 79.083907][ T5456] __alloc_pages+0x255/0x670
[ 79.088790][ T5456] folio_alloc+0x1e/0x60
[ 79.093223][ T5456] filemap_alloc_folio+0xde/0x500
[ 79.098286][ T5456] page_cache_ra_order+0x423/0xcc0
[ 79.103578][ T5456] do_sync_mmap_readahead+0x444/0x850
[ 79.109163][ T5456] filemap_fault+0x7d3/0x1710
[ 79.113936][ T5456] __xfs_filemap_fault+0x286/0x960
[ 79.119147][ T5456] __do_fault+0x133/0x4e0
[ 79.123590][ T5456] handle_mm_fault+0x48d2/0x6200
[ 79.128658][ T5456] __get_user_pages+0x6bd/0x15e0
[ 79.133803][ T5456] get_dump_page+0x146/0x2b0
[ 79.138690][ T5456] dump_user_range+0x126/0x910
[ 79.143625][ T5456] elf_core_dump+0x3b75/0x4490
[ 79.148504][ T5456] do_coredump+0x1b73/0x2ab0
[ 79.153172][ T5456] page last free stack trace:
[ 79.157942][ T5456] free_unref_page_prepare+0x8c3/0x9f0
[ 79.164033][ T5456] free_unref_page+0x37/0x3f0
[ 79.168829][ T5456] free_contig_range+0x9e/0x150
[ 79.173834][ T5456] destroy_args+0x95/0x7c0
[ 79.178472][ T5456] debug_vm_pgtable+0x4ac/0x540
[ 79.183395][ T5456] do_one_initcall+0x23d/0x7d0
[ 79.188358][ T5456] do_initcall_level+0x157/0x210
[ 79.193377][ T5456] do_initcalls+0x3f/0x80
[ 79.197818][ T5456] kernel_init_freeable+0x440/0x5d0
[ 79.203350][ T5456] kernel_init+0x1d/0x2a0
[ 79.207793][ T5456] ret_from_fork+0x48/0x80
[ 79.212803][ T5456] ret_from_fork_asm+0x11/0x20
[ 79.217689][ T5456] addr:0000000020006000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888075b15190 index:5
[ 79.229424][ T5456] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 79.239921][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12921-ga3c57ab79a06-dirty #0
[ 79.250710][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 79.261292][ T5456] Call Trace:
[ 79.264576][ T5456]
[ 79.267680][ T5456] dump_stack_lvl+0x1e7/0x2d0
[ 79.272536][ T5456] ? nf_tcp_handle_invalid+0x650/0x650
[ 79.278165][ T5456] ? panic+0x770/0x770
[ 79.282226][ T5456] ? dump_page+0x9c2/0x1090
[ 79.287118][ T5456] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 79.292775][ T5456] ? xfs_file_write_iter+0x620/0x620
[ 79.298072][ T5456] print_bad_pte+0x581/0x5c0
[ 79.302664][ T5456] unmap_page_range+0x1a76/0x3300
[ 79.307692][ T5456] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 79.314541][ T5456] ? __might_sleep+0xc0/0xc0
[ 79.319508][ T5456] ? uprobe_munmap+0x183/0x410
[ 79.324399][ T5456] ? unmap_single_vma+0x1b9/0x2a0
[ 79.329439][ T5456] unmap_vmas+0x209/0x3a0
[ 79.333775][ T5456] ? unmap_page_range+0x3300/0x3300
[ 79.339083][ T5456] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 79.344559][ T5456] exit_mmap+0x297/0xc50
[ 79.348810][ T5456] ? vm_brk+0x30/0x30
[ 79.352783][ T5456] ? __asan_memset+0x23/0x40
[ 79.357729][ T5456] ? uprobe_clear_state+0x275/0x290
[ 79.363467][ T5456] ? mm_update_next_owner+0x4a3/0x520
[ 79.369595][ T5456] __mmput+0x115/0x3c0
[ 79.373675][ T5456] exit_mm+0x21f/0x300
[ 79.378034][ T5456] ? coredump_task_exit+0x460/0x460
[ 79.383417][ T5456] ? taskstats_exit+0x39d/0x920
[ 79.388560][ T5456] ? tty_audit_exit+0x154/0x1f0
[ 79.393430][ T5456] do_exit+0x612/0x2290
