Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts.
2023/09/11 10:11:37 ignoring optional flag "sandboxArg"="0"
2023/09/11 10:11:38 parsed 1 programs
2023/09/11 10:11:39 executed programs: 0
[ 74.479323][ T5377] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 74.490467][ T5376] syz-execprog[5376]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 74.500752][ T5376] syz-execprog[5376]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 74.542234][ T4439] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 74.549704][ T4439] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 74.556877][ T4439] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 74.564999][ T4439] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 74.572734][ T4439] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 74.580185][ T4439] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 74.667239][ T5384] chnl_net:caif_netlink_parms(): no params data found
[ 74.708900][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.716017][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.723287][ T5384] bridge_slave_0: entered allmulticast mode
[ 74.729864][ T5384] bridge_slave_0: entered promiscuous mode
[ 74.737129][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.744329][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.751510][ T5384] bridge_slave_1: entered allmulticast mode
[ 74.758192][ T5384] bridge_slave_1: entered promiscuous mode
[ 74.777117][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.788886][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.811313][ T5384] team0: Port device team_slave_0 added
[ 74.819412][ T5384] team0: Port device team_slave_1 added
[ 74.837519][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.844530][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.870589][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.882209][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.889310][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.915466][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.945977][ T5384] hsr_slave_0: entered promiscuous mode
[ 74.952152][ T5384] hsr_slave_1: entered promiscuous mode
[ 75.483863][ T5384] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.494495][ T5384] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.505938][ T5384] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.516128][ T5384] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.541661][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.548860][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.556386][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.563576][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.625335][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.643063][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.651869][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.666232][ T5384] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.681866][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.689047][ T5044] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.704423][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.711696][ T5044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.872880][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.918975][ T5384] veth0_vlan: entered promiscuous mode
[ 75.934730][ T5384] veth1_vlan: entered promiscuous mode
[ 75.964693][ T5384] veth0_macvtap: entered promiscuous mode
[ 75.975602][ T5384] veth1_macvtap: entered promiscuous mode
[ 75.995287][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.017132][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.030463][ T5384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.041592][ T5384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.051861][ T5384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.060860][ T5384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.125750][ T4676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.144219][ T4676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.166991][ T4676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.175821][ T4676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.232821][ T5455] syz-executor.0[5455]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 76.464142][ T5455] loop0: detected capacity change from 0 to 32768
[ 76.479879][ T5455] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 76.515201][ T5455] XFS (loop0): Ending clean mount
[ 76.524219][ T5455] XFS (loop0): Quotacheck needed: Please wait.
[ 76.543566][ T5455] XFS (loop0): Quotacheck: Done.
[ 76.561817][ T28] audit: type=1804 audit(1694427101.452:2): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3044766434/syzkaller.YzYNHQ/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 76.612132][ T4439] Bluetooth: hci0: command 0x0409 tx timeout
[ 76.626342][ T28] audit: type=1804 audit(1694427101.452:3): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3044766434/syzkaller.YzYNHQ/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 76.698582][ T9] cfg80211: failed to load regulatory.db
