Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts.
2023/09/10 03:28:29 ignoring optional flag "sandboxArg"="0"
2023/09/10 03:28:30 parsed 1 programs
2023/09/10 03:28:31 executed programs: 0
[ 74.132269][ T5375] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 74.174306][ T4433] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 74.181618][ T4433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 74.189271][ T4433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 74.197262][ T4433] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 74.205382][ T4433] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 74.213722][ T4433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 74.301075][ T5383] chnl_net:caif_netlink_parms(): no params data found
[ 74.344390][ T5383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.351625][ T5383] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.359176][ T5383] bridge_slave_0: entered allmulticast mode
[ 74.365887][ T5383] bridge_slave_0: entered promiscuous mode
[ 74.373970][ T5383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.381761][ T5383] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.391991][ T5383] bridge_slave_1: entered allmulticast mode
[ 74.398867][ T5383] bridge_slave_1: entered promiscuous mode
[ 74.420373][ T5383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.432116][ T5383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.456474][ T5383] team0: Port device team_slave_0 added
[ 74.463895][ T5383] team0: Port device team_slave_1 added
[ 74.482858][ T5383] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.490227][ T5383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.516822][ T5383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.529252][ T5383] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.536323][ T5383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.562688][ T5383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.593196][ T5383] hsr_slave_0: entered promiscuous mode
[ 74.599808][ T5383] hsr_slave_1: entered promiscuous mode
[ 75.133876][ T5383] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.144255][ T5383] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.154887][ T5383] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.166071][ T5383] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.190944][ T5383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.198220][ T5383] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.206048][ T5383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.213306][ T5383] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.277825][ T5383] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.286189][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.295647][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.320381][ T5383] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.334199][ T5042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.341500][ T5042] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.373162][ T779] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.381007][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.529621][ T5383] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.576870][ T5383] veth0_vlan: entered promiscuous mode
[ 75.589306][ T5383] veth1_vlan: entered promiscuous mode
[ 75.622326][ T5383] veth0_macvtap: entered promiscuous mode
[ 75.634246][ T5383] veth1_macvtap: entered promiscuous mode
[ 75.658370][ T5383] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.675000][ T5383] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.689432][ T5383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.698742][ T5383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.709787][ T5383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.719509][ T5383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.783404][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.798027][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.823926][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.832130][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.075677][ T5453] loop0: detected capacity change from 0 to 32768
[ 76.088428][ T5453] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 76.128038][ T5453] XFS (loop0): Ending clean mount
[ 76.135193][ T5453] XFS (loop0): Quotacheck needed: Please wait.
[ 76.153023][ T5453] XFS (loop0): Quotacheck: Done.
[ 76.176360][ T28] audit: type=1804 audit(1694316513.343:2): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3819122010/syzkaller.ku1Smq/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 76.241739][ T4433] Bluetooth: hci0: command 0x0409 tx timeout
[ 76.251699][ T28] audit: type=1804 audit(1694316513.353:3): pid=5453 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3819122010/syzkaller.ku1Smq/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 76.334001][ T5453] BUG: Bad page map in process syz-executor.0 pte:fffff9b7dc120 pmd:1ce8f067
