Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts.
2023/09/14 12:29:17 ignoring optional flag "sandboxArg"="0"
2023/09/14 12:29:17 parsed 1 programs
2023/09/14 12:29:19 executed programs: 0
[ 75.189755][ T5376] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 75.200900][ T5374] syz-execprog[5374]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 75.210905][ T5374] syz-execprog[5374]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 75.252542][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.259887][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.267101][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.274962][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.282723][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 75.290438][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 75.376224][ T5384] chnl_net:caif_netlink_parms(): no params data found
[ 75.418325][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.425732][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.433264][ T5384] bridge_slave_0: entered allmulticast mode
[ 75.439833][ T5384] bridge_slave_0: entered promiscuous mode
[ 75.447255][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.454464][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.461950][ T5384] bridge_slave_1: entered allmulticast mode
[ 75.468968][ T5384] bridge_slave_1: entered promiscuous mode
[ 75.489617][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.501895][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.524951][ T5384] team0: Port device team_slave_0 added
[ 75.532329][ T5384] team0: Port device team_slave_1 added
[ 75.550943][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.558223][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.584878][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.596812][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.603886][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.630212][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.660107][ T5384] hsr_slave_0: entered promiscuous mode
[ 75.666243][ T5384] hsr_slave_1: entered promiscuous mode
[ 76.191671][ T5384] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.204935][ T5384] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 76.215986][ T5384] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 76.226732][ T5384] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 76.252440][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.260166][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.267675][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.275008][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.340242][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0
[ 76.355286][ T27] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.364812][ T27] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.382559][ T5384] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.396490][ T27] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.403781][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.433633][ T27] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.440862][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.589670][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.631329][ T5384] veth0_vlan: entered promiscuous mode
[ 76.645770][ T5384] veth1_vlan: entered promiscuous mode
[ 76.676503][ T5384] veth0_macvtap: entered promiscuous mode
[ 76.687592][ T5384] veth1_macvtap: entered promiscuous mode
[ 76.705867][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.721659][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.735242][ T5384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.744953][ T5384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.755636][ T5384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.766021][ T5384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.809117][ T23] cfg80211: failed to load regulatory.db
[ 76.851035][ T23] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.871312][ T23] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.896444][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.905381][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.964434][ T5452] syz-executor.0[5452]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 77.187967][ T5452] loop0: detected capacity change from 0 to 32768
[ 77.200965][ T5452] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 77.243606][ T5452] XFS (loop0): Ending clean mount
[ 77.251099][ T5452] XFS (loop0): Quotacheck needed: Please wait.
[ 77.267381][ T5452] XFS (loop0): Quotacheck: Done.
[ 77.278209][ T28] audit: type=1804 audit(1694694561.344:2): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3585898422/syzkaller.UwdIeq/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 77.352980][ T28] audit: type=1804 audit(1694694561.354:3): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3585898422/syzkaller.UwdIeq/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 77.389935][ T50] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.433504][ T5452] BUG: Bad page map in process syz-executor.0 pte:fffff9b8d0120 pmd:1f620067
