Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts.
2023/09/10 04:25:22 ignoring optional flag "sandboxArg"="0"
2023/09/10 04:25:22 parsed 1 programs
2023/09/10 04:25:24 executed programs: 0
[ 75.931033][ T5377] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 75.942554][ T5372] syz-execprog[5372]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 75.952493][ T5372] syz-execprog[5372]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 75.993926][ T4435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 76.001179][ T4435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 76.008567][ T4435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 76.016600][ T4435] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 76.024423][ T4435] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 76.031868][ T4435] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 76.121861][ T5384] chnl_net:caif_netlink_parms(): no params data found
[ 76.163373][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.170629][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.178233][ T5384] bridge_slave_0: entered allmulticast mode
[ 76.184904][ T5384] bridge_slave_0: entered promiscuous mode
[ 76.192437][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.199625][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.206721][ T5384] bridge_slave_1: entered allmulticast mode
[ 76.213962][ T5384] bridge_slave_1: entered promiscuous mode
[ 76.233674][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.244979][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.268436][ T5384] team0: Port device team_slave_0 added
[ 76.275664][ T5384] team0: Port device team_slave_1 added
[ 76.294865][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.302044][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.328912][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.340796][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.348129][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.374746][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.405521][ T5384] hsr_slave_0: entered promiscuous mode
[ 76.411560][ T5384] hsr_slave_1: entered promiscuous mode
[ 76.747819][ T1152] cfg80211: failed to load regulatory.db
[ 76.938373][ T5384] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.949275][ T5384] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 76.960223][ T5384] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 76.971368][ T5384] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 76.998606][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.005760][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.013515][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.020813][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.082385][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.099316][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.106958][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.126939][ T5384] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.139537][ T4770] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.146763][ T4770] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.179500][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.186644][ T4770] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.210257][ T5384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 77.338707][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.384154][ T5384] veth0_vlan: entered promiscuous mode
[ 77.395901][ T5384] veth1_vlan: entered promiscuous mode
[ 77.426015][ T5384] veth0_macvtap: entered promiscuous mode
[ 77.436330][ T5384] veth1_macvtap: entered promiscuous mode
[ 77.456778][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.473025][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.485733][ T5384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.495759][ T5384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.507091][ T5384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.518061][ T5384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.583919][ T4770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.599987][ T4770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.630792][ T23] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.639815][ T23] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.694481][ T5452] syz-executor.0[5452]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 77.934592][ T5452] loop0: detected capacity change from 0 to 32768
[ 77.946881][ T5452] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 77.987708][ T5452] XFS (loop0): Ending clean mount
[ 77.994789][ T5452] XFS (loop0): Quotacheck needed: Please wait.
[ 78.012437][ T5452] XFS (loop0): Quotacheck: Done.
[ 78.041844][ T28] audit: type=1804 audit(1694319926.138:2): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir702814952/syzkaller.yVS6qa/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 78.110131][ T5032] Bluetooth: hci0: command 0x0409 tx timeout
[ 78.119449][ T28] audit: type=1804 audit(1694319926.138:3): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir702814952/syzkaller.yVS6qa/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 78.203136][ T5451] BUG: Bad page map in process syz-executor.0 pte:fffff9a870120 pmd:7e5a4067
