[ 71.269796][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.276681][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. 2026/01/09 04:40:44 ignoring optional flag "type"="gce" 2026/01/09 04:40:45 parsed 1 programs 2026/01/09 04:40:46 executed programs: 0 [ 75.650216][ T4475] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.767923][ T4507] chnl_net:caif_netlink_parms(): no params data found [ 75.802054][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.809308][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.817313][ T4507] device bridge_slave_0 entered promiscuous mode [ 75.824945][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.832097][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.840196][ T4507] device bridge_slave_1 entered promiscuous mode [ 75.858674][ T4507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.869329][ T4507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.890096][ T4507] team0: Port device team_slave_0 added [ 75.897492][ T4507] team0: Port device team_slave_1 added [ 75.913210][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.920244][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.946598][ T4507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.958216][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.965254][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.991308][ T4507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.018186][ T4507] device hsr_slave_0 entered promiscuous mode [ 76.025237][ T4507] device hsr_slave_1 entered promiscuous mode [ 76.399038][ T1324] cfg80211: failed to load regulatory.db [ 76.439052][ T4507] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.453681][ T4507] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.467826][ T4507] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.485881][ T4507] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.563828][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.571137][ T4507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.578530][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.585612][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.635678][ T4507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.650886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.682340][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.693883][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.703353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.719089][ T4507] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.731429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.740939][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.748070][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.768119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.778739][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.785827][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.810670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.820298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.831822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.846005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.860831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.869745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.878474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.886855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.896077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.906651][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.920778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.055116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.063842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.095988][ T4507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.118301][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.129793][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.150182][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.160262][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.171837][ T4507] device veth0_vlan entered promiscuous mode [ 77.181138][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.189753][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.203447][ T4507] device veth1_vlan entered promiscuous mode [ 77.226395][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.235443][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.246623][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.256304][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.268408][ T4507] device veth0_macvtap entered promiscuous mode [ 77.279657][ T4507] device veth1_macvtap entered promiscuous mode [ 77.297553][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.304911][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.316665][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.325502][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.335741][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.348003][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.359598][ T4507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.368841][ T4507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.378248][ T4507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.387694][ T4507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.399397][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.407990][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.732108][ T4582] loop0: detected capacity change from 0 to 32768 [ 77.747923][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 77.788474][ T4582] ======================================================= [ 77.788474][ T4582] WARNING: The mand mount option has been deprecated and [ 77.788474][ T4582] and is ignored by this kernel. Remove the mand [ 77.788474][ T4582] option from the mount to silence this warning. [ 77.788474][ T4582] ======================================================= [ 77.852187][ T4582] ERROR: (device loop0): dbDiscardAG: -EIO [ 77.852187][ T4582] [ 77.860776][ T4582] attempt to access beyond end of device [ 77.860776][ T4582] loop0: rw=2051, want=18014398509498368, limit=32768 [ 77.876304][ T4582] JFS: sb_issue_discard(ffff888018de0000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 77.889511][ T4582] blkno = 8000000000400, nblocks = 400 [ 77.897690][ T4582] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 77.897690][ T4582] [ 77.931519][ T4507] BUG: Bad page state in process syz-executor.0 pfn:1f681 [ 77.958167][ T4507] page:ffffea00007da040 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1f681 [ 77.981062][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 77.995358][ T4507] raw: 00fff00000002006 ffffea0001e16948 ffffc90002fdfa00 0000000000000000 [ 78.004109][ T4507] raw: 0000000000000004 ffff8880243599b0 00000000ffffffff 0000000000000000 [ 78.012865][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 78.020879][ T4507] page_owner tracks the page as allocated [ 78.026604][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4582, ts 77850121258, free_ts 77767405013 [ 78.042250][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 78.048825][ T4507] __alloc_pages+0x1e1/0x470 [ 78.053445][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 78.059168][ T4507] do_read_cache_page+0x1da/0x1030 [ 78.064317][ T4507] __get_metapage+0x35d/0x1060 [ 78.071652][ T4507] dbAllocCtl+0xd4/0x9b0 [ 78.075939][ T4507] dbAllocAG+0x1e7/0xfe0 [ 78.080818][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 78.085342][ T4507] jfs_ioc_trim+0x41e/0x680 [ 78.090277][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 78.094553][ T4507] __se_sys_ioctl+0xfa/0x170 [ 78.099698][ T4507] do_syscall_64+0x4c/0xa0 [ 78.104171][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.110619][ T4507] page last free stack trace: [ 78.115298][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 78.121148][ T4507] free_unref_page_list+0x122/0x7e0 [ 78.126360][ T4507] release_pages+0x184b/0x1bb0 [ 78.131533][ T4507] tlb_finish_mmu+0x164/0x2e0 [ 78.136234][ T4507] exit_mmap+0x3a6/0x5f0 [ 78.141465][ T4507] __mmput+0x115/0x3b0 [ 78.145742][ T4507] exit_mm+0x567/0x6c0 [ 78.151844][ T4507] do_exit+0x5a1/0x20a0 [ 78.156038][ T4507] do_group_exit+0x12e/0x300 [ 78.161595][ T4507] __x64_sys_exit_group+0x3b/0x40 [ 78.166646][ T4507] do_syscall_64+0x4c/0xa0 [ 78.171615][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.178257][ T4507] Modules linked in: [ 78.182190][ T4507] CPU: 1 PID: 4507 Comm: syz-executor.0 Not tainted syzkaller #0 [ 78.190019][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.200181][ T4507] Call Trace: [ 78.203519][ T4507] [ 78.206474][ T4507] dump_stack_lvl+0x168/0x230 [ 78.211165][ T4507] ? show_regs_print_info+0x20/0x20 [ 78.216390][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 78.222700][ T4507] bad_page+0x14b/0x170 [ 78.226871][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 78.232341][ T4507] free_unref_page_list+0x122/0x7e0 [ 78.237571][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 78.243144][ T4507] release_pages+0x184b/0x1bb0 [ 78.247997][ T4507] ? lru_cache_disable+0x30/0x30 [ 78.252932][ T4507] __pagevec_release+0x6d/0xe0 [ 78.257682][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 78.263390][ T4507] ? invalidate_inode_page+0x360/0x360 [ 78.268940][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 78.274140][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 78.278976][ T4507] dbUnmount+0x105/0x170 [ 78.283210][ T4507] jfs_umount+0x1fa/0x360 [ 78.287528][ T4507] jfs_put_super+0x88/0x190 [ 78.292622][ T4507] ? jfs_free_inode+0x20/0x20 [ 78.297296][ T4507] generic_shutdown_super+0x130/0x300 [ 78.302655][ T4507] kill_block_super+0x7c/0xe0 [ 78.307315][ T4507] deactivate_locked_super+0x93/0xf0 [ 78.312582][ T4507] cleanup_mnt+0x418/0x4d0 [ 78.316983][ T4507] ? lockdep_hardirqs_on+0x94/0x140 [ 78.322857][ T4507] task_work_run+0x125/0x1a0 [ 78.327439][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 78.332798][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 78.338397][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 78.343838][ T4507] do_syscall_64+0x58/0xa0 [ 78.348247][ T4507] ? clear_bhb_loop+0x30/0x80 [ 78.353185][ T4507] ? clear_bhb_loop+0x30/0x80 [ 78.357860][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.363833][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 78.368320][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 78.388274][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.396680][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 78.404645][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 78.412615][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 78.420589][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 78.428554][ T4507] R13: 00007f7590ab73b9 R14: 0000000000012e7c R15: 0000000000000003 [ 78.436529][ T4507] [ 78.451491][ T4507] Disabling lock debugging due to kernel taint [ 78.763567][ T4634] loop0: detected capacity change from 0 to 32768 [ 78.780835][ T4634] ERROR: (device loop0): dbDiscardAG: -EIO [ 78.780835][ T4634] [ 78.794045][ T4634] attempt to access beyond end of device [ 78.794045][ T4634] loop0: rw=2051, want=18014398509498368, limit=32768 [ 78.807148][ T4634] JFS: sb_issue_discard(ffff888019d80000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 78.817855][ T4634] blkno = 8000000000400, nblocks = 400 [ 78.823336][ T4634] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 78.823336][ T4634] [ 78.839043][ T4507] BUG: Bad page state in process syz-executor.0 pfn:7a0c7 [ 78.846367][ T4507] page:ffffea0001e831c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7a0c7 [ 78.857500][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 78.869642][ T4507] raw: 00fff00000002006 ffffea00008e0a48 ffffc90002fdfa00 0000000000000000 [ 78.878775][ T4507] raw: 0000000000000004 ffff88801e8814d8 00000000ffffffff 0000000000000000 [ 78.887775][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 78.895330][ T4507] page_owner tracks the page as allocated [ 78.901362][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4634, ts 78780667388, free_ts 66594508502 [ 78.916793][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 78.922702][ T4507] __alloc_pages+0x1e1/0x470 [ 78.927623][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 78.932664][ T4507] do_read_cache_page+0x1da/0x1030 [ 78.938163][ T4507] __get_metapage+0x35d/0x1060 [ 78.943684][ T4507] dbAllocCtl+0xd4/0x9b0 [ 78.948923][ T4507] dbAllocAG+0x1e7/0xfe0 [ 78.953389][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 78.958203][ T4507] jfs_ioc_trim+0x41e/0x680 [ 78.962729][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 78.967538][ T4507] __se_sys_ioctl+0xfa/0x170 [ 78.972260][ T4507] do_syscall_64+0x4c/0xa0 [ 78.976696][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.982942][ T4507] page last free stack trace: [ 78.988061][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 78.993554][ T4507] free_unref_page+0x94/0x280 [ 78.998518][ T4507] pipe_read+0x678/0x1210 [ 79.002976][ T4507] vfs_read+0x725/0xcf0 [ 79.007381][ T4507] ksys_read+0x14d/0x250 [ 79.011728][ T4507] do_syscall_64+0x4c/0xa0 [ 79.016245][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.022477][ T4507] Modules linked in: [ 79.026469][ T4507] CPU: 0 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 79.035677][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.045735][ T4507] Call Trace: [ 79.049019][ T4507] [ 79.051959][ T4507] dump_stack_lvl+0x168/0x230 [ 79.056645][ T4507] ? show_regs_print_info+0x20/0x20 [ 79.062013][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 79.068801][ T4507] ? rcu_is_watching+0x11/0xa0 [ 79.073574][ T4507] bad_page+0x14b/0x170 [ 79.077839][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 79.083311][ T4507] free_unref_page_list+0x122/0x7e0 [ 79.088533][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 79.094401][ T4507] release_pages+0x184b/0x1bb0 [ 79.099175][ T4507] ? lru_cache_disable+0x30/0x30 [ 79.104124][ T4507] __pagevec_release+0x6d/0xe0 [ 79.108896][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 79.114629][ T4507] ? invalidate_inode_page+0x360/0x360 [ 79.120104][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 79.125323][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 79.130332][ T4507] dbUnmount+0x105/0x170 [ 79.134669][ T4507] jfs_umount+0x1fa/0x360 [ 79.139012][ T4507] jfs_put_super+0x88/0x190 [ 79.143523][ T4507] ? jfs_free_inode+0x20/0x20 [ 79.148207][ T4507] generic_shutdown_super+0x130/0x300 [ 79.153696][ T4507] kill_block_super+0x7c/0xe0 [ 79.158383][ T4507] deactivate_locked_super+0x93/0xf0 [ 79.163688][ T4507] cleanup_mnt+0x418/0x4d0 [ 79.168120][ T4507] task_work_run+0x125/0x1a0 [ 79.172894][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 79.178286][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 79.184110][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 79.189697][ T4507] do_syscall_64+0x58/0xa0 [ 79.194123][ T4507] ? clear_bhb_loop+0x30/0x80 [ 79.198815][ T4507] ? clear_bhb_loop+0x30/0x80 [ 79.203591][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.209582][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 79.222718][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 79.242503][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.250926][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 79.259208][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 79.267197][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 79.275187][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 79.283169][ T4507] R13: 00007f7590ab73b9 R14: 00000000000132db R15: 0000000000000003 [ 79.291167][ T4507] [ 79.574432][ T4701] loop0: detected capacity change from 0 to 32768 [ 79.590607][ T4701] ERROR: (device loop0): dbDiscardAG: -EIO [ 79.590607][ T4701] [ 79.600123][ T4701] attempt to access beyond end of device [ 79.600123][ T4701] loop0: rw=2051, want=18014398509498368, limit=32768 [ 79.635424][ T4701] JFS: sb_issue_discard(ffff88807aae2000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 79.646402][ T4701] blkno = 8000000000400, nblocks = 400 [ 79.652643][ T4701] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 79.652643][ T4701] [ 79.667698][ T4507] BUG: Bad page state in process syz-executor.0 pfn:75fc0 [ 79.674921][ T4507] page:ffffea0001d7f000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x75fc0 [ 79.686220][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 79.696339][ T4507] raw: 00fff00000002006 ffffea0001ea40c8 ffffc90002fdfa00 0000000000000000 [ 79.705693][ T4507] raw: 0000000000000004 ffff88802a623000 00000000ffffffff 0000000000000000 [ 79.714735][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 79.722621][ T4507] page_owner tracks the page as allocated [ 79.728766][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4701, ts 79590422661, free_ts 79583618952 [ 79.744384][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 79.751027][ T4507] __alloc_pages+0x1e1/0x470 [ 79.755641][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 79.761225][ T4507] do_read_cache_page+0x1da/0x1030 [ 79.766441][ T4507] __get_metapage+0x35d/0x1060 [ 79.771511][ T4507] dbAllocCtl+0xd4/0x9b0 [ 79.775765][ T4507] dbAllocAG+0x1e7/0xfe0 [ 79.780899][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 79.785628][ T4507] jfs_ioc_trim+0x41e/0x680 [ 79.790537][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 79.794794][ T4507] __se_sys_ioctl+0xfa/0x170 [ 79.800049][ T4507] do_syscall_64+0x4c/0xa0 [ 79.804480][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.810622][ T4507] page last free stack trace: [ 79.815294][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 79.821500][ T4507] free_unref_page+0x94/0x280 [ 79.826203][ T4507] __vunmap+0x8ab/0xa40 [ 79.830671][ T4184] Bluetooth: hci0: command 0x041b tx timeout [ 79.836834][ T4507] process_one_work+0x863/0x1000 [ 79.842436][ T4507] worker_thread+0xaa8/0x12a0 [ 79.847348][ T4507] kthread+0x436/0x520 [ 79.851605][ T4507] ret_from_fork+0x1f/0x30 [ 79.856116][ T4507] Modules linked in: [ 79.860656][ T4507] CPU: 0 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 79.869857][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.880000][ T4507] Call Trace: [ 79.883281][ T4507] [ 79.886217][ T4507] dump_stack_lvl+0x168/0x230 [ 79.890937][ T4507] ? show_regs_print_info+0x20/0x20 [ 79.896281][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 79.902698][ T4507] ? rcu_is_watching+0x11/0xa0 [ 79.907650][ T4507] bad_page+0x14b/0x170 [ 79.911817][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 79.917290][ T4507] free_unref_page_list+0x122/0x7e0 [ 79.922502][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 79.928152][ T4507] release_pages+0x184b/0x1bb0 [ 79.932931][ T4507] ? lru_cache_disable+0x30/0x30 [ 79.938721][ T4507] __pagevec_release+0x6d/0xe0 [ 79.943583][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 79.949498][ T4507] ? invalidate_inode_page+0x360/0x360 [ 79.954982][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 79.960192][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 79.965228][ T4507] dbUnmount+0x105/0x170 [ 79.969487][ T4507] jfs_umount+0x1fa/0x360 [ 79.973821][ T4507] jfs_put_super+0x88/0x190 [ 79.978511][ T4507] ? jfs_free_inode+0x20/0x20 [ 79.983302][ T4507] generic_shutdown_super+0x130/0x300 [ 79.988797][ T4507] kill_block_super+0x7c/0xe0 [ 79.993490][ T4507] deactivate_locked_super+0x93/0xf0 [ 79.998790][ T4507] cleanup_mnt+0x418/0x4d0 [ 80.003317][ T4507] task_work_run+0x125/0x1a0 [ 80.008023][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 80.013554][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 80.019115][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 80.024584][ T4507] do_syscall_64+0x58/0xa0 [ 80.029096][ T4507] ? clear_bhb_loop+0x30/0x80 [ 80.033779][ T4507] ? clear_bhb_loop+0x30/0x80 [ 80.038463][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.044374][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 80.048969][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 80.068760][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.077198][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 80.085178][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 80.093159][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 80.101227][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 80.109221][ T4507] R13: 00007f7590ab73b9 R14: 0000000000013604 R15: 0000000000000003 [ 80.117291][ T4507] [ 80.393635][ T4769] loop0: detected capacity change from 0 to 32768 [ 80.412641][ T4769] ERROR: (device loop0): dbDiscardAG: -EIO [ 80.412641][ T4769] [ 80.422131][ T4769] attempt to access beyond end of device [ 80.422131][ T4769] loop0: rw=2051, want=18014398509498368, limit=32768 [ 80.436183][ T4769] JFS: sb_issue_discard(ffff88802494c000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 80.448789][ T4769] blkno = 8000000000400, nblocks = 400 [ 80.454858][ T4769] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 80.454858][ T4769] [ 80.483267][ T4507] BUG: Bad page state in process syz-executor.0 pfn:7752f [ 80.491149][ T4507] page:ffffea0001dd4bc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7752f [ 80.501575][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 80.511861][ T4507] raw: 00fff00000002006 ffffea0001d8e948 ffffc90002fdfa00 0000000000000000 [ 80.520894][ T4507] raw: 0000000000000004 ffff88802a623aa8 00000000ffffffff 0000000000000000 [ 80.530124][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 80.538083][ T4507] page_owner tracks the page as allocated [ 80.543813][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4769, ts 80411783588, free_ts 80389124849 [ 80.559639][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 80.565211][ T4507] __alloc_pages+0x1e1/0x470 [ 80.570182][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 80.575140][ T4507] do_read_cache_page+0x1da/0x1030 [ 80.580535][ T4507] __get_metapage+0x35d/0x1060 [ 80.585401][ T4507] dbAllocCtl+0xd4/0x9b0 [ 80.589899][ T4507] dbAllocAG+0x1e7/0xfe0 [ 80.594152][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 80.598954][ T4507] jfs_ioc_trim+0x41e/0x680 [ 80.603473][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 80.607960][ T4507] __se_sys_ioctl+0xfa/0x170 [ 80.612664][ T4507] do_syscall_64+0x4c/0xa0 [ 80.618482][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.624418][ T4507] page last free stack trace: [ 80.629390][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 80.635222][ T4507] free_unref_page+0x94/0x280 [ 80.640227][ T4507] __vunmap+0x8ab/0xa40 [ 80.644426][ T4507] free_work+0x56/0x80 [ 80.648842][ T4507] process_one_work+0x863/0x1000 [ 80.653865][ T4507] worker_thread+0xaa8/0x12a0 [ 80.658823][ T4507] kthread+0x436/0x520 [ 80.662899][ T4507] ret_from_fork+0x1f/0x30 [ 80.667729][ T4507] Modules linked in: [ 80.671634][ T4507] CPU: 0 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 80.680879][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.691386][ T4507] Call Trace: [ 80.694668][ T4507] [ 80.697758][ T4507] dump_stack_lvl+0x168/0x230 [ 80.702463][ T4507] ? show_regs_print_info+0x20/0x20 [ 80.707674][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 80.714445][ T4507] ? rcu_is_watching+0x11/0xa0 [ 80.719230][ T4507] bad_page+0x14b/0x170 [ 80.723830][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 80.729429][ T4507] free_unref_page_list+0x122/0x7e0 [ 80.735092][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 80.740922][ T4507] release_pages+0x184b/0x1bb0 [ 80.745711][ T4507] ? lru_cache_disable+0x30/0x30 [ 80.750932][ T4507] __pagevec_release+0x6d/0xe0 [ 80.755792][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 80.761542][ T4507] ? invalidate_inode_page+0x360/0x360 [ 80.767019][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 80.772226][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 80.777138][ T4507] dbUnmount+0x105/0x170 [ 80.781389][ T4507] jfs_umount+0x1fa/0x360 [ 80.786165][ T4507] jfs_put_super+0x88/0x190 [ 80.790764][ T4507] ? jfs_free_inode+0x20/0x20 [ 80.795477][ T4507] generic_shutdown_super+0x130/0x300 [ 80.800864][ T4507] kill_block_super+0x7c/0xe0 [ 80.805684][ T4507] deactivate_locked_super+0x93/0xf0 [ 80.811077][ T4507] cleanup_mnt+0x418/0x4d0 [ 80.815551][ T4507] task_work_run+0x125/0x1a0 [ 80.820241][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 80.825639][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 80.831207][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 80.836690][ T4507] do_syscall_64+0x58/0xa0 [ 80.841119][ T4507] ? clear_bhb_loop+0x30/0x80 [ 80.845803][ T4507] ? clear_bhb_loop+0x30/0x80 [ 