[ 77.442913][ T5452] page:ffffea000191cbc0 refcount:9 mapcount:-1 mapping:ffff888075b20410 index:0x3 pfn:0x6472f
[ 77.453623][ T5452] head:ffffea000191cb00 order:2 entire_mapcount:0 nr_pages_mapped:8388607 pincount:0
[ 77.463138][ T5452] memcg:ffff8880289f6000
[ 77.467563][ T5452] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 77.475480][ T5452] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 77.486843][ T5452] page_type: 0xffffffff()
[ 77.491443][ T5452] raw: 00fff00000000000 ffffea000191cb01 dead000000000122 dead000000000400
[ 77.500354][ T5452] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 77.509364][ T5452] head: 00fff0000000816c ffffea00019a61c8 ffff888079193030 ffff888075b20410
[ 77.518519][ T5452] head: 0000000000000000 ffff88802953a680 00000009ffffffff ffff8880289f6000
[ 77.527466][ T5452] page dumped because: bad pte
[ 77.532418][ T5452] page_owner tracks the page as allocated
[ 77.538283][ T5452] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 77307902756, free_ts 14916435521
[ 77.561564][ T5452] post_alloc_hook+0x1e6/0x210
[ 77.566362][ T5452] get_page_from_freelist+0x31ec/0x3370
[ 77.572414][ T5452] __alloc_pages+0x255/0x670
[ 77.577121][ T5452] folio_alloc+0x1e/0x60
[ 77.581749][ T5452] filemap_alloc_folio+0xde/0x500
[ 77.586803][ T5452] page_cache_ra_order+0x423/0xcc0
[ 77.591993][ T5452] do_sync_mmap_readahead+0x444/0x850
[ 77.597517][ T5452] filemap_fault+0x7d3/0x1710
[ 77.603212][ T5452] __xfs_filemap_fault+0x286/0x960
[ 77.608620][ T5452] __do_fault+0x133/0x4e0
[ 77.613665][ T5452] handle_mm_fault+0x48d2/0x6200
[ 77.618899][ T5452] __get_user_pages+0x6bd/0x15e0
[ 77.624485][ T5452] get_dump_page+0x146/0x2b0
[ 77.629145][ T5452] dump_user_range+0x126/0x910
[ 77.633988][ T5452] elf_core_dump+0x3b75/0x4490
[ 77.638892][ T5452] do_coredump+0x1b73/0x2ab0
[ 77.643589][ T5452] page last free stack trace:
[ 77.648454][ T5452] free_unref_page_prepare+0x8c3/0x9f0
[ 77.654464][ T5452] free_unref_page+0x37/0x3f0
[ 77.659397][ T5452] free_contig_range+0x9e/0x150
[ 77.664407][ T5452] destroy_args+0x95/0x7c0
[ 77.669434][ T5452] debug_vm_pgtable+0x4ac/0x540
[ 77.674447][ T5452] do_one_initcall+0x23d/0x7d0
[ 77.679720][ T5452] do_initcall_level+0x157/0x210
[ 77.684772][ T5452] do_initcalls+0x3f/0x80
[ 77.689556][ T5452] kernel_init_freeable+0x440/0x5d0
[ 77.694783][ T5452] kernel_init+0x1d/0x2a0
[ 77.699272][ T5452] ret_from_fork+0x48/0x80
[ 77.703712][ T5452] ret_from_fork_asm+0x11/0x20
[ 77.708562][ T5452] addr:0000000020006000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888075b20410 index:5
[ 77.719778][ T5452] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 77.729517][ T5452] CPU: 1 PID: 5452 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 77.740212][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 77.750704][ T5452] Call Trace:
[ 77.754087][ T5452]
[ 77.757384][ T5452] dump_stack_lvl+0x1e7/0x2d0
[ 77.762175][ T5452] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.767746][ T5452] ? panic+0x770/0x770
[ 77.771935][ T5452] ? dump_page+0x9c2/0x1090
[ 77.776553][ T5452] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 77.782215][ T5452] ? xfs_file_write_iter+0x620/0x620
[ 77.787608][ T5452] print_bad_pte+0x581/0x5c0
[ 77.792233][ T5452] unmap_page_range+0x1a76/0x3300
[ 77.797479][ T5452] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 77.804182][ T5452] ? __might_sleep+0xc0/0xc0
[ 77.808801][ T5452] ? uprobe_munmap+0x183/0x410
[ 77.813608][ T5452] ? unmap_single_vma+0x1b9/0x2a0
[ 77.818752][ T5452] unmap_vmas+0x209/0x3a0
[ 77.823374][ T5452] ? unmap_page_range+0x3300/0x3300
[ 77.828961][ T5452] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 77.834463][ T5452] exit_mmap+0x297/0xc50
[ 77.838817][ T5452] ? vm_brk+0x30/0x30
[ 77.842796][ T5452] ? __asan_memset+0x23/0x40
[ 77.847395][ T5452] ? uprobe_clear_state+0x275/0x290
[ 77.852675][ T5452] ? mm_update_next_owner+0x4a3/0x520
[ 77.858131][ T5452] __mmput+0x115/0x3c0
[ 77.862449][ T5452] exit_mm+0x21f/0x300
[ 77.866693][ T5452] ? coredump_task_exit+0x460/0x460
[ 77.872005][ T5452] ? taskstats_exit+0x39d/0x920
[ 77.877381][ T5452] ? tty_audit_exit+0x154/0x1f0
[ 77.882332][ T5452] do_exit+0x612/0x2290
[ 77.886489][ T5452] ? put_task_struct+0xc0/0xc0
[ 77.891255][ T5452] do_group_exit+0x206/0x2c0
[ 77.895920][ T5452] get_signal+0x175d/0x1840
[ 77.900447][ T5452] ? ptrace_notify+0x380/0x380
[ 77.905376][ T5452] ? do_pwritev+0x2b9/0x360
[ 77.909960][ T5452] arch_do_signal_or_restart+0x96/0x860
[ 77.915505][ T5452] ? get_sigframe_size+0x20/0x20
[ 77.920700][ T5452] ? rcu_is_watching+0x15/0xb0
[ 77.925561][ T5452] exit_to_user_mode_loop+0x6a/0x100
[ 77.931019][ T5452] exit_to_user_mode_prepare+0xb1/0x140
[ 77.936555][ T5452] syscall_exit_to_user_mode+0x64/0x280
[ 77.942186][ T5452] do_syscall_64+0x4d/0xc0
[ 77.946841][ T5452] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.952806][ T5452] RIP: 0033:0x7fcbae67cae9
[ 77.957554][ T5452] Code: Unable to access opcode bytes at 0x7fcbae67cabf.