[ 76.722698][ T5455] BUG: Bad page map in process syz-executor.0 pte:fffff99cf8120 pmd:78f39067
[ 76.731908][ T5455] page:ffffea000198c1c0 refcount:9 mapcount:-1 mapping:ffff8880670fd190 index:0x3 pfn:0x66307
[ 76.742510][ T5455] head:ffffea000198c100 order:2 entire_mapcount:0 nr_pages_mapped:8388607 pincount:0
[ 76.752266][ T5455] memcg:ffff88807ad24000
[ 76.756528][ T5455] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 76.764468][ T5455] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 76.775835][ T5455] page_type: 0xffffffff()
[ 76.780536][ T5455] raw: 00fff00000000000 ffffea000198c101 dead000000000122 dead000000000400
[ 76.789706][ T5455] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 76.798588][ T5455] head: 00fff0000000816c ffffea0001c7b088 ffff8880780d7030 ffff8880670fd190
[ 76.807369][ T5455] head: 0000000000000000 ffff888019b03800 00000009ffffffff ffff88807ad24000
[ 76.816391][ T5455] page dumped because: bad pte
[ 76.821473][ T5455] page_owner tracks the page as allocated
[ 76.827192][ T5455] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5455, tgid 5454 (syz-executor.0), ts 76565665345, free_ts 14221404932
[ 76.850385][ T5455] post_alloc_hook+0x1e6/0x210
[ 76.855179][ T5455] get_page_from_freelist+0x31ec/0x3370
[ 76.861051][ T5455] __alloc_pages+0x255/0x670
[ 76.865657][ T5455] folio_alloc+0x1e/0x60
[ 76.870256][ T5455] filemap_alloc_folio+0xde/0x500
[ 76.875469][ T5455] page_cache_ra_order+0x423/0xcc0
[ 76.880884][ T5455] do_sync_mmap_readahead+0x444/0x850
[ 76.886270][ T5455] filemap_fault+0x7d3/0x1710
[ 76.891123][ T5455] __xfs_filemap_fault+0x286/0x960
[ 76.896255][ T5455] __do_fault+0x133/0x4e0
[ 76.900641][ T5455] handle_mm_fault+0x48d2/0x6200
[ 76.905592][ T5455] __get_user_pages+0x6bd/0x15e0
[ 76.910590][ T5455] get_dump_page+0x146/0x2b0
[ 76.915202][ T5455] dump_user_range+0x126/0x910
[ 76.920026][ T5455] elf_core_dump+0x3b75/0x4490
[ 76.924807][ T5455] do_coredump+0x1b73/0x2ab0
[ 76.929460][ T5455] page last free stack trace:
[ 76.934138][ T5455] free_unref_page_prepare+0x8c3/0x9f0
[ 76.939861][ T5455] free_unref_page+0x37/0x3f0
[ 76.944572][ T5455] free_contig_range+0x9e/0x150
[ 76.949497][ T5455] destroy_args+0x95/0x7c0
[ 76.954131][ T5455] debug_vm_pgtable+0x4ac/0x540
[ 76.959043][ T5455] do_one_initcall+0x23d/0x7d0
[ 76.963828][ T5455] do_initcall_level+0x157/0x210
[ 76.968817][ T5455] do_initcalls+0x3f/0x80
[ 76.973165][ T5455] kernel_init_freeable+0x440/0x5d0
[ 76.979800][ T5455] kernel_init+0x1d/0x2a0
[ 76.984183][ T5455] ret_from_fork+0x48/0x80
[ 76.988671][ T5455] ret_from_fork_asm+0x11/0x20
[ 76.993469][ T5455] addr:0000000020006000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff8880670fd190 index:5
[ 77.004458][ T5455] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 77.013830][ T5455] CPU: 1 PID: 5455 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 77.024344][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 77.034414][ T5455] Call Trace:
[ 77.037706][ T5455]
[ 77.040641][ T5455] dump_stack_lvl+0x1e7/0x2d0
[ 77.045316][ T5455] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.050899][ T5455] ? panic+0x770/0x770
[ 77.055067][ T5455] ? dump_page+0x9c2/0x1090
[ 77.059588][ T5455] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 77.064945][ T5455] ? xfs_file_write_iter+0x620/0x620
[ 77.070232][ T5455] print_bad_pte+0x581/0x5c0
[ 77.074922][ T5455] unmap_page_range+0x1a76/0x3300
[ 77.079953][ T5455] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 77.086559][ T5455] ? __might_sleep+0xc0/0xc0
[ 77.091141][ T5455] ? uprobe_munmap+0x183/0x410
[ 77.095995][ T5455] ? unmap_single_vma+0x1b9/0x2a0
[ 77.101059][ T5455] unmap_vmas+0x209/0x3a0
[ 77.105415][ T5455] ? unmap_page_range+0x3300/0x3300
[ 77.110627][ T5455] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 77.116245][ T5455] exit_mmap+0x297/0xc50
[ 77.120505][ T5455] ? vm_brk+0x30/0x30
[ 77.124483][ T5455] ? __asan_memset+0x23/0x40
[ 77.129080][ T5455] ? uprobe_clear_state+0x275/0x290
[ 77.134300][ T5455] ? mm_update_next_owner+0x4a3/0x520
[ 77.139686][ T5455] __mmput+0x115/0x3c0
[ 77.143757][ T5455] exit_mm+0x21f/0x300
[ 77.148003][ T5455] ? coredump_task_exit+0x460/0x460
[ 77.153200][ T5455] ? taskstats_exit+0x39d/0x920
[ 77.158086][ T5455] ? tty_audit_exit+0x154/0x1f0
[ 77.162927][ T5455] do_exit+0x612/0x2290
[ 77.167079][ T5455] ? put_task_struct+0xc0/0xc0
[ 77.171850][ T5455] do_group_exit+0x206/0x2c0
[ 77.176427][ T5455] get_signal+0x175d/0x1840
[ 77.180938][ T5455] ? ptrace_notify+0x380/0x380
[ 77.185695][ T5455] ? do_pwritev+0x2b9/0x360
[ 77.190398][ T5455] arch_do_signal_or_restart+0x96/0x860
[ 77.195959][ T5455] ? get_sigframe_size+0x20/0x20
[ 77.201010][ T5455] ? rcu_is_watching+0x15/0xb0
[ 77.205853][ T5455] exit_to_user_mode_loop+0x6a/0x100
[ 77.211132][ T5455] exit_to_user_mode_prepare+0xb1/0x140
[ 77.216678][ T5455] syscall_exit_to_user_mode+0x64/0x280
[ 77.222220][ T5455] do_syscall_64+0x4d/0xc0
[ 77.226625][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.232508][ T5455] RIP: 0033:0x7f48c127cae9
[ 77.236911][ T5455] Code: Unable to access opcode bytes at 0x7f48c127cabf.
