DUID 00:04:70:54:fc:d0:2a:32:b7:62:cf:21:72:23:c9:95:e9:3f forked to background, child pid 3175 [ 24.102051][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.111873][ T3176] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. executing program syzkaller login: [ 41.291972][ T3502] loop0: detected capacity change from 0 to 32768 [ 41.335950][ T3502] ======================================================= [ 41.335950][ T3502] WARNING: The mand mount option has been deprecated and [ 41.335950][ T3502] and is ignored by this kernel. Remove the mand [ 41.335950][ T3502] option from the mount to silence this warning. [ 41.335950][ T3502] ======================================================= [ 41.391814][ T3502] ERROR: (device loop0): dbDiscardAG: -EIO [ 41.391814][ T3502] [ 41.400097][ T3502] attempt to access beyond end of device [ 41.400097][ T3502] loop0: rw=2051, want=18014398509498368, limit=32768 [ 41.412403][ T3502] JFS: sb_issue_discard(ffff8880790c6000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 41.422879][ T3502] blkno = 8000000000400, nblocks = 400 [ 41.428444][ T3502] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 41.428444][ T3502] [ 41.453002][ T3502] BUG: Bad page state in process syz-executor307 pfn:1df21 [ 41.460869][ T3502] page:ffffea000077c840 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1df21 [ 41.471204][ T3502] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 41.481326][ T3502] raw: 00fff00000002006 ffffea0001f79b48 ffffc90002207880 0000000000000000 [ 41.490284][ T3502] raw: 0000000000000004 ffff88801e6159b0 00000000ffffffff 0000000000000000 [ 41.498890][ T3502] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 41.506276][ T3502] page_owner tracks the page as allocated [ 41.512151][ T3502] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xc40(GFP_NOFS), pid 3502, ts 41390766766, free_ts 41389671136 [ 41.525521][ T3502] get_page_from_freelist+0x322a/0x33c0 [ 41.531074][ T3502] __alloc_pages+0x272/0x700 [ 41.535713][ T3502] __page_cache_alloc+0xd4/0x4a0 [ 41.540646][ T3502] do_read_cache_page+0x1e5/0x1040 [ 41.545781][ T3502] __get_metapage+0x398/0x1070 [ 41.550541][ T3502] dbAllocCtl+0xd5/0x920 [ 41.554801][ T3502] dbAllocAG+0x28b/0x10b0 [ 41.559123][ T3502] dbDiscardAG+0x34e/0xa10 [ 41.563563][ T3502] jfs_ioc_trim+0x42f/0x660 [ 41.568146][ T3502] jfs_ioctl+0x2ac/0x3a0 [ 41.572367][ T3502] __se_sys_ioctl+0xf1/0x160 [ 41.580542][ T3502] do_syscall_64+0x3d/0xb0 [ 41.584985][ T3502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.590862][ T3502] page last free stack trace: [ 41.595561][ T3502] free_unref_page_prepare+0xc34/0xcf0 [ 41.601016][ T3502] free_unref_page+0x95/0x2d0 [ 41.605715][ T3502] ___cache_free+0xe3/0x100 [ 41.610233][ T3502] qlist_free_all+0x36/0x90 [ 41.614759][ T3502] kasan_quarantine_reduce+0x162/0x180 [ 41.620216][ T3502] __kasan_slab_alloc+0x2f/0xc0 [ 41.625119][ T3502] slab_post_alloc_hook+0x53/0x380 [ 41.630221][ T3502] kmem_cache_alloc+0xf3/0x280 [ 41.642145][ T3502] getname_flags+0xb8/0x4e0 [ 41.646712][ T3502] do_sys_openat2+0xd2/0x500 [ 41.651300][ T3502] __x64_sys_openat+0x243/0x290 [ 41.656211][ T3502] do_syscall_64+0x3d/0xb0 [ 