Warning: Permanently added '[localhost]:37907' (ED25519) to the list of known hosts. executing program syzkaller login: [ 80.892063][ T5311] loop0: detected capacity change from 0 to 32768 [ 80.905121][ T5311] XFS: ikeep mount option is deprecated. [ 80.925857][ T5311] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.999030][ T5311] XFS (loop0): Ending clean mount [ 81.006514][ T5311] XFS (loop0): Quotacheck needed: Please wait. [ 81.032323][ T5311] XFS (loop0): Quotacheck: Done. [ 81.085918][ T5310] BUG: Bad page state in process syz-executor239 pfn:48e01 [ 81.089520][ T5310] page does not match folio [ 81.096226][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x48e01 [ 81.101084][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 81.104485][ T5310] raw: 04fff00000000000 ffffea0001238000 00000000ffffffff ffffffffffffffff [ 81.108371][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 81.112732][ T5310] page dumped because: nonzero pincount [ 81.115253][ T5310] page_owner tracks the page as allocated [ 81.117951][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5311, tgid 5311 (syz-executor239), ts 81047033062, free_ts 0 [ 81.127673][ T5310] post_alloc_hook+0x1d8/0x230 [ 81.129774][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 81.132852][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 81.135212][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 81.137125][ T5310] alloc_pages_noprof+0xa9/0x190 [ 81.139192][ T5310] folio_alloc_noprof+0x1e/0x30 [ 81.141747][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 81.143993][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 81.146174][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 81.148314][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 81.151287][ T5310] xfs_file_buffered_write+0x201/0x890 [ 81.153673][ T5310] vfs_write+0x548/0xa90 [ 81.155562][ T5310] ksys_write+0x145/0x250 [ 81.157565][ T5310] do_syscall_64+0xf6/0x210 [ 81.159599][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.162731][ T5310] page_owner free stack trace missing [ 81.165102][ T5310] Modules linked in: [ 81.166802][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 81.166841][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.166848][ T5310] Call Trace: [ 81.166855][ T5310] [ 81.166861][ T5310] dump_stack_lvl+0x189/0x250 [ 81.166888][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.166904][ T5310] ? __pfx_print_modules+0x10/0x10 [ 81.166917][ T5310] ? uncharge_folio+0x351/0x6b0 [ 81.166939][ T5310] bad_page+0x15e/0x1a0 [ 81.166953][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 81.166970][ T5310] __free_frozen_pages+0x799/0xcd0 [ 81.166992][ T5310] __folio_put+0x21b/0x2c0 [ 81.167006][ T5310] ? __pfx___folio_put+0x10/0x10 [ 81.167024][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 81.167048][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 81.167065][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 81.167081][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 81.167095][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 81.167114][ T5310] ? check_noncircular+0xe0/0x160 [ 81.167129][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 81.167164][ T5310] ? __lock_acquire+0xaac/0xd20 [ 81.167195][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.167216][ T5310] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.167229][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.167243][ T5310] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.167260][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.167274][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 81.167290][ T5310] evict+0x501/0x9c0 [ 81.167308][ T5310] ? __pfx_evict+0x10/0x10 [ 81.167326][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 81.167348][ T5310] evict_inodes+0x636/0x6c0 [ 81.167367][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 81.167381][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 81.167403][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 81.167417][ T5310] kill_block_super+0x44/0x90 [ 81.167431][ T5310] xfs_kill_sb+0x15/0x50 [ 81.167445][ T5310] deactivate_locked_super+0xb9/0x130 [ 81.167458][ T5310] cleanup_mnt+0x425/0x4c0 [ 81.167470][ T5310] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.167486][ T5310] task_work_run+0x1d1/0x260 [ 81.167504][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 81.167526][ T5310] resume_user_mode_work+0x5e/0x80 [ 81.167542][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 81.167558][ T5310] do_syscall_64+0x103/0x210 [ 81.167574][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 81.167589][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.167600][ T5310] RIP: 0033:0x7fc008e2e647 [ 81.167613][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 81.167622][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 81.167635][ T5310] RAX: 0000000000000000 RBX: 00000000000139e5 RCX: 00007fc008e2e647 [ 81.167643][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 81.167649][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 81.167654][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 81.167660][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 81.167676][ T5310] [ 81.167681][ T5310] Disabling lock debugging due to kernel taint [ 81.314851][ T5310] BUG: Bad page state in process syz-executor239 pfn:48e00 [ 81.318061][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48e00 [ 81.322233][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 81.325946][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 81.330609][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 81.334344][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.338068][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 81.342098][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.345835][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.349696][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 81.353835][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 81.356902][ T5310] page_owner tracks the page as allocated [ 81.359399][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5311, tgid 5311 (syz-executor239), ts 81047033062, free_ts 0 [ 81.369713][ T5310] post_alloc_hook+0x1d8/0x230 [ 81.372077][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 81.374570][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 81.377063][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 81.379091][ T5310] alloc_pages_noprof+0xa9/0x190 [ 81.381412][ T5310] folio_alloc_noprof+0x1e/0x30 [ 81.383503][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 81.385972][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 81.388270][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 81.390998][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 81.393457][ T5310] xfs_file_buffered_write+0x201/0x890 [ 81.395837][ T5310] vfs_write+0x548/0xa90 [ 81.397684][ T5310] ksys_write+0x145/0x250 [ 81.399639][ T5310] do_syscall_64+0xf6/0x210 [ 81.402093][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.404738][ T5310] page_owner free stack trace missing [ 81.407044][ T5310] Modules linked in: [ 81.408879][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 81.408895][ T5310] Tainted: [B]=BAD_PAGE [ 81.408899][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.408906][ T5310] Call Trace: [ 81.408912][ T5310] [ 81.408917][ T5310] dump_stack_lvl+0x189/0x250 [ 81.408935][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.408948][ T5310] ? __pfx_print_modules+0x10/0x10 [ 81.408960][ T5310] bad_page+0x15e/0x1a0 [ 81.408973][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 81.408987][ T5310] __folio_put+0x21b/0x2c0 [ 81.408997][ T5310] ? __pfx___folio_put+0x10/0x10 [ 81.409006][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 81.409021][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 81.409035][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 81.409047][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 81.409060][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 81.409073][ T5310] ? check_noncircular+0xe0/0x160 [ 81.409084][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 81.409102][ T5310] ? __lock_acquire+0xaac/0xd20 [ 81.409126][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.409142][ T5310] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.409153][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.409165][ T5310] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.409178][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.409190][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 81.409202][ T5310] evict+0x501/0x9c0 [ 81.409214][ T5310] ? __pfx_evict+0x10/0x10 [ 81.409223][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 81.409234][ T5310] evict_inodes+0x636/0x6c0 [ 81.409248][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 81.409259][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 81.409273][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 81.409285][ T5310] kill_block_super+0x44/0x90 [ 81.409297][ T5310] xfs_kill_sb+0x15/0x50 [ 81.409309][ T5310] deactivate_locked_super+0xb9/0x130 [ 81.409319][ T5310] cleanup_mnt+0x425/0x4c0 [ 81.409329][ T5310] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.409340][ T5310] task_work_run+0x1d1/0x260 [ 81.409353][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 81.409366][ T5310] resume_user_mode_work+0x5e/0x80 [ 81.409380][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 81.409393][ T5310] do_syscall_64+0x103/0x210 [ 81.409407][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 81.409418][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.409428][ T5310] RIP: 0033:0x7fc008e2e647 [ 81.409439][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 81.409447][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 81.409465][ T5310] RAX: 0000000000000000 RBX: 00000000000139e5 RCX: 00007fc008e2e647 [ 81.409472][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 81.409478][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 81.409484][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 81.409491][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 81.409501][ T5310] [ 81.409952][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 81.750215][ T5321] loop0: detected capacity change from 0 to 32768 [ 81.757977][ T5321] XFS: ikeep mount option is deprecated. [ 81.768543][ T5321] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.806047][ T5321] XFS (loop0): Ending clean mount [ 81.808987][ T5321] XFS (loop0): Quotacheck needed: Please wait. [ 81.818915][ T5321] XFS (loop0): Quotacheck: Done. [ 81.841506][ T5310] BUG: Bad page state in process syz-executor239 pfn:49401 [ 81.844768][ T5310] page does not match folio [ 81.846881][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x49401 [ 81.852017][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 81.855527][ T5310] raw: 04fff00000000000 ffffea0001250000 00000000ffffffff ffffffffffffffff [ 81.859529][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 81.864921][ T5310] page dumped because: nonzero pincount [ 81.868203][ T5310] page_owner tracks the page as allocated [ 81.871202][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5321, tgid 5321 (syz-executor239), ts 81825332218, free_ts 81409548855 [ 81.882642][ T5310] post_alloc_hook+0x1d8/0x230 [ 81.884932][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 81.887359][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 81.889929][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 81.892478][ T5310] alloc_pages_noprof+0xa9/0x190 [ 81.894717][ T5310] folio_alloc_noprof+0x1e/0x30 [ 81.896675][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 81.898755][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 81.901302][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 81.903411][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 81.905668][ T5310] xfs_file_buffered_write+0x201/0x890 [ 81.908003][ T5310] vfs_write+0x548/0xa90 [ 81.909756][ T5310] ksys_write+0x145/0x250 [ 81.911987][ T5310] do_syscall_64+0xf6/0x210 [ 81.913903][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.916345][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 81.919323][ T5310] free_unref_folios+0xb81/0x14a0 [ 81.921836][ T5310] folios_put_refs+0x559/0x640 [ 81.924001][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 81.926567][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 81.929068][ T5310] evict+0x501/0x9c0 [ 81.931374][ T5310] evict_inodes+0x636/0x6c0 [ 81.933424][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 81.935752][ T5310] kill_block_super+0x44/0x90 [ 81.938018][ T5310] xfs_kill_sb+0x15/0x50 [ 81.940533][ T5310] deactivate_locked_super+0xb9/0x130 [ 81.943064][ T5310] cleanup_mnt+0x425/0x4c0 [ 81.945163][ T5310] task_work_run+0x1d1/0x260 [ 81.947384][ T5310] resume_user_mode_work+0x5e/0x80 [ 81.949725][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 81.952853][ T5310] do_syscall_64+0x103/0x210 [ 81.954976][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.957743][ T5310] Modules linked in: [ 81.959533][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 81.959549][ T5310] Tainted: [B]=BAD_PAGE [ 81.959553][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.959559][ T5310] Call Trace: [ 81.959567][ T5310] [ 81.959572][ T5310] dump_stack_lvl+0x189/0x250 [ 81.959591][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.959605][ T5310] ? __pfx_print_modules+0x10/0x10 [ 81.959617][ T5310] ? uncharge_folio+0x351/0x6b0 [ 81.959632][ T5310] bad_page+0x15e/0x1a0 [ 81.959644][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 81.959658][ T5310] __free_frozen_pages+0x799/0xcd0 [ 81.959674][ T5310] __folio_put+0x21b/0x2c0 [ 81.959686][ T5310] ? __pfx___folio_put+0x10/0x10 [ 81.959697][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 81.959713][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 81.959728][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 81.959740][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 81.959753][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 81.959767][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 81.959777][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 81.959787][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 81.959805][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 81.959818][ T5310] ? rcu_is_watching+0x15/0xb0 [ 81.959832][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.959846][ T5310] ? rcu_is_watching+0x15/0xb0 [ 81.959855][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.959869][ T5310] ? rcu_is_watching+0x15/0xb0 [ 81.959879][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.959892][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 81.959905][ T5310] evict+0x501/0x9c0 [ 81.959918][ T5310] ? __pfx_evict+0x10/0x10 [ 81.959928][ T5310] ? rcu_is_watching+0x15/0xb0 [ 81.959938][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 81.959951][ T5310] evict_inodes+0x636/0x6c0 [ 81.959966][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 81.959979][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 81.959994][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 81.960032][ T5310] kill_block_super+0x44/0x90 [ 81.960044][ T5310] xfs_kill_sb+0x15/0x50 [ 81.960056][ T5310] deactivate_locked_super+0xb9/0x130 [ 81.960067][ T5310] cleanup_mnt+0x425/0x4c0 [ 81.960078][ T5310] task_work_run+0x1d1/0x260 [ 81.960092][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 81.960105][ T5310] ? __x64_sys_umount+0x122/0x160 [ 81.960125][ T5310] resume_user_mode_work+0x5e/0x80 [ 81.960140][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 81.960155][ T5310] do_syscall_64+0x103/0x210 [ 81.960170][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 81.960182][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.960192][ T5310] RIP: 0033:0x7fc008e2e647 [ 81.960204][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 81.960213][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 81.960225][ T5310] RAX: 0000000000000000 RBX: 0000000000013e41 RCX: 00007fc008e2e647 [ 81.960232][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 81.960239][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 81.960245][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 81.960251][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 81.960263][ T5310] [ 82.115129][ T5310] BUG: Bad page state in process syz-executor239 pfn:49400 [ 82.118471][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49400 [ 82.123858][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 82.127602][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 82.132290][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 82.136086][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.139800][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 82.143975][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.147752][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.151934][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 82.155586][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 82.158552][ T5310] page_owner tracks the page as allocated [ 82.161273][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5321, tgid 5321 (syz-executor239), ts 81825332218, free_ts 81409548855 [ 82.171819][ T5310] post_alloc_hook+0x1d8/0x230 [ 82.173979][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 82.176490][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 82.179107][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 82.181820][ T5310] alloc_pages_noprof+0xa9/0x190 [ 82.184064][ T5310] folio_alloc_noprof+0x1e/0x30 [ 82.186302][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 82.188884][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 