Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts.
2023/09/10 06:48:15 ignoring optional flag "sandboxArg"="0"
2023/09/10 06:48:15 parsed 1 programs
2023/09/10 06:48:16 executed programs: 0
[ 74.222292][ T5374] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 74.263652][ T4437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 74.271014][ T4437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 74.278521][ T4437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 74.286161][ T4437] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 74.293380][ T4437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 74.381070][ T5384] chnl_net:caif_netlink_parms(): no params data found
[ 74.424851][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.432246][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.439824][ T5384] bridge_slave_0: entered allmulticast mode
[ 74.446610][ T5384] bridge_slave_0: entered promiscuous mode
[ 74.454408][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.461488][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.468753][ T5384] bridge_slave_1: entered allmulticast mode
[ 74.475697][ T5384] bridge_slave_1: entered promiscuous mode
[ 74.495996][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.507040][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.528850][ T5384] team0: Port device team_slave_0 added
[ 74.536378][ T5384] team0: Port device team_slave_1 added
[ 74.554727][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.561781][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.587789][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.599715][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.606699][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.632687][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.663012][ T5384] hsr_slave_0: entered promiscuous mode
[ 74.669376][ T5384] hsr_slave_1: entered promiscuous mode
[ 75.115598][ T5384] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.129132][ T5384] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.139901][ T5384] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.150757][ T5384] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.176638][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.183827][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.191400][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.198599][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.261877][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.280291][ T5042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.289880][ T5042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.305102][ T5384] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.318626][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.325815][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.350105][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.357291][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.501663][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.544821][ T5384] veth0_vlan: entered promiscuous mode
[ 75.557427][ T5384] veth1_vlan: entered promiscuous mode
[ 75.588647][ T5384] veth0_macvtap: entered promiscuous mode
[ 75.599830][ T5384] veth1_macvtap: entered promiscuous mode
[ 75.619928][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.637786][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.650792][ T5384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.664025][ T5384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.674131][ T5384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.684026][ T5384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.748101][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.757425][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.792560][ T5041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.801605][ T5041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.060271][ T5452] loop0: detected capacity change from 0 to 32768
[ 76.071778][ T5452] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 76.121168][ T5452] XFS (loop0): Ending clean mount
[ 76.129042][ T5452] XFS (loop0): Quotacheck needed: Please wait.
[ 76.146254][ T5452] XFS (loop0): Quotacheck: Done.
[ 76.166737][ T28] audit: type=1804 audit(1694328498.741:2): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3518091812/syzkaller.XdvQMO/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 76.231315][ T28] audit: type=1804 audit(1694328498.741:3): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3518091812/syzkaller.XdvQMO/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 76.295035][ T5452] BUG: Bad page map in process syz-executor.0 pte:fffff9af08120 pmd:29f05067
[ 76.304332][ T5452] page:ffffea0001943dc0 refcount:9 mapcount:-1 mapping:ffff88807726d190 index:0x3 pfn:0x650f7
[ 76.315435][ T5452] head:ffffea0001943d00 order:2 entire_mapcount:0 nr_pages_mapped:8388607 pincount:0