[ 77.243922][ T5455] RSP: 002b:00007f48c204b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 77.252498][ T5455] RAX: ffffffffffffffe5 RBX: 00007f48c139bf80 RCX: 00007f48c127cae9
[ 77.260469][ T5455] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 77.268862][ T5455] RBP: 00007f48c12c847a R08: 0000000000000000 R09: 0000000000000000
[ 77.276996][ T5455] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 77.284955][ T5455] R13: 000000000000000b R14: 00007f48c139bf80 R15: 00007ffc34065028
[ 77.292932][ T5455]
[ 77.318882][ T5455] BUG: Bad page map in process syz-executor.0 pte:fffff99cf9120 pmd:78f39067
[ 77.327798][ T5455] page:ffffea000198c180 refcount:9 mapcount:-1 mapping:ffff8880670fd190 index:0x2 pfn:0x66306
[ 77.338733][ T5455] head:ffffea000198c100 order:2 entire_mapcount:0 nr_pages_mapped:8388606 pincount:0
[ 77.348483][ T5455] memcg:ffff88807ad24000
[ 77.352736][ T5455] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 77.360626][ T5455] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 77.371928][ T5455] page_type: 0xffffffff()
[ 77.376280][ T5455] raw: 00fff00000000000 ffffea000198c101 ffffea000198c190 ffffea000198c190
[ 77.385376][ T5455] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 77.394317][ T5455] head: 00fff0000000816c ffffea0001c7b088 ffff8880780d7030 ffff8880670fd190
[ 77.403381][ T5455] head: 0000000000000000 ffff888019b03800 00000009ffffffff ffff88807ad24000
[ 77.412664][ T5455] page dumped because: bad pte
[ 77.418462][ T5455] page_owner tracks the page as allocated
[ 77.424289][ T5455] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5455, tgid 5454 (syz-executor.0), ts 76565665345, free_ts 14221399035
[ 77.447592][ T5455] post_alloc_hook+0x1e6/0x210
[ 77.452688][ T5455] get_page_from_freelist+0x31ec/0x3370
[ 77.458680][ T5455] __alloc_pages+0x255/0x670
[ 77.463298][ T5455] folio_alloc+0x1e/0x60
[ 77.467571][ T5455] filemap_alloc_folio+0xde/0x500
[ 77.473480][ T5455] page_cache_ra_order+0x423/0xcc0
[ 77.478902][ T5455] do_sync_mmap_readahead+0x444/0x850
[ 77.484376][ T5455] filemap_fault+0x7d3/0x1710
[ 77.489518][ T5455] __xfs_filemap_fault+0x286/0x960
[ 77.495437][ T5455] __do_fault+0x133/0x4e0
[ 77.500045][ T5455] handle_mm_fault+0x48d2/0x6200
[ 77.505009][ T5455] __get_user_pages+0x6bd/0x15e0
[ 77.511050][ T5455] get_dump_page+0x146/0x2b0
[ 77.516332][ T5455] dump_user_range+0x126/0x910
[ 77.521841][ T5455] elf_core_dump+0x3b75/0x4490
[ 77.526731][ T5455] do_coredump+0x1b73/0x2ab0
[ 77.531898][ T5455] page last free stack trace:
[ 77.536592][ T5455] free_unref_page_prepare+0x8c3/0x9f0
[ 77.542404][ T5455] free_unref_page+0x37/0x3f0
[ 77.547120][ T5455] free_contig_range+0x9e/0x150
[ 77.552258][ T5455] destroy_args+0x95/0x7c0
[ 77.556724][ T5455] debug_vm_pgtable+0x4ac/0x540
[ 77.561858][ T5455] do_one_initcall+0x23d/0x7d0