82.191589][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 82.193830][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 82.196412][ T5310] xfs_file_buffered_write+0x201/0x890 [ 82.198852][ T5310] vfs_write+0x548/0xa90 [ 82.201213][ T5310] ksys_write+0x145/0x250 [ 82.203205][ T5310] do_syscall_64+0xf6/0x210 [ 82.205266][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.207780][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 82.211022][ T5310] free_unref_folios+0xb81/0x14a0 [ 82.213295][ T5310] folios_put_refs+0x559/0x640 [ 82.215503][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 82.218051][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 82.221023][ T5310] evict+0x501/0x9c0 [ 82.222753][ T5310] evict_inodes+0x636/0x6c0 [ 82.224775][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 82.227097][ T5310] kill_block_super+0x44/0x90 [ 82.229240][ T5310] xfs_kill_sb+0x15/0x50 [ 82.231646][ T5310] deactivate_locked_super+0xb9/0x130 [ 82.234023][ T5310] cleanup_mnt+0x425/0x4c0 [ 82.235970][ T5310] task_work_run+0x1d1/0x260 [ 82.238052][ T5310] resume_user_mode_work+0x5e/0x80 [ 82.240730][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 82.243194][ T5310] do_syscall_64+0x103/0x210 [ 82.245195][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.247814][ T5310] Modules linked in: [ 82.249496][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 82.249513][ T5310] Tainted: [B]=BAD_PAGE [ 82.249517][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.249524][ T5310] Call Trace: [ 82.249531][ T5310] [ 82.249537][ T5310] dump_stack_lvl+0x189/0x250 [ 82.249555][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.249569][ T5310] ? __pfx_print_modules+0x10/0x10 [ 82.249583][ T5310] bad_page+0x15e/0x1a0 [ 82.249596][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 82.249613][ T5310] __folio_put+0x21b/0x2c0 [ 82.249625][ T5310] ? __pfx___folio_put+0x10/0x10 [ 82.249637][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 82.249654][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 82.249668][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 82.249681][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 82.249695][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 82.249709][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 82.249719][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 82.249730][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 82.249749][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 82.249764][ T5310] ? rcu_is_watching+0x15/0xb0 [ 82.249778][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.249794][ T5310] ? rcu_is_watching+0x15/0xb0 [ 82.249802][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.249817][ T5310] ? rcu_is_watching+0x15/0xb0 [ 82.249827][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.249841][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 82.249854][ T5310] evict+0x501/0x9c0 [ 82.249868][ T5310] ? __pfx_evict+0x10/0x10 [ 82.249878][ T5310] ? rcu_is_watching+0x15/0xb0 [ 82.249889][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 82.249902][ T5310] evict_inodes+0x636/0x6c0 [ 82.249918][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 82.249932][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 82.249948][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 82.249960][ T5310] kill_block_super+0x44/0x90 [ 82.249972][ T5310] xfs_kill_sb+0x15/0x50 [ 82.249985][ T5310] deactivate_locked_super+0xb9/0x130 [ 82.250018][ T5310] cleanup_mnt+0x425/0x4c0 [ 82.250029][ T5310] task_work_run+0x1d1/0x260 [ 82.250045][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 82.250058][ T5310] ? __x64_sys_umount+0x122/0x160 [ 82.250072][ T5310] resume_user_mode_work+0x5e/0x80 [ 82.250087][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 82.250109][ T5310] do_syscall_64+0x103/0x210 [ 82.250125][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 82.250136][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.250148][ T5310] RIP: 0033:0x7fc008e2e647 [ 82.250159][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 82.250168][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 82.250181][ T5310] RAX: 0000000000000000 RBX: 0000000000013e41 RCX: 00007fc008e2e647 [ 82.250188][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 82.250195][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 82.250201][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 82.250209][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 82.250221][ T5310] [ 82.397645][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 82.584651][ T5330] loop0: detected capacity change from 0 to 32768 [ 82.591913][ T5330] XFS: ikeep mount option is deprecated. [ 82.602905][ T5330] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.642423][ T5330] XFS (loop0): Ending clean mount [ 82.647228][ T5330] XFS (loop0): Quotacheck needed: Please wait. [ 82.658263][ T5330] XFS (loop0): Quotacheck: Done. [ 82.685380][ T5310] BUG: Bad page state in process syz-executor239 pfn:49601 [ 82.688649][ T5310] page does not match folio [ 82.691275][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x49601 [ 82.695550][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 82.698973][ T5310] raw: 04fff00000000000 ffffea0001258000 00000000ffffffff ffffffffffffffff [ 82.703683][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 82.707465][ T5310] page dumped because: nonzero pincount [ 82.709950][ T5310] page_owner tracks the page as allocated [ 82.713088][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5330, tgid 5330 (syz-executor239), ts 82664757909, free_ts 82397312655 [ 82.723887][ T5310] post_alloc_hook+0x1d8/0x230 [ 82.726097][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 82.728922][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 82.731833][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 82.733977][ T5310] alloc_pages_noprof+0xa9/0x190 [ 82.736244][ T5310] folio_alloc_noprof+0x1e/0x30 [ 82.738478][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 82.741467][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 82.743730][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 82.745929][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 82.748210][ T5310] xfs_file_buffered_write+0x201/0x890 [ 82.751654][ T5310] vfs_write+0x548/0xa90 [ 82.753713][ T5310] ksys_write+0x145/0x250 [ 82.755658][ T5310] do_syscall_64+0xf6/0x210 [ 82.757783][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.761111][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 82.764041][ T5310] free_unref_folios+0xb81/0x14a0 [ 82.766774][ T5310] folios_put_refs+0x559/0x640 [ 82.769411][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 82.772594][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 82.774927][ T5310] evict+0x501/0x9c0 [ 82.776737][ T5310] evict_inodes+0x636/0x6c0 [ 82.778719][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 82.781431][ T5310] kill_block_super+0x44/0x90 [ 82.783493][ T5310] xfs_kill_sb+0x15/0x50 [ 82.785314][ T5310] deactivate_locked_super+0xb9/0x130 [ 82.787456][ T5310] cleanup_mnt+0x425/0x4c0 [ 82.789391][ T5310] task_work_run+0x1d1/0x260 [ 82.792233][ T5310] resume_user_mode_work+0x5e/0x80 [ 82.794603][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 82.797052][ T5310] do_syscall_64+0x103/0x210 [ 82.799165][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.802929][ T5310] Modules linked in: [ 82.804682][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 82.804699][ T5310] Tainted: [B]=BAD_PAGE [ 82.804703][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.804709][ T5310] Call Trace: [ 82.804716][ T5310] [ 82.804721][ T5310] dump_stack_lvl+0x189/0x250 [ 82.804743][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.804756][ T5310] ? __pfx_print_modules+0x10/0x10 [ 82.804767][ T5310] ? uncharge_folio+0x351/0x6b0 [ 82.804781][ T5310] bad_page+0x15e/0x1a0 [ 82.804793][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 82.804808][ T5310] __free_frozen_pages+0x799/0xcd0 [ 82.804824][ T5310] __folio_put+0x21b/0x2c0 [ 82.804833][ T5310] ? __pfx___folio_put+0x10/0x10 [ 82.804844][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 82.804861][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 82.804874][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 82.804887][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 82.804899][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 82.804912][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 82.804922][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 82.804931][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 82.804949][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 82.804966][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.804980][ T5310] ? rcu_is_watching+0x15/0xb0 [ 82.804989][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.805001][ T5310] ? rcu_is_watching+0x15/0xb0 [ 82.805011][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.805024][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 82.805037][ T5310] evict+0x501/0x9c0 [ 82.805049][ T5310] ? __pfx_evict+0x10/0x10 [ 82.805059][ T5310] ? rcu_is_watching+0x15/0xb0 [ 82.805075][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 82.805088][ T5310] evict_inodes+0x636/0x6c0 [ 82.805102][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 82.805114][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 82.805128][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 82.805140][ T5310] kill_block_super+0x44/0x90 [ 82.805151][ T5310] xfs_kill_sb+0x15/0x50 [ 82.805163][ T5310] deactivate_locked_super+0xb9/0x130 [ 82.805173][ T5310] cleanup_mnt+0x425/0x4c0 [ 82.805184][ T5310] task_work_run+0x1d1/0x260 [ 82.805199][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 82.805212][ T5310] ? __x64_sys_umount+0x122/0x160 [ 82.805225][ T5310] resume_user_mode_work+0x5e/0x80 [ 82.805241][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 82.805256][ T5310] do_syscall_64+0x103/0x210 [ 82.805269][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 82.805281][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.805291][ T5310] RIP: 0033:0x7fc008e2e647 [ 82.805302][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 82.805310][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 82.805323][ T5310] RAX: 0000000000000000 RBX: 0000000000014179 RCX: 00007fc008e2e647 [ 82.805330][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 82.805336][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 82.805342][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 82.805348][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 82.805358][ T5310] [ 82.805391][ T5310] BUG: Bad page state in process syz-executor239 pfn:49600 [ 82.966120][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49600 [ 82.970218][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 82.973871][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 82.977974][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 82.982184][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.985983][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 82.989928][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.994012][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.997748][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 83.001739][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 83.004928][ T5310] page_owner tracks the page as allocated [ 83.007485][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5330, tgid 5330 (syz-executor239), ts 82664757909, free_ts 82397312655 [ 83.018491][ T5310] post_alloc_hook+0x1d8/0x230 [ 83.020793][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 83.023452][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 83.026122][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 83.028307][ T5310] alloc_pages_noprof+0xa9/0x190 [ 83.030983][ T5310] folio_alloc_noprof+0x1e/0x30 [ 83.033317][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 83.036051][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 83.038241][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 83.041261][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 83.043727][ T5310] xfs_file_buffered_write+0x201/0x890 [ 83.046380][ T5310] vfs_write+0x548/0xa90 [ 83.048463][ T5310] ksys_write+0x145/0x250 [ 83.050863][ T5310] do_syscall_64+0xf6/0x210 [ 83.052948][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.055653][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 83.058764][ T5310] free_unref_folios+0xb81/0x14a0 [ 83.061422][ T5310] folios_put_refs+0x559/0x640 [ 83.063601][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 83.066131][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 83.068415][ T5310] evict+0x501/0x9c0 [ 83.070852][ T5310] evict_inodes+0x636/0x6c0 [ 83.072839][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 83.075205][ T5310] kill_block_super+0x44/0x90 [ 83.077310][ T5310] xfs_kill_sb+0x15/0x50 [ 83.079193][ T5310] deactivate_locked_super+0xb9/0x130 [ 83.081889][ T5310] cleanup_mnt+0x425/0x4c0 [ 83.083837][ T5310] task_work_run+0x1d1/0x260 [ 83.085875][ T5310] resume_user_mode_work+0x5e/0x80 [ 83.088407][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 83.091305][ T5310] do_syscall_64+0x103/0x210 [ 83.093361][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.096126][ T5310] Modules linked in: [ 83.097882][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 83.097898][ T5310] Tainted: [B]=BAD_PAGE [ 83.097902][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.097909][ T5310] Call Trace: [ 83.097915][ T5310] [ 83.097920][ T5310] dump_stack_lvl+0x189/0x250 [ 83.097938][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.097952][ T5310] ? __pfx_print_modules+0x10/0x10 [ 83.097964][ T5310] bad_page+0x15e/0x1a0 [ 83.097976][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 83.097990][ T5310] __folio_put+0x21b/0x2c0 [ 83.098001][ T5310] ? __pfx___folio_put+0x10/0x10 [ 83.098012][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 83.098029][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 83.098042][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 83.098061][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 83.098072][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 83.098091][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 83.098100][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 83.098108][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 83.098125][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 83.098141][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.098156][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.098165][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.098178][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.098186][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.098198][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 83.098211][ T5310] evict+0x501/0x9c0 [ 83.098223][ T5310] ? __pfx_evict+0x10/0x10 [ 83.098233][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.098242][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 83.098255][ T5310] evict_inodes+0x636/0x6c0 [ 83.098269][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 83.098280][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 83.098293][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 83.098305][ T5310] kill_block_super+0x44/0x90 [ 83.098316][ T5310] xfs_kill_sb+0x15/0x50 [ 83.098328][ T5310] deactivate_locked_super+0xb9/0x130 [ 83.098337][ T5310] cleanup_mnt+0x425/0x4c0 [ 83.098348][ T5310] task_work_run+0x1d1/0x260 [ 83.098360][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 83.098372][ T5310] ? __x64_sys_umount+0x122/0x160 [ 83.098384][ T5310] resume_user_mode_work+0x5e/0x80 [ 83.098398][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 83.098412][ T5310] do_syscall_64+0x103/0x210 [ 83.098425][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 83.098437][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.098447][ T5310] RIP: 0033:0x7fc008e2e647 [ 83.098458][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 83.098467][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 83.098479][ T5310] RAX: 0000000000000000 RBX: 0000000000014179 RCX: 00007fc008e2e647 [ 83.098486][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 83.098491][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 83.098497][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 83.098503][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 83.098513][ T5310] [ 83.098935][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 83.452829][ T5339] loop0: detected capacity change from 0 to 32768 [ 83.459117][ T5339] XFS: ikeep mount option is deprecated. [ 83.480849][ T5339] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.509404][ T5339] XFS (loop0): Ending clean mount [ 83.513403][ T5339] XFS (loop0): Quotacheck needed: Please wait. [ 83.522396][ T5339] XFS (loop0): Quotacheck: Done. [ 83.541165][ T5310] BUG: Bad page state in process syz-executor239 pfn:49e01 [ 83.544405][ T5310] page does not match folio [ 83.546274][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x49e01 [ 83.551549][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 83.554525][ T5310] raw: 04fff00000000000 ffffea0001278000 00000000ffffffff ffffffffffffffff [ 83.558262][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 83.562292][ T5310] page dumped because: nonzero pincount [ 83.564649][ T5310] page_owner tracks the page as allocated [ 83.566974][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5339, tgid 5339 (syz-executor239), ts 83529177427, free_ts 0 [ 83.577200][ T5310] post_alloc_hook+0x1d8/0x230 [ 83.579262][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 