[ 76.325032][ T5452] memcg:ffff88801fe7a000
[ 76.329329][ T5452] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 76.337122][ T5452] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 76.348381][ T5452] page_type: 0xffffffff()
[ 76.353293][ T5452] raw: 00fff00000000000 ffffea0001943d01 dead000000000122 dead000000000400
[ 76.361914][ T5452] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 76.364501][ T5032] Bluetooth: hci0: command 0x0409 tx timeout
[ 76.370883][ T5452] head: 00fff0000000816c ffffea0001a3d488 ffff888078c81030 ffff88807726d190
[ 76.386410][ T5452] head: 0000000000000000 ffff8880228b4280 00000009ffffffff ffff88801fe7a000
[ 76.395811][ T5452] page dumped because: bad pte
[ 76.400594][ T5452] page_owner tracks the page as allocated
[ 76.406847][ T5452] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 76195790660, free_ts 16216492891
[ 76.430659][ T5452] post_alloc_hook+0x1e6/0x210
[ 76.435906][ T5452] get_page_from_freelist+0x31db/0x3360
[ 76.441497][ T5452] __alloc_pages+0x255/0x670
[ 76.446488][ T5452] folio_alloc+0x1e/0x60
[ 76.450757][ T5452] filemap_alloc_folio+0xde/0x500
[ 76.455836][ T5452] page_cache_ra_order+0x423/0xcc0
[ 76.461154][ T5452] do_sync_mmap_readahead+0x444/0x850
[ 76.466607][ T5452] filemap_fault+0x7d3/0x1710
[ 76.471399][ T5452] __xfs_filemap_fault+0x286/0x960
[ 76.476565][ T5452] __do_fault+0x133/0x4e0
[ 76.480917][ T5452] handle_mm_fault+0x48d2/0x6200
[ 76.485906][ T5452] __get_user_pages+0x6bd/0x15e0
[ 76.490860][ T5452] get_dump_page+0x146/0x2b0
[ 76.495589][ T5452] dump_user_range+0x126/0x910
[ 76.500893][ T5452] elf_core_dump+0x3b75/0x4490
[ 76.505799][ T5452] do_coredump+0x1b73/0x2ab0
[ 76.510428][ T5452] page last free stack trace:
[ 76.515712][ T5452] free_unref_page_prepare+0x8c3/0x9f0
[ 76.521592][ T5452] free_unref_page+0x37/0x3f0
[ 76.526394][ T5452] free_contig_range+0x9e/0x150
[ 76.531276][ T5452] destroy_args+0x95/0x7c0
[ 76.536174][ T5452] debug_vm_pgtable+0x4ac/0x540
[ 76.541135][ T5452] do_one_initcall+0x23d/0x7d0
[ 76.546474][ T5452] do_initcall_level+0x157/0x210
[ 76.551443][ T5452] do_initcalls+0x3f/0x80
[ 76.555844][ T5452] kernel_init_freeable+0x440/0x5d0
[ 76.561154][ T5452] kernel_init+0x1d/0x2a0
[ 76.565535][ T5452] ret_from_fork+0x48/0x80
[ 76.569967][ T5452] ret_from_fork_asm+0x11/0x20
[ 76.575057][ T5452] addr:0000000020006000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff88807726d190 index:5
[ 76.586114][ T5452] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 76.595611][ T5452] CPU: 0 PID: 5452 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d-dirty #0
[ 76.606128][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 76.616264][ T5452] Call Trace:
[ 76.619560][ T5452]
[ 76.622479][ T5452] dump_stack_lvl+0x1e7/0x2d0
[ 76.627151][ T5452] ? nf_tcp_handle_invalid+0x650/0x650
[ 76.632600][ T5452] ? panic+0x770/0x770
[ 76.636665][ T5452] ? dump_page+0x9c2/0x1090
[ 76.641162][ T5452] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 76.646524][ T5452] ? xfs_file_write_iter+0x620/0x620
[ 76.651997][ T5452] print_bad_pte+0x581/0x5c0
[ 76.656759][ T5452] unmap_page_range+0x1a76/0x3300
[ 76.661898][ T5452] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 76.668563][ T5452] ? __might_sleep+0xc0/0xc0
[ 76.673158][ T5452] ? uprobe_munmap+0x183/0x410
[ 76.677998][ T5452] ? unmap_single_vma+0x1b9/0x2a0
[ 76.683025][ T5452] unmap_vmas+0x209/0x3a0
[ 76.687344][ T5452] ? unmap_page_range+0x3300/0x3300
[ 76.692537][ T5452] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 76.698077][ T5452] exit_mmap+0x297/0xc50
[ 76.702315][ T5452] ? vm_brk+0x30/0x30
[ 76.706283][ T5452] ? __asan_memset+0x23/0x40
[ 76.710867][ T5452] ? uprobe_clear_state+0x275/0x290
[ 76.716054][ T5452] ? mm_update_next_owner+0x4a3/0x520
[ 76.721425][ T5452] __mmput+0x115/0x3c0
[ 76.725570][ T5452] exit_mm+0x21f/0x300
[ 76.729718][ T5452] ? coredump_task_exit+0x460/0x460
[ 76.734908][ T5452] ? taskstats_exit+0x39d/0x920
[ 76.739750][ T5452] ? tty_audit_exit+0x154/0x1f0
[ 76.744592][ T5452] do_exit+0x612/0x2290
[ 76.748830][ T5452] ? put_task_struct+0xc0/0xc0
[ 76.753592][ T5452] do_group_exit+0x206/0x2c0
[ 76.758179][ T5452] get_signal+0x175d/0x1840
[ 76.762679][ T5452] ? ptrace_notify+0x380/0x380
[ 76.767514][ T5452] ? do_pwritev+0x2b9/0x360
[ 76.772131][ T5452] arch_do_signal_or_restart+0x96/0x860
[ 76.777674][ T5452] ? get_sigframe_size+0x20/0x20
[ 76.782610][ T5452] ? rcu_is_watching+0x15/0xb0
[ 76.787365][ T5452] exit_to_user_mode_loop+0x6a/0x100
[ 76.792833][ T5452] exit_to_user_mode_prepare+0xb1/0x140
[ 76.798381][ T5452] syscall_exit_to_user_mode+0x64/0x280
[ 76.804134][ T5452] do_syscall_64+0x4d/0xc0
[ 76.808542][ T5452] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 76.814432][ T5452] RIP: 0033:0x7f484f27cae9
[ 76.818861][ T5452] Code: Unable to access opcode bytes at 0x7f484f27cabf.