[ 76.343322][ T5453] page:ffffea00019208c0 refcount:9 mapcount:-1 mapping:ffff8880766e5190 index:0x3 pfn:0x64823
[ 76.354546][ T5453] head:ffffea0001920800 order:2 entire_mapcount:0 nr_pages_mapped:8388607 pincount:0
[ 76.365530][ T5453] memcg:ffff88801d8b4000
[ 76.370228][ T5453] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 76.378318][ T5453] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 76.390184][ T5453] page_type: 0xffffffff()
[ 76.400492][ T5453] raw: 00fff00000000000 ffffea0001920801 dead000000000122 dead000000000400
[ 76.409988][ T5453] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 76.419626][ T5453] head: 00fff0000000816c ffffea0001a08288 ffff88807acd1030 ffff8880766e5190
[ 76.428411][ T5453] head: 0000000000000000 ffff888019789200 00000009ffffffff ffff88801d8b4000
[ 76.438162][ T5453] page dumped because: bad pte
[ 76.443640][ T5453] page_owner tracks the page as allocated
[ 76.449640][ T5453] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5453, tgid 5452 (syz-executor.0), ts 76204282340, free_ts 15924727179
[ 76.473805][ T5453] post_alloc_hook+0x1e6/0x210
[ 76.478866][ T5453] get_page_from_freelist+0x31db/0x3360
[ 76.484596][ T5453] __alloc_pages+0x255/0x670
[ 76.489412][ T5453] folio_alloc+0x1e/0x60
[ 76.493942][ T5453] filemap_alloc_folio+0xde/0x500
[ 76.499258][ T5453] page_cache_ra_order+0x423/0xcc0
[ 76.505012][ T5453] do_sync_mmap_readahead+0x444/0x850
[ 76.510685][ T5453] filemap_fault+0x7d3/0x1710
[ 76.515671][ T5453] __xfs_filemap_fault+0x286/0x960
[ 76.521014][ T5453] __do_fault+0x133/0x4e0
[ 76.525614][ T5453] handle_mm_fault+0x48d2/0x6200
[ 76.531150][ T5453] __get_user_pages+0x6bd/0x15e0
[ 76.536628][ T5453] get_dump_page+0x146/0x2b0
[ 76.541422][ T5453] dump_user_range+0x126/0x910
[ 76.546237][ T5453] elf_core_dump+0x3b75/0x4490
[ 76.551039][ T5453] do_coredump+0x1b73/0x2ab0
[ 76.555711][ T5453] page last free stack trace:
[ 76.560492][ T5453] free_unref_page_prepare+0x8c3/0x9f0
[ 76.566233][ T5453] free_unref_page+0x37/0x3f0
[ 76.571620][ T5453] free_contig_range+0x9e/0x150
[ 76.576682][ T5453] destroy_args+0x95/0x7c0
[ 76.581349][ T5453] debug_vm_pgtable+0x4ac/0x540
[ 76.588054][ T5453] do_one_initcall+0x23d/0x7d0
[ 76.592981][ T5453] do_initcall_level+0x157/0x210
[ 76.598044][ T5453] do_initcalls+0x3f/0x80
[ 76.602887][ T5453] kernel_init_freeable+0x440/0x5d0
[ 76.608320][ T5453] kernel_init+0x1d/0x2a0
[ 76.613030][ T5453] ret_from_fork+0x48/0x80
[ 76.617646][ T5453] ret_from_fork_asm+0x11/0x20
[ 76.623025][ T5453] addr:0000000020006000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff8880766e5190 index:5
[ 76.634841][ T5453] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 76.644487][ T5453] CPU: 1 PID: 5453 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-12921-ga3c57ab79a06-dirty #0
[ 76.655344][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 76.666112][ T5453] Call Trace:
[ 76.669399][ T5453]
[ 76.672327][ T5453] dump_stack_lvl+0x1e7/0x2d0
[ 76.677180][ T5453] ? nf_tcp_handle_invalid+0x650/0x650
[ 76.683534][ T5453] ? panic+0x770/0x770
[ 76.687700][ T5453] ? dump_page+0x9c2/0x1090
[ 76.692462][ T5453] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 76.697998][ T5453] ? xfs_file_write_iter+0x620/0x620
[ 76.703354][ T5453] print_bad_pte+0x581/0x5c0
[ 76.707942][ T5453] unmap_page_range+0x1a76/0x3300
[ 76.713063][ T5453] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 76.719729][ T5453] ? __might_sleep+0xc0/0xc0
[ 76.724802][ T5453] ? uprobe_munmap+0x183/0x410
[ 76.729801][ T5453] ? unmap_single_vma+0x1b9/0x2a0
[ 76.735107][ T5453] unmap_vmas+0x209/0x3a0
[ 76.739460][ T5453] ? unmap_page_range+0x3300/0x3300
[ 76.744873][ T5453] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 76.750740][ T5453] exit_mmap+0x297/0xc50
[ 76.755087][ T5453] ? vm_brk+0x30/0x30
[ 76.759793][ T5453] ? __asan_memset+0x23/0x40
[ 76.764409][ T5453] ? uprobe_clear_state+0x275/0x290
[ 76.769690][ T5453] ? mm_update_next_owner+0x4a3/0x520
[ 76.775322][ T5453] __mmput+0x115/0x3c0
[ 76.779472][ T5453] exit_mm+0x21f/0x300
[ 76.784063][ T5453] ? coredump_task_exit+0x460/0x460
[ 76.789918][ T5453] ? taskstats_exit+0x39d/0x920
[ 76.794930][ T5453] ? tty_audit_exit+0x154/0x1f0
[ 76.799834][ T5453] do_exit+0x612/0x2290
[ 76.804118][ T5453] ? put_task_struct+0xc0/0xc0
[ 76.808991][ T5453] do_group_exit+0x206/0x2c0
[ 76.813608][ T5453] get_signal+0x175d/0x1840
[ 76.818185][ T5453] ? ptrace_notify+0x380/0x380
[ 76.823035][ T5453] ? do_pwritev+0x2b9/0x360
[ 76.827808][ T5453] arch_do_signal_or_restart+0x96/0x860
[ 76.833397][ T5453] ? get_sigframe_size+0x20/0x20
[ 76.840061][ T5453] ? rcu_is_watching+0x15/0xb0
[ 76.844904][ T5453] exit_to_user_mode_loop+0x6a/0x100
[ 76.850183][ T5453] exit_to_user_mode_prepare+0xb1/0x140
[ 76.855726][ T5453] syscall_exit_to_user_mode+0x64/0x280
[ 76.861451][ T5453] do_syscall_64+0x4d/0xc0
[ 76.866226][ T5453] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 76.872314][ T5453] RIP: 0033:0x7f4cbf47cae9
[ 76.876731][ T5453] Code: Unable to access opcode bytes at 0x7f4cbf47cabf.