[ 78.212356][ T5451] page:ffffea000195e3c0 refcount:9 mapcount:-1 mapping:ffff888075a15190 index:0x3 pfn:0x6578f
[ 78.223292][ T5451] head:ffffea000195e300 order:2 entire_mapcount:0 nr_pages_mapped:8388607 pincount:0
[ 78.233706][ T5451] memcg:ffff888078e4c000
[ 78.238583][ T5451] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 78.246901][ T5451] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.258245][ T5451] page_type: 0xffffffff()
[ 78.263621][ T5451] raw: 00fff00000000000 ffffea000195e301 dead000000000122 dead000000000400
[ 78.273224][ T5451] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 78.282291][ T5451] head: 00fff0000000816c ffffea0001c96d48 ffff888028d06030 ffff888075a15190
[ 78.291246][ T5451] head: 0000000000000000 ffff888024430680 00000009ffffffff ffff888078e4c000
[ 78.300151][ T5451] page dumped because: bad pte
[ 78.305204][ T5451] page_owner tracks the page as allocated
[ 78.311107][ T5451] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 78041218379, free_ts 14540162808
[ 78.335747][ T5451] post_alloc_hook+0x1e6/0x210
[ 78.340585][ T5451] get_page_from_freelist+0x31ec/0x3370
[ 78.346762][ T5451] __alloc_pages+0x255/0x670
[ 78.351808][ T5451] folio_alloc+0x1e/0x60
[ 78.357340][ T5451] filemap_alloc_folio+0xde/0x500
[ 78.362584][ T5451] page_cache_ra_order+0x423/0xcc0
[ 78.368263][ T5451] do_sync_mmap_readahead+0x444/0x850
[ 78.374280][ T5451] filemap_fault+0x7d3/0x1710
[ 78.379119][ T5451] __xfs_filemap_fault+0x286/0x960
[ 78.384959][ T5451] __do_fault+0x133/0x4e0
[ 78.390254][ T5451] handle_mm_fault+0x48d2/0x6200
[ 78.395461][ T5451] __get_user_pages+0x6bd/0x15e0
[ 78.400554][ T5451] get_dump_page+0x146/0x2b0
[ 78.405278][ T5451] dump_user_range+0x126/0x910
[ 78.410294][ T5451] elf_core_dump+0x3b75/0x4490
[ 78.415377][ T5451] do_coredump+0x1b73/0x2ab0
[ 78.420149][ T5451] page last free stack trace:
[ 78.425413][ T5451] free_unref_page_prepare+0x8c3/0x9f0
[ 78.431242][ T5451] free_unref_page+0x37/0x3f0
[ 78.436477][ T5451] free_contig_range+0x9e/0x150
[ 78.441659][ T5451] destroy_args+0x95/0x7c0
[ 78.446362][ T5451] debug_vm_pgtable+0x4ac/0x540
[ 78.451473][ T5451] do_one_initcall+0x23d/0x7d0
[ 78.456265][ T5451] do_initcall_level+0x157/0x210
[ 78.461271][ T5451] do_initcalls+0x3f/0x80
[ 78.465615][ T5451] kernel_init_freeable+0x440/0x5d0
[ 78.471224][ T5451] kernel_init+0x1d/0x2a0
[ 78.475577][ T5451] ret_from_fork+0x48/0x80
[ 78.480230][ T5451] ret_from_fork_asm+0x11/0x20
[ 78.485031][ T5451] addr:0000000020006000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888075a15190 index:5
[ 78.496269][ T5451] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 78.506031][ T5451] CPU: 1 PID: 5451 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 78.516717][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 78.527001][ T5451] Call Trace:
[ 78.530299][ T5451]
[ 78.533333][ T5451] dump_stack_lvl+0x1e7/0x2d0
[ 78.538640][ T5451] ? nf_tcp_handle_invalid+0x650/0x650
[ 78.544292][ T5451] ? panic+0x770/0x770
[ 78.548402][ T5451] ? lock_release+0xb0/0x9d0
[ 78.553021][ T5451] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 78.558621][ T5451] ? xfs_file_write_iter+0x620/0x620
[ 78.563956][ T5451] print_bad_pte+0x581/0x5c0
[ 78.568578][ T5451] unmap_page_range+0x1a76/0x3300
[ 78.573643][ T5451] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 78.580346][ T5451] ? __might_sleep+0xc0/0xc0
[ 78.584963][ T5451] ? uprobe_munmap+0x183/0x410
[ 78.589757][ T5451] ? unmap_single_vma+0x1b9/0x2a0
[ 78.595134][ T5451] unmap_vmas+0x209/0x3a0
[ 78.599460][ T5451] ? unmap_page_range+0x3300/0x3300
[ 78.604861][ T5451] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 78.610415][ T5451] exit_mmap+0x297/0xc50
[ 78.614823][ T5451] ? vm_brk+0x30/0x30
[ 78.619034][ T5451] ? __asan_memset+0x23/0x40
[ 78.623623][ T5451] ? uprobe_clear_state+0x275/0x290
[ 78.629002][ T5451] ? mm_update_next_owner+0x4a3/0x520
[ 78.634626][ T5451] __mmput+0x115/0x3c0
[ 78.638792][ T5451] exit_mm+0x21f/0x300
[ 78.642912][ T5451] ? coredump_task_exit+0x460/0x460
[ 78.648194][ T5451] ? taskstats_exit+0x39d/0x920
[ 78.653213][ T5451] ? tty_audit_exit+0x154/0x1f0
[ 78.658162][ T5451] do_exit+0x612/0x2290
[ 78.662490][ T5451] ? lock_release+0xbf/0x9d0
[ 78.667073][ T5451] ? put_task_struct+0xc0/0xc0
[ 78.671917][ T5451] ? __lock_acquire+0x7f70/0x7f70
[ 78.677205][ T5451] ? print_irqtrace_events+0x220/0x220
[ 78.683003][ T5451] ? _raw_spin_lock_irq+0xdf/0x120
[ 78.688307][ T5451] do_group_exit+0x206/0x2c0
[ 78.693153][ T5451] get_signal+0x175d/0x1840
[ 78.697777][ T5451] ? ktime_get+0x83/0x270
[ 78.702231][ T5451] ? ptrace_notify+0x380/0x380
[ 78.707068][ T5451] ? do_futex+0x331/0x530
[ 78.711651][ T5451] arch_do_signal_or_restart+0x96/0x860
[ 78.717383][ T5451] ? get_sigframe_size+0x20/0x20
[ 78.722486][ T5451] ? ktime_get+0x246/0x270
[ 78.726889][ T5451] ? rcu_is_watching+0x15/0xb0
[ 78.731649][ T5451] exit_to_user_mode_loop+0x6a/0x100
[ 78.736932][ T5451] exit_to_user_mode_prepare+0xb1/0x140
[ 78.742553][ T5451] syscall_exit_to_user_mode+0x64/0x280
[ 78.748102][ T5451] do_syscall_64+0x4d/0xc0
[ 78.753417][ T5451] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.759582][ T5451] RIP: 0033:0x7fad9507cae9
[ 78.764084][ T5451] Code: Unable to access opcode bytes at 0x7fad9507cabf.
