Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. 2025/08/19 21:36:22 ignoring optional flag "sandboxArg"="0" 2025/08/19 21:36:22 ignoring optional flag "type"="gce" 2025/08/19 21:36:23 parsed 1 programs 2025/08/19 21:36:23 executed programs: 0 [ 83.894675][ T4508] chnl_net:caif_netlink_parms(): no params data found [ 83.939468][ T4508] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.947077][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.954925][ T4508] device bridge_slave_0 entered promiscuous mode [ 83.964732][ T4508] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.972200][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.980276][ T4508] device bridge_slave_1 entered promiscuous mode [ 84.002281][ T4508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.013462][ T4508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.044233][ T4508] team0: Port device team_slave_0 added [ 84.052139][ T4508] team0: Port device team_slave_1 added [ 84.071182][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.078447][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.105035][ T4508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.118416][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.125883][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.152514][ T4508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.184736][ T4508] device hsr_slave_0 entered promiscuous mode [ 84.191776][ T4508] device hsr_slave_1 entered promiscuous mode [ 84.747198][ T4508] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.757455][ T4508] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.767555][ T4508] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.779428][ T4508] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.806786][ T4508] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.813914][ T4508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.821419][ T4508] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.828660][ T4508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.890557][ T4508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.907109][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.916761][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.924827][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.936711][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 84.952117][ T4508] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.964158][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.974465][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.984763][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.991933][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.019315][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.028434][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.039158][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.046508][ T3088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.056879][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.076185][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.087038][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.098457][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.108732][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.119021][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.128434][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.149082][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.158999][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.173807][ T4508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.186398][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.195024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.204622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.337677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.346754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.361402][ T4508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.383793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.393963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.417186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.426748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.437941][ T4508] device veth0_vlan entered promiscuous mode [ 85.448987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.457263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.471823][ T4508] device veth1_vlan entered promiscuous mode [ 85.496185][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.504500][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.513827][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.523356][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.533818][ T4508] device veth0_macvtap entered promiscuous mode [ 85.547803][ T4508] device veth1_macvtap entered promiscuous mode [ 85.566116][ T4508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.574576][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.583240][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.593767][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.603731][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.615429][ T4508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.627546][ T4508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.638716][ T4508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.648393][ T4508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.659159][ T4508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.670401][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.681839][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.867250][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 86.049415][ T4589] loop0: detected capacity change from 0 to 32768 [ 86.080016][ T4589] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 86.080016][ T4589] [ 86.093716][ T4589] ERROR: (device loop0): remounting filesystem as read-only [ 86.116311][ T4589] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 86.116311][ T4589] [ 86.142628][ T4589] ERROR: (device loop0): remounting filesystem as read-only [ 86.150614][ T4589] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 86.150614][ T4589] [ 86.175894][ T277] BUG: Bad page state in process jfsCommit pfn:7e7ef [ 86.182758][ T277] page:ffffea0001f9fbc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7e7ef [ 86.200322][ T277] flags: 0xfff00000002005(locked|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 86.210263][ T277] raw: 00fff00000002005 dead000000000100 dead000000000122 0000000000000000 [ 86.221003][ T277] raw: 000000000000001c ffff8880734579b0 00000000ffffffff 0000000000000000 [ 86.230058][ T277] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 86.239042][ T277] page_owner tracks the page as allocated [ 86.244804][ T277] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4589, ts 86077482721, free_ts 85591714413 [ 86.262755][ T277] get_page_from_freelist+0x1b77/0x1c60 [ 86.270311][ T277] __alloc_pages+0x1e1/0x470 [ 86.276766][ T277] __page_cache_alloc+0xd2/0x3f0 [ 86.281783][ T277] do_read_cache_page+0x1da/0x1030 [ 86.288087][ T277] __get_metapage+0x35d/0x1060 [ 86.293202][ T277] diRead+0x6f7/0xbb0 [ 86.299160][ T277] jfs_iget+0x89/0x3c0 [ 86.303279][ T277] jfs_fill_super+0x735/0xaf0 [ 86.308535][ T277] mount_bdev+0x287/0x3c0 [ 86.312910][ T277] legacy_get_tree+0xe6/0x180 [ 86.319477][ T277] vfs_get_tree+0x88/0x270 [ 86.324224][ T277] do_new_mount+0x24a/0xa40 [ 86.329315][ T277] __se_sys_mount+0x2d6/0x3c0 [ 86.334138][ T277] do_syscall_64+0x4c/0xa0 [ 86.340552][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.347643][ T277] page last free stack trace: [ 86.352340][ T277] free_unref_page_prepare+0x637/0x6c0 [ 86.359865][ T277] free_unref_page+0x94/0x280 [ 86.364748][ T277] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 86.371817][ T277] __apply_to_page_range+0x95c/0xc80 [ 86.377969][ T277] kasan_release_vmalloc+0x93/0xb0 [ 86.383127][ T277] __purge_vmap_area_lazy+0xc6e/0x18f0 [ 86.389633][ T277] _vm_unmap_aliases+0x410/0x4a0 [ 86.394748][ T277] __vunmap+0x70d/0xa40 [ 86.399508][ T277] bpf_jit_free+0x92/0x180 [ 86.404131][ T277] process_one_work+0x863/0x1000 [ 86.409703][ T277] worker_thread+0xaa8/0x12a0 [ 86.414708][ T277] kthread+0x436/0x520 [ 86.419344][ T277] ret_from_fork+0x1f/0x30 [ 86.424042][ T277] Modules linked in: [ 86.428656][ T277] CPU: 0 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 86.436174][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.446483][ T277] Call Trace: [ 86.449833][ T277] [ 86.452788][ T277] dump_stack_lvl+0x168/0x230 [ 86.457507][ T277] ? show_regs_print_info+0x20/0x20 [ 86.462755][ T277] ? clockevents_increase_min_delta+0x130/0x130 [ 86.469636][ T277] bad_page+0x14b/0x170 [ 86.473836][ T277] free_unref_page_prepare+0x383/0x6c0 [ 86.479354][ T277] free_unref_page+0x94/0x280 [ 86.484124][ T277] ? mark_free_pages+0x5c0/0x5c0 [ 86.489208][ T277] ? __mem_cgroup_uncharge+0xab/0xe0 [ 86.494635][ T277] txUnlock+0x27e/0xcb0 [ 86.498940][ T277] jfs_lazycommit+0x583/0xb20 [ 86.503880][ T277] ? txFreelock+0x5a0/0x5a0 [ 86.508520][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 86.514522][ T277] ? sched_dynamic_update+0x210/0x210 [ 86.520470][ T277] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 86.526846][ T277] ? __kthread_parkme+0x157/0x1b0 [ 86.532259][ T277] kthread+0x436/0x520 [ 86.536461][ T277] ? txFreelock+0x5a0/0x5a0 [ 86.540999][ T277] ? kthread_blkcg+0xd0/0xd0 [ 86.545720][ T277] ret_from_fork+0x1f/0x30 [ 86.550187][ T277] [ 86.557787][ T277] Disabling lock debugging due to kernel taint [ 86.563986][ T277] page:ffffea0001f9fbc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7e7ef [ 86.574913][ T277] flags: 0xfff00000002005(locked|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 86.584409][ T277] raw: 00fff00000002005 dead000000000100 dead000000000122 0000000000000000 [ 86.594936][ T277] raw: 000000000000001c ffff8880734579b0 00000000ffffffff 0000000000000000 [ 86.604044][ T277] page dumped because: VM_BUG_ON_PAGE(((unsigned int) page_ref_count(page) + 127u <= 127u)) [ 