[ 76.883995][ T5453] RSP: 002b:00007f4cc01920c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 76.892579][ T5453] RAX: ffffffffffffffe5 RBX: 00007f4cbf59bf80 RCX: 00007f4cbf47cae9
[ 76.900725][ T5453] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 76.909472][ T5453] RBP: 00007f4cbf4c847a R08: 0000000000000000 R09: 0000000000000000
[ 76.917785][ T5453] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 76.926033][ T5453] R13: 000000000000000b R14: 00007f4cbf59bf80 R15: 00007fff582f4a98
[ 76.934128][ T5453]
[ 76.947596][ T9] cfg80211: failed to load regulatory.db
[ 76.954069][ T5453] BUG: Bad page map in process syz-executor.0 pte:fffff9b7dd120 pmd:1ce8f067
[ 76.964899][ T5453] page:ffffea0001920880 refcount:9 mapcount:-1 mapping:ffff8880766e5190 index:0x2 pfn:0x64822
[ 76.975606][ T5453] head:ffffea0001920800 order:2 entire_mapcount:0 nr_pages_mapped:8388606 pincount:0
[ 76.985633][ T5453] memcg:ffff88801d8b4000
[ 76.990139][ T5453] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 76.998551][ T5453] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 77.010201][ T5453] page_type: 0xffffffff()
[ 77.015356][ T5453] raw: 00fff00000000000 ffffea0001920801 ffffea0001920890 ffffea0001920890
[ 77.024555][ T5453] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 77.033822][ T5453] head: 00fff0000000816c ffffea0001a08288 ffff88807acd1030 ffff8880766e5190
[ 77.043446][ T5453] head: 0000000000000000 ffff888019789200 00000009ffffffff ffff88801d8b4000
[ 77.052633][ T5453] page dumped because: bad pte
[ 77.057671][ T5453] page_owner tracks the page as allocated
[ 77.063929][ T5453] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5453, tgid 5452 (syz-executor.0), ts 76204282340, free_ts 15924721374
[ 77.087348][ T5453] post_alloc_hook+0x1e6/0x210
[ 77.092641][ T5453] get_page_from_freelist+0x31db/0x3360
[ 77.098605][ T5453] __alloc_pages+0x255/0x670
[ 77.103770][ T5453] folio_alloc+0x1e/0x60
[ 77.108049][ T5453] filemap_alloc_folio+0xde/0x500
[ 77.113412][ T5453] page_cache_ra_order+0x423/0xcc0
[ 77.118562][ T5453] do_sync_mmap_readahead+0x444/0x850
[ 77.124706][ T5453] filemap_fault+0x7d3/0x1710
[ 77.129434][ T5453] __xfs_filemap_fault+0x286/0x960
[ 77.134905][ T5453] __do_fault+0x133/0x4e0
[ 77.139615][ T5453] handle_mm_fault+0x48d2/0x6200
[ 77.145078][ T5453] __get_user_pages+0x6bd/0x15e0
[ 77.150227][ T5453] get_dump_page+0x146/0x2b0
[ 77.155356][ T5453] dump_user_range+0x126/0x910
[ 77.160465][ T5453] elf_core_dump+0x3b75/0x4490
[ 77.165653][ T5453] do_coredump+0x1b73/0x2ab0
[ 77.170285][ T5453] page last free stack trace:
[ 77.175719][ T5453] free_unref_page_prepare+0x8c3/0x9f0
[ 77.181681][ T5453] free_unref_page+0x37/0x3f0
[ 77.186750][ T5453] free_contig_range+0x9e/0x150
[ 77.192043][ T5453] destroy_args+0x95/0x7c0
[ 77.196673][ T5453] debug_vm_pgtable+0x4ac/0x540
[ 77.202226][ T5453] do_one_initcall+0x23d/0x7d0