[ 79.397944][ T5456] ? put_task_struct+0xc0/0xc0
[ 79.402710][ T5456] do_group_exit+0x206/0x2c0
[ 79.407449][ T5456] get_signal+0x175d/0x1840
[ 79.411978][ T5456] ? ptrace_notify+0x380/0x380
[ 79.416773][ T5456] ? do_pwritev+0x2b9/0x360
[ 79.421287][ T5456] arch_do_signal_or_restart+0x96/0x860
[ 79.426951][ T5456] ? get_sigframe_size+0x20/0x20
[ 79.431903][ T5456] ? rcu_is_watching+0x15/0xb0
[ 79.436678][ T5456] exit_to_user_mode_loop+0x6a/0x100
[ 79.442295][ T5456] exit_to_user_mode_prepare+0xb1/0x140
[ 79.448131][ T5456] syscall_exit_to_user_mode+0x64/0x280
[ 79.454158][ T5456] do_syscall_64+0x4d/0xc0
[ 79.458631][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.464973][ T5456] RIP: 0033:0x7f766007cae9
[ 79.469561][ T5456] Code: Unable to access opcode bytes at 0x7f766007cabf.
[ 79.476680][ T5456] RSP: 002b:00007f7660d270c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 79.485468][ T5456] RAX: ffffffffffffffe5 RBX: 00007f766019bf80 RCX: 00007f766007cae9
[ 79.494324][ T5456] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 79.502905][ T5456] RBP: 00007f76600c847a R08: 0000000000000000 R09: 0000000000000000
[ 79.512468][ T5456] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 79.521131][ T5456] R13: 000000000000000b R14: 00007f766019bf80 R15: 00007fff3bbb47b8
[ 79.529209][ T5456]
[ 79.550166][ T5456] BUG: Bad page map in process syz-executor.0 pte:fffff9a91d120 pmd:7ef9e067
[ 79.560098][ T5456] page:ffffea000195b880 refcount:9 mapcount:-1 mapping:ffff888075b15190 index:0x2 pfn:0x656e2
[ 79.571208][ T5456] head:ffffea000195b800 order:2 entire_mapcount:0 nr_pages_mapped:8388606 pincount:0
[ 79.581499][ T5456] memcg:ffff888023d52000
[ 79.586340][ T5456] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 79.594820][ T5456] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 79.606179][ T5456] page_type: 0xffffffff()
[ 79.610540][ T5456] raw: 00fff00000000000 ffffea000195b801 ffffea000195b890 ffffea000195b890
[ 79.619686][ T5456] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 79.628599][ T5456] head: 00fff0000000816c ffffea0001b3b948 ffff8880142af030 ffff888075b15190
[ 79.637624][ T5456] head: 0000000000000000 ffff8880295fbc80 00000009ffffffff ffff888023d52000
[ 79.646824][ T5456] page dumped because: bad pte
[ 79.651730][ T5456] page_owner tracks the page as allocated
[ 79.657777][ T5456] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5456, tgid 5455 (syz-executor.0), ts 78822082874, free_ts 15468288757
[ 79.682481][ T5456] post_alloc_hook+0x1e6/0x210
[ 79.687746][ T5456] get_page_from_freelist+0x31db/0x3360
[ 79.693682][ T5456] __alloc_pages+0x255/0x670
[ 79.698315][ T5456] folio_alloc+0x1e/0x60
[ 79.703289][ T5456] filemap_alloc_folio+0xde/0x500
[ 79.708587][ T5456] page_cache_ra_order+0x423/0xcc0
[ 79.714061][ T5456] do_sync_mmap_readahead+0x444/0x850
[ 79.719740][ T5456] filemap_fault+0x7d3/0x1710
[ 79.725419][ T5456] __xfs_filemap_fault+0x286/0x960
[ 79.730757][ T5456] __do_fault+0x133/0x4e0
[ 79.735535][ T5456] handle_mm_fault+0x48d2/0x6200