83.582103][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 83.584478][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 83.586604][ T5310] alloc_pages_noprof+0xa9/0x190 [ 83.588801][ T5310] folio_alloc_noprof+0x1e/0x30 [ 83.591354][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 83.593711][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 83.595856][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 83.598081][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 83.601099][ T5310] xfs_file_buffered_write+0x201/0x890 [ 83.603530][ T5310] vfs_write+0x548/0xa90 [ 83.605329][ T5310] ksys_write+0x145/0x250 [ 83.607189][ T5310] do_syscall_64+0xf6/0x210 [ 83.609210][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.612229][ T5310] page_owner free stack trace missing [ 83.614582][ T5310] Modules linked in: [ 83.616256][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 83.616272][ T5310] Tainted: [B]=BAD_PAGE [ 83.616275][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.616282][ T5310] Call Trace: [ 83.616299][ T5310] [ 83.616304][ T5310] dump_stack_lvl+0x189/0x250 [ 83.616321][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.616334][ T5310] ? __pfx_print_modules+0x10/0x10 [ 83.616346][ T5310] ? uncharge_folio+0x351/0x6b0 [ 83.616360][ T5310] bad_page+0x15e/0x1a0 [ 83.616372][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 83.616386][ T5310] __free_frozen_pages+0x799/0xcd0 [ 83.616400][ T5310] __folio_put+0x21b/0x2c0 [ 83.616411][ T5310] ? __pfx___folio_put+0x10/0x10 [ 83.616422][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 83.616437][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 83.616450][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 83.616462][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 83.616474][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 83.616487][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 83.616496][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 83.616506][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 83.616522][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 83.616535][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.616548][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.616562][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.616570][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.616583][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.616592][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.616604][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 83.616617][ T5310] evict+0x501/0x9c0 [ 83.616629][ T5310] ? __pfx_evict+0x10/0x10 [ 83.616638][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.616648][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 83.616660][ T5310] evict_inodes+0x636/0x6c0 [ 83.616672][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 83.616683][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 83.616697][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 83.616708][ T5310] kill_block_super+0x44/0x90 [ 83.616719][ T5310] xfs_kill_sb+0x15/0x50 [ 83.616730][ T5310] deactivate_locked_super+0xb9/0x130 [ 83.616740][ T5310] cleanup_mnt+0x425/0x4c0 [ 83.616750][ T5310] task_work_run+0x1d1/0x260 [ 83.616763][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 83.616775][ T5310] ? __x64_sys_umount+0x122/0x160 [ 83.616788][ T5310] resume_user_mode_work+0x5e/0x80 [ 83.616803][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 83.616817][ T5310] do_syscall_64+0x103/0x210 [ 83.616829][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 83.616840][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.616851][ T5310] RIP: 0033:0x7fc008e2e647 [ 83.616861][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 83.616870][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 83.616881][ T5310] RAX: 0000000000000000 RBX: 00000000000144e3 RCX: 00007fc008e2e647 [ 83.616888][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 83.616894][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 83.616900][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 83.616906][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 83.616916][ T5310] [ 83.616944][ T5310] BUG: Bad page state in process syz-executor239 pfn:49e00 [ 83.772748][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49e00 [ 83.776389][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 83.780508][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 83.785040][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 83.788758][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.792855][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 83.796609][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.800741][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.805193][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 83.809289][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 83.813403][ T5310] page_owner tracks the page as allocated [ 83.815890][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5339, tgid 5339 (syz-executor239), ts 83529177427, free_ts 0 [ 83.826013][ T5310] post_alloc_hook+0x1d8/0x230 [ 83.828287][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 83.832434][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 83.835028][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 83.837200][ T5310] alloc_pages_noprof+0xa9/0x190 [ 83.839365][ T5310] folio_alloc_noprof+0x1e/0x30 [ 83.842119][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 83.844939][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 83.847306][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 83.849429][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 83.852214][ T5310] xfs_file_buffered_write+0x201/0x890 [ 83.854547][ T5310] vfs_write+0x548/0xa90 [ 83.856373][ T5310] ksys_write+0x145/0x250 [ 83.858414][ T5310] do_syscall_64+0xf6/0x210 [ 83.860894][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.863464][ T5310] page_owner free stack trace missing [ 83.865793][ T5310] Modules linked in: [ 83.867641][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 83.867658][ T5310] Tainted: [B]=BAD_PAGE [ 83.867662][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.867668][ T5310] Call Trace: [ 83.867675][ T5310] [ 83.867680][ T5310] dump_stack_lvl+0x189/0x250 [ 83.867697][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.867710][ T5310] ? __pfx_print_modules+0x10/0x10 [ 83.867724][ T5310] bad_page+0x15e/0x1a0 [ 83.867736][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 83.867752][ T5310] __folio_put+0x21b/0x2c0 [ 83.867762][ T5310] ? __pfx___folio_put+0x10/0x10 [ 83.867772][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 83.867787][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 83.867799][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 83.867811][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 83.867823][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 83.867836][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 83.867845][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 83.867853][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 83.867871][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 83.867882][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.867896][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.867909][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.867916][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.867927][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.867936][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.867947][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 83.867960][ T5310] evict+0x501/0x9c0 [ 83.867971][ T5310] ? __pfx_evict+0x10/0x10 [ 83.867980][ T5310] ? rcu_is_watching+0x15/0xb0 [ 83.867988][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 83.868000][ T5310] evict_inodes+0x636/0x6c0 [ 83.868013][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 83.868024][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 83.868038][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 83.868048][ T5310] kill_block_super+0x44/0x90 [ 83.868067][ T5310] xfs_kill_sb+0x15/0x50 [ 83.868078][ T5310] deactivate_locked_super+0xb9/0x130 [ 83.868087][ T5310] cleanup_mnt+0x425/0x4c0 [ 83.868097][ T5310] task_work_run+0x1d1/0x260 [ 83.868110][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 83.868122][ T5310] ? __x64_sys_umount+0x122/0x160 [ 83.868134][ T5310] resume_user_mode_work+0x5e/0x80 [ 83.868148][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 83.868163][ T5310] do_syscall_64+0x103/0x210 [ 83.868177][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 83.868188][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.868198][ T5310] RIP: 0033:0x7fc008e2e647 [ 83.868220][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 83.868229][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 83.868240][ T5310] RAX: 0000000000000000 RBX: 00000000000144e3 RCX: 00007fc008e2e647 [ 83.868247][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 83.868253][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 83.868258][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 83.868264][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 83.868274][ T5310] [ 83.868791][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 84.209051][ T5348] loop0: detected capacity change from 0 to 32768 [ 84.215714][ T5348] XFS: ikeep mount option is deprecated. [ 84.225929][ T5348] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.262314][ T5348] XFS (loop0): Ending clean mount [ 84.269577][ T5348] XFS (loop0): Quotacheck needed: Please wait. [ 84.279291][ T5348] XFS (loop0): Quotacheck: Done. [ 84.298614][ T5310] BUG: Bad page state in process syz-executor239 pfn:49c01 [ 84.302085][ T5310] page does not match folio [ 84.304148][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x49c01 [ 84.308535][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 84.312307][ T5310] raw: 04fff00000000000 ffffea0001270000 00000000ffffffff ffffffffffffffff [ 84.316532][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 84.321970][ T5310] page dumped because: nonzero pincount [ 84.324454][ T5310] page_owner tracks the page as allocated [ 84.326964][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5348, tgid 5348 (syz-executor239), ts 84286219754, free_ts 83098554029 [ 84.337996][ T5310] post_alloc_hook+0x1d8/0x230 [ 84.340403][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 84.342890][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 84.345431][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 84.347719][ T5310] alloc_pages_noprof+0xa9/0x190 [ 84.349964][ T5310] folio_alloc_noprof+0x1e/0x30 [ 84.353091][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 84.355611][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 84.357946][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 84.360510][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 84.363014][ T5310] xfs_file_buffered_write+0x201/0x890 [ 84.365400][ T5310] vfs_write+0x548/0xa90 [ 84.367481][ T5310] ksys_write+0x145/0x250 [ 84.369330][ T5310] do_syscall_64+0xf6/0x210 [ 84.371867][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.374468][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 84.377236][ T5310] free_unref_folios+0xb81/0x14a0 [ 84.379467][ T5310] folios_put_refs+0x559/0x640 [ 84.382000][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 84.384537][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 84.386659][ T5310] evict+0x501/0x9c0 [ 84.388409][ T5310] evict_inodes+0x636/0x6c0 [ 84.390920][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 84.393234][ T5310] kill_block_super+0x44/0x90 [ 84.395262][ T5310] xfs_kill_sb+0x15/0x50 [ 84.397157][ T5310] deactivate_locked_super+0xb9/0x130 [ 84.399631][ T5310] cleanup_mnt+0x425/0x4c0 [ 84.402081][ T5310] task_work_run+0x1d1/0x260 [ 84.404178][ T5310] resume_user_mode_work+0x5e/0x80 [ 84.406381][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 84.408930][ T5310] do_syscall_64+0x103/0x210 [ 84.411485][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.414164][ T5310] Modules linked in: [ 84.415944][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 84.415961][ T5310] Tainted: [B]=BAD_PAGE [ 84.415965][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.415972][ T5310] Call Trace: [ 84.415979][ T5310] [ 84.415985][ T5310] dump_stack_lvl+0x189/0x250 [ 84.416003][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.416018][ T5310] ? __pfx_print_modules+0x10/0x10 [ 84.416030][ T5310] ? uncharge_folio+0x351/0x6b0 [ 84.416047][ T5310] bad_page+0x15e/0x1a0 [ 84.416059][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 84.416072][ T5310] __free_frozen_pages+0x799/0xcd0 [ 84.416089][ T5310] __folio_put+0x21b/0x2c0 [ 84.416099][ T5310] ? __pfx___folio_put+0x10/0x10 [ 84.416112][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 84.416131][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 84.416147][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 84.416160][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 84.416174][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 84.416190][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 84.416201][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 84.416211][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 84.416230][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 84.416250][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.416266][ T5310] ? rcu_is_watching+0x15/0xb0 [ 84.416276][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.416290][ T5310] ? rcu_is_watching+0x15/0xb0 [ 84.416300][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.416314][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 84.416328][ T5310] evict+0x501/0x9c0 [ 84.416347][ T5310] ? __pfx_evict+0x10/0x10 [ 84.416357][ T5310] ? rcu_is_watching+0x15/0xb0 [ 84.416367][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 84.416380][ T5310] evict_inodes+0x636/0x6c0 [ 84.416397][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 84.416410][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 84.416426][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 84.416439][ T5310] kill_block_super+0x44/0x90 [ 84.416452][ T5310] xfs_kill_sb+0x15/0x50 [ 84.416466][ T5310] deactivate_locked_super+0xb9/0x130 [ 84.416476][ T5310] cleanup_mnt+0x425/0x4c0 [ 84.416488][ T5310] task_work_run+0x1d1/0x260 [ 84.416505][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 84.416518][ T5310] ? __x64_sys_umount+0x122/0x160 [ 84.416534][ T5310] resume_user_mode_work+0x5e/0x80 [ 84.416549][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 84.416565][ T5310] do_syscall_64+0x103/0x210 [ 84.416581][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 84.416595][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.416606][ T5310] RIP: 0033:0x7fc008e2e647 [ 84.416619][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 84.416627][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 84.416638][ T5310] RAX: 0000000000000000 RBX: 00000000000147d8 RCX: 00007fc008e2e647 [ 84.416646][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 84.416652][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 84.416658][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 84.416666][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 84.416677][ T5310] [ 84.416706][ T5310] BUG: Bad page state in process syz-executor239 pfn:49c00 [ 84.573110][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49c00 [ 84.576952][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 84.580772][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 84.584924][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 84.588763][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.592818][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 84.596415][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.599990][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.604097][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 84.607908][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 84.611296][ T5310] page_owner tracks the page as allocated [ 84.613808][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5348, tgid 5348 (syz-executor239), ts 84286219754, free_ts 83098554029 [ 84.624394][ T5310] post_alloc_hook+0x1d8/0x230 [ 84.626605][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 84.629123][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 84.632079][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 84.634248][ T5310] alloc_pages_noprof+0xa9/0x190 [ 84.636412][ T5310] folio_alloc_noprof+0x1e/0x30 [ 84.638602][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 84.641451][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 84.643740][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 84.645960][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 84.648402][ T5310] xfs_file_buffered_write+0x201/0x890 [ 84.651263][ T5310] vfs_write+0x548/0xa90 [ 84.653448][ T5310] ksys_write+0x145/0x250 [ 84.655689][ T5310] do_syscall_64+0xf6/0x210 [ 84.658088][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.661456][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 84.664193][ T5310] free_unref_folios+0xb81/0x14a0 [ 84.666699][ T5310] folios_put_refs+0x559/0x640 [ 84.669165][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 84.672169][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 84.674322][ T5310] evict+0x501/0x9c0 [ 84.676038][ T5310] evict_inodes+0x636/0x6c0 [ 84.678105][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 84.681117][ T5310] kill_block_super+0x44/0x90 [ 84.683262][ T5310] xfs_kill_sb+0x15/0x50 [ 84.685147][ T5310] deactivate_locked_super+0xb9/0x130 [ 84.687584][ T5310] cleanup_mnt+0x425/0x4c0 [ 