[ 77.566646][ T5455] do_initcall_level+0x157/0x210
[ 77.572324][ T5455] do_initcalls+0x3f/0x80
[ 77.576743][ T5455] kernel_init_freeable+0x440/0x5d0
[ 77.582302][ T5455] kernel_init+0x1d/0x2a0
[ 77.586650][ T5455] ret_from_fork+0x48/0x80
[ 77.591427][ T5455] ret_from_fork_asm+0x11/0x20
[ 77.596218][ T5455] addr:0000000020007000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff8880670fd190 index:6
[ 77.607436][ T5455] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 77.617132][ T5455] CPU: 0 PID: 5455 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 77.629293][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 77.639340][ T5455] Call Trace:
[ 77.642699][ T5455]
[ 77.645637][ T5455] dump_stack_lvl+0x1e7/0x2d0
[ 77.650317][ T5455] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.655766][ T5455] ? panic+0x770/0x770
[ 77.659843][ T5455] ? dump_page+0x9c2/0x1090
[ 77.664364][ T5455] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 77.669725][ T5455] ? xfs_file_write_iter+0x620/0x620
[ 77.675003][ T5455] print_bad_pte+0x581/0x5c0
[ 77.679588][ T5455] unmap_page_range+0x1a76/0x3300
[ 77.684625][ T5455] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 77.691207][ T5455] ? __might_sleep+0xc0/0xc0
[ 77.695790][ T5455] ? uprobe_munmap+0x183/0x410
[ 77.700545][ T5455] ? unmap_single_vma+0x1b9/0x2a0
[ 77.705562][ T5455] unmap_vmas+0x209/0x3a0
[ 77.709887][ T5455] ? unmap_page_range+0x3300/0x3300
[ 77.715196][ T5455] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 77.720761][ T5455] exit_mmap+0x297/0xc50
[ 77.725030][ T5455] ? vm_brk+0x30/0x30
[ 77.729019][ T5455] ? __asan_memset+0x23/0x40
[ 77.733635][ T5455] ? uprobe_clear_state+0x275/0x290
[ 77.738844][ T5455] ? mm_update_next_owner+0x4a3/0x520
[ 77.744238][ T5455] __mmput+0x115/0x3c0
[ 77.748481][ T5455] exit_mm+0x21f/0x300
[ 77.752551][ T5455] ? coredump_task_exit+0x460/0x460
[ 77.757760][ T5455] ? taskstats_exit+0x39d/0x920
[ 77.762605][ T5455] ? tty_audit_exit+0x154/0x1f0
[ 77.767624][ T5455] do_exit+0x612/0x2290
[ 77.771810][ T5455] ? put_task_struct+0xc0/0xc0
[ 77.776598][ T5455] do_group_exit+0x206/0x2c0
[ 77.781207][ T5455] get_signal+0x175d/0x1840
[ 77.786245][ T5455] ? ptrace_notify+0x380/0x380
[ 77.791009][ T5455] ? do_pwritev+0x2b9/0x360
[ 77.795510][ T5455] arch_do_signal_or_restart+0x96/0x860
[ 77.801140][ T5455] ? get_sigframe_size+0x20/0x20
[ 77.806079][ T5455] ? rcu_is_watching+0x15/0xb0
[ 77.810841][ T5455] exit_to_user_mode_loop+0x6a/0x100
[ 77.816140][ T5455] exit_to_user_mode_prepare+0xb1/0x140
[ 77.821674][ T5455] syscall_exit_to_user_mode+0x64/0x280
[ 77.827217][ T5455] do_syscall_64+0x4d/0xc0
[ 77.831710][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.837671][ T5455] RIP: 0033:0x7f48c127cae9
[ 77.842250][ T5455] Code: Unable to access opcode bytes at 0x7f48c127cabf.
