Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. 2023/09/10 06:30:27 ignoring optional flag "sandboxArg"="0" 2023/09/10 06:30:27 parsed 1 programs [ 76.698732][ T23] cfg80211: failed to load regulatory.db 2023/09/10 06:30:28 executed programs: 0 [ 77.064740][ T5376] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.075832][ T5370] syz-execprog[5370]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.085711][ T5370] syz-execprog[5370]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.125673][ T4433] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.132957][ T4433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.140253][ T4433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.148088][ T4433] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.155543][ T4433] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.162789][ T4433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.254637][ T5384] chnl_net:caif_netlink_parms(): no params data found [ 77.298788][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.305988][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.313552][ T5384] bridge_slave_0: entered allmulticast mode [ 77.320449][ T5384] bridge_slave_0: entered promiscuous mode [ 77.327991][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.335086][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.342378][ T5384] bridge_slave_1: entered allmulticast mode [ 77.349045][ T5384] bridge_slave_1: entered promiscuous mode [ 77.369540][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.380471][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.402984][ T5384] team0: Port device team_slave_0 added [ 77.410431][ T5384] team0: Port device team_slave_1 added [ 77.428814][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.435943][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.462433][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.474539][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.482092][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.508205][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.538691][ T5384] hsr_slave_0: entered promiscuous mode [ 77.544742][ T5384] hsr_slave_1: entered promiscuous mode [ 78.178493][ T5384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.190118][ T5384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.200496][ T5384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.210849][ T5384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.236500][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.243708][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.251200][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.258376][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.301741][ T781] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.311371][ T781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.345466][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.365295][ T5384] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.378384][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.385517][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.400263][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.407488][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.564214][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.606075][ T5384] veth0_vlan: entered promiscuous mode [ 78.621549][ T5384] veth1_vlan: entered promiscuous mode [ 78.651413][ T5384] veth0_macvtap: entered promiscuous mode [ 78.661445][ T5384] veth1_macvtap: entered promiscuous mode [ 78.682458][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.697710][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.711460][ T5384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.721987][ T5384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.732374][ T5384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.741715][ T5384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.803291][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.822373][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.851033][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.859955][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.904638][ T5459] syz-executor.0[5459]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 79.114324][ T5459] loop0: detected capacity change from 0 to 32768 [ 79.126602][ T5459] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.162437][ T5459] XFS (loop0): Ending clean mount [ 