84.689564][ T5310] task_work_run+0x1d1/0x260 [ 84.692191][ T5310] resume_user_mode_work+0x5e/0x80 [ 84.694456][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 84.696958][ T5310] do_syscall_64+0x103/0x210 [ 84.699018][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.702082][ T5310] Modules linked in: [ 84.703825][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 84.703841][ T5310] Tainted: [B]=BAD_PAGE [ 84.703845][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.703851][ T5310] Call Trace: [ 84.703868][ T5310] [ 84.703873][ T5310] dump_stack_lvl+0x189/0x250 [ 84.703891][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.703904][ T5310] ? __pfx_print_modules+0x10/0x10 [ 84.703917][ T5310] bad_page+0x15e/0x1a0 [ 84.703928][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 84.703944][ T5310] __folio_put+0x21b/0x2c0 [ 84.703954][ T5310] ? __pfx___folio_put+0x10/0x10 [ 84.703964][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 84.703979][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 84.703993][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 84.704006][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 84.704018][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 84.704030][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 84.704040][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 84.704049][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 84.704066][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 84.704083][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.704097][ T5310] ? rcu_is_watching+0x15/0xb0 [ 84.704106][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.704119][ T5310] ? rcu_is_watching+0x15/0xb0 [ 84.704136][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.704149][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 84.704162][ T5310] evict+0x501/0x9c0 [ 84.704175][ T5310] ? __pfx_evict+0x10/0x10 [ 84.704184][ T5310] ? rcu_is_watching+0x15/0xb0 [ 84.704193][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 84.704205][ T5310] evict_inodes+0x636/0x6c0 [ 84.704218][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 84.704229][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 84.704244][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 84.704255][ T5310] kill_block_super+0x44/0x90 [ 84.704265][ T5310] xfs_kill_sb+0x15/0x50 [ 84.704277][ T5310] deactivate_locked_super+0xb9/0x130 [ 84.704286][ T5310] cleanup_mnt+0x425/0x4c0 [ 84.704297][ T5310] task_work_run+0x1d1/0x260 [ 84.704312][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 84.704324][ T5310] ? __x64_sys_umount+0x122/0x160 [ 84.704337][ T5310] resume_user_mode_work+0x5e/0x80 [ 84.704352][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 84.704366][ T5310] do_syscall_64+0x103/0x210 [ 84.704379][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 84.704390][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.704400][ T5310] RIP: 0033:0x7fc008e2e647 [ 84.704411][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 84.704419][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 84.704430][ T5310] RAX: 0000000000000000 RBX: 00000000000147d8 RCX: 00007fc008e2e647 [ 84.704436][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 84.704442][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 84.704448][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 84.704455][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 84.704464][ T5310] [ 84.705070][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 85.052391][ T5357] loop0: detected capacity change from 0 to 32768 [ 85.059632][ T5357] XFS: ikeep mount option is deprecated. [ 85.091604][ T5357] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.118180][ T5357] XFS (loop0): Ending clean mount [ 85.121297][ T5357] XFS (loop0): Quotacheck needed: Please wait. [ 85.129244][ T5357] XFS (loop0): Quotacheck: Done. [ 85.155013][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a001 [ 85.158177][ T5310] page does not match folio [ 85.160814][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a001 [ 85.165263][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 85.168500][ T5310] raw: 04fff00000000000 ffffea0001280000 00000000ffffffff ffffffffffffffff [ 85.173073][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 85.176727][ T5310] page dumped because: nonzero pincount [ 85.179142][ T5310] page_owner tracks the page as allocated [ 85.182465][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5357, tgid 5357 (syz-executor239), ts 85135223427, free_ts 84704557082 [ 85.192740][ T5310] post_alloc_hook+0x1d8/0x230 [ 85.194942][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 85.197249][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 85.199761][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 85.202334][ T5310] alloc_pages_noprof+0xa9/0x190 [ 85.204475][ T5310] folio_alloc_noprof+0x1e/0x30 [ 85.206520][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 85.208875][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 85.211485][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 85.213648][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 85.216033][ T5310] xfs_file_buffered_write+0x201/0x890 [ 85.218382][ T5310] vfs_write+0x548/0xa90 [ 85.220668][ T5310] ksys_write+0x145/0x250 [ 85.222625][ T5310] do_syscall_64+0xf6/0x210 [ 85.224587][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.227092][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 85.229851][ T5310] free_unref_folios+0xb81/0x14a0 [ 85.232470][ T5310] folios_put_refs+0x559/0x640 [ 85.234640][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 85.237112][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 85.239276][ T5310] evict+0x501/0x9c0 [ 85.241451][ T5310] evict_inodes+0x636/0x6c0 [ 85.244280][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 85.246652][ T5310] kill_block_super+0x44/0x90 [ 85.248745][ T5310] xfs_kill_sb+0x15/0x50 [ 85.252205][ T5310] deactivate_locked_super+0xb9/0x130 [ 85.254574][ T5310] cleanup_mnt+0x425/0x4c0 [ 85.256587][ T5310] task_work_run+0x1d1/0x260 [ 85.258821][ T5310] resume_user_mode_work+0x5e/0x80 [ 85.261694][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 85.264127][ T5310] do_syscall_64+0x103/0x210 [ 85.266157][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.268959][ T5310] Modules linked in: [ 85.272058][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 85.272076][ T5310] Tainted: [B]=BAD_PAGE [ 85.272080][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.272087][ T5310] Call Trace: [ 85.272150][ T5310] [ 85.272155][ T5310] dump_stack_lvl+0x189/0x250 [ 85.272178][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.272195][ T5310] ? __pfx_print_modules+0x10/0x10 [ 85.272207][ T5310] ? uncharge_folio+0x351/0x6b0 [ 85.272225][ T5310] bad_page+0x15e/0x1a0 [ 85.272239][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 85.272256][ T5310] __free_frozen_pages+0x799/0xcd0 [ 85.272274][ T5310] __folio_put+0x21b/0x2c0 [ 85.272286][ T5310] ? __pfx___folio_put+0x10/0x10 [ 85.272297][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 85.272324][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 85.272336][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 85.272369][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 85.272380][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 85.272393][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 85.272403][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 85.272412][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 85.272427][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 85.272444][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.272458][ T5310] ? rcu_is_watching+0x15/0xb0 [ 85.272468][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.272480][ T5310] ? rcu_is_watching+0x15/0xb0 [ 85.272490][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.272501][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 85.272516][ T5310] evict+0x501/0x9c0 [ 85.272528][ T5310] ? __pfx_evict+0x10/0x10 [ 85.272538][ T5310] ? rcu_is_watching+0x15/0xb0 [ 85.272546][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 85.272559][ T5310] evict_inodes+0x636/0x6c0 [ 85.272573][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 85.272584][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 85.272598][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 85.272610][ T5310] kill_block_super+0x44/0x90 [ 85.272620][ T5310] xfs_kill_sb+0x15/0x50 [ 85.272630][ T5310] deactivate_locked_super+0xb9/0x130 [ 85.272640][ T5310] cleanup_mnt+0x425/0x4c0 [ 85.272650][ T5310] task_work_run+0x1d1/0x260 [ 85.272664][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 85.272675][ T5310] ? __x64_sys_umount+0x122/0x160 [ 85.272687][ T5310] resume_user_mode_work+0x5e/0x80 [ 85.272701][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 85.272714][ T5310] do_syscall_64+0x103/0x210 [ 85.272727][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 85.272738][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.272747][ T5310] RIP: 0033:0x7fc008e2e647 [ 85.272757][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 85.272765][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 85.272777][ T5310] RAX: 0000000000000000 RBX: 0000000000014b22 RCX: 00007fc008e2e647 [ 85.272783][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 85.272789][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 85.272795][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 85.272801][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 85.272811][ T5310] [ 85.272943][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a000 [ 85.428255][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a000 [ 85.432353][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 85.436011][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 85.440667][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 85.444274][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.448015][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 85.452618][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.456454][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.460616][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 85.464279][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 85.467515][ T5310] page_owner tracks the page as allocated [ 85.469959][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5357, tgid 5357 (syz-executor239), ts 85135223427, free_ts 84704557082 [ 85.480651][ T5310] post_alloc_hook+0x1d8/0x230 [ 85.483429][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 85.485854][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 85.488373][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 85.490985][ T5310] alloc_pages_noprof+0xa9/0x190 [ 85.493202][ T5310] folio_alloc_noprof+0x1e/0x30 [ 85.495442][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 85.498019][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 85.500807][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 85.503049][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 85.505458][ T5310] xfs_file_buffered_write+0x201/0x890 [ 85.507871][ T5310] vfs_write+0x548/0xa90 [ 85.509786][ T5310] ksys_write+0x145/0x250 [ 85.512157][ T5310] do_syscall_64+0xf6/0x210 [ 85.514145][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.516756][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 85.519624][ T5310] free_unref_folios+0xb81/0x14a0 [ 85.522298][ T5310] folios_put_refs+0x559/0x640 [ 85.524465][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 85.527000][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 85.529439][ T5310] evict+0x501/0x9c0 [ 85.531793][ T5310] evict_inodes+0x636/0x6c0 [ 85.533854][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 85.536181][ T5310] kill_block_super+0x44/0x90 [ 85.538254][ T5310] xfs_kill_sb+0x15/0x50 [ 85.540559][ T5310] deactivate_locked_super+0xb9/0x130 [ 85.542872][ T5310] cleanup_mnt+0x425/0x4c0 [ 85.544819][ T5310] task_work_run+0x1d1/0x260 [ 85.546643][ T5310] resume_user_mode_work+0x5e/0x80 [ 85.548662][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 85.551202][ T5310] do_syscall_64+0x103/0x210 [ 85.553225][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.555606][ T5310] Modules linked in: [ 85.557179][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 85.557195][ T5310] Tainted: [B]=BAD_PAGE [ 85.557199][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.557207][ T5310] Call Trace: [ 85.557214][ T5310] [ 85.557218][ T5310] dump_stack_lvl+0x189/0x250 [ 85.557238][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.557251][ T5310] ? __pfx_print_modules+0x10/0x10 [ 85.557265][ T5310] bad_page+0x15e/0x1a0 [ 85.557278][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 85.557294][ T5310] __folio_put+0x21b/0x2c0 [ 85.557305][ T5310] ? __pfx___folio_put+0x10/0x10 [ 85.557315][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 85.557333][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 85.557346][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 85.557362][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 85.557374][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 85.557389][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 85.557399][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 85.557408][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 85.557427][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 85.557444][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.557460][ T5310] ? rcu_is_watching+0x15/0xb0 [ 85.557469][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.557483][ T5310] ? rcu_is_watching+0x15/0xb0 [ 85.557493][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.557504][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 85.557519][ T5310] evict+0x501/0x9c0 [ 85.557530][ T5310] ? __pfx_evict+0x10/0x10 [ 85.557541][ T5310] ? rcu_is_watching+0x15/0xb0 [ 85.557551][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 85.557563][ T5310] evict_inodes+0x636/0x6c0 [ 85.557578][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 85.557590][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 85.557605][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 85.557617][ T5310] kill_block_super+0x44/0x90 [ 85.557627][ T5310] xfs_kill_sb+0x15/0x50 [ 85.557645][ T5310] deactivate_locked_super+0xb9/0x130 [ 85.557654][ T5310] cleanup_mnt+0x425/0x4c0 [ 85.557664][ T5310] task_work_run+0x1d1/0x260 [ 85.557680][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 85.557692][ T5310] ? __x64_sys_umount+0x122/0x160 [ 85.557703][ T5310] resume_user_mode_work+0x5e/0x80 [ 85.557719][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 85.557732][ T5310] do_syscall_64+0x103/0x210 [ 85.557748][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 85.557758][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.557770][ T5310] RIP: 0033:0x7fc008e2e647 [ 85.557780][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 85.557788][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 85.557800][ T5310] RAX: 0000000000000000 RBX: 0000000000014b22 RCX: 00007fc008e2e647 [ 85.557807][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 85.557813][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 85.557819][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 85.557825][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 85.557837][ T5310] [ 85.558341][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 85.896969][ T5366] loop0: detected capacity change from 0 to 32768 [ 85.910965][ T5366] XFS: ikeep mount option is deprecated. [ 85.922600][ T5366] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.962496][ T5366] XFS (loop0): Ending clean mount [ 85.968009][ T5366] XFS (loop0): Quotacheck needed: Please wait. [ 85.977990][ T5366] XFS (loop0): Quotacheck: Done. [ 86.000704][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a201 [ 86.003761][ T5310] page does not match folio [ 86.005590][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a201 [ 86.009553][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 86.013610][ T5310] raw: 04fff00000000000 ffffea0001288000 00000000ffffffff ffffffffffffffff [ 86.017263][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 86.022053][ T5310] page dumped because: nonzero pincount [ 86.024470][ T5310] page_owner tracks the page as allocated [ 86.026988][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5366, tgid 5366 (syz-executor239), ts 85984231949, free_ts 85557890378 [ 86.037605][ T5310] post_alloc_hook+0x1d8/0x230 [ 86.039842][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 86.042626][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 86.045048][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 86.047127][ T5310] alloc_pages_noprof+0xa9/0x190 [ 86.049298][ T5310] folio_alloc_noprof+0x1e/0x30 [ 86.051839][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 86.054321][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 86.056686][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 86.058804][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 86.061575][ T5310] xfs_file_buffered_write+0x201/0x890 [ 86.063959][ T5310] vfs_write+0x548/0xa90 [ 86.065639][ T5310] ksys_write+0x145/0x250 [ 86.067401][ T5310] do_syscall_64+0xf6/0x210 [ 86.069367][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.072480][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 86.075202][ T5310] free_unref_folios+0xb81/0x14a0 [ 86.077406][ T5310] folios_put_refs+0x559/0x640 [ 86.079511][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 86.082420][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 86.084490][ T5310] evict+0x501/0x9c0 [ 86.086067][ T5310] evict_inodes+0x636/0x6c0 [ 