[ 79.740685][ T5456] __get_user_pages+0x6bd/0x15e0
[ 79.746046][ T5456] get_dump_page+0x146/0x2b0
[ 79.750678][ T5456] dump_user_range+0x126/0x910
[ 79.755927][ T5456] elf_core_dump+0x3b75/0x4490
[ 79.760732][ T5456] do_coredump+0x1b73/0x2ab0
[ 79.765676][ T5456] page last free stack trace:
[ 79.770377][ T5456] free_unref_page_prepare+0x8c3/0x9f0
[ 79.776559][ T5456] free_unref_page+0x37/0x3f0
[ 79.782126][ T5456] free_contig_range+0x9e/0x150
[ 79.787734][ T5456] destroy_args+0x95/0x7c0
[ 79.792363][ T5456] debug_vm_pgtable+0x4ac/0x540
[ 79.797936][ T5456] do_one_initcall+0x23d/0x7d0
[ 79.803335][ T5456] do_initcall_level+0x157/0x210
[ 79.808752][ T5456] do_initcalls+0x3f/0x80
[ 79.814161][ T5456] kernel_init_freeable+0x440/0x5d0
[ 79.821582][ T5456] kernel_init+0x1d/0x2a0
[ 79.826914][ T5456] ret_from_fork+0x48/0x80
[ 79.833442][ T5456] ret_from_fork_asm+0x11/0x20
[ 79.838253][ T5456] addr:0000000020007000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888075b15190 index:6
[ 79.850136][ T5456] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 79.860035][ T5456] CPU: 1 PID: 5456 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-12921-ga3c57ab79a06-dirty #0
[ 79.872825][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 79.883085][ T5456] Call Trace:
[ 79.886392][ T5456]
[ 79.889345][ T5456] dump_stack_lvl+0x1e7/0x2d0
[ 79.894373][ T5456] ? nf_tcp_handle_invalid+0x650/0x650
[ 79.899866][ T5456] ? panic+0x770/0x770
[ 79.903973][ T5456] ? dump_page+0x9c2/0x1090
[ 79.908520][ T5456] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 79.913924][ T5456] ? xfs_file_write_iter+0x620/0x620
[ 79.919334][ T5456] print_bad_pte+0x581/0x5c0
[ 79.924313][ T5456] unmap_page_range+0x1a76/0x3300
[ 79.929400][ T5456] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 79.936040][ T5456] ? __might_sleep+0xc0/0xc0
[ 79.940664][ T5456] ? uprobe_munmap+0x183/0x410
[ 79.945794][ T5456] ? unmap_single_vma+0x1b9/0x2a0
[ 79.951120][ T5456] unmap_vmas+0x209/0x3a0
[ 79.955784][ T5456] ? unmap_page_range+0x3300/0x3300
[ 79.961038][ T5456] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 79.966734][ T5456] exit_mmap+0x297/0xc50
[ 79.971012][ T5456] ? vm_brk+0x30/0x30
[ 79.975116][ T5456] ? __asan_memset+0x23/0x40
[ 79.979813][ T5456] ? uprobe_clear_state+0x275/0x290
[ 79.985124][ T5456] ? mm_update_next_owner+0x4a3/0x520
[ 79.990533][ T5456] __mmput+0x115/0x3c0
[ 79.994633][ T5456] exit_mm+0x21f/0x300
[ 79.998956][ T5456] ? coredump_task_exit+0x460/0x460
[ 80.004263][ T5456] ? taskstats_exit+0x39d/0x920
[ 80.009456][ T5456] ? tty_audit_exit+0x154/0x1f0
[ 80.014541][ T5456] do_exit+0x612/0x2290
[ 80.018735][ T5456] ? put_task_struct+0xc0/0xc0
[ 80.023541][ T5456] do_group_exit+0x206/0x2c0
[ 80.028168][ T5456] get_signal+0x175d/0x1840
[ 80.032887][ T5456] ? ptrace_notify+0x380/0x380
[ 80.037684][ T5456] ? do_pwritev+0x2b9/0x360
[ 80.042320][ T5456] arch_do_signal_or_restart+0x96/0x860
[ 80.047910][ T5456] ? get_sigframe_size+0x20/0x20
[ 80.052983][ T5456] ? rcu_is_watching+0x15/0xb0