[ 77.964557][ T5452] RSP: 002b:00007fcbaf3d60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 77.973047][ T5452] RAX: ffffffffffffffe5 RBX: 00007fcbae79bf80 RCX: 00007fcbae67cae9
[ 77.981206][ T5452] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 77.989255][ T5452] RBP: 00007fcbae6c847a R08: 0000000000000000 R09: 0000000000000000
[ 77.997383][ T5452] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 78.005445][ T5452] R13: 000000000000000b R14: 00007fcbae79bf80 R15: 00007ffd88af2618
[ 78.013767][ T5452]
[ 78.038737][ T5452] BUG: Bad page map in process syz-executor.0 pte:fffff9b8d1120 pmd:1f620067
[ 78.047869][ T5452] page:ffffea000191cb80 refcount:9 mapcount:-1 mapping:ffff888075b20410 index:0x2 pfn:0x6472e
[ 78.058346][ T5452] head:ffffea000191cb00 order:2 entire_mapcount:0 nr_pages_mapped:8388606 pincount:0
[ 78.068904][ T5452] memcg:ffff8880289f6000
[ 78.073856][ T5452] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 78.081535][ T5452] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.092881][ T5452] page_type: 0xffffffff()
[ 78.097360][ T5452] raw: 00fff00000000000 ffffea000191cb01 ffffea000191cb90 ffffea000191cb90
[ 78.106573][ T5452] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 78.115525][ T5452] head: 00fff0000000816c ffffea00019a61c8 ffff888079193030 ffff888075b20410
[ 78.124944][ T5452] head: 0000000000000000 ffff88802953a680 00000009ffffffff ffff8880289f6000
[ 78.134510][ T5452] page dumped because: bad pte
[ 78.139462][ T5452] page_owner tracks the page as allocated
[ 78.145221][ T5452] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 77307902756, free_ts 14916429590
[ 78.169539][ T5452] post_alloc_hook+0x1e6/0x210
[ 78.174513][ T5452] get_page_from_freelist+0x31ec/0x3370
[ 78.181256][ T5452] __alloc_pages+0x255/0x670
[ 78.186056][ T5452] folio_alloc+0x1e/0x60
[ 78.190912][ T5452] filemap_alloc_folio+0xde/0x500
[ 78.196167][ T5452] page_cache_ra_order+0x423/0xcc0
[ 78.202108][ T5452] do_sync_mmap_readahead+0x444/0x850
[ 78.208141][ T5452] filemap_fault+0x7d3/0x1710
[ 78.212896][ T5452] __xfs_filemap_fault+0x286/0x960
[ 78.218170][ T5452] __do_fault+0x133/0x4e0
[ 78.222522][ T5452] handle_mm_fault+0x48d2/0x6200
[ 78.227884][ T5452] __get_user_pages+0x6bd/0x15e0
[ 78.232878][ T5452] get_dump_page+0x146/0x2b0
[ 78.237688][ T5452] dump_user_range+0x126/0x910
[ 78.242477][ T5452] elf_core_dump+0x3b75/0x4490
[ 78.247518][ T5452] do_coredump+0x1b73/0x2ab0
[ 78.252141][ T5452] page last free stack trace:
[ 78.257083][ T5452] free_unref_page_prepare+0x8c3/0x9f0
[ 78.262639][ T5452] free_unref_page+0x37/0x3f0
[ 78.267372][ T5452] free_contig_range+0x9e/0x150
[ 78.272428][ T5452] destroy_args+0x95/0x7c0
[ 78.276968][ T5452] debug_vm_pgtable+0x4ac/0x540
[ 78.281942][ T5452] do_one_initcall+0x23d/0x7d0