86.088002][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 86.091046][ T5310] kill_block_super+0x44/0x90 [ 86.093118][ T5310] xfs_kill_sb+0x15/0x50 [ 86.094959][ T5310] deactivate_locked_super+0xb9/0x130 [ 86.097337][ T5310] cleanup_mnt+0x425/0x4c0 [ 86.099201][ T5310] task_work_run+0x1d1/0x260 [ 86.101499][ T5310] resume_user_mode_work+0x5e/0x80 [ 86.103717][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 86.105930][ T5310] do_syscall_64+0x103/0x210 [ 86.107951][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.111097][ T5310] Modules linked in: [ 86.112804][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 86.112822][ T5310] Tainted: [B]=BAD_PAGE [ 86.112826][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.112833][ T5310] Call Trace: [ 86.112852][ T5310] [ 86.112857][ T5310] dump_stack_lvl+0x189/0x250 [ 86.112876][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.112891][ T5310] ? __pfx_print_modules+0x10/0x10 [ 86.112903][ T5310] ? uncharge_folio+0x351/0x6b0 [ 86.112920][ T5310] bad_page+0x15e/0x1a0 [ 86.112934][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 86.112949][ T5310] __free_frozen_pages+0x799/0xcd0 [ 86.112966][ T5310] __folio_put+0x21b/0x2c0 [ 86.112977][ T5310] ? __pfx___folio_put+0x10/0x10 [ 86.112988][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 86.113004][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 86.113016][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 86.113028][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 86.113041][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 86.113055][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 86.113066][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 86.113084][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 86.113105][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 86.113126][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.113142][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.113151][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.113166][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.113177][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.113191][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 86.113207][ T5310] evict+0x501/0x9c0 [ 86.113220][ T5310] ? __pfx_evict+0x10/0x10 [ 86.113230][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.113241][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 86.113254][ T5310] evict_inodes+0x636/0x6c0 [ 86.113270][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 86.113284][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 86.113301][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 86.113313][ T5310] kill_block_super+0x44/0x90 [ 86.113325][ T5310] xfs_kill_sb+0x15/0x50 [ 86.113337][ T5310] deactivate_locked_super+0xb9/0x130 [ 86.113348][ T5310] cleanup_mnt+0x425/0x4c0 [ 86.113359][ T5310] task_work_run+0x1d1/0x260 [ 86.113375][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 86.113388][ T5310] ? __x64_sys_umount+0x122/0x160 [ 86.113403][ T5310] resume_user_mode_work+0x5e/0x80 [ 86.113420][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 86.113436][ T5310] do_syscall_64+0x103/0x210 [ 86.113452][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 86.113465][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.113476][ T5310] RIP: 0033:0x7fc008e2e647 [ 86.113487][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.113496][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 86.113509][ T5310] RAX: 0000000000000000 RBX: 0000000000014e72 RCX: 00007fc008e2e647 [ 86.113517][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 86.113523][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 86.113530][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 86.113538][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 86.113549][ T5310] [ 86.113582][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a200 [ 86.268576][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a200 [ 86.272854][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 86.276543][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 86.281333][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 86.285022][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.288895][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 86.293241][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.296949][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.301259][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 86.305033][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 86.308274][ T5310] page_owner tracks the page as allocated [ 86.311014][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5366, tgid 5366 (syz-executor239), ts 85984231949, free_ts 85557890378 [ 86.321495][ T5310] post_alloc_hook+0x1d8/0x230 [ 86.323531][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 86.325958][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 86.328721][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 86.331466][ T5310] alloc_pages_noprof+0xa9/0x190 [ 86.333660][ T5310] folio_alloc_noprof+0x1e/0x30 [ 86.335888][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 86.338498][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 86.341199][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 86.343484][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 86.346002][ T5310] xfs_file_buffered_write+0x201/0x890 [ 86.348562][ T5310] vfs_write+0x548/0xa90 [ 86.350996][ T5310] ksys_write+0x145/0x250 [ 86.352871][ T5310] do_syscall_64+0xf6/0x210 [ 86.354924][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.357403][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 86.360539][ T5310] free_unref_folios+0xb81/0x14a0 [ 86.362681][ T5310] folios_put_refs+0x559/0x640 [ 86.364825][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 86.367377][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 86.369464][ T5310] evict+0x501/0x9c0 [ 86.371949][ T5310] evict_inodes+0x636/0x6c0 [ 86.374022][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 86.376252][ T5310] kill_block_super+0x44/0x90 [ 86.378325][ T5310] xfs_kill_sb+0x15/0x50 [ 86.380615][ T5310] deactivate_locked_super+0xb9/0x130 [ 86.382924][ T5310] cleanup_mnt+0x425/0x4c0 [ 86.384848][ T5310] task_work_run+0x1d1/0x260 [ 86.386993][ T5310] resume_user_mode_work+0x5e/0x80 [ 86.389333][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 86.392354][ T5310] do_syscall_64+0x103/0x210 [ 86.394502][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.397266][ T5310] Modules linked in: [ 86.399041][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 86.399057][ T5310] Tainted: [B]=BAD_PAGE [ 86.399061][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.399067][ T5310] Call Trace: [ 86.399074][ T5310] [ 86.399078][ T5310] dump_stack_lvl+0x189/0x250 [ 86.399105][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.399117][ T5310] ? __pfx_print_modules+0x10/0x10 [ 86.399129][ T5310] bad_page+0x15e/0x1a0 [ 86.399142][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 86.399158][ T5310] __folio_put+0x21b/0x2c0 [ 86.399168][ T5310] ? __pfx___folio_put+0x10/0x10 [ 86.399179][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 86.399195][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 86.399207][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 86.399218][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 86.399229][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 86.399243][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 86.399253][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 86.399263][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 86.399281][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 86.399299][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.399310][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.399316][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.399324][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.399331][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.399341][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 86.399354][ T5310] evict+0x501/0x9c0 [ 86.399365][ T5310] ? __pfx_evict+0x10/0x10 [ 86.399374][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.399384][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 86.399396][ T5310] evict_inodes+0x636/0x6c0 [ 86.399411][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 86.399423][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 86.399435][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 86.399444][ T5310] kill_block_super+0x44/0x90 [ 86.399455][ T5310] xfs_kill_sb+0x15/0x50 [ 86.399465][ T5310] deactivate_locked_super+0xb9/0x130 [ 86.399475][ T5310] cleanup_mnt+0x425/0x4c0 [ 86.399486][ T5310] task_work_run+0x1d1/0x260 [ 86.399500][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 86.399511][ T5310] ? __x64_sys_umount+0x122/0x160 [ 86.399522][ T5310] resume_user_mode_work+0x5e/0x80 [ 86.399537][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 86.399550][ T5310] do_syscall_64+0x103/0x210 [ 86.399564][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 86.399576][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.399585][ T5310] RIP: 0033:0x7fc008e2e647 [ 86.399614][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.399622][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 86.399634][ T5310] RAX: 0000000000000000 RBX: 0000000000014e72 RCX: 00007fc008e2e647 [ 86.399642][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 86.399648][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 86.399655][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 86.399661][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 86.399675][ T5310] [ 86.540803][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 86.730228][ T5375] loop0: detected capacity change from 0 to 32768 [ 86.741221][ T5375] XFS: ikeep mount option is deprecated. [ 86.772610][ T5375] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.791506][ T5375] XFS (loop0): Ending clean mount [ 86.794348][ T5375] XFS (loop0): Quotacheck needed: Please wait. [ 86.803130][ T5375] XFS (loop0): Quotacheck: Done. [ 86.830817][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a401 [ 86.834115][ T5310] page does not match folio [ 86.836202][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a401 [ 86.841920][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 86.845244][ T5310] raw: 04fff00000000000 ffffea0001290000 00000000ffffffff ffffffffffffffff [ 86.849125][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 86.855477][ T5310] page dumped because: nonzero pincount [ 86.858135][ T5310] page_owner tracks the page as allocated [ 86.861443][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5375, tgid 5375 (syz-executor239), ts 86808878256, free_ts 86399751758 [ 86.872432][ T5310] post_alloc_hook+0x1d8/0x230 [ 86.874709][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 86.877580][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 86.880462][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 86.882670][ T5310] alloc_pages_noprof+0xa9/0x190 [ 86.884807][ T5310] folio_alloc_noprof+0x1e/0x30 [ 86.886733][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 86.889333][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 86.892112][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 86.894425][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 86.897009][ T5310] xfs_file_buffered_write+0x201/0x890 [ 86.899608][ T5310] vfs_write+0x548/0xa90 [ 86.901832][ T5310] ksys_write+0x145/0x250 [ 86.903813][ T5310] do_syscall_64+0xf6/0x210 [ 86.905820][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.908522][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 86.911916][ T5310] free_unref_folios+0xb81/0x14a0 [ 86.914212][ T5310] folios_put_refs+0x559/0x640 [ 86.916163][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 86.918494][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 86.920890][ T5310] evict+0x501/0x9c0 [ 86.922461][ T5310] evict_inodes+0x636/0x6c0 [ 86.924224][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 86.926217][ T5310] kill_block_super+0x44/0x90 [ 86.928114][ T5310] xfs_kill_sb+0x15/0x50 [ 86.929831][ T5310] deactivate_locked_super+0xb9/0x130 [ 86.932690][ T5310] cleanup_mnt+0x425/0x4c0 [ 86.934626][ T5310] task_work_run+0x1d1/0x260 [ 86.936602][ T5310] resume_user_mode_work+0x5e/0x80 [ 86.939035][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 86.941985][ T5310] do_syscall_64+0x103/0x210 [ 86.944102][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.946591][ T5310] Modules linked in: [ 86.948321][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 86.948338][ T5310] Tainted: [B]=BAD_PAGE [ 86.948342][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.948350][ T5310] Call Trace: [ 86.948357][ T5310] [ 86.948363][ T5310] dump_stack_lvl+0x189/0x250 [ 86.948384][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.948399][ T5310] ? __pfx_print_modules+0x10/0x10 [ 86.948411][ T5310] ? uncharge_folio+0x351/0x6b0 [ 86.948427][ T5310] bad_page+0x15e/0x1a0 [ 86.948441][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 86.948457][ T5310] __free_frozen_pages+0x799/0xcd0 [ 86.948474][ T5310] __folio_put+0x21b/0x2c0 [ 86.948486][ T5310] ? __pfx___folio_put+0x10/0x10 [ 86.948497][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 86.948515][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 86.948531][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 86.948544][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 86.948558][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 86.948574][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 86.948584][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 86.948595][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 86.948615][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 86.948636][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.948651][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.948661][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.948676][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.948686][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.948700][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 86.948715][ T5310] evict+0x501/0x9c0 [ 86.948727][ T5310] ? __pfx_evict+0x10/0x10 [ 86.948738][ T5310] ? rcu_is_watching+0x15/0xb0 [ 86.948748][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 86.948762][ T5310] evict_inodes+0x636/0x6c0 [ 86.948776][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 86.948788][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 86.948803][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 86.948814][ T5310] kill_block_super+0x44/0x90 [ 86.948827][ T5310] xfs_kill_sb+0x15/0x50 [ 86.948840][ T5310] deactivate_locked_super+0xb9/0x130 [ 86.948850][ T5310] cleanup_mnt+0x425/0x4c0 [ 86.948862][ T5310] task_work_run+0x1d1/0x260 [ 86.948877][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 86.948891][ T5310] ? __x64_sys_umount+0x122/0x160 [ 86.948906][ T5310] resume_user_mode_work+0x5e/0x80 [ 86.948922][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 86.948939][ T5310] do_syscall_64+0x103/0x210 [ 86.948954][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 86.948967][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.948978][ T5310] RIP: 0033:0x7fc008e2e647 [ 86.948989][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.948998][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 86.949011][ T5310] RAX: 0000000000000000 RBX: 00000000000151b1 RCX: 00007fc008e2e647 [ 86.949019][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 86.949026][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 86.949033][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 86.949040][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 86.949052][ T5310] [ 86.949090][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a400 [ 87.105897][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a400 [ 87.112088][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 87.115830][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 87.120623][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 87.124346][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.128136][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 87.132768][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.136596][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.140725][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 87.144519][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 87.147603][ T5310] page_owner tracks the page as allocated [ 87.150669][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5375, tgid 5375 (syz-executor239), ts 86808878256, free_ts 86399751758 [ 87.161997][ T5310] post_alloc_hook+0x1d8/0x230 [ 87.164209][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 87.166526][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.169054][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 87.171616][ T5310] alloc_pages_noprof+0xa9/0x190 [ 87.173754][ T5310] folio_alloc_noprof+0x1e/0x30 [ 87.176028][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 87.178517][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 87.181321][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 87.183585][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 87.186179][ T5310] xfs_file_buffered_write+0x201/0x890 [ 87.188710][ T5310] vfs_write+0x548/0xa90 [ 87.191424][ T5310] ksys_write+0x145/0x250 [ 87.193321][ T5310] do_syscall_64+0xf6/0x210 [ 87.195379][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.197969][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 87.201192][ T5310] free_unref_folios+0xb81/0x14a0 [ 87.203394][ T5310] folios_put_refs+0x559/0x640 [ 87.205525][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 87.208037][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 87.210909][ T5310] evict+0x501/0x9c0 [ 87.212677][ T5310] evict_inodes+0x636/0x6c0 [ 87.214647][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 87.216932][ T5310] kill_block_super+0x44/0x90 [ 87.219066][ T5310] xfs_kill_sb+0x15/0x50 [ 87.221435][ T5310] deactivate_locked_super+0xb9/0x130 [ 87.223755][ T5310] cleanup_mnt+0x425/0x4c0 [ 87.225777][ T5310] task_work_run+0x1d1/0x260 [ 87.227890][ T5310] resume_user_mode_work+0x5e/0x80 [ 87.230689][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 87.233238][ T5310] do_syscall_64+0x103/0x210 [ 87.235360][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.238010][ T5310] Modules linked in: [ 87.239779][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 87.239796][ T5310] Tainted: [B]=BAD_PAGE [ 87.239800][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.239807][ T5310] Call Trace: [ 87.239825][ T5310] [ 87.239830][ T5310] dump_stack_lvl+0x189/0x250 [ 87.239849][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.239864][ T5310] ? __pfx_print_modules+0x10/0x10 [ 87.239879][ T5310] bad_page+0x15e/0x1a0 [ 87.239892][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 87.239910][ T5310] __folio_put+0x21b/0x2c0 [ 87.239921][ T5310] ? __pfx___folio_put+0x10/0x10 [ 87.239934][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 87.239952][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 87.239967][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 87.239981][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 87.240012][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 87.240028][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 87.240039][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 87.240049][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 87.240070][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 87.240091][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.240107][ T5310] ? rcu_is_watching+0x15/0xb0 [ 87.240123][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.240138][ T5310] ? rcu_is_watching+0x15/0xb0 [ 87.240149][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.240164][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 87.240185][ T5310] evict+0x501/0x9c0 [ 87.240199][ T5310] ? __pfx_evict+0x10/0x10 [ 87.240210][ T5310] ? rcu_is_watching+0x15/0xb0 [ 87.240220][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 87.240234][ T5310] evict_inodes+0x636/0x6c0 [ 87.240250][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 87.240263][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 87.240280][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 87.240292][ T5310] kill_block_super+0x44/0x90 [ 87.240305][ T5310] xfs_kill_sb+0x15/0x50 [ 87.240318][ T5310] deactivate_locked_super+0xb9/0x130 [ 87.240329][ T5310] cleanup_mnt+0x425/0x4c0 [ 87.240341][ T5310] task_work_run+0x1d1/0x260 [ 87.240357][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 87.240370][ T5310] ? __x64_sys_umount+0x122/0x160 [ 87.240384][ T5310] resume_user_mode_work+0x5e/0x80 [ 87.240401][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 87.240416][ T5310] do_syscall_64+0x103/0x210 [ 87.240431][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 87.240443][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.240455][ T5310] RIP: 0033:0x7fc008e2e647 [ 87.240466][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 87.240475][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 87.240487][ T5310] RAX: 0000000000000000 RBX: 00000000000151b1 RCX: 00007fc008e2e647 [ 87.240495][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 87.240502][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 87.240509][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 87.240516][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 87.240528][ T5310] [ 87.386806][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 87.574489][ T5384] loop0: detected capacity change from 0 to 32768 [ 87.581509][ T5384] XFS: ikeep mount option is deprecated. [ 87.592393][ T5384] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.628863][ T5384] XFS (loop0): Ending clean mount [ 87.632903][ T5384] XFS (loop0): Quotacheck needed: Please wait. [ 87.642344][ T5384] XFS (loop0): Quotacheck: Done. [ 87.664866][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a601 [ 87.668116][ T5310] page does not match folio [ 87.669988][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a601 [ 87.674537][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 87.677625][ T5310] raw: 04fff00000000000 ffffea0001298000 00000000ffffffff ffffffffffffffff [ 87.681981][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 87.686002][ T5310] page dumped because: nonzero pincount [ 87.688451][ T5310] page_owner tracks the page as allocated [ 87.691508][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5384, tgid 5384 (syz-executor239), ts 87648616711, free_ts 87386332113 [ 87.701532][ T5310] post_alloc_hook+0x1d8/0x230 [ 87.703735][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 87.706009][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.708396][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 87.710970][ T5310] alloc_pages_noprof+0xa9/0x190 [ 87.713027][ T5310] folio_alloc_noprof+0x1e/0x30 [ 87.715103][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 87.717444][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 87.719562][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 87.722373][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 87.724729][ T5310] xfs_file_buffered_write+0x201/0x890 [ 87.727073][ T5310] vfs_write+0x548/0xa90 [ 87.728935][ T5310] ksys_write+0x145/0x250 [ 87.731348][ T5310] do_syscall_64+0xf6/0x210 [ 87.733958][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.736357][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 87.739069][ T5310] free_unref_folios+0xb81/0x14a0 [ 87.741482][ T5310] folios_put_refs+0x559/0x640 [ 87.743542][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 87.745768][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 87.748062][ T5310] evict+0x501/0x9c0 [ 87.749794][ T5310] evict_inodes+0x636/0x6c0 [ 87.752178][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 87.754379][ T5310] kill_block_super+0x44/0x90 [ 87.756460][ T5310] xfs_kill_sb+0x15/0x50 [ 87.758407][ T5310] deactivate_locked_super+0xb9/0x130 [ 87.761460][ T5310] cleanup_mnt+0x425/0x4c0 [ 87.763400][ T5310] task_work_run+0x1d1/0x260 [ 87.765461][ T5310] resume_user_mode_work+0x5e/0x80 [ 87.767623][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 87.769916][ T5310] do_syscall_64+0x103/0x210 [ 87.772283][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.774721][ T5310] Modules linked in: [ 87.776441][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 87.776457][ T5310] Tainted: [B]=BAD_PAGE [ 87.776461][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.776468][ T5310] Call Trace: [ 87.777495][ T5310] [ 87.777501][ T5310] dump_stack_lvl+0x189/0x250 [ 87.777520][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.777537][ T5310] ? __pfx_print_modules+0x10/0x10 [ 87.777548][ T5310] ? uncharge_folio+0x351/0x6b0 [ 87.777567][ T5310] bad_page+0x15e/0x1a0 [ 87.777577][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 87.777590][ T5310] __free_frozen_pages+0x799/0xcd0 [ 87.777604][ T5310] __folio_put+0x21b/0x2c0 [ 87.777615][ T5310] ? __pfx___folio_put+0x10/0x10 [ 87.777625][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 87.777640][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 87.777653][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 87.777665][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 87.777678][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 87.777691][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 87.777701][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 87.777709][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 87.777727][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 87.777744][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.777758][ T5310] ? rcu_is_watching+0x15/0xb0 [ 87.777767][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.777780][ T5310] ? rcu_is_watching+0x15/0xb0 [ 87.777789][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.777800][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 87.777813][ T5310] evict+0x501/0x9c0 [ 87.777825][ T5310] ? __pfx_evict+0x10/0x10 [ 87.777835][ T5310] ? rcu_is_watching+0x15/0xb0 [ 87.777844][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 87.777857][ T5310] evict_inodes+0x636/0x6c0 [ 87.777869][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 87.777879][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 87.777892][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 87.777908][ T5310] kill_block_super+0x44/0x90 [ 87.777920][ T5310] xfs_kill_sb+0x15/0x50 [ 87.777930][ T5310] deactivate_locked_super+0xb9/0x130 [ 87.777944][ T5310] cleanup_mnt+0x425/0x4c0 [ 87.777955][ T5310] task_work_run+0x1d1/0x260 [ 87.777969][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 87.777983][ T5310] ? __x64_sys_umount+0x122/0x160 [ 87.777996][ T5310] resume_user_mode_work+0x5e/0x80 [ 87.778009][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 87.778022][ T5310] do_syscall_64+0x103/0x210 [ 87.778041][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 87.778058][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.778068][ T5310] RIP: 0033:0x7fc008e2e647 [ 87.778079][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 87.778087][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 87.778104][ T5310] RAX: 0000000000000000 RBX: 00000000000154fe RCX: 00007fc008e2e647 [ 87.778111][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 87.778121][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 87.778127][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 87.778133][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 87.778148][ T5310] [ 87.778176][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a600 [ 87.930146][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a600 [ 87.933844][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 87.937584][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 87.942046][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 87.945633][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.949302][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 87.953276][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.956881][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.962444][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 87.965999][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 87.969076][ T5310] page_owner tracks the page as allocated [ 87.972166][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5384, tgid 5384 (syz-executor239), ts 87648616711, free_ts 87386332113 [ 87.982512][ T5310] post_alloc_hook+0x1d8/0x230 [ 87.984547][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 87.986815][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.989268][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 87.991750][ T5310] alloc_pages_noprof+0xa9/0x190 [ 87.993833][ T5310] folio_alloc_noprof+0x1e/0x30 [ 87.995962][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 87.998320][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 88.000960][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 88.003109][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 88.005469][ T5310] xfs_file_buffered_write+0x201/0x890 [ 88.007805][ T5310] vfs_write+0x548/0xa90 [ 88.009685][ T5310] ksys_write+0x145/0x250 [ 88.012040][ T5310] do_syscall_64+0xf6/0x210 [ 88.013996][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.016527][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 88.019280][ T5310] free_unref_folios+0xb81/0x14a0 [ 88.021874][ T5310] folios_put_refs+0x559/0x640 [ 88.023933][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 88.026291][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 88.028473][ T5310] evict+0x501/0x9c0 [ 88.030984][ T5310] evict_inodes+0x636/0x6c0 [ 88.032948][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 88.035199][ T5310] kill_block_super+0x44/0x90 [ 88.037380][ T5310] xfs_kill_sb+0x15/0x50 [ 88.039264][ T5310] deactivate_locked_super+0xb9/0x130 [ 88.042181][ T5310] cleanup_mnt+0x425/0x4c0 [ 88.044037][ T5310] task_work_run+0x1d1/0x260 [ 88.046106][ T5310] resume_user_mode_work+0x5e/0x80 [ 88.048569][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 88.051454][ T5310] do_syscall_64+0x103/0x210 [ 88.053461][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.056108][ T5310] Modules linked in: [ 88.057920][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 88.057937][ T5310] Tainted: [B]=BAD_PAGE [ 88.057941][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.057948][ T5310] Call Trace: [ 88.057986][ T5310] [ 88.057991][ T5310] dump_stack_lvl+0x189/0x250 [ 88.058014][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.058030][ T5310] ? __pfx_print_modules+0x10/0x10 [ 88.058048][ T5310] bad_page+0x15e/0x1a0 [ 88.058061][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 88.058078][ T5310] __folio_put+0x21b/0x2c0 [ 88.058090][ T5310] ? __pfx___folio_put+0x10/0x10 [ 88.058102][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 88.058120][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 88.058136][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 88.058150][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 88.058164][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 88.058183][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 88.058194][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 88.058205][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 88.058225][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 88.058246][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.058261][ T5310] ? rcu_is_watching+0x15/0xb0 [ 88.058271][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.058290][ T5310] ? rcu_is_watching+0x15/0xb0 [ 88.058307][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.058325][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 88.058377][ T5310] evict+0x501/0x9c0 [ 88.058391][ T5310] ? __pfx_evict+0x10/0x10 [ 88.058402][ T5310] ? rcu_is_watching+0x15/0xb0 [ 88.058413][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 88.058427][ T5310] evict_inodes+0x636/0x6c0 [ 88.058443][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 88.058460][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 88.058477][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 88.058490][ T5310] kill_block_super+0x44/0x90 [ 88.058502][ T5310] xfs_kill_sb+0x15/0x50 [ 88.058515][ T5310] deactivate_locked_super+0xb9/0x130 [ 88.058526][ T5310] cleanup_mnt+0x425/0x4c0 [ 88.058537][ T5310] task_work_run+0x1d1/0x260 [ 88.058553][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 88.058567][ T5310] ? __x64_sys_umount+0x122/0x160 [ 88.058582][ T5310] resume_user_mode_work+0x5e/0x80 [ 88.058597][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 88.058612][ T5310] do_syscall_64+0x103/0x210 [ 88.058627][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 88.058640][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.058651][ T5310] RIP: 0033:0x7fc008e2e647 [ 88.058662][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 88.058671][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 88.058684][ T5310] RAX: 0000000000000000 RBX: 00000000000154fe RCX: 00007fc008e2e647 [ 88.058691][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 88.058698][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 88.058705][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 88.058712][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 88.058724][ T5310] [ 88.059398][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 88.414953][ T5393] loop0: detected capacity change from 0 to 32768 [ 88.424253][ T5393] XFS: ikeep mount option is deprecated. [ 88.434539][ T5393] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.472731][ T5393] XFS (loop0): Ending clean mount [ 88.475769][ T5393] XFS (loop0): Quotacheck needed: Please wait. [ 88.485210][ T5393] XFS (loop0): Quotacheck: Done. [ 88.504336][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a801 [ 88.507566][ T5310] page does not match folio [ 88.509466][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a801 [ 88.514185][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 88.517381][ T5310] raw: 04fff00000000000 ffffea00012a0000 00000000ffffffff ffffffffffffffff [ 88.521306][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 88.524922][ T5310] page dumped because: nonzero pincount [ 88.527313][ T5310] page_owner tracks the page as allocated [ 88.529665][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5393, tgid 5393 (syz-executor239), ts 88492097721, free_ts 88058835345 [ 88.541063][ T5310] post_alloc_hook+0x1d8/0x230 [ 88.543220][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 88.545593][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 88.548109][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 88.550827][ T5310] alloc_pages_noprof+0xa9/0x190 [ 88.553037][ T5310] folio_alloc_noprof+0x1e/0x30 [ 88.555163][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 88.557576][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 88.559849][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 88.562531][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 88.565030][ T5310] xfs_file_buffered_write+0x201/0x890 [ 88.567505][ T5310] vfs_write+0x548/0xa90 [ 88.569435][ T5310] ksys_write+0x145/0x250 [ 88.571722][ T5310] do_syscall_64+0xf6/0x210 [ 88.573737][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.576351][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 88.579369][ T5310] free_unref_folios+0xb81/0x14a0 [ 88.582007][ T5310] folios_put_refs+0x559/0x640 [ 88.584113][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 88.586483][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 88.588608][ T5310] evict+0x501/0x9c0 [ 88.590675][ T5310] evict_inodes+0x636/0x6c0 [ 88.592626][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 88.594901][ T5310] kill_block_super+0x44/0x90 [ 88.596891][ T5310] xfs_kill_sb+0x15/0x50 [ 88.598783][ T5310] deactivate_locked_super+0xb9/0x130 [ 88.601507][ T5310] cleanup_mnt+0x425/0x4c0 [ 88.603441][ T5310] task_work_run+0x1d1/0x260 [ 88.605389][ T5310] resume_user_mode_work+0x5e/0x80 [ 88.607557][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 88.609898][ T5310] do_syscall_64+0x103/0x210 [ 88.612418][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.615024][ T5310] Modules linked in: [ 88.616727][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 88.616744][ T5310] Tainted: [B]=BAD_PAGE [ 88.616748][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.616754][ T5310] Call Trace: [ 88.616772][ T5310] [ 88.616777][ T5310] dump_stack_lvl+0x189/0x250 [ 88.616796][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.616808][ T5310] ? __pfx_print_modules+0x10/0x10 [ 88.616819][ T5310] ? uncharge_folio+0x351/0x6b0 [ 88.616834][ T5310] bad_page+0x15e/0x1a0 [ 88.616845][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 88.616858][ T5310] __free_frozen_pages+0x799/0xcd0 [ 88.616872][ T5310] __folio_put+0x21b/0x2c0 [ 88.616882][ T5310] ? __pfx___folio_put+0x10/0x10 [ 88.616892][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 88.616909][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 88.616922][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 88.616933][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 88.616946][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 88.616959][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 88.616968][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 88.616977][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 88.616995][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 88.617012][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.617027][ T5310] ? rcu_is_watching+0x15/0xb0 [ 88.617035][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.617056][ T5310] ? rcu_is_watching+0x15/0xb0 [ 88.617066][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.617078][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 88.617090][ T5310] evict+0x501/0x9c0 [ 88.617102][ T5310] ? __pfx_evict+0x10/0x10 [ 88.617111][ T5310] ? rcu_is_watching+0x15/0xb0 [ 88.617119][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 88.617131][ T5310] evict_inodes+0x636/0x6c0 [ 88.617144][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 88.617155][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 88.617169][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 88.617179][ T5310] kill_block_super+0x44/0x90 [ 88.617189][ T5310] xfs_kill_sb+0x15/0x50 [ 88.617201][ T5310] deactivate_locked_super+0xb9/0x130 [ 88.617211][ T5310] cleanup_mnt+0x425/0x4c0 [ 88.617221][ T5310] task_work_run+0x1d1/0x260 [ 88.617235][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 88.617247][ T5310] ? __x64_sys_umount+0x122/0x160 [ 88.617259][ T5310] resume_user_mode_work+0x5e/0x80 [ 88.617272][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 88.617287][ T5310] do_syscall_64+0x103/0x210 [ 88.617300][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 88.617311][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.617320][ T5310] RIP: 0033:0x7fc008e2e647 [ 88.617330][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 88.617338][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 88.617349][ T5310] RAX: 0000000000000000 RBX: 000000000001583b RCX: 00007fc008e2e647 [ 88.617356][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 88.617362][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 88.617368][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 88.617374][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 88.617383][ T5310] [ 88.617410][ T5310] BUG: Bad page state in process syz-executor239 pfn:4a800 [ 88.769417][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a800 [ 88.773573][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 88.777205][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 88.782007][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 88.785646][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.789504][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 88.793599][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.797815][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.802041][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 88.805856][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 88.809189][ T5310] page_owner tracks the page as allocated [ 88.813799][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5393, tgid 5393 (syz-executor239), ts 88492097721, free_ts 88058835345 [ 88.824800][ T5310] post_alloc_hook+0x1d8/0x230 [ 88.827028][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 88.829460][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 88.832398][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 88.834552][ T5310] alloc_pages_noprof+0xa9/0x190 [ 88.836709][ T5310] folio_alloc_noprof+0x1e/0x30 [ 88.839092][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 88.842231][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 88.844544][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 88.846714][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 88.849183][ T5310] xfs_file_buffered_write+0x201/0x890 [ 88.854187][ T5310] vfs_write+0x548/0xa90 [ 88.856186][ T5310] ksys_write+0x145/0x250 [ 88.858119][ T5310] do_syscall_64+0xf6/0x210 [ 88.860527][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.863169][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 88.865985][ T5310] free_unref_folios+0xb81/0x14a0 [ 88.868279][ T5310] folios_put_refs+0x559/0x640 [ 88.871170][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 88.873802][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 88.875977][ T5310] evict+0x501/0x9c0 [ 88.877836][ T5310] evict_inodes+0x636/0x6c0 [ 88.879975][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 88.882970][ T5310] kill_block_super+0x44/0x90 [ 88.885145][ T5310] xfs_kill_sb+0x15/0x50 [ 88.886948][ T5310] deactivate_locked_super+0xb9/0x130 [ 88.889343][ T5310] cleanup_mnt+0x425/0x4c0 [ 88.891757][ T5310] task_work_run+0x1d1/0x260 [ 88.893787][ T5310] resume_user_mode_work+0x5e/0x80 [ 88.896104][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 88.898664][ T5310] do_syscall_64+0x103/0x210 [ 88.901291][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.903949][ T5310] Modules linked in: [ 88.905695][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 88.905712][ T5310] Tainted: [B]=BAD_PAGE [ 88.905716][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.905724][ T5310] Call Trace: [ 88.905744][ T5310] [ 88.905750][ T5310] dump_stack_lvl+0x189/0x250 [ 88.905771][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.905785][ T5310] ? __pfx_print_modules+0x10/0x10 [ 88.905798][ T5310] bad_page+0x15e/0x1a0 [ 88.905811][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 88.905827][ T5310] __folio_put+0x21b/0x2c0 [ 88.905838][ T5310] ? __pfx___folio_put+0x10/0x10 [ 88.905849][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 88.905865][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 88.905878][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 88.905890][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 88.905902][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 88.905916][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 88.905926][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 88.905936][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 88.905954][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 88.905972][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.905986][ T5310] ? rcu_is_watching+0x15/0xb0 [ 88.905995][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.906009][ T5310] ? rcu_is_watching+0x15/0xb0 [ 88.906019][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.906032][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 88.906060][ T5310] evict+0x501/0x9c0 [ 88.906073][ T5310] ? __pfx_evict+0x10/0x10 [ 88.906083][ T5310] ? rcu_is_watching+0x15/0xb0 [ 88.906093][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 88.906105][ T5310] evict_inodes+0x636/0x6c0 [ 88.906120][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 88.906132][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 88.906147][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 88.906158][ T5310] kill_block_super+0x44/0x90 [ 88.906171][ T5310] xfs_kill_sb+0x15/0x50 [ 88.906183][ T5310] deactivate_locked_super+0xb9/0x130 [ 88.906193][ T5310] cleanup_mnt+0x425/0x4c0 [ 88.906205][ T5310] task_work_run+0x1d1/0x260 [ 88.906219][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 88.906232][ T5310] ? __x64_sys_umount+0x122/0x160 [ 88.906245][ T5310] resume_user_mode_work+0x5e/0x80 [ 88.906260][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 88.906276][ T5310] do_syscall_64+0x103/0x210 [ 88.906291][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 88.906302][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.906313][ T5310] RIP: 0033:0x7fc008e2e647 [ 88.906382][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 88.906393][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 88.906406][ T5310] RAX: 0000000000000000 RBX: 000000000001583b RCX: 00007fc008e2e647 [ 88.906414][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 88.906420][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 88.906426][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 88.906433][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 88.906445][ T5310] [ 88.907312][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 89.253195][ T5402] loop0: detected capacity change from 0 to 32768 [ 89.265386][ T5402] XFS: ikeep mount option is deprecated. [ 89.276147][ T5402] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.309420][ T5402] XFS (loop0): Ending clean mount [ 89.314806][ T5402] XFS (loop0): Quotacheck needed: Please wait. [ 89.323261][ T5402] XFS (loop0): Quotacheck: Done. [ 89.348801][ T5310] BUG: Bad page state in process syz-executor239 pfn:4aa01 [ 89.352211][ T5310] page does not match folio [ 89.354213][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4aa01 [ 89.358602][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 89.363240][ T5310] raw: 04fff00000000000 ffffea00012a8000 00000000ffffffff ffffffffffffffff [ 89.367017][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 89.371359][ T5310] page dumped because: nonzero pincount [ 89.373815][ T5310] page_owner tracks the page as allocated [ 89.376270][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5402, tgid 5402 (syz-executor239), ts 89329110565, free_ts 88906503680 [ 89.386495][ T5310] post_alloc_hook+0x1d8/0x230 [ 89.388633][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 89.391333][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 89.393887][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 89.396004][ T5310] alloc_pages_noprof+0xa9/0x190 [ 89.398172][ T5310] folio_alloc_noprof+0x1e/0x30 [ 89.400643][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 89.403053][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 89.405245][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 89.407468][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 89.409902][ T5310] xfs_file_buffered_write+0x201/0x890 [ 89.412737][ T5310] vfs_write+0x548/0xa90 [ 89.414558][ T5310] ksys_write+0x145/0x250 [ 89.416395][ T5310] do_syscall_64+0xf6/0x210 [ 89.418398][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.421393][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 89.424037][ T5310] free_unref_folios+0xb81/0x14a0 [ 89.426141][ T5310] folios_put_refs+0x559/0x640 [ 89.428098][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 89.430990][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 89.433170][ T5310] evict+0x501/0x9c0 [ 89.434950][ T5310] evict_inodes+0x636/0x6c0 [ 89.436911][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 89.439204][ T5310] kill_block_super+0x44/0x90 [ 89.441721][ T5310] xfs_kill_sb+0x15/0x50 [ 89.443588][ T5310] deactivate_locked_super+0xb9/0x130 [ 89.445885][ T5310] cleanup_mnt+0x425/0x4c0 [ 89.448007][ T5310] task_work_run+0x1d1/0x260 [ 89.450456][ T5310] resume_user_mode_work+0x5e/0x80 [ 89.452818][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 89.455274][ T5310] do_syscall_64+0x103/0x210 [ 89.457448][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.460594][ T5310] Modules linked in: [ 89.462410][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 89.462428][ T5310] Tainted: [B]=BAD_PAGE [ 89.462431][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.462439][ T5310] Call Trace: [ 89.462443][ T5310] [ 89.462448][ T5310] dump_stack_lvl+0x189/0x250 [ 89.462470][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.462485][ T5310] ? __pfx_print_modules+0x10/0x10 [ 89.462498][ T5310] ? uncharge_folio+0x351/0x6b0 [ 89.462515][ T5310] bad_page+0x15e/0x1a0 [ 89.462527][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 89.462543][ T5310] __free_frozen_pages+0x799/0xcd0 [ 89.462561][ T5310] __folio_put+0x21b/0x2c0 [ 89.462572][ T5310] ? __pfx___folio_put+0x10/0x10 [ 89.462585][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 89.462603][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 89.462619][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 89.462632][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 89.462646][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 89.462662][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 89.462673][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 89.462683][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 89.462704][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 89.462725][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.462740][ T5310] ? rcu_is_watching+0x15/0xb0 [ 89.462775][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.462790][ T5310] ? rcu_is_watching+0x15/0xb0 [ 89.462801][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.462815][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 89.462831][ T5310] evict+0x501/0x9c0 [ 89.462844][ T5310] ? __pfx_evict+0x10/0x10 [ 89.462855][ T5310] ? rcu_is_watching+0x15/0xb0 [ 89.462866][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 89.462880][ T5310] evict_inodes+0x636/0x6c0 [ 89.462896][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 89.462910][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 89.462925][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 89.462939][ T5310] kill_block_super+0x44/0x90 [ 89.462949][ T5310] xfs_kill_sb+0x15/0x50 [ 89.462960][ T5310] deactivate_locked_super+0xb9/0x130 [ 89.462968][ T5310] cleanup_mnt+0x425/0x4c0 [ 89.462978][ T5310] task_work_run+0x1d1/0x260 [ 89.462994][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 89.463006][ T5310] ? __x64_sys_umount+0x122/0x160 [ 89.463017][ T5310] resume_user_mode_work+0x5e/0x80 [ 89.463032][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 89.463045][ T5310] do_syscall_64+0x103/0x210 [ 89.463057][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 89.463070][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.463080][ T5310] RIP: 0033:0x7fc008e2e647 [ 89.463090][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 89.463098][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 89.463110][ T5310] RAX: 0000000000000000 RBX: 0000000000015b86 RCX: 00007fc008e2e647 [ 89.463117][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 89.463124][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 89.463130][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 89.463137][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 89.463149][ T5310] [ 89.463182][ T5310] BUG: Bad page state in process syz-executor239 pfn:4aa00 [ 89.614294][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4aa00 [ 89.618164][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 89.622250][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 89.626664][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 89.630733][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 89.634352][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 89.637992][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 89.642166][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 89.645906][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 89.649647][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 89.653126][ T5310] page_owner tracks the page as allocated [ 89.655566][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5402, tgid 5402 (syz-executor239), ts 89329110565, free_ts 88906503680 [ 89.665933][ T5310] post_alloc_hook+0x1d8/0x230 [ 89.668110][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 89.676624][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 89.679244][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 89.681712][ T5310] alloc_pages_noprof+0xa9/0x190 [ 89.683916][ T5310] folio_alloc_noprof+0x1e/0x30 [ 89.686048][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 89.688541][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 89.691275][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 89.693561][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 