Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. 2023/09/12 11:41:44 ignoring optional flag "sandboxArg"="0" 2023/09/12 11:41:45 parsed 1 programs 2023/09/12 11:41:46 executed programs: 0 [ 73.630273][ T5375] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.672472][ T4434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.680269][ T4434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.688014][ T4434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.695706][ T4434] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.703492][ T4434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.790842][ T5382] chnl_net:caif_netlink_parms(): no params data found [ 73.834578][ T5382] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.841751][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.849091][ T5382] bridge_slave_0: entered allmulticast mode [ 73.855770][ T5382] bridge_slave_0: entered promiscuous mode [ 73.863148][ T5382] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.870367][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.879090][ T5382] bridge_slave_1: entered allmulticast mode [ 73.885912][ T5382] bridge_slave_1: entered promiscuous mode [ 73.906028][ T5382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.917480][ T5382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.939544][ T5382] team0: Port device team_slave_0 added [ 73.946753][ T5382] team0: Port device team_slave_1 added [ 73.965887][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.973239][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.999444][ T5382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.011383][ T5382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.018520][ T5382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.044746][ T5382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.074783][ T5382] hsr_slave_0: entered promiscuous mode [ 74.081235][ T5382] hsr_slave_1: entered promiscuous mode [ 74.783341][ T5382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.802211][ T5382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.812706][ T5382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.823532][ T5382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.901381][ T5382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.922225][ T5382] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.935289][ T5043] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.942588][ T5043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.957888][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.965085][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.126268][ T5382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.169547][ T5382] veth0_vlan: entered promiscuous mode [ 75.183444][ T5382] veth1_vlan: entered promiscuous mode [ 75.214116][ T5382] veth0_macvtap: entered promiscuous mode [ 75.224851][ T5382] veth1_macvtap: entered promiscuous mode [ 75.244700][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.259423][ T5382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.272992][ T5382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.283921][ T5382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.293896][ T5382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.309178][ T5382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.372810][ T5043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.390594][ T5043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.415557][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.424052][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.692098][ T5463] loop0: detected capacity change from 0 to 32768 [ 75.707508][ T5463] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.744333][ T5463] XFS (loop0): Ending clean mount [ 75.754887][ T4434] Bluetooth: hci0: command 0x0409 tx timeout [ 75.762529][ T5463] XFS (loop0): Quotacheck needed: Please wait. [ 75.781907][ T5463] XFS (loop0): Quotacheck: Done. [ 75.792260][ T28] audit: type=1804 audit(1694518908.524:2): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir25109898/syzkaller.Pt2gIm/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 75.846594][ T28] audit: type=1804 audit(1694518908.544:3): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir25109898/syzkaller.Pt2gIm/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 75.899299][ T5463] BUG: Bad page map in process syz-executor.0 pte:fffff99a98120 pmd:1fbee067 [ 75.908247][ T5463] page:ffffea00019959c0 refcount:9 mapcount:-1 mapping:ffff88807736c9d0 index:0x3 pfn:0x66567 [ 75.919240][ T5463] head:ffffea0001995900 order:2 entire_mapcount:0 nr_pages_mapped:8388607 pincount:0 [ 75.929069][ T5463] memcg:ffff88802112c000 [ 75.933570][ T5463] aops:xfs_address_space_operations ino:244a dentry name:"bus" [ 75.941595][ T5463] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff) [ 75.952958][ T5463] page_type: 0xffffffff() [ 75.957407][ T5463] raw: 00fff00000000000 ffffea0001995901 dead000000000122 dead000000000400 [ 75.966587][ T5463] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 75.975507][ T5463] head: 00fff0000000816c ffffea0001c1b9c8 ffff888020f3a030 ffff88807736c9d0 [ 75.984944][ T5463] head: 0000000000000000 ffff8880146f3b80 00000009ffffffff ffff88802112c000 [ 75.994214][ T5463] page dumped because: bad pte [ 75.999277][ T5463] page_owner tracks the page as allocated [ 76.005054][ T5463] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5463, tgid 5461 (syz-executor.0), ts 75822700865, free_ts 14932935563 [ 76.029425][ T5463] post_alloc_hook+0x1e6/0x210 [ 76.034249][ T5463] get_page_from_freelist+0x31db/0x3360 [ 76.039822][ T5463] __alloc_pages+0x255/0x670 [ 76.044475][ T5463] folio_alloc+0x1e/0x60 [ 76.048745][ T5463] filemap_alloc_folio+0xde/0x500 [ 76.053829][ T5463] page_cache_ra_order+0x423/0xcc0 [ 76.058959][ T5463] do_sync_mmap_readahead+0x444/0x850 [ 76.064527][ T5463] filemap_fault+0x7d3/0x1710 [ 76.069334][ T5463] __xfs_filemap_fault+0x286/0x960 [ 76.074810][ T5463] __do_fault+0x133/0x4e0 [ 76.079157][ T5463] handle_mm_fault+0x48d2/0x6200 [ 76.084169][ T5463] __get_user_pages+0x6bd/0x15e0 [ 76.089494][ T5463] get_dump_page+0x146/0x2b0 [ 76.094191][ T5463] dump_user_range+0x126/0x910 [ 76.099151][ T5463] elf_core_dump+0x3b75/0x4490 [ 76.103983][ T5463] do_coredump+0x1b73/0x2ab0 [ 76.108591][ T5463] page last free stack trace: [ 76.113400][ T5463] free_unref_page_prepare+0x8c3/0x9f0 [ 76.118885][ T5463] free_unref_page+0x37/0x3f0 [ 76.123836][ T5463] free_contig_range+0x9e/0x150 [ 76.128708][ T5463] destroy_args+0x95/0x7c0 [ 76.133209][ T5463] debug_vm_pgtable+0x4ac/0x540 [ 76.138187][ T5463] do_one_initcall+0x23d/0x7d0 [ 76.143004][ T5463] do_initcall_level+0x157/0x210 [ 76.148057][ T5463] do_initcalls+0x3f/0x80 [ 76.152599][ T5463] kernel_init_freeable+0x440/0x5d0 [ 76.157912][ T5463] kernel_init+0x1d/0x2a0 [ 76.162574][ T5463] ret_from_fork+0x48/0x80 [ 76.167481][ T5463] ret_from_fork_asm+0x11/0x20 [ 76.172513][ T5463] addr:0000000020006000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff88807736c9d0 index:5 [ 76.183522][ T5463] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio [ 76.193206][ T5463] CPU: 1 PID: 5463 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-dirty #0 [ 76.202334][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 76.212465][ T5463] Call Trace: [ 76.215731][ T5463] [ 76.218685][ T5463] dump_stack_lvl+0x1e7/0x2d0 [ 76.223445][ T5463] ? nf_tcp_handle_invalid+0x650/0x650 [ 76.228892][ T5463] ? panic+0x770/0x770 [ 76.232949][ T5463] ? dump_page+0x9c2/0x1090 [ 76.237457][ T5463] ? xfs_dio_write_end_io+0x6f0/0x6f0 [ 76.242814][ T5463] ? xfs_file_write_iter+0x620/0x620 [ 76.248113][ T5463] print_bad_pte+0x581/0x5c0 [ 76.252726][ T5463] unmap_page_range+0x1a76/0x3300 [ 76.257951][ T5463] ? mmu_notifier_invalidate_range_start+0xf0/0xf0 [ 76.264712][ T5463] ? __might_sleep+0xc0/0xc0 [ 76.269303][ T5463] ? uprobe_munmap+0x183/0x410 [ 76.274099][ T5463] ? unmap_single_vma+0x1b9/0x2a0 [ 76.279376][ T5463] unmap_vmas+0x209/0x3a0 [ 76.283814][ T5463] ? unmap_page_range+0x3300/0x3300 [ 76.289112][ T5463] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 76.294562][ T5463] exit_mmap+0x297/0xc50 [ 76.298806][ T5463] ? vm_brk+0x30/0x30 [ 76.302790][ T5463] ? __asan_memset+0x23/0x40 [ 76.307376][ T5463] ? uprobe_clear_state+0x275/0x290 [ 76.312563][ T5463] ? mm_update_next_owner+0x4a3/0x520 [ 76.318022][ T5463] __mmput+0x115/0x3c0 [ 76.322088][ T5463] exit_mm+0x21f/0x300 [ 76.326160][ T5463] ? coredump_task_exit+0x460/0x460 [ 76.331720][ T5463] ? taskstats_exit+0x39d/0x920 [ 76.336651][ T5463] ? tty_audit_exit+0x154/0x1f0 [ 76.341783][ T5463] do_exit+0x612/0x2290 [ 76.345965][ T5463] ? put_task_struct+0xc0/0xc0 [ 76.350736][ T5463] do_group_exit+0x206/0x2c0 [ 76.355331][ T5463] get_signal+0x175d/0x1840 [ 76.359834][ T5463] ? ptrace_notify+0x380/0x380 [ 76.364591][ T5463] ? do_pwritev+0x2b9/0x360 [ 76.369099][ T5463] arch_do_signal_or_restart+0x96/0x860 [ 76.374664][ T5463] ? get_sigframe_size+0x20/0x20 [ 76.379690][ T5463] ? rcu_is_watching+0x15/0xb0 [ 76.384464][ T5463] exit_to_user_mode_loop+0x6a/0x100 [ 76.389842][ T5463] exit_to_user_mode_prepare+0xb1/0x140 [ 76.395553][ T5463] syscall_exit_to_user_mode+0x64/0x280 [ 76.401316][ T5463] do_syscall_64+0x4d/0xc0 [ 76.405750][ T5463] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.411641][ T5463] RIP: 0033:0x7f3a06c7cae9 [ 76.416044][ T5463] Code: Unable to access opcode bytes at 0x7f3a06c7cabf. [ 76.423046][ T5463] RSP: 002b:00007f3a07a010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 76.431553][ T5463] RAX: ffffffffffffffe5 RBX: 00007f3a06d9bf80 RCX: 00007f3a06c7cae9 [ 76.439518][ T5463] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007 [ 76.447476][ T5463] RBP: 00007f3a06cc847a R08: 0000000000000000 R09: 0000000000000000 [ 76.455443][ T5463] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 76.463405][ T5463] R13: 000000000000000b R14: 00007f3a06d9bf80 R15: 00007fffc30ea648 [ 76.471480][ T5463] [ 76.499611][ T5463] BUG: Bad page map in process syz-executor.0 pte:fffff99a99120 pmd:1fbee067 [ 76.508807][ T5463] page:ffffea0001995980 refcount:9 mapcount:-1 mapping:ffff88807736c9d0 index:0x2 pfn:0x66566 [ 76.519326][ T5463] head:ffffea0001995900 order:2 entire_mapcount:0 nr_pages_mapped:8388606 pincount:0 [ 76.529146][ T5463] memcg:ffff88802112c000 [ 76.533546][ T5463] aops:xfs_address_space_operations ino:244a dentry name:"bus" [ 76.541406][ T5463] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff) [ 76.552913][ T5463] page_type: 0xffffffff() [ 76.557265][ T5463] raw: 00fff00000000000 ffffea0001995901 ffffea0001995990 ffffea0001995990 [ 76.565912][ T5463] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 76.574639][ T5463] head: 00fff0000000816c ffffea0001c1b9c8 ffff888020f3a030 ffff88807736c9d0 [ 76.583425][ T5463] head: 0000000000000000 ffff8880146f3b80 00000009ffffffff ffff88802112c000 [ 76.592328][ T5463] page dumped because: bad pte [ 76.597625][ T5463] page_owner tracks the page as allocated [ 76.603539][ T5463] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5463, tgid 5461 (syz-executor.0), ts 75822700865, free_ts 