[ 77.207494][ T5453] do_initcall_level+0x157/0x210
[ 77.212735][ T5453] do_initcalls+0x3f/0x80
[ 77.217951][ T5453] kernel_init_freeable+0x440/0x5d0
[ 77.223572][ T5453] kernel_init+0x1d/0x2a0
[ 77.227971][ T5453] ret_from_fork+0x48/0x80
[ 77.232926][ T5453] ret_from_fork_asm+0x11/0x20
[ 77.237828][ T5453] addr:0000000020007000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff8880766e5190 index:6
[ 77.249473][ T5453] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 77.259391][ T5453] CPU: 0 PID: 5453 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-12921-ga3c57ab79a06-dirty #0
[ 77.272132][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 77.282906][ T5453] Call Trace:
[ 77.286291][ T5453]
[ 77.289338][ T5453] dump_stack_lvl+0x1e7/0x2d0
[ 77.294334][ T5453] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.300706][ T5453] ? panic+0x770/0x770
[ 77.305247][ T5453] ? dump_page+0x9c2/0x1090
[ 77.309961][ T5453] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 77.315447][ T5453] ? xfs_file_write_iter+0x620/0x620
[ 77.321020][ T5453] print_bad_pte+0x581/0x5c0
[ 77.325657][ T5453] unmap_page_range+0x1a76/0x3300
[ 77.330739][ T5453] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 77.337535][ T5453] ? __might_sleep+0xc0/0xc0
[ 77.342128][ T5453] ? uprobe_munmap+0x183/0x410
[ 77.347056][ T5453] ? unmap_single_vma+0x1b9/0x2a0
[ 77.352079][ T5453] unmap_vmas+0x209/0x3a0
[ 77.356407][ T5453] ? unmap_page_range+0x3300/0x3300
[ 77.361910][ T5453] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 77.367711][ T5453] exit_mmap+0x297/0xc50
[ 77.371953][ T5453] ? vm_brk+0x30/0x30
[ 77.376189][ T5453] ? __asan_memset+0x23/0x40
[ 77.380790][ T5453] ? uprobe_clear_state+0x275/0x290
[ 77.386686][ T5453] ? mm_update_next_owner+0x4a3/0x520
[ 77.392229][ T5453] __mmput+0x115/0x3c0
[ 77.396383][ T5453] exit_mm+0x21f/0x300
[ 77.400643][ T5453] ? coredump_task_exit+0x460/0x460
[ 77.406199][ T5453] ? taskstats_exit+0x39d/0x920
[ 77.411396][ T5453] ? tty_audit_exit+0x154/0x1f0
[ 77.416504][ T5453] do_exit+0x612/0x2290
[ 77.420983][ T5453] ? put_task_struct+0xc0/0xc0
[ 77.426100][ T5453] do_group_exit+0x206/0x2c0
[ 77.430778][ T5453] get_signal+0x175d/0x1840
[ 77.435288][ T5453] ? ptrace_notify+0x380/0x380
[ 77.440043][ T5453] ? do_pwritev+0x2b9/0x360
[ 77.444547][ T5453] arch_do_signal_or_restart+0x96/0x860
[ 77.450098][ T5453] ? get_sigframe_size+0x20/0x20
[ 77.455121][ T5453] ? rcu_is_watching+0x15/0xb0
[ 77.459876][ T5453] exit_to_user_mode_loop+0x6a/0x100
[ 77.465674][ T5453] exit_to_user_mode_prepare+0xb1/0x140
[ 77.471212][ T5453] syscall_exit_to_user_mode+0x64/0x280
[ 77.476767][ T5453] do_syscall_64+0x4d/0xc0
[ 77.481177][ T5453] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.487343][ T5453] RIP: 0033:0x7f4cbf47cae9
[ 77.492107][ T5453] Code: Unable to access opcode bytes at 0x7f4cbf47cabf.