[ 78.286818][ T5452] do_initcall_level+0x157/0x210
[ 78.291853][ T5452] do_initcalls+0x3f/0x80
[ 78.296199][ T5452] kernel_init_freeable+0x440/0x5d0
[ 78.301469][ T5452] kernel_init+0x1d/0x2a0
[ 78.305905][ T5452] ret_from_fork+0x48/0x80
[ 78.310404][ T5452] ret_from_fork_asm+0x11/0x20
[ 78.315203][ T5452] addr:0000000020007000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888075b20410 index:6
[ 78.326470][ T5452] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 78.336457][ T5452] CPU: 1 PID: 5452 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 78.348711][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 78.359043][ T5452] Call Trace:
[ 78.362513][ T5452]
[ 78.366157][ T5452] dump_stack_lvl+0x1e7/0x2d0
[ 78.370956][ T5452] ? nf_tcp_handle_invalid+0x650/0x650
[ 78.376533][ T5452] ? panic+0x770/0x770
[ 78.380627][ T5452] ? dump_page+0x9c2/0x1090
[ 78.385194][ T5452] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 78.390675][ T5452] ? xfs_file_write_iter+0x620/0x620
[ 78.396035][ T5452] print_bad_pte+0x581/0x5c0
[ 78.400823][ T5452] unmap_page_range+0x1a76/0x3300
[ 78.405888][ T5452] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 78.412590][ T5452] ? __might_sleep+0xc0/0xc0
[ 78.417215][ T5452] ? uprobe_munmap+0x183/0x410
[ 78.422088][ T5452] ? unmap_single_vma+0x1b9/0x2a0
[ 78.427140][ T5452] unmap_vmas+0x209/0x3a0
[ 78.431502][ T5452] ? unmap_page_range+0x3300/0x3300
[ 78.436744][ T5452] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 78.442234][ T5452] exit_mmap+0x297/0xc50
[ 78.446507][ T5452] ? vm_brk+0x30/0x30
[ 78.450578][ T5452] ? __asan_memset+0x23/0x40
[ 78.455436][ T5452] ? uprobe_clear_state+0x275/0x290
[ 78.460800][ T5452] ? mm_update_next_owner+0x4a3/0x520
[ 78.467036][ T5452] __mmput+0x115/0x3c0
[ 78.471095][ T5452] exit_mm+0x21f/0x300
[ 78.475599][ T5452] ? coredump_task_exit+0x460/0x460
[ 78.481245][ T5452] ? taskstats_exit+0x39d/0x920
[ 78.486136][ T5452] ? tty_audit_exit+0x154/0x1f0
[ 78.491042][ T5452] do_exit+0x612/0x2290
[ 78.495222][ T5452] ? put_task_struct+0xc0/0xc0
[ 78.500107][ T5452] do_group_exit+0x206/0x2c0
[ 78.504716][ T5452] get_signal+0x175d/0x1840
[ 78.509236][ T5452] ? ptrace_notify+0x380/0x380
[ 78.514020][ T5452] ? do_pwritev+0x2b9/0x360
[ 78.518612][ T5452] arch_do_signal_or_restart+0x96/0x860
[ 78.524165][ T5452] ? get_sigframe_size+0x20/0x20
[ 78.529282][ T5452] ? rcu_is_watching+0x15/0xb0
[ 78.534131][ T5452] exit_to_user_mode_loop+0x6a/0x100
[ 78.539437][ T5452] exit_to_user_mode_prepare+0xb1/0x140
[ 78.545067][ T5452] syscall_exit_to_user_mode+0x64/0x280
[ 78.551044][ T5452] do_syscall_64+0x4d/0xc0
[ 78.555624][ T5452] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.561873][ T5452] RIP: 0033:0x7fcbae67cae9
[ 78.566278][ T5452] Code: Unable to access opcode bytes at 0x7fcbae67cabf.
