Hello,
syzbot found the following issue on:
HEAD commit: 29f02ec58a94 Linux 6.1.121
git tree: linux-6.1.y
console output:
https://syzkaller.appspot.com/x/log.txt?x=16327fe8580000
kernel config:
https://syzkaller.appspot.com/x/.config?x=f738f3c37768d3ef
dashboard link:
https://syzkaller.appspot.com/bug?extid=8070a6cb99d47d0aeed0
compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
userspace arch: arm64
syz repro:
https://syzkaller.appspot.com/x/repro.syz?x=107d2adf980000
C reproducer:
https://syzkaller.appspot.com/x/repro.c?x=104342f8580000
Downloadable assets:
disk image:
https://storage.googleapis.com/syzbot-assets/f0e977ac21f4/disk-29f02ec5.raw.xz
vmlinux:
https://storage.googleapis.com/syzbot-assets/2114c6ce7c93/vmlinux-29f02ec5.xz
kernel image:
https://storage.googleapis.com/syzbot-assets/3ec83a920b74/Image-29f02ec5.gz.xz
mounted in repro:
https://storage.googleapis.com/syzbot-assets/f28215b0e464/mount_0.gz
IMPORTANT: if you fix the issue, please add the following tag to the commit:
Reported-by:
syzbot+8070a6...@syzkaller.appspotmail.com
BUG: Bad page state in process syz-executor385 pfn:115531
page:000000001472978f refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x115531
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc000351e108 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d12e79b0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:115530
page:000000001026bbad refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x115530
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc000362c148 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d81184d8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:117ad3
page:000000000fdf7db4 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x117ad3
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc0003794d88 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d7ad2000 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:1146c5
page:00000000f51a70ca refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1146c5
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc0003541e88 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d7ad2aa8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:11f70f
page:00000000c9fce373 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x11f70f
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00036ba888 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d09c39b0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:10aa53
page:00000000a6874414 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10aa53
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00035f6108 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000ccdfb4d8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:109aae
page:000000007d9eb7f4 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x109aae
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc000344e048 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000c91265d0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:10bb4f
page:0000000076fcc047 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10bb4f
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc000324f7c8 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d37c10f8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:117a15
page:00000000457ded5e refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x117a15
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00036af488 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d37c1ba0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:110e05
page:000000000861ed97 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x110e05
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00035279c8 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000cb0836c8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:110c33
page:00000000893d6b31 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x110c33
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc000333c3c8 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000cc5fe000 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:11991b
page:0000000093f473da refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x11991b
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc0003342748 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000cc5feaa8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:113b29
page:0000000070915203 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x113b29
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc0003263308 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d10941f0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:117d3b
page:000000001b123c43 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x117d3b
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc0003262b48 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d1094c98 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:117b62
page:000000007aadb336 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x117b62
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00034fab08 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d46c65d0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:1112e6
page:0000000063c22a15 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1112e6
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc000364b4c8 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000dddd2000 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:110ea1
page:00000000301463d7 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x110ea1
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc0003451e88 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000dddd2aa8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:10d671
page:00000000f8e69de0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10d671
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc000351b008 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d14fe7c0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:1137c3
page:00000000076ad7f1 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1137c3
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00033ed488 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d7dd92e8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:118943
page:00000000d7f75fd9 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x118943
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00035f24c8 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d147a5d0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:10cab6
page:0000000077eacc18 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10cab6
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00035e8588 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d7b650f8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:10986e
page:00000000d2e4116b refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10986e
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00032e4348 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d7b65ba0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:10a218
page:000000001f0bd6e7 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10a218
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc000324ec88 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d79656c8 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:10f33b
page:000000000808c578 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10f33b
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc0003478508 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000c98e01f0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:11d042
page:000000006d63a529 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x11d042
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc0003744288 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000c98e0c98 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:11d056
page:00000000a455992c refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x11d056
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc00032f2488 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000cc4097c0 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 1 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Call trace:
dump_backtrace+0x1c8/0x1f4 arch/arm64/kernel/stacktrace.c:158
show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0x108/0x170 lib/dump_stack.c:106
dump_stack+0x1c/0x58 lib/dump_stack.c:113
bad_page+0x1a4/0x1c4 mm/page_alloc.c:699
free_page_is_bad_report mm/page_alloc.c:1281 [inline]
free_page_is_bad mm/page_alloc.c:1291 [inline]
free_pages_prepare mm/page_alloc.c:1452 [inline]
free_pcp_prepare mm/page_alloc.c:1509 [inline]
free_unref_page_prepare+0x3a0/0x1330 mm/page_alloc.c:3384
free_unref_page_list+0xec/0x9c0 mm/page_alloc.c:3525
release_pages+0x11c0/0x1418 mm/swap.c:1035
__pagevec_release+0x94/0x10c mm/swap.c:1055
pagevec_release include/linux/pagevec.h:71 [inline]
folio_batch_release include/linux/pagevec.h:135 [inline]
truncate_inode_pages_range+0x388/0xf10 mm/truncate.c:372
truncate_inode_pages+0x2c/0x3c mm/truncate.c:451
dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:275
jfs_umount+0x1cc/0x338 fs/jfs/jfs_umount.c:89
jfs_put_super+0x90/0x188 fs/jfs/super.c:194
generic_shutdown_super+0x130/0x328 fs/super.c:501
kill_block_super+0x70/0xdc fs/super.c:1470
deactivate_locked_super+0xac/0x124 fs/super.c:332
deactivate_super+0xf0/0x110 fs/super.c:363
cleanup_mnt+0x394/0x41c fs/namespace.c:1186
__cleanup_mnt+0x20/0x30 fs/namespace.c:1193
task_work_run+0x240/0x2f0 kernel/task_work.c:203
resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
BUG: Bad page state in process syz-executor385 pfn:109283
page:00000000de9d6648 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x109283
flags: 0x5ffc60000002046(referenced|uptodate|workingset|private|node=0|zone=2|lastcpupid=0x7ff)
raw: 05ffc60000002046 fffffc0003448c48 ffff800021ac74c0 0000000000000000
raw: 0000000000000004 ffff0000d7dd9d90 00000000ffffffff 0000000000000000
page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
Modules linked in:
CPU: 0 PID: 4291 Comm: syz-executor385 Tainted: G B W 6.1.121-syzkaller #0
Hardware name: Google Google
---
This report is generated by a bot. It may contain errors.
See
https://goo.gl/tpsmEJ for more information about syzbot.
syzbot engineers can be reached at
syzk...@googlegroups.com.
syzbot will keep track of this issue. See:
https://goo.gl/tpsmEJ#status for how to communicate with syzbot.
If the report is already addressed, let syzbot know by replying with:
#syz fix: exact-commit-title
If you want syzbot to run the reproducer, reply with:
#syz test: git://repo/address.git branch-or-commit-hash
If you attach or paste a git patch, syzbot will apply it before testing.
If you want to overwrite report's subsystems, reply with:
#syz set subsystems: new-subsystem
(See the list of subsystem names on the web dashboard)
If the report is a duplicate of another one, reply with:
#syz dup: exact-subject-of-another-report
If you want to undo deduplication, reply with:
#syz undup