[ 77.849250][ T5455] RSP: 002b:00007f48c204b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 77.857648][ T5455] RAX: ffffffffffffffe5 RBX: 00007f48c139bf80 RCX: 00007f48c127cae9
[ 77.865956][ T5455] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 77.873913][ T5455] RBP: 00007f48c12c847a R08: 0000000000000000 R09: 0000000000000000
[ 77.881875][ T5455] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 77.889838][ T5455] R13: 000000000000000b R14: 00007f48c139bf80 R15: 00007ffc34065028
[ 77.897803][ T5455]
[ 77.908132][ T5455] BUG: Bad page map in process syz-executor.0 pte:fffff99cfa120 pmd:78f39067
[ 77.917146][ T5455] page:ffffea000198c140 refcount:9 mapcount:-1 mapping:ffff8880670fd190 index:0x1 pfn:0x66305
[ 77.927689][ T5455] head:ffffea000198c100 order:2 entire_mapcount:0 nr_pages_mapped:8388605 pincount:0
[ 77.937623][ T5455] memcg:ffff88807ad24000
[ 77.942156][ T5455] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 77.950202][ T5455] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 77.961455][ T5455] page_type: 0xffffffff()
[ 77.965813][ T5455] raw: 00fff00000000202 ffffea000198c101 dead000000000122 fffffffdffffffff
[ 77.974794][ T5455] raw: 0000000400000000 0000000000000000 00000000fffffffe 0000000000000000
[ 77.983690][ T5455] head: 00fff0000000816c ffffea0001c7b088 ffff8880780d7030 ffff8880670fd190
[ 77.992732][ T5455] head: 0000000000000000 ffff888019b03800 00000009ffffffff ffff88807ad24000
[ 78.001766][ T5455] page dumped because: bad pte
[ 78.006547][ T5455] page_owner tracks the page as allocated
[ 78.012609][ T5455] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5455, tgid 5454 (syz-executor.0), ts 76565665345, free_ts 14221393121
[ 78.035841][ T5455] post_alloc_hook+0x1e6/0x210
[ 78.040978][ T5455] get_page_from_freelist+0x31ec/0x3370
[ 78.046548][ T5455] __alloc_pages+0x255/0x670
[ 78.051455][ T5455] folio_alloc+0x1e/0x60
[ 78.055724][ T5455] filemap_alloc_folio+0xde/0x500
[ 78.061040][ T5455] page_cache_ra_order+0x423/0xcc0
[ 78.066263][ T5455] do_sync_mmap_readahead+0x444/0x850
[ 78.071926][ T5455] filemap_fault+0x7d3/0x1710
[ 78.076626][ T5455] __xfs_filemap_fault+0x286/0x960
[ 78.082172][ T5455] __do_fault+0x133/0x4e0
[ 78.086532][ T5455] handle_mm_fault+0x48d2/0x6200
[ 78.091796][ T5455] __get_user_pages+0x6bd/0x15e0
[ 78.096758][ T5455] get_dump_page+0x146/0x2b0
[ 78.101700][ T5455] dump_user_range+0x126/0x910
[ 78.106578][ T5455] elf_core_dump+0x3b75/0x4490
[ 78.111800][ T5455] do_coredump+0x1b73/0x2ab0
[ 78.116503][ T5455] page last free stack trace:
[ 78.121527][ T5455] free_unref_page_prepare+0x8c3/0x9f0
[ 78.127022][ T5455] free_unref_page+0x37/0x3f0
[ 78.132007][ T5455] free_contig_range+0x9e/0x150
[ 78.136881][ T5455] destroy_args+0x95/0x7c0
[ 78.141580][ T5455] debug_vm_pgtable+0x4ac/0x540
[ 78.146662][ T5455] do_one_initcall+0x23d/0x7d0
[ 78.151716][ T5455] do_initcall_level+0x157/0x210
[ 78.157030][ T5455] do_initcalls+0x3f/0x80
[ 78.161642][ T5455] kernel_init_freeable+0x440/0x5d0
[ 78.166864][ T5455] kernel_init+0x1d/0x2a0
[ 78.171562][ T5455] ret_from_fork+0x48/0x80
[ 78.176015][ T5455] ret_from_fork_asm+0x11/0x20
[ 78.181111][ T5455] addr:0000000020008000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff8880670fd190 index:7
[ 78.192519][ T5455] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 78.202154][ T5455] CPU: 1 PID: 5455 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 78.215468][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 78.225547][ T5455] Call Trace:
[ 78.228938][ T5455]
[ 78.231889][ T5455] dump_stack_lvl+0x1e7/0x2d0
[ 78.238331][ T5455] ? nf_tcp_handle_invalid+0x650/0x650