80.850489][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.856572][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 80.861173][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 80.881325][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.889878][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 80.898048][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 80.906024][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 80.914003][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 80.921988][ T4507] R13: 00007f7590ab73b9 R14: 000000000001393b R15: 0000000000000003 [ 80.930059][ T4507] [ 81.256866][ T4841] loop0: detected capacity change from 0 to 32768 [ 81.278245][ T4841] ERROR: (device loop0): dbDiscardAG: -EIO [ 81.278245][ T4841] [ 81.297527][ T4841] attempt to access beyond end of device 2026/01/09 04:40:52 executed programs: 5 [ 81.297527][ T4841] loop0: rw=2051, want=18014398509498368, limit=32768 [ 81.318428][ T4841] JFS: sb_issue_discard(ffff8880779cc000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 81.329077][ T4841] blkno = 8000000000400, nblocks = 400 [ 81.334654][ T4841] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 81.334654][ T4841] [ 81.351249][ T4507] BUG: Bad page state in process syz-executor.0 pfn:2abe9 [ 81.358888][ T4507] page:ffffea0000aafa40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x2abe9 [ 81.369704][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 81.379820][ T4507] raw: 00fff00000002006 ffffea0000a97a08 ffffc90002fdfa00 0000000000000000 [ 81.389635][ T4507] raw: 0000000000000004 ffff888075f6f5d0 00000000ffffffff 0000000000000000 [ 81.399054][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 81.406342][ T4507] page_owner tracks the page as allocated [ 81.412816][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4841, ts 81277601984, free_ts 81255126795 [ 81.428956][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 81.434861][ T4507] __alloc_pages+0x1e1/0x470 [ 81.439835][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 81.444824][ T4507] do_read_cache_page+0x1da/0x1030 [ 81.450553][ T4507] __get_metapage+0x35d/0x1060 [ 81.455419][ T4507] dbAllocCtl+0xd4/0x9b0 [ 81.459981][ T4507] dbAllocAG+0x1e7/0xfe0 [ 81.464331][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 81.469424][ T4507] jfs_ioc_trim+0x41e/0x680 [ 81.473979][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 81.478511][ T4507] __se_sys_ioctl+0xfa/0x170 [ 81.483110][ T4507] do_syscall_64+0x4c/0xa0 [ 81.488827][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.494804][ T4507] page last free stack trace: [ 81.499590][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 81.505142][ T4507] free_unref_page_list+0x122/0x7e0 [ 81.510744][ T4507] release_pages+0x184b/0x1bb0 [ 81.515522][ T4507] tlb_finish_mmu+0x164/0x2e0 [ 81.520528][ T4507] unmap_region+0x315/0x360 [ 81.525128][ T4507] __do_munmap+0x9d3/0xdc0 [ 81.529844][ T4507] __vm_munmap+0x137/0x230 [ 81.534261][ T4507] __x64_sys_munmap+0x67/0x70 [ 81.539758][ T4507] do_syscall_64+0x4c/0xa0 [ 81.544173][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.550354][ T4507] Modules linked in: [ 81.554344][ T4507] CPU: 1 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 81.563523][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.573689][ T4507] Call Trace: [ 81.577064][ T4507] [ 81.579988][ T4507] dump_stack_lvl+0x168/0x230 [ 81.584653][ T4507] ? show_regs_print_info+0x20/0x20 [ 81.590009][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 81.596334][ T4507] ? rcu_is_watching+0x11/0xa0 [ 81.601276][ T4507] bad_page+0x14b/0x170 [ 81.605438][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 81.611043][ T4507] free_unref_page_list+0x122/0x7e0 [ 81.616244][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 81.621896][ T4507] release_pages+0x184b/0x1bb0 [ 81.626658][ T4507] ? lru_cache_disable+0x30/0x30 [ 81.631586][ T4507] __pagevec_release+0x6d/0xe0 [ 81.636369][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 81.642340][ T4507] ? invalidate_inode_page+0x360/0x360 [ 81.648210][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 81.653583][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 81.658497][ T4507] dbUnmount+0x105/0x170 [ 81.662715][ T4507] jfs_umount+0x1fa/0x360 [ 81.667124][ T4507] jfs_put_super+0x88/0x190 [ 81.683266][ T4507] ? jfs_free_inode+0x20/0x20 [ 81.688356][ T4507] generic_shutdown_super+0x130/0x300 [ 81.694028][ T4507] kill_block_super+0x7c/0xe0 [ 81.698707][ T4507] deactivate_locked_super+0x93/0xf0 [ 81.704064][ T4507] cleanup_mnt+0x418/0x4d0 [ 81.708648][ T4507] task_work_run+0x125/0x1a0 [ 81.713284][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 81.718640][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 81.724247][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 81.729874][ T4507] do_syscall_64+0x58/0xa0 [ 81.734376][ T4507] ? clear_bhb_loop+0x30/0x80 [ 81.739167][ T4507] ? clear_bhb_loop+0x30/0x80 [ 81.743837][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.750063][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 81.754564][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 81.780855][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.789454][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 81.797427][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 81.805392][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 81.813350][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 81.821308][ T4507] R13: 00007f7590ab73b9 R14: 0000000000013c94 R15: 0000000000000003 [ 81.829273][ T4507] [ 81.907033][ T1324] Bluetooth: hci0: command 0x040f tx timeout [ 82.022834][ T4876] loop0: detected capacity change from 0 to 32768 [ 82.076197][ T4876] ERROR: (device loop0): dbDiscardAG: -EIO [ 82.076197][ T4876] [ 82.084293][ T4876] attempt to access beyond end of device [ 82.084293][ T4876] loop0: rw=2051, want=18014398509498368, limit=32768 [ 82.096777][ T4876] JFS: sb_issue_discard(ffff88802bb30000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 82.107227][ T4876] blkno = 8000000000400, nblocks = 400 [ 82.112775][ T4876] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 82.112775][ T4876] [ 82.125298][ T4507] BUG: Bad page state in process syz-executor.0 pfn:1a790 [ 82.132824][ T4507] page:ffffea000069e400 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1a790 [ 82.143508][ T4507] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 82.152671][ T4507] raw: 00fff00000002004 ffffea000079b1c8 ffffc90002fdfa00 0000000000000000 [ 82.161707][ T4507] raw: 0000000000000004 ffff88802892b1f0 00000000ffffffff 0000000000000000 [ 82.170612][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 82.178340][ T4507] page_owner tracks the page as allocated [ 82.184107][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4876, ts 82075994351, free_ts 82074581370 [ 82.199145][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 82.205353][ T4507] __alloc_pages+0x1e1/0x470 [ 82.210104][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 82.215134][ T4507] do_read_cache_page+0x1da/0x1030 [ 82.220271][ T4507] __get_metapage+0x35d/0x1060 [ 82.225027][ T4507] dbAllocCtl+0xd4/0x9b0 [ 82.229714][ T4507] dbAllocAG+0x1e7/0xfe0 [ 82.234049][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 82.238534][ T4507] jfs_ioc_trim+0x41e/0x680 [ 82.243036][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 82.247402][ T4507] __se_sys_ioctl+0xfa/0x170 [ 82.252204][ T4507] do_syscall_64+0x4c/0xa0 [ 82.256619][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.262702][ T4507] page last free stack trace: [ 82.267735][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 82.273498][ T4507] free_unref_page+0x94/0x280 [ 82.278340][ T4507] qlist_free_all+0x35/0x90 [ 82.282854][ T4507] kasan_quarantine_reduce+0x150/0x160 [ 82.288426][ T4507] __kasan_slab_alloc+0x2f/0xd0 [ 82.293269][ T4507] slab_post_alloc_hook+0x4c/0x380 [ 82.298494][ T4507] kmem_cache_alloc+0x100/0x290 [ 82.303333][ T4507] getname_flags+0xb5/0x500 [ 82.308242][ T4507] do_sys_openat2+0xcf/0x4a0 [ 82.312846][ T4507] __x64_sys_openat+0x135/0x160 [ 82.317835][ T4507] do_syscall_64+0x4c/0xa0 [ 82.322391][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.328472][ T4507] Modules linked in: [ 82.332363][ T4507] CPU: 1 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 82.341455][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.351502][ T4507] Call Trace: [ 82.354783][ T4507] [ 82.357704][ T4507] dump_stack_lvl+0x168/0x230 [ 82.362368][ T4507] ? show_regs_print_info+0x20/0x20 [ 82.367555][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 82.373970][ T4507] ? rcu_is_watching+0x11/0xa0 [ 82.378708][ T4507] bad_page+0x14b/0x170 [ 82.382868][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 82.388637][ T4507] free_unref_page_list+0x122/0x7e0 [ 82.393839][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 82.399386][ T4507] release_pages+0x184b/0x1bb0 [ 82.404148][ T4507] ? lru_cache_disable+0x30/0x30 [ 82.409434][ T4507] __pagevec_release+0x6d/0xe0 [ 82.414780][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 82.420888][ T4507] ? invalidate_inode_page+0x360/0x360 [ 82.426357][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 82.432242][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 82.437377][ T4507] dbUnmount+0x105/0x170 [ 82.441797][ T4507] jfs_umount+0x1fa/0x360 [ 82.446204][ T4507] jfs_put_super+0x88/0x190 [ 82.450713][ T4507] ? jfs_free_inode+0x20/0x20 [ 82.455560][ T4507] generic_shutdown_super+0x130/0x300 [ 82.461098][ T4507] kill_block_super+0x7c/0xe0 [ 82.465873][ T4507] deactivate_locked_super+0x93/0xf0 [ 82.471149][ T4507] cleanup_mnt+0x418/0x4d0 [ 82.475578][ T4507] task_work_run+0x125/0x1a0 [ 82.480324][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 82.485774][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 82.491388][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 82.496853][ T4507] do_syscall_64+0x58/0xa0 [ 82.501282][ T4507] ? clear_bhb_loop+0x30/0x80 [ 82.505938][ T4507] ? clear_bhb_loop+0x30/0x80 [ 82.510586][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.516972][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 82.521375][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 82.541490][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.549904][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 82.558037][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 82.565989][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 82.574032][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 82.582364][ T4507] R13: 00007f7590ab73b9 R14: 0000000000013fe8 R15: 0000000000000003 [ 82.590525][ T4507] [ 82.781087][ T4878] loop0: detected capacity change from 0 to 32768 [ 82.874619][ T4878] ERROR: (device loop0): dbDiscardAG: -EIO [ 82.874619][ T4878] [ 82.882758][ T4878] attempt to access beyond end of device [ 82.882758][ T4878] loop0: rw=2051, want=18014398509498368, limit=32768 [ 82.895258][ T4878] JFS: sb_issue_discard(ffff88802b0d2000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 82.905645][ T4878] blkno = 8000000000400, nblocks = 400 [ 82.911340][ T4878] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 82.911340][ T4878] [ 82.924652][ T4507] BUG: Bad page state in process syz-executor.0 pfn:2462b [ 82.932224][ T4507] page:ffffea0000918ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x2462b [ 82.944432][ T4507] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 82.954667][ T4507] raw: 00fff00000002004 ffffea0001d8e148 ffffc90002fdfa00 0000000000000000 [ 82.964624][ T4507] raw: 0000000000000004 ffff88802892b9b0 00000000ffffffff 0000000000000000 [ 82.975976][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 82.984606][ T4507] page_owner tracks the page as allocated [ 82.990343][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4878, ts 82874426180, free_ts 82788579658 [ 83.005765][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 83.011485][ T4507] __alloc_pages+0x1e1/0x470 [ 83.016070][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 83.021050][ T4507] do_read_cache_page+0x1da/0x1030 [ 83.026161][ T4507] __get_metapage+0x35d/0x1060 [ 83.031830][ T4507] dbAllocCtl+0xd4/0x9b0 [ 83.036070][ T4507] dbAllocAG+0x1e7/0xfe0 [ 83.040509][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 83.045030][ T4507] jfs_ioc_trim+0x41e/0x680 [ 83.049637][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 83.054175][ T4507] __se_sys_ioctl+0xfa/0x170 [ 83.059011][ T4507] do_syscall_64+0x4c/0xa0 [ 83.063462][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.069399][ T4507] page last free stack trace: [ 83.074065][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 83.079571][ T4507] free_unref_page+0x94/0x280 [ 83.084343][ T4507] qlist_free_all+0x35/0x90 [ 83.089075][ T4507] kasan_quarantine_reduce+0x150/0x160 [ 83.094551][ T4507] __kasan_slab_alloc+0x2f/0xd0 [ 83.099478][ T4507] slab_post_alloc_hook+0x4c/0x380 [ 83.104760][ T4507] kmem_cache_alloc+0x100/0x290 [ 83.109801][ T4507] getname_flags+0xb5/0x500 [ 83.114345][ T4507] do_sys_openat2+0xcf/0x4a0 [ 83.119173][ T4507] __x64_sys_openat+0x135/0x160 [ 83.124050][ T4507] do_syscall_64+0x4c/0xa0 [ 83.128714][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.134705][ T4507] Modules linked in: [ 83.138977][ T4507] CPU: 0 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 83.149588][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.160195][ T4507] Call Trace: [ 83.163472][ T4507] [ 83.166475][ T4507] dump_stack_lvl+0x168/0x230 [ 83.171412][ T4507] ? show_regs_print_info+0x20/0x20 [ 83.176782][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 83.183265][ T4507] ? rcu_is_watching+0x11/0xa0 [ 83.188421][ T4507] bad_page+0x14b/0x170 [ 83.192572][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 83.198101][ T4507] free_unref_page_list+0x122/0x7e0 [ 83.203309][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 83.210004][ T4507] release_pages+0x184b/0x1bb0 [ 83.214890][ T4507] ? lru_cache_disable+0x30/0x30 [ 83.219832][ T4507] __pagevec_release+0x6d/0xe0 [ 83.224705][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 83.230485][ T4507] ? invalidate_inode_page+0x360/0x360 [ 83.235942][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 83.241130][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 83.246162][ T4507] dbUnmount+0x105/0x170 [ 83.250415][ T4507] jfs_umount+0x1fa/0x360 [ 83.254726][ T4507] jfs_put_super+0x88/0x190 [ 83.259206][ T4507] ? jfs_free_inode+0x20/0x20 [ 83.263857][ T4507] generic_shutdown_super+0x130/0x300 [ 83.269215][ T4507] kill_block_super+0x7c/0xe0 [ 83.273892][ T4507] deactivate_locked_super+0x93/0xf0 [ 83.279174][ T4507] cleanup_mnt+0x418/0x4d0 [ 83.283747][ T4507] task_work_run+0x125/0x1a0 [ 83.288466][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 83.293832][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 83.299477][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 83.304933][ T4507] do_syscall_64+0x58/0xa0 [ 83.309356][ T4507] ? clear_bhb_loop+0x30/0x80 [ 83.314030][ T4507] ? clear_bhb_loop+0x30/0x80 [ 83.318791][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.324686][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 83.329212][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 83.348816][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.357326][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 83.365480][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 83.373665][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 83.381767][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 83.389910][ T4507] R13: 00007f7590ab73b9 R14: 00000000000142dd R15: 0000000000000003 [ 83.398013][ T4507] [ 83.583918][ T4880] loop0: detected capacity change from 0 to 32768 [ 83.636427][ T4880] ERROR: (device loop0): dbDiscardAG: -EIO [ 83.636427][ T4880] [ 83.644913][ T4880] attempt to access beyond end of device [ 83.644913][ T4880] loop0: rw=2051, want=18014398509498368, limit=32768 [ 83.657293][ T4880] JFS: sb_issue_discard(ffff88807ef5e000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 83.667740][ T4880] blkno = 8000000000400, nblocks = 400 [ 83.673471][ T4880] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 83.673471][ T4880] [ 83.687361][ T4507] BUG: Bad page state in process syz-executor.0 pfn:7e2b8 [ 83.694720][ T4507] page:ffffea0001f8ae00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7e2b8 [ 83.705007][ T4507] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 