Warning: Permanently added '10.128.10.44' (ED25519) to the list of known hosts. 2025/08/23 00:58:37 parsed 1 programs [ 74.903481][ T5864] cgroup: Unknown subsys name 'net' [ 75.047910][ T5864] cgroup: Unknown subsys name 'cpuset' [ 75.055875][ T5864] cgroup: Unknown subsys name 'rlimit' [ 76.327118][ T5864] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.787734][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.794553][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.671677][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.323052][ T5900] chnl_net:caif_netlink_parms(): no params data found [ 79.372609][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.380064][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.388411][ T5900] bridge_slave_0: entered allmulticast mode [ 79.395171][ T5900] bridge_slave_0: entered promiscuous mode [ 79.405818][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.412951][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.420504][ T5900] bridge_slave_1: entered allmulticast mode [ 79.427587][ T5900] bridge_slave_1: entered promiscuous mode [ 79.461848][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.473667][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.503048][ T5900] team0: Port device team_slave_0 added [ 79.510550][ T5900] team0: Port device team_slave_1 added [ 79.529671][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.537229][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.563224][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.576823][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.583886][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.610176][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.643943][ T5900] hsr_slave_0: entered promiscuous mode [ 79.650246][ T5900] hsr_slave_1: entered promiscuous mode [ 79.738016][ T5900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.748442][ T5900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.757576][ T5900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.766823][ T5900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.788423][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.795599][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.802997][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.810144][ T5900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.850368][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.864215][ T3614] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.872587][ T3614] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.884945][ T5900] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.896505][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.903619][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.915804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.922959][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.050765][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.083981][ T5900] veth0_vlan: entered promiscuous mode [ 80.093619][ T5900] veth1_vlan: entered promiscuous mode [ 80.114878][ T5900] veth0_macvtap: entered promiscuous mode [ 80.123500][ T5900] veth1_macvtap: entered promiscuous mode [ 80.138254][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.150909][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.162571][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.171679][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.181562][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.190818][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.261818][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.340094][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.372873][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.451478][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.827231][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.835221][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.853735][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.861920][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.600981][ T5966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.611129][ T5966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.620594][ T5966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.628582][ T5966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.636178][ T5966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/08/23 00:58:47 executed programs: 0 [ 82.060863][ T5966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.068347][ T5966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.076366][ T5966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.084097][ T5966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.091942][ T5966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.195867][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 82.244624][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.252011][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.259441][ T5977] bridge_slave_0: entered allmulticast mode [ 82.266326][ T5977] bridge_slave_0: entered promiscuous mode [ 82.273705][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.280949][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.288753][ T5977] bridge_slave_1: entered allmulticast mode [ 82.295804][ T5977] bridge_slave_1: entered promiscuous mode [ 82.318622][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.330295][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.354483][ T5977] team0: Port device team_slave_0 added [ 82.362080][ T5977] team0: Port device team_slave_1 added [ 82.382541][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.390069][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.416341][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.428274][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.435234][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.461357][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.494291][ T5977] hsr_slave_0: entered promiscuous mode [ 82.500494][ T5977] hsr_slave_1: entered promiscuous mode [ 82.506586][ T5977] debugfs: 'hsr0' already exists in 'hsr' [ 82.512337][ T5977] Cannot create hsr debugfs directory [ 83.179158][ T12] bridge_slave_1: left allmulticast mode [ 83.184881][ T12] bridge_slave_1: left promiscuous mode [ 83.193039][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.204935][ T12] bridge_slave_0: left allmulticast mode [ 83.214169][ T12] bridge_slave_0: left promiscuous mode [ 83.220284][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.344382][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.359859][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.370543][ T12] bond0 (unregistering): Released all slaves [ 83.473112][ T12] hsr_slave_0: left promiscuous mode [ 83.479139][ T12] hsr_slave_1: left promiscuous mode [ 83.485119][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.493087][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.504742][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.512878][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.525139][ T12] veth1_macvtap: left promiscuous mode [ 83.530870][ T12] veth0_macvtap: left promiscuous mode [ 83.537474][ T12] veth1_vlan: left promiscuous mode [ 83.542800][ T12] veth0_vlan: left promiscuous mode [ 83.654341][ T12] team0 (unregistering): Port device team_slave_1 removed [ 83.668590][ T12] team0 (unregistering): Port device team_slave_0 removed [ 83.838383][ T5977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.856499][ T5977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.866079][ T5977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.877369][ T5977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.956602][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.974844][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.990068][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.997263][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.019252][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.026445][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.145571][ T5966] Bluetooth: hci0: command tx timeout [ 84.404407][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.456690][ T5977] veth0_vlan: entered promiscuous mode [ 84.473957][ T5977] veth1_vlan: entered promiscuous mode [ 84.499564][ T5977] veth0_macvtap: entered promiscuous mode [ 84.510913][ T5977] veth1_macvtap: entered promiscuous mode [ 84.550267][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.563452][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.577104][ T1339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.588761][ T1339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.598739][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.609924][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.666458][ T3614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.674409][ T3614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.711793][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.726807][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.802343][ T6024] BUG: Bad page state in process syz.0.17 pfn:5cc01 [ 84.810060][ T6024] page does not match folio [ 84.814686][ T6024] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x5cc01 [ 84.825975][ T6024] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 84.833661][ T6024] raw: 00fff00000000000 0000000000000000 00000000ffffffff ffffffffffffffff [ 84.842419][ T6024] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 84.851467][ T6024] page dumped because: nonzero pincount [ 84.857122][ T6024] page_owner tracks the page as allocated [ 84.862921][ T6024] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6024, tgid 6024 (syz.0.17), ts 84768773001, free_ts 81167892040 [ 84.883798][ T6024] post_alloc_hook+0x240/0x2a0 [ 84.888732][ T6024] get_page_from_freelist+0x21e4/0x22c0 [ 84.894445][ T6024] __alloc_frozen_pages_noprof+0x181/0x370 [ 84.900574][ T6024] alloc_pages_mpol+0x232/0x4a0 [ 84.905800][ T6024] alloc_pages_noprof+0xa9/0x190 [ 84.911308][ T6024] folio_alloc_noprof+0x1e/0x30 [ 84.916241][ T6024] filemap_alloc_folio_noprof+0xdf/0x470 [ 84.922005][ T6024] page_cache_ra_order+0x4de/0xd40 [ 84.927268][ T6024] do_sync_mmap_readahead+0x25e/0x7a0 [ 84.932678][ T6024] filemap_fault+0x6b9/0x12b0 [ 84.937443][ T6024] __do_fault+0x138/0x390 [ 84.941822][ T6024] __handle_mm_fault+0x1847/0x5400 [ 84.947417][ T6024] handle_mm_fault+0x40a/0x8e0 [ 84.952226][ T6024] do_user_addr_fault+0xa81/0x1390 [ 84.957443][ T6024] exc_page_fault+0x82/0x100 [ 84.962087][ T6024] asm_exc_page_fault+0x26/0x30 [ 84.967115][ T6024] page last free pid 5944 tgid 5944 stack trace: [ 84.973474][ T6024] __free_frozen_pages+0xbc4/0xd30 [ 84.979216][ T6024] vfree+0x25a/0x400 [ 84.983163][ T6024] kcov_close+0x28/0x50 [ 84.987832][ T6024] __fput+0x449/0xa70 [ 84.992031][ T6024] task_work_run+0x1d4/0x260 [ 84.996964][ T6024] do_exit+0x6b5/0x2300 [ 85.001186][ T6024] do_group_exit+0x21c/0x2d0 [ 85.006100][ T6024] get_signal+0x1286/0x1340 [ 85.010676][ T6024] arch_do_signal_or_restart+0x9a/0x750 [ 85.016602][ T6024] exit_to_user_mode_loop+0x75/0x130 [ 85.021963][ T6024] do_syscall_64+0x2bd/0xfa0 [ 85.026803][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.032778][ T6024] Modules linked in: [ 85.037073][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 85.037100][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.037114][ T6024] Call Trace: [ 85.037122][ T6024] [ 85.037131][ T6024] dump_stack_lvl+0x189/0x250 [ 85.037163][ T6024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.037188][ T6024] ? __pfx_print_modules+0x10/0x10 [ 85.037220][ T6024] ? percpu_ref_put+0x19/0x180 [ 85.037247][ T6024] ? percpu_ref_put+0xf9/0x180 [ 85.037273][ T6024] bad_page+0x180/0x1c0 [ 85.037294][ T6024] free_tail_page_prepare+0x2c3/0x4f0 [ 85.037323][ T6024] __free_frozen_pages+0x7b7/0xd30 [ 85.037356][ T6024] __folio_put+0x21b/0x2c0 [ 85.037387][ T6024] ? __pfx___folio_put+0x10/0x10 [ 85.037422][ T6024] delete_from_page_cache_batch+0x84c/0x9b0 [ 85.037442][ T6024] ? shmem_mapping+0xd/0x50 [ 85.037459][ T6024] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 85.037479][ T6024] ? __filemap_fdatawait_range+0x1d2/0x230 [ 85.037500][ T6024] ? __pfx_workingset_update_node+0x10/0x10 [ 85.037525][ T6024] ? folio_mapping+0x16f/0x240 [ 85.037694][ T6024] ? truncate_cleanup_folio+0x34a/0x430 [ 85.037721][ T6024] truncate_inode_pages_range+0x28a/0xda0 [ 85.037743][ T6024] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 85.037768][ T6024] ? has_bh_in_lru+0x307/0x340 [ 85.037789][ T6024] ? __pfx_has_bh_in_lru+0x10/0x10 [ 85.037814][ T6024] ? smp_call_function_many_cond+0xe4f/0x12d0 [ 85.037855][ T6024] ? __pfx___mutex_lock+0x10/0x10 [ 85.037879][ T6024] ? __pfx_has_bh_in_lru+0x10/0x10 [ 85.037902][ T6024] blkdev_flush_mapping+0x108/0x270 [ 85.037925][ T6024] ? bdev_release+0x40f/0x650 [ 85.037946][ T6024] bdev_release+0x417/0x650 [ 85.037968][ T6024] ? __pfx_blkdev_release+0x10/0x10 [ 85.037995][ T6024] blkdev_release+0x15/0x20 [ 85.038020][ T6024] __fput+0x449/0xa70 [ 85.038046][ T6024] task_work_run+0x1d4/0x260 [ 85.038065][ T6024] ? __pfx_task_work_run+0x10/0x10 [ 85.038085][ T6024] do_exit+0x6b5/0x2300 [ 85.038106][ T6024] ? __pfx_do_exit+0x10/0x10 [ 85.038127][ T6024] ? rcu_is_watching+0x15/0xb0 [ 85.038149][ T6024] ? rcu_is_watching+0x15/0xb0 [ 85.038172][ T6024] do_group_exit+0x21c/0x2d0 [ 85.038190][ T6024] __x64_sys_exit_group+0x3f/0x40 [ 85.038206][ T6024] x64_sys_call+0x21f7/0x2200 [ 85.038226][ T6024] do_syscall_64+0xfa/0xfa0 [ 85.038244][ T6024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.038258][ T6024] ? clear_bhb_loop+0x60/0xb0 [ 85.038277][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.038295][ T6024] RIP: 0033:0x7f0de818ebe9 [ 85.038321][ T6024] Code: Unable to access opcode bytes at 0x7f0de818ebbf. [ 85.038328][ T6024] RSP: 002b:00007ffe9693d408 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 85.038344][ T6024] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0de818ebe9 [ 85.038354][ T6024] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.038363][ T6024] RBP: 0000000000000003 R08: 0000000c9693d4ff R09: 00007f0de8381280 [ 85.038372][ T6024] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 85.038381][ T6024] R13: 00007f0de8381280 R14: 0000000000000003 R15: 00007ffe9693d4c0 [ 85.038396][ T6024] [ 85.038431][ T6024] BUG: Bad page state in process syz.0.17 pfn:5cc00 [ 85.358428][ T6024] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cc00 [ 85.368483][ T6024] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 85.377154][ T6024] flags: 0xfff0000000004d(locked|referenced|uptodate|head|node=0|zone=1|lastcpupid=0x7ff) [ 85.387211][ T6024] raw: 00fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 85.396213][ T6024] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.405012][ T6024] head: 00fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 85.414265][ T6024] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.423379][ T6024] head: 00fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.432620][ T6024] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 85.441412][ T6024] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 85.448993][ T6024] page_owner tracks the page as allocated [ 85.454731][ T6024] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6024, tgid 6024 (syz.0.17), ts 84768773001, free_ts 81167882924 [ 85.475171][ T6024] post_alloc_hook+0x240/0x2a0 [ 85.480062][ T6024] get_page_from_freelist+0x21e4/0x22c0 [ 85.485772][ T6024] __alloc_frozen_pages_noprof+0x181/0x370 [ 85.491619][ T6024] alloc_pages_mpol+0x232/0x4a0 [ 85.496672][ T6024] alloc_pages_noprof+0xa9/0x190 [ 85.501658][ T6024] folio_alloc_noprof+0x1e/0x30 [ 85.506675][ T6024] filemap_alloc_folio_noprof+0xdf/0x470 [ 85.512465][ T6024] page_cache_ra_order+0x4de/0xd40 [ 85.517716][ T6024] do_sync_mmap_readahead+0x25e/0x7a0 [ 85.523206][ T6024] filemap_fault+0x6b9/0x12b0 [ 85.528045][ T6024] __do_fault+0x138/0x390 [ 85.532506][ T6024] __handle_mm_fault+0x1847/0x5400 [ 85.537936][ T6024] handle_mm_fault+0x40a/0x8e0 [ 85.542745][ T6024] do_user_addr_fault+0xa81/0x1390 [ 85.548003][ T6024] exc_page_fault+0x82/0x100 [ 85.552651][ T6024] asm_exc_page_fault+0x26/0x30 [ 85.557582][ T6024] page last free pid 5944 tgid 5944 stack trace: [ 85.563937][ T6024] __free_frozen_pages+0xbc4/0xd30 [ 85.569251][ T6024] vfree+0x25a/0x400 [ 85.573177][ T6024] kcov_close+0x28/0x50 [ 85.577522][ T6024] __fput+0x449/0xa70 [ 85.581577][ T6024] task_work_run+0x1d4/0x260 [ 85.589086][ T6024] do_exit+0x6b5/0x2300 [ 85.593300][ T6024] do_group_exit+0x21c/0x2d0 [ 85.597939][ T6024] get_signal+0x1286/0x1340 [ 85.602475][ T6024] arch_do_signal_or_restart+0x9a/0x750 [ 85.608147][ T6024] exit_to_user_mode_loop+0x75/0x130 [ 85.613481][ T6024] do_syscall_64+0x2bd/0xfa0 [ 85.618191][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.624214][ T6024] Modules linked in: [ 85.628331][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.0.17 Tainted: G B syzkaller #0 PREEMPT(full) [ 85.628359][ T6024] Tainted: [B]=BAD_PAGE [ 85.628366][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 85.628377][ T6024] Call Trace: [ 85.628384][ T6024] [ 85.628392][ T6024] dump_stack_lvl+0x189/0x250 [ 85.628421][ T6024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.628446][ T6024] ? __pfx_print_modules+0x10/0x10 [ 85.628482][ T6024] bad_page+0x180/0x1c0 [ 85.628502][ T6024] __free_frozen_pages+0xce2/0xd30 [ 85.628532][ T6024] __folio_put+0x21b/0x2c0 [ 85.628562][ T6024] ? __pfx___folio_put+0x10/0x10 [ 85.628595][ T6024] delete_from_page_cache_batch+0x84c/0x9b0 [ 85.628620][ T6024] ? shmem_mapping+0xd/0x50 [ 85.628641][ T6024] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 85.628664][ T6024] ? __filemap_fdatawait_range+0x1d2/0x230 [ 85.628689][ T6024] ? __pfx_workingset_update_node+0x10/0x10 [ 85.628721][ T6024] ? folio_mapping+0x16f/0x240 [ 85.628741][ T6024] ? truncate_cleanup_folio+0x34a/0x430 [ 85.628764][ T6024] truncate_inode_pages_range+0x28a/0xda0 [ 85.628802][ T6024] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 85.628837][ T6024] ? has_bh_in_lru+0x307/0x340 [ 85.628867][ T6024] ? __pfx_has_bh_in_lru+0x10/0x10 [ 85.628895][ T6024] ? smp_call_function_many_cond+0xe4f/0x12d0 [ 85.628939][ T6024] ? __pfx___mutex_lock+0x10/0x10 [ 85.628967][ T6024] ? __pfx_has_bh_in_lru+0x10/0x10 [ 85.628998][ T6024] blkdev_flush_mapping+0x108/0x270 [ 85.629028][ T6024] ? bdev_release+0x40f/0x650 [ 85.629056][ T6024] bdev_release+0x417/0x650 [ 85.629087][ T6024] ? __pfx_blkdev_release+0x10/0x10 [ 85.629117][ T6024] blkdev_release+0x15/0x20 [ 85.629145][ T6024] __fput+0x449/0xa70 [ 85.629181][ T6024] task_work_run+0x1d4/0x260 [ 85.629206][ T6024] ? __pfx_task_work_run+0x10/0x10 [ 85.629234][ T6024] do_exit+0x6b5/0x2300 [ 85.629261][ T6024] ? __pfx_do_exit+0x10/0x10 [ 85.629282][ T6024] ? rcu_is_watching+0x15/0xb0 [ 85.629312][ T6024] ? rcu_is_watching+0x15/0xb0 [ 85.629343][ T6024] do_group_exit+0x21c/0x2d0 [ 85.629367][ T6024] __x64_sys_exit_group+0x3f/0x40 [ 85.629389][ T6024] x64_sys_call+0x21f7/0x2200 [ 85.629416][ T6024] do_syscall_64+0xfa/0xfa0 [ 85.629440][ T6024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.629460][ T6024] ? clear_bhb_loop+0x60/0xb0 [ 85.629482][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.629501][ T6024] RIP: 0033:0x7f0de818ebe9 [ 85.629517][ T6024] Code: Unable to access opcode bytes at 0x7f0de818ebbf. [ 85.629526][ T6024] RSP: 002b:00007ffe9693d408 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 85.629548][ T6024] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0de818ebe9 [ 85.629562][ T6024] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.629574][ T6024] RBP: 0000000000000003 R08: 0000000c9693d4ff R09: 00007f0de8381280 [ 85.629587][ T6024] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 85.629598][ T6024] R13: 00007f0de8381280 R14: 0000000000000003 R15: 00007ffe9693d4c0 [ 85.629620][ T6024]