[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 481.228142] ERROR: (device loop0): txAbort: [ 481.228142] [ 481.235248] ====================================================== [ 481.235248] WARNING: the mand mount option is being deprecated and [ 481.235248] will be removed in v5.15! [ 481.235248] ====================================================== [ 481.260378] BUG: Bad page state in process syz-executor378 pfn:985c5 [ 481.267399] page:ffffea0002617140 count:0 mapcount:0 mapping: (null) index:0x2f [ 481.276115] flags: 0xfff0000000100c(referenced|uptodate|private) [ 481.282253] raw: 00fff0000000100c 0000000000000000 000000000000002f 00000000ffffffff [ 481.291209] raw: ffffea00027fa9a0 ffffea000295a460 ffff88809adf83c0 0000000000000000 [ 481.299471] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 481.306403] bad because of flags: 0x1000(private) [ 481.311227] Modules linked in: [ 481.315094] CPU: 0 PID: 7978 Comm: syz-executor378 Not tainted 4.14.295-syzkaller #0 [ 481.323042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 481.332376] Call Trace: [ 481.334947] dump_stack+0x1b2/0x281 [ 481.338560] bad_page.cold+0xdb/0x100 [ 481.342340] ? split_page+0x1c0/0x1c0 [ 481.346118] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 481.351544] free_hot_cold_page_list+0x93/0x300 [ 481.356189] release_pages+0x828/0xbf0 [ 481.360053] ? __put_compound_page+0xb0/0xb0 [ 481.364439] __pagevec_release+0x84/0xe0 [ 481.368482] truncate_inode_pages_range+0x5ce/0x13e0 [ 481.373565] ? generic_error_remove_page+0xb0/0xb0 [ 481.378469] ? mark_held_locks+0xa6/0xf0 [ 481.382507] ? parse_options+0x9de/0xd10 [ 481.386548] ? lockref_put_or_lock+0x5e/0x70 [ 481.390955] jfs_remount+0x41f/0x5a0 [ 481.394644] ? jfs_fill_super+0xab0/0xab0 [ 481.398766] ? shrink_dentry_list+0xac0/0xac0 [ 481.403241] do_remount_sb+0x150/0x530 [ 481.407103] ? jfs_fill_super+0xab0/0xab0 [ 481.411222] ? user_get_super+0x2e0/0x2e0 [ 481.415348] ? security_capable+0x88/0xb0 [ 481.419485] do_mount+0x15f3/0x2a30 [ 481.423090] ? copy_mount_string+0x40/0x40 [ 481.427299] ? dput.part.0+0x27/0x710 [ 481.431097] ? dput.part.0+0x164/0x710 [ 481.434961] ? mntput+0x5c/0x80 [ 481.438230] ? SyS_mkdirat+0x18f/0x270 [ 481.442102] ? copy_mount_options+0x1fa/0x2f0 [ 481.446587] ? copy_mnt_ns+0xa30/0xa30 [ 481.450546] SyS_mount+0xa8/0x120 [ 481.453977] ? copy_mnt_ns+0xa30/0xa30 [ 481.457842] do_syscall_64+0x1d5/0x640 [ 481.461711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 481.466878] RIP: 0033:0x7fd8bb1f7e09 [ 481.470573] RSP: 002b:00007ffdd8e7e9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.478281] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8bb1f7e09 [ 481.485531] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 481.492776] RBP: 00007fd8bb1b7670 R08: 0000000000000000 R09: 0000000000000000 [ 481.500020] R10: 0000000000000060 R11: 0000000000000246 R12: 00000000f8008000 [ 481.507264] R13: 0000000000000000 R14: 00080000000000fc R15: 0000000000000000 [ 481.522737] Disabling lock debugging due to kernel taint [ 481.528178] BUG: Bad page state in process syz-executor378 pfn:9fea6 [ 481.534771] page:ffffea00027fa980 count:0 mapcount:0 mapping: (null) index:0x2e [ 481.543023] flags: 0xfff0000000100c(referenced|uptodate|private) [ 481.549152] raw: 00fff0000000100c 0000000000000000 000000000000002e 00000000ffffffff [ 481.557049] raw: ffffea00028c36e0 ffffea0002617160 ffff88809adf84b0 0000000000000000 [ 481.564945] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 481.571504] bad because of flags: 0x1000(private) [ 481.576350] Modules linked in: [ 481.579534] CPU: 1 PID: 7978 Comm: syz-executor378 Tainted: G B 4.14.295-syzkaller #0 [ 481.588600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 481.597927] Call Trace: [ 481.600493] dump_stack+0x1b2/0x281 [ 481.604094] bad_page.cold+0xdb/0x100 [ 481.607868] ? split_page+0x1c0/0x1c0 [ 481.611646] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 481.617069] free_hot_cold_page_list+0x93/0x300 [ 481.621714] release_pages+0x828/0xbf0 [ 481.625647] ? __put_compound_page+0xb0/0xb0 [ 481.630028] __pagevec_release+0x84/0xe0 [ 