14932929861 [ 76.626636][ T5463] post_alloc_hook+0x1e6/0x210 [ 76.631596][ T5463] get_page_from_freelist+0x31db/0x3360 [ 76.637296][ T5463] __alloc_pages+0x255/0x670 [ 76.641996][ T5463] folio_alloc+0x1e/0x60 [ 76.646471][ T5463] filemap_alloc_folio+0xde/0x500 [ 76.651568][ T5463] page_cache_ra_order+0x423/0xcc0 [ 76.656712][ T5463] do_sync_mmap_readahead+0x444/0x850 [ 76.662671][ T5463] filemap_fault+0x7d3/0x1710 [ 76.667371][ T5463] __xfs_filemap_fault+0x286/0x960 [ 76.672634][ T5463] __do_fault+0x133/0x4e0 [ 76.677012][ T5463] handle_mm_fault+0x48d2/0x6200 [ 76.682125][ T5463] __get_user_pages+0x6bd/0x15e0 [ 76.687100][ T5463] get_dump_page+0x146/0x2b0 [ 76.691759][ T5463] dump_user_range+0x126/0x910 [ 76.696550][ T5463] elf_core_dump+0x3b75/0x4490 [ 76.702125][ T5463] do_coredump+0x1b73/0x2ab0 [ 76.706758][ T5463] page last free stack trace: [ 76.711679][ T5463] free_unref_page_prepare+0x8c3/0x9f0 [ 76.717266][ T5463] free_unref_page+0x37/0x3f0 [ 76.722106][ T5463] free_contig_range+0x9e/0x150 [ 76.727153][ T5463] destroy_args+0x95/0x7c0 [ 76.731628][ T5463] debug_vm_pgtable+0x4ac/0x540 [ 76.736553][ T5463] do_one_initcall+0x23d/0x7d0 [ 76.741640][ T5463] do_initcall_level+0x157/0x210 [ 76.746639][ T5463] do_initcalls+0x3f/0x80 [ 76.751033][ T5463] kernel_init_freeable+0x440/0x5d0 [ 76.756355][ T5463] kernel_init+0x1d/0x2a0 [ 76.760744][ T5463] ret_from_fork+0x48/0x80 [ 76.765353][ T5463] ret_from_fork_asm+0x11/0x20 [ 76.770269][ T5463] addr:0000000020007000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff88807736c9d0 index:6 [ 76.781288][ T5463] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio [ 76.790983][ T5463] CPU: 1 PID: 5463 Comm: syz-executor.0 Tainted: G B 6.6.0-rc1-syzkaller-dirty #0 [ 76.800406][ T1135] cfg80211: failed to load regulatory.db [ 76.801648][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 76.801659][ T5463] Call Trace: [ 76.801665][ T5463] [ 76.801672][ T5463] dump_stack_lvl+0x1e7/0x2d0 [ 76.829052][ T5463] ? nf_tcp_handle_invalid+0x650/0x650 [ 76.834542][ T5463] ? panic+0x770/0x770 [ 76.838641][ T5463] ? dump_page+0x9c2/0x1090 [ 76.843429][ T5463] ? xfs_dio_write_end_io+0x6f0/0x6f0 [ 76.848818][ T5463] ? xfs_file_write_iter+0x620/0x620 [ 76.854114][ T5463] print_bad_pte+0x581/0x5c0 [ 76.858711][ T5463] unmap_page_range+0x1a76/0x3300 [ 76.864220][ T5463] ? mmu_notifier_invalidate_range_start+0xf0/0xf0 [ 76.870739][ T5463] ? __might_sleep+0xc0/0xc0 [ 76.875325][ T5463] ? uprobe_munmap+0x183/0x410 [ 76.880172][ T5463] ? unmap_single_vma+0x1b9/0x2a0 [ 76.885190][ T5463] unmap_vmas+0x209/0x3a0 [ 76.889523][ T5463] ? unmap_page_range+0x3300/0x3300 [ 76.894802][ T5463] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 76.900262][ T5463] exit_mmap+0x297/0xc50 [ 76.904499][ T5463] ? vm_brk+0x30/0x30 [ 76.908477][ T5463] ? __asan_memset+0x23/0x40 [ 76.913077][ T5463] ? uprobe_clear_state+0x275/0x290 [ 76.918273][ T5463] ? mm_update_next_owner+0x4a3/0x520 [ 76.923639][ T5463] __mmput+0x115/0x3c0 [ 76.927694][ T5463] exit_mm+0x21f/0x300 [ 76.931848][ T5463] ? coredump_task_exit+0x460/0x460 [ 76.937220][ T5463] ? taskstats_exit+0x39d/0x920 [ 76.942063][ T5463] ? tty_audit_exit+0x154/0x1f0 [ 76.947080][ T5463] do_exit+0x612/0x2290 [ 76.951237][ T5463] ? put_task_struct+0xc0/0xc0 [ 76.956432][ T5463] do_group_exit+0x206/0x2c0 [ 76.961081][ T5463] get_signal+0x175d/0x1840 [ 76.965667][ T5463] ? ptrace_notify+0x380/0x380 [ 76.970427][ T5463] ? do_pwritev+0x2b9/0x360 [ 76.975011][ T5463] arch_do_signal_or_restart+0x96/0x860 [ 76.980569][ T5463] ? get_sigframe_size+0x20/0x20 [ 76.985504][ T5463] ? rcu_is_watching+0x15/0xb0 [ 76.990258][ T5463] exit_to_user_mode_loop+0x6a/0x100 [ 76.995532][ T5463] exit_to_user_mode_prepare+0xb1/0x140 [ 77.001262][ T5463] syscall_exit_to_user_mode+0x64/0x280 [ 77.006899][ T5463] do_syscall_64+0x4d/0xc0 [ 77.011307][ T5463] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.017193][ T5463] RIP: 0033:0x7f3a06c7cae9 [ 77.021617][ T5463] Code: Unable to access opcode bytes at 0x7f3a06c7cabf. [ 77.028808][ T5463] RSP: 002b:00007f3a07a010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 77.037206][ T5463] RAX: ffffffffffffffe5 RBX: 00007f3a06d9bf80 RCX: 00007f3a06c7cae9 [ 77.045172][ T5463] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007 [ 77.053130][ T5463] RBP: 00007f3a06cc847a R08: 0000000000000000 R09: 0000000000000000 [ 77.061347][ T5463] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 77.069306][ T5463] R13: 000000000000000b R14: 00007f3a06d9bf80 R15: 00007fffc30ea648 [ 77.077455][ T5463] [ 77.103817][ T5463] BUG: Bad page map in process syz-executor.0 pte:fffff99a9a120 pmd:1fbee067 [ 77.113196][ T5463] page:ffffea0001995940 refcount:9 mapcount:-1 mapping:ffff88807736c9d0 index:0x1 pfn:0x66565 [ 77.123587][ T5463] head:ffffea0001995900 order:2 entire_mapcount:0 nr_pages_mapped:8388605 pincount:0 [ 77.133190][ T5463] memcg:ffff88802112c000 [ 77.137457][ T5463] aops:xfs_address_space_operations ino:244a dentry name:"bus" [ 77.145142][ T5463] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.156405][ T5463] page_type: 0xffffffff() [ 77.160939][ T5463] raw: 00fff00000000202 ffffea0001995901 dead000000000122 fffffffdffffffff [ 77.169527][ T5463] raw: 0000000400000000 0000000000000000 00000000fffffffe 0000000000000000 [ 77.178248][ T5463] head: 00fff0000000816c ffffea0001c1b9c8 ffff888020f3a030 ffff88807736c9d0 [ 77.187534][ T5463] head: 0000000000000000 ffff8880146f3b80 00000009ffffffff ffff88802112c000 [ 77.196543][ T5463] page dumped because: bad pte [ 77.201541][ T5463] page_owner tracks the page as allocated [ 77.207286][ T5463] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5463, tgid 5461 (syz-executor.0), ts 75822700865, free_ts 14932924004 [ 77.230780][ T5463] post_alloc_hook+0x1e6/0x210 [ 77.235583][ T5463] get_page_from_freelist+0x31db/0x3360 [ 77.241347][ T5463] __alloc_pages+0x255/0x670 [ 77.246062][ T5463] folio_alloc+0x1e/0x60 [ 77.250435][ T5463] filemap_alloc_folio+0xde/0x500 [ 77.255501][ T5463] page_cache_ra_order+0x423/0xcc0 [ 77.260690][ T5463] do_sync_mmap_readahead+0x444/0x850 [ 77.266087][ T5463] filemap_fault+0x7d3/0x1710 [ 77.270926][ T5463] __xfs_filemap_fault+0x286/0x960 [ 77.276226][ T5463] __do_fault+0x133/0x4e0 [ 77.280613][ T5463] handle_mm_fault+0x48d2/0x6200 [ 77.285587][ T5463] __get_user_pages+0x6bd/0x15e0 [ 77.290590][ T5463] get_dump_page+0x146/0x2b0 [ 77.295199][ T5463] dump_user_range+0x126/0x910 [ 77.300065][ T5463] elf_core_dump+0x3b75/0x4490 [ 77.304874][ T5463] do_coredump+0x1b73/0x2ab0 [ 77.309588][ T5463] page last free stack trace: [ 77.314646][ T5463] free_unref_page_prepare+0x8c3/0x9f0 [ 77.320225][ T5463] free_unref_page+0x37/0x3f0 [ 77.324929][ T5463] free_contig_range+0x9e/0x150 [ 77.329947][ T5463] destroy_args+0x95/0x7c0 [ 77.334397][ T5463] debug_vm_pgtable+0x4ac/0x540 [ 77.339290][ T5463] do_one_initcall+0x23d/0x7d0 [ 77.344161][ T5463] do_initcall_level+0x157/0x210 [ 77.349219][ T5463] do_initcalls+0x3f/0x80 [ 77.353657][ T5463] kernel_init_freeable+0x440/0x5d0 [ 77.359057][ T5463] kernel_init+0x1d/0x2a0 [ 77.363447][ T5463] ret_from_fork+0x48/0x80 [ 77.367894][ T5463] ret_from_fork_asm+0x11/0x20 [ 77.372815][ T5463] addr:0000000020008000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff88807736c9d0 index:7 [ 77.383729][ T5463] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio [ 77.393084][ T5463] CPU: 1 PID: 5463 Comm: syz-executor.0 Tainted: G