[ 80.057944][ T5456] exit_to_user_mode_loop+0x6a/0x100
[ 80.063348][ T5456] exit_to_user_mode_prepare+0xb1/0x140
[ 80.069101][ T5456] syscall_exit_to_user_mode+0x64/0x280
[ 80.074686][ T5456] do_syscall_64+0x4d/0xc0
[ 80.079135][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.085236][ T5456] RIP: 0033:0x7f766007cae9
[ 80.089943][ T5456] Code: Unable to access opcode bytes at 0x7f766007cabf.
[ 80.097157][ T5456] RSP: 002b:00007f7660d270c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 80.105607][ T5456] RAX: ffffffffffffffe5 RBX: 00007f766019bf80 RCX: 00007f766007cae9
[ 80.113859][ T5456] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 80.121948][ T5456] RBP: 00007f76600c847a R08: 0000000000000000 R09: 0000000000000000
[ 80.130030][ T5456] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 80.138133][ T5456] R13: 000000000000000b R14: 00007f766019bf80 R15: 00007fff3bbb47b8
[ 80.146337][ T5456]
[ 80.163237][ T5456] BUG: Bad page map in process syz-executor.0 pte:fffff9a91e120 pmd:7ef9e067
[ 80.172395][ T5456] page:ffffea000195b840 refcount:9 mapcount:-1 mapping:ffff888075b15190 index:0x1 pfn:0x656e1
[ 80.182976][ T5456] head:ffffea000195b800 order:2 entire_mapcount:0 nr_pages_mapped:8388605 pincount:0
[ 80.193253][ T5456] memcg:ffff888023d52000
[ 80.197613][ T5456] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 80.205760][ T5456] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 80.217376][ T5456] page_type: 0xffffffff()
[ 80.221907][ T5456] raw: 00fff00000000202 ffffea000195b801 dead000000000122 fffffffdffffffff
[ 80.230985][ T5456] raw: 0000000400000000 0000000000000000 00000000fffffffe 0000000000000000
[ 80.239915][ T5456] head: 00fff0000000816c ffffea0001b3b948 ffff8880142af030 ffff888075b15190
[ 80.250633][ T5456] head: 0000000000000000 ffff8880295fbc80 00000009ffffffff ffff888023d52000
[ 80.259890][ T5456] page dumped because: bad pte
[ 80.265087][ T5456] page_owner tracks the page as allocated
[ 80.271257][ T5456] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5456, tgid 5455 (syz-executor.0), ts 78822082874, free_ts 15468282901
[ 80.295019][ T5456] post_alloc_hook+0x1e6/0x210
[ 80.299928][ T5456] get_page_from_freelist+0x31db/0x3360
[ 80.306048][ T5456] __alloc_pages+0x255/0x670
[ 80.311046][ T5456] folio_alloc+0x1e/0x60
[ 80.315711][ T5456] filemap_alloc_folio+0xde/0x500
[ 80.321379][ T5456] page_cache_ra_order+0x423/0xcc0
[ 80.326756][ T5456] do_sync_mmap_readahead+0x444/0x850
[ 80.332174][ T5456] filemap_fault+0x7d3/0x1710
[ 80.337017][ T5456] __xfs_filemap_fault+0x286/0x960
[ 80.342165][ T5456] __do_fault+0x133/0x4e0
[ 80.346579][ T5456] handle_mm_fault+0x48d2/0x6200
[ 80.351657][ T5456] __get_user_pages+0x6bd/0x15e0
[ 80.356694][ T5456] get_dump_page+0x146/0x2b0
[ 80.361312][ T5456] dump_user_range+0x126/0x910
[ 80.366243][ T5456] elf_core_dump+0x3b75/0x4490
[ 80.371122][ T5456] do_coredump+0x1b73/0x2ab0
[ 80.375789][ T5456] page last free stack trace:
[ 80.380737][ T5456] free_unref_page_prepare+0x8c3/0x9f0
