ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt ERROR: (device loop0): remounting filesystem as read-only ERROR: (device loop0): jfs_unlink: ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt BUG: Bad page state in process syz.0.7 pfn:1e5d4 page:ffffea0000797500 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x1e5d4 flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) raw: 00fff00000002006 ffffea0001e96308 ffffc90003117940 0000000000000000 raw: 000000000000001c ffff8880203e07c0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set page_owner tracks the page as allocated page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 3653, ts 60596019073, free_ts 60072641733 prep_new_page mm/page_alloc.c:2426 [inline] get_page_from_freelist+0x322a/0x33c0 mm/page_alloc.c:4159 __alloc_pages+0x272/0x700 mm/page_alloc.c:5423 __page_cache_alloc+0xd4/0x4a0 mm/filemap.c:1022 do_read_cache_page+0x1e5/0x1040 mm/filemap.c:3457 read_mapping_page include/linux/pagemap.h:515 [inline] __get_metapage+0x398/0x1070 fs/jfs/jfs_metapage.c:621 diRead+0x707/0xbb0 fs/jfs/jfs_imap.c:367 jfs_iget+0x88/0x3b0 fs/jfs/inode.c:35 jfs_fill_super+0x826/0xc70 fs/jfs/super.c:585 mount_bdev+0x2c9/0x3f0 fs/super.c:1398 legacy_get_tree+0xeb/0x180 fs/fs_context.c:611 vfs_get_tree+0x88/0x270 fs/super.c:1528 do_new_mount+0x2ba/0xb40 fs/namespace.c:3005 do_mount fs/namespace.c:3348 [inline] __do_sys_mount fs/namespace.c:3556 [inline] __se_sys_mount+0x2d5/0x3c0 fs/namespace.c:3533 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 page last free stack trace: reset_page_owner include/linux/page_owner.h:24 [inline] free_pages_prepare mm/page_alloc.c:1340 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0xc34/0xcf0 mm/page_alloc.c:3317 free_unref_page+0x95/0x2d0 mm/page_alloc.c:3396 free_slab mm/slub.c:2015 [inline] discard_slab mm/slub.c:2021 [inline] __unfreeze_partials+0x1b7/0x210 mm/slub.c:2507 put_cpu_partial+0x132/0x1a0 mm/slub.c:2587 do_slab_free mm/slub.c:3487 [inline] ___cache_free+0xe3/0x100 mm/slub.c:3506 qlist_free_all+0x36/0x90 mm/kasan/quarantine.c:176 kasan_quarantine_reduce+0x162/0x180 mm/kasan/quarantine.c:283 __kasan_slab_alloc+0x2f/0xc0 mm/kasan/common.c:444 kasan_slab_alloc include/linux/kasan.h:254 [inline] slab_post_alloc_hook+0x53/0x380 mm/slab.h:519 slab_alloc_node mm/slub.c:3220 [inline] __kmalloc_node+0x151/0x390 mm/slub.c:4451 kmalloc_node include/linux/slab.h:614 [inline] kzalloc_node include/linux/slab.h:732 [inline] qdisc_alloc+0x95/0xaf0 net/sched/sch_generic.c:888 qdisc_create_dflt+0x5e/0x460 net/sched/sch_generic.c:950 attach_default_qdiscs net/sched/sch_generic.c:1136 [inline] dev_activate+0x18e/0x12c0 net/sched/sch_generic.c:1190 __dev_open+0x3eb/0x500 net/core/dev.c:1515 __dev_change_flags+0x1db/0x6e0 net/core/dev.c:8813 dev_change_flags+0x87/0x190 net/core/dev.c:8884 Modules linked in: CPU: 1 PID: 3653 Comm: syz.0.7 Not tainted 5.15.167-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2d0 lib/dump_stack.c:106 bad_page+0x14b/0x170 mm/page_alloc.c:652 check_free_page_bad mm/page_alloc.c:1199 [inline] check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x48d/0xcf0 mm/page_alloc.c:3317 free_unref_page_list+0x1f7/0x8e0 mm/page_alloc.c:3433 release_pages+0x1bb9/0x1f40 mm/swap.c:963 __pagevec_release+0x80/0xf0 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x48b/0x1290 mm/truncate.c:329 jfs_remount+0x360/0x6a0 fs/jfs/super.c:456 reconfigure_super+0x43a/0x870 fs/super.c:936 do_remount fs/namespace.c:2661 [inline] path_mount+0xceb/0x10a0 fs/namespace.c:3327 do_mount fs/namespace.c:3348 [inline] __do_sys_mount fs/namespace.c:3556 [inline] __se_sys_mount+0x2d5/0x3c0 fs/namespace.c:3533 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3b/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x66/0xd0 RIP: 0033:0x7f6f9c090ff9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f6f9a509038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f6f9c248f80 RCX: 00007f6f9c090ff9 RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000000 RBP: 00007f6f9c103296 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000010f4c2a R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f6f9c248f80 R15: 00007ffc6266ddc8