Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts. 2023/11/27 05:46:33 ignoring optional flag "sandboxArg"="0" 2023/11/27 05:46:33 parsed 1 programs 2023/11/27 05:46:33 executed programs: 0 [ 44.784563][ T2100] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.740224][ T2105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.748525][ T2105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.756377][ T2105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.763981][ T2105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.240587][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.242167][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.248567][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.256435][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.271978][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.279580][ T1198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.397616][ T2827] loop0: detected capacity change from 0 to 32768 [ 48.411927][ T2827] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 48.411927][ T2827] [ 48.423581][ T2827] ERROR: (device loop0): remounting filesystem as read-only [ 48.430977][ T2827] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 48.430977][ T2827] [ 48.443090][ T2827] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 48.443090][ T2827] [ 48.456162][ T77] BUG: Bad page state in process jfsCommit pfn:10d6ef [ 48.463211][ T77] page:ffffea000435bbc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x10d6ef [ 48.473781][ T77] flags: 0x200000000002047(locked|referenced|uptodate|workingset|private|node=0|zone=2) [ 48.483883][ T77] raw: 0200000000002047 dead000000000100 dead000000000122 0000000000000000 [ 48.492596][ T77] raw: 000000000000001c ffff888109b48000 00000000ffffffff 0000000000000000 [ 48.501264][ T77] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 48.508627][ T77] page_owner tracks the page as allocated [ 48.514451][ T77] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 2827, tgid 2826 (syz-executor.0), ts 48405686404, free_ts 47884162327 [ 48.533114][ T77] post_alloc_hook+0x13c/0x160 [ 48.537975][ T77] get_page_from_freelist+0x10f4/0x12c0 [ 48.543780][ T77] __alloc_pages+0x11b/0x270 [ 48.548393][ T77] filemap_alloc_folio+0x5a/0x2d0 [ 48.553454][ T77] do_read_cache_folio+0x175/0x530 [ 48.558820][ T77] do_read_cache_page+0x30/0x160 [ 48.563758][ T77] __get_metapage+0x16c/0x890 [ 48.568427][ T77] diRead+0x24d/0x380 [ 48.572411][ T77] jfs_iget+0x60/0x190 [ 48.576496][ T77] jfs_fill_super+0x316/0x4a0 [ 48.581156][ T77] mount_bdev+0x197/0x220 [ 48.585506][ T77] legacy_get_tree+0x2c/0x70 [ 48.590267][ T77] vfs_get_tree+0x2b/0xc0 [ 48.594955][ T77] do_new_mount+0x1dd/0x540 [ 48.599451][ T77] __se_sys_mount+0x283/0x2d0 [ 48.604137][ T77] do_syscall_64+0x3d/0xb0 [ 48.608748][ T77] page last free stack trace: [ 48.613595][ T77] free_unref_page_prepare+0x52b/0x5b0 [ 48.619218][ T77] free_unref_page_list+0x7b/0x3a0 [ 48.624350][ T77] release_pages+0x14ea/0x17c0 [ 48.629311][ T77] tlb_flush_mmu+0x22e/0x280 [ 48.633993][ T77] tlb_finish_mmu+0x55/0xa0 [ 48.638583][ T77] exit_mmap+0x2c5/0x5e0 [ 48.642974][ T77] __mmput+0x72/0x1a0 [ 48.647327][ T77] exit_mm+0xcc/0x160 [ 48.651365][ T77] do_exit+0x37a/0x1060 [ 48.655641][ T77] do_group_exit+0xdc/0xe0 [ 48.660229][ T77] __x64_sys_exit_group+0xe/0x10 [ 48.665179][ T77] do_syscall_64+0x3d/0xb0 [ 48.669764][ T77] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.675769][ T77] Modules linked in: [ 48.679651][ T77] CPU: 1 PID: 77 Comm: jfsCommit Not tainted 6.1.63-syzkaller #0 [ 48.687355][ T77] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 48.697575][ T77] Call Trace: [ 48.700838][ T77] [ 48.703752][ T77] dump_stack_lvl+0xf0/0x176 [ 48.708356][ T77] bad_page+0xdd/0xf0 [ 48.712380][ T77] free_unref_page_prepare+0x234/0x5b0 [ 48.718024][ T77] free_unref_page+0x33/0x260 [ 48.722957][ T77] txUnlock+0x1d0/0x710 [ 48.727096][ T77] ? jfs_lazycommit+0x20a/0x480 [ 48.732117][ T77] jfs_lazycommit+0x22a/0x480 [ 48.736971][ T77] ? do_task_dead+0x40/0x40 [ 48.741557][ T77] ? txFreelock+0x270/0x270 [ 48.746319][ T77] kthread+0xf5/0x120 [ 48.750285][ T77] ? kthread_blkcg+0x60/0x60 [ 48.754954][ T77] ret_from_fork+0x1f/0x30 [ 48.759367][ T77] [ 48.762450][ T77] Disabling lock debugging due to kernel taint [ 48.768784][ T77] page:ffffea000435bbc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x10d6ef [ 48.779124][ T77] flags: 0x200000000002047(locked|referenced|uptodate|workingset|private|node=0|zone=2) [ 48.788845][ T77] raw: 0200000000002047 dead000000000100 dead000000000122 0000000000000000 [ 48.797859][ T77] raw: 000000000000001c ffff888109b48000 00000000ffffffff 0000000000000000 [ 48.806523][ T77] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 48.817008][ T77] page_owner tracks the page as allocated [ 48.822791][ T77] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 2827, tgid 2826 (syz-executor.0), ts 48405686404, free_ts 47884162327 [ 48.841445][ T77] post_alloc_hook+0x13c/0x160 [ 48.846412][ T77] get_page_from_freelist+0x10f4/0x12c0 [ 48.852119][ T77] __alloc_pages+0x11b/0x270 [ 48.856745][ T77] filemap_alloc_folio+0x5a/0x2d0 [ 48.861790][ T77] do_read_cache_folio+0x175/0x530 [ 48.867019][ T77] do_read_cache_page+0x30/0x160 [ 48.872127][ T77] __get_metapage+0x16c/0x890 [ 48.876812][ T77] diRead+0x24d/0x380 [ 48.880870][ T77] jfs_iget+0x60/0x190 [ 48.885054][ T77] jfs_fill_super+0x316/0x4a0 [ 48.889973][ T77] mount_bdev+0x197/0x220 [ 48.894328][ T77] legacy_get_tree+0x2c/0x70 [ 48.899351][ T77] vfs_get_tree+0x2b/0xc0 [ 48.903913][ T77] do_new_mount+0x1dd/0x540 [ 48.908604][ T77] __se_sys_mount+0x283/0x2d0 [ 48.913604][ T77] do_syscall_64+0x3d/0xb0 [ 48.918214][ T77] page last free stack trace: [ 48.922868][ T77] free_unref_page_prepare+0x52b/0x5b0 [ 48.928449][ T77] free_unref_page_list+0x7b/0x3a0 [ 48.933930][ T77] release_pages+0x14ea/0x17c0 [ 48.938776][ T77] tlb_flush_mmu+0x22e/0x280 [ 48.943371][ T77] tlb_finish_mmu+0x55/0xa0 [ 48.947866][ T77] exit_mmap+0x2c5/0x5e0 [ 48.952095][ T77] __mmput+0x72/0x1a0 [ 48.956161][ T77] exit_mm+0xcc/0x160 [ 48.960219][ T77] do_exit+0x37a/0x1060 [ 48.964375][ T77] do_group_exit+0xdc/0xe0 [ 48.968853][ T77] __x64_sys_exit_group+0xe/0x10 [ 48.974106][ T77] do_syscall_64+0x3d/0xb0 [ 48.978754][ T77] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 48.984822][ T77] invalid opcode: 0000 [#1] PREEMPT SMP [ 48.990384][ T77] CPU: 1 PID: 77 Comm: jfsCommit Tainted: G B 6.1.63-syzkaller #0 [ 48.999653][ T77] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 49.009958][ T77] RIP: 0010:put_metapage+0x23a/0x2a0 [ 49.015276][ T77] Code: ff 4c 89 f0 48 25 ff 0f 00 00 74 