Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts. 2024/03/12 13:26:18 ignoring optional flag "sandboxArg"="0" 2024/03/12 13:26:18 parsed 1 programs 2024/03/12 13:26:19 executed programs: 0 [ 46.111259][ T2099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.966379][ T2104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.974401][ T2104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.982110][ T2104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.990016][ T2104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.448568][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.456417][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.465229][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.474790][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.482921][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.490625][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.630247][ T2829] loop0: detected capacity change from 0 to 32768 [ 49.639508][ T2829] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 49.639508][ T2829] [ 49.651536][ T2829] ERROR: (device loop0): remounting filesystem as read-only [ 49.659015][ T2829] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 49.659015][ T2829] [ 49.670273][ T2829] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 49.670273][ T2829] [ 49.684604][ T75] BUG: Bad page state in process jfsCommit pfn:10daa2 [ 49.691492][ T75] page:ffffea000436a880 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x10daa2 [ 49.701807][ T75] flags: 0x200000000002047(locked|referenced|uptodate|workingset|private|node=0|zone=2) [ 49.711904][ T75] raw: 0200000000002047 dead000000000100 dead000000000122 0000000000000000 [ 49.720570][ T75] raw: 000000000000001c ffff8881042ab000 00000000ffffffff 0000000000000000 [ 49.729131][ T75] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 49.736627][ T75] page_owner tracks the page as allocated [ 49.742366][ T75] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 2829, tgid 2828 (syz-executor.0), ts 49638898323, free_ts 46897049886 [ 49.760818][ T75] post_alloc_hook+0x13c/0x160 [ 49.765683][ T75] get_page_from_freelist+0x10f4/0x12c0 [ 49.771240][ T75] __alloc_pages+0x11b/0x270 [ 49.775851][ T75] filemap_alloc_folio+0x5a/0x2d0 [ 49.780943][ T75] do_read_cache_folio+0x175/0x530 [ 49.786306][ T75] do_read_cache_page+0x30/0x160 [ 49.791342][ T75] __get_metapage+0x16c/0x890 [ 49.796033][ T75] diRead+0x24d/0x380 [ 49.800033][ T75] jfs_iget+0x60/0x190 [ 49.804195][ T75] jfs_fill_super+0x316/0x4a0 [ 49.808873][ T75] mount_bdev+0x197/0x220 [ 49.813211][ T75] legacy_get_tree+0x2c/0x70 [ 49.817890][ T75] vfs_get_tree+0x2b/0xc0 [ 49.822235][ T75] do_new_mount+0x1e4/0x550 [ 49.826781][ T75] __se_sys_mount+0x283/0x2d0 [ 49.831734][ T75] do_syscall_64+0x3d/0xb0 [ 49.836166][ T75] page last free stack trace: [ 49.840939][ T75] free_unref_page_prepare+0x52b/0x5b0 [ 49.846592][ T75] free_unref_page_list+0x7b/0x3a0 [ 49.851960][ T75] release_pages+0x14ea/0x17c0 [ 49.856828][ T75] tlb_flush_mmu+0x22e/0x280 [ 49.861620][ T75] tlb_finish_mmu+0x55/0xa0 [ 49.866181][ T75] exit_mmap+0x2c5/0x5e0 [ 49.870548][ T75] __mmput+0x72/0x1a0 [ 49.874627][ T75] exit_mm+0xcc/0x160 [ 49.878598][ T75] do_exit+0x37a/0x1060 [ 49.883413][ T75] do_group_exit+0xdc/0xe0 [ 49.887839][ T75] __x64_sys_exit_group+0xe/0x10 [ 49.892805][ T75] do_syscall_64+0x3d/0xb0 [ 49.897252][ T75] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.903458][ T75] Modules linked in: [ 49.907696][ T75] CPU: 1 PID: 75 Comm: jfsCommit Not tainted 6.1.81-syzkaller #0 [ 49.915399][ T75] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 49.925658][ T75] Call Trace: [ 49.928981][ T75] [ 49.932159][ T75] dump_stack_lvl+0xf0/0x176 [ 49.936725][ T75] bad_page+0xdd/0xf0 [ 49.940749][ T75] free_unref_page_prepare+0x234/0x5b0 [ 49.946223][ T75] free_unref_page+0x33/0x260 [ 49.950882][ T75] txUnlock+0x1d0/0x710 [ 49.955040][ T75] ? jfs_lazycommit+0x20a/0x480 [ 49.960152][ T75] jfs_lazycommit+0x22a/0x480 [ 49.964842][ T75] ? do_task_dead+0x40/0x40 [ 49.969355][ T75] ? txFreelock+0x270/0x270 [ 49.973844][ T75] kthread+0xf5/0x120 [ 49.977804][ T75] ? kthread_blkcg+0x60/0x60 [ 49.982401][ T75] ret_from_fork+0x1f/0x30 [ 49.986994][ T75] [ 49.990028][ T75] Disabling lock debugging due to kernel taint [ 49.996965][ T75] page:ffffea000436a880 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x10daa2 [ 50.007627][ T75] flags: 0x200000000002047(locked|referenced|uptodate|workingset|private|node=0|zone=2) [ 50.017472][ T75] raw: 0200000000002047 dead000000000100 dead000000000122 0000000000000000 [ 50.026063][ T75] raw: 000000000000001c ffff8881042ab000 00000000ffffffff 0000000000000000 [ 50.034742][ T75] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 50.045245][ T75] page_owner tracks the page as allocated [ 50.050989][ T75] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 2829, tgid 2828 (syz-executor.0), ts 49638898323, free_ts 46897049886 [ 50.069537][ T75] post_alloc_hook+0x13c/0x160 [ 50.074473][ T75] get_page_from_freelist+0x10f4/0x12c0 [ 50.080046][ T75] __alloc_pages+0x11b/0x270 [ 50.084795][ T75] filemap_alloc_folio+0x5a/0x2d0 [ 50.090051][ T75] do_read_cache_folio+0x175/0x530 [ 50.095235][ T75] do_read_cache_page+0x30/0x160 [ 50.100257][ T75] __get_metapage+0x16c/0x890 [ 50.104926][ T75] diRead+0x24d/0x380 [ 50.108976][ T75] jfs_iget+0x60/0x190 [ 50.113124][ T75] jfs_fill_super+0x316/0x4a0 [ 50.117893][ T75] mount_bdev+0x197/0x220 [ 50.122305][ T75] legacy_get_tree+0x2c/0x70 [ 50.126883][ T75] vfs_get_tree+0x2b/0xc0 [ 50.131306][ T75] do_new_mount+0x1e4/0x550 [ 50.135998][ T75] __se_sys_mount+0x283/0x2d0 [ 50.140720][ T75] do_syscall_64+0x3d/0xb0 [ 50.145401][ T75] page last free stack trace: [ 50.150098][ T75] free_unref_page_prepare+0x52b/0x5b0 [ 50.155647][ T75] free_unref_page_list+0x7b/0x3a0 [ 50.162877][ T75] release_pages+0x14ea/0x17c0 [ 50.167715][ T75] tlb_flush_mmu+0x22e/0x280 [ 50.172339][ T75] tlb_finish_mmu+0x55/0xa0 [ 50.176884][ T75] exit_mmap+0x2c5/0x5e0 [ 50.181142][ T75] __mmput+0x72/0x1a0 [ 50.185299][ T75] exit_mm+0xcc/0x160 [ 50.189346][ T75] do_exit+0x37a/0x1060 [ 50.193778][ T75] do_group_exit+0xdc/0xe0 [ 50.198214][ T75] __x64_sys_exit_group+0xe/0x10 [ 50.203990][ T75] do_syscall_64+0x3d/0xb0 [ 50.208397][ T75] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.214319][ T75] invalid opcode: 0000 [#1] PREEMPT SMP [ 50.219968][ T75] CPU: 1 PID: 75 Comm: jfsCommit Tainted: G B 6.1.81-syzkaller #0 [ 50.229322][ T75] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 50.239368][ T75] RIP: 0010:put_metapage+0x23a/0x2a0 [ 50.244649][ T75] Code: ff 4c 89 f0 48 25 ff 0f 00 00 74 20 