[ 78.771198][ T5451] RSP: 002b:00007fff19e93398 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 78.779962][ T5451] RAX: fffffffffffffdfc RBX: 00000000000130aa RCX: 00007fad9507cae9
[ 78.788032][ T5451] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad9519bf8c
[ 78.796436][ T5451] RBP: 0000000000000032 R08: 00007fad9519bf8c R09: 00007fad9519bf8c
[ 78.804838][ T5451] R10: 00007fff19e934d0 R11: 0000000000000246 R12: 00007fad9519bf8c
[ 78.812798][ T5451] R13: 00000000000130dc R14: 00007fff19e934f0 R15: 00007fff19e934d0
[ 78.821203][ T5451]
[ 78.853659][ T5451] BUG: Bad page map in process syz-executor.0 pte:fffff9a871120 pmd:7e5a4067
[ 78.863854][ T5451] page:ffffea000195e380 refcount:9 mapcount:-1 mapping:ffff888075a15190 index:0x2 pfn:0x6578e
[ 78.876068][ T5451] head:ffffea000195e300 order:2 entire_mapcount:0 nr_pages_mapped:8388606 pincount:0
[ 78.886925][ T5451] memcg:ffff888078e4c000
[ 78.891415][ T5451] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 78.899645][ T5451] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 78.911018][ T5451] page_type: 0xffffffff()
[ 78.915456][ T5451] raw: 00fff00000000000 ffffea000195e301 ffffea000195e390 ffffea000195e390
[ 78.924383][ T5451] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 78.933318][ T5451] head: 00fff0000000816c ffffea0001c96d48 ffff888028d06030 ffff888075a15190
[ 78.943467][ T5451] head: 0000000000000000 ffff888024430680 00000009ffffffff ffff888078e4c000
[ 78.952533][ T5451] page dumped because: bad pte
[ 78.957540][ T5451] page_owner tracks the page as allocated
[ 78.963455][ T5451] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 78041218379, free_ts 14540156810
[ 78.987827][ T5451] post_alloc_hook+0x1e6/0x210
[ 78.992778][ T5451] get_page_from_freelist+0x31ec/0x3370
[ 78.998834][ T5451] __alloc_pages+0x255/0x670
[ 79.003634][ T5451] folio_alloc+0x1e/0x60
[ 79.007965][ T5451] filemap_alloc_folio+0xde/0x500
[ 79.013096][ T5451] page_cache_ra_order+0x423/0xcc0
[ 79.018268][ T5451] do_sync_mmap_readahead+0x444/0x850
[ 79.024010][ T5451] filemap_fault+0x7d3/0x1710
[ 79.028750][ T5451] __xfs_filemap_fault+0x286/0x960
[ 79.033974][ T5451] __do_fault+0x133/0x4e0
[ 79.038453][ T5451] handle_mm_fault+0x48d2/0x6200
[ 79.043493][ T5451] __get_user_pages+0x6bd/0x15e0
[ 79.048891][ T5451] get_dump_page+0x146/0x2b0
[ 79.053511][ T5451] dump_user_range+0x126/0x910
[ 79.058364][ T5451] elf_core_dump+0x3b75/0x4490
[ 79.063243][ T5451] do_coredump+0x1b73/0x2ab0
[ 79.068045][ T5451] page last free stack trace:
[ 79.072827][ T5451] free_unref_page_prepare+0x8c3/0x9f0
[ 79.078450][ T5451] free_unref_page+0x37/0x3f0
[ 79.083529][ T5451] free_contig_range+0x9e/0x150
[ 79.088584][ T5451] destroy_args+0x95/0x7c0
[ 79.093117][ T5451] debug_vm_pgtable+0x4ac/0x540
[ 79.098227][ T5451] do_one_initcall+0x23d/0x7d0
[ 79.103046][ T5451] do_initcall_level+0x157/0x210
[ 79.108336][ T5451] do_initcalls+0x3f/0x80
[ 79.112782][ T5451] kernel_init_freeable+0x440/0x5d0