B 6.6.0-rc1-syzkaller-dirty #0 [ 77.403678][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 77.413723][ T5463] Call Trace: [ 77.416988][ T5463] [ 77.419981][ T5463] dump_stack_lvl+0x1e7/0x2d0 [ 77.424656][ T5463] ? nf_tcp_handle_invalid+0x650/0x650 [ 77.430106][ T5463] ? panic+0x770/0x770 [ 77.434248][ T5463] ? dump_page+0x9c2/0x1090 [ 77.438738][ T5463] ? xfs_dio_write_end_io+0x6f0/0x6f0 [ 77.444094][ T5463] ? xfs_file_write_iter+0x620/0x620 [ 77.449385][ T5463] print_bad_pte+0x581/0x5c0 [ 77.454004][ T5463] unmap_page_range+0x1a76/0x3300 [ 77.459057][ T5463] ? mmu_notifier_invalidate_range_start+0xf0/0xf0 [ 77.465731][ T5463] ? __might_sleep+0xc0/0xc0 [ 77.470326][ T5463] ? uprobe_munmap+0x183/0x410 [ 77.475079][ T5463] ? unmap_single_vma+0x1b9/0x2a0 [ 77.480096][ T5463] unmap_vmas+0x209/0x3a0 [ 77.484430][ T5463] ? unmap_page_range+0x3300/0x3300 [ 77.489719][ T5463] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 77.495181][ T5463] exit_mmap+0x297/0xc50 [ 77.499445][ T5463] ? vm_brk+0x30/0x30 [ 77.503504][ T5463] ? __asan_memset+0x23/0x40 [ 77.508347][ T5463] ? uprobe_clear_state+0x275/0x290 [ 77.513532][ T5463] ? mm_update_next_owner+0x4a3/0x520 [ 77.518995][ T5463] __mmput+0x115/0x3c0 [ 77.523053][ T5463] exit_mm+0x21f/0x300 [ 77.527122][ T5463] ? coredump_task_exit+0x460/0x460 [ 77.532308][ T5463] ? taskstats_exit+0x39d/0x920 [ 77.537167][ T5463] ? tty_audit_exit+0x154/0x1f0 [ 77.542021][ T5463] do_exit+0x612/0x2290 [ 77.546171][ T5463] ? put_task_struct+0xc0/0xc0 [ 77.551021][ T5463] do_group_exit+0x206/0x2c0 [ 77.555604][ T5463] get_signal+0x175d/0x1840 [ 77.560100][ T5463] ? ptrace_notify+0x380/0x380 [ 77.564851][ T5463] ? do_pwritev+0x2b9/0x360 [ 77.569346][ T5463] arch_do_signal_or_restart+0x96/0x860 [ 77.574894][ T5463] ? get_sigframe_size+0x20/0x20 [ 77.579836][ T5463] ? rcu_is_watching+0x15/0xb0 [ 77.584588][ T5463] exit_to_user_mode_loop+0x6a/0x100 [ 77.589878][ T5463] exit_to_user_mode_prepare+0xb1/0x140 [ 77.595440][ T5463] syscall_exit_to_user_mode+0x64/0x280 [ 77.601078][ T5463] do_syscall_64+0x4d/0xc0 [ 77.605492][ T5463] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.611378][ T5463] RIP: 0033:0x7f3a06c7cae9 [ 77.615790][ T5463] Code: Unable to access opcode bytes at 0x7f3a06c7cabf. [ 77.622878][ T5463] RSP: 002b:00007f3a07a010c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 77.631290][ T5463] RAX: ffffffffffffffe5 RBX: 00007f3a06d9bf80 RCX: 00007f3a06c7cae9 [ 77.639247][ T5463] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007 [ 77.647224][ T5463] RBP: 00007f3a06cc847a R08: 0000000000000000 R09: 0000000000000000 [ 77.655333][ T5463] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 77.663406][ T5463] R13: 000000000000000b R14: 00007f3a06d9bf80 R15: 00007fffc30ea648 [ 77.671645][ T5463] [ 77.716906][ T5382] page:ffffea0001995a00 refcount:7 mapcount:0 mapping:ffff88807736c9d0 index:0x4 pfn:0x66568 [ 77.727106][ T5382] head:ffffea0001995a00 order:2 entire_mapcount:0 nr_pages_mapped:2 pincount:0 [ 77.736066][ T5382] memcg:ffff88802112c000 [ 77.740324][ T5382] aops:xfs_address_space_operations ino:244a [ 77.746501][ T5382] flags: 0xfff00000000169(locked|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.756755][ T5382] page_type: 0xffffffff() [ 77.761105][ T5382] raw: 00fff00000000169 ffffea0001995908 ffff888020f3a030 ffff88807736c9d0 [ 77.770255][ T5382] raw: 0000000000000004 0000000000000000 00000007ffffffff ffff88802112c000 [ 77.778937][ T5382] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 77.786233][ T5382] page_owner tracks the page as allocated [ 77.792182][ T5382] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5463, tgid 5461 (syz-executor.0), ts 75822767647, free_ts 14932941380 [ 