e8 1f 7e a2 ff e9 8c fe ff ff e8 15 7e a2 ff 4c 89 f7 48 c7 c6 bc 07 4e 83 e8 b6 cc b4 ff <0f> 0b 4d 8b 26 bb 00 00 01 00 be 00 00 01 00 4c 21 e6 31 ff e8 cd [ 50.264422][ T75] RSP: 0018:ffffc9000193fdd8 EFLAGS: 00010286 [ 50.270521][ T75] RAX: 8a90bef812367400 RBX: 000000000000007f RCX: ffff8881013ab680 [ 50.278931][ T75] RDX: 0000000000000000 RSI: ffffffff835b033f RDI: ffffffff83548284 [ 50.287440][ T75] RBP: 0000000000000282 R08: ffffffff814c5c83 R09: 0000000000000000 [ 50.295514][ T75] R10: 59535f7972746e65 R11: 535f7972746e6520 R12: 0000000000000012 [ 50.303704][ T75] R13: ffffc900014a5000 R14: ffffea000436a880 R15: ffff8881042ab000 [ 50.311753][ T75] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 50.320865][ T75] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.327535][ T75] CR2: 00007fe5bb0e00c0 CR3: 0000000104ff3000 CR4: 00000000003506e0 [ 50.336039][ T75] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.344200][ T75] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.352440][ T75] Call Trace: [ 50.355725][ T75] [ 50.358909][ T75] ? __die_body+0x5e/0xa0 [ 50.363454][ T75] ? die+0x83/0xb0 [ 50.367189][ T75] ? do_trap+0xa2/0x170 [ 50.371420][ T75] ? put_metapage+0x23a/0x2a0 [ 50.376088][ T75] ? put_metapage+0x23a/0x2a0 [ 50.380757][ T75] ? handle_invalid_op+0x65/0x80 [ 50.385673][ T75] ? put_metapage+0x23a/0x2a0 [ 50.390431][ T75] ? exc_invalid_op+0x28/0x40 [ 50.395089][ T75] ? asm_exc_invalid_op+0x16/0x20 [ 50.400269][ T75] ? __dump_page_owner+0x183/0x1f0 [ 50.405374][ T75] ? put_metapage+0x23a/0x2a0 [ 50.410136][ T75] ? put_metapage+0x23a/0x2a0 [ 50.414964][ T75] ? do_raw_spin_unlock+0x63/0x2b0 [ 50.421030][ T75] txUnlock+0x30a/0x710 [ 50.425262][ T75] jfs_lazycommit+0x22a/0x480 [ 50.430019][ T75] ? do_task_dead+0x40/0x40 [ 50.434500][ T75] ? txFreelock+0x270/0x270 [ 50.439157][ T75] kthread+0xf5/0x120 [ 50.443210][ T75] ? kthread_blkcg+0x60/0x60 [ 50.447773][ T75] ret_from_fork+0x1f/0x30 [ 50.452259][ T75] [ 50.455262][ T75] Modules linked in: [ 50.459166][ T75] ---[ end trace 0000000000000000 ]--- [ 50.464648][ T75] RIP: 0010:put_metapage+0x23a/0x2a0 [ 50.470120][ T75] Code: ff 4c 89 f0 48 25 ff 0f 00 00 74 20 e8 1f 7e a2 ff e9 8c fe ff ff e8 15 7e a2 ff 4c 89 f7 48 c7 c6 bc 07 4e 83 e8 b6 cc b4 ff <0f> 0b 4d 8b 26 bb 00 00 01 00 be 00 00 01 00 4c 21 e6 31 ff e8 cd [ 50.489930][ T75] RSP: 0018:ffffc9000193fdd8 EFLAGS: 00010286 [ 50.496003][ T75] RAX: 8a90bef812367400 RBX: 000000000000007f RCX: ffff8881013ab680 [ 50.503994][ T75] RDX: 0000000000000000 RSI: ffffffff835b033f RDI: ffffffff83548284 [ 50.511973][ T75] RBP: 0000000000000282 R08: ffffffff814c5c83 R09: 0000000000000000 [ 50.520027][ T75] R10: 59535f7972746e65 R11: 535f7972746e6520 R12: 0000000000000012 [ 50.528882][ T75] R13: ffffc900014a5000 R14: ffffea000436a880 R15: ffff8881042ab000 [ 50.537320][ T75] FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 50.546422][ T75] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.553549][ T75] CR2: 00007fe5bb0e00c0 CR3: 0000000104ff3000 CR4: 00000000003506e0 [ 50.562252][ T75] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.570784][ T75] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.578923][ T75] Kernel panic - not syncing: Fatal exception [ 50.585431][ T75] Kernel Offset: disabled [ 50.589853][ T75] Rebooting in 86400 seconds..