[ 79.118215][ T5451] kernel_init+0x1d/0x2a0
[ 79.122688][ T5451] ret_from_fork+0x48/0x80
[ 79.127217][ T5451] ret_from_fork_asm+0x11/0x20
[ 79.132138][ T5451] addr:0000000020007000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888075a15190 index:6
[ 79.144633][ T5451] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 79.154306][ T5451] CPU: 1 PID: 5451 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 79.166646][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 79.177473][ T5451] Call Trace:
[ 79.180860][ T5451]
[ 79.183879][ T5451] dump_stack_lvl+0x1e7/0x2d0
[ 79.188555][ T5451] ? nf_tcp_handle_invalid+0x650/0x650
[ 79.194611][ T5451] ? panic+0x770/0x770
[ 79.198675][ T5451] ? dump_page+0x9c2/0x1090
[ 79.203169][ T5451] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 79.208715][ T5451] ? xfs_file_write_iter+0x620/0x620
[ 79.214254][ T5451] print_bad_pte+0x581/0x5c0
[ 79.222053][ T5451] unmap_page_range+0x1a76/0x3300
[ 79.227441][ T5451] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 79.234801][ T5451] ? __might_sleep+0xc0/0xc0
[ 79.239478][ T5451] ? uprobe_munmap+0x183/0x410
[ 79.244238][ T5451] ? unmap_single_vma+0x1b9/0x2a0
[ 79.249309][ T5451] unmap_vmas+0x209/0x3a0
[ 79.253630][ T5451] ? unmap_page_range+0x3300/0x3300
[ 79.258820][ T5451] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 79.264299][ T5451] exit_mmap+0x297/0xc50
[ 79.268979][ T5451] ? vm_brk+0x30/0x30
[ 79.273041][ T5451] ? __asan_memset+0x23/0x40
[ 79.277810][ T5451] ? uprobe_clear_state+0x275/0x290
[ 79.283284][ T5451] ? mm_update_next_owner+0x4a3/0x520
[ 79.288740][ T5451] __mmput+0x115/0x3c0
[ 79.292888][ T5451] exit_mm+0x21f/0x300
[ 79.297047][ T5451] ? coredump_task_exit+0x460/0x460
[ 79.302765][ T5451] ? taskstats_exit+0x39d/0x920
[ 79.307705][ T5451] ? tty_audit_exit+0x154/0x1f0
[ 79.312989][ T5451] do_exit+0x612/0x2290
[ 79.317242][ T5451] ? lock_release+0xbf/0x9d0
[ 79.321916][ T5451] ? put_task_struct+0xc0/0xc0
[ 79.326758][ T5451] ? __lock_acquire+0x7f70/0x7f70
[ 79.331776][ T5451] ? print_irqtrace_events+0x220/0x220
[ 79.337400][ T5451] ? _raw_spin_lock_irq+0xdf/0x120
[ 79.342500][ T5451] do_group_exit+0x206/0x2c0
[ 79.347166][ T5451] get_signal+0x175d/0x1840
[ 79.351665][ T5451] ? ktime_get+0x83/0x270
[ 79.356154][ T5451] ? ptrace_notify+0x380/0x380
[ 79.360994][ T5451] ? do_futex+0x331/0x530
[ 79.365317][ T5451] arch_do_signal_or_restart+0x96/0x860
[ 79.371037][ T5451] ? get_sigframe_size+0x20/0x20
[ 79.376022][ T5451] ? ktime_get+0x246/0x270
[ 79.380532][ T5451] ? rcu_is_watching+0x15/0xb0
[ 79.385399][ T5451] exit_to_user_mode_loop+0x6a/0x100
[ 79.390701][ T5451] exit_to_user_mode_prepare+0xb1/0x140
[ 79.396412][ T5451] syscall_exit_to_user_mode+0x64/0x280
[ 79.402129][ T5451] do_syscall_64+0x4d/0xc0
[ 79.406546][ T5451] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.412433][ T5451] RIP: 0033:0x7fad9507cae9
[ 79.417358][ T5451] Code: Unable to access opcode bytes at 0x7fad9507cabf.