481.634063] truncate_inode_pages_range+0x5ce/0x13e0 [ 481.639142] ? generic_error_remove_page+0xb0/0xb0 [ 481.644132] ? mark_held_locks+0xa6/0xf0 [ 481.648167] ? parse_options+0x9de/0xd10 [ 481.652205] ? lockref_put_or_lock+0x5e/0x70 [ 481.656601] jfs_remount+0x41f/0x5a0 [ 481.660376] ? jfs_fill_super+0xab0/0xab0 [ 481.664500] ? shrink_dentry_list+0xac0/0xac0 [ 481.668971] do_remount_sb+0x150/0x530 [ 481.672830] ? jfs_fill_super+0xab0/0xab0 [ 481.676949] ? user_get_super+0x2e0/0x2e0 [ 481.681069] ? security_capable+0x88/0xb0 [ 481.685193] do_mount+0x15f3/0x2a30 [ 481.688795] ? copy_mount_string+0x40/0x40 [ 481.693002] ? dput.part.0+0x27/0x710 [ 481.696774] ? dput.part.0+0x164/0x710 [ 481.700635] ? mntput+0x5c/0x80 [ 481.703890] ? SyS_mkdirat+0x18f/0x270 [ 481.707754] ? copy_mount_options+0x1fa/0x2f0 [ 481.712222] ? copy_mnt_ns+0xa30/0xa30 [ 481.716082] SyS_mount+0xa8/0x120 [ 481.719508] ? copy_mnt_ns+0xa30/0xa30 [ 481.723372] do_syscall_64+0x1d5/0x640 [ 481.727235] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 481.732402] RIP: 0033:0x7fd8bb1f7e09 [ 481.736090] RSP: 002b:00007ffdd8e7e9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.743792] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8bb1f7e09 [ 481.751044] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 481.758417] RBP: 00007fd8bb1b7670 R08: 0000000000000000 R09: 0000000000000000 [ 481.765684] R10: 0000000000000060 R11: 0000000000000246 R12: 00000000f8008000 [ 481.772948] R13: 0000000000000000 R14: 00080000000000fc R15: 0000000000000000 [ 481.780428] BUG: Bad page state in process syz-executor378 pfn:a30db [ 481.787031] page:ffffea00028c36c0 count:0 mapcount:0 mapping: (null) index:0x2d [ 481.795285] flags: 0xfff0000000100c(referenced|uptodate|private) [ 481.801417] raw: 00fff0000000100c 0000000000000000 000000000000002d 00000000ffffffff [ 481.809312] raw: ffffea0002b948e0 ffffea00027fa9a0 ffff88809adf85a0 0000000000000000 [ 481.817215] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 481.824072] bad because of flags: 0x1000(private) [ 481.828897] Modules linked in: [ 481.832067] CPU: 1 PID: 7978 Comm: syz-executor378 Tainted: G B 4.14.295-syzkaller #0 [ 481.841160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 481.850495] Call Trace: [ 481.853062] dump_stack+0x1b2/0x281 [ 481.856772] bad_page.cold+0xdb/0x100 [ 481.860553] ? split_page+0x1c0/0x1c0 [ 481.864337] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 481.869769] free_hot_cold_page_list+0x93/0x300 [ 481.874414] release_pages+0x828/0xbf0 [ 481.878477] ? __put_compound_page+0xb0/0xb0 [ 481.882863] __pagevec_release+0x84/0xe0 [ 481.886899] truncate_inode_pages_range+0x5ce/0x13e0 [ 481.891979] ? generic_error_remove_page+0xb0/0xb0 [ 481.896885] ? mark_held_locks+0xa6/0xf0 [ 481.900923] ? parse_options+0x9de/0xd10 [ 481.904962] ? lockref_put_or_lock+0x5e/0x70 [ 481.909349] jfs_remount+0x41f/0x5a0 [ 481.913040] ? jfs_fill_super+0xab0/0xab0 [ 481.917163] ? shrink_dentry_list+0xac0/0xac0 [ 481.921635] do_remount_sb+0x150/0x530 [ 481.925494] ? jfs_fill_super+0xab0/0xab0 [ 481.929614] ? user_get_super+0x2e0/0x2e0 [ 481.933734] ? security_capable+0x88/0xb0 [ 481.937857] do_mount+0x15f3/0x2a30 [ 481.941466] ? copy_mount_string+0x40/0x40 [ 481.945675] ? dput.part.0+0x27/0x710 [ 481.949449] ? dput.part.0+0x164/0x710 [ 481.953315] ? mntput+0x5c/0x80 [ 481.956569] ? SyS_mkdirat+0x18f/0x270 [ 481.960428] ? copy_mount_options+0x1fa/0x2f0 [ 481.964895] ? copy_mnt_ns+0xa30/0xa30 [ 481.968756] SyS_mount+0xa8/0x120 [ 481.972180] ? copy_mnt_ns+0xa30/0xa30 [ 481.976042] do_syscall_64+0x1d5/0x640 [ 481.979907] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 481.985069] RIP: 0033:0x7fd8bb1f7e09 [ 481.988754] RSP: 002b:00007ffdd8e7e9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.996433] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd8bb1f7e09 [ 482.003677] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000000 [ 482.010918] RBP: 00007fd8bb1b7670 R08: 0000000000000000 R09: 0000000000000000 [ 482.018162] R10: 0000000000000060 R11: 0000000000000246 R12: 00000000f8008000 [ 482.025407] R13: 0000000000000000 R14: 00080000000000fc R15: 00000000