[ 77.499584][ T5453] RSP: 002b:00007f4cc01920c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 77.509038][ T5453] RAX: ffffffffffffffe5 RBX: 00007f4cbf59bf80 RCX: 00007f4cbf47cae9
[ 77.517195][ T5453] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 77.525174][ T5453] RBP: 00007f4cbf4c847a R08: 0000000000000000 R09: 0000000000000000
[ 77.533268][ T5453] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 77.541510][ T5453] R13: 000000000000000b R14: 00007f4cbf59bf80 R15: 00007fff582f4a98
[ 77.549827][ T5453]
[ 77.555325][ T5453] BUG: Bad page map in process syz-executor.0 pte:fffff9b7de120 pmd:1ce8f067
[ 77.565953][ T5453] page:ffffea0001920840 refcount:9 mapcount:-1 mapping:ffff8880766e5190 index:0x1 pfn:0x64821
[ 77.580700][ T5453] head:ffffea0001920800 order:2 entire_mapcount:0 nr_pages_mapped:8388605 pincount:0
[ 77.590423][ T5453] memcg:ffff88801d8b4000
[ 77.595012][ T5453] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 77.603466][ T5453] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 77.615487][ T5453] page_type: 0xffffffff()
[ 77.619846][ T5453] raw: 00fff00000000202 ffffea0001920801 dead000000000122 fffffffdffffffff
[ 77.629533][ T5453] raw: 0000000400000000 0000000000000000 00000000fffffffe 0000000000000000
[ 77.639882][ T5453] head: 00fff0000000816c ffffea0001a08288 ffff88807acd1030 ffff8880766e5190
[ 77.648943][ T5453] head: 0000000000000000 ffff888019789200 00000009ffffffff ffff88801d8b4000
[ 77.658162][ T5453] page dumped because: bad pte
[ 77.663446][ T5453] page_owner tracks the page as allocated
[ 77.669528][ T5453] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5453, tgid 5452 (syz-executor.0), ts 76204282340, free_ts 15924715505
[ 77.693279][ T5453] post_alloc_hook+0x1e6/0x210
[ 77.698428][ T5453] get_page_from_freelist+0x31db/0x3360
[ 77.704636][ T5453] __alloc_pages+0x255/0x670
[ 77.709266][ T5453] folio_alloc+0x1e/0x60
[ 77.713860][ T5453] filemap_alloc_folio+0xde/0x500
[ 77.719093][ T5453] page_cache_ra_order+0x423/0xcc0
[ 77.724836][ T5453] do_sync_mmap_readahead+0x444/0x850
[ 77.730477][ T5453] filemap_fault+0x7d3/0x1710
[ 77.735926][ T5453] __xfs_filemap_fault+0x286/0x960
[ 77.741068][ T5453] __do_fault+0x133/0x4e0
[ 77.745978][ T5453] handle_mm_fault+0x48d2/0x6200
[ 77.751582][ T5453] __get_user_pages+0x6bd/0x15e0
[ 77.756911][ T5453] get_dump_page+0x146/0x2b0
[ 77.761849][ T5453] dump_user_range+0x126/0x910
[ 77.766741][ T5453] elf_core_dump+0x3b75/0x4490
[ 77.772023][ T5453] do_coredump+0x1b73/0x2ab0
[ 77.777110][ T5453] page last free stack trace:
[ 77.782375][ T5453] free_unref_page_prepare+0x8c3/0x9f0
[ 77.788029][ T5453] free_unref_page+0x37/0x3f0
[ 77.793105][ T5453] free_contig_range+0x9e/0x150
[ 77.798175][ T5453] destroy_args+0x95/0x7c0
[ 77.803502][ T5453] debug_vm_pgtable+0x4ac/0x540
[ 77.809084][ T5453] do_one_initcall+0x23d/0x7d0
[ 77.814742][ T5453] do_initcall_level+0x157/0x210
[ 77.820506][ T5453] do_initcalls+0x3f/0x80
[ 77.825444][ T5453] kernel_init_freeable+0x440/0x5d0
[ 77.831030][ T5453] kernel_init+0x1d/0x2a0
[ 77.836391][ T5453] ret_from_fork+0x48/0x80
[ 77.841162][ T5453] ret_from_fork_asm+0x11/0x20
[ 77.846249][ T5453] addr:0000000020008000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff8880766e5190 index:7
[ 77.857878][ T5453] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 77.867648][ T5453] CPU: 1 PID: 5453 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-12921-ga3c57ab79a06-dirty #0
[ 77.879897][ T5453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 77.889960][ T5453] Call Trace:
[ 77.893252][ T5453]
[ 77.896180][ T5453] dump_stack_lvl+0x1e7/0x2d0