[ 79.424379][ T5451] RSP: 002b:00007fff19e93398 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 79.432796][ T5451] RAX: fffffffffffffdfc RBX: 00000000000130aa RCX: 00007fad9507cae9
[ 79.440954][ T5451] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad9519bf8c
[ 79.449134][ T5451] RBP: 0000000000000032 R08: 00007fad9519bf8c R09: 00007fad9519bf8c
[ 79.457266][ T5451] R10: 00007fff19e934d0 R11: 0000000000000246 R12: 00007fad9519bf8c
[ 79.465276][ T5451] R13: 00000000000130dc R14: 00007fff19e934f0 R15: 00007fff19e934d0
[ 79.473436][ T5451]
[ 79.478372][ T5451] BUG: Bad page map in process syz-executor.0 pte:fffff9a872120 pmd:7e5a4067
[ 79.487565][ T5451] page:ffffea000195e340 refcount:9 mapcount:-1 mapping:ffff888075a15190 index:0x1 pfn:0x6578d
[ 79.498080][ T5451] head:ffffea000195e300 order:2 entire_mapcount:0 nr_pages_mapped:8388605 pincount:0
[ 79.507951][ T5451] memcg:ffff888078e4c000
[ 79.512476][ T5451] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 79.520114][ T5451] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 79.531975][ T5451] page_type: 0xffffffff()
[ 79.536515][ T5451] raw: 00fff00000000202 ffffea000195e301 dead000000000122 fffffffdffffffff
[ 79.546145][ T5451] raw: 0000000400000000 0000000000000000 00000000fffffffe 0000000000000000
[ 79.556171][ T5451] head: 00fff0000000816c ffffea0001c96d48 ffff888028d06030 ffff888075a15190
[ 79.565226][ T5451] head: 0000000000000000 ffff888024430680 00000009ffffffff ffff888078e4c000
[ 79.575320][ T5451] page dumped because: bad pte
[ 79.580499][ T5451] page_owner tracks the page as allocated
[ 79.586228][ T5451] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 78041218379, free_ts 14540150873
[ 79.610571][ T5451] post_alloc_hook+0x1e6/0x210
[ 79.615727][ T5451] get_page_from_freelist+0x31ec/0x3370
[ 79.621691][ T5451] __alloc_pages+0x255/0x670
[ 79.626349][ T5451] folio_alloc+0x1e/0x60
[ 79.631000][ T5451] filemap_alloc_folio+0xde/0x500
[ 79.636090][ T5451] page_cache_ra_order+0x423/0xcc0
[ 79.641844][ T5451] do_sync_mmap_readahead+0x444/0x850
[ 79.647973][ T5451] filemap_fault+0x7d3/0x1710
[ 79.652673][ T5451] __xfs_filemap_fault+0x286/0x960
[ 79.658239][ T5451] __do_fault+0x133/0x4e0
[ 79.662679][ T5451] handle_mm_fault+0x48d2/0x6200
[ 79.668276][ T5451] __get_user_pages+0x6bd/0x15e0
[ 79.673684][ T5451] get_dump_page+0x146/0x2b0
[ 79.678656][ T5451] dump_user_range+0x126/0x910
[ 79.683620][ T5451] elf_core_dump+0x3b75/0x4490
[ 79.689602][ T5451] do_coredump+0x1b73/0x2ab0
[ 79.694319][ T5451] page last free stack trace:
[ 79.699363][ T5451] free_unref_page_prepare+0x8c3/0x9f0
[ 79.704943][ T5451] free_unref_page+0x37/0x3f0
[ 79.710141][ T5451] free_contig_range+0x9e/0x150
[ 79.715020][ T5451] destroy_args+0x95/0x7c0
[ 79.719959][ T5451] debug_vm_pgtable+0x4ac/0x540
[ 79.724833][ T5451] do_one_initcall+0x23d/0x7d0
[ 79.730455][ T5451] do_initcall_level+0x157/0x210
[ 79.735522][ T5451] do_initcalls+0x3f/0x80
[ 79.740270][ T5451] kernel_init_freeable+0x440/0x5d0