[ 78.573487][ T5452] RSP: 002b:00007fcbaf3d60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 78.582237][ T5452] RAX: ffffffffffffffe5 RBX: 00007fcbae79bf80 RCX: 00007fcbae67cae9
[ 78.590302][ T5452] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 78.598443][ T5452] RBP: 00007fcbae6c847a R08: 0000000000000000 R09: 0000000000000000
[ 78.606495][ T5452] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 78.614634][ T5452] R13: 000000000000000b R14: 00007fcbae79bf80 R15: 00007ffd88af2618
[ 78.623272][ T5452]
[ 78.628277][ T5452] BUG: Bad page map in process syz-executor.0 pte:fffff9b8d2120 pmd:1f620067
[ 78.637787][ T5452] page:ffffea000191cb40 refcount:9 mapcount:-1 mapping:ffff888075b20410 index:0x1 pfn:0x6472d
[ 78.649368][ T5452] head:ffffea000191cb00 order:2 entire_mapcount:0 nr_pages_mapped:8388605 pincount:0
[ 78.660126][ T5452] memcg:ffff8880289f6000
[ 78.664829][ T5452] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 78.673655][ T5452] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.685148][ T5452] page_type: 0xffffffff()
[ 78.690159][ T5452] raw: 00fff00000000202 ffffea000191cb01 dead000000000122 fffffffdffffffff
[ 78.699991][ T5452] raw: 0000000400000000 0000000000000000 00000000fffffffe 0000000000000000
[ 78.709120][ T5452] head: 00fff0000000816c ffffea00019a61c8 ffff888079193030 ffff888075b20410
[ 78.718264][ T5452] head: 0000000000000000 ffff88802953a680 00000009ffffffff ffff8880289f6000
[ 78.727543][ T5452] page dumped because: bad pte
[ 78.732324][ T5452] page_owner tracks the page as allocated
[ 78.738292][ T5452] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 77307902756, free_ts 14916423636
[ 78.761950][ T5452] post_alloc_hook+0x1e6/0x210
[ 78.766817][ T5452] get_page_from_freelist+0x31ec/0x3370
[ 78.772840][ T5452] __alloc_pages+0x255/0x670
[ 78.778546][ T5452] folio_alloc+0x1e/0x60
[ 78.783245][ T5452] filemap_alloc_folio+0xde/0x500
[ 78.788684][ T5452] page_cache_ra_order+0x423/0xcc0
[ 78.793909][ T5452] do_sync_mmap_readahead+0x444/0x850
[ 78.799564][ T5452] filemap_fault+0x7d3/0x1710
[ 78.804260][ T5452] __xfs_filemap_fault+0x286/0x960
[ 78.809865][ T5452] __do_fault+0x133/0x4e0
[ 78.814235][ T5452] handle_mm_fault+0x48d2/0x6200
[ 78.819714][ T5452] __get_user_pages+0x6bd/0x15e0
[ 78.824897][ T5452] get_dump_page+0x146/0x2b0
[ 78.829857][ T5452] dump_user_range+0x126/0x910
[ 78.834928][ T5452] elf_core_dump+0x3b75/0x4490
[ 78.840064][ T5452] do_coredump+0x1b73/0x2ab0
[ 78.844997][ T5452] page last free stack trace:
[ 78.849949][ T5452] free_unref_page_prepare+0x8c3/0x9f0
[ 78.855742][ T5452] free_unref_page+0x37/0x3f0
[ 78.860742][ T5452] free_contig_range+0x9e/0x150
[ 78.865800][ T5452] destroy_args+0x95/0x7c0
[ 78.870553][ T5452] debug_vm_pgtable+0x4ac/0x540
[ 78.875512][ T5452] do_one_initcall+0x23d/0x7d0
[ 78.880563][ T5452] do_initcall_level+0x157/0x210
[ 78.885698][ T5452] do_initcalls+0x3f/0x80
[ 78.890414][ T5452] kernel_init_freeable+0x440/0x5d0
[ 78.895649][ T5452] kernel_init+0x1d/0x2a0
[ 78.900302][ T5452] ret_from_fork+0x48/0x80
[ 78.904748][ T5452] ret_from_fork_asm+0x11/0x20
[ 78.909854][ T5452] addr:0000000020008000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888075b20410 index:7
[ 78.921293][ T5452] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 78.931046][ T5452] CPU: 0 PID: 5452 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 78.943223][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 78.953541][ T5452] Call Trace:
[ 78.956902][ T5452]
[ 78.959911][ T5452] dump_stack_lvl+0x1e7/0x2d0
[ 78.964773][ T5452] ? nf_tcp_handle_invalid+0x650/0x650