89.696143][ T5310] xfs_file_buffered_write+0x201/0x890 [ 89.698468][ T5310] vfs_write+0x548/0xa90 [ 89.700703][ T5310] ksys_write+0x145/0x250 [ 89.702720][ T5310] do_syscall_64+0xf6/0x210 [ 89.704683][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.707308][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 89.709966][ T5310] free_unref_folios+0xb81/0x14a0 [ 89.713011][ T5310] folios_put_refs+0x559/0x640 [ 89.714989][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 89.717220][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 89.719201][ T5310] evict+0x501/0x9c0 [ 89.721561][ T5310] evict_inodes+0x636/0x6c0 [ 89.723445][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 89.725567][ T5310] kill_block_super+0x44/0x90 [ 89.727619][ T5310] xfs_kill_sb+0x15/0x50 [ 89.729423][ T5310] deactivate_locked_super+0xb9/0x130 [ 89.732275][ T5310] cleanup_mnt+0x425/0x4c0 [ 89.734186][ T5310] task_work_run+0x1d1/0x260 [ 89.736264][ T5310] resume_user_mode_work+0x5e/0x80 [ 89.738573][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 89.741555][ T5310] do_syscall_64+0x103/0x210 [ 89.743618][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.748868][ T5310] Modules linked in: [ 89.751419][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 89.751437][ T5310] Tainted: [B]=BAD_PAGE [ 89.751441][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.751447][ T5310] Call Trace: [ 89.751452][ T5310] [ 89.751456][ T5310] dump_stack_lvl+0x189/0x250 [ 89.751475][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.751488][ T5310] ? __pfx_print_modules+0x10/0x10 [ 89.751502][ T5310] bad_page+0x15e/0x1a0 [ 89.751514][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 89.751528][ T5310] __folio_put+0x21b/0x2c0 [ 89.751539][ T5310] ? __pfx___folio_put+0x10/0x10 [ 89.751550][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 89.751566][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 89.751579][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 89.751591][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 89.751602][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 89.751615][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 89.751625][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 89.751634][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 89.751651][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 89.751668][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.751682][ T5310] ? rcu_is_watching+0x15/0xb0 [ 89.751690][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.751703][ T5310] ? rcu_is_watching+0x15/0xb0 [ 89.751711][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.751723][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 89.751735][ T5310] evict+0x501/0x9c0 [ 89.751747][ T5310] ? __pfx_evict+0x10/0x10 [ 89.751757][ T5310] ? rcu_is_watching+0x15/0xb0 [ 89.751766][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 89.751779][ T5310] evict_inodes+0x636/0x6c0 [ 89.751792][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 89.751804][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 89.751819][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 89.751829][ T5310] kill_block_super+0x44/0x90 [ 89.751840][ T5310] xfs_kill_sb+0x15/0x50 [ 89.751851][ T5310] deactivate_locked_super+0xb9/0x130 [ 89.751861][ T5310] cleanup_mnt+0x425/0x4c0 [ 89.751872][ T5310] task_work_run+0x1d1/0x260 [ 89.751886][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 89.751898][ T5310] ? __x64_sys_umount+0x122/0x160 [ 89.751911][ T5310] resume_user_mode_work+0x5e/0x80 [ 89.751925][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 89.751938][ T5310] do_syscall_64+0x103/0x210 [ 89.751952][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 89.751964][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.751974][ T5310] RIP: 0033:0x7fc008e2e647 [ 89.751984][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 89.751993][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 89.752005][ T5310] RAX: 0000000000000000 RBX: 0000000000015b86 RCX: 00007fc008e2e647 [ 89.752012][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 89.752019][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 89.752025][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 89.752032][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 89.752042][ T5310] [ 89.752520][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 90.087050][ T5412] loop0: detected capacity change from 0 to 32768 [ 90.094403][ T5412] XFS: ikeep mount option is deprecated. [ 90.103558][ T5412] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.137383][ T5412] XFS (loop0): Ending clean mount [ 90.142988][ T5412] XFS (loop0): Quotacheck needed: Please wait. [ 90.163240][ T5412] XFS (loop0): Quotacheck: Done. [ 90.195876][ T5310] BUG: Bad page state in process syz-executor239 pfn:4ac01 [ 90.199338][ T5310] page does not match folio [ 90.201785][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4ac01 [ 90.206031][ T5310] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 90.209209][ T5310] raw: 04fff00000000000 ffffea00012b0000 00000000ffffffff ffffffffffffffff [ 90.213727][ T5310] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 90.217340][ T5310] page dumped because: nonzero pincount [ 90.219619][ T5310] page_owner tracks the page as allocated [ 90.222921][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5412, tgid 5412 (syz-executor239), ts 90173793130, free_ts 89752196545 [ 90.237557][ T5310] post_alloc_hook+0x1d8/0x230 [ 90.239790][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 90.242669][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 90.245188][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 90.247308][ T5310] alloc_pages_noprof+0xa9/0x190 [ 90.249458][ T5310] folio_alloc_noprof+0x1e/0x30 [ 90.251965][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 90.254379][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 90.256540][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 90.258780][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 90.261672][ T5310] xfs_file_buffered_write+0x201/0x890 [ 90.264063][ T5310] vfs_write+0x548/0xa90 [ 90.265829][ T5310] ksys_write+0x145/0x250 [ 90.267778][ T5310] do_syscall_64+0xf6/0x210 [ 90.269840][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.272789][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 90.275459][ T5310] free_unref_folios+0xb81/0x14a0 [ 90.277619][ T5310] folios_put_refs+0x559/0x640 [ 90.279590][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 90.286398][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 90.288578][ T5310] evict+0x501/0x9c0 [ 90.290530][ T5310] evict_inodes+0x636/0x6c0 [ 90.292532][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 90.294798][ T5310] kill_block_super+0x44/0x90 [ 90.296891][ T5310] xfs_kill_sb+0x15/0x50 [ 90.298772][ T5310] deactivate_locked_super+0xb9/0x130 [ 90.301571][ T5310] cleanup_mnt+0x425/0x4c0 [ 90.303577][ T5310] task_work_run+0x1d1/0x260 [ 90.305673][ T5310] resume_user_mode_work+0x5e/0x80 [ 90.307995][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 90.311231][ T5310] do_syscall_64+0x103/0x210 [ 90.314057][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.322428][ T5310] Modules linked in: [ 90.324171][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 90.324189][ T5310] Tainted: [B]=BAD_PAGE [ 90.324193][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.324199][ T5310] Call Trace: [ 90.324215][ T5310] [ 90.324220][ T5310] dump_stack_lvl+0x189/0x250 [ 90.324240][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.324253][ T5310] ? __pfx_print_modules+0x10/0x10 [ 90.324270][ T5310] ? uncharge_folio+0x351/0x6b0 [ 90.324286][ T5310] bad_page+0x15e/0x1a0 [ 90.324297][ T5310] free_tail_page_prepare+0x2c3/0x4f0 [ 90.324311][ T5310] __free_frozen_pages+0x799/0xcd0 [ 90.324326][ T5310] __folio_put+0x21b/0x2c0 [ 90.324337][ T5310] ? __pfx___folio_put+0x10/0x10 [ 90.324348][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 90.324364][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 90.324377][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 90.324390][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 90.324400][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 90.324413][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 90.324424][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 90.324433][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 90.324449][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 90.324468][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 90.324483][ T5310] ? rcu_is_watching+0x15/0xb0 [ 90.324494][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 90.324506][ T5310] ? rcu_is_watching+0x15/0xb0 [ 90.324514][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 90.324527][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 90.324539][ T5310] evict+0x501/0x9c0 [ 90.324551][ T5310] ? __pfx_evict+0x10/0x10 [ 90.324559][ T5310] ? rcu_is_watching+0x15/0xb0 [ 90.324568][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 90.324581][ T5310] evict_inodes+0x636/0x6c0 [ 90.324593][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 90.324605][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 90.324618][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 90.324630][ T5310] kill_block_super+0x44/0x90 [ 90.324641][ T5310] xfs_kill_sb+0x15/0x50 [ 90.324653][ T5310] deactivate_locked_super+0xb9/0x130 [ 90.324662][ T5310] cleanup_mnt+0x425/0x4c0 [ 90.324672][ T5310] task_work_run+0x1d1/0x260 [ 90.324686][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 90.324699][ T5310] ? __x64_sys_umount+0x122/0x160 [ 90.324710][ T5310] resume_user_mode_work+0x5e/0x80 [ 90.324725][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 90.324739][ T5310] do_syscall_64+0x103/0x210 [ 90.324753][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 90.324765][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.324775][ T5310] RIP: 0033:0x7fc008e2e647 [ 90.324785][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 90.324794][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 90.324805][ T5310] RAX: 0000000000000000 RBX: 0000000000015ed2 RCX: 00007fc008e2e647 [ 90.324812][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 90.324818][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 90.324825][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 90.324831][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 90.324841][ T5310] [ 90.324871][ T5310] BUG: Bad page state in process syz-executor239 pfn:4ac00 [ 90.491195][ T5310] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ac00 [ 90.495054][ T5310] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 90.498891][ T5310] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 90.503552][ T5310] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 90.507196][ T5310] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 90.512226][ T5310] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 90.516111][ T5310] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 90.519809][ T5310] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 90.531288][ T5310] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 90.535117][ T5310] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 90.538284][ T5310] page_owner tracks the page as allocated [ 90.541200][ T5310] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5412, tgid 5412 (syz-executor239), ts 90173793130, free_ts 89752196545 [ 90.552210][ T5310] post_alloc_hook+0x1d8/0x230 [ 90.554327][ T5310] get_page_from_freelist+0x21ce/0x22b0 [ 90.556732][ T5310] __alloc_frozen_pages_noprof+0x181/0x370 [ 90.559311][ T5310] alloc_pages_mpol+0x232/0x4a0 [ 90.561912][ T5310] alloc_pages_noprof+0xa9/0x190 [ 90.564175][ T5310] folio_alloc_noprof+0x1e/0x30 [ 90.566242][ T5310] filemap_alloc_folio_noprof+0xdf/0x470 [ 90.569292][ T5310] __filemap_get_folio+0x3f2/0xaf0 [ 90.572001][ T5310] iomap_write_begin+0x4a3/0x18f0 [ 90.574218][ T5310] iomap_file_buffered_write+0x3fe/0xd20 [ 90.576697][ T5310] xfs_file_buffered_write+0x201/0x890 [ 90.579075][ T5310] vfs_write+0x548/0xa90 [ 90.581473][ T5310] ksys_write+0x145/0x250 [ 90.583289][ T5310] do_syscall_64+0xf6/0x210 [ 90.585257][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.587849][ T5310] page last free pid 5310 tgid 5310 stack trace: [ 90.591221][ T5310] free_unref_folios+0xb81/0x14a0 [ 90.593342][ T5310] folios_put_refs+0x559/0x640 [ 90.595547][ T5310] truncate_inode_pages_range+0x346/0xda0 [ 90.598137][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 90.600805][ T5310] evict+0x501/0x9c0 [ 90.602538][ T5310] evict_inodes+0x636/0x6c0 [ 90.604463][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 90.606668][ T5310] kill_block_super+0x44/0x90 [ 90.608736][ T5310] xfs_kill_sb+0x15/0x50 [ 90.611049][ T5310] deactivate_locked_super+0xb9/0x130 [ 90.613492][ T5310] cleanup_mnt+0x425/0x4c0 [ 90.615496][ T5310] task_work_run+0x1d1/0x260 [ 90.617505][ T5310] resume_user_mode_work+0x5e/0x80 [ 90.619655][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 90.622581][ T5310] do_syscall_64+0x103/0x210 [ 90.624601][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.627218][ T5310] Modules linked in: [ 90.628920][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: syz-executor239 Tainted: G B 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(full) [ 90.628937][ T5310] Tainted: [B]=BAD_PAGE [ 90.628941][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.628947][ T5310] Call Trace: [ 90.628954][ T5310] [ 90.628959][ T5310] dump_stack_lvl+0x189/0x250 [ 90.628976][ T5310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.628989][ T5310] ? __pfx_print_modules+0x10/0x10 [ 90.629002][ T5310] bad_page+0x15e/0x1a0 [ 90.629014][ T5310] __free_frozen_pages+0xc80/0xcd0 [ 90.629029][ T5310] __folio_put+0x21b/0x2c0 [ 90.629040][ T5310] ? __pfx___folio_put+0x10/0x10 [ 90.629051][ T5310] delete_from_page_cache_batch+0x84c/0x9b0 [ 90.629067][ T5310] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 90.629088][ T5310] ? __pfx_workingset_update_node+0x10/0x10 [ 90.629099][ T5310] ? truncate_cleanup_folio+0x34a/0x430 [ 90.629112][ T5310] truncate_inode_pages_range+0x28a/0xda0 [ 90.629126][ T5310] ? filemap_get_folios_tag+0x53b/0x630 [ 90.629136][ T5310] ? filemap_get_folios_tag+0xed/0x630 [ 90.629145][ T5310] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 90.629162][ T5310] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 90.629180][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 90.629194][ T5310] ? rcu_is_watching+0x15/0xb0 [ 90.629202][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 90.629214][ T5310] ? rcu_is_watching+0x15/0xb0 [ 90.629224][ T5310] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 90.629236][ T5310] xfs_fs_evict_inode+0x67/0x90 [ 90.629249][ T5310] evict+0x501/0x9c0 [ 90.629261][ T5310] ? __pfx_evict+0x10/0x10 [ 90.629271][ T5310] ? rcu_is_watching+0x15/0xb0 [ 90.629281][ T5310] ? do_raw_spin_unlock+0x4d/0x240 [ 90.629292][ T5310] evict_inodes+0x636/0x6c0 [ 90.629306][ T5310] ? __pfx_evict_inodes+0x10/0x10 [ 90.629318][ T5310] ? xfs_fs_sync_fs+0x1cf/0x380 [ 90.629333][ T5310] generic_shutdown_super+0x9a/0x2c0 [ 90.629344][ T5310] kill_block_super+0x44/0x90 [ 90.629355][ T5310] xfs_kill_sb+0x15/0x50 [ 90.629366][ T5310] deactivate_locked_super+0xb9/0x130 [ 90.629374][ T5310] cleanup_mnt+0x425/0x4c0 [ 90.629384][ T5310] task_work_run+0x1d1/0x260 [ 90.629398][ T5310] ? __pfx_task_work_run+0x10/0x10 [ 90.629410][ T5310] ? __x64_sys_umount+0x122/0x160 [ 90.629422][ T5310] resume_user_mode_work+0x5e/0x80 [ 90.629437][ T5310] syscall_exit_to_user_mode+0x9a/0x120 [ 90.629451][ T5310] do_syscall_64+0x103/0x210 [ 90.629465][ T5310] ? clear_bhb_loop+0x60/0xb0 [ 90.629475][ T5310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.629486][ T5310] RIP: 0033:0x7fc008e2e647 [ 90.629498][ T5310] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 90.629507][ T5310] RSP: 002b:00007ffec1577f58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 90.629518][ T5310] RAX: 0000000000000000 RBX: 0000000000015ed2 RCX: 00007fc008e2e647 [ 90.629526][ T5310] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec1578010 [ 90.629532][ T5310] RBP: 00007ffec1578010 R08: 0000000000000000 R09: 0000000000000000 [ 90.629538][ T5310] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffec1579080 [ 90.629545][ T5310] R13: 00005555904bb6c0 R14: 431bde82d7b634db R15: 00007ffec15790a0 [ 90.629555][ T5310] [ 90.789092][ T5310] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 91.034066][ T5428] loop0: detected capacity change from 0 to 32768 [ 91.040820][ T5428] XFS: ikeep mount option is deprecated. [ 91.049425][ T5428] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 VM DIAGNOSIS: 12:56:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000d40eb90 R8 =ffff888000900237 R9 =1ffff11000120046 R10=dffffc0000000000 R11=ffffffff853e1870 R12=dffffc0000000000 R13=ffffffff99850c5d R14=ffffffff99b55c40 R15=0000000000000000 RIP=ffffffff853e18ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555904ba380 ffffffff 00c00000 GS =0000 ffff88808d6c2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555904c36f8 CR3=0000000043533000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000021 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000170076fa 00000000a51b6135 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3f6b0479c4a4e28a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 09039e7cb3473ee4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f006a64615f6572 6f63735f6d6f6f2f 666c65732f636f72 702f003030303100 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a004f41445f4057 4a46565f484a4a0a 434940560a464a57 550a001515151400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000