[ 79.745852][ T5451] kernel_init+0x1d/0x2a0
[ 79.750508][ T5451] ret_from_fork+0x48/0x80
[ 79.755303][ T5451] ret_from_fork_asm+0x11/0x20
[ 79.760757][ T5451] addr:0000000020008000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888075a15190 index:7
[ 79.772633][ T5451] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 79.782387][ T5451] CPU: 0 PID: 5451 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 79.794382][ T5451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 79.804728][ T5451] Call Trace:
[ 79.808411][ T5451]
[ 79.811362][ T5451] dump_stack_lvl+0x1e7/0x2d0
[ 79.816071][ T5451] ? nf_tcp_handle_invalid+0x650/0x650
[ 79.821562][ T5451] ? panic+0x770/0x770
[ 79.825663][ T5451] ? dump_page+0x9c2/0x1090
[ 79.830191][ T5451] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 79.835580][ T5451] ? xfs_file_write_iter+0x620/0x620
[ 79.840882][ T5451] print_bad_pte+0x581/0x5c0
[ 79.847954][ T5451] unmap_page_range+0x1a76/0x3300
[ 79.853025][ T5451] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 79.861351][ T5451] ? __might_sleep+0xc0/0xc0
[ 79.865957][ T5451] ? uprobe_munmap+0x183/0x410
[ 79.870842][ T5451] ? unmap_single_vma+0x1b9/0x2a0
[ 79.876124][ T5451] unmap_vmas+0x209/0x3a0
[ 79.880748][ T5451] ? unmap_page_range+0x3300/0x3300
[ 79.886047][ T5451] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 79.891874][ T5451] exit_mmap+0x297/0xc50
[ 79.896225][ T5451] ? vm_brk+0x30/0x30
[ 79.900501][ T5451] ? __asan_memset+0x23/0x40
[ 79.905233][ T5451] ? uprobe_clear_state+0x275/0x290
[ 79.910431][ T5451] ? mm_update_next_owner+0x4a3/0x520
[ 79.915840][ T5451] __mmput+0x115/0x3c0
[ 79.920188][ T5451] exit_mm+0x21f/0x300
[ 79.924435][ T5451] ? coredump_task_exit+0x460/0x460
[ 79.929646][ T5451] ? taskstats_exit+0x39d/0x920
[ 79.934767][ T5451] ? tty_audit_exit+0x154/0x1f0
[ 79.940222][ T5451] do_exit+0x612/0x2290
[ 79.944399][ T5451] ? lock_release+0xbf/0x9d0
[ 79.949415][ T5451] ? put_task_struct+0xc0/0xc0
[ 79.954261][ T5451] ? __lock_acquire+0x7f70/0x7f70
[ 79.959291][ T5451] ? print_irqtrace_events+0x220/0x220
[ 79.964752][ T5451] ? _raw_spin_lock_irq+0xdf/0x120
[ 79.969953][ T5451] do_group_exit+0x206/0x2c0
[ 79.974541][ T5451] get_signal+0x175d/0x1840
[ 79.979209][ T5451] ? ktime_get+0x83/0x270
[ 79.983708][ T5451] ? ptrace_notify+0x380/0x380
[ 79.988635][ T5451] ? do_futex+0x331/0x530
[ 79.993046][ T5451] arch_do_signal_or_restart+0x96/0x860
[ 79.998681][ T5451] ? get_sigframe_size+0x20/0x20
[ 80.003635][ T5451] ? ktime_get+0x246/0x270
[ 80.008129][ T5451] ? rcu_is_watching+0x15/0xb0
[ 80.012880][ T5451] exit_to_user_mode_loop+0x6a/0x100
[ 80.018327][ T5451] exit_to_user_mode_prepare+0xb1/0x140
[ 80.023860][ T5451] syscall_exit_to_user_mode+0x64/0x280
[ 80.029400][ T5451] do_syscall_64+0x4d/0xc0
[ 80.033806][ T5451] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.039712][ T5451] RIP: 0033:0x7fad9507cae9
[ 80.044252][ T5451] Code: Unable to access opcode bytes at 0x7fad9507cabf.