[ 76.825901][ T5452] RSP: 002b:00007f48500a30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 76.834588][ T5452] RAX: ffffffffffffffe5 RBX: 00007f484f39bf80 RCX: 00007f484f27cae9
[ 76.842650][ T5452] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 76.850640][ T5452] RBP: 00007f484f2c847a R08: 0000000000000000 R09: 0000000000000000
[ 76.858612][ T5452] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 76.866924][ T5452] R13: 000000000000000b R14: 00007f484f39bf80 R15: 00007fff133f0e78
[ 76.875333][ T5452]
[ 76.948494][ T5452] BUG: Bad page map in process syz-executor.0 pte:fffff9af09120 pmd:29f05067
[ 76.957478][ T5452] page:ffffea0001943d80 refcount:9 mapcount:-1 mapping:ffff88807726d190 index:0x2 pfn:0x650f6
[ 76.967954][ T5452] head:ffffea0001943d00 order:2 entire_mapcount:0 nr_pages_mapped:8388606 pincount:0
[ 76.978061][ T5452] memcg:ffff88801fe7a000
[ 76.982307][ T5452] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 76.990096][ T5452] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 77.001550][ T5452] page_type: 0xffffffff()
[ 77.005907][ T5452] raw: 00fff00000000000 ffffea0001943d01 ffffea0001943d90 ffffea0001943d90
[ 77.014721][ T5452] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 77.023380][ T5452] head: 00fff0000000816c ffffea0001a3d488 ffff888078c81030 ffff88807726d190
[ 77.032729][ T5452] head: 0000000000000000 ffff8880228b4280 00000009ffffffff ffff88801fe7a000
[ 77.041464][ T5452] page dumped because: bad pte
[ 77.046323][ T5452] page_owner tracks the page as allocated
[ 77.052048][ T5452] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 76195790660, free_ts 16216486903
[ 77.075243][ T5452] post_alloc_hook+0x1e6/0x210
[ 77.080040][ T5452] get_page_from_freelist+0x31db/0x3360
[ 77.085646][ T5452] __alloc_pages+0x255/0x670
[ 77.090260][ T5452] folio_alloc+0x1e/0x60
[ 77.094599][ T5452] filemap_alloc_folio+0xde/0x500
[ 77.099644][ T5452] page_cache_ra_order+0x423/0xcc0
[ 77.104929][ T5452] do_sync_mmap_readahead+0x444/0x850
[ 77.110326][ T5452] filemap_fault+0x7d3/0x1710
[ 77.115070][ T5452] __xfs_filemap_fault+0x286/0x960
[ 77.120199][ T5452] __do_fault+0x133/0x4e0
[ 77.124598][ T5452] handle_mm_fault+0x48d2/0x6200
[ 77.129568][ T5452] __get_user_pages+0x6bd/0x15e0
[ 77.134906][ T5452] get_dump_page+0x146/0x2b0
[ 77.139616][ T5452] dump_user_range+0x126/0x910
[ 77.144562][ T5452] elf_core_dump+0x3b75/0x4490
[ 77.149361][ T5452] do_coredump+0x1b73/0x2ab0
[ 77.154161][ T5452] page last free stack trace:
[ 77.158948][ T5452] free_unref_page_prepare+0x8c3/0x9f0
[ 77.164459][ T5452] free_unref_page+0x37/0x3f0
[ 77.170205][ T5452] free_contig_range+0x9e/0x150
[ 77.175669][ T5452] destroy_args+0x95/0x7c0
[ 77.180127][ T5452] debug_vm_pgtable+0x4ac/0x540
[ 77.186011][ T5452] do_one_initcall+0x23d/0x7d0
[ 77.191152][ T5452] do_initcall_level+0x157/0x210
