[ 71.373314][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.379857][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. 2026/05/30 22:23:33 ignoring optional flag "type"="gce" 2026/05/30 22:23:33 parsed 1 programs 2026/05/30 22:23:35 executed programs: 0 [ 75.434911][ T4487] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.565856][ T4528] chnl_net:caif_netlink_parms(): no params data found [ 75.600762][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.608097][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.616292][ T4528] device bridge_slave_0 entered promiscuous mode [ 75.624187][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.631693][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.639379][ T4528] device bridge_slave_1 entered promiscuous mode [ 75.657720][ T4528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.668658][ T4528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.690899][ T4528] team0: Port device team_slave_0 added [ 75.698745][ T4528] team0: Port device team_slave_1 added [ 75.715330][ T4528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.722635][ T4528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.749295][ T4528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.761320][ T4528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.768399][ T4528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.795250][ T4528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.821769][ T4528] device hsr_slave_0 entered promiscuous mode [ 75.828575][ T4528] device hsr_slave_1 entered promiscuous mode [ 76.239159][ T4528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.248650][ T4528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.259097][ T4528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.269098][ T4528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.292334][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.299635][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.307202][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.314320][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.362137][ T4528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.376375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.386000][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.394756][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.404815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.420225][ T4528] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.433719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.443291][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.450410][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.468666][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.477825][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.484955][ T3087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.494145][ T1325] cfg80211: failed to load regulatory.db [ 76.526829][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.536969][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.547544][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.558032][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.569345][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.580839][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.807524][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.824800][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.837465][ T4528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.880912][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.892723][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.915583][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.929711][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.941378][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.949246][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.974229][ T4528] device veth0_vlan entered promiscuous mode [ 76.995693][ T4528] device veth1_vlan entered promiscuous mode [ 77.042429][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.061084][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.077910][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.086619][ T3087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.103226][ T4528] device veth0_macvtap entered promiscuous mode [ 77.115258][ T4528] device veth1_macvtap entered promiscuous mode [ 77.133277][ T4528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.144929][ T4528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.155198][ T4528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.164918][ T4528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.174970][ T4528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.184414][ T4528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.196075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.206057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.216361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.225731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.236610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.245985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.532403][ T4604] loop0: detected capacity change from 0 to 32768 [ 77.541823][ T4224] Bluetooth: hci0: command 0x0409 tx timeout [ 77.560017][ T4604] ======================================================= [ 77.560017][ T4604] WARNING: The mand mount option has been deprecated and [ 77.560017][ T4604] and is ignored by this kernel. Remove the mand [ 77.560017][ T4604] option from the mount to silence this warning. [ 77.560017][ T4604] ======================================================= [ 77.631450][ T4604] ERROR: (device loop0): dbDiscardAG: -EIO [ 77.631450][ T4604] [ 77.639988][ T4604] attempt to access beyond end of device [ 77.639988][ T4604] loop0: rw=2051, want=18014398509498368, limit=32768 [ 77.655029][ T4604] JFS: sb_issue_discard(ffff88802af24000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 77.666476][ T4604] blkno = 8000000000400, nblocks = 400 [ 77.672444][ T4604] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 77.672444][ T4604] [ 77.699508][ T4528] BUG: Bad page state in process syz-executor.0 pfn:70eeb [ 77.707284][ T4528] page:ffffea0001c3bac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x70eeb [ 77.720042][ T4528] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 77.729191][ T4528] raw: 00fff00000002004 ffffea00006e6e08 ffffc9000307fa00 0000000000000000 [ 77.738669][ T4528] raw: 0000000000000004 ffff8880788ea9b0 00000000ffffffff 0000000000000000 [ 77.747766][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 77.755475][ T4528] page_owner tracks the page as allocated [ 77.762441][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4604, ts 77619310786, free_ts 77618069208 [ 77.779792][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 77.785796][ T4528] __alloc_pages+0x1ee/0x480 [ 77.791627][ T4528] __page_cache_alloc+0xce/0x440 [ 77.796589][ T4528] do_read_cache_page+0x1da/0x1030 [ 77.802249][ T4528] __get_metapage+0x35d/0x1060 [ 77.807044][ T4528] dbAllocCtl+0xd4/0x9b0 [ 77.811625][ T4528] dbAllocAG+0x1e7/0xfe0 [ 77.815970][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 77.820790][ T4528] jfs_ioc_trim+0x41e/0x680 [ 77.825493][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 77.829747][ T4528] __se_sys_ioctl+0xfa/0x170 [ 77.835178][ T4528] do_syscall_64+0x4c/0xa0 [ 77.840160][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.846572][ T4528] page last free stack trace: [ 77.853595][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 77.859185][ T4528] free_unref_page+0x8f/0x2a0 [ 77.864802][ T4528] qlist_free_all+0x35/0x90 [ 77.869332][ T4528] kasan_quarantine_reduce+0x150/0x160 [ 77.875782][ T4528] __kasan_slab_alloc+0x2f/0xd0 [ 77.882028][ T4528] slab_post_alloc_hook+0x4c/0x380 [ 77.887347][ T4528] kmem_cache_alloc+0x100/0x290 [ 77.892706][ T4528] getname_flags+0xb5/0x500 [ 77.897233][ T4528] do_sys_openat2+0xdd/0x4b0 [ 77.903234][ T4528] __x64_sys_openat+0x135/0x160 [ 77.908108][ T4528] do_syscall_64+0x4c/0xa0 [ 77.913324][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.919443][ T4528] Modules linked in: [ 77.924970][ T4528] CPU: 1 PID: 4528 Comm: syz-executor.0 Not tainted syzkaller #0 [ 77.932799][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.943047][ T4528] Call Trace: [ 77.946346][ T4528] [ 77.949292][ T4528] dump_stack_lvl+0x188/0x250 [ 77.954001][ T4528] ? show_regs_print_info+0x20/0x20 [ 77.959214][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 77.965487][ T4528] bad_page+0x14b/0x170 [ 77.969747][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 77.975430][ T4528] free_unref_page_list+0x119/0x820 [ 77.980676][ T4528] ? uncharge_page+0x490/0x490 [ 77.985537][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 77.991182][ T4528] release_pages+0x186c/0x1be0 [ 77.995943][ T4528] ? lru_cache_disable+0x30/0x30 [ 78.001220][ T4528] __pagevec_release+0x6d/0xe0 [ 78.005973][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 78.011770][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 78.017566][ T4528] ? invalidate_inode_page+0x360/0x360 [ 78.023030][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 78.028312][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 78.033151][ T4528] dbUnmount+0x105/0x170 [ 78.037400][ T4528] jfs_umount+0x1fa/0x360 [ 78.041739][ T4528] jfs_put_super+0x88/0x190 [ 78.046236][ T4528] ? jfs_free_inode+0x20/0x20 [ 78.050987][ T4528] generic_shutdown_super+0x130/0x300 [ 78.056436][ T4528] kill_block_super+0x7c/0xe0 [ 78.061180][ T4528] deactivate_locked_super+0x93/0xf0 [ 78.066558][ T4528] cleanup_mnt+0x42d/0x4e0 [ 78.070985][ T4528] ? lockdep_hardirqs_on+0x94/0x140 [ 78.076264][ T4528] task_work_run+0x125/0x1a0 [ 78.080848][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 78.086213][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 78.092040][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 78.097574][ T4528] do_syscall_64+0x58/0xa0 [ 78.101972][ T4528] ? clear_bhb_loop+0x30/0x80 [ 78.106825][ T4528] ? clear_bhb_loop+0x30/0x80 [ 78.111484][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.117464][ T4528] RIP: 0033:0x7f94a5b50a17 [ 78.121874][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 78.141655][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.150150][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 78.158110][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 78.166164][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 78.174123][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 78.182083][ T4528] R13: 00007f94a5bb03ef R14: 0000000000012dcd R15: 0000000000000003 [ 78.190058][ T4528] [ 78.201465][ T4528] Disabling lock debugging due to kernel taint [ 78.477892][ T4650] loop0: detected capacity change from 0 to 32768 [ 78.503305][ T4650] ERROR: (device loop0): dbDiscardAG: -EIO [ 78.503305][ T4650] [ 78.512475][ T4650] attempt to access beyond end of device [ 78.512475][ T4650] loop0: rw=2051, want=18014398509498368, limit=32768 [ 78.526031][ T4650] JFS: sb_issue_discard(ffff88801f99e000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 78.537503][ T4650] blkno = 8000000000400, nblocks = 400 [ 78.543542][ T4650] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 78.543542][ T4650] [ 78.561687][ T4528] BUG: Bad page state in process syz-executor.0 pfn:25a92 [ 78.568918][ T4528] page:ffffea000096a480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x25a92 [ 78.579811][ T4528] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 78.589952][ T4528] raw: 00fff00000002006 ffffea0001efd588 ffffc9000307fa00 0000000000000000 [ 78.599150][ T4528] raw: 0000000000000004 ffff888023b234d8 00000000ffffffff 0000000000000000 [ 78.608483][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 78.616276][ T4528] page_owner tracks the page as allocated [ 78.622926][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4650, ts 78503135058, free_ts 78476179272 [ 78.640037][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 78.646612][ T4528] __alloc_pages+0x1ee/0x480 [ 78.651745][ T4528] __page_cache_alloc+0xce/0x440 [ 78.657003][ T4528] do_read_cache_page+0x1da/0x1030 [ 78.662730][ T4528] __get_metapage+0x35d/0x1060 [ 78.667599][ T4528] dbAllocCtl+0xd4/0x9b0 [ 78.672119][ T4528] dbAllocAG+0x1e7/0xfe0 [ 78.676373][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 78.681441][ T4528] jfs_ioc_trim+0x41e/0x680 [ 78.686095][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 78.691141][ T4528] __se_sys_ioctl+0xfa/0x170 [ 78.697050][ T4528] do_syscall_64+0x4c/0xa0 [ 78.702222][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.708230][ T4528] page last free stack trace: [ 78.713653][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 78.719135][ T4528] free_unref_page_list+0x119/0x820 [ 78.725019][ T4528] release_pages+0x186c/0x1be0 [ 78.729820][ T4528] tlb_finish_mmu+0x1b4/0x370 [ 78.737818][ T4528] unmap_region+0x344/0x3b0 [ 78.743283][ T4528] __do_munmap+0x9f8/0xdf0 [ 78.747816][ T4528] __vm_munmap+0x140/0x240 [ 78.752704][ T4528] __x64_sys_munmap+0x67/0x70 [ 78.757403][ T4528] do_syscall_64+0x4c/0xa0 [ 78.762226][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.768137][ T4528] Modules linked in: [ 78.772316][ T4528] CPU: 0 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 78.781517][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 78.791574][ T4528] Call Trace: [ 78.794860][ T4528] [ 78.797891][ T4528] dump_stack_lvl+0x188/0x250 [ 78.802580][ T4528] ? show_regs_print_info+0x20/0x20 [ 78.807874][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 78.814266][ T4528] ? rcu_is_watching+0x11/0xa0 [ 78.819051][ T4528] bad_page+0x14b/0x170 [ 78.823224][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 78.828972][ T4528] free_unref_page_list+0x119/0x820 [ 78.834284][ T4528] ? uncharge_page+0x490/0x490 [ 78.839058][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 78.844708][ T4528] release_pages+0x186c/0x1be0 [ 78.849569][ T4528] ? lru_cache_disable+0x30/0x30 [ 78.854610][ T4528] __pagevec_release+0x6d/0xe0 [ 78.859815][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 78.865726][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 78.871754][ T4528] ? invalidate_inode_page+0x360/0x360 [ 78.877330][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 78.882626][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 78.887495][ T4528] dbUnmount+0x105/0x170 [ 78.891843][ T4528] jfs_umount+0x1fa/0x360 [ 78.896190][ T4528] jfs_put_super+0x88/0x190 [ 78.900919][ T4528] ? jfs_free_inode+0x20/0x20 [ 78.905605][ T4528] generic_shutdown_super+0x130/0x300 [ 78.910996][ T4528] kill_block_super+0x7c/0xe0 [ 78.915691][ T4528] deactivate_locked_super+0x93/0xf0 [ 78.921075][ T4528] cleanup_mnt+0x42d/0x4e0 [ 78.925502][ T4528] task_work_run+0x125/0x1a0 [ 78.930114][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 78.935587][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 78.941319][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 78.947228][ T4528] do_syscall_64+0x58/0xa0 [ 78.952114][ T4528] ? clear_bhb_loop+0x30/0x80 [ 78.956810][ T4528] ? clear_bhb_loop+0x30/0x80 [ 78.961502][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.967596][ T4528] RIP: 0033:0x7f94a5b50a17 [ 78.972202][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 78.992170][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.000870][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 79.009301][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 79.017599][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 79.025751][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 79.033729][ T4528] R13: 00007f94a5bb03ef R14: 00000000000131d8 R15: 0000000000000003 [ 79.041894][ T4528] [ 79.294167][ T4716] loop0: detected capacity change from 0 to 32768 [ 79.388401][ T4716] ERROR: (device loop0): dbDiscardAG: -EIO [ 79.388401][ T4716] [ 79.398210][ T4716] attempt to access beyond end of device [ 79.398210][ T4716] loop0: rw=2051, want=18014398509498368, limit=32768 [ 79.411223][ T4716] JFS: sb_issue_discard(ffff88807797c000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 79.424529][ T4716] blkno = 8000000000400, nblocks = 400 [ 79.431070][ T4716] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 79.431070][ T4716] [ 79.446769][ T4528] BUG: Bad page state in process syz-executor.0 pfn:7300c [ 79.454915][ T4528] page:ffffea0001cc0300 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7300c [ 79.465607][ T4528] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 79.475592][ T4528] raw: 00fff00000002006 ffffea00008b42c8 ffffc9000307fa00 0000000000000000 [ 79.485068][ T4528] raw: 0000000000000004 ffff88802346f000 00000000ffffffff 0000000000000000 [ 79.494001][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 79.501951][ T4528] page_owner tracks the page as allocated [ 79.507822][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4716, ts 79388220897, free_ts 79379449295 [ 79.523105][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 79.528765][ T4528] __alloc_pages+0x1ee/0x480 [ 79.533859][ T4528] __page_cache_alloc+0xce/0x440 [ 79.539330][ T4528] do_read_cache_page+0x1da/0x1030 [ 79.544762][ T4528] __get_metapage+0x35d/0x1060 [ 79.549729][ T4528] dbAllocCtl+0xd4/0x9b0 [ 79.554398][ T4528] dbAllocAG+0x1e7/0xfe0 [ 79.558666][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 79.563706][ T4528] jfs_ioc_trim+0x41e/0x680 [ 79.568604][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 79.573417][ T4528] __se_sys_ioctl+0xfa/0x170 [ 79.578023][ T4528] do_syscall_64+0x4c/0xa0 [ 