83.713798][ T4507] raw: 00fff00000002004 ffffea00008a7308 ffffc90002fdfa00 0000000000000000 [ 83.722594][ T4507] raw: 0000000000000004 ffff8880787264d8 00000000ffffffff 0000000000000000 [ 83.731889][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 83.739625][ T4507] page_owner tracks the page as allocated [ 83.745428][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4880, ts 83636174810, free_ts 83635603227 [ 83.760555][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 83.766135][ T4507] __alloc_pages+0x1e1/0x470 [ 83.770795][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 83.775895][ T4507] do_read_cache_page+0x1da/0x1030 [ 83.781072][ T4507] __get_metapage+0x35d/0x1060 [ 83.785847][ T4507] dbAllocCtl+0xd4/0x9b0 [ 83.790269][ T4507] dbAllocAG+0x1e7/0xfe0 [ 83.794549][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 83.798992][ T4507] jfs_ioc_trim+0x41e/0x680 [ 83.803498][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 83.807860][ T4507] __se_sys_ioctl+0xfa/0x170 [ 83.812462][ T4507] do_syscall_64+0x4c/0xa0 [ 83.817137][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.823245][ T4507] page last free stack trace: [ 83.828133][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 83.833628][ T4507] free_unref_page+0x94/0x280 [ 83.838621][ T4507] __unfreeze_partials+0x1a5/0x200 [ 83.843728][ T4507] put_cpu_partial+0x12d/0x190 [ 83.848742][ T4507] qlist_free_all+0x35/0x90 [ 83.853255][ T4507] kasan_quarantine_reduce+0x150/0x160 [ 83.858740][ T4507] __kasan_slab_alloc+0x2f/0xd0 [ 83.863585][ T4507] slab_post_alloc_hook+0x4c/0x380 [ 83.868827][ T4507] __kmalloc+0x127/0x330 [ 83.873253][ T4507] tomoyo_realpath_from_path+0x118/0x610 [ 83.878931][ T4507] tomoyo_path_number_perm+0x1d5/0x5d0 [ 83.884482][ T4507] security_file_ioctl+0x6c/0xa0 [ 83.889556][ T4507] __se_sys_ioctl+0x48/0x170 [ 83.894265][ T4507] do_syscall_64+0x4c/0xa0 [ 83.899419][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.905659][ T4507] Modules linked in: [ 83.909700][ T4507] CPU: 0 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 83.918814][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.928983][ T4507] Call Trace: [ 83.932278][ T4507] [ 83.935294][ T4507] dump_stack_lvl+0x168/0x230 [ 83.939966][ T4507] ? show_regs_print_info+0x20/0x20 [ 83.945837][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 83.952778][ T4507] ? rcu_is_watching+0x11/0xa0 [ 83.958838][ T4507] bad_page+0x14b/0x170 [ 83.963216][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 83.969129][ T4507] free_unref_page_list+0x122/0x7e0 [ 83.974441][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 83.980072][ T4507] release_pages+0x184b/0x1bb0 [ 83.984841][ T4507] ? lru_cache_disable+0x30/0x30 [ 83.989872][ T4507] __pagevec_release+0x6d/0xe0 [ 83.994719][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 84.000418][ T4507] ? invalidate_inode_page+0x360/0x360 [ 84.005858][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 84.011131][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 84.015980][ T4507] dbUnmount+0x105/0x170 [ 84.020214][ T4507] jfs_umount+0x1fa/0x360 [ 84.024632][ T4507] jfs_put_super+0x88/0x190 [ 84.029120][ T4507] ? jfs_free_inode+0x20/0x20 [ 84.033906][ T4507] generic_shutdown_super+0x130/0x300 [ 84.039284][ T4507] kill_block_super+0x7c/0xe0 [ 84.043958][ T4507] deactivate_locked_super+0x93/0xf0 [ 84.049332][ T4507] cleanup_mnt+0x418/0x4d0 [ 84.053829][ T4507] task_work_run+0x125/0x1a0 [ 84.058499][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 84.063863][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 84.069975][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 84.075519][ T4507] do_syscall_64+0x58/0xa0 [ 84.079913][ T4507] ? clear_bhb_loop+0x30/0x80 [ 84.084570][ T4507] ? clear_bhb_loop+0x30/0x80 [ 84.089337][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.095294][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 84.099713][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 84.119412][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 84.128066][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 84.136464][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 84.144560][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 84.152578][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 84.160656][ T4507] R13: 00007f7590ab73b9 R14: 0000000000014600 R15: 0000000000000003 [ 84.168758][ T4507] [ 84.172128][ T4184] Bluetooth: hci0: command 0x0419 tx timeout [ 84.363212][ T4882] loop0: detected capacity change from 0 to 32768 [ 84.431192][ T4882] ERROR: (device loop0): dbDiscardAG: -EIO [ 84.431192][ T4882] [ 84.439294][ T4882] attempt to access beyond end of device [ 84.439294][ T4882] loop0: rw=2051, want=18014398509498368, limit=32768 [ 84.452313][ T4882] JFS: sb_issue_discard(ffff88807ed72000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 84.463442][ T4882] blkno = 8000000000400, nblocks = 400 [ 84.469394][ T4882] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 84.469394][ T4882] [ 84.483677][ T4507] BUG: Bad page state in process syz-executor.0 pfn:1e5fb [ 84.491807][ T4507] page:ffffea0000797ec0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1e5fb [ 84.502429][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 84.512877][ T4507] raw: 00fff00000002006 ffffea0000a858c8 ffffc90002fdfa00 0000000000000000 [ 84.521632][ T4507] raw: 0000000000000004 ffff888024a91ba0 00000000ffffffff 0000000000000000 [ 84.530399][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 84.537691][ T4507] page_owner tracks the page as allocated [ 84.543419][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4882, ts 84430997144, free_ts 84430332970 [ 84.558661][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 84.564220][ T4507] __alloc_pages+0x1e1/0x470 [ 84.569131][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 84.574061][ T4507] do_read_cache_page+0x1da/0x1030 [ 84.579581][ T4507] __get_metapage+0x35d/0x1060 [ 84.584356][ T4507] dbAllocCtl+0xd4/0x9b0 [ 84.588686][ T4507] dbAllocAG+0x1e7/0xfe0 [ 84.592925][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 84.597376][ T4507] jfs_ioc_trim+0x41e/0x680 [ 84.601884][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 84.606105][ T4507] __se_sys_ioctl+0xfa/0x170 [ 84.610700][ T4507] do_syscall_64+0x4c/0xa0 [ 84.615110][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.621010][ T4507] page last free stack trace: [ 84.625672][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 84.631172][ T4507] free_unref_page+0x94/0x280 [ 84.635858][ T4507] __unfreeze_partials+0x1a5/0x200 [ 84.641156][ T4507] put_cpu_partial+0x12d/0x190 [ 84.645914][ T4507] qlist_free_all+0x35/0x90 [ 84.650424][ T4507] kasan_quarantine_reduce+0x150/0x160 [ 84.655874][ T4507] __kasan_slab_alloc+0x2f/0xd0 [ 84.660870][ T4507] slab_post_alloc_hook+0x4c/0x380 [ 84.665975][ T4507] kmem_cache_alloc+0x100/0x290 [ 84.670930][ T4507] getname_flags+0xb5/0x500 [ 84.675443][ T4507] do_sys_openat2+0xcf/0x4a0 [ 84.680150][ T4507] __x64_sys_openat+0x135/0x160 [ 84.685100][ T4507] do_syscall_64+0x4c/0xa0 [ 84.689936][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.695855][ T4507] Modules linked in: [ 84.699766][ T4507] CPU: 0 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 84.708953][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.719002][ T4507] Call Trace: [ 84.722273][ T4507] [ 84.725302][ T4507] dump_stack_lvl+0x168/0x230 [ 84.729978][ T4507] ? show_regs_print_info+0x20/0x20 [ 84.735152][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 84.741373][ T4507] ? rcu_is_watching+0x11/0xa0 [ 84.746291][ T4507] bad_page+0x14b/0x170 [ 84.750423][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 84.755944][ T4507] free_unref_page_list+0x122/0x7e0 [ 84.761125][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 84.766649][ T4507] release_pages+0x184b/0x1bb0 [ 84.771386][ T4507] ? lru_cache_disable+0x30/0x30 [ 84.776301][ T4507] __pagevec_release+0x6d/0xe0 [ 84.781041][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 84.786825][ T4507] ? invalidate_inode_page+0x360/0x360 [ 84.792262][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 84.797449][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 