[ 78.970605][ T5452] ? panic+0x770/0x770
[ 78.974763][ T5452] ? dump_page+0x9c2/0x1090
[ 78.979525][ T5452] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 78.985106][ T5452] ? xfs_file_write_iter+0x620/0x620
[ 78.990481][ T5452] print_bad_pte+0x581/0x5c0
[ 78.995418][ T5452] unmap_page_range+0x1a76/0x3300
[ 79.000801][ T5452] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 79.007390][ T5452] ? __might_sleep+0xc0/0xc0
[ 79.012063][ T5452] ? uprobe_munmap+0x183/0x410
[ 79.016819][ T5452] ? unmap_single_vma+0x1b9/0x2a0
[ 79.021946][ T5452] unmap_vmas+0x209/0x3a0
[ 79.026299][ T5452] ? unmap_page_range+0x3300/0x3300
[ 79.031505][ T5452] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 79.037054][ T5452] exit_mmap+0x297/0xc50
[ 79.041474][ T5452] ? vm_brk+0x30/0x30
[ 79.045465][ T5452] ? __asan_memset+0x23/0x40
[ 79.050147][ T5452] ? uprobe_clear_state+0x275/0x290
[ 79.055337][ T5452] ? mm_update_next_owner+0x4a3/0x520
[ 79.060715][ T5452] __mmput+0x115/0x3c0
[ 79.064863][ T5452] exit_mm+0x21f/0x300
[ 79.068932][ T5452] ? coredump_task_exit+0x460/0x460
[ 79.074222][ T5452] ? taskstats_exit+0x39d/0x920
[ 79.079156][ T5452] ? tty_audit_exit+0x154/0x1f0
[ 79.084172][ T5452] do_exit+0x612/0x2290
[ 79.088498][ T5452] ? put_task_struct+0xc0/0xc0
[ 79.093260][ T5452] do_group_exit+0x206/0x2c0
[ 79.098120][ T5452] get_signal+0x175d/0x1840
[ 79.102723][ T5452] ? ptrace_notify+0x380/0x380
[ 79.107709][ T5452] ? do_pwritev+0x2b9/0x360
[ 79.112209][ T5452] arch_do_signal_or_restart+0x96/0x860
[ 79.117771][ T5452] ? get_sigframe_size+0x20/0x20
[ 79.122731][ T5452] ? rcu_is_watching+0x15/0xb0
[ 79.127590][ T5452] exit_to_user_mode_loop+0x6a/0x100
[ 79.133220][ T5452] exit_to_user_mode_prepare+0xb1/0x140
[ 79.138936][ T5452] syscall_exit_to_user_mode+0x64/0x280
[ 79.144727][ T5452] do_syscall_64+0x4d/0xc0
[ 79.149145][ T5452] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.155034][ T5452] RIP: 0033:0x7fcbae67cae9
[ 79.159442][ T5452] Code: Unable to access opcode bytes at 0x7fcbae67cabf.
[ 79.166644][ T5452] RSP: 002b:00007fcbaf3d60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 79.175329][ T5452] RAX: ffffffffffffffe5 RBX: 00007fcbae79bf80 RCX: 00007fcbae67cae9
[ 79.183388][ T5452] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 79.191606][ T5452] RBP: 00007fcbae6c847a R08: 0000000000000000 R09: 0000000000000000
[ 79.199827][ T5452] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 79.207788][ T5452] R13: 000000000000000b R14: 00007fcbae79bf80 R15: 00007ffd88af2618
[ 79.215942][ T5452]
[ 79.247618][ T5384] page:ffffea000191cc00 refcount:7 mapcount:0 mapping:ffff888075b20410 index:0x4 pfn:0x64730
[ 79.258755][ T5384] head:ffffea000191cc00 order:2 entire_mapcount:0 nr_pages_mapped:2 pincount:0
[ 79.268115][ T5384] memcg:ffff8880289f6000
[ 79.272446][ T5384] aops:xfs_address_space_operations ino:244a
[ 79.278450][ T5384] flags: 0xfff00000000169(locked|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff)
[ 79.288973][ T5384] page_type: 0xffffffff()
[ 79.293595][ T5384] raw: 00fff00000000169 ffffea000191cb08 ffff888079193030 ffff888075b20410
[ 79.302369][ T5384] raw: 0000000000000004 0000000000000000 00000007ffffffff ffff8880289f6000
[ 79.311323][ T5384] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[ 79.318613][ T5384] page_owner tracks the page as allocated
[ 79.324510][ T5384] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 77307956005, free_ts 14916441462
[ 79.347706][ T5384] post_alloc_hook+0x1e6/0x210
[ 79.352471][ T5384] get_page_from_freelist+0x31ec/0x3370
[ 79.358090][ T5384] __alloc_pages+0x255/0x670