[ 77.900943][ T5453] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.906911][ T5453] ? panic+0x770/0x770
[ 77.910995][ T5453] ? dump_page+0x9c2/0x1090
[ 77.915671][ T5453] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 77.921210][ T5453] ? xfs_file_write_iter+0x620/0x620
[ 77.926599][ T5453] print_bad_pte+0x581/0x5c0
[ 77.931189][ T5453] unmap_page_range+0x1a76/0x3300
[ 77.936221][ T5453] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 77.942809][ T5453] ? __might_sleep+0xc0/0xc0
[ 77.948983][ T5453] ? uprobe_munmap+0x183/0x410
[ 77.953758][ T5453] ? unmap_single_vma+0x1b9/0x2a0
[ 77.958822][ T5453] unmap_vmas+0x209/0x3a0
[ 77.963163][ T5453] ? unmap_page_range+0x3300/0x3300
[ 77.968443][ T5453] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 77.973911][ T5453] exit_mmap+0x297/0xc50
[ 77.978185][ T5453] ? vm_brk+0x30/0x30
[ 77.982200][ T5453] ? __asan_memset+0x23/0x40
[ 77.986881][ T5453] ? uprobe_clear_state+0x275/0x290
[ 77.992158][ T5453] ? mm_update_next_owner+0x4a3/0x520
[ 77.997534][ T5453] __mmput+0x115/0x3c0
[ 78.001605][ T5453] exit_mm+0x21f/0x300
[ 78.005671][ T5453] ? coredump_task_exit+0x460/0x460
[ 78.010950][ T5453] ? taskstats_exit+0x39d/0x920
[ 78.015887][ T5453] ? tty_audit_exit+0x154/0x1f0
[ 78.020738][ T5453] do_exit+0x612/0x2290
[ 78.024891][ T5453] ? put_task_struct+0xc0/0xc0
[ 78.029655][ T5453] do_group_exit+0x206/0x2c0
[ 78.034330][ T5453] get_signal+0x175d/0x1840
[ 78.038828][ T5453] ? ptrace_notify+0x380/0x380
[ 78.043580][ T5453] ? do_pwritev+0x2b9/0x360
[ 78.048080][ T5453] arch_do_signal_or_restart+0x96/0x860
[ 78.053776][ T5453] ? get_sigframe_size+0x20/0x20
[ 78.058885][ T5453] ? rcu_is_watching+0x15/0xb0
[ 78.063812][ T5453] exit_to_user_mode_loop+0x6a/0x100
[ 78.069444][ T5453] exit_to_user_mode_prepare+0xb1/0x140
[ 78.075220][ T5453] syscall_exit_to_user_mode+0x64/0x280
[ 78.081234][ T5453] do_syscall_64+0x4d/0xc0
[ 78.085704][ T5453] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.091691][ T5453] RIP: 0033:0x7f4cbf47cae9
[ 78.096106][ T5453] Code: Unable to access opcode bytes at 0x7f4cbf47cabf.
[ 78.103127][ T5453] RSP: 002b:00007f4cc01920c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 78.111722][ T5453] RAX: ffffffffffffffe5 RBX: 00007f4cbf59bf80 RCX: 00007f4cbf47cae9
[ 78.120033][ T5453] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 78.128085][ T5453] RBP: 00007f4cbf4c847a R08: 0000000000000000 R09: 0000000000000000
[ 78.136050][ T5453] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 78.144097][ T5453] R13: 000000000000000b R14: 00007f4cbf59bf80 R15: 00007fff582f4a98
[ 78.152181][ T5453]
[ 78.176170][ T5383] page:ffffea0001920900 refcount:7 mapcount:0 mapping:ffff8880766e5190 index:0x4 pfn:0x64824
[ 78.186990][ T5383] head:ffffea0001920900 order:2 entire_mapcount:0 nr_pages_mapped:2 pincount:0
[ 78.196217][ T5383] memcg:ffff88801d8b4000
[ 78.200561][ T5383] aops:xfs_address_space_operations ino:244a
[ 78.206750][ T5383] flags: 0xfff00000000169(locked|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.216665][ T5383] page_type: 0xffffffff()
[ 78.221368][ T5383] raw: 00fff00000000169 ffffea0001920808 ffff88807acd1030 ffff8880766e5190
[ 78.230088][ T5383] raw: 0000000000000004 0000000000000000 00000007ffffffff ffff88801d8b4000
[ 78.238768][ T5383] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[ 78.246065][ T5383] page_owner tracks the page as allocated
[ 78.251962][ T5383] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5453, tgid 5452 (syz-executor.0), ts 76204339251, free_ts 15924732983
[ 78.275160][ T5383] post_alloc_hook+0x1e6/0x210
[ 78.280124][ T5383] get_page_from_freelist+0x31db/0x3360
[ 78.286133][ T5383] __alloc_pages+0x255/0x670