[ 78.243814][ T5455] ? panic+0x770/0x770
[ 78.247913][ T5455] ? dump_page+0x9c2/0x1090
[ 78.252448][ T5455] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 78.257848][ T5455] ? xfs_file_write_iter+0x620/0x620
[ 78.263140][ T5455] print_bad_pte+0x581/0x5c0
[ 78.267735][ T5455] unmap_page_range+0x1a76/0x3300
[ 78.272764][ T5455] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 78.279265][ T5455] ? __might_sleep+0xc0/0xc0
[ 78.283847][ T5455] ? uprobe_munmap+0x183/0x410
[ 78.288617][ T5455] ? unmap_single_vma+0x1b9/0x2a0
[ 78.293661][ T5455] unmap_vmas+0x209/0x3a0
[ 78.298098][ T5455] ? unmap_page_range+0x3300/0x3300
[ 78.303399][ T5455] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 78.308859][ T5455] exit_mmap+0x297/0xc50
[ 78.313113][ T5455] ? vm_brk+0x30/0x30
[ 78.317190][ T5455] ? __asan_memset+0x23/0x40
[ 78.321794][ T5455] ? uprobe_clear_state+0x275/0x290
[ 78.326989][ T5455] ? mm_update_next_owner+0x4a3/0x520
[ 78.332378][ T5455] __mmput+0x115/0x3c0
[ 78.336459][ T5455] exit_mm+0x21f/0x300
[ 78.340533][ T5455] ? coredump_task_exit+0x460/0x460
[ 78.345823][ T5455] ? taskstats_exit+0x39d/0x920
[ 78.350675][ T5455] ? tty_audit_exit+0x154/0x1f0
[ 78.355517][ T5455] do_exit+0x612/0x2290
[ 78.359671][ T5455] ? put_task_struct+0xc0/0xc0
[ 78.364435][ T5455] do_group_exit+0x206/0x2c0
[ 78.369100][ T5455] get_signal+0x175d/0x1840
[ 78.373598][ T5455] ? ptrace_notify+0x380/0x380
[ 78.378366][ T5455] ? do_pwritev+0x2b9/0x360
[ 78.382956][ T5455] arch_do_signal_or_restart+0x96/0x860
[ 78.388504][ T5455] ? get_sigframe_size+0x20/0x20
[ 78.393444][ T5455] ? rcu_is_watching+0x15/0xb0
[ 78.398198][ T5455] exit_to_user_mode_loop+0x6a/0x100
[ 78.403485][ T5455] exit_to_user_mode_prepare+0xb1/0x140
[ 78.409035][ T5455] syscall_exit_to_user_mode+0x64/0x280
[ 78.414818][ T5455] do_syscall_64+0x4d/0xc0
[ 78.419270][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.425267][ T5455] RIP: 0033:0x7f48c127cae9
[ 78.429682][ T5455] Code: Unable to access opcode bytes at 0x7f48c127cabf.
[ 78.437122][ T5455] RSP: 002b:00007f48c204b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 78.445542][ T5455] RAX: ffffffffffffffe5 RBX: 00007f48c139bf80 RCX: 00007f48c127cae9
[ 78.453504][ T5455] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 78.461480][ T5455] RBP: 00007f48c12c847a R08: 0000000000000000 R09: 0000000000000000
[ 78.469459][ T5455] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 78.477601][ T5455] R13: 000000000000000b R14: 00007f48c139bf80 R15: 00007ffc34065028
[ 78.485661][ T5455]
[ 78.511269][ T5384] page:ffffea000198c200 refcount:7 mapcount:0 mapping:ffff8880670fd190 index:0x4 pfn:0x66308
[ 78.521455][ T5384] head:ffffea000198c200 order:2 entire_mapcount:0 nr_pages_mapped:2 pincount:0
[ 78.530409][ T5384] memcg:ffff88807ad24000
[ 78.534660][ T5384] aops:xfs_address_space_operations ino:244a
[ 78.540656][ T5384] flags: 0xfff00000000169(locked|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.550546][ T5384] page_type: 0xffffffff()
[ 78.554859][ T5384] raw: 00fff00000000169 ffffea000198c108 ffff8880780d7030 ffff8880670fd190
[ 78.563418][ T5384] raw: 0000000000000004 0000000000000000 00000007ffffffff ffff88807ad24000
[ 78.571988][ T5384] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[ 78.579274][ T5384] page_owner tracks the page as allocated
[ 78.584997][ T5384] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5455, tgid 5454 (syz-executor.0), ts 76565714859, free_ts 14221411165
[ 78.607940][ T5384] post_alloc_hook+0x1e6/0x210
[ 78.612727][ T5384] get_page_from_freelist+0x31ec/0x3370
[ 78.618282][ T5384] __alloc_pages+0x255/0x670