[ 80.386291][ T5456] free_unref_page+0x37/0x3f0
[ 80.391291][ T5456] free_contig_range+0x9e/0x150
[ 80.396274][ T5456] destroy_args+0x95/0x7c0
[ 80.400760][ T5456] debug_vm_pgtable+0x4ac/0x540
[ 80.405681][ T5456] do_one_initcall+0x23d/0x7d0
[ 80.410729][ T5456] do_initcall_level+0x157/0x210
[ 80.415753][ T5456] do_initcalls+0x3f/0x80
[ 80.420204][ T5456] kernel_init_freeable+0x440/0x5d0
[ 80.425480][ T5456] kernel_init+0x1d/0x2a0
[ 80.429830][ T5456] ret_from_fork+0x48/0x80
[ 80.434324][ T5456] ret_from_fork_asm+0x11/0x20
[ 80.439557][ T5456] addr:0000000020008000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888075b15190 index:7
[ 80.450626][ T5456] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 80.460196][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-12921-ga3c57ab79a06-dirty #0
[ 80.472352][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 80.482747][ T5456] Call Trace:
[ 80.486019][ T5456]
[ 80.488959][ T5456] dump_stack_lvl+0x1e7/0x2d0
[ 80.493726][ T5456] ? nf_tcp_handle_invalid+0x650/0x650
[ 80.499182][ T5456] ? panic+0x770/0x770
[ 80.503422][ T5456] ? dump_page+0x9c2/0x1090
[ 80.507937][ T5456] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 80.513410][ T5456] ? xfs_file_write_iter+0x620/0x620
[ 80.518711][ T5456] print_bad_pte+0x581/0x5c0
[ 80.523369][ T5456] unmap_page_range+0x1a76/0x3300
[ 80.528621][ T5456] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 80.535147][ T5456] ? __might_sleep+0xc0/0xc0
[ 80.539840][ T5456] ? uprobe_munmap+0x183/0x410
[ 80.544603][ T5456] ? unmap_single_vma+0x1b9/0x2a0
[ 80.549662][ T5456] unmap_vmas+0x209/0x3a0
[ 80.553990][ T5456] ? unmap_page_range+0x3300/0x3300
[ 80.559192][ T5456] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 80.565219][ T5456] exit_mmap+0x297/0xc50
[ 80.569499][ T5456] ? vm_brk+0x30/0x30
[ 80.573488][ T5456] ? __asan_memset+0x23/0x40
[ 80.578437][ T5456] ? uprobe_clear_state+0x275/0x290
[ 80.583660][ T5456] ? mm_update_next_owner+0x4a3/0x520
[ 80.589288][ T5456] __mmput+0x115/0x3c0
[ 80.593978][ T5456] exit_mm+0x21f/0x300
[ 80.598167][ T5456] ? coredump_task_exit+0x460/0x460
[ 80.603917][ T5456] ? taskstats_exit+0x39d/0x920
[ 80.609028][ T5456] ? tty_audit_exit+0x154/0x1f0
[ 80.614329][ T5456] do_exit+0x612/0x2290
[ 80.618543][ T5456] ? put_task_struct+0xc0/0xc0
[ 80.623609][ T5456] do_group_exit+0x206/0x2c0
[ 80.628228][ T5456] get_signal+0x175d/0x1840
[ 80.633353][ T5456] ? ptrace_notify+0x380/0x380
[ 80.638223][ T5456] ? do_pwritev+0x2b9/0x360
[ 80.642765][ T5456] arch_do_signal_or_restart+0x96/0x860
[ 80.651133][ T5456] ? get_sigframe_size+0x20/0x20
[ 80.657321][ T5456] ? rcu_is_watching+0x15/0xb0
[ 80.662094][ T5456] exit_to_user_mode_loop+0x6a/0x100
[ 80.668020][ T5456] exit_to_user_mode_prepare+0xb1/0x140
[ 80.673680][ T5456] syscall_exit_to_user_mode+0x64/0x280
[ 80.679297][ T5456] do_syscall_64+0x4d/0xc0
[ 80.683752][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.689824][ T5456] RIP: 0033:0x7f766007cae9
[ 80.694465][ T5456] Code: Unable to access opcode bytes at 0x7f766007cabf.