77.815247][ T5382] post_alloc_hook+0x1e6/0x210 [ 77.820049][ T5382] get_page_from_freelist+0x31db/0x3360 [ 77.825712][ T5382] __alloc_pages+0x255/0x670 [ 77.830332][ T5382] folio_alloc+0x1e/0x60 [ 77.834607][ T5382] filemap_alloc_folio+0xde/0x500 [ 77.839742][ T5382] page_cache_ra_order+0x423/0xcc0 [ 77.844881][ T5382] do_sync_mmap_readahead+0x444/0x850 [ 77.850358][ T5382] filemap_fault+0x7d3/0x1710 [ 77.855063][ T5382] __xfs_filemap_fault+0x286/0x960 [ 77.860211][ T5382] __do_fault+0x133/0x4e0 [ 77.864558][ T5382] handle_mm_fault+0x48d2/0x6200 [ 77.869778][ T5382] __get_user_pages+0x6bd/0x15e0 [ 77.874734][ T5382] get_dump_page+0x146/0x2b0 [ 77.879344][ T5382] dump_user_range+0x126/0x910 [ 77.884218][ T5382] elf_core_dump+0x3b75/0x4490 [ 77.889001][ T5382] do_coredump+0x1b73/0x2ab0 [ 77.893693][ T5382] page last free stack trace: [ 77.898396][ T5382] free_unref_page_prepare+0x8c3/0x9f0 [ 77.903964][ T5382] free_unref_page+0x37/0x3f0 [ 77.908667][ T5382] free_contig_range+0x9e/0x150 [ 77.913806][ T5382] destroy_args+0x95/0x7c0 [ 77.918249][ T5382] debug_vm_pgtable+0x4ac/0x540 [ 77.923129][ T5382] do_one_initcall+0x23d/0x7d0 [ 77.928002][ T5382] do_initcall_level+0x157/0x210 [ 77.933054][ T5382] do_initcalls+0x3f/0x80 [ 77.937429][ T5382] kernel_init_freeable+0x440/0x5d0 [ 77.942652][ T5382] kernel_init+0x1d/0x2a0 [ 77.947015][ T5382] ret_from_fork+0x48/0x80 [ 77.951448][ T5382] ret_from_fork_asm+0x11/0x20 [ 77.956356][ T5382] ------------[ cut here ]------------ [ 77.961819][ T5382] kernel BUG at mm/filemap.c:155! [ 77.967041][ T5382] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 77.973304][ T5382] CPU: 1 PID: 5382 Comm: syz-executor.0 Tainted: G B 6.6.0-rc1-syzkaller-dirty #0 [ 77.983945][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 77.994482][ T5382] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20 [ 78.000842][ T5382] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 e0 08 13 8b e8 c8 a4 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 60 0e 13 8b e8 b2 a4 10 00 [ 78.020727][ T5382] RSP: 0018:ffffc900055e7778 EFLAGS: 00010046 [ 78.026811][ T5382] RAX: ae320607b93d3800 RBX: 0000000000000000 RCX: ffffffff816d2b30 [ 78.034803][ T5382] RDX: 0000000000000000 RSI: ffffffff8b599600 RDI: ffffffff8b5995c0 [ 78.042880][ T5382] RBP: 0000000000000040 R08: ffffffff8e9a68af R09: 1ffffffff1d34d15 [ 78.050902][ T5382] R10: dffffc0000000000 R11: fffffbfff1d34d16 R12: ffffc900055e79c0 [ 78.059072][ T5382] R13: ffffea0001995a00 R14: 1ffffd4000332b40 R15: ffffea0001995a08 [ 78.067237][ T5382] FS: 0000555555a09480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 78.076995][ T5382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.083595][ T5382] CR2: 00007f7fde3d9378 CR3: 000000007754d000 CR4: 00000000003506e0 [ 78.091590][ T5382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.099752][ T5382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.107748][ T5382] Call Trace: [ 78.111080][ T5382] [ 78.114115][ T5382] ? __die_body+0x8b/0xe0 [ 78.118473][ T5382] ? die+0xa1/0xd0 [ 78.122213][ T5382] ? do_trap+0x153/0x380 [ 78.126467][ T5382] ? __wake_up_klogd+0xcc/0x100 [ 78.131330][ T5382] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.137248][ T5382] ? do_error_trap+0x1dc/0x2c0 [ 78.142031][ T5382] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.147699][ T5382] ? __lock_acquire+0x7f70/0x7f70 [ 78.152751][ T5382] ? do_int3+0x50/0x50 [ 78.156935][ T5382] ? report_bug+0x3cd/0x500 [ 78.161551][ T5382] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.167211][ T5382] ? handle_invalid_op+0x34/0x40 [ 78.172167][ T5382] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.177833][ T5382] ? exc_invalid_op+0x33/0x50 [ 78.182539][ T5382] ? asm_exc_invalid_op+0x1a/0x20 [ 78.187591][ T5382] ? lock_release+0xb0/0x9d0 [ 78.192214][ T5382] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.197890][ T5382] ? filemap_unaccount_folio+0x6c8/0xc20 [ 78.203555][ T5382] delete_from_page_cache_batch+0x173/0xc90 [ 78.209738][ T5382] ? filemap_remove_folio+0x2e0/0x2e0 [ 78.215230][ T5382] ? __kmem_cache_free+0x25f/0x3b0 [ 78.220373][ T5382] ? truncate_cleanup_folio+0x1e0/0x5c0 [ 78.225946][ T5382] ? ifs_free+0x710/0x710 [ 78.230825][ T5382] ? truncate_cleanup_folio+0x2cd/0x5c0 [ 78.236502][ T5382] truncate_inode_pages_range+0x346/0x11a0 [ 78.242348][ T5382] ? lock_acquire+0xe3/0x520 [ 78.246972][ T5382] ? __lock_acquire+0x7f70/0x7f70 [ 78.252027][ T5382] ? mapping_evict_folio+0x530/0x530 [ 78.257346][ T5382] ? __rwlock_init+0x150/0x150 [ 78.262146][ T5382] evict+0x2b7/0x620 [ 78.266069][ T5382] evict_inodes+0x5f8/0x690 [ 78.270593][ T5382] ? clear_inode+0x150/0x150 [ 78.275221][ T5382] ? xfs_fs_sync_fs+0x1c0/0x360 [ 78.280114][ T5382] generic_shutdown_super+0x9d/0x2c0 [ 78.285431][ T5382] kill_block_super+0x41/0x70 [ 78.290132][ T5382] xfs_kill_sb+0x15/0x50 [ 78.294455][ T5382] deactivate_locked_super+0xa4/0x110 [ 78.300218][ T5382] cleanup_mnt+0x426/0x4c0 [ 78.304880][ T5382] task_work_run+0x24a/0x300 [ 78.309681][ T5382] ? task_work_cancel+0x2b0/0x2b0 [ 78.314738][ T5382] ? rcu_is_watching+0x15/0xb0 [ 78.319525][ T5382] exit_to_user_mode_loop+0xd9/0x100 [ 78.325010][ T5382] exit_to_user_mode_prepare+0xb1/0x140 [ 78.330579][ T5382] syscall_exit_to_user_mode+0x64/0x280 [ 78.336157][ T5382] do_syscall_64+0x4d/0xc0 [ 78.340595][ T5382] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.346517][ T5382] RIP: 0033:0x7f3a06c7de17 [ 78.351555][ T5382] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 78.371183][ T5382] RSP: 002b:00007fffc30e9868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.379697][ T5382] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3a06c7de17 [ 78.387701][ T5382] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fffc30e9920 [ 78.395777][ T5382] RBP: 00007fffc30e9920 R08: 0000000000000000 R09: 0000000000000000 [ 78.403856][ T5382] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc30ea9e0 [ 78.411912][ T5382] R13: 00007f3a06cc73b9 R14: 00000000000126bb R15: 0000000000000007 [ 78.419919][ T5382] [ 78.422948][ T5382] Modules linked in: [ 78.426860][ T5382] ---[ end trace 0000000000000000 ]--- [ 78.432323][ T5382] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20 [ 78.438591][ T5382] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 e0 08 13 8b e8 c8 a4 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 60 0e 13 8b e8 b2 a4 10 00 [ 78.458652][ T5382] RSP: 0018:ffffc900055e7778 EFLAGS: 00010046 [ 78.464743][ T5382] RAX: ae320607b93d3800 RBX: 0000000000000000 RCX: ffffffff816d2b30 [ 78.472901][ T5382] RDX: 0000000000000000 RSI: ffffffff8b599600 RDI: ffffffff8b5995c0 [ 78.480894][ T5382] RBP: 0000000000000040 R08: ffffffff8e9a68af R09: 1ffffffff1d34d15 [ 78.488889][ T5382] R10: dffffc0000000000 R11: fffffbfff1d34d16 R12: ffffc900055e79c0 [ 78.496891][ T5382] R13: ffffea0001995a00 R14: 1ffffd4000332b40 R15: ffffea0001995a08 [ 78.504886][ T5382] FS: 0000555555a09480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 78.513841][ T5382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.520449][ T5382] CR2: 00007f7fde3d9378 CR3: 000000007754d000 CR4: 00000000003506e0 [ 78.528611][ T5382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.536689][ T5382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.544682][ T5382] Kernel panic - not syncing: Fatal exception [ 78.550982][ T5382] Kernel Offset: disabled [ 78.555297][ T5382] Rebooting in 86400 seconds..