20 e8 4f 95 a2 ff e9 8c fe ff ff e8 45 95 a2 ff 4c 89 f7 48 c7 c6 f0 d4 4d 83 e8 e6 e1 b4 ff <0f> 0b 4d 8b 26 bb 00 00 01 00 be 00 00 01 00 4c 21 e6 31 ff e8 fd [ 49.036377][ T77] RSP: 0018:ffffc9000195bdd8 EFLAGS: 00010286 [ 49.042521][ T77] RAX: 8cc59eca5f93f300 RBX: 000000000000007f RCX: ffff88810b67b680 [ 49.050503][ T77] RDX: 0000000000000000 RSI: ffffffff835acb27 RDI: ffffffff83544b94 [ 49.058478][ T77] RBP: 0000000000000282 R08: ffffffff814c5713 R09: 0000000000000000 [ 49.066531][ T77] R10: 59535f7972746e65 R11: 535f7972746e6520 R12: 0000000000000012 [ 49.074680][ T77] R13: ffffc900014c2000 R14: ffffea000435bbc0 R15: ffff888109b48000 [ 49.082726][ T77] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 49.091633][ T77] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.098297][ T77] CR2: 00007f9bb75ad000 CR3: 0000000100e5b000 CR4: 00000000003506e0 [ 49.106260][ T77] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.114209][ T77] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.122690][ T77] Call Trace: [ 49.125950][ T77] [ 49.128860][ T77] ? __die_body+0x5e/0xa0 [ 49.133172][ T77] ? die+0x83/0xb0 [ 49.136961][ T77] ? do_trap+0xa2/0x170 [ 49.141361][ T77] ? put_metapage+0x23a/0x2a0 [ 49.146020][ T77] ? put_metapage+0x23a/0x2a0 [ 49.150674][ T77] ? handle_invalid_op+0x65/0x80 [ 49.155594][ T77] ? put_metapage+0x23a/0x2a0 [ 49.160267][ T77] ? exc_invalid_op+0x28/0x40 [ 49.165073][ T77] ? asm_exc_invalid_op+0x16/0x20 [ 49.170351][ T77] ? __dump_page_owner+0x183/0x1f0 [ 49.175464][ T77] ? put_metapage+0x23a/0x2a0 [ 49.180129][ T77] ? put_metapage+0x23a/0x2a0 [ 49.184790][ T77] ? do_raw_spin_unlock+0x63/0x2b0 [ 49.189880][ T77] txUnlock+0x30a/0x710 [ 49.194017][ T77] jfs_lazycommit+0x22a/0x480 [ 49.198686][ T77] ? do_task_dead+0x40/0x40 [ 49.203193][ T77] ? txFreelock+0x270/0x270 [ 49.207697][ T77] kthread+0xf5/0x120 [ 49.211666][ T77] ? kthread_blkcg+0x60/0x60 [ 49.216238][ T77] ret_from_fork+0x1f/0x30 [ 49.220640][ T77] [ 49.223638][ T77] Modules linked in: [ 49.227544][ T77] ---[ end trace 0000000000000000 ]--- [ 49.233004][ T77] RIP: 0010:put_metapage+0x23a/0x2a0 [ 49.238394][ T77] Code: ff 4c 89 f0 48 25 ff 0f 00 00 74 20 e8 4f 95 a2 ff e9 8c fe ff ff e8 45 95 a2 ff 4c 89 f7 48 c7 c6 f0 d4 4d 83 e8 e6 e1 b4 ff <0f> 0b 4d 8b 26 bb 00 00 01 00 be 00 00 01 00 4c 21 e6 31 ff e8 fd [ 49.258625][ T77] RSP: 0018:ffffc9000195bdd8 EFLAGS: 00010286 [ 49.264703][ T77] RAX: 8cc59eca5f93f300 RBX: 000000000000007f RCX: ffff88810b67b680 [ 49.272839][ T77] RDX: 0000000000000000 RSI: ffffffff835acb27 RDI: ffffffff83544b94 [ 49.280907][ T77] RBP: 0000000000000282 R08: ffffffff814c5713 R09: 0000000000000000 [ 49.289142][ T77] R10: 59535f7972746e65 R11: 535f7972746e6520 R12: 0000000000000012 [ 49.297235][ T77] R13: ffffc900014c2000 R14: ffffea000435bbc0 R15: ffff888109b48000 [ 49.305671][ T77] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 49.315131][ T77] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.321887][ T77] CR2: 00007f9bb75ad000 CR3: 0000000100e5b000 CR4: 00000000003506e0 [ 49.330175][ T77] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.338185][ T77] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.346445][ T77] Kernel panic - not syncing: Fatal exception [ 49.352934][ T77] Kernel Offset: disabled [ 49.357334][ T77] Rebooting in 86400 seconds..