[ 80.701669][ T5456] RSP: 002b:00007f7660d270c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 80.710443][ T5456] RAX: ffffffffffffffe5 RBX: 00007f766019bf80 RCX: 00007f766007cae9
[ 80.722231][ T5456] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 80.730754][ T5456] RBP: 00007f76600c847a R08: 0000000000000000 R09: 0000000000000000
[ 80.738909][ T5456] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 80.747152][ T5456] R13: 000000000000000b R14: 00007f766019bf80 R15: 00007fff3bbb47b8
[ 80.755331][ T5456]
[ 80.778494][ T5384] page:ffffea000195b900 refcount:7 mapcount:0 mapping:ffff888075b15190 index:0x4 pfn:0x656e4
[ 80.788801][ T5384] head:ffffea000195b900 order:2 entire_mapcount:0 nr_pages_mapped:2 pincount:0
[ 80.797930][ T5384] memcg:ffff888023d52000
[ 80.802362][ T5384] aops:xfs_address_space_operations ino:244a
[ 80.808558][ T5384] flags: 0xfff00000000169(locked|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff)
[ 80.819825][ T5384] page_type: 0xffffffff()
[ 80.824542][ T5384] raw: 00fff00000000169 ffffea000195b808 ffff8880142af030 ffff888075b15190
[ 80.833862][ T5384] raw: 0000000000000004 0000000000000000 00000007ffffffff ffff888023d52000
[ 80.843189][ T5384] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[ 80.850482][ T5384] page_owner tracks the page as allocated
[ 80.856297][ T5384] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5456, tgid 5455 (syz-executor.0), ts 78822138148, free_ts 15468300480
[ 80.880061][ T5384] post_alloc_hook+0x1e6/0x210
[ 80.883039][ T5032] Bluetooth: hci0: command 0x041b tx timeout
[ 80.884840][ T5384] get_page_from_freelist+0x31db/0x3360
[ 80.896640][ T5384] __alloc_pages+0x255/0x670
[ 80.901317][ T5384] folio_alloc+0x1e/0x60
[ 80.905625][ T5384] filemap_alloc_folio+0xde/0x500
[ 80.910912][ T5384] page_cache_ra_order+0x423/0xcc0
[ 80.916333][ T5384] do_sync_mmap_readahead+0x444/0x850
[ 80.921740][ T5384] filemap_fault+0x7d3/0x1710
[ 80.926530][ T5384] __xfs_filemap_fault+0x286/0x960
[ 80.931946][ T5384] __do_fault+0x133/0x4e0
[ 80.936563][ T5384] handle_mm_fault+0x48d2/0x6200
[ 80.941707][ T5384] __get_user_pages+0x6bd/0x15e0
[ 80.946954][ T5384] get_dump_page+0x146/0x2b0
[ 80.951983][ T5384] dump_user_range+0x126/0x910
[ 80.958982][ T5384] elf_core_dump+0x3b75/0x4490
[ 80.964037][ T5384] do_coredump+0x1b73/0x2ab0
[ 80.968655][ T5384] page last free stack trace:
[ 80.973342][ T5384] free_unref_page_prepare+0x8c3/0x9f0
[ 80.978825][ T5384] free_unref_page+0x37/0x3f0
[ 80.983524][ T5384] free_contig_range+0x9e/0x150
[ 80.988475][ T5384] destroy_args+0x95/0x7c0
[ 80.993188][ T5384] debug_vm_pgtable+0x4ac/0x540
[ 80.998157][ T5384] do_one_initcall+0x23d/0x7d0
[ 81.003117][ T5384] do_initcall_level+0x157/0x210
[ 81.008167][ T5384] do_initcalls+0x3f/0x80
[ 81.012529][ T5384] kernel_init_freeable+0x440/0x5d0
[ 81.018106][ T5384] kernel_init+0x1d/0x2a0
[ 81.022458][ T5384] ret_from_fork+0x48/0x80
[ 81.027000][ T5384] ret_from_fork_asm+0x11/0x20
[ 81.032234][ T5384] ------------[ cut here ]------------