[ 78.290750][ T5383] folio_alloc+0x1e/0x60
[ 78.295017][ T5383] filemap_alloc_folio+0xde/0x500
[ 78.300424][ T5383] page_cache_ra_order+0x423/0xcc0
[ 78.305650][ T5383] do_sync_mmap_readahead+0x444/0x850
[ 78.311301][ T5383] filemap_fault+0x7d3/0x1710
[ 78.316477][ T5383] __xfs_filemap_fault+0x286/0x960
[ 78.322311][ T5383] __do_fault+0x133/0x4e0
[ 78.326922][ T5383] handle_mm_fault+0x48d2/0x6200
[ 78.331923][ T5383] __get_user_pages+0x6bd/0x15e0
[ 78.336998][ T5383] get_dump_page+0x146/0x2b0
[ 78.341742][ T5383] dump_user_range+0x126/0x910
[ 78.346875][ T5383] elf_core_dump+0x3b75/0x4490
[ 78.351770][ T5383] do_coredump+0x1b73/0x2ab0
[ 78.356480][ T5383] page last free stack trace:
[ 78.361183][ T5383] free_unref_page_prepare+0x8c3/0x9f0
[ 78.366861][ T5383] free_unref_page+0x37/0x3f0
[ 78.371912][ T5383] free_contig_range+0x9e/0x150
[ 78.376905][ T5383] destroy_args+0x95/0x7c0
[ 78.381529][ T5383] debug_vm_pgtable+0x4ac/0x540
[ 78.386409][ T5383] do_one_initcall+0x23d/0x7d0
[ 78.391203][ T5383] do_initcall_level+0x157/0x210
[ 78.396352][ T5383] do_initcalls+0x3f/0x80
[ 78.400805][ T5383] kernel_init_freeable+0x440/0x5d0
[ 78.406922][ T5383] kernel_init+0x1d/0x2a0
[ 78.412327][ T5383] ret_from_fork+0x48/0x80
[ 78.417219][ T5383] ret_from_fork_asm+0x11/0x20
[ 78.422447][ T5383] ------------[ cut here ]------------
[ 78.428792][ T5383] kernel BUG at mm/filemap.c:155!
[ 78.434183][ T5383] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 78.440451][ T5383] CPU: 1 PID: 5383 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-12921-ga3c57ab79a06-dirty #0
[ 78.453718][ T5383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 78.463889][ T5383] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 78.470267][ T5383] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 a0 09 13 8b e8 a8 a4 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 20 0f 13 8b e8 92 a4 10 00
[ 78.491285][ T5383] RSP: 0018:ffffc90005a9f778 EFLAGS: 00010046
[ 78.497369][ T5383] RAX: 795491112ecc2600 RBX: 0000000000000000 RCX: ffffffff816d2b30
[ 78.505541][ T5383] RDX: 0000000000000000 RSI: ffffffff8b5994c0 RDI: ffffffff8b599480
[ 78.513737][ T5383] RBP: 0000000000000040 R08: ffffffff8e9a642f R09: 1ffffffff1d34c85
[ 78.522171][ T5383] R10: dffffc0000000000 R11: fffffbfff1d34c86 R12: ffffc90005a9f9c0
[ 78.530169][ T5383] R13: ffffea0001920900 R14: 1ffffd4000324120 R15: ffffea0001920908
[ 78.538320][ T5383] FS: 000055555688e480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 78.547274][ T5383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.553885][ T5383] CR2: 0000555556897938 CR3: 00000000291bc000 CR4: 00000000003506e0
[ 78.562325][ T5383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 78.571706][ T5383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 78.580749][ T5383] Call Trace:
[ 78.584228][ T5383]
[ 78.587699][ T5383] ? __die_body+0x8b/0xe0
[ 78.595273][ T5383] ? die+0xa1/0xd0
[ 78.599981][ T5383] ? do_trap+0x153/0x380
[ 78.604337][ T5383] ? __wake_up_klogd+0xcc/0x100
[ 78.609212][ T5383] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.614974][ T5383] ? do_error_trap+0x1dc/0x2c0
[ 78.621124][ T5383] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.627094][ T5383] ? __lock_acquire+0x7f70/0x7f70
[ 78.632697][ T5383] ? do_int3+0x50/0x50
[ 78.636797][ T5383] ? report_bug+0x3cd/0x500
[ 78.641330][ T5383] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.647092][ T5383] ? handle_invalid_op+0x34/0x40
[ 78.652149][ T5383] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.658372][ T5383] ? exc_invalid_op+0x33/0x50
[ 78.663178][ T5383] ? asm_exc_invalid_op+0x1a/0x20
[ 78.668327][ T5383] ? lock_release+0xb0/0x9d0