[ 78.622864][ T5384] folio_alloc+0x1e/0x60
[ 78.627093][ T5384] filemap_alloc_folio+0xde/0x500
[ 78.632100][ T5384] page_cache_ra_order+0x423/0xcc0
[ 78.637200][ T5384] do_sync_mmap_readahead+0x444/0x850
[ 78.642557][ T5384] filemap_fault+0x7d3/0x1710
[ 78.647226][ T5384] __xfs_filemap_fault+0x286/0x960
[ 78.652773][ T5384] __do_fault+0x133/0x4e0
[ 78.657089][ T5384] handle_mm_fault+0x48d2/0x6200
[ 78.662011][ T5384] __get_user_pages+0x6bd/0x15e0
[ 78.666942][ T5384] get_dump_page+0x146/0x2b0
[ 78.671527][ T5384] dump_user_range+0x126/0x910
[ 78.676309][ T5384] elf_core_dump+0x3b75/0x4490
[ 78.681067][ T5384] do_coredump+0x1b73/0x2ab0
[ 78.685646][ T5384] page last free stack trace:
[ 78.690303][ T5384] free_unref_page_prepare+0x8c3/0x9f0
[ 78.695750][ T5384] free_unref_page+0x37/0x3f0
[ 78.700417][ T5384] free_contig_range+0x9e/0x150
[ 78.705253][ T5384] destroy_args+0x95/0x7c0
[ 78.709658][ T5384] debug_vm_pgtable+0x4ac/0x540
[ 78.714508][ T5384] do_one_initcall+0x23d/0x7d0
[ 78.719261][ T5384] do_initcall_level+0x157/0x210
[ 78.724184][ T5384] do_initcalls+0x3f/0x80
[ 78.728498][ T5384] kernel_init_freeable+0x440/0x5d0
[ 78.733680][ T5384] kernel_init+0x1d/0x2a0
[ 78.738167][ T5384] ret_from_fork+0x48/0x80
[ 78.742571][ T5384] ret_from_fork_asm+0x11/0x20
[ 78.747398][ T5384] ------------[ cut here ]------------
[ 78.752834][ T5384] kernel BUG at mm/filemap.c:158!
[ 78.757847][ T5384] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 78.763943][ T5384] CPU: 0 PID: 5384 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 78.775900][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 78.786547][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 78.792779][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 e0 0a 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 60 10 13 8b e8 62 a4 10 00
[ 78.812369][ T5384] RSP: 0018:ffffc90004de7778 EFLAGS: 00010046
[ 78.818434][ T5384] RAX: 8d8be54129a68200 RBX: 0000000000000000 RCX: ffffffff816d1d70
[ 78.826485][ T5384] RDX: 0000000000000000 RSI: ffffffff8b597480 RDI: ffffffff8b597440
[ 78.834447][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a39af R09: 1ffffffff1d34735
[ 78.842416][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34736 R12: ffffc90004de79c0
[ 78.850375][ T5384] R13: ffffea000198c200 R14: 1ffffd4000331840 R15: ffffea000198c208
[ 78.858333][ T5384] FS: 0000555557381480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 78.867250][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.873823][ T5384] CR2: 00005557ba147950 CR3: 0000000018b04000 CR4: 00000000003506f0
[ 78.881786][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 78.889754][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 78.897711][ T5384] Call Trace:
[ 78.900980][ T5384]
[ 78.903901][ T5384] ? __die_body+0x8b/0xe0
[ 78.908228][ T5384] ? die+0xa1/0xd0
[ 78.911940][ T5384] ? do_trap+0x153/0x380
[ 78.916169][ T5384] ? __wake_up_klogd+0xcc/0x100
[ 78.921007][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.926653][ T5384] ? do_error_trap+0x1dc/0x2c0
[ 78.931433][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.937076][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 78.942106][ T5384] ? do_int3+0x50/0x50
[ 78.946193][ T5384] ? report_bug+0x3cd/0x500
[ 78.950776][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.956395][ T5384] ? handle_invalid_op+0x34/0x40
[ 78.961319][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.966945][ T5384] ? exc_invalid_op+0x33/0x50
[ 78.971615][ T5384] ? asm_exc_invalid_op+0x1a/0x20
[ 78.976679][ T5384] ? lock_release+0xb0/0x9d0