84.802276][ T4507] dbUnmount+0x105/0x170 [ 84.806495][ T4507] jfs_umount+0x1fa/0x360 [ 84.810909][ T4507] jfs_put_super+0x88/0x190 [ 84.815387][ T4507] ? jfs_free_inode+0x20/0x20 [ 84.820105][ T4507] generic_shutdown_super+0x130/0x300 [ 84.825591][ T4507] kill_block_super+0x7c/0xe0 [ 84.830287][ T4507] deactivate_locked_super+0x93/0xf0 [ 84.835693][ T4507] cleanup_mnt+0x418/0x4d0 [ 84.840119][ T4507] task_work_run+0x125/0x1a0 [ 84.844705][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 84.850165][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 84.855706][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 84.861256][ T4507] do_syscall_64+0x58/0xa0 [ 84.865743][ T4507] ? clear_bhb_loop+0x30/0x80 [ 84.870575][ T4507] ? clear_bhb_loop+0x30/0x80 [ 84.875263][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.881157][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 84.885854][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 84.906191][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 84.914689][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 84.923267][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 84.931315][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 84.940138][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 84.948293][ T4507] R13: 00007f7590ab73b9 R14: 000000000001490d R15: 0000000000000003 [ 84.956347][ T4507] [ 85.138388][ T4884] loop0: detected capacity change from 0 to 32768 [ 85.194907][ T4884] ERROR: (device loop0): dbDiscardAG: -EIO [ 85.194907][ T4884] [ 85.203116][ T4884] attempt to access beyond end of device [ 85.203116][ T4884] loop0: rw=2051, want=18014398509498368, limit=32768 [ 85.215626][ T4884] JFS: sb_issue_discard(ffff8880254f0000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 85.226229][ T4884] blkno = 8000000000400, nblocks = 400 [ 85.231880][ T4884] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 85.231880][ T4884] [ 85.244791][ T4507] BUG: Bad page state in process syz-executor.0 pfn:22b1d [ 85.252361][ T4507] page:ffffea00008ac740 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x22b1d [ 85.263022][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 85.272976][ T4507] raw: 00fff00000002006 ffffea000090e108 ffffc90002fdfa00 0000000000000000 [ 85.282412][ T4507] raw: 0000000000000004 ffff8880787268b8 00000000ffffffff 0000000000000000 [ 85.291786][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 85.299113][ T4507] page_owner tracks the page as allocated [ 85.304809][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4884, ts 85194640575, free_ts 85037363884 [ 85.319898][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 85.325457][ T4507] __alloc_pages+0x1e1/0x470 [ 85.330181][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 85.335488][ T4507] do_read_cache_page+0x1da/0x1030 [ 85.340645][ T4507] __get_metapage+0x35d/0x1060 [ 85.345511][ T4507] dbAllocCtl+0xd4/0x9b0 [ 85.349799][ T4507] dbAllocAG+0x1e7/0xfe0 [ 85.354031][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 85.358460][ T4507] jfs_ioc_trim+0x41e/0x680 [ 85.363016][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 85.367517][ T4507] __se_sys_ioctl+0xfa/0x170 [ 85.372124][ T4507] do_syscall_64+0x4c/0xa0 [ 85.376570][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.382699][ T4507] page last free stack trace: [ 85.387458][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 85.393013][ T4507] free_unref_page+0x94/0x280 [ 85.397716][ T4507] qlist_free_all+0x35/0x90 [ 85.402322][ T4507] kasan_quarantine_reduce+0x150/0x160 [ 85.407811][ T4507] __kasan_slab_alloc+0x2f/0xd0 [ 85.412654][ T4507] slab_post_alloc_hook+0x4c/0x380 [ 85.417874][ T4507] kmem_cache_alloc+0x100/0x290 [ 85.422736][ T4507] getname_flags+0xb5/0x500 [ 85.427269][ T4507] user_path_at_empty+0x2a/0x190 [ 85.432549][ T4507] do_readlinkat+0xd4/0x480 [ 85.437107][ T4507] __x64_sys_readlink+0x7b/0x90 [ 85.441967][ T4507] do_syscall_64+0x4c/0xa0 [ 85.446402][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.452345][ T4507] Modules linked in: [ 85.456232][ T4507] CPU: 0 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 85.465490][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.475530][ T4507] Call Trace: [ 85.478912][ T4507] [ 85.481827][ T4507] dump_stack_lvl+0x168/0x230 [ 85.486487][ T4507] ? show_regs_print_info+0x20/0x20 [ 85.491774][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 85.497996][ T4507] ? rcu_is_watching+0x11/0xa0 [ 85.502736][ T4507] bad_page+0x14b/0x170 [ 85.506900][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 85.512363][ T4507] free_unref_page_list+0x122/0x7e0 [ 85.517564][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 85.523091][ T4507] release_pages+0x184b/0x1bb0 [ 85.527920][ T4507] ? lru_cache_disable+0x30/0x30 [ 85.533296][ T4507] __pagevec_release+0x6d/0xe0 [ 85.538219][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 85.544009][ T4507] ? invalidate_inode_page+0x360/0x360 [ 85.549445][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 85.554644][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 85.559569][ T4507] dbUnmount+0x105/0x170 [ 85.563797][ T4507] jfs_umount+0x1fa/0x360 [ 85.568192][ T4507] jfs_put_super+0x88/0x190 [ 85.572757][ T4507] ? jfs_free_inode+0x20/0x20 [ 85.577413][ T4507] generic_shutdown_super+0x130/0x300 [ 85.582769][ T4507] kill_block_super+0x7c/0xe0 [ 85.587424][ T4507] deactivate_locked_super+0x93/0xf0 [ 85.592770][ T4507] cleanup_mnt+0x418/0x4d0 [ 85.597173][ T4507] task_work_run+0x125/0x1a0 [ 85.601861][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 85.607213][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 85.612733][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 85.618168][ T4507] do_syscall_64+0x58/0xa0 [ 85.622654][ T4507] ? clear_bhb_loop+0x30/0x80 [ 85.627382][ T4507] ? clear_bhb_loop+0x30/0x80 [ 85.632497][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.638660][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 85.643255][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 85.664132][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.672807][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 85.680775][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 85.688819][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 85.697480][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 85.705640][ T4507] R13: 00007f7590ab73b9 R14: 0000000000014c13 R15: 0000000000000003 [ 85.714094][ T4507] [ 85.896898][ T4886] loop0: detected capacity change from 0 to 32768 [ 85.943896][ T4886] ERROR: (device loop0): dbDiscardAG: -EIO [ 85.943896][ T4886] [ 85.952314][ T4886] attempt to access beyond end of device [ 85.952314][ T4886] loop0: rw=2051, want=18014398509498368, limit=32768 [ 85.965394][ T4886] JFS: sb_issue_discard(ffff88807ef86000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 85.976425][ T4886] blkno = 8000000000400, nblocks = 400 [ 85.982136][ T4886] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 85.982136][ T4886] [ 85.995865][ T4507] BUG: Bad page state in process syz-executor.0 pfn:763af [ 86.003206][ T4507] page:ffffea0001d8ebc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x763af [ 86.013421][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 86.023544][ T4507] raw: 00fff00000002006 ffffea0000934c48 ffffc90002fdfa00 0000000000000000 [ 86.032264][ T4507] raw: 0000000000000004 ffff888075fa43e0 00000000ffffffff 0000000000000000 [ 86.040929][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 86.048252][ T4507] page_owner tracks the page as allocated [ 86.054137][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4886, ts 85943477061, free_ts 85717372913 [ 86.069350][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 86.074989][ T4507] __alloc_pages+0x1e1/0x470 [ 86.079965][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 86.084915][ T4507] do_read_cache_page+0x1da/0x1030 [ 86.090467][ T4507] __get_metapage+0x35d/0x1060 [ 86.095250][ T4507] dbAllocCtl+0xd4/0x9b0 [ 86.099659][ T4507] dbAllocAG+0x1e7/0xfe0 [ 86.104117][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 86.108574][ T4507] jfs_ioc_trim+0x41e/0x680 [ 86.113092][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 86.117402][ T4507] __se_sys_ioctl+0xfa/0x170 [ 86.122003][ T4507] do_syscall_64+0x4c/0xa0 [ 86.126487][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.132594][ T4507] page last free stack trace: [ 86.137289][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 86.142740][ T4507] free_unref_page+0x94/0x280 [ 86.147555][ T4507] qlist_free_all+0x35/0x90 [ 86.152153][ T4507] kasan_quarantine_reduce+0x150/0x160 [ 86.157626][ T4507] __kasan_slab_alloc+0x2f/0xd0 [ 86.162612][ T4507] slab_post_alloc_hook+0x4c/0x380 [ 86.167924][ T4507] kmem_cache_alloc_node+0x12d/0x2d0 [ 86.173203][ T4507] __alloc_skb+0xf4/0x750 [ 86.177729][ T4507] alloc_skb_with_frags+0xa7/0x730 [ 86.182857][ T4507] sock_alloc_send_pskb+0x853/0x980 [ 86.188257][ T4507] unix_dgram_sendmsg+0x5ef/0x1890 [ 86.193387][ T4507] __sys_sendto+0x423/0x580 [ 86.198238][ T4507] __x64_sys_sendto+0xda/0xf0 [ 86.202925][ T4507] do_syscall_64+0x4c/0xa0 [ 86.207714][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.213704][ T4507] Modules linked in: [ 86.217949][ T4507] CPU: 1 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 86.227060][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.237560][ T4507] Call Trace: [ 86.240829][ T4507] [ 86.243834][ T4507] dump_stack_lvl+0x168/0x230 [ 86.248584][ T4507] ? show_regs_print_info+0x20/0x20 [ 86.253761][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 86.259982][ T4507] ? rcu_is_watching+0x11/0xa0 [ 86.264724][ T4507] bad_page+0x14b/0x170 [ 86.268865][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 86.274306][ T4507] free_unref_page_list+0x122/0x7e0 [ 86.279616][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 86.285276][ T4507] release_pages+0x184b/0x1bb0 [ 86.290028][ T4507] ? lru_cache_disable+0x30/0x30 [ 86.294942][ T4507] __pagevec_release+0x6d/0xe0 [ 86.299776][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 86.305480][ T4507] ? invalidate_inode_page+0x360/0x360 [ 86.310920][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 86.316091][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 86.320951][ T4507] dbUnmount+0x105/0x170 [ 86.325185][ T4507] jfs_umount+0x1fa/0x360 [ 86.329499][ T4507] jfs_put_super+0x88/0x190 [ 86.334076][ T4507] ? jfs_free_inode+0x20/0x20 [ 86.338731][ T4507] generic_shutdown_super+0x130/0x300 [ 86.344093][ T4507] kill_block_super+0x7c/0xe0 [ 86.348764][ T4507] deactivate_locked_super+0x93/0xf0 [ 86.354033][ T4507] cleanup_mnt+0x418/0x4d0 [ 86.358437][ T4507] task_work_run+0x125/0x1a0 [ 86.363006][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 86.368449][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 86.373969][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 86.379412][ T4507] do_syscall_64+0x58/0xa0 [ 86.384325][ T4507] ? clear_bhb_loop+0x30/0x80 [ 86.389002][ T4507] ? clear_bhb_loop+0x30/0x80 [ 86.393743][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.399700][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 86.404090][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 86.424191][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.432760][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 86.440801][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 86.448830][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 86.456876][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 86.464917][ T4507] R13: 00007f7590ab73b9 R14: 0000000000014f08 R15: 0000000000000003 [ 86.472983][ T4507] [ 86.673806][ T4888] loop0: detected capacity change from 0 to 32768 2026/01/09 04:40:57 executed programs: 12 [ 86.723619][ T4888] ERROR: (device loop0): dbDiscardAG: -EIO [ 86.723619][ T4888] [ 86.732165][ T4888] attempt to access beyond end of device [ 86.732165][ T4888] loop0: rw=2051, want=18014398509498368, limit=32768 [ 86.744658][ T4888] JFS: sb_issue_discard(ffff88807e0d8000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 86.755232][ T4888] blkno = 8000000000400, nblocks = 400 [ 86.760798][ T4888] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 86.760798][ T4888] [ 86.774487][ T4507] BUG: Bad page state in process syz-executor.0 pfn:75d7a [ 86.781971][ T4507] page:ffffea0001d75e80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x75d7a [ 86.792406][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 86.802297][ T4507] raw: 00fff00000002006 ffffea0001d75a08 ffffc90002fdfa00 0000000000000000 [ 86.811291][ T4507] raw: 0000000000000004 ffff888075fa4e88 00000000ffffffff 0000000000000000 [ 86.820045][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 86.827533][ T4507] page_owner tracks the page as allocated [ 86.833331][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4888, ts 86723400662, free_ts 86571497478 [ 86.848368][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 86.853914][ T4507] __alloc_pages+0x1e1/0x470 [ 86.858534][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 86.863474][ T4507] do_read_cache_page+0x1da/0x1030 [ 86.868609][ T4507] __get_metapage+0x35d/0x1060 [ 86.873365][ T4507] dbAllocCtl+0xd4/0x9b0 [ 86.877614][ T4507] dbAllocAG+0x1e7/0xfe0 [ 86.881845][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 86.886235][ T4507] jfs_ioc_trim+0x41e/0x680 [ 86.890860][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 86.895093][ T4507] __se_sys_ioctl+0xfa/0x170 [ 86.899701][ T4507] do_syscall_64+0x4c/0xa0 [ 86.904116][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.910188][ T4507] page last free stack trace: [ 86.914941][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 86.920733][ T4507] free_unref_page+0x94/0x280 [ 86.925414][ T4507] __unfreeze_partials+0x1a5/0x200 [ 86.930571][ T4507] put_cpu_partial+0x12d/0x190 [ 86.935594][ T4507] qlist_free_all+0x35/0x90 [ 86.940159][ T4507] kasan_quarantine_reduce+0x150/0x160 [ 86.945850][ T4507] __kasan_slab_alloc+0x2f/0xd0 [ 86.950745][ T4507] slab_post_alloc_hook+0x4c/0x380 [ 86.955943][ T4507] __kmalloc+0x127/0x330 [ 86.961063][ T4507] tomoyo_realpath_from_path+0x118/0x610 [ 86.967044][ T4507] tomoyo_path_number_perm+0x1d5/0x5d0 [ 86.972511][ T4507] security_file_ioctl+0x6c/0xa0 [ 86.977471][ T4507] __se_sys_ioctl+0x48/0x170 [ 86.982058][ T4507] do_syscall_64+0x4c/0xa0 [ 86.986501][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.992503][ T4507] Modules linked in: [ 86.996579][ T4507] CPU: 1 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 87.005773][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.015825][ T4507] Call Trace: [ 87.019093][ T4507] [ 87.022007][ T4507] dump_stack_lvl+0x168/0x230 [ 87.026708][ T4507] ? show_regs_print_info+0x20/0x20 [ 87.031887][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 87.038130][ T4507] ? rcu_is_watching+0x11/0xa0 [ 87.042872][ T4507] bad_page+0x14b/0x170 [ 87.047100][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 87.052623][ T4507] free_unref_page_list+0x122/0x7e0 [ 87.057798][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 87.063422][ T4507] release_pages+0x184b/0x1bb0 [ 87.068380][ T4507] ? lru_cache_disable+0x30/0x30 [ 87.073314][ T4507] __pagevec_release+0x6d/0xe0 [ 87.078057][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 87.083757][ T4507] ? invalidate_inode_page+0x360/0x360 [ 87.089396][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 87.094687][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 87.099692][ T4507] dbUnmount+0x105/0x170 [ 87.103916][ T4507] jfs_umount+0x1fa/0x360 [ 87.108249][ T4507] jfs_put_super+0x88/0x190 [ 87.112745][ T4507] ? jfs_free_inode+0x20/0x20 [ 87.117397][ T4507] generic_shutdown_super+0x130/0x300 [ 87.122754][ T4507] kill_block_super+0x7c/0xe0 [ 87.127407][ T4507] deactivate_locked_super+0x93/0xf0 [ 87.132667][ T4507] cleanup_mnt+0x418/0x4d0 [ 87.137064][ T4507] task_work_run+0x125/0x1a0 [ 87.141658][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 87.147012][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 87.152533][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 87.157971][ T4507] do_syscall_64+0x58/0xa0 [ 87.162364][ T4507] ? clear_bhb_loop+0x30/0x80 [ 87.167019][ T4507] ? clear_bhb_loop+0x30/0x80 [ 87.172023][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.177900][ T4507] RIP: 0033:0x7f7590a6d0d7 [ 87.182294][ T4507] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