[ 78.672950][ T5383] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.679009][ T5383] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.684938][ T5383] delete_from_page_cache_batch+0x173/0xc90
[ 78.690865][ T5383] ? filemap_remove_folio+0x2e0/0x2e0
[ 78.696453][ T5383] ? __kmem_cache_free+0x25f/0x3b0
[ 78.701700][ T5383] ? truncate_cleanup_folio+0x1e0/0x5c0
[ 78.707288][ T5383] ? ifs_free+0x710/0x710
[ 78.711697][ T5383] ? truncate_cleanup_folio+0x2cd/0x5c0
[ 78.717474][ T5383] truncate_inode_pages_range+0x346/0x11a0
[ 78.723403][ T5383] ? lock_acquire+0xe3/0x520
[ 78.728285][ T5383] ? __lock_acquire+0x7f70/0x7f70
[ 78.733427][ T5383] ? mapping_evict_folio+0x530/0x530
[ 78.739081][ T5383] ? __rwlock_init+0x150/0x150
[ 78.743970][ T5383] evict+0x2b7/0x620
[ 78.748003][ T5383] evict_inodes+0x5f8/0x690
[ 78.753141][ T5383] ? clear_inode+0x150/0x150
[ 78.758275][ T5383] ? xfs_fs_sync_fs+0x1c0/0x360
[ 78.763598][ T5383] generic_shutdown_super+0x9d/0x2c0
[ 78.770331][ T5383] kill_block_super+0x41/0x70
[ 78.775475][ T5383] xfs_kill_sb+0x15/0x50
[ 78.780961][ T5383] deactivate_locked_super+0xa4/0x110
[ 78.786542][ T5383] cleanup_mnt+0x426/0x4c0
[ 78.791000][ T5383] task_work_run+0x24a/0x300
[ 78.795647][ T5383] ? task_work_cancel+0x2b0/0x2b0
[ 78.801427][ T5383] ? rcu_is_watching+0x15/0xb0
[ 78.806564][ T5383] exit_to_user_mode_loop+0xd9/0x100
[ 78.811976][ T5383] exit_to_user_mode_prepare+0xb1/0x140
[ 78.817550][ T5383] syscall_exit_to_user_mode+0x64/0x280
[ 78.823137][ T5383] do_syscall_64+0x4d/0xc0
[ 78.827768][ T5383] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.834112][ T5383] RIP: 0033:0x7f4cbf47de17
[ 78.838653][ T5383] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 78.858807][ T5383] RSP: 002b:00007fff582f3cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 78.867589][ T5383] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4cbf47de17
[ 78.875927][ T5383] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fff582f3d70
[ 78.883916][ T5383] RBP: 00007fff582f3d70 R08: 0000000000000000 R09: 0000000000000000
[ 78.892080][ T5383] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff582f4e30
[ 78.900069][ T5383] R13: 00007f4cbf4c73b9 R14: 000000000001282e R15: 0000000000000007
[ 78.908242][ T5383]
[ 78.911531][ T5383] Modules linked in:
[ 78.915533][ T5383] ---[ end trace 0000000000000000 ]---
[ 78.921190][ T5383] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 78.927817][ T5383] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 a0 09 13 8b e8 a8 a4 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 20 0f 13 8b e8 92 a4 10 00
[ 78.948101][ T5383] RSP: 0018:ffffc90005a9f778 EFLAGS: 00010046
[ 78.954623][ T5383] RAX: 795491112ecc2600 RBX: 0000000000000000 RCX: ffffffff816d2b30
[ 78.962786][ T5383] RDX: 0000000000000000 RSI: ffffffff8b5994c0 RDI: ffffffff8b599480
[ 78.971211][ T5383] RBP: 0000000000000040 R08: ffffffff8e9a642f R09: 1ffffffff1d34c85
[ 78.979300][ T5383] R10: dffffc0000000000 R11: fffffbfff1d34c86 R12: ffffc90005a9f9c0
[ 78.987327][ T5383] R13: ffffea0001920900 R14: 1ffffd4000324120 R15: ffffea0001920908
[ 78.995764][ T5383] FS: 000055555688e480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 79.005071][ T5383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 79.011764][ T5383] CR2: 0000555556897938 CR3: 00000000291bc000 CR4: 00000000003506e0
[ 79.019936][ T5383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 79.028196][ T5383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 79.036629][ T5383] Kernel panic - not syncing: Fatal exception
[ 79.043075][ T5383] Kernel Offset: disabled
[ 79.047490][ T5383] Rebooting in 86400 seconds..