Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. 2026/01/09 05:08:32 ignoring optional flag "type"="gce" 2026/01/09 05:08:32 parsed 1 programs 2026/01/09 05:08:32 executed programs: 0 [ 82.886460][ T4476] chnl_net:caif_netlink_parms(): no params data found [ 82.950927][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.960477][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.970301][ T4476] device bridge_slave_0 entered promiscuous mode [ 82.981542][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.989522][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.998150][ T4476] device bridge_slave_1 entered promiscuous mode [ 83.027430][ T4476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.039583][ T4476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.073823][ T4476] team0: Port device team_slave_0 added [ 83.082725][ T4476] team0: Port device team_slave_1 added [ 83.108061][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.116202][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.143602][ T4476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.156682][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.163845][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.190362][ T4476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.232904][ T4476] device hsr_slave_0 entered promiscuous mode [ 83.240111][ T4476] device hsr_slave_1 entered promiscuous mode [ 83.809180][ T4476] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.819595][ T4476] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.831717][ T4476] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.842567][ T4476] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.873486][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.881029][ T4476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.888546][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.895869][ T4476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.924737][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.933336][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.984907][ T4476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.003575][ T4476] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.016037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.025023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.039426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.048503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.057643][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.064869][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.077143][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.087234][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.096931][ T1642] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.104226][ T1642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.125605][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.140811][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.153643][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.166213][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.176639][ T1642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.198393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.208478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.232914][ T4476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.258777][ T4476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.272217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.283113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.293272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.308758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.318209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.548926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.558604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.573836][ T4476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.597579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.609608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.631445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.640935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.650905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.662353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.673582][ T4476] device veth0_vlan entered promiscuous mode [ 84.688010][ T4476] device veth1_vlan entered promiscuous mode [ 84.717790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.728587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.737421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.748310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.760698][ T4476] device veth0_macvtap entered promiscuous mode [ 84.773900][ T4476] device veth1_macvtap entered promiscuous mode [ 84.796402][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.805384][ T3159] Bluetooth: hci0: command 0x0409 tx timeout [ 84.814583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.823750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.835118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.846383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.859128][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.869403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.879225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.892627][ T4476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.903394][ T4476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.914643][ T4476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.923616][ T4476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.325358][ T4562] loop0: detected capacity change from 0 to 32768 [ 85.374956][ T4562] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 85.374956][ T4562] [ 85.402632][ T4562] ERROR: (device loop0): remounting filesystem as read-only [ 85.411377][ T4562] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 85.411377][ T4562] [ 85.434730][ T4562] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 85.434730][ T4562] [ 85.460989][ T4562] ERROR: (device loop0): remounting filesystem as read-only [ 85.478585][ T278] BUG: Bad page state in process jfsCommit pfn:23545 [ 85.489515][ T278] page:ffffea00008d5140 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x23545 [ 85.501937][ T278] flags: 0xfff00000002005(locked|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 85.514303][ T278] raw: 00fff00000002005 dead000000000100 dead000000000122 0000000000000000 [ 85.523605][ T278] raw: 000000000000001c ffff88801b88d9b0 00000000ffffffff 0000000000000000 [ 85.537245][ T278] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 85.545224][ T278] page_owner tracks the page as allocated [ 85.551070][ T278] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4562, ts 85368769555, free_ts 85359284664 [ 85.568698][ T278] get_page_from_freelist+0x1b77/0x1c60 [ 85.575236][ T278] __alloc_pages+0x1e1/0x470 [ 85.579979][ T278] __page_cache_alloc+0xd2/0x3f0 [ 85.586743][ T278] do_read_cache_page+0x1da/0x1030 [ 85.592349][ T278] __get_metapage+0x35d/0x1060 [ 85.597663][ T278] diRead+0x6f7/0xbb0 [ 85.601707][ T278] jfs_iget+0x89/0x3f0 [ 85.608948][ T278] jfs_fill_super+0x735/0xaf0 [ 85.613696][ T278] mount_bdev+0x287/0x3c0 [ 85.618630][ T278] legacy_get_tree+0xe6/0x180 [ 85.623642][ T278] vfs_get_tree+0x88/0x270 [ 85.630374][ T278] do_new_mount+0x24a/0xa40 [ 85.635797][ T278] __se_sys_mount+0x2d6/0x3c0 [ 85.641106][ T278] do_syscall_64+0x4c/0xa0 [ 85.647737][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.653953][ T278] page last free stack trace: [ 85.659460][ T278] free_unref_page_prepare+0x637/0x6c0 [ 85.667111][ T278] free_unref_page+0x94/0x280 [ 85.671961][ T278] __vunmap+0x8ab/0xa40 [ 85.676730][ T278] free_work+0x56/0x80 [ 85.681287][ T278] process_one_work+0x863/0x1000 [ 85.690788][ T278] worker_thread+0xaa8/0x12a0 [ 85.696426][ T278] kthread+0x436/0x520 [ 85.700753][ T278] ret_from_fork+0x1f/0x30 [ 85.708341][ T278] Modules linked in: [ 85.712350][ T278] CPU: 1 PID: 278 Comm: jfsCommit Not tainted syzkaller #0 [ 85.720038][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.730347][ T278] Call Trace: [ 85.733770][ T278] [ 85.736743][ T278] dump_stack_lvl+0x168/0x230 [ 85.741746][ T278] ? show_regs_print_info+0x20/0x20 [ 85.747163][ T278] ? clockevents_increase_min_delta+0x130/0x130 [ 85.753733][ T278] bad_page+0x14b/0x170 [ 85.758178][ T278] free_unref_page_prepare+0x383/0x6c0 [ 85.764165][ T278] free_unref_page+0x94/0x280 [ 85.769078][ T278] ? mark_free_pages+0x5c0/0x5c0 [ 85.774153][ T278] ? __mem_cgroup_uncharge+0xab/0xe0 [ 85.779665][ T278] txUnlock+0x27e/0xcb0 [ 85.784349][ T278] ? lockdep_hardirqs_on+0x94/0x140 [ 85.789693][ T278] jfs_lazycommit+0x583/0xb20 [ 85.794548][ T278] ? txFreelock+0x5a0/0x5a0 [ 85.799187][ T278] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 85.805412][ T278] ? sched_dynamic_update+0x210/0x210 [ 85.811374][ T278] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 85.817318][ T278] ? __kthread_parkme+0x157/0x1b0 [ 85.822592][ T278] kthread+0x436/0x520 [ 85.826794][ T278] ? txFreelock+0x5a0/0x5a0 [ 85.831807][ T278] ? kthread_blkcg+0xd0/0xd0 [ 85.836564][ T278] ret_from_fork+0x1f/0x30 [ 85.841130][ T278] [ 85.851451][ T278] Disabling lock debugging due to kernel taint [ 85.857904][ T278] page:ffffea00008d5140 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x23545 [ 85.869042][ T278] flags: 0xfff00000002005(locked|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 85.879092][ T278] raw: 00fff00000002005 dead000000000100 dead000000000122 0000000000000000 [ 85.888819][ T278] raw: 000000000000001c ffff88801b88d9b0 00000000ffffffff 0000000000000000 [ 