79.170035][ T5459] XFS (loop0): Quotacheck needed: Please wait. [ 79.178383][ T4433] Bluetooth: hci0: command 0x0409 tx timeout [ 79.194044][ T5459] XFS (loop0): Quotacheck: Done. [ 79.211546][ T28] audit: type=1804 audit(1694327430.777:2): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3752085647/syzkaller.HYUGs2/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 79.276970][ T28] audit: type=1804 audit(1694327430.777:3): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3752085647/syzkaller.HYUGs2/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 79.345159][ T5372] BUG: Bad rss-counter state mm:ffff88807e128980 type:MM_FILEPAGES val:4 [ 79.363879][ T5384] page:ffffea000197af00 refcount:8 mapcount:3 mapping:ffff88807676d190 index:0x4 pfn:0x65ebc [ 79.374338][ T5384] head:ffffea000197af00 order:2 entire_mapcount:0 nr_pages_mapped:1 pincount:0 [ 79.383291][ T5384] memcg:ffff888027b4c000 [ 79.387545][ T5384] aops:xfs_address_space_operations ino:244a [ 79.393541][ T5384] flags: 0xfff0000000016d(locked|referenced|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff) [ 79.404399][ T5384] page_type: 0x2() [ 79.408136][ T5384] raw: 00fff0000000016d ffffea000197ae08 ffffea000197b008 ffff88807676d190 [ 79.416735][ T5384] raw: 0000000000000004 0000000000000000 0000000800000002 ffff888027b4c000 [ 79.425337][ T5384] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 79.432885][ T5384] page_owner tracks the page as allocated [ 79.438590][ T5384] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5459, tgid 5456 (syz-executor.0), ts 79241446798, free_ts 14180944308 [ 79.461936][ T5384] post_alloc_hook+0x1e6/0x210 [ 79.466811][ T5384] get_page_from_freelist+0x31ec/0x3370 [ 79.472402][ T5384] __alloc_pages+0x255/0x670 [ 79.477091][ T5384] folio_alloc+0x1e/0x60 [ 79.481340][ T5384] filemap_alloc_folio+0xde/0x500 [ 79.486378][ T5384] page_cache_ra_order+0x423/0xcc0 [ 79.491496][ T5384] do_sync_mmap_readahead+0x444/0x850 [ 79.496860][ T5384] filemap_fault+0x7d3/0x1710 [ 79.501530][ T5384] __xfs_filemap_fault+0x286/0x960 [ 79.506628][ T5384] __do_fault+0x133/0x4e0 [ 79.510957][ T5384] handle_mm_fault+0x48d2/0x6200 [ 79.515909][ T5384] __get_user_pages+0x6bd/0x15e0 [ 79.520835][ T5384] get_dump_page+0x146/0x2b0 [ 79.525426][ T5384] dump_user_range+0x126/0x910 [ 79.530180][ T5384] elf_core_dump+0x3b75/0x4490 [ 79.534943][ T5384] do_coredump+0x1b73/0x2ab0 [ 79.539612][ T5384] page last free stack trace: [ 79.544356][ T5384] free_unref_page_prepare+0x8c3/0x9f0 [ 79.549807][ T5384] free_unref_page+0x37/0x3f0 [ 79.554651][ T5384] free_contig_range+0x9e/0x150 [ 79.559488][ T5384] destroy_args+0x95/0x7c0 [ 79.563931][ T5384] debug_vm_pgtable+0x4ac/0x540 [ 79.568773][ T5384] do_one_initcall+0x23d/0x7d0 [ 79.573525][ T5384] do_initcall_level+0x157/0x210 [ 79.578497][ T5384] do_initcalls+0x3f/0x80 [ 79.582811][ T5384] kernel_init_freeable+0x440/0x5d0 [ 79.588012][ T5384] kernel_init+0x1d/0x2a0 [ 79.593285][ T5384] ret_from_fork+0x48/0x80 [ 79.597687][ T5384] ret_from_fork_asm+0x11/0x20 [ 79.602609][ T5384] ------------[ cut here ]------------ [ 79.608133][ T5384] kernel BUG at mm/filemap.c:158! [ 79.613161][ T5384] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 79.619213][ T5384] CPU: 1 PID: 5384 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0 [ 79.629867][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 79.640175][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20 [ 79.646490][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 e0 0a 13 8b e8 58 a5 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 60 10 13 8b e8 42 a5 10 00 [ 79.666258][ T5384] RSP: 0018:ffffc900055ff778 EFLAGS: 00010046 [ 79.672401][ T5384] RAX: e4590e6187c38e00 RBX: 0000000000000000 RCX: ffffffff816d1d70 [ 79.680638][ T5384] RDX: 0000000000000000 RSI: ffffffff8b597480 RDI: ffffffff8b597440 [ 79.688598][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a39af R09: 1ffffffff1d34735 [ 79.696589][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34736 R12: ffffc900055ff9c0 [ 79.704638][ T5384] R13: ffffea000197af00 R14: 1ffffd400032f5e0 R15: ffffea000197af08 [ 79.712597][ T5384] FS: 000055555610b480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 79.721515][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.728094][ T5384] CR2: 00007ffc1dd30edc CR3: 000000001ef10000 CR4: 00000000003506e0 [ 79.736142][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.744099][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.752260][ T5384] Call Trace: [ 79.755526][ T5384] [ 79.760564][ T5384] ? __die_body+0x8b/0xe0 [ 79.764985][ T5384] ? die+0xa1/0xd0 [ 79.768697][ T5384] ? do_trap+0x153/0x380 [ 79.772924][ T5384] ? __wake_up_klogd+0xcc/0x100 [ 79.777761][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.783410][ T5384] ? do_error_trap+0x1dc/0x2c0 [ 79.788158][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.793791][ T5384] ? __lock_acquire+0x7f70/0x7f70 [ 79.798827][ T5384] ? do_int3+0x50/0x50 [ 79.802910][ T5384] ? report_bug+0x3cd/0x500 [ 79.807672][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.813294][ T5384] ? handle_invalid_op+0x34/0x40 [ 79.818321][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.823950][ T5384] ? exc_invalid_op+0x33/0x50 [ 79.828622][ T5384] ? asm_exc_invalid_op+0x1a/0x20 [ 79.833637][ T5384] ? lock_release+0xb0/0x9d0 [ 79.838217][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.844060][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.849678][ T5384] delete_from_page_cache_batch+0x173/0xc90 [ 79.855559][ T5384] ? filemap_remove_folio+0x2e0/0x2e0 [ 79.860917][ T5384] ? __kmem_cache_free+0x25f/0x3b0 [ 79.866018][ T5384] ? truncate_cleanup_folio+0x1e0/0x5c0 [ 79.871660][ T5384] ? ifs_free+0x710/0x710 [ 79.875981][ T5384] ? truncate_cleanup_folio+0x2cd/0x5c0 [ 79.881785][ T5384] truncate_inode_pages_range+0x346/0x11a0 [ 79.887581][ T5384] ? lock_acquire+0xe3/0x520 [ 79.892169][ T5384] ? __lock_acquire+0x7f70/0x7f70 [ 79.897186][ T5384] ? mapping_evict_folio+0x530/0x530 [ 79.902553][ T5384] ? __rwlock_init+0x150/0x150 [ 79.907313][ T5384] evict+0x2b7/0x620 [ 79.911210][ T5384] evict_inodes+0x5f8/0x690 [ 79.915709][ T5384] ? clear_inode+0x150/0x150 [ 79.920301][ T5384] ? xfs_fs_sync_fs+0x1c0/0x360 [ 79.925143][ T5384] generic_shutdown_super+0x9d/0x2c0 [ 79.930510][ T5384] kill_block_super+0x41/0x70 [ 79.935174][ T5384] xfs_kill_sb+0x15/0x50 [ 79.939407][ T5384] deactivate_locked_super+0xa4/0x110 [ 79.945025][ T5384] cleanup_mnt+0x426/0x4c0 [ 79.949434][ T5384] task_work_run+0x24a/0x300 [ 79.954101][ T5384] ? task_work_cancel+0x2b0/0x2b0 [ 79.959121][ T5384] ? rcu_is_watching+0x15/0xb0 [ 79.963959][ T5384] exit_to_user_mode_loop+0xd9/0x100 [ 79.969236][ T5384] exit_to_user_mode_prepare+0xb1/0x140 [ 79.974811][ T5384] syscall_exit_to_user_mode+0x64/0x280 [ 79.980367][ T5384] do_syscall_64+0x4d/0xc0 [ 79.984781][ T5384] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.990756][ T5384] RIP: 0033:0x7f1353a7de17 [ 79.995333][ T5384] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 80.015540][ T5384] RSP: 002b:00007ffdfd20db58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.024050][ T5384] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1353a7de17 [ 80.032020][ T5384] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdfd20dc10 [ 80.039982][ T5384] RBP: 00007ffdfd20dc10 R08: 0000000000000000 R09: 0000000000000000 [ 80.047944][ T5384] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdfd20ecd0 [ 80.055909][ T5384] R13: 00007f1353ac73b9 R14: 0000000000013404 R15: 0000000000000007 [ 80.063961][ T5384] [ 80.066970][ T5384] Modules linked in: [ 80.070856][ T5384] ---[ end trace 0000000000000000 ]--- [ 80.076414][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20 [ 80.082668][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 e0 0a 13 8b e8 58 a5 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 60 10 13 8b e8 42 a5 10 00 [ 80.102361][ T5384] RSP: 0018:ffffc900055ff778 EFLAGS: 00010046 [ 80.108423][ T5384] RAX: e4590e6187c38e00 RBX: 0000000000000000 RCX: ffffffff816d1d70 [ 80.116385][ T5384] RDX: 0000000000000000 RSI: ffffffff8b597480 RDI: ffffffff8b597440 [ 80.124352][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a39af R09: 1ffffffff1d34735 [ 80.132317][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34736 R12: ffffc900055ff9c0 [ 80.140281][ T5384] R13: ffffea000197af00 R14: 1ffffd400032f5e0 R15: ffffea000197af08 [ 80.148239][ T5384] FS: 000055555610b480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 80.157155][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.163841][ T5384] CR2: 00007ffc1dd30edc CR3: 000000001ef10000 CR4: 00000000003506e0 [ 80.171807][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.179852][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.187833][ T5384] Kernel panic - not syncing: Fatal exception [ 80.194188][ T5384] Kernel Offset: disabled [ 80.198535][ T5384] Rebooting in 86400 seconds..