[ 79.362749][ T5384] folio_alloc+0x1e/0x60
[ 79.367067][ T5384] filemap_alloc_folio+0xde/0x500
[ 79.372430][ T5384] page_cache_ra_order+0x423/0xcc0
[ 79.377529][ T5384] do_sync_mmap_readahead+0x444/0x850
[ 79.382997][ T5384] filemap_fault+0x7d3/0x1710
[ 79.387684][ T5384] __xfs_filemap_fault+0x286/0x960
[ 79.393042][ T5384] __do_fault+0x133/0x4e0
[ 79.397354][ T5384] handle_mm_fault+0x48d2/0x6200
[ 79.402391][ T5384] __get_user_pages+0x6bd/0x15e0
[ 79.407489][ T5384] get_dump_page+0x146/0x2b0
[ 79.412185][ T5384] dump_user_range+0x126/0x910
[ 79.417200][ T5384] elf_core_dump+0x3b75/0x4490
[ 79.422038][ T5384] do_coredump+0x1b73/0x2ab0
[ 79.426612][ T5384] page last free stack trace:
[ 79.431442][ T5384] free_unref_page_prepare+0x8c3/0x9f0
[ 79.437079][ T5384] free_unref_page+0x37/0x3f0
[ 79.441745][ T5384] free_contig_range+0x9e/0x150
[ 79.446579][ T5384] destroy_args+0x95/0x7c0
[ 79.450987][ T5384] debug_vm_pgtable+0x4ac/0x540
[ 79.455934][ T5384] do_one_initcall+0x23d/0x7d0
[ 79.460695][ T5384] do_initcall_level+0x157/0x210
[ 79.465631][ T5384] do_initcalls+0x3f/0x80
[ 79.470031][ T5384] kernel_init_freeable+0x440/0x5d0
[ 79.475389][ T5384] kernel_init+0x1d/0x2a0
[ 79.479794][ T5384] ret_from_fork+0x48/0x80
[ 79.484198][ T5384] ret_from_fork_asm+0x11/0x20
[ 79.489132][ T5384] ------------[ cut here ]------------
[ 79.494916][ T5384] kernel BUG at mm/filemap.c:158!
[ 79.500017][ T5384] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 79.506071][ T5384] CPU: 0 PID: 5384 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 79.518298][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 79.529215][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 79.535584][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 20 09 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 a0 0e 13 8b e8 62 a4 10 00
[ 79.555793][ T5384] RSP: 0018:ffffc90004daf778 EFLAGS: 00010046
[ 79.562581][ T5384] RAX: 98df12d9ba7b6900 RBX: 0000000000000000 RCX: ffffffff816d1d70
[ 79.570543][ T5384] RDX: 0000000000000000 RSI: ffffffff8b5972c0 RDI: ffffffff8b597280
[ 79.578772][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a37ef R09: 1ffffffff1d346fd
[ 79.586851][ T5384] R10: dffffc0000000000 R11: fffffbfff1d346fe R12: ffffc90004daf9c0
[ 79.594917][ T5384] R13: ffffea000191cc00 R14: 1ffffd4000323980 R15: ffffea000191cc08
[ 79.603067][ T5384] FS: 00005555563da480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 79.612008][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 79.618590][ T5384] CR2: 00007fc3cdfea723 CR3: 0000000068baf000 CR4: 00000000003506f0
[ 79.626753][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 79.635162][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 79.643124][ T5384] Call Trace:
[ 79.646654][ T5384]
[ 79.649685][ T5384] ? __die_body+0x8b/0xe0
[ 79.654116][ T5384] ? die+0xa1/0xd0
[ 79.659320][ T5384] ? do_trap+0x153/0x380
[ 79.663814][ T5384] ? __wake_up_klogd+0xcc/0x100
[ 79.668750][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 79.674387][ T5384] ? do_error_trap+0x1dc/0x2c0
[ 79.679775][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 79.685504][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 79.690536][ T5384] ? do_int3+0x50/0x50
[ 79.694684][ T5384] ? report_bug+0x3cd/0x500
[ 79.699382][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 79.705203][ T5384] ? handle_invalid_op+0x34/0x40
[ 79.710227][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 79.715849][ T5384] ? exc_invalid_op+0x33/0x50
[ 79.720524][ T5384] ? asm_exc_invalid_op+0x1a/0x20
[ 79.725561][ T5384] ? lock_release+0xb0/0x9d0