85.897994][ T278] page dumped because: VM_BUG_ON_PAGE(((unsigned int) page_ref_count(page) + 127u <= 127u)) [ 85.909107][ T278] page_owner tracks the page as allocated [ 85.915557][ T278] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4562, ts 85368769555, free_ts 85359284664 [ 85.932329][ T278] get_page_from_freelist+0x1b77/0x1c60 [ 85.938727][ T278] __alloc_pages+0x1e1/0x470 [ 85.943524][ T278] __page_cache_alloc+0xd2/0x3f0 [ 85.949657][ T278] do_read_cache_page+0x1da/0x1030 [ 85.955928][ T278] __get_metapage+0x35d/0x1060 [ 85.960781][ T278] diRead+0x6f7/0xbb0 [ 85.965903][ T278] jfs_iget+0x89/0x3f0 [ 85.970296][ T278] jfs_fill_super+0x735/0xaf0 [ 85.975471][ T278] mount_bdev+0x287/0x3c0 [ 85.980061][ T278] legacy_get_tree+0xe6/0x180 [ 85.985563][ T278] vfs_get_tree+0x88/0x270 [ 85.990226][ T278] do_new_mount+0x24a/0xa40 [ 85.995295][ T278] __se_sys_mount+0x2d6/0x3c0 [ 86.000104][ T278] do_syscall_64+0x4c/0xa0 [ 86.010595][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.017002][ T278] page last free stack trace: [ 86.021836][ T278] free_unref_page_prepare+0x637/0x6c0 [ 86.028307][ T278] free_unref_page+0x94/0x280 [ 86.033217][ T278] __vunmap+0x8ab/0xa40 [ 86.037838][ T278] free_work+0x56/0x80 [ 86.042221][ T278] process_one_work+0x863/0x1000 [ 86.048209][ T278] worker_thread+0xaa8/0x12a0 [ 86.053114][ T278] kthread+0x436/0x520 [ 86.057720][ T278] ret_from_fork+0x1f/0x30 [ 86.062600][ T278] ------------[ cut here ]------------ [ 86.069420][ T278] kernel BUG at include/linux/mm.h:1224! [ 86.075624][ T278] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 86.081827][ T278] CPU: 1 PID: 278 Comm: jfsCommit Tainted: G B syzkaller #0 [ 86.090723][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.100917][ T278] RIP: 0010:put_metapage+0x278/0x280 [ 86.106360][ T278] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 72 eb ef fe e9 f3 fe ff ff e8 d8 82 ab fe 48 8b 3c 24 48 c7 c6 60 48 42 8a e8 48 ee dd fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 86.126447][ T278] RSP: 0018:ffffc90002d5fce0 EFLAGS: 00010246 [ 86.132655][ T278] RAX: 2b0587fc744b4600 RBX: ffff88801b88d9b0 RCX: ffff88801dadbb80 [ 86.141123][ T278] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 86.149304][ T278] RBP: 000000000000007f R08: dffffc0000000000 R09: ffffed1017224f2c [ 86.157328][ T278] R10: ffffed1017224f2c R11: 1ffff11017224f2b R12: ffff88801b88d9d8 [ 86.165461][ T278] R13: ffffea00008d5174 R14: 1ffff11003711b3b R15: 1ffff11003711b48 [ 86.173497][ T278] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 86.182471][ T278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.189298][ T278] CR2: 000055558f672938 CR3: 000000002b315000 CR4: 00000000003506e0 [ 86.197397][ T278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.205664][ T278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.213912][ T278] Call Trace: [ 86.217395][ T278] [ 86.220454][ T278] txUnlock+0x427/0xcb0 [ 86.224680][ T278] jfs_lazycommit+0x583/0xb20 [ 86.229403][ T278] ? txFreelock+0x5a0/0x5a0 [ 86.234115][ T278] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 86.240322][ T278] ? sched_dynamic_update+0x210/0x210 [ 86.246000][ T278] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 86.252029][ T278] ? __kthread_parkme+0x157/0x1b0 [ 86.257106][ T278] kthread+0x436/0x520 [ 86.261300][ T278] ? txFreelock+0x5a0/0x5a0 [ 86.265844][ T278] ? kthread_blkcg+0xd0/0xd0 [ 86.270556][ T278] ret_from_fork+0x1f/0x30 [ 86.275104][ T278] [ 86.278253][ T278] Modules linked in: [ 86.288744][ T278] ---[ end trace 7fa2ca25b93d75be ]--- [ 86.295044][ T278] RIP: 0010:put_metapage+0x278/0x280 [ 86.300517][ T278] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 72 eb ef fe e9 f3 fe ff ff e8 d8 82 ab fe 48 8b 3c 24 48 c7 c6 60 48 42 8a e8 48 ee dd fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 86.322541][ T278] RSP: 0018:ffffc90002d5fce0 EFLAGS: 00010246 [ 86.329133][ T278] RAX: 2b0587fc744b4600 RBX: ffff88801b88d9b0 RCX: ffff88801dadbb80 [ 86.337676][ T278] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 86.347537][ T278] RBP: 000000000000007f R08: dffffc0000000000 R09: ffffed1017224f2c [ 86.355922][ T278] R10: ffffed1017224f2c R11: 1ffff11017224f2b R12: ffff88801b88d9d8 [ 86.364895][ T278] R13: ffffea00008d5174 R14: 1ffff11003711b3b R15: 1ffff11003711b48 [ 86.373330][ T278] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 86.382647][ T278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.389876][ T278] CR2: 000055ffc9616950 CR3: 000000002b315000 CR4: 00000000003506f0 [ 86.398307][ T278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.407386][ T278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.415910][ T278] Kernel panic - not syncing: Fatal exception [ 86.422712][ T278] Kernel Offset: disabled [ 86.427239][ T278] Rebooting in 86400 seconds..