[ 80.051353][ T5451] RSP: 002b:00007fff19e93398 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 80.059762][ T5451] RAX: fffffffffffffdfc RBX: 00000000000130aa RCX: 00007fad9507cae9
[ 80.067867][ T5451] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad9519bf8c
[ 80.075990][ T5451] RBP: 0000000000000032 R08: 00007fad9519bf8c R09: 00007fad9519bf8c
[ 80.084124][ T5451] R10: 00007fff19e934d0 R11: 0000000000000246 R12: 00007fad9519bf8c
[ 80.092083][ T5451] R13: 00000000000130dc R14: 00007fff19e934f0 R15: 00007fff19e934d0
[ 80.100143][ T5451]
[ 80.159756][ T5384] page:ffffea000195e400 refcount:7 mapcount:0 mapping:ffff888075a15190 index:0x4 pfn:0x65790
[ 80.170039][ T5384] head:ffffea000195e400 order:2 entire_mapcount:0 nr_pages_mapped:2 pincount:0
[ 80.179163][ T5384] memcg:ffff888078e4c000
[ 80.183509][ T5384] aops:xfs_address_space_operations ino:244a
[ 80.189693][ T5384] flags: 0xfff00000000169(locked|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff)
[ 80.199683][ T5384] page_type: 0xffffffff()
[ 80.204030][ T5384] raw: 00fff00000000169 ffffea000195e308 ffff888028d06030 ffff888075a15190
[ 80.212719][ T5384] raw: 0000000000000004 0000000000000000 00000007ffffffff ffff888078e4c000
[ 80.218337][ T5032] Bluetooth: hci0: command 0x041b tx timeout
[ 80.221302][ T5384] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[ 80.221312][ T5384] page_owner tracks the page as allocated
[ 80.240318][ T5384] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5452, tgid 5451 (syz-executor.0), ts 78041275840, free_ts 14540168740
[ 80.263667][ T5384] post_alloc_hook+0x1e6/0x210
[ 80.268514][ T5384] get_page_from_freelist+0x31ec/0x3370
[ 80.274055][ T5384] __alloc_pages+0x255/0x670
[ 80.278627][ T5384] folio_alloc+0x1e/0x60
[ 80.282953][ T5384] filemap_alloc_folio+0xde/0x500
[ 80.288179][ T5384] page_cache_ra_order+0x423/0xcc0
[ 80.293559][ T5384] do_sync_mmap_readahead+0x444/0x850
[ 80.298940][ T5384] filemap_fault+0x7d3/0x1710
[ 80.303696][ T5384] __xfs_filemap_fault+0x286/0x960
[ 80.308979][ T5384] __do_fault+0x133/0x4e0
[ 80.313312][ T5384] handle_mm_fault+0x48d2/0x6200
[ 80.318424][ T5384] __get_user_pages+0x6bd/0x15e0
[ 80.323369][ T5384] get_dump_page+0x146/0x2b0
[ 80.327950][ T5384] dump_user_range+0x126/0x910
[ 80.332894][ T5384] elf_core_dump+0x3b75/0x4490
[ 80.337661][ T5384] do_coredump+0x1b73/0x2ab0
[ 80.342251][ T5384] page last free stack trace:
[ 80.346908][ T5384] free_unref_page_prepare+0x8c3/0x9f0
[ 80.352409][ T5384] free_unref_page+0x37/0x3f0
[ 80.357208][ T5384] free_contig_range+0x9e/0x150
[ 80.362150][ T5384] destroy_args+0x95/0x7c0
[ 80.366821][ T5384] debug_vm_pgtable+0x4ac/0x540
[ 80.371748][ T5384] do_one_initcall+0x23d/0x7d0
[ 80.376524][ T5384] do_initcall_level+0x157/0x210
[ 80.381446][ T5384] do_initcalls+0x3f/0x80
[ 80.385759][ T5384] kernel_init_freeable+0x440/0x5d0
[ 80.391027][ T5384] kernel_init+0x1d/0x2a0
[ 80.395511][ T5384] ret_from_fork+0x48/0x80
[ 80.399914][ T5384] ret_from_fork_asm+0x11/0x20
[ 80.404746][ T5384] ------------[ cut here ]------------
[ 80.411230][ T5384] kernel BUG at mm/filemap.c:158!
[ 80.416348][ T5384] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 80.422740][ T5384] CPU: 0 PID: 5384 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0
[ 80.434706][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 80.445558][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 80.452072][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 e0 0a 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 60 10 13 8b e8 62 a4 10 00
[ 80.472455][ T5384] RSP: 0018:ffffc90005107778 EFLAGS: 00010046
[ 80.478511][ T5384] RAX: 34880199968b6a00 RBX: 0000000000000000 RCX: ffffffff816d1d70
[ 80.486579][ T5384] RDX: 0000000000000000 RSI: ffffffff8b597480 RDI: ffffffff8b597440
[ 80.495581][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a39af R09: 1ffffffff1d34735
[ 80.503630][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34736 R12: ffffc900051079c0
[ 80.511770][ T5384] R13: ffffea000195e400 R14: 1ffffd400032bc80 R15: ffffea000195e408
[ 80.519757][ T5384] FS: 00005555574fc480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 80.529047][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.535721][ T5384] CR2: 00007efee93dd270 CR3: 000000001bad5000 CR4: 00000000003506f0
[ 80.544212][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 80.552723][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 80.560783][ T5384] Call Trace:
[ 80.564050][ T5384]
[ 80.566985][ T5384] ? __die_body+0x8b/0xe0
[ 80.571311][ T5384] ? die+0xa1/0xd0
[ 80.575287][ T5384] ? do_trap+0x153/0x380
[ 80.579538][ T5384] ? __wake_up_klogd+0xcc/0x100
[ 80.584462][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 80.590097][ T5384] ? do_error_trap+0x1dc/0x2c0
[ 80.595170][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 80.601187][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 80.606215][ T5384] ? do_int3+0x50/0x50
[ 80.610295][ T5384] ? report_bug+0x3cd/0x500
[ 80.614988][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 80.622641][ T5384] ? handle_invalid_op+0x34/0x40
[ 80.627584][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 80.633240][ T5384] ? exc_invalid_op+0x33/0x50
[ 80.638170][ T5384] ? asm_exc_invalid_op+0x1a/0x20
[ 80.643276][ T5384] ? lock_release+0xb0/0x9d0
[ 80.647971][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 80.653772][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 80.659481][ T5384] delete_from_page_cache_batch+0x173/0xc90
[ 80.665801][ T5384] ? filemap_remove_folio+0x2e0/0x2e0
[ 80.671432][ T5384] ? __kmem_cache_free+0x25f/0x3b0
[ 80.676801][ T5384] ? truncate_cleanup_folio+0x1e0/0x5c0
[ 80.682526][ T5384] ? ifs_free+0x710/0x710
[ 80.686850][ T5384] ? truncate_cleanup_folio+0x2cd/0x5c0
[ 80.692472][ T5384] truncate_inode_pages_range+0x346/0x11a0
[ 80.698273][ T5384] ? lock_acquire+0xe3/0x520
[ 80.702969][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 80.708072][ T5384] ? mapping_evict_folio+0x530/0x530
[ 80.713438][ T5384] ? __rwlock_init+0x150/0x150
[ 80.718211][ T5384] evict+0x2b7/0x620
[ 80.722104][ T5384] evict_inodes+0x5f8/0x690
[ 80.726596][ T5384] ? clear_inode+0x150/0x150
[ 80.731181][ T5384] ? xfs_fs_sync_fs+0x1c0/0x360
[ 80.736023][ T5384] generic_shutdown_super+0x9d/0x2c0
[ 80.741342][ T5384] kill_block_super+0x41/0x70
[ 80.746184][ T5384] xfs_kill_sb+0x15/0x50
[ 80.750507][ T5384] deactivate_locked_super+0xa4/0x110
[ 80.755955][ T5384] cleanup_mnt+0x426/0x4c0
[ 80.760374][ T5384] task_work_run+0x24a/0x300
[ 80.765070][ T5384] ? task_work_cancel+0x2b0/0x2b0
[ 80.770339][ T5384] ? rcu_is_watching+0x15/0xb0
[ 80.775091][ T5384] exit_to_user_mode_loop+0xd9/0x100
[ 80.780476][ T5384] exit_to_user_mode_prepare+0xb1/0x140
[ 80.786096][ T5384] syscall_exit_to_user_mode+0x64/0x280
[ 80.791645][ T5384] do_syscall_64+0x4d/0xc0
[ 80.796137][ T5384] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.802195][ T5384] RIP: 0033:0x7fad9507de17
[ 80.806718][ T5384] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 80.826424][ T5384] RSP: 002b:00007fff19e924d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 80.834835][ T5384] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fad9507de17
[ 80.844460][ T5384] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fff19e92590
[ 80.852695][ T5384] RBP: 00007fff19e92590 R08: 0000000000000000 R09: 0000000000000000
[ 80.861448][ T5384] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff19e93650
[ 80.869439][ T5384] R13: 00007fad950c73b9 R14: 0000000000012f54 R15: 0000000000000007
[ 80.877490][ T5384]
[ 80.880826][ T5384] Modules linked in:
[ 80.884711][ T5384] ---[ end trace 0000000000000000 ]---
[ 80.890233][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 80.896551][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 e0 0a 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 60 10 13 8b e8 62 a4 10 00
[ 80.916489][ T5384] RSP: 0018:ffffc90005107778 EFLAGS: 00010046
[ 80.922646][ T5384] RAX: 34880199968b6a00 RBX: 0000000000000000 RCX: ffffffff816d1d70
[ 80.930694][ T5384] RDX: 0000000000000000 RSI: ffffffff8b597480 RDI: ffffffff8b597440
[ 80.939525][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a39af R09: 1ffffffff1d34735
[ 80.947496][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34736 R12: ffffc900051079c0
[ 80.955754][ T5384] R13: ffffea000195e400 R14: 1ffffd400032bc80 R15: ffffea000195e408
[ 80.964320][ T5384] FS: 00005555574fc480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 80.973240][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.979808][ T5384] CR2: 00007efee93dd270 CR3: 000000001bad5000 CR4: 00000000003506f0
[ 80.987857][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 80.996137][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 81.004149][ T5384] Kernel panic - not syncing: Fatal exception
[ 81.010550][ T5384] Kernel Offset: disabled
[ 81.015142][ T5384] Rebooting in 86400 seconds..