[ 48.875180][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.894202][ T8] device veth1_macvtap left promiscuous mode [ 48.903689][ T8] device veth0_macvtap left promiscuous mode [ 48.910576][ T8] device veth1_vlan left promiscuous mode [ 48.916643][ T8] device veth0_vlan left promiscuous mode [ 49.044918][ T8] team0 (unregistering): Port device team_slave_1 removed [ 49.057263][ T8] team0 (unregistering): Port device team_slave_0 removed [ 49.071414][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.084589][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.130162][ T8] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.118' (ECDSA) to the list of known hosts. [ 71.161705][ T25] cfg80211: failed to load regulatory.db [ 72.677240][ T5915] page:ffffea0001a9bf80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x204fe pfn:0x6a6fe [ 72.688897][ T5915] memcg:ffff88800fe6c000 [ 72.693196][ T5915] anon flags: 0xfff0000008001d(locked|uptodate|dirty|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 72.704060][ T5915] raw: 00fff0000008001d ffffea0001a9bf48 ffffea0001a9bfc8 ffff888073accf01 [ 72.714142][ T5915] raw: 00000000000204fe 0000000000000000 00000001ffffffff ffff88800fe6c000 [ 72.722986][ T5915] page dumped because: VM_BUG_ON_PAGE(!PageHead(page)) [ 72.729898][ T5915] page_owner tracks the page as allocated [ 72.736185][ T5915] page last allocated via order 0, migratetype Movable, gfp_mask 0x13d20ca(GFP_TRANSHUGE_LIGHT|__GFP_NORETRY|__GFP_THISNODE), pid 5914, ts 72674191010, free_ts 72664789228 [ 72.753652][ T5915] get_page_from_freelist+0xa6f/0x2f10 [ 72.759101][ T5915] __alloc_pages+0x1b2/0x500 [ 72.763699][ T5915] alloc_pages_vma+0x522/0x600 [ 72.768457][ T5915] do_huge_pmd_anonymous_page+0x308/0x1fc0 [ 72.774445][ T5915] __handle_mm_fault+0x1f62/0x3f40 [ 72.779539][ T5915] handle_mm_fault+0x166/0x5e0 [ 72.784431][ T5915] __get_user_pages+0x371/0xa90 [ 72.789291][ T5915] __get_user_pages_remote+0x11e/0x5b0 [ 72.794960][ T5915] process_vm_rw_core.constprop.0+0x314/0x7b0 [ 72.801145][ T5915] process_vm_rw+0x216/0x260 [ 72.805735][ T5915] __x64_sys_process_vm_writev+0xda/0x1b0 [ 72.811569][ T5915] do_syscall_64+0x35/0xb0 [ 72.816048][ T5915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.822144][ T5915] page last free stack trace: [ 72.826892][ T5915] free_pcp_prepare+0x374/0x870 [ 72.831764][ T5915] free_unref_page+0x19/0x690 [ 72.836424][ T5915] release_pages+0x527/0xee0 [ 72.841035][ T5915] tlb_finish_mmu+0x127/0x790 [ 72.845695][ T5915] exit_mmap+0x1d1/0x580 [ 72.849915][ T5915] __mmput+0xed/0x430 [ 72.853895][ T5915] do_exit+0x909/0x2500 [ 72.858116][ T5915] do_group_exit+0xb2/0x2a0 [ 72.862717][ T5915] get_signal+0x3aa/0x2130 [ 72.867120][ T5915] arch_do_signal_or_restart+0x2a9/0x1c40 [ 72.872838][ T5915] exit_to_user_mode_prepare+0x17d/0x290 [ 72.878448][ T5915] syscall_exit_to_user_mode+0x19/0x60 [ 72.883992][ T5915] do_syscall_64+0x42/0xb0 [ 72.888473][ T5915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.894475][ T5915] ------------[ cut here ]------------ [ 72.899937][ T5915] kernel BUG at include/linux/page-flags.h:796! [ 72.906579][ T5915] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 72.912714][ T5915] CPU: 1 PID: 5915 Comm: syz-executor450 Not tainted 5.16.0-syzkaller #0 [ 72.921101][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.931395][ T5915] RIP: 0010:__page_mapcount+0x1fd/0x280 [ 72.936989][ T5915] Code: 5b 44 89 e0 5d 41 5c 41 5d c3 48 c7 c6 00 28 f5 88 48 89 ef e8 44 c0 03 00 0f 0b 48 c7 c6 a0 28 f5 88 48 89 ef e8 33 c0 03 00 <0f> 0b 48 c7 c6 e0 28 f5 88 4c 89 ef e8 22 c0 03 00 0f 0b 4c 89 e7 [ 72.956599][ T5915] RSP: 0018:ffffc90002a9f820 EFLAGS: 00010286 [ 72.962825][ T5915] RAX: 0000000000000000 RBX: 00000000ffffea00 RCX: 0000000000000000 [ 72.970791][ T5915] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888012674faa [ 72.978846][ T5915] RBP: ffffea0001a9bf80 R08: 0000000000000029 R09: ffffc90002a9f3d7 [ 72.987411][ T5915] R10: fffff52000553e7a R11: 0000000000000001 R12: 00000000ffffffff [ 72.995638][ T5915] R13: ffffea0001a9bfd4 R14: 0000000000000000 R15: 0000000000000000 [ 73.003686][ T5915] FS: 00007fa9f06b0700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 73.012865][ T5915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.019449][ T5915] CR2: 00007fa9f0789d93 CR3: 000000001e6ee000 CR4: 00000000003506e0 [ 73.027409][ T5915] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.035450][ T5915] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.043400][ T5915] Call Trace: [ 73.046657][ T5915] [ 73.049568][ T5915] smaps_account+0x225/0x800 [ 73.054262][ T5915] smaps_pte_range+0x412/0xc20 [ 73.059020][ T5915] __walk_page_range+0x621/0x17b0 [ 73.064037][ T5915] walk_page_vma+0x216/0x2d0 [ 73.068622][ T5915] ? walk_page_range_novma+0x1c0/0x1c0 [ 73.074163][ T5915] ? memcpy+0x39/0x60 [ 73.078132][ T5915] ? seq_puts+0x93/0x100 [ 73.082367][ T5915] show_smap+0xaf/0x3d0 [ 73.086519][ T5915] ? smap_gather_stats.part.0+0x290/0x290 [ 73.092328][ T5915] ? find_vma+0x178/0x200 [ 73.096731][ T5915] seq_read_iter+0x98b/0x1040 [ 73.101390][ T5915] seq_read+0x31c/0x4f0 [ 73.105537][ T5915] ? seq_read_iter+0x1040/0x1040 [ 73.110450][ T5915] ? __fdget_pos+0x9c/0xb0 [ 73.114931][ T5915] ? mutex_lock_io_nested+0x1150/0x1150 [ 73.120545][ T5915] ? apparmor_file_permission+0x138/0x450 [ 73.126253][ T5915] ? fsnotify_perm.part.0+0x115/0x4c0 [ 73.131600][ T5915] vfs_read+0x122/0x4c0 [ 73.135768][ T5915] ksys_read+0xf4/0x1d0 [ 73.139995][ T5915] ? vfs_write+0x900/0x900 [ 73.144400][ T5915] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 73.150445][ T5915] ? syscall_enter_from_user_mode+0x21/0x70 [ 73.156317][ T5915] do_syscall_64+0x35/0xb0 [ 73.160708][ T5915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.166595][ T5915] RIP: 0033:0x7fa9f071f959 [ 73.171122][ T5915] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.190799][ T5915] RSP: 002b:00007fa9f06b0288 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 73.199289][ T5915] RAX: ffffffffffffffda RBX: 00007fa9f07a7418 RCX: 00007fa9f071f959 [ 73.207246][ T5915] RDX: 0000000000002025 RSI: 0000000020000100 RDI: 0000000000000003 [ 73.215207][ T5915] RBP: 00007fa9f07a7410 R08: 00007fa9f06b0700 R09: 0000000000000000 [ 73.223389][ T5915] R10: 00007fa9f06b0700 R11: 0000000000000246 R12: 00007fa9f077509c [ 73.231347][ T5915] R13: 00007ffe71c45e9f R14: 00007fa9f06b0400 R15: 0000000000022000 [ 73.239405][ T5915] [ 73.242407][ T5915] Modules linked in: [ 73.246310][ T5915] ---[ end trace 0000000000000000 ]--- [ 73.252016][ T5915] RIP: 0010:__page_mapcount+0x1fd/0x280 [ 73.257554][ T5915] Code: 5b 44 89 e0 5d 41 5c 41 5d c3 48 c7 c6 00 28 f5 88 48 89 ef e8 44 c0 03 00 0f 0b 48 c7 c6 a0 28 f5 88 48 89 ef e8 33 c0 03 00 <0f> 0b 48 c7 c6 e0 28 f5 88 4c 89 ef e8 22 c0 03 00 0f 0b 4c 89 e7 [ 73.277265][ T5915] RSP: 0018:ffffc90002a9f820 EFLAGS: 00010286 [ 73.283440][ T5915] RAX: 0000000000000000 RBX: 00000000ffffea00 RCX: 0000000000000000 [ 73.291407][ T5915] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888012674faa [ 73.299444][ T5915] RBP: ffffea0001a9bf80 R08: 0000000000000029 R09: ffffc90002a9f3d7 [ 73.307407][ T5915] R10: fffff52000553e7a R11: 0000000000000001 R12: 00000000ffffffff [ 73.315470][ T5915] R13: ffffea0001a9bfd4 R14: 0000000000000000 R15: 0000000000000000 [ 73.323614][ T5915] FS: 00007fa9f06b0700(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 73.332565][ T5915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.339146][ T5915] CR2: 00007fa9f0789d93 CR3: 000000001e6ee000 CR4: 00000000003506e0 [ 73.347164][ T5915] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.355679][ T5915] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.363656][ T5915] Kernel panic - not syncing: Fatal exception [ 73.370124][ T5915] Kernel Offset: disabled [ 73.374433][ T5915] Rebooting in 86400 seconds..