[ 79.730261][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 79.735989][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 79.741966][ T5384] delete_from_page_cache_batch+0x173/0xc90
[ 79.748031][ T5384] ? filemap_remove_folio+0x2e0/0x2e0
[ 79.753426][ T5384] ? __kmem_cache_free+0x25f/0x3b0
[ 79.758530][ T5384] ? truncate_cleanup_folio+0x1e0/0x5c0
[ 79.764181][ T5384] ? ifs_free+0x710/0x710
[ 79.768507][ T5384] ? truncate_cleanup_folio+0x2cd/0x5c0
[ 79.774044][ T5384] truncate_inode_pages_range+0x346/0x11a0
[ 79.779937][ T5384] ? lock_acquire+0xe3/0x520
[ 79.784694][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 79.789996][ T5384] ? mapping_evict_folio+0x530/0x530
[ 79.795290][ T5384] ? __rwlock_init+0x150/0x150
[ 79.800397][ T5384] evict+0x2b7/0x620
[ 79.804288][ T5384] evict_inodes+0x5f8/0x690
[ 79.808782][ T5384] ? clear_inode+0x150/0x150
[ 79.813687][ T5384] ? xfs_fs_sync_fs+0x1c0/0x360
[ 79.818784][ T5384] generic_shutdown_super+0x9d/0x2c0
[ 79.824085][ T5384] kill_block_super+0x41/0x70
[ 79.828838][ T5384] xfs_kill_sb+0x15/0x50
[ 79.833157][ T5384] deactivate_locked_super+0xa4/0x110
[ 79.838616][ T5384] cleanup_mnt+0x426/0x4c0
[ 79.843032][ T5384] task_work_run+0x24a/0x300
[ 79.847729][ T5384] ? task_work_cancel+0x2b0/0x2b0
[ 79.852824][ T5384] ? rcu_is_watching+0x15/0xb0
[ 79.857757][ T5384] exit_to_user_mode_loop+0xd9/0x100
[ 79.863034][ T5384] exit_to_user_mode_prepare+0xb1/0x140
[ 79.868829][ T5384] syscall_exit_to_user_mode+0x64/0x280
[ 79.874397][ T5384] do_syscall_64+0x4d/0xc0
[ 79.878980][ T5384] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.885210][ T5384] RIP: 0033:0x7fcbae67de17
[ 79.889611][ T5384] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 79.909462][ T5384] RSP: 002b:00007ffd88af1838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.917953][ T5384] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcbae67de17
[ 79.926433][ T5384] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd88af18f0
[ 79.934404][ T5384] RBP: 00007ffd88af18f0 R08: 0000000000000000 R09: 0000000000000000
[ 79.942449][ T5384] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd88af29b0
[ 79.950496][ T5384] R13: 00007fcbae6c73b9 R14: 0000000000012c7a R15: 0000000000000007
[ 79.958638][ T5384]
[ 79.961646][ T5384] Modules linked in:
[ 79.965623][ T5384] ---[ end trace 0000000000000000 ]---
[ 79.971158][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 79.977741][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 20 09 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 a0 0e 13 8b e8 62 a4 10 00
[ 79.997790][ T5384] RSP: 0018:ffffc90004daf778 EFLAGS: 00010046
[ 80.004116][ T5384] RAX: 98df12d9ba7b6900 RBX: 0000000000000000 RCX: ffffffff816d1d70
[ 80.012080][ T5384] RDX: 0000000000000000 RSI: ffffffff8b5972c0 RDI: ffffffff8b597280
[ 80.020303][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a37ef R09: 1ffffffff1d346fd
[ 80.028348][ T5384] R10: dffffc0000000000 R11: fffffbfff1d346fe R12: ffffc90004daf9c0
[ 80.036611][ T5384] R13: ffffea000191cc00 R14: 1ffffd4000323980 R15: ffffea000191cc08
[ 80.044832][ T5384] FS: 00005555563da480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 80.054019][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.060739][ T5384] CR2: 00007fc3cdfea723 CR3: 0000000068baf000 CR4: 00000000003506f0
[ 80.068807][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 80.076772][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 80.084737][ T5384] Kernel panic - not syncing: Fatal exception
[ 80.091189][ T5384] Kernel Offset: disabled
[ 80.095506][ T5384] Rebooting in 86400 seconds..