Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. 1970/01/01 00:01:22 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:22 ignoring optional flag "type"="gce" 1970/01/01 00:01:22 parsed 1 programs [ 85.593230][ T4555] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 95.554460][ T4589] chnl_net:caif_netlink_parms(): no params data found [ 95.591162][ T4589] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.593235][ T4589] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.595844][ T4589] device bridge_slave_0 entered promiscuous mode [ 95.600828][ T4589] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.602797][ T4589] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.606184][ T4589] device bridge_slave_1 entered promiscuous mode [ 95.624621][ T4589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.631968][ T4589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.649688][ T4589] team0: Port device team_slave_0 added [ 95.653113][ T4589] team0: Port device team_slave_1 added [ 95.668382][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.670325][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.677631][ T4589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.682103][ T4589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.684604][ T4589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.691272][ T4589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.757359][ T4589] device hsr_slave_0 entered promiscuous mode [ 95.823734][ T4589] device hsr_slave_1 entered promiscuous mode [ 96.640555][ T4589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.665559][ T4589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.695421][ T4589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.726096][ T4589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.836499][ T4589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.846204][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.848723][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.857029][ T4589] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.861789][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.866730][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.869229][ T720] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.870979][ T720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.879526][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.883019][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.887725][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.890202][ T720] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.892019][ T720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.907163][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.910183][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.913032][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.917068][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.934038][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.936959][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.939713][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.942487][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.945259][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.947817][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.950358][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.957049][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.066481][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.068479][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.083658][ T4589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.097103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.099917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.114306][ T4589] device veth0_vlan entered promiscuous mode [ 97.121376][ T4589] device veth1_vlan entered promiscuous mode [ 97.125230][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.127926][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.130589][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.136634][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.145578][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.176892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.179484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.182131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.194636][ T4589] device veth0_macvtap entered promiscuous mode [ 97.198938][ T4589] device veth1_macvtap entered promiscuous mode [ 97.225236][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.227359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.229996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.238187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.240909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.258201][ T4589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.260304][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.263076][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.271445][ T4589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.273979][ T4589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.276286][ T4589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.278513][ T4589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.945806][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.948003][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.962504][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.980272][ T720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.982492][ T720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.986129][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:38 executed programs: 0 [ 98.698478][ T4766] chnl_net:caif_netlink_parms(): no params data found [ 98.735119][ T4766] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.737072][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.739641][ T4766] device bridge_slave_0 entered promiscuous mode [ 98.757538][ T4766] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.759460][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.762279][ T4766] device bridge_slave_1 entered promiscuous mode [ 98.780220][ T4766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.786073][ T4766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.802685][ T4766] team0: Port device team_slave_0 added [ 98.806255][ T4766] team0: Port device team_slave_1 added [ 98.820351][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.822254][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.830718][ T4766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.837378][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.839254][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.846704][ T4766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.896299][ T4766] device hsr_slave_0 entered promiscuous mode [ 98.943856][ T4766] device hsr_slave_1 entered promiscuous mode [ 98.993556][ T4766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.995653][ T4766] Cannot create hsr debugfs directory [ 99.091427][ T4766] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.663717][ T4682] Bluetooth: hci0: command 0x0409 tx timeout [ 102.191846][ T4766] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.335096][ T4766] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.441348][ T4766] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.619904][ T4766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.636886][ T4766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.706190][ T4766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.744216][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 102.755741][ T4766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.846943][ T4766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.854889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.857466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.861918][ T4766] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.870570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.873497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.876311][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.878217][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.881898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.888323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.891058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.894720][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.896578][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.902367][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.944550][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.947635][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.950708][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.953539][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.956388][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.959132][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.964973][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.967620][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.976484][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.979097][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.985409][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.061086][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.064234][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.070432][ T4766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.083155][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.087215][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.100436][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.103167][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.106801][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.109389][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.114816][ T4766] device veth0_vlan entered promiscuous mode [ 103.121299][ T4766] device veth1_vlan entered promiscuous mode [ 103.135729][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.138443][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.141017][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.145094][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.149551][ T4766] device veth0_macvtap entered promiscuous mode [ 103.154863][ T4766] device veth1_macvtap entered promiscuous mode [ 103.164285][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.167185][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.170834][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.172830][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.177034][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.179612][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.183443][ T720] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.188219][ T4766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.190939][ T4766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.194602][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.196672][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.199364][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.206821][ T4766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.209215][ T4766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.211522][ T4766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.213986][ T4766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.254523][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.256706][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.259787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.306350][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.308504][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.311725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.575065][ T4987] loop0: detected capacity change from 0 to 32768 [ 103.671819][ T4987] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 103.671819][ T4987] [ 103.677275][ T4987] ERROR: (device loop0): remounting filesystem as read-only [ 103.680154][ T4987] BUG: Bad page state in process syz.0.15 pfn:108de8 [ 103.682032][ T4987] page:000000008c65279f refcount:0 mapcount:0 mapping:0000000000000000 index:0x2f pfn:0x108de8 [ 103.685628][ T4987] flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) [ 103.688325][ T4987] raw: 05ffc00000002006 fffffc000343f7c8 ffff80001d407700 0000000000000000 [ 103.690545][ T4987] raw: 000000000000002f ffff0000c8ceae88 00000000ffffffff 0000000000000000 [ 103.692725][ T4987] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 103.695524][ T4987] Modules linked in: [ 103.696570][ T4987] CPU: 1 PID: 4987 Comm: syz.0.15 Not tainted 5.15.179-syzkaller #0 [ 103.698587][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.701152][ T4987] Call trace: [ 103.701972][ T4987] dump_backtrace+0x0/0x530 [ 103.703101][ T4987] show_stack+0x2c/0x3c [ 103.704153][ T4987] dump_stack_lvl+0x108/0x170 [ 103.705492][ T4987] dump_stack+0x1c/0x58 [ 103.706583][ T4987] bad_page+0x1a4/0x1c4 [ 103.707708][ T4987] free_unref_page_prepare+0x4ec/0xe30 [ 103.709163][ T4987] free_unref_page_list+0xe4/0x7a8 [ 103.710625][ T4987] release_pages+0x1770/0x1a88 [ 103.711935][ T4987] __pagevec_release+0x94/0x10c [ 103.713224][ T4987] truncate_inode_pages_range+0x3ac/0xbe0 [ 103.714797][ T4987] truncate_inode_pages+0x2c/0x3c [ 103.716117][ T4987] jfs_remount+0x2dc/0x594 [ 103.717260][ T4987] legacy_reconfigure+0xfc/0x114 [ 103.718610][ T4987] reconfigure_super+0x1d0/0x6ec [ 103.719933][ T4987] __arm64_sys_fsconfig+0xa1c/0xd18 [ 103.721321][ T4987] invoke_syscall+0x98/0x2b8 [ 103.722543][ T4987] el0_svc_common+0x138/0x258 [ 103.723822][ T4987] do_el0_svc+0x58/0x14c [ 103.725055][ T4987] el0_svc+0x7c/0x1f0 [ 103.726103][ T4987] el0t_64_sync_handler+0x84/0xe4 [ 103.727512][ T4987] el0t_64_sync+0x1a0/0x1a4 [ 103.729668][ T4987] Disabling lock debugging due to kernel taint [ 103.731297][ T4987] BUG: Bad page state in process syz.0.15 pfn:110fdf [ 103.733022][ T4987] page:0000000022e6d009 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2e pfn:0x110fdf [ 103.736240][ T4987] flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) [ 103.738835][ T4987] raw: 05ffc00000002006 fffffc00033ba188 ffff80001d407700 0000000000000000 [ 103.741281][ T4987] raw: 000000000000002e ffff0000c8cead90 00000000ffffffff 0000000000000000 [ 103.744039][ T4987] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 103.746020][ T4987] Modules linked in: [ 103.747036][ T4987] CPU: 1 PID: 4987 Comm: syz.0.15 Tainted: G B 5.15.179-syzkaller #0 [ 103.749547][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.752217][ T4987] Call trace: [ 103.753063][ T4987] dump_backtrace+0x0/0x530 [ 103.754256][ T4987] show_stack+0x2c/0x3c [ 103.755360][ T4987] dump_stack_lvl+0x108/0x170 [ 103.756589][ T4987] dump_stack+0x1c/0x58 [ 103.757735][ T4987] bad_page+0x1a4/0x1c4 [ 103.758862][ T4987] free_unref_page_prepare+0x4ec/0xe30 [ 103.760357][ T4987] free_unref_page_list+0xe4/0x7a8 [ 103.761850][ T4987] release_pages+0x1770/0x1a88 [ 103.763224][ T4987] __pagevec_release+0x94/0x10c [ 103.764525][ T4987] truncate_inode_pages_range+0x3ac/0xbe0 [ 103.766065][ T4987] truncate_inode_pages+0x2c/0x3c [ 103.767409][ T4987] jfs_remount+0x2dc/0x594 [ 103.768646][ T4987] legacy_reconfigure+0xfc/0x114 [ 103.770044][ T4987] reconfigure_super+0x1d0/0x6ec [ 103.771363][ T4987] __arm64_sys_fsconfig+0xa1c/0xd18 [ 103.772720][ T4987] invoke_syscall+0x98/0x2b8 [ 103.773925][ T4987] el0_svc_common+0x138/0x258 [ 103.775144][ T4987] do_el0_svc+0x58/0x14c [ 103.776232][ T4987] el0_svc+0x7c/0x1f0 [ 103.777279][ T4987] el0t_64_sync_handler+0x84/0xe4 [ 103.778661][ T4987] el0t_64_sync+0x1a0/0x1a4 [ 103.780257][ T4987] BUG: Bad page state in process syz.0.15 pfn:10ee86 [ 103.782090][ T4987] page:0000000088eaa8e1 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x10ee86 [ 103.785380][ T4987] flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) [ 103.787956][ T4987] raw: 05ffc00000002006 fffffc0003688c88 ffff80001d407700 0000000000000000 [ 103.790172][ T4987] raw: 000000000000002d ffff0000c8ceac98 00000000ffffffff 0000000000000000 [ 103.792441][ T4987] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 103.794415][ T4987] Modules linked in: [ 103.795410][ T4987] CPU: 1 PID: 4987 Comm: syz.0.15 Tainted: G B 5.15.179-syzkaller #0 [ 103.797894][ T4987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.800461][ T4987] Call trace: [ 103.801334][ T4987] dump_backtrace+0x0/0x530 [ 103.802514][ T4987] show_stack+0x2c/0x3c [ 103.803591][ T4987] dump_stack_lvl+0x108/0x170 [ 103.804800][ T4987] dump_stack+0x1c/0x58 [ 103.805934][ T4987] bad_page+0x1a4/0x1c4 [ 103.807195][ T4987] free_unref_page_prepare+0x4ec/0xe30 [ 103.808661][ T4987] free_unref_page_list+0xe4/0x7a8 [ 103.810082][ T4987] release_pages+0x1770/0x1a88 [ 103.811386][ T4987] __pagevec_release+0x94/0x10c [ 103.812660][ T4987] truncate_inode_pages_range+0x3ac/0xbe0 [ 103.814177][ T4987] truncate_inode_pages+0x2c/0x3c [ 103.815513][ T4987] jfs_remount+0x2dc/0x594 [ 103.816680][ T4987] legacy_reconfigure+0xfc/0x114 [ 103.818017][ T4987] reconfigure_super+0x1d0/0x6ec [ 103.819369][ T4987] __arm64_sys_fsconfig+0xa1c/0xd18 [ 103.820732][ T4987] invoke_syscall+0x98/0x2b8 [ 103.822005][ T4987] el0_svc_common+0x138/0x258 [ 103.823272][ T4987] do_el0_svc+0x58/0x14c [ 103.824388][ T4987] el0_svc+0x7c/0x1f0 [ 103.825448][ T4987] el0t_64_sync_handler+0x84/0xe4 [ 103.826841][ T4987] el0t_64_sync+0x1a0/0x1a4 [ 103.832301][ T136] read_mapping_page failed! [ 103.834027][ T136] ERROR: (device loop0): txAbort: [ 103.834027][ T136] [ 103.835908][ T136] ERROR: (device loop0): remounting filesystem as read-only [ 103.837737][ T136] jfs_write_inode: jfs_commit_inode failed! [ 103.839620][ T241] BUG: Bad page state in process jfsCommit pfn:115777 [ 103.841414][ T241] page:00000000b8104b3f refcount:0 mapcount:0 mapping:0000000000000000 index:0x2c pfn:0x115777 [ 103.844406][ T241] flags: 0x5ffc00000002005(locked|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) [ 103.846913][ T241] raw: 05ffc00000002005 dead000000000100 dead000000000122 0000000000000000 [ 103.849175][ T241] raw: 000000000000002c ffff0000c8ceaba0 00000000ffffffff 0000000000000000 [ 103.851371][ T241] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 103.853205][ T241] Modules linked in: [ 103.854590][ T241] CPU: 1 PID: 241 Comm: jfsCommit Tainted: G B 5.15.179-syzkaller #0 [ 103.857080][ T241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.859640][ T241] Call trace: [ 103.860501][ T241] dump_backtrace+0x0/0x530 [ 103.861655][ T241] show_stack+0x2c/0x3c [ 103.862679][ T241] dump_stack_lvl+0x108/0x170 [ 103.863911][ T241] dump_stack+0x1c/0x58 [ 103.865029][ T241] bad_page+0x1a4/0x1c4 [ 103.866110][ T241] free_unref_page_prepare+0x4ec/0xe30 [ 103.867587][ T241] free_unref_page+0x78/0x204 [ 103.868831][ T241] __put_page+0xf8/0x134 [ 103.869938][ T241] _metapage_homeok+0x138/0x288 [ 103.871284][ T241] txUnlock+0x264/0xbb0 [ 103.872496][ T241] jfs_lazycommit+0x4a0/0xa40 [ 103.873723][ T241] kthread+0x37c/0x45c [ 103.874868][ T241] ret_from_fork+0x10/0x20 1970/01/01 00:01:43 executed programs: 3 [ 103.877495][ T241] page:00000000b8104b3f refcount:0 mapcount:0 mapping:0000000000000000 index:0x2c pfn:0x115777 [ 103.880204][ T241] flags: 0x5ffc00000002005(locked|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) [ 103.882595][ T241] raw: 05ffc00000002005 dead000000000100 dead000000000122 0000000000000000 [ 103.884946][ T241] raw: 000000000000002c ffff0000c8ceaba0 00000000ffffffff 0000000000000000 [ 103.887209][ T241] page dumped because: VM_BUG_ON_PAGE(((unsigned int) page_ref_count(page) + 127u <= 127u)) [ 103.890015][ T241] ------------[ cut here ]------------ [ 103.891441][ T241] kernel BUG at include/linux/mm.h:1213! [ 103.892979][ T241] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 103.895034][ T241] Modules linked in: [ 103.896109][ T241] CPU: 1 PID: 241 Comm: jfsCommit Tainted: G B 5.15.179-syzkaller #0 [ 103.898574][ T241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.901237][ T241] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 103.903363][ T241] pc : put_metapage+0x280/0x2e4 [ 103.904654][ T241] lr : put_metapage+0x280/0x2e4 [ 103.905954][ T241] sp : ffff80001f987b80 [ 103.907092][ T241] x29: ffff80001f987b80 x28: dfff800000000000 x27: 1fffe0001919d579 [ 103.909262][ T241] x26: 1fffe0001919d586 x25: dfff800000000000 x24: 000000000000007f [ 103.911385][ T241] x23: fffffc000355ddf4 x22: fffffc000355ddc0 x21: ffff0000c8ceabc8 [ 103.913472][ T241] x20: ffff0000c8ceac30 x19: ffff0000c8ceaba0 x18: 0000000000000001 [ 103.915602][ T241] x17: 0000000000000000 x16: ffff800011b5ac80 x15: 00000000ffffffff [ 103.917700][ T241] x14: ffff0000c69e1b40 x13: 0000000000000001 x12: 0000000000000001 [ 103.919783][ T241] x11: 0000000000000000 x10: 0000000000000000 x9 : 6f25817c143a5800 [ 103.921963][ T241] x8 : 6f25817c143a5800 x7 : 0000000000000001 x6 : 0000000000000001 [ 103.924121][ T241] x5 : ffff80001f986ff8 x4 : ffff800014c4fe40 x3 : ffff800008557710 [ 103.926286][ T241] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000059 [ 103.928481][ T241] Call trace: [ 103.929379][ T241] put_metapage+0x280/0x2e4 [ 103.930619][ T241] txUnlock+0x3e4/0xbb0 [ 103.931799][ T241] jfs_lazycommit+0x4a0/0xa40 [ 103.933080][ T241] kthread+0x37c/0x45c [ 103.934155][ T241] ret_from_fork+0x10/0x20 [ 103.935313][ T241] Code: d0043421 91158021 aa1603e0 97b8ec72 (d4210000) [ 103.937172][ T241] ---[ end trace b60ce82d645404f0 ]--- [ 104.347976][ T241] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 104.350061][ T241] SMP: stopping secondary CPUs [ 104.351320][ T241] Kernel Offset: disabled [ 104.352441][ T241] CPU features: 0x8,000081c1,21302e40 [ 104.353907][ T241] Memory Limit: none [ 104.720420][ T241] Rebooting in 86400 seconds..