Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. 2023/09/15 12:14:28 ignoring optional flag "sandboxArg"="0" 2023/09/15 12:14:28 parsed 1 programs 2023/09/15 12:14:29 executed programs: 0 [ 75.397416][ T5384] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.409060][ T5381] syz-execprog[5381]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.419253][ T5381] syz-execprog[5381]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.458696][ T4435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.466144][ T4435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.473508][ T4435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.481209][ T4435] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.488793][ T4435] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.496357][ T4435] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.585822][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 75.627552][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.634722][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.642297][ T5393] bridge_slave_0: entered allmulticast mode [ 75.648825][ T5393] bridge_slave_0: entered promiscuous mode [ 75.657147][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.664420][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.671781][ T5393] bridge_slave_1: entered allmulticast mode [ 75.678418][ T5393] bridge_slave_1: entered promiscuous mode [ 75.698597][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.709639][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.732872][ T5393] team0: Port device team_slave_0 added [ 75.739991][ T5393] team0: Port device team_slave_1 added [ 75.758073][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.765080][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.792272][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.804223][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.811343][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.837421][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.867258][ T5393] hsr_slave_0: entered promiscuous mode [ 75.873421][ T5393] hsr_slave_1: entered promiscuous mode [ 76.475306][ T5393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.487367][ T5393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.498272][ T5393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.508876][ T5393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.533900][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.541167][ T5393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.548585][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.555742][ T5393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.613934][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.624386][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.644021][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.663395][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.675587][ T923] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.682776][ T923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.698798][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.701490][ T8] cfg80211: failed to load regulatory.db [ 76.705943][ T5050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.932867][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.975738][ T5393] veth0_vlan: entered promiscuous mode [ 76.986669][ T5393] veth1_vlan: entered promiscuous mode [ 77.016546][ T5393] veth0_macvtap: entered promiscuous mode [ 77.028111][ T5393] veth1_macvtap: entered promiscuous mode [ 77.046406][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.060426][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.073315][ T5393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.083726][ T5393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.094676][ T5393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.104094][ T5393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.166161][ T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.178732][ T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.207796][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.216734][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.265682][ T5465] syz-executor.0[5465]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.485856][ T5465] loop0: detected capacity change from 0 to 32768 [ 77.497650][ T5465] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.532568][ T5465] XFS (loop0): Ending clean mount [ 77.539274][ T5465] XFS (loop0): Quotacheck needed: Please wait. [ 77.557046][ T5465] XFS (loop0): Quotacheck: Done. [ 77.570794][ T4435] Bluetooth: hci0: command 0x0409 tx timeout [ 77.580431][ T28] audit: type=1804 audit(1694780072.087:2): pid=5465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2289291009/syzkaller.QGR0Km/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 77.653121][ T28] audit: type=1804 audit(1694780072.087:3): pid=5465 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2289291009/syzkaller.QGR0Km/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 77.737828][ T5465] BUG: Bad rss-counter state mm:ffff888028651300 type:MM_FILEPAGES val:4 [ 77.757784][ T5393] page:ffffea0001966800 refcount:8 mapcount:1 mapping:ffff888077925190 index:0x4 pfn:0x659a0 [ 77.769559][ T5393] head:ffffea0001966800 order:2 entire_mapcount:0 nr_pages_mapped:3 pincount:0 [ 77.778600][ T5393] memcg:ffff88802905c000 [ 77.782869][ T5393] aops:xfs_address_space_operations ino:244a [ 77.788878][ T5393] flags: 0xfff0000000016d(locked|referenced|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.799830][ T5393] page_type: 0x0() [ 77.803671][ T5393] raw: 00fff0000000016d ffffea0001966708 ffffea0001966908 ffff888077925190 [ 77.812275][ T5393] raw: 0000000000000004 0000000000000000 0000000800000000 ffff88802905c000 [ 77.821034][ T5393] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 77.828361][ T5393] page_owner tracks the page as allocated [ 77.834086][ T5393] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5465, tgid 5463 (syz-executor.0), ts 77606792498, free_ts 14212239597 [ 77.857028][ T5393] post_alloc_hook+0x1e6/0x210 [ 77.861816][ T5393] get_page_from_freelist+0x31ec/0x3370 [ 77.867376][ T5393] __alloc_pages+0x255/0x670 [ 77.872098][ T5393] folio_alloc+0x1e/0x60 [ 77.876353][ T5393] filemap_alloc_folio+0xde/0x500 [ 77.881388][ T5393] page_cache_ra_order+0x423/0xcc0 [ 77.886511][ T5393] do_sync_mmap_readahead+0x444/0x850 [ 77.891896][ T5393] filemap_fault+0x7d3/0x1710 [ 77.896590][ T5393] __xfs_filemap_fault+0x286/0x960 [ 77.901711][ T5393] __do_fault+0x133/0x4e0 [ 77.906050][ T5393] handle_mm_fault+0x48d2/0x6200 [ 77.911086][ T5393] __get_user_pages+0x6bd/0x15e0 [ 77.916038][ T5393] get_dump_page+0x146/0x2b0 [ 77.920645][ T5393] dump_user_range+0x126/0x910 [ 77.925454][ T5393] elf_core_dump+0x3b75/0x4490 [ 77.930321][ T5393] do_coredump+0x1b73/0x2ab0 [ 77.934926][ T5393] page last free stack trace: [ 77.939602][ T5393] free_unref_page_prepare+0x8c3/0x9f0 [ 77.945083][ T5393] free_unref_page+0x37/0x3f0 [ 77.949777][ T5393] free_contig_range+0x9e/0x150 [ 77.954640][ T5393] destroy_args+0x95/0x7c0 [ 77.959113][ T5393] debug_vm_pgtable+0x4ac/0x540 [ 77.963980][ T5393] do_one_initcall+0x23d/0x7d0 [ 77.968848][ T5393] do_initcall_level+0x157/0x210 [ 77.973805][ T5393] do_initcalls+0x3f/0x80 [ 77.978144][ T5393] kernel_init_freeable+0x440/0x5d0 [ 77.983445][ T5393] kernel_init+0x1d/0x2a0 [ 77.987788][ T5393] ret_from_fork+0x48/0x80 [ 77.992218][ T5393] ret_from_fork_asm+0x11/0x20 [ 77.997091][ T5393] ------------[ cut here ]------------ [ 78.002562][ T5393] kernel BUG at mm/filemap.c:158! [ 78.007637][ T5393] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 78.013802][ T5393] CPU: 0 PID: 5393 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0 [ 78.024401][ T5393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 78.034660][ T5393] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20 [ 78.040921][ T5393] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 20 09 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 a0 0e 13 8b e8 62 a4 10 00 [ 78.060977][ T5393] RSP: 0018:ffffc90005347778 EFLAGS: 00010046 [ 78.067058][ T5393] RAX: 33ac55fa1aa09300 RBX: 0000000000000000 RCX: ffffffff816d1d70 [ 78.075051][ T5393] RDX: 0000000000000000 RSI: ffffffff8b5972c0 RDI: ffffffff8b597280 [ 78.083207][ T5393] RBP: 0000000000000040 R08: ffffffff8e9a37ef R09: 1ffffffff1d346fd [ 78.091206][ T5393] R10: dffffc0000000000 R11: fffffbfff1d346fe R12: ffffc900053479c0 [ 78.099195][ T5393] R13: ffffea0001966800 R14: 1ffffd400032cd00 R15: ffffea0001966808 [ 78.107180][ T5393] FS: 0000555557349480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 78.116210][ T5393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.122807][ T5393] CR2: 0000555557352938 CR3: 000000002815f000 CR4: 00000000003506f0 [ 78.130796][ T5393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.138784][ T5393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.146770][ T5393] Call Trace: [ 78.150060][ T5393] [ 78.152999][ T5393] ? __die_body+0x8b/0xe0 [ 78.157346][ T5393] ? die+0xa1/0xd0 [ 78.161168][ T5393] ? do_trap+0x153/0x380 [ 78.165431][ T5393] ? __wake_up_klogd+0xcc/0x100 [ 78.170293][ T5393] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.175944][ T5393] ? do_error_trap+0x1dc/0x2c0 [ 78.180721][ T5393] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.186368][ T5393] ? __lock_acquire+0x7f70/0x7f70 [ 78.191621][ T5393] ? do_int3+0x50/0x50 [ 78.195720][ T5393] ? report_bug+0x3cd/0x500 [ 78.200256][ T5393] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.206022][ T5393] ? handle_invalid_op+0x34/0x40 [ 78.210982][ T5393] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.216632][ T5393] ? exc_invalid_op+0x33/0x50 [ 78.221342][ T5393] ? asm_exc_invalid_op+0x1a/0x20 [ 78.226397][ T5393] ? lock_release+0xb0/0x9d0 [ 78.231013][ T5393] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.236682][ T5393] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.242328][ T5393] delete_from_page_cache_batch+0x173/0xc90 [ 78.248328][ T5393] ? filemap_remove_folio+0x2e0/0x2e0 [ 78.253801][ T5393] ? __kmem_cache_free+0x25f/0x3b0 [ 78.258945][ T5393] ? truncate_cleanup_folio+0x1e0/0x5c0 [ 78.264510][ T5393] ? ifs_free+0x710/0x710 [ 78.268860][ T5393] ? truncate_cleanup_folio+0x2cd/0x5c0 [ 78.274430][ T5393] truncate_inode_pages_range+0x346/0x11a0 [ 78.280260][ T5393] ? lock_acquire+0xe3/0x520 [ 78.284869][ T5393] ? __lock_acquire+0x7f70/0x7f70 [ 78.289977][ T5393] ? mapping_evict_folio+0x530/0x530 [ 78.295374][ T5393] ? __rwlock_init+0x150/0x150 [ 78.300267][ T5393] evict+0x2b7/0x620 [ 78.304183][ T5393] evict_inodes+0x5f8/0x690 [ 78.308705][ T5393] ? clear_inode+0x150/0x150 [ 78.313403][ T5393] ? xfs_fs_sync_fs+0x1c0/0x360 [ 78.318273][ T5393] generic_shutdown_super+0x9d/0x2c0 [ 78.323575][ T5393] kill_block_super+0x41/0x70 [ 78.328272][ T5393] xfs_kill_sb+0x15/0x50 [ 78.332547][ T5393] deactivate_locked_super+0xa4/0x110 [ 78.338214][ T5393] cleanup_mnt+0x426/0x4c0 [ 78.342660][ T5393] task_work_run+0x24a/0x300 [ 78.347376][ T5393] ? task_work_cancel+0x2b0/0x2b0 [ 78.352427][ T5393] ? rcu_is_watching+0x15/0xb0 [ 78.357294][ T5393] exit_to_user_mode_loop+0xd9/0x100 [ 78.362770][ T5393] exit_to_user_mode_prepare+0xb1/0x140 [ 78.368426][ T5393] syscall_exit_to_user_mode+0x64/0x280 [ 78.374093][ T5393] do_syscall_64+0x4d/0xc0 [ 78.378539][ T5393] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.386544][ T5393] RIP: 0033:0x7f002007de17 [ 78.391065][ T5393] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 78.410873][ T5393] RSP: 002b:00007ffd29ad9ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.419486][ T5393] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f002007de17 [ 78.427650][ T5393] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd29ad9da0 [ 78.435908][ T5393] RBP: 00007ffd29ad9da0 R08: 0000000000000000 R09: 0000000000000000 [ 78.443896][ T5393] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd29adae60 [ 78.451971][ T5393] R13: 00007f00200c73b9 R14: 0000000000012da4 R15: 0000000000000007 [ 78.460052][ T5393] [ 78.463122][ T5393] Modules linked in: [ 78.467160][ T5393] ---[ end trace 0000000000000000 ]--- [ 78.472627][ T5393] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20 [ 78.478900][ T5393] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 20 09 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 a0 0e 13 8b e8 62 a4 10 00 [ 78.498539][ T5393] RSP: 0018:ffffc90005347778 EFLAGS: 00010046 [ 78.504633][ T5393] RAX: 33ac55fa1aa09300 RBX: 0000000000000000 RCX: ffffffff816d1d70 [ 78.512623][ T5393] RDX: 0000000000000000 RSI: ffffffff8b5972c0 RDI: ffffffff8b597280 [ 78.520610][ T5393] RBP: 0000000000000040 R08: ffffffff8e9a37ef R09: 1ffffffff1d346fd [ 78.528596][ T5393] R10: dffffc0000000000 R11: fffffbfff1d346fe R12: ffffc900053479c0 [ 78.536603][ T5393] R13: ffffea0001966800 R14: 1ffffd400032cd00 R15: ffffea0001966808 [ 78.545029][ T5393] FS: 0000555557349480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 78.553974][ T5393] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.560574][ T5393] CR2: 0000555557352938 CR3: 000000002815f000 CR4: 00000000003506f0 [ 78.568567][ T5393] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.576574][ T5393] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.584565][ T5393] Kernel panic - not syncing: Fatal exception [ 78.591254][ T5393] Kernel Offset: disabled [ 78.595587][ T5393] Rebooting in 86400 seconds..