[ 77.196809][ T5452] do_initcalls+0x3f/0x80
[ 77.201347][ T5452] kernel_init_freeable+0x440/0x5d0
[ 77.207618][ T5452] kernel_init+0x1d/0x2a0
[ 77.211973][ T5452] ret_from_fork+0x48/0x80
[ 77.217017][ T5452] ret_from_fork_asm+0x11/0x20
[ 77.221839][ T5452] addr:0000000020007000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff88807726d190 index:6
[ 77.233867][ T5452] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 77.244073][ T5452] CPU: 0 PID: 5452 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-13150-g535a265d7f0d-dirty #0
[ 77.256242][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 77.266327][ T5452] Call Trace:
[ 77.269622][ T5452]
[ 77.272654][ T5452] dump_stack_lvl+0x1e7/0x2d0
[ 77.277360][ T5452] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.283189][ T5452] ? panic+0x770/0x770
[ 77.287324][ T5452] ? dump_page+0x9c2/0x1090
[ 77.291915][ T5452] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 77.297328][ T5452] ? xfs_file_write_iter+0x620/0x620
[ 77.302601][ T5452] print_bad_pte+0x581/0x5c0
[ 77.307192][ T5452] unmap_page_range+0x1a76/0x3300
[ 77.312228][ T5452] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 77.318806][ T5452] ? __might_sleep+0xc0/0xc0
[ 77.323387][ T5452] ? uprobe_munmap+0x183/0x410
[ 77.328140][ T5452] ? unmap_single_vma+0x1b9/0x2a0
[ 77.333514][ T5452] unmap_vmas+0x209/0x3a0
[ 77.337846][ T5452] ? unmap_page_range+0x3300/0x3300
[ 77.343041][ T5452] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 77.348759][ T5452] exit_mmap+0x297/0xc50
[ 77.353016][ T5452] ? vm_brk+0x30/0x30
[ 77.356989][ T5452] ? __asan_memset+0x23/0x40
[ 77.361663][ T5452] ? uprobe_clear_state+0x275/0x290
[ 77.366849][ T5452] ? mm_update_next_owner+0x4a3/0x520
[ 77.372212][ T5452] __mmput+0x115/0x3c0
[ 77.376354][ T5452] exit_mm+0x21f/0x300
[ 77.380415][ T5452] ? coredump_task_exit+0x460/0x460
[ 77.385602][ T5452] ? taskstats_exit+0x39d/0x920
[ 77.390450][ T5452] ? tty_audit_exit+0x154/0x1f0
[ 77.395294][ T5452] do_exit+0x612/0x2290
[ 77.399447][ T5452] ? put_task_struct+0xc0/0xc0
[ 77.404207][ T5452] do_group_exit+0x206/0x2c0
[ 77.408816][ T5452] get_signal+0x175d/0x1840
[ 77.413324][ T5452] ? ptrace_notify+0x380/0x380
[ 77.418195][ T5452] ? do_pwritev+0x2b9/0x360
[ 77.422780][ T5452] arch_do_signal_or_restart+0x96/0x860
[ 77.428316][ T5452] ? get_sigframe_size+0x20/0x20
[ 77.433250][ T5452] ? rcu_is_watching+0x15/0xb0
[ 77.438031][ T5452] exit_to_user_mode_loop+0x6a/0x100
[ 77.443304][ T5452] exit_to_user_mode_prepare+0xb1/0x140
[ 77.448942][ T5452] syscall_exit_to_user_mode+0x64/0x280
[ 77.454751][ T5452] do_syscall_64+0x4d/0xc0
[ 77.459173][ T5452] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 77.465525][ T5452] RIP: 0033:0x7f484f27cae9
[ 77.469936][ T5452] Code: Unable to access opcode bytes at 0x7f484f27cabf.