[ 81.037712][ T5384] kernel BUG at mm/filemap.c:155!
[ 81.042862][ T5384] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 81.049130][ T5384] CPU: 0 PID: 5384 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-12921-ga3c57ab79a06-dirty #0
[ 81.061324][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 81.072790][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 81.079250][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 a0 09 13 8b e8 68 a5 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 20 0f 13 8b e8 52 a5 10 00
[ 81.100464][ T5384] RSP: 0018:ffffc9000541f778 EFLAGS: 00010046
[ 81.106559][ T5384] RAX: 26c168c34a2fdc00 RBX: 0000000000000000 RCX: ffffffff816d2b30
[ 81.114740][ T5384] RDX: 0000000000000000 RSI: ffffffff8b5994c0 RDI: ffffffff8b599480
[ 81.123140][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a642f R09: 1ffffffff1d34c85
[ 81.133738][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34c86 R12: ffffc9000541f9c0
[ 81.141830][ T5384] R13: ffffea000195b900 R14: 1ffffd400032b720 R15: ffffea000195b908
[ 81.149829][ T5384] FS: 000055555634b480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 81.159264][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 81.166134][ T5384] CR2: 0000555556354938 CR3: 0000000016bf1000 CR4: 00000000003506f0
[ 81.174219][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 81.182468][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 81.190549][ T5384] Call Trace:
[ 81.193852][ T5384]
[ 81.196819][ T5384] ? __die_body+0x8b/0xe0
[ 81.201524][ T5384] ? die+0xa1/0xd0
[ 81.205284][ T5384] ? do_trap+0x153/0x380
[ 81.210129][ T5384] ? __wake_up_klogd+0xcc/0x100
[ 81.215378][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 81.221280][ T5384] ? do_error_trap+0x1dc/0x2c0
[ 81.226307][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 81.233385][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 81.238443][ T5384] ? do_int3+0x50/0x50
[ 81.242849][ T5384] ? report_bug+0x3cd/0x500
[ 81.247560][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 81.253495][ T5384] ? handle_invalid_op+0x34/0x40
[ 81.258473][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 81.264411][ T5384] ? exc_invalid_op+0x33/0x50
[ 81.269117][ T5384] ? asm_exc_invalid_op+0x1a/0x20
[ 81.274278][ T5384] ? lock_release+0xb0/0x9d0
[ 81.278913][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 81.284819][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 81.290821][ T5384] delete_from_page_cache_batch+0x173/0xc90
[ 81.296925][ T5384] ? filemap_remove_folio+0x2e0/0x2e0
[ 81.302332][ T5384] ? __kmem_cache_free+0x25f/0x3b0
[ 81.307473][ T5384] ? truncate_cleanup_folio+0x1e0/0x5c0
[ 81.313488][ T5384] ? ifs_free+0x710/0x710
[ 81.317863][ T5384] ? truncate_cleanup_folio+0x2cd/0x5c0
[ 81.323548][ T5384] truncate_inode_pages_range+0x346/0x11a0
[ 81.329672][ T5384] ? lock_acquire+0xe3/0x520
[ 81.334309][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 81.339414][ T5384] ? mapping_evict_folio+0x530/0x530