[ 78.981261][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.986882][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.992506][ T5384] delete_from_page_cache_batch+0x173/0xc90
[ 78.998481][ T5384] ? filemap_remove_folio+0x2e0/0x2e0
[ 79.004013][ T5384] ? __kmem_cache_free+0x25f/0x3b0
[ 79.009129][ T5384] ? truncate_cleanup_folio+0x1e0/0x5c0
[ 79.014664][ T5384] ? ifs_free+0x710/0x710
[ 79.018992][ T5384] ? truncate_cleanup_folio+0x2cd/0x5c0
[ 79.024528][ T5384] truncate_inode_pages_range+0x346/0x11a0
[ 79.030328][ T5384] ? lock_acquire+0xe3/0x520
[ 79.034907][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 79.040018][ T5384] ? mapping_evict_folio+0x530/0x530
[ 79.045304][ T5384] ? __rwlock_init+0x150/0x150
[ 79.050064][ T5384] evict+0x2b7/0x620
[ 79.053951][ T5384] evict_inodes+0x5f8/0x690
[ 79.058448][ T5384] ? clear_inode+0x150/0x150
[ 79.063026][ T5384] ? xfs_fs_sync_fs+0x1c0/0x360
[ 79.067888][ T5384] generic_shutdown_super+0x9d/0x2c0
[ 79.073171][ T5384] kill_block_super+0x41/0x70
[ 79.077839][ T5384] xfs_kill_sb+0x15/0x50
[ 79.082071][ T5384] deactivate_locked_super+0xa4/0x110
[ 79.087432][ T5384] cleanup_mnt+0x426/0x4c0
[ 79.091842][ T5384] task_work_run+0x24a/0x300
[ 79.096421][ T5384] ? task_work_cancel+0x2b0/0x2b0
[ 79.101504][ T5384] ? rcu_is_watching+0x15/0xb0
[ 79.106368][ T5384] exit_to_user_mode_loop+0xd9/0x100
[ 79.111645][ T5384] exit_to_user_mode_prepare+0xb1/0x140
[ 79.117184][ T5384] syscall_exit_to_user_mode+0x64/0x280
[ 79.122727][ T5384] do_syscall_64+0x4d/0xc0
[ 79.127135][ T5384] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.133019][ T5384] RIP: 0033:0x7f48c127de17
[ 79.137424][ T5384] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 79.157191][ T5384] RSP: 002b:00007ffc34064248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.165591][ T5384] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f48c127de17
[ 79.173557][ T5384] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc34064300
[ 79.181516][ T5384] RBP: 00007ffc34064300 R08: 0000000000000000 R09: 0000000000000000
[ 79.189476][ T5384] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc340653c0
[ 79.197437][ T5384] R13: 00007f48c12c73b9 R14: 0000000000012992 R15: 0000000000000007
[ 79.205403][ T5384]
[ 79.208411][ T5384] Modules linked in:
[ 79.212299][ T5384] ---[ end trace 0000000000000000 ]---
[ 79.217840][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 79.224072][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 e0 0a 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 60 10 13 8b e8 62 a4 10 00
[ 79.244625][ T5384] RSP: 0018:ffffc90004de7778 EFLAGS: 00010046
[ 79.250688][ T5384] RAX: 8d8be54129a68200 RBX: 0000000000000000 RCX: ffffffff816d1d70
[ 79.258733][ T5384] RDX: 0000000000000000 RSI: ffffffff8b597480 RDI: ffffffff8b597440
[ 79.266783][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a39af R09: 1ffffffff1d34735
[ 79.274831][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34736 R12: ffffc90004de79c0
[ 79.282791][ T5384] R13: ffffea000198c200 R14: 1ffffd4000331840 R15: ffffea000198c208
[ 79.290864][ T5384] FS: 0000555557381480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 79.299783][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 79.306440][ T5384] CR2: 00005557ba147950 CR3: 0000000018b04000 CR4: 00000000003506f0
[ 79.314487][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 79.322449][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 79.330766][ T5384] Kernel panic - not syncing: Fatal exception
[ 79.337143][ T5384] Kernel Offset: disabled
[ 79.341457][ T5384] Rebooting in 86400 seconds..