41.660627][ T3502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.666606][ T3502] Modules linked in: [ 41.670499][ T3502] CPU: 0 PID: 3502 Comm: syz-executor307 Not tainted 5.15.152-syzkaller #0 [ 41.679060][ T3502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.689095][ T3502] Call Trace: [ 41.692353][ T3502] [ 41.695262][ T3502] dump_stack_lvl+0x1e3/0x2cb [ 41.700011][ T3502] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 41.705631][ T3502] ? is_module_text_address+0x140/0x140 [ 41.711164][ T3502] bad_page+0x14b/0x170 [ 41.715300][ T3502] free_unref_page_prepare+0x48d/0xcf0 [ 41.720741][ T3502] free_unref_page_list+0x1f7/0x8e0 [ 41.725939][ T3502] ? uncharge_page+0x1f7/0x400 [ 41.730707][ T3502] ? free_unref_page_commit+0x500/0x500 [ 41.736245][ T3502] ? __mem_cgroup_uncharge_list+0xf8/0x150 [ 41.742041][ T3502] ? uncharge_batch+0x490/0x490 [ 41.746879][ T3502] ? _raw_spin_unlock+0x40/0x40 [ 41.751804][ T3502] ? __mod_zone_page_state+0x8a/0xc0 [ 41.757071][ T3502] release_pages+0x1bb9/0x1f40 [ 41.761822][ T3502] ? lru_cache_disable+0x30/0x30 [ 41.766749][ T3502] ? page_cache_free_page+0x510/0x510 [ 41.772108][ T3502] __pagevec_release+0x80/0xf0 [ 41.776850][ T3502] truncate_inode_pages_range+0x48b/0x1290 [ 41.782639][ T3502] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 41.788592][ T3502] ? invalidate_inode_page+0x370/0x370 [ 41.794037][ T3502] ? call_rcu+0x73a/0xa70 [ 41.798360][ T3502] ? lockdep_hardirqs_on+0x94/0x130 [ 41.803553][ T3502] ? rcu_force_quiescent_state+0x230/0x230 [ 41.809354][ T3502] dbUnmount+0x111/0x180 [ 41.813587][ T3502] jfs_umount+0x1fe/0x370 [ 41.817920][ T3502] jfs_put_super+0x86/0x180 [ 41.822402][ T3502] ? jfs_free_inode+0x20/0x20 [ 41.827125][ T3502] generic_shutdown_super+0x136/0x2c0 [ 41.832497][ T3502] kill_block_super+0x7a/0xe0 [ 41.837166][ T3502] deactivate_locked_super+0xa0/0x110 [ 41.842529][ T3502] cleanup_mnt+0x44e/0x500 [ 41.846982][ T3502] ? lockdep_hardirqs_on+0x94/0x130 [ 41.852174][ T3502] task_work_run+0x129/0x1a0 [ 41.856773][ T3502] do_exit+0x6a3/0x2480 [ 41.860925][ T3502] ? put_task_struct+0x80/0x80 [ 41.865671][ T3502] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 41.871645][ T3502] ? vtime_user_exit+0x2d1/0x400 [ 41.876571][ T3502] do_group_exit+0x144/0x310 [ 41.881148][ T3502] __x64_sys_exit_group+0x3b/0x40 [ 41.886161][ T3502] do_syscall_64+0x3d/0xb0 [ 41.890578][ T3502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.896467][ T3502] RIP: 0033:0x7fe98631a7c9 [ 41.900874][ T3502] Code: Unable to access opcode bytes at RIP 0x7fe98631a79f. [ 41.908225][ T3502] RSP: 002b:00007ffd9cc60178 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 41.916630][ T3502] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe98631a7c9 [ 41.924592][ T3502] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 41.932574][ T3502] RBP: 00007fe98639b2d0 R08: ffffffffffffffb8 R09: 00007ffd9cc60250 [ 41.940540][ T3502] R10: 0000000000005e8b R11: 0000000000000246 R12: 00007fe98639b2d0 [ 41.949450][ T3502] R13: 0000000000000000 R14: 00007fe98639c040 R15: 00007fe9862e8d00 [ 41.957413][ T3502] [ 41.960805][ T3502] Disabling lock debugging due to kernel taint