79.583126][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.589147][ T4528] page last free stack trace: [ 79.594865][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 79.600561][ T4528] free_unref_page_list+0x119/0x820 [ 79.605958][ T4528] release_pages+0x186c/0x1be0 [ 79.611058][ T4528] tlb_finish_mmu+0x1b4/0x370 [ 79.616371][ T4528] exit_mmap+0x3d0/0x640 [ 79.620473][ T4224] Bluetooth: hci0: command 0x041b tx timeout [ 79.621102][ T4528] __mmput+0x115/0x3b0 [ 79.631585][ T4528] exit_mm+0x5f7/0x770 [ 79.635757][ T4528] do_exit+0x5a9/0x20c0 [ 79.640196][ T4528] do_group_exit+0x12e/0x300 [ 79.645224][ T4528] __x64_sys_exit_group+0x3b/0x40 [ 79.650626][ T4528] do_syscall_64+0x4c/0xa0 [ 79.655776][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.662415][ T4528] Modules linked in: [ 79.666516][ T4528] CPU: 0 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 79.675860][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.686087][ T4528] Call Trace: [ 79.689461][ T4528] [ 79.692398][ T4528] dump_stack_lvl+0x188/0x250 [ 79.697181][ T4528] ? show_regs_print_info+0x20/0x20 [ 79.702653][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 79.708995][ T4528] ? rcu_is_watching+0x11/0xa0 [ 79.713805][ T4528] bad_page+0x14b/0x170 [ 79.717972][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 79.723615][ T4528] free_unref_page_list+0x119/0x820 [ 79.728913][ T4528] ? uncharge_page+0x490/0x490 [ 79.733860][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 79.739430][ T4528] release_pages+0x186c/0x1be0 [ 79.744201][ T4528] ? lru_cache_disable+0x30/0x30 [ 79.749242][ T4528] __pagevec_release+0x6d/0xe0 [ 79.754012][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 79.759745][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 79.765730][ T4528] ? invalidate_inode_page+0x360/0x360 [ 79.771199][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 79.776407][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 79.781271][ T4528] dbUnmount+0x105/0x170 [ 79.785525][ T4528] jfs_umount+0x1fa/0x360 [ 79.789866][ T4528] jfs_put_super+0x88/0x190 [ 79.794377][ T4528] ? jfs_free_inode+0x20/0x20 [ 79.799060][ T4528] generic_shutdown_super+0x130/0x300 [ 79.804445][ T4528] kill_block_super+0x7c/0xe0 [ 79.809134][ T4528] deactivate_locked_super+0x93/0xf0 [ 79.814426][ T4528] cleanup_mnt+0x42d/0x4e0 [ 79.818862][ T4528] task_work_run+0x125/0x1a0 [ 79.823457][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 79.828892][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 79.834471][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 79.840131][ T4528] do_syscall_64+0x58/0xa0 [ 79.844639][ T4528] ? clear_bhb_loop+0x30/0x80 [ 79.849328][ T4528] ? clear_bhb_loop+0x30/0x80 [ 79.854020][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.860012][ T4528] RIP: 0033:0x7f94a5b50a17 [ 79.864433][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 79.884347][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.893487][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 79.901570][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 79.909552][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 79.917629][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 79.925609][ T4528] R13: 00007f94a5bb03ef R14: 000000000001350a R15: 0000000000000003 [ 79.934036][ T4528] [ 80.189960][ T4794] loop0: detected capacity change from 0 to 32768 [ 80.268254][ T4794] ERROR: (device loop0): dbDiscardAG: -EIO [ 80.268254][ T4794] [ 80.280446][ T4794] attempt to access beyond end of device [ 80.280446][ T4794] loop0: rw=2051, want=18014398509498368, limit=32768 [ 80.300392][ T4794] JFS: sb_issue_discard(ffff88802b078000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 80.319698][ T4794] blkno = 8000000000400, nblocks = 400 [ 80.325716][ T4794] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 80.325716][ T4794] [ 80.341968][ T4528] BUG: Bad page state in process syz-executor.0 pfn:2032d [ 80.349410][ T4528] page:ffffea000080cb40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x2032d [ 80.360721][ T4528] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 80.370545][ T4528] raw: 00fff00000002006 ffffea0000904e08 ffffc9000307fa00 0000000000000000 [ 80.379452][ T4528] raw: 0000000000000004 ffff8880241399b0 00000000ffffffff 0000000000000000 [ 80.389065][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 80.396589][ T4528] page_owner tracks the page as allocated [ 80.402971][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4794, ts 80268036457, free_ts 80231193146 [ 80.418673][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 80.424974][ T4528] __alloc_pages+0x1ee/0x480 [ 80.429942][ T4528] __page_cache_alloc+0xce/0x440 [ 80.435366][ T4528] do_read_cache_page+0x1da/0x1030 [ 80.441141][ T4528] __get_metapage+0x35d/0x1060 [ 80.446280][ T4528] dbAllocCtl+0xd4/0x9b0 [ 80.450807][ T4528] dbAllocAG+0x1e7/0xfe0 [ 80.455154][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 80.459840][ T4528] jfs_ioc_trim+0x41e/0x680 [ 80.465026][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 80.469293][ T4528] __se_sys_ioctl+0xfa/0x170 [ 80.474240][ T4528] do_syscall_64+0x4c/0xa0 [ 80.478848][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.485451][ T4528] page last free stack trace: [ 80.490216][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 80.496499][ T4528] free_unref_page_list+0x119/0x820 [ 80.502330][ T4528] release_pages+0x186c/0x1be0 [ 80.507117][ T4528] tlb_finish_mmu+0x1b4/0x370 [ 80.512094][ T4528] exit_mmap+0x3d0/0x640 [ 80.516379][ T4528] __mmput+0x115/0x3b0 [ 80.521166][ T4528] exit_mm+0x5f7/0x770 [ 80.525269][ T4528] do_exit+0x5a9/0x20c0 [ 80.530220][ T4528] do_group_exit+0x12e/0x300 [ 80.535896][ T4528] __x64_sys_exit_group+0x3b/0x40 [ 80.541652][ T4528] do_syscall_64+0x4c/0xa0 [ 80.546263][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.552712][ T4528] Modules linked in: [ 80.556736][ T4528] CPU: 1 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 80.566251][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.576397][ T4528] Call Trace: [ 80.579705][ T4528] [ 80.582686][ T4528] dump_stack_lvl+0x188/0x250 [ 80.587369][ T4528] ? show_regs_print_info+0x20/0x20 [ 80.592663][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 80.599002][ T4528] ? rcu_is_watching+0x11/0xa0 [ 80.603779][ T4528] bad_page+0x14b/0x170 [ 80.608118][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 80.613647][ T4528] free_unref_page_list+0x119/0x820 [ 80.618949][ T4528] ? uncharge_page+0x490/0x490 [ 80.623721][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 80.629557][ T4528] release_pages+0x186c/0x1be0 [ 80.634342][ T4528] ? lru_cache_disable+0x30/0x30 [ 80.639343][ T4528] __pagevec_release+0x6d/0xe0 [ 80.644759][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 80.650669][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 80.656747][ T4528] ? invalidate_inode_page+0x360/0x360 [ 80.662237][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 80.667732][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 80.672842][ T4528] dbUnmount+0x105/0x170 [ 80.677097][ T4528] jfs_umount+0x1fa/0x360 [ 80.681712][ T4528] jfs_put_super+0x88/0x190 [ 80.686230][ T4528] ? jfs_free_inode+0x20/0x20 [ 80.691057][ T4528] generic_shutdown_super+0x130/0x300 [ 80.696541][ T4528] kill_block_super+0x7c/0xe0 [ 80.701233][ T4528] deactivate_locked_super+0x93/0xf0 [ 80.706531][ T4528] cleanup_mnt+0x42d/0x4e0 [ 80.711052][ T4528] task_work_run+0x125/0x1a0 [ 80.715664][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 80.721044][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 80.726786][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 80.732792][ T4528] do_syscall_64+0x58/0xa0 [ 80.737229][ T4528] ? clear_bhb_loop+0x30/0x80 [ 80.741917][ T4528] ? clear_bhb_loop+0x30/0x80 [ 80.746609][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.752685][ T4528] RIP: 0033:0x7f94a5b50a17 [ 80.757292][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 80.778073][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.786879][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 80.795036][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 80.803399][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 80.811903][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 80.820316][ T4528] R13: 00007f94a5bb03ef R14: 000000000001388e R15: 0000000000000003 [ 80.828937][ T4528] [ 81.108386][ T4874] loop0: detected capacity change from 0 to 32768 [ 81.130231][ T4874] ERROR: (device loop0): dbDiscardAG: -EIO [ 81.130231][ T4874] [ 81.150384][ T4874] attempt to access beyond end of device 2026/05/30 22:23:40 executed programs: 5 [ 81.150384][ T4874] loop0: rw=2051, want=18014398509498368, limit=32768 [ 81.169396][ T4874] JFS: sb_issue_discard(ffff88807ea3c000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 