86.615251][ T277] page_owner tracks the page as allocated [ 86.621154][ T277] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4589, ts 86077482721, free_ts 85591714413 [ 86.637320][ T277] get_page_from_freelist+0x1b77/0x1c60 [ 86.642915][ T277] __alloc_pages+0x1e1/0x470 [ 86.647940][ T277] __page_cache_alloc+0xd2/0x3f0 [ 86.653021][ T277] do_read_cache_page+0x1da/0x1030 [ 86.658341][ T277] __get_metapage+0x35d/0x1060 [ 86.663245][ T277] diRead+0x6f7/0xbb0 [ 86.669119][ T277] jfs_iget+0x89/0x3c0 [ 86.673444][ T277] jfs_fill_super+0x735/0xaf0 [ 86.678459][ T277] mount_bdev+0x287/0x3c0 [ 86.682915][ T277] legacy_get_tree+0xe6/0x180 [ 86.687865][ T277] vfs_get_tree+0x88/0x270 [ 86.692313][ T277] do_new_mount+0x24a/0xa40 [ 86.697400][ T277] __se_sys_mount+0x2d6/0x3c0 [ 86.702118][ T277] do_syscall_64+0x4c/0xa0 [ 86.706940][ T277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.712876][ T277] page last free stack trace: [ 86.717740][ T277] free_unref_page_prepare+0x637/0x6c0 [ 86.723231][ T277] free_unref_page+0x94/0x280 [ 86.728163][ T277] kasan_depopulate_vmalloc_pte+0x67/0x80 [ 86.734307][ T277] __apply_to_page_range+0x95c/0xc80 [ 86.739835][ T277] kasan_release_vmalloc+0x93/0xb0 [ 86.744986][ T277] __purge_vmap_area_lazy+0xc6e/0x18f0 [ 86.753073][ T277] _vm_unmap_aliases+0x410/0x4a0 [ 86.758231][ T277] __vunmap+0x70d/0xa40 [ 86.762517][ T277] bpf_jit_free+0x92/0x180 [ 86.767087][ T277] process_one_work+0x863/0x1000 [ 86.772143][ T277] worker_thread+0xaa8/0x12a0 [ 86.777433][ T277] kthread+0x436/0x520 [ 86.782053][ T277] ret_from_fork+0x1f/0x30 [ 86.786908][ T277] ------------[ cut here ]------------ [ 86.792486][ T277] kernel BUG at include/linux/mm.h:1213! [ 86.798287][ T277] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 86.804512][ T277] CPU: 1 PID: 277 Comm: jfsCommit Tainted: G B syzkaller #0 [ 86.813297][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.824445][ T277] RIP: 0010:put_metapage+0x278/0x280 [ 86.829772][ T277] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 c2 3a f0 fe e9 f3 fe ff ff e8 88 d7 ab fe 48 8b 3c 24 48 c7 c6 e0 0f 42 8a e8 48 42 de fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 86.849602][ T277] RSP: 0018:ffffc90002d8fce0 EFLAGS: 00010246 [ 86.855794][ T277] RAX: b0665758ca5adf00 RBX: ffff8880734579b0 RCX: ffff88801d9dbb80 [ 86.856277][ T1348] cfg80211: failed to load regulatory.db [ 86.864019][ T277] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 86.877834][ T277] RBP: 000000000000007f R08: dffffc0000000000 R09: fffff520005b1e81 [ 86.886162][ T277] R10: fffff520005b1e81 R11: 1ffff920005b1e80 R12: ffff8880734579d8 [ 86.894536][ T277] R13: ffffea0001f9fbf4 R14: 1ffff1100e68af3b R15: 1ffff1100e68af48 [ 86.902539][ T277] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 86.911734][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.918344][ T277] CR2: 000055b13fc8e138 CR3: 000000007836d000 CR4: 00000000003506e0 [ 86.926448][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.934446][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.942585][ T277] Call Trace: [ 86.945889][ T277] [ 86.948863][ T277] txUnlock+0x427/0xcb0 [ 86.953060][ T277] jfs_lazycommit+0x583/0xb20 [ 86.957784][ T277] ? txFreelock+0x5a0/0x5a0 [ 86.962422][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 86.968352][ T277] ? sched_dynamic_update+0x210/0x210 [ 86.973764][ T277] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 86.979818][ T277] ? __kthread_parkme+0x157/0x1b0 [ 86.984886][ T277] kthread+0x436/0x520 [ 86.988979][ T277] ? txFreelock+0x5a0/0x5a0 [ 86.993583][ T277] ? kthread_blkcg+0xd0/0xd0 [ 86.998303][ T277] ret_from_fork+0x1f/0x30 [ 87.002759][ T277] [ 87.005800][ T277] Modules linked in: [ 87.010930][ T277] ---[ end trace 52a44d4d21a1f9ad ]--- [ 87.018942][ T277] RIP: 0010:put_metapage+0x278/0x280 [ 87.024291][ T277] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 c2 3a f0 fe e9 f3 fe ff ff e8 88 d7 ab fe 48 8b 3c 24 48 c7 c6 e0 0f 42 8a e8 48 42 de fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 87.044876][ T277] RSP: 0018:ffffc90002d8fce0 EFLAGS: 00010246 [ 87.051127][ T277] RAX: b0665758ca5adf00 RBX: ffff8880734579b0 RCX: ffff88801d9dbb80 [ 87.060656][ T277] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 87.072799][ T277] RBP: 000000000000007f R08: dffffc0000000000 R09: fffff520005b1e81 [ 87.081717][ T277] R10: fffff520005b1e81 R11: 1ffff920005b1e80 R12: ffff8880734579d8 [ 87.089898][ T277] R13: ffffea0001f9fbf4 R14: 1ffff1100e68af3b R15: 1ffff1100e68af48 [ 87.098493][ T277] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 87.107594][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.114700][ T277] CR2: 000055d17b123950 CR3: 000000007e669000 CR4: 00000000003506f0 [ 87.123353][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.131829][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.140744][ T277] Kernel panic - not syncing: Fatal exception [ 87.147218][ T277] Kernel Offset: disabled [ 87.151553][ T277] Rebooting in 86400 seconds..