[ 81.345261][ T5384] ? __rwlock_init+0x150/0x150
[ 81.350074][ T5384] evict+0x2b7/0x620
[ 81.354009][ T5384] evict_inodes+0x5f8/0x690
[ 81.358631][ T5384] ? clear_inode+0x150/0x150
[ 81.363332][ T5384] ? xfs_fs_sync_fs+0x1c0/0x360
[ 81.368219][ T5384] generic_shutdown_super+0x9d/0x2c0
[ 81.373800][ T5384] kill_block_super+0x41/0x70
[ 81.378503][ T5384] xfs_kill_sb+0x15/0x50
[ 81.382859][ T5384] deactivate_locked_super+0xa4/0x110
[ 81.388261][ T5384] cleanup_mnt+0x426/0x4c0
[ 81.392707][ T5384] task_work_run+0x24a/0x300
[ 81.397854][ T5384] ? task_work_cancel+0x2b0/0x2b0
[ 81.402996][ T5384] ? rcu_is_watching+0x15/0xb0
[ 81.407789][ T5384] exit_to_user_mode_loop+0xd9/0x100
[ 81.413122][ T5384] exit_to_user_mode_prepare+0xb1/0x140
[ 81.418745][ T5384] syscall_exit_to_user_mode+0x64/0x280
[ 81.424342][ T5384] do_syscall_64+0x4d/0xc0
[ 81.428796][ T5384] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.434972][ T5384] RIP: 0033:0x7f766007de17
[ 81.439523][ T5384] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 81.459247][ T5384] RSP: 002b:00007fff3bbb39d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 81.467940][ T5384] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f766007de17
[ 81.476461][ T5384] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fff3bbb3a90
[ 81.484637][ T5384] RBP: 00007fff3bbb3a90 R08: 0000000000000000 R09: 0000000000000000
[ 81.492631][ T5384] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3bbb4b50
[ 81.501201][ T5384] R13: 00007f76600c73b9 R14: 000000000001326d R15: 0000000000000007
[ 81.509299][ T5384]
[ 81.512509][ T5384] Modules linked in:
[ 81.516505][ T5384] ---[ end trace 0000000000000000 ]---
[ 81.522342][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 81.528624][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 a0 09 13 8b e8 68 a5 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 20 0f 13 8b e8 52 a5 10 00
[ 81.549048][ T5384] RSP: 0018:ffffc9000541f778 EFLAGS: 00010046
[ 81.555154][ T5384] RAX: 26c168c34a2fdc00 RBX: 0000000000000000 RCX: ffffffff816d2b30
[ 81.563233][ T5384] RDX: 0000000000000000 RSI: ffffffff8b5994c0 RDI: ffffffff8b599480
[ 81.572188][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a642f R09: 1ffffffff1d34c85
[ 81.580794][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34c86 R12: ffffc9000541f9c0
[ 81.589224][ T5384] R13: ffffea000195b900 R14: 1ffffd400032b720 R15: ffffea000195b908
[ 81.597571][ T5384] FS: 000055555634b480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 81.606963][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 81.613836][ T5384] CR2: 0000555556354938 CR3: 0000000016bf1000 CR4: 00000000003506f0
[ 81.622030][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 81.630120][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 81.638209][ T5384] Kernel panic - not syncing: Fatal exception
[ 81.644572][ T5384] Kernel Offset: disabled
[ 81.648908][ T5384] Rebooting in 86400 seconds..