81.180936][ T4874] blkno = 8000000000400, nblocks = 400 [ 81.187086][ T4874] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 81.187086][ T4874] [ 81.203717][ T4528] BUG: Bad page state in process syz-executor.0 pfn:1f54d [ 81.212183][ T4528] page:ffffea00007d5340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1f54d [ 81.223295][ T4528] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 81.233786][ T4528] raw: 00fff00000002006 ffffea00007c0608 ffffc9000307fa00 0000000000000000 [ 81.242686][ T4528] raw: 0000000000000004 ffff888017aa54d8 00000000ffffffff 0000000000000000 [ 81.252289][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 81.260014][ T4528] page_owner tracks the page as allocated [ 81.266129][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4874, ts 81130048605, free_ts 80837402474 [ 81.282000][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 81.287598][ T4528] __alloc_pages+0x1ee/0x480 [ 81.292303][ T4528] __page_cache_alloc+0xce/0x440 [ 81.297373][ T4528] do_read_cache_page+0x1da/0x1030 [ 81.302540][ T4528] __get_metapage+0x35d/0x1060 [ 81.307469][ T4528] dbAllocCtl+0xd4/0x9b0 [ 81.312033][ T4528] dbAllocAG+0x1e7/0xfe0 [ 81.316639][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 81.321097][ T4528] jfs_ioc_trim+0x41e/0x680 [ 81.325877][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 81.330694][ T4528] __se_sys_ioctl+0xfa/0x170 [ 81.335401][ T4528] do_syscall_64+0x4c/0xa0 [ 81.340219][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.347250][ T4528] page last free stack trace: [ 81.352290][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 81.358208][ T4528] free_unref_page_list+0x119/0x820 [ 81.364399][ T4528] release_pages+0x186c/0x1be0 [ 81.369476][ T4528] __pagevec_release+0x6d/0xe0 [ 81.375606][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 81.382918][ T4528] blkdev_flush_mapping+0x188/0x360 [ 81.388405][ T4528] blkdev_put+0x4d1/0x7d0 [ 81.392795][ T4528] deactivate_locked_super+0x93/0xf0 [ 81.398092][ T4528] cleanup_mnt+0x42d/0x4e0 [ 81.403228][ T4528] task_work_run+0x125/0x1a0 [ 81.408001][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 81.413780][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 81.419732][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 81.425624][ T4528] do_syscall_64+0x58/0xa0 [ 81.431576][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.438272][ T4528] Modules linked in: [ 81.442323][ T4528] CPU: 0 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 81.453376][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 81.464242][ T4528] Call Trace: [ 81.467510][ T4528] [ 81.470422][ T4528] dump_stack_lvl+0x188/0x250 [ 81.475579][ T4528] ? show_regs_print_info+0x20/0x20 [ 81.480965][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 81.487334][ T4528] ? rcu_is_watching+0x11/0xa0 [ 81.492286][ T4528] bad_page+0x14b/0x170 [ 81.496719][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 81.502181][ T4528] free_unref_page_list+0x119/0x820 [ 81.507739][ T4528] ? uncharge_page+0x490/0x490 [ 81.512767][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 81.518891][ T4528] release_pages+0x186c/0x1be0 [ 81.524494][ T4528] ? lru_cache_disable+0x30/0x30 [ 81.530367][ T4528] __pagevec_release+0x6d/0xe0 [ 81.535781][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 81.542114][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 81.548246][ T4528] ? invalidate_inode_page+0x360/0x360 [ 81.554213][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 81.559811][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 81.566526][ T4528] dbUnmount+0x105/0x170 [ 81.571216][ T4528] jfs_umount+0x1fa/0x360 [ 81.576085][ T4528] jfs_put_super+0x88/0x190 [ 81.580722][ T4528] ? jfs_free_inode+0x20/0x20 [ 81.585755][ T4528] generic_shutdown_super+0x130/0x300 [ 81.591181][ T4528] kill_block_super+0x7c/0xe0 [ 81.595952][ T4528] deactivate_locked_super+0x93/0xf0 [ 81.601498][ T4528] cleanup_mnt+0x42d/0x4e0 [ 81.605912][ T4528] task_work_run+0x125/0x1a0 [ 81.610514][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 81.616484][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 81.622698][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 81.628254][ T4528] do_syscall_64+0x58/0xa0 [ 81.632832][ T4528] ? clear_bhb_loop+0x30/0x80 [ 81.637500][ T4528] ? clear_bhb_loop+0x30/0x80 [ 81.642356][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.648499][ T4528] RIP: 0033:0x7f94a5b50a17 [ 81.653748][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 81.674081][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.683081][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 81.691590][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 81.700478][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 81.701034][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 81.715571][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 81.724076][ T4528] R13: 00007f94a5bb03ef R14: 0000000000013c1c R15: 0000000000000003 [ 81.732745][ T4528] [ 81.901024][ T4891] loop0: detected capacity change from 0 to 32768 [ 81.947378][ T4891] ERROR: (device loop0): dbDiscardAG: -EIO [ 81.947378][ T4891] [ 81.955690][ T4891] attempt to access beyond end of device [ 81.955690][ T4891] loop0: rw=2051, want=18014398509498368, limit=32768 [ 81.968196][ T4891] JFS: sb_issue_discard(ffff88807de64000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 81.978910][ T4891] blkno = 8000000000400, nblocks = 400 [ 81.984692][ T4891] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 81.984692][ T4891] [ 81.997466][ T4528] BUG: Bad page state in process syz-executor.0 pfn:70dca [ 82.004824][ T4528] page:ffffea0001c37280 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x70dca [ 82.015571][ T4528] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 82.025576][ T4528] raw: 00fff00000002006 ffffea00008f7588 ffffc9000307fa00 0000000000000000 [ 82.034371][ T4528] raw: 0000000000000004 ffff88807a1ff000 00000000ffffffff 0000000000000000 [ 82.044055][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 82.051486][ T4528] page_owner tracks the page as allocated [ 82.057392][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4891, ts 81946738095, free_ts 81202470838 [ 82.073871][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 82.080155][ T4528] __alloc_pages+0x1ee/0x480 [ 82.085467][ T4528] __page_cache_alloc+0xce/0x440 [ 82.091020][ T4528] do_read_cache_page+0x1da/0x1030 [ 82.096357][ T4528] __get_metapage+0x35d/0x1060 [ 82.101390][ T4528] dbAllocCtl+0xd4/0x9b0 [ 82.105649][ T4528] dbAllocAG+0x1e7/0xfe0 [ 82.109886][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 82.114481][ T4528] jfs_ioc_trim+0x41e/0x680 [ 82.119093][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 82.123447][ T4528] __se_sys_ioctl+0xfa/0x170 [ 82.128260][ T4528] do_syscall_64+0x4c/0xa0 [ 82.132782][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.138691][ T4528] page last free stack trace: [ 82.143389][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 82.148949][ T4528] free_unref_page+0x8f/0x2a0 [ 82.154255][ T4528] __vunmap+0x8b9/0xa50 [ 82.158848][ T4528] free_work+0x56/0x80 [ 82.163149][ T4528] process_one_work+0x85f/0x1010 [ 82.168467][ T4528] worker_thread+0xaa6/0x1290 [ 82.173849][ T4528] kthread+0x436/0x520 [ 82.178010][ T4528] ret_from_fork+0x1f/0x30 [ 82.183092][ T4528] Modules linked in: [ 82.187338][ T4528] CPU: 1 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 82.197396][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 82.207443][ T4528] Call Trace: [ 82.210977][ T4528] [ 82.213991][ T4528] dump_stack_lvl+0x188/0x250 [ 82.218741][ T4528] ? show_regs_print_info+0x20/0x20 [ 82.224011][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 82.230355][ T4528] ? rcu_is_watching+0x11/0xa0 [ 82.235200][ T4528] bad_page+0x14b/0x170 [ 82.239796][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 82.245414][ T4528] free_unref_page_list+0x119/0x820 [ 82.250631][ T4528] ? uncharge_page+0x490/0x490 [ 82.255400][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 82.261119][ T4528] release_pages+0x186c/0x1be0 [ 82.266002][ T4528] ? lru_cache_disable+0x30/0x30 [ 82.271021][ T4528] __pagevec_release+0x6d/0xe0 [ 82.275775][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 82.281824][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 82.287697][ T4528] ? invalidate_inode_page+0x360/0x360 [ 82.293172][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 82.298354][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 82.303186][ T4528] dbUnmount+0x105/0x170 [ 82.307408][ T4528] jfs_umount+0x1fa/0x360 [ 82.311743][ T4528] jfs_put_super+0x88/0x190 [ 82.316240][ T4528] ? jfs_free_inode+0x20/0x20 [ 82.320897][ T4528] generic_shutdown_super+0x130/0x300 [ 82.326244][ T4528] kill_block_super+0x7c/0xe0 [ 82.330902][ T4528] deactivate_locked_super+0x93/0xf0 [ 82.336276][ T4528] cleanup_mnt+0x42d/0x4e0 [ 82.340846][ T4528] task_work_run+0x125/0x1a0 [ 82.345417][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 82.350767][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 82.356287][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 82.361911][ T4528] do_syscall_64+0x58/0xa0 [ 82.366320][ T4528] ? clear_bhb_loop+0x30/0x80 [ 82.371009][ T4528] ? clear_bhb_loop+0x30/0x80 [ 82.375875][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.381778][ T4528] RIP: 0033:0x7f94a5b50a17 [ 82.386359][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 82.406115][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.414511][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 82.422644][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 82.431345][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 82.441140][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 82.450639][ T4528] R13: 00007f94a5bb03ef R14: 0000000000013f72 R15: 0000000000000003 [ 82.461324][ T4528] [ 82.639046][ T4893] loop0: detected capacity change from 0 to 32768 [ 82.688855][ T4893] ERROR: (device loop0): dbDiscardAG: -EIO [ 82.688855][ T4893] [ 82.697208][ T4893] attempt to access beyond end of device [ 82.697208][ T4893] loop0: rw=2051, want=18014398509498368, limit=32768 [ 82.709681][ T4893] JFS: sb_issue_discard(ffff88807e7d2000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 82.720321][ T4893] blkno = 8000000000400, nblocks = 400 [ 82.725876][ T4893] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 82.725876][ T4893] [ 82.739756][ T4528] BUG: Bad page state in process syz-executor.0 pfn:1f612 [ 82.747136][ T4528] page:ffffea00007d8480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1f612 [ 82.757583][ T4528] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 82.766275][ T4528] raw: 00fff00000002004 ffffea00008da208 ffffc9000307fa00 0000000000000000 [ 82.775276][ T4528] raw: 0000000000000004 ffff88802346f9b0 00000000ffffffff 0000000000000000 [ 82.784305][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 82.792280][ T4528] page_owner tracks the page as allocated [ 82.798000][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4893, ts 82688606289, free_ts 82646583309 [ 82.813325][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 82.818878][ T4528] __alloc_pages+0x1ee/0x480 [ 82.823798][ T4528] __page_cache_alloc+0xce/0x440 [ 82.828864][ T4528] do_read_cache_page+0x1da/0x1030 [ 82.834315][ T4528] __get_metapage+0x35d/0x1060 [ 82.839184][ T4528] dbAllocCtl+0xd4/0x9b0 [ 82.843665][ T4528] dbAllocAG+0x1e7/0xfe0 [ 82.847952][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 82.852961][ T4528] jfs_ioc_trim+0x41e/0x680 [ 82.857742][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 82.862110][ T4528] __se_sys_ioctl+0xfa/0x170 [ 82.866733][ T4528] do_syscall_64+0x4c/0xa0 [ 82.871165][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.877599][ T4528] page last free stack trace: [ 82.882455][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 82.888123][ T4528] free_unref_page+0x8f/0x2a0 [ 82.893653][ T4528] __unfreeze_partials+0x1a5/0x200 [ 82.899811][ T4528] put_cpu_partial+0x12d/0x190 [ 82.905171][ T4528] qlist_free_all+0x35/0x90 [ 82.909772][ T4528] kasan_quarantine_reduce+0x150/0x160 [ 82.915498][ T4528] __kasan_slab_alloc+0x2f/0xd0 [ 82.920422][ T4528] slab_post_alloc_hook+0x4c/0x380 [ 82.927083][ T4528] kmem_cache_alloc+0x100/0x290 [ 82.932751][ T4528] __alloc_file+0x25/0x240 [ 82.937431][ T4528] alloc_empty_file+0x90/0x180 [ 82.942622][ T4528] path_openat+0x10f/0x2fa0 [ 82.947336][ T4528] do_filp_open+0x1e2/0x410 [ 82.952809][ T4528] do_sys_openat2+0x150/0x4b0 [ 82.958450][ T4528] __x64_sys_openat+0x135/0x160 [ 82.963766][ T4528] do_syscall_64+0x4c/0xa0 [ 82.968389][ T4528] Modules linked in: [ 82.972690][ T4528] CPU: 0 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 82.982015][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 82.992268][ T4528] Call Trace: [ 82.995656][ T4528] [ 82.998577][ T4528] dump_stack_lvl+0x188/0x250 [ 83.003603][ T4528] ? show_regs_print_info+0x20/0x20 [ 83.008795][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 83.015331][ T4528] ? rcu_is_watching+0x11/0xa0 [ 83.020192][ T4528] bad_page+0x14b/0x170 [ 83.024596][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 83.030348][ T4528] free_unref_page_list+0x119/0x820 [ 83.035750][ T4528] ? uncharge_page+0x490/0x490 [ 83.040593][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 83.046387][ T4528] release_pages+0x186c/0x1be0 [ 83.051355][ T4528] ? lru_cache_disable+0x30/0x30 [ 83.056481][ T4528] __pagevec_release+0x6d/0xe0 [ 83.061229][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 83.067017][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 83.072903][ T4528] ? invalidate_inode_page+0x360/0x360 [ 83.078348][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 83.083723][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 83.088941][ T4528] dbUnmount+0x105/0x170 [ 83.093186][ T4528] jfs_umount+0x1fa/0x360 [ 83.097613][ T4528] jfs_put_super+0x88/0x190 [ 83.102127][ T4528] ? jfs_free_inode+0x20/0x20 [ 83.106792][ T4528] generic_shutdown_super+0x130/0x300 [ 83.112175][ T4528] kill_block_super+0x7c/0xe0 [ 83.116839][ T4528] deactivate_locked_super+0x93/0xf0 [ 83.122108][ T4528] cleanup_mnt+0x42d/0x4e0 [ 83.126515][ T4528] task_work_run+0x125/0x1a0 [ 83.131174][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 83.136536][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 83.142064][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 83.147508][ T4528] do_syscall_64+0x58/0xa0 [ 83.151903][ T4528] ? clear_bhb_loop+0x30/0x80 [ 83.156554][ T4528] ? clear_bhb_loop+0x30/0x80 [ 83.161292][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.167334][ T4528] RIP: 0033:0x7f94a5b50a17 [ 83.171898][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 83.191746][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.200349][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 83.208717][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 83.217104][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 83.225212][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 83.233389][ T4528] R13: 00007f94a5bb03ef R14: 000000000001424f R15: 0000000000000003 [ 83.241463][ T4528] [ 83.415192][ T4895] loop0: detected capacity change from 0 to 32768 [ 83.479793][ T4895] ERROR: (device loop0): dbDiscardAG: -EIO [ 83.479793][ T4895] [ 83.488185][ T4895] attempt to access beyond end of device [ 83.488185][ T4895] loop0: rw=2051, want=18014398509498368, limit=32768 [ 83.500759][ T4895] JFS: sb_issue_discard(ffff88807d75e000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 83.511249][ T4895] blkno = 8000000000400, nblocks = 400 [ 83.516785][ T4895] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 83.516785][ T4895] [ 83.529166][ T4528] BUG: Bad page state in process syz-executor.0 pfn:2896b [ 83.537267][ T4528] page:ffffea0000a25ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x2896b [ 83.548011][ T4528] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 83.557117][ T4528] raw: 00fff00000002004 ffffea0000a25a48 ffffc9000307fa00 0000000000000000 [ 83.566081][ T4528] raw: 0000000000000004 ffff88802346fd90 00000000ffffffff 0000000000000000 [ 83.574718][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 83.582112][ T4528] page_owner tracks the page as allocated [ 83.587816][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4895, ts 83479571353, free_ts 83430668504 [ 83.603052][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 83.608634][ T4528] __alloc_pages+0x1ee/0x480 [ 83.613596][ T4528] __page_cache_alloc+0xce/0x440 [ 83.619105][ T4528] do_read_cache_page+0x1da/0x1030 [ 83.624513][ T4528] __get_metapage+0x35d/0x1060 [ 83.629908][ T4528] dbAllocCtl+0xd4/0x9b0 [ 83.634671][ T4528] dbAllocAG+0x1e7/0xfe0 [ 83.639100][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 83.643818][ T4528] jfs_ioc_trim+0x41e/0x680 [ 83.648329][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 83.652948][ T4528] __se_sys_ioctl+0xfa/0x170 [ 83.658106][ T4528] do_syscall_64+0x4c/0xa0 [ 83.662835][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.668954][ T4528] page last free stack trace: [ 83.673945][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 83.679424][ T4528] free_unref_page+0x8f/0x2a0 [ 83.684151][ T4528] __unfreeze_partials+0x1a5/0x200 [ 83.689271][ T4528] put_cpu_partial+0x12d/0x190 [ 83.694230][ T4528] qlist_free_all+0x35/0x90 [ 83.698742][ T4528] kasan_quarantine_reduce+0x150/0x160 [ 83.704275][ T4528] __kasan_slab_alloc+0x2f/0xd0 [ 83.709160][ T4528] slab_post_alloc_hook+0x4c/0x380 [ 83.714465][ T4528] kmem_cache_alloc_node+0x12d/0x2d0 [ 