BUG: Bad page map

[syzbot]

Hello,

syzbot found the following issue on:

HEAD commit: 27e532874a0e ANDROID: ABI: Update symbols
git tree: android12-5.4
console output: https://syzkaller.appspot.com/x/log.txt?x=10fab02b080000
kernel config: https://syzkaller.appspot.com/x/.config?x=d60ce76287fc97c0
dashboard link: https://syzkaller.appspot.com/bug?extid=7bda79ff04dba0a3fcc6
compiler: Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2

Unfortunately, I don't have any reproducer for this issue yet.

IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by: syzbot+7bda79...@syzkaller.appspotmail.com

BUG: Bad page map in process syz-executor.3 pte:ffff8881c4d1f1c0 pmd:1e5467067
addr:00007f216a239000 vm_flags:100400fb anon_vma:0000000000000000 mapping:ffff8881f58462c8 index:1a3
file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0
CPU: 1 PID: 12065 Comm: syz-executor.3 Not tainted 5.4.197-syzkaller-00012-g27e532874a0e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
Call Trace:
__dump_stack lib/dump_stack.c:77 [inline]
dump_stack+0x18e/0x1d5 lib/dump_stack.c:118
print_bad_pte+0x519/0x540 mm/memory.c:559
vm_normal_page+0x135/0x1d0 mm/memory.c:648
zap_pte_range+0x2d3/0x1c10 mm/memory.c:1077
zap_pmd_range mm/memory.c:1221 [inline]
zap_pud_range mm/memory.c:1250 [inline]
zap_p4d_range mm/memory.c:1271 [inline]
unmap_page_range+0x35e/0x450 mm/memory.c:1292
unmap_single_vma mm/memory.c:1337 [inline]
unmap_vmas+0x306/0x440 mm/memory.c:1369
exit_mmap+0x286/0x4f0 mm/mmap.c:3166
__mmput+0x34/0x240 kernel/fork.c:1090
exit_mm kernel/exit.c:489 [inline]
do_exit+0xb40/0x2b40 kernel/exit.c:799
do_group_exit+0x136/0x300 kernel/exit.c:910
get_signal+0xd99/0x13f0 kernel/signal.c:2735
do_signal+0x3b/0x540 arch/x86/kernel/signal.c:809
exit_to_usermode_loop+0xdd/0x1d0 arch/x86/entry/common.c:159
prepare_exit_to_usermode+0x17c/0x1d0 arch/x86/entry/common.c:194
retint_user+0x8/0x8
RIP: 0033:0x7f216ad1f281
Code: Bad RIP value.
RSP: 002b:00002a452cb9d000 EFLAGS: 00010217
RAX: 0000000000000000 RBX: 00007f216ae32050 RCX: 00007f216ad1f279
RDX: 0000000000000000 RSI: 00002a452cb9d000 RDI: 0000000050000000
RBP: 00007f216ad79189 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
R13: 00007ffd24d8040f R14: 00007f2169e74300 R15: 0000000000022000
BUG: Bad rss-counter state mm:ffff8881e3064000 type:MM_FILEPAGES val:1


---
This report is generated by a bot. It may contain errors.
See https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at syzk...@googlegroups.com.

syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.

[syzbot]

Auto-closing this bug as obsolete.
Crashes did not happen for a while, no reproducer and no activity.