[ 77.476963][ T5452] RSP: 002b:00007f48500a30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 77.485455][ T5452] RAX: ffffffffffffffe5 RBX: 00007f484f39bf80 RCX: 00007f484f27cae9
[ 77.493421][ T5452] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 77.501467][ T5452] RBP: 00007f484f2c847a R08: 0000000000000000 R09: 0000000000000000
[ 77.509597][ T5452] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 77.517629][ T5452] R13: 000000000000000b R14: 00007f484f39bf80 R15: 00007fff133f0e78
[ 77.525797][ T5452]
[ 77.533853][ T5452] BUG: Bad page map in process syz-executor.0 pte:fffff9af0a120 pmd:29f05067
[ 77.543263][ T5452] page:ffffea0001943d40 refcount:9 mapcount:-1 mapping:ffff88807726d190 index:0x1 pfn:0x650f5
[ 77.553844][ T5452] head:ffffea0001943d00 order:2 entire_mapcount:0 nr_pages_mapped:8388605 pincount:0
[ 77.563594][ T5452] memcg:ffff88801fe7a000
[ 77.567842][ T5452] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 77.575728][ T5452] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 77.587036][ T5452] page_type: 0xffffffff()
[ 77.591385][ T5452] raw: 00fff00000000202 ffffea0001943d01 dead000000000122 fffffffdffffffff
[ 77.600379][ T5452] raw: 0000000400000000 0000000000000000 00000000fffffffe 0000000000000000
[ 77.609440][ T5452] head: 00fff0000000816c ffffea0001a3d488 ffff888078c81030 ffff88807726d190
[ 77.618583][ T5452] head: 0000000000000000 ffff8880228b4280 00000009ffffffff ffff88801fe7a000
[ 77.627601][ T5452] page dumped because: bad pte
[ 77.632555][ T5452] page_owner tracks the page as allocated
[ 77.638693][ T5452] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 76195790660, free_ts 16216480753
[ 77.663523][ T5452] post_alloc_hook+0x1e6/0x210
[ 77.668769][ T5452] get_page_from_freelist+0x31db/0x3360
[ 77.674632][ T5452] __alloc_pages+0x255/0x670
[ 77.679335][ T5452] folio_alloc+0x1e/0x60
[ 77.684188][ T5452] filemap_alloc_folio+0xde/0x500
[ 77.689248][ T5452] page_cache_ra_order+0x423/0xcc0
[ 77.694676][ T5452] do_sync_mmap_readahead+0x444/0x850
[ 77.700081][ T5452] filemap_fault+0x7d3/0x1710
[ 77.705257][ T5452] __xfs_filemap_fault+0x286/0x960
[ 77.710393][ T5452] __do_fault+0x133/0x4e0
[ 77.715071][ T5452] handle_mm_fault+0x48d2/0x6200
[ 77.720036][ T5452] __get_user_pages+0x6bd/0x15e0
[ 77.725307][ T5452] get_dump_page+0x146/0x2b0
[ 77.729927][ T5452] dump_user_range+0x126/0x910
[ 77.735049][ T5452] elf_core_dump+0x3b75/0x4490
[ 77.739844][ T5452] do_coredump+0x1b73/0x2ab0
[ 77.746780][ T5452] page last free stack trace:
[ 77.751471][ T5452] free_unref_page_prepare+0x8c3/0x9f0
[ 77.757310][ T5452] free_unref_page+0x37/0x3f0
[ 77.762017][ T5452] free_contig_range+0x9e/0x150
[ 77.767194][ T5452] destroy_args+0x95/0x7c0
[ 77.771651][ T5452] debug_vm_pgtable+0x4ac/0x540
[ 77.776785][ T5452] do_one_initcall+0x23d/0x7d0
[ 77.781583][ T5452] do_initcall_level+0x157/0x210
[ 77.787350][ T5452] do_initcalls+0x3f/0x80
[ 77.791997][ T5452] kernel_init_freeable+0x440/0x5d0
[ 77.797494][ T5452] kernel_init+0x1d/0x2a0
[ 77.801948][ T5452] ret_from_fork+0x48/0x80
[ 77.806683][ T5452] ret_from_fork_asm+0x11/0x20
[ 77.811490][ T5452] addr:0000000020008000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff88807726d190 index:7
[ 77.823004][ T5452] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 77.832330][ T5452] CPU: 1 PID: 5452 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-13150-g535a265d7f0d-dirty #0
[ 77.844411][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 77.854573][ T5452] Call Trace:
[ 77.857909][ T5452]
[ 77.860856][ T5452] dump_stack_lvl+0x1e7/0x2d0
[ 77.865557][ T5452] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.871224][ T5452] ? panic+0x770/0x770
[ 77.875314][ T5452] ? dump_page+0x9c2/0x1090
[ 77.879930][ T5452] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 77.885408][ T5452] ? xfs_file_write_iter+0x620/0x620
[ 77.890713][ T5452] print_bad_pte+0x581/0x5c0
[ 77.895416][ T5452] unmap_page_range+0x1a76/0x3300
[ 77.900490][ T5452] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 77.907097][ T5452] ? __might_sleep+0xc0/0xc0
[ 77.911712][ T5452] ? uprobe_munmap+0x183/0x410
[ 77.916582][ T5452] ? unmap_single_vma+0x1b9/0x2a0
[ 77.921718][ T5452] unmap_vmas+0x209/0x3a0
[ 77.926075][ T5452] ? unmap_page_range+0x3300/0x3300
[ 77.931302][ T5452] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 77.936782][ T5452] exit_mmap+0x297/0xc50
[ 77.941026][ T5452] ? vm_brk+0x30/0x30
[ 77.945072][ T5452] ? __asan_memset+0x23/0x40
[ 77.949842][ T5452] ? uprobe_clear_state+0x275/0x290
[ 77.955117][ T5452] ? mm_update_next_owner+0x4a3/0x520
[ 77.960509][ T5452] __mmput+0x115/0x3c0
[ 77.964563][ T5452] exit_mm+0x21f/0x300
[ 77.968708][ T5452] ? coredump_task_exit+0x460/0x460
[ 77.974435][ T5452] ? taskstats_exit+0x39d/0x920
[ 77.979380][ T5452] ? tty_audit_exit+0x154/0x1f0
[ 77.984600][ T5452] do_exit+0x612/0x2290
[ 77.988846][ T5452] ? put_task_struct+0xc0/0xc0
[ 77.993715][ T5452] do_group_exit+0x206/0x2c0
[ 77.998304][ T5452] get_signal+0x175d/0x1840
[ 78.002971][ T5452] ? ptrace_notify+0x380/0x380
[ 78.007893][ T5452] ? do_pwritev+0x2b9/0x360
[ 78.012390][ T5452] arch_do_signal_or_restart+0x96/0x860
[ 78.018116][ T5452] ? get_sigframe_size+0x20/0x20
[ 78.023143][ T5452] ? rcu_is_watching+0x15/0xb0
[ 78.027895][ T5452] exit_to_user_mode_loop+0x6a/0x100
[ 78.033183][ T5452] exit_to_user_mode_prepare+0xb1/0x140
[ 78.038827][ T5452] syscall_exit_to_user_mode+0x64/0x280
[ 78.044731][ T5452] do_syscall_64+0x4d/0xc0
[ 78.049234][ T5452] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.055225][ T5452] RIP: 0033:0x7f484f27cae9
[ 78.059644][ T5452] Code: Unable to access opcode bytes at 0x7f484f27cabf.
[ 78.066826][ T5452] RSP: 002b:00007f48500a30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 78.075228][ T5452] RAX: ffffffffffffffe5 RBX: 00007f484f39bf80 RCX: 00007f484f27cae9
[ 78.083225][ T5452] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 78.091187][ T5452] RBP: 00007f484f2c847a R08: 0000000000000000 R09: 0000000000000000
[ 78.099422][ T5452] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 78.107471][ T5452] R13: 000000000000000b R14: 00007f484f39bf80 R15: 00007fff133f0e78
[ 78.115457][ T5452]
[ 78.146199][ T5384] page:ffffea0001943e00 refcount:7 mapcount:0 mapping:ffff88807726d190 index:0x4 pfn:0x650f8
[ 78.156577][ T5384] head:ffffea0001943e00 order:2 entire_mapcount:0 nr_pages_mapped:2 pincount:0
[ 78.165710][ T5384] memcg:ffff88801fe7a000
[ 78.170143][ T5384] aops:xfs_address_space_operations ino:244a
[ 78.176341][ T5384] flags: 0xfff00000000169(locked|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.186332][ T5384] page_type: 0xffffffff()
[ 78.191031][ T5384] raw: 00fff00000000169 ffffea0001943d08 ffff888078c81030 ffff88807726d190
[ 78.199733][ T5384] raw: 0000000000000004 0000000000000000 00000007ffffffff ffff88801fe7a000
[ 78.208413][ T5384] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[ 78.215788][ T5384] page_owner tracks the page as allocated
[ 78.221509][ T5384] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 76195840218, free_ts 16216498767
[ 78.244572][ T5384] post_alloc_hook+0x1e6/0x210
[ 78.249379][ T5384] get_page_from_freelist+0x31db/0x3360
[ 78.254993][ T5384] __alloc_pages+0x255/0x670
[ 78.259629][ T5384] folio_alloc+0x1e/0x60
[ 78.263900][ T5384] filemap_alloc_folio+0xde/0x500
[ 78.268943][ T5384] page_cache_ra_order+0x423/0xcc0
[ 78.274249][ T5384] do_sync_mmap_readahead+0x444/0x850
[ 78.279645][ T5384] filemap_fault+0x7d3/0x1710
[ 78.284346][ T5384] __xfs_filemap_fault+0x286/0x960
[ 78.289478][ T5384] __do_fault+0x133/0x4e0
[ 78.293864][ T5384] handle_mm_fault+0x48d2/0x6200
[ 78.298825][ T5384] __get_user_pages+0x6bd/0x15e0
[ 78.303878][ T5384] get_dump_page+0x146/0x2b0
[ 78.308852][ T5384] dump_user_range+0x126/0x910
[ 78.313644][ T5384] elf_core_dump+0x3b75/0x4490
[ 78.318430][ T5384] do_coredump+0x1b73/0x2ab0
[ 78.323039][ T5384] page last free stack trace:
[ 78.327716][ T5384] free_unref_page_prepare+0x8c3/0x9f0
[ 78.333191][ T5384] free_unref_page+0x37/0x3f0
[ 78.337885][ T5384] free_contig_range+0x9e/0x150
[ 78.342747][ T5384] destroy_args+0x95/0x7c0
[ 78.347190][ T5384] debug_vm_pgtable+0x4ac/0x540
[ 78.352061][ T5384] do_one_initcall+0x23d/0x7d0
[ 78.356886][ T5384] do_initcall_level+0x157/0x210
[ 78.361849][ T5384] do_initcalls+0x3f/0x80
[ 78.366201][ T5384] kernel_init_freeable+0x440/0x5d0
[ 78.371416][ T5384] kernel_init+0x1d/0x2a0
[ 78.375757][ T5384] ret_from_fork+0x48/0x80
[ 78.380187][ T5384] ret_from_fork_asm+0x11/0x20
[ 78.385053][ T5384] ------------[ cut here ]------------
[ 78.390530][ T5384] kernel BUG at mm/filemap.c:155!
[ 78.395669][ T5384] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 78.401847][ T5384] CPU: 1 PID: 5384 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-13150-g535a265d7f0d-dirty #0
[ 78.413923][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 78.424033][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 78.430563][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 a0 09 13 8b e8 78 a4 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 20 0f 13 8b e8 62 a4 10 00
[ 78.450201][ T5384] RSP: 0018:ffffc90005347778 EFLAGS: 00010046
[ 78.456464][ T5384] RAX: 440f7b842d99ef00 RBX: 0000000000000000 RCX: ffffffff816d2b30
[ 78.464889][ T5384] RDX: 0000000000000000 RSI: ffffffff8b5996c0 RDI: ffffffff8b599680
[ 78.472968][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a68af R09: 1ffffffff1d34d15
[ 78.481056][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34d16 R12: ffffc900053479c0
[ 78.489057][ T5384] R13: ffffea0001943e00 R14: 1ffffd40003287c0 R15: ffffea0001943e08
[ 78.497568][ T5384] FS: 0000555556bf4480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 78.506632][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.513839][ T5384] CR2: 00007f9448ead5a0 CR3: 0000000075eef000 CR4: 00000000003506e0
[ 78.521840][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 78.530361][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 78.538458][ T5384] Call Trace:
[ 78.541753][ T5384]
[ 78.544697][ T5384] ? __die_body+0x8b/0xe0
[ 78.549482][ T5384] ? die+0xa1/0xd0
[ 78.553223][ T5384] ? do_trap+0x153/0x380
[ 78.557566][ T5384] ? __wake_up_klogd+0xcc/0x100
[ 78.562705][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.568364][ T5384] ? do_error_trap+0x1dc/0x2c0
[ 78.573143][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.578832][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 78.584054][ T5384] ? do_int3+0x50/0x50
[ 78.588163][ T5384] ? report_bug+0x3cd/0x500
[ 78.592684][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.598445][ T5384] ? handle_invalid_op+0x34/0x40
[ 78.603396][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.609051][ T5384] ? exc_invalid_op+0x33/0x50
[ 78.613743][ T5384] ? asm_exc_invalid_op+0x1a/0x20
[ 78.618787][ T5384] ? lock_release+0xb0/0x9d0
[ 78.623491][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.629202][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 78.634891][ T5384] delete_from_page_cache_batch+0x173/0xc90
[ 78.640816][ T5384] ? filemap_remove_folio+0x2e0/0x2e0
[ 78.646209][ T5384] ? __kmem_cache_free+0x25f/0x3b0
[ 78.651604][ T5384] ? truncate_cleanup_folio+0x1e0/0x5c0
[ 78.657198][ T5384] ? ifs_free+0x710/0x710
[ 78.661558][ T5384] ? truncate_cleanup_folio+0x2cd/0x5c0
[ 78.667127][ T5384] truncate_inode_pages_range+0x346/0x11a0
[ 78.672970][ T5384] ? lock_acquire+0xe3/0x520
[ 78.677595][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 78.682670][ T5384] ? mapping_evict_folio+0x530/0x530
[ 78.688046][ T5384] ? __rwlock_init+0x150/0x150
[ 78.692927][ T5384] evict+0x2b7/0x620
[ 78.696932][ T5384] evict_inodes+0x5f8/0x690
[ 78.701451][ T5384] ? clear_inode+0x150/0x150
[ 78.706063][ T5384] ? xfs_fs_sync_fs+0x1c0/0x360
[ 78.710934][ T5384] generic_shutdown_super+0x9d/0x2c0
[ 78.716245][ T5384] kill_block_super+0x41/0x70
[ 78.721052][ T5384] xfs_kill_sb+0x15/0x50
[ 78.725313][ T5384] deactivate_locked_super+0xa4/0x110
[ 78.730713][ T5384] cleanup_mnt+0x426/0x4c0
[ 78.735151][ T5384] task_work_run+0x24a/0x300
[ 78.739766][ T5384] ? task_work_cancel+0x2b0/0x2b0
[ 78.744822][ T5384] ? rcu_is_watching+0x15/0xb0
[ 78.749605][ T5384] exit_to_user_mode_loop+0xd9/0x100
[ 78.754907][ T5384] exit_to_user_mode_prepare+0xb1/0x140
[ 78.760470][ T5384] syscall_exit_to_user_mode+0x64/0x280
[ 78.766054][ T5384] do_syscall_64+0x4d/0xc0
[ 78.770756][ T5384] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.776716][ T5384] RIP: 0033:0x7f484f27de17
[ 78.781150][ T5384] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 78.800859][ T5384] RSP: 002b:00007fff133f0098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 78.809381][ T5384] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f484f27de17
[ 78.817639][ T5384] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fff133f0150
[ 78.825634][ T5384] RBP: 00007fff133f0150 R08: 0000000000000000 R09: 0000000000000000
[ 78.833624][ T5384] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff133f1210
[ 78.841642][ T5384] R13: 00007f484f2c73b9 R14: 000000000001281b R15: 0000000000000007
[ 78.849638][ T5384]
[ 78.852670][ T5384] Modules linked in:
[ 78.856585][ T5384] ---[ end trace 0000000000000000 ]---
[ 78.862222][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 78.868494][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 a0 09 13 8b e8 78 a4 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 20 0f 13 8b e8 62 a4 10 00
[ 78.888294][ T5384] RSP: 0018:ffffc90005347778 EFLAGS: 00010046
[ 78.894388][ T5384] RAX: 440f7b842d99ef00 RBX: 0000000000000000 RCX: ffffffff816d2b30
[ 78.903075][ T5384] RDX: 0000000000000000 RSI: ffffffff8b5996c0 RDI: ffffffff8b599680
[ 78.911067][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a68af R09: 1ffffffff1d34d15
[ 78.919060][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34d16 R12: ffffc900053479c0
[ 78.927139][ T5384] R13: ffffea0001943e00 R14: 1ffffd40003287c0 R15: ffffea0001943e08
[ 78.935624][ T5384] FS: 0000555556bf4480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 78.944664][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.951354][ T5384] CR2: 00007f9448ead5a0 CR3: 0000000075eef000 CR4: 00000000003506e0
[ 78.959347][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 78.967610][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 78.975608][ T5384] Kernel panic - not syncing: Fatal exception
[ 78.982085][ T5384] Kernel Offset: disabled
[ 78.986575][ T5384] Rebooting in 86400 seconds..