83.719755][ T4528] __alloc_skb+0xf4/0x750 [ 83.724303][ T4528] alloc_skb_with_frags+0xa7/0x730 [ 83.729425][ T4528] sock_alloc_send_pskb+0x87f/0x9a0 [ 83.734852][ T4528] unix_dgram_sendmsg+0x5fc/0x18a0 [ 83.739993][ T4528] __sys_sendto+0x46d/0x620 [ 83.744692][ T4528] __x64_sys_sendto+0xda/0xf0 [ 83.749767][ T4528] do_syscall_64+0x4c/0xa0 [ 83.754550][ T4528] Modules linked in: [ 83.758460][ T4528] CPU: 1 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 83.768285][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.778506][ T4528] Call Trace: [ 83.781779][ T4528] [ 83.784704][ T4528] dump_stack_lvl+0x188/0x250 [ 83.789810][ T4528] ? show_regs_print_info+0x20/0x20 [ 83.795086][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 83.801412][ T4528] ? rcu_is_watching+0x11/0xa0 [ 83.806165][ T4528] bad_page+0x14b/0x170 [ 83.810360][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 83.816351][ T4528] free_unref_page_list+0x119/0x820 [ 83.821794][ T4528] ? uncharge_page+0x490/0x490 [ 83.826547][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 83.832078][ T4528] release_pages+0x186c/0x1be0 [ 83.836853][ T4528] ? lru_cache_disable+0x30/0x30 [ 83.841785][ T4528] __pagevec_release+0x6d/0xe0 [ 83.846575][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 83.852539][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 83.858502][ T4528] ? invalidate_inode_page+0x360/0x360 [ 83.864756][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 83.870131][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 83.875235][ T4528] dbUnmount+0x105/0x170 [ 83.879730][ T4528] jfs_umount+0x1fa/0x360 [ 83.884061][ T4528] jfs_put_super+0x88/0x190 [ 83.888963][ T4528] ? jfs_free_inode+0x20/0x20 [ 83.893913][ T4528] generic_shutdown_super+0x130/0x300 [ 83.899506][ T4528] kill_block_super+0x7c/0xe0 [ 83.904256][ T4528] deactivate_locked_super+0x93/0xf0 [ 83.909885][ T4528] cleanup_mnt+0x42d/0x4e0 [ 83.914302][ T4528] task_work_run+0x125/0x1a0 [ 83.918957][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 83.924617][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 83.930173][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 83.935833][ T4528] do_syscall_64+0x58/0xa0 [ 83.940518][ T4528] ? clear_bhb_loop+0x30/0x80 [ 83.945992][ T4528] ? clear_bhb_loop+0x30/0x80 [ 83.950842][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.956898][ T4528] RIP: 0033:0x7f94a5b50a17 [ 83.961312][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 83.982191][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.990892][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 83.999380][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 84.007568][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 84.015870][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 84.024047][ T4528] R13: 00007f94a5bb03ef R14: 000000000001455b R15: 0000000000000003 [ 84.032527][ T4528] [ 84.036041][ T4224] Bluetooth: hci0: command 0x0419 tx timeout [ 84.236449][ T4897] loop0: detected capacity change from 0 to 32768 [ 84.289304][ T4897] ERROR: (device loop0): dbDiscardAG: -EIO [ 84.289304][ T4897] [ 84.297511][ T4897] attempt to access beyond end of device [ 84.297511][ T4897] loop0: rw=2051, want=18014398509498368, limit=32768 [ 84.310216][ T4897] JFS: sb_issue_discard(ffff88807baae000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 84.321921][ T4897] blkno = 8000000000400, nblocks = 400 [ 84.327608][ T4897] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 84.327608][ T4897] [ 84.342527][ T4528] BUG: Bad page state in process syz-executor.0 pfn:743e9 [ 84.349746][ T4528] page:ffffea0001d0fa40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x743e9 [ 84.360156][ T4528] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 84.370144][ T4528] raw: 00fff00000002004 ffffea0001d0dcc8 ffffc9000307fa00 0000000000000000 [ 84.379921][ T4528] raw: 0000000000000004 ffff8880743480f8 00000000ffffffff 0000000000000000 [ 84.388843][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 84.397476][ T4528] page_owner tracks the page as allocated [ 84.403440][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4897, ts 84289104900, free_ts 84281208969 [ 84.419755][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 84.425530][ T4528] __alloc_pages+0x1ee/0x480 [ 84.430654][ T4528] __page_cache_alloc+0xce/0x440 [ 84.436037][ T4528] do_read_cache_page+0x1da/0x1030 [ 84.441680][ T4528] __get_metapage+0x35d/0x1060 [ 84.446824][ T4528] dbAllocCtl+0xd4/0x9b0 [ 84.451189][ T4528] dbAllocAG+0x1e7/0xfe0 [ 84.455533][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 84.460124][ T4528] jfs_ioc_trim+0x41e/0x680 [ 84.464681][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 84.469169][ T4528] __se_sys_ioctl+0xfa/0x170 [ 84.474061][ T4528] do_syscall_64+0x4c/0xa0 [ 84.478529][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.484482][ T4528] page last free stack trace: [ 84.489245][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 84.494740][ T4528] free_unref_page+0x8f/0x2a0 [ 84.499697][ T4528] __unfreeze_partials+0x1a5/0x200 [ 84.505451][ T4528] put_cpu_partial+0x12d/0x190 [ 84.510228][ T4528] qlist_free_all+0x35/0x90 [ 84.514997][ T4528] kasan_quarantine_reduce+0x150/0x160 [ 84.520585][ T4528] __kasan_slab_alloc+0x2f/0xd0 [ 84.525716][ T4528] slab_post_alloc_hook+0x4c/0x380 [ 84.531167][ T4528] kmem_cache_alloc+0x100/0x290 [ 84.536119][ T4528] getname_flags+0xb5/0x500 [ 84.540658][ T4528] user_path_at_empty+0x2a/0x190 [ 84.546488][ T4528] do_readlinkat+0xd9/0x490 [ 84.551090][ T4528] __x64_sys_readlink+0x7b/0x90 [ 84.556356][ T4528] do_syscall_64+0x4c/0xa0 [ 84.561032][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.567134][ T4528] Modules linked in: [ 84.571082][ T4528] CPU: 1 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 84.580552][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.590792][ T4528] Call Trace: [ 84.594065][ T4528] [ 84.597081][ T4528] dump_stack_lvl+0x188/0x250 [ 84.601965][ T4528] ? show_regs_print_info+0x20/0x20 [ 84.607551][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 84.614171][ T4528] ? rcu_is_watching+0x11/0xa0 [ 84.619073][ T4528] bad_page+0x14b/0x170 [ 84.623242][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 84.628720][ T4528] free_unref_page_list+0x119/0x820 [ 84.633990][ T4528] ? uncharge_page+0x490/0x490 [ 84.639229][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 84.644785][ T4528] release_pages+0x186c/0x1be0 [ 84.649672][ T4528] ? lru_cache_disable+0x30/0x30 [ 84.655627][ T4528] __pagevec_release+0x6d/0xe0 [ 84.660558][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 84.666637][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 84.672736][ T4528] ? invalidate_inode_page+0x360/0x360 [ 84.678980][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 84.685835][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 84.691232][ T4528] dbUnmount+0x105/0x170 [ 84.695780][ T4528] jfs_umount+0x1fa/0x360 [ 84.700123][ T4528] jfs_put_super+0x88/0x190 [ 84.704699][ T4528] ? jfs_free_inode+0x20/0x20 [ 84.709439][ T4528] generic_shutdown_super+0x130/0x300 [ 84.714800][ T4528] kill_block_super+0x7c/0xe0 [ 84.719469][ T4528] deactivate_locked_super+0x93/0xf0 [ 84.724858][ T4528] cleanup_mnt+0x42d/0x4e0 [ 84.729510][ T4528] task_work_run+0x125/0x1a0 [ 84.734569][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 84.739966][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 84.745503][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 84.750970][ T4528] do_syscall_64+0x58/0xa0 [ 84.755363][ T4528] ? clear_bhb_loop+0x30/0x80 [ 84.760015][ T4528] ? clear_bhb_loop+0x30/0x80 [ 84.764882][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.770817][ T4528] RIP: 0033:0x7f94a5b50a17 [ 84.775828][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 84.797646][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 84.807397][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 84.816220][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 84.826852][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 84.836983][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 84.847087][ T4528] R13: 00007f94a5bb03ef R14: 0000000000014892 R15: 0000000000000003 [ 84.855808][ T4528] [ 85.029501][ T4899] loop0: detected capacity change from 0 to 32768 [ 85.069024][ T4899] ERROR: (device loop0): dbDiscardAG: -EIO [ 85.069024][ T4899] [ 85.077756][ T4899] attempt to access beyond end of device [ 85.077756][ T4899] loop0: rw=2051, want=18014398509498368, limit=32768 [ 85.091279][ T4899] JFS: sb_issue_discard(ffff88807bbae000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 85.103017][ T4899] blkno = 8000000000400, nblocks = 400 [ 85.108562][ T4899] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 85.108562][ T4899] [ 85.122596][ T4528] BUG: Bad page state in process syz-executor.0 pfn:743dd [ 85.130020][ T4528] page:ffffea0001d0f740 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x743dd [ 85.141549][ T4528] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 85.151142][ T4528] raw: 00fff00000002006 ffffea0000aab548 ffffc9000307fa00 0000000000000000 [ 85.160162][ T4528] raw: 0000000000000004 ffff8880743de2e8 00000000ffffffff 0000000000000000 [ 85.169924][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 85.177882][ T4528] page_owner tracks the page as allocated [ 85.184064][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4899, ts 85068847440, free_ts 84913853736 [ 85.203368][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 85.209483][ T4528] __alloc_pages+0x1ee/0x480 [ 85.216917][ T4528] __page_cache_alloc+0xce/0x440 [ 85.222992][ T4528] do_read_cache_page+0x1da/0x1030 [ 85.233625][ T4528] __get_metapage+0x35d/0x1060 [ 85.240582][ T4528] dbAllocCtl+0xd4/0x9b0 [ 85.245499][ T4528] dbAllocAG+0x1e7/0xfe0 [ 85.251036][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 85.257165][ T4528] jfs_ioc_trim+0x41e/0x680 [ 85.262444][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 85.267232][ T4528] __se_sys_ioctl+0xfa/0x170 [ 85.272051][ T4528] do_syscall_64+0x4c/0xa0 [ 85.276564][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.282975][ T4528] page last free stack trace: [ 85.287785][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 85.293561][ T4528] free_unref_page+0x8f/0x2a0 [ 85.298413][ T4528] qlist_free_all+0x35/0x90 [ 85.303259][ T4528] kasan_quarantine_reduce+0x150/0x160 [ 85.308844][ T4528] __kasan_slab_alloc+0x2f/0xd0 [ 85.313742][ T4528] slab_post_alloc_hook+0x4c/0x380 [ 85.318933][ T4528] kmem_cache_alloc_node+0x12d/0x2d0 [ 85.324246][ T4528] __alloc_skb+0xf4/0x750 [ 85.328574][ T4528] netlink_sendmsg+0x654/0xbe0 [ 85.333613][ T4528] ____sys_sendmsg+0x5b7/0x8f0 [ 85.338393][ T4528] ___sys_sendmsg+0x236/0x2e0 [ 85.343446][ T4528] __se_sys_sendmsg+0x1af/0x290 [ 85.348356][ T4528] do_syscall_64+0x4c/0xa0 [ 85.352919][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.358810][ T4528] Modules linked in: [ 85.363245][ T4528] CPU: 0 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 85.372759][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.383360][ T4528] Call Trace: [ 85.386817][ T4528] [ 85.389825][ T4528] dump_stack_lvl+0x188/0x250 [ 85.394496][ T4528] ? show_regs_print_info+0x20/0x20 [ 85.399782][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 85.406105][ T4528] ? rcu_is_watching+0x11/0xa0 [ 85.410859][ T4528] bad_page+0x14b/0x170 [ 85.415084][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 85.420626][ T4528] free_unref_page_list+0x119/0x820 [ 85.426310][ T4528] ? uncharge_page+0x490/0x490 [ 85.431413][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 85.437491][ T4528] release_pages+0x186c/0x1be0 [ 85.442740][ T4528] ? lru_cache_disable+0x30/0x30 [ 85.448005][ T4528] __pagevec_release+0x6d/0xe0 [ 85.453126][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 85.460316][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 85.466506][ T4528] ? invalidate_inode_page+0x360/0x360 [ 85.472377][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 85.477588][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 85.483328][ T4528] dbUnmount+0x105/0x170 [ 85.487765][ T4528] jfs_umount+0x1fa/0x360 [ 85.492106][ T4528] jfs_put_super+0x88/0x190 [ 85.496678][ T4528] ? jfs_free_inode+0x20/0x20 [ 85.501681][ T4528] generic_shutdown_super+0x130/0x300 [ 85.507202][ T4528] kill_block_super+0x7c/0xe0 [ 85.512148][ T4528] deactivate_locked_super+0x93/0xf0 [ 85.517612][ T4528] cleanup_mnt+0x42d/0x4e0 [ 85.522460][ T4528] task_work_run+0x125/0x1a0 [ 85.527072][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 85.532555][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 85.539108][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 85.546062][ T4528] do_syscall_64+0x58/0xa0 [ 85.550674][ T4528] ? clear_bhb_loop+0x30/0x80 [ 85.555760][ T4528] ? clear_bhb_loop+0x30/0x80 [ 85.560625][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.566911][ T4528] RIP: 0033:0x7f94a5b50a17 [ 85.571319][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 85.590999][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.599614][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 85.607578][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 85.615716][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 85.623683][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 85.631754][ T4528] R13: 00007f94a5bb03ef R14: 0000000000014baa R15: 0000000000000003 [ 85.640330][ T4528] [ 85.805315][ T4901] loop0: detected capacity change from 0 to 32768 [ 85.859818][ T4901] ERROR: (device loop0): dbDiscardAG: -EIO [ 85.859818][ T4901] [ 85.867999][ T4901] attempt to access beyond end of device [ 85.867999][ T4901] loop0: rw=2051, want=18014398509498368, limit=32768 [ 85.880830][ T4901] JFS: sb_issue_discard(ffff88802454a000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 85.892433][ T4901] blkno = 8000000000400, nblocks = 400 [ 85.898452][ T4901] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 85.898452][ T4901] [ 85.912956][ T4528] BUG: Bad page state in process syz-executor.0 pfn:1f08e [ 85.921128][ T4528] page:ffffea00007c2380 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1f08e [ 85.934090][ T4528] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 85.944723][ T4528] raw: 00fff00000002004 ffffea0001cc2848 ffffc9000307fa00 0000000000000000 [ 85.953976][ T4528] raw: 0000000000000004 ffff888074348e88 00000000ffffffff 0000000000000000 [ 85.962894][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 85.971032][ T4528] page_owner tracks the page as allocated [ 85.977124][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4901, ts 85859581661, free_ts 85644916688 [ 85.992824][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 85.998399][ T4528] __alloc_pages+0x1ee/0x480 [ 86.003035][ T4528] __page_cache_alloc+0xce/0x440 [ 86.007985][ T4528] do_read_cache_page+0x1da/0x1030 [ 86.013383][ T4528] __get_metapage+0x35d/0x1060 [ 86.018161][ T4528] dbAllocCtl+0xd4/0x9b0 [ 86.022533][ T4528] dbAllocAG+0x1e7/0xfe0 [ 86.026782][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 86.031215][ T4528] jfs_ioc_trim+0x41e/0x680 [ 86.035811][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 86.040046][ T4528] __se_sys_ioctl+0xfa/0x170 [ 86.044801][ T4528] do_syscall_64+0x4c/0xa0 [ 86.049605][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.055533][ T4528] page last free stack trace: [ 86.060712][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 86.066195][ T4528] free_unref_page_list+0x119/0x820 [ 86.071448][ T4528] release_pages+0x186c/0x1be0 [ 86.076328][ T4528] __pagevec_release+0x6d/0xe0 [ 86.081351][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 86.087273][ T4528] blkdev_flush_mapping+0x188/0x360 [ 86.092928][ T4528] blkdev_put+0x4d1/0x7d0 [ 86.097527][ T4528] deactivate_locked_super+0x93/0xf0 [ 86.103110][ T4528] cleanup_mnt+0x42d/0x4e0 [ 86.107530][ T4528] task_work_run+0x125/0x1a0 [ 86.112239][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 86.117615][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 86.123183][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 86.128936][ T4528] do_syscall_64+0x58/0xa0 [ 86.134491][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.140509][ T4528] Modules linked in: [ 86.144391][ T4528] CPU: 0 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 86.153616][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 86.164105][ T4528] Call Trace: [ 86.167560][ T4528] [ 86.170572][ T4528] dump_stack_lvl+0x188/0x250 [ 86.175801][ T4528] ? show_regs_print_info+0x20/0x20 [ 86.181421][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 86.188285][ T4528] ? rcu_is_watching+0x11/0xa0 [ 86.193378][ T4528] bad_page+0x14b/0x170 [ 86.197528][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 86.202988][ T4528] free_unref_page_list+0x119/0x820 [ 86.208443][ T4528] ? uncharge_page+0x490/0x490 [ 86.213426][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 86.219152][ T4528] release_pages+0x186c/0x1be0 [ 86.223995][ T4528] ? lru_cache_disable+0x30/0x30 [ 86.228910][ T4528] __pagevec_release+0x6d/0xe0 [ 86.233662][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 86.239724][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 86.245606][ T4528] ? invalidate_inode_page+0x360/0x360 [ 86.251052][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 86.256318][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 86.261268][ T4528] dbUnmount+0x105/0x170 [ 86.265579][ T4528] jfs_umount+0x1fa/0x360 [ 86.269986][ T4528] jfs_put_super+0x88/0x190 [ 86.274480][ T4528] ? jfs_free_inode+0x20/0x20 [ 86.279136][ T4528] generic_shutdown_super+0x130/0x300 [ 86.284492][ T4528] kill_block_super+0x7c/0xe0 [ 86.289463][ T4528] deactivate_locked_super+0x93/0xf0 [ 86.294745][ T4528] cleanup_mnt+0x42d/0x4e0 [ 86.299170][ T4528] task_work_run+0x125/0x1a0 [ 86.303855][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 86.309409][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 86.315218][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 86.320686][ T4528] do_syscall_64+0x58/0xa0 [ 86.325427][ T4528] ? clear_bhb_loop+0x30/0x80 [ 86.330184][ T4528] ? clear_bhb_loop+0x30/0x80 [ 86.334857][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.340886][ T4528] RIP: 0033:0x7f94a5b50a17 [ 86.345303][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 86.365428][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.374051][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 86.382098][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 86.390069][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 86.398023][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 86.405980][ T4528] R13: 00007f94a5bb03ef R14: 0000000000014eb4 R15: 0000000000000003 [ 86.413935][ T4528] [ 86.610072][ T4903] loop0: detected capacity change from 0 to 32768 2026/05/30 22:23:46 executed programs: 12 [ 86.677298][ T4903] ERROR: (device loop0): dbDiscardAG: -EIO [ 86.677298][ T4903] [ 86.686171][ T4903] attempt to access beyond end of device [ 86.686171][ T4903] loop0: rw=2051, want=18014398509498368, limit=32768 [ 86.698520][ T4903] JFS: sb_issue_discard(ffff88807b656000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 86.709042][ T4903] blkno = 8000000000400, nblocks = 400 [ 86.714711][ T4903] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 86.714711][ T4903] [ 86.727896][ T4528] BUG: Bad page state in process syz-executor.0 pfn:743ec [ 86.735666][ T4528] page:ffffea0001d0fb00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x743ec [ 86.746344][ T4528] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 86.755201][ T4528] raw: 00fff00000002004 ffffea0001cb87c8 ffffc9000307fa00 0000000000000000 [ 86.764057][ T4528] raw: 0000000000000004 ffff8880743deaa8 00000000ffffffff 0000000000000000 [ 86.772790][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 86.780088][ T4528] page_owner tracks the page as allocated [ 86.786135][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4903, ts 86676790979, free_ts 86609013954 [ 86.801409][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 86.806964][ T4528] __alloc_pages+0x1ee/0x480 [ 86.811709][ T4528] __page_cache_alloc+0xce/0x440 [ 86.816645][ T4528] do_read_cache_page+0x1da/0x1030 [ 86.821784][ T4528] __get_metapage+0x35d/0x1060 [ 86.826624][ T4528] dbAllocCtl+0xd4/0x9b0 [ 86.830898][ T4528] dbAllocAG+0x1e7/0xfe0 [ 86.835138][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 86.839566][ T4528] jfs_ioc_trim+0x41e/0x680 [ 86.844098][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 86.848453][ T4528] __se_sys_ioctl+0xfa/0x170 [ 86.853072][ T4528] do_syscall_64+0x4c/0xa0 [ 86.857772][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.863949][ T4528] page last free stack trace: [ 86.868625][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 86.874104][ T4528] free_unref_page_list+0x119/0x820 [ 86.879301][ T4528] release_pages+0x186c/0x1be0 [ 86.884100][ T4528] tlb_finish_mmu+0x1b4/0x370 [ 86.888784][ T4528] unmap_region+0x344/0x3b0 [ 86.893319][ T4528] __do_munmap+0x9f8/0xdf0 [ 86.897733][ T4528] __vm_munmap+0x140/0x240 [ 86.902178][ T4528] __x64_sys_munmap+0x67/0x70 [ 86.906853][ T4528] do_syscall_64+0x4c/0xa0 [ 86.911372][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.917364][ T4528] Modules linked in: [ 86.921465][ T4528] CPU: 1 PID: 4528 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 86.930654][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 86.941021][ T4528] Call Trace: [ 86.944376][ T4528] [ 86.947289][ T4528] dump_stack_lvl+0x188/0x250 [ 86.951947][ T4528] ? show_regs_print_info+0x20/0x20 [ 86.957188][ T4528] ? clockevents_increase_min_delta+0x130/0x130 [ 86.963424][ T4528] ? rcu_is_watching+0x11/0xa0 [ 86.968177][ T4528] bad_page+0x14b/0x170 [ 86.972339][ T4528] free_unref_page_prepare+0x383/0x6c0 [ 86.977783][ T4528] free_unref_page_list+0x119/0x820 [ 86.983067][ T4528] ? uncharge_page+0x490/0x490 [ 86.987930][ T4528] ? free_unref_page_commit+0x4c0/0x4c0 [ 86.993470][ T4528] release_pages+0x186c/0x1be0 [ 86.998217][ T4528] ? lru_cache_disable+0x30/0x30 [ 87.003231][ T4528] __pagevec_release+0x6d/0xe0 [ 87.008122][ T4528] truncate_inode_pages_range+0x362/0xfe0 [ 87.013942][ T4528] ? rcu_force_quiescent_state+0x230/0x230 [ 87.019746][ T4528] ? invalidate_inode_page+0x360/0x360 [ 87.025204][ T4528] ? do_raw_spin_unlock+0x11d/0x230 [ 87.030480][ T4528] ? _raw_spin_unlock+0x24/0x40 [ 87.035308][ T4528] dbUnmount+0x105/0x170 [ 87.039620][ T4528] jfs_umount+0x1fa/0x360 [ 87.043924][ T4528] jfs_put_super+0x88/0x190 [ 87.048495][ T4528] ? jfs_free_inode+0x20/0x20 [ 87.053261][ T4528] generic_shutdown_super+0x130/0x300 [ 87.058895][ T4528] kill_block_super+0x7c/0xe0 [ 87.063692][ T4528] deactivate_locked_super+0x93/0xf0 [ 87.068989][ T4528] cleanup_mnt+0x42d/0x4e0 [ 87.073654][ T4528] task_work_run+0x125/0x1a0 [ 87.078459][ T4528] exit_to_user_mode_loop+0x10f/0x130 [ 87.084127][ T4528] exit_to_user_mode_prepare+0xee/0x180 [ 87.089827][ T4528] syscall_exit_to_user_mode+0x16/0x40 [ 87.095420][ T4528] do_syscall_64+0x58/0xa0 [ 87.100017][ T4528] ? clear_bhb_loop+0x30/0x80 [ 87.104677][ T4528] ? clear_bhb_loop+0x30/0x80 [ 87.109430][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.115396][ T4528] RIP: 0033:0x7f94a5b50a17 [ 87.119830][ T4528] Code: a2 c7 05 e8 94 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 87.139941][ T4528] RSP: 002b:00007ffeac2b1a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.148423][ T4528] RAX: 0000000000000000 RBX: 00007f94a5bb03ef RCX: 00007f94a5b50a17 [ 87.156382][ T4528] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffeac2b1b40 [ 87.164338][ T4528] RBP: 00007ffeac2b1b40 R08: 00007ffeac2b2b40 R09: 00000000ffffffff [ 87.172380][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeac2b2c00 [ 87.180450][ T4528] R13: 00007f94a5bb03ef R14: 00000000000151da R15: 0000000000000003 [ 87.189313][ T4528] [ 87.361861][ T4905] loop0: detected capacity change from 0 to 32768 [ 87.465436][ T4905] ERROR: (device loop0): dbDiscardAG: -EIO [ 87.465436][ T4905] [ 87.473899][ T4905] attempt to access beyond end of device [ 87.473899][ T4905] loop0: rw=2051, want=18014398509498368, limit=32768 [ 87.486536][ T4905] JFS: sb_issue_discard(ffff888063984000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 87.497151][ T4905] blkno = 8000000000400, nblocks = 400 [ 87.503468][ T4905] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 87.503468][ T4905] [ 87.516993][ T4528] BUG: Bad page state in process syz-executor.0 pfn:7d9de [ 87.524549][ T4528] page:ffffea0001f67780 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7d9de [ 87.535315][ T4528] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 87.545210][ T4528] raw: 00fff00000002006 ffffea0000aa6288 ffffc9000307fa00 0000000000000000 [ 87.554181][ T4528] raw: 0000000000000004 ffff8880733f71f0 00000000ffffffff 0000000000000000 [ 87.562804][ T4528] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 87.570080][ T4528] page_owner tracks the page as allocated [ 87.575822][ T4528] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4905, ts 87465239577, free_ts 87286060216 [ 87.590889][ T4528] get_page_from_freelist+0x1bbd/0x1ca0 [ 87.596523][ T4528] __alloc_pages+0x1ee/0x480 [ 87.601222][ T4528] __page_cache_alloc+0xce/0x440 [ 87.606164][ T4528] do_read_cache_page+0x1da/0x1030 [ 87.611313][ T4528] __get_metapage+0x35d/0x1060 [ 87.616406][ T4528] dbAllocCtl+0xd4/0x9b0 [ 87.620785][ T4528] dbAllocAG+0x1e7/0xfe0 [ 87.625036][ T4528] dbDiscardAG+0x2c5/0x8e0 [ 87.629637][ T4528] jfs_ioc_trim+0x41e/0x680 [ 87.634208][ T4528] jfs_ioctl+0x2b6/0x3c0 [ 87.638450][ T4528] __se_sys_ioctl+0xfa/0x170 [ 87.643092][ T4528] do_syscall_64+0x4c/0xa0 [ 87.647598][ T4528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.653522][ T4528] page last free stack trace: [ 87.658271][ T4528] free_unref_page_prepare+0x637/0x6c0 [ 87.663757][ T4528] free_unref_page+0x8f/0x2a0 [ 87.668694][ T4528] __unfreeze_partials+0x1a5/0x200 [ 87.674116][ T4528] put_cpu_partial+0x12d/0x190 [ 87.678892][ T4528] qlist_free_all+0x35/0x90 [ 87.683533][ T4528] kasan_quarantine_reduce+0x150/0x160 [ 87.688992][ T4528] __kasan_slab_alloc+0x2f/0xd0 [ 87.693937][ T4528] slab_post_alloc_hook+0x4c/0x380 [ 87.699053][ T4528] kmem_cache_alloc+0x100/0x290 [ 87.704022][ T4528] getname_flags+0xb5/0x500 [ 87.708904][ T4528] user_path_at_empty+0x2a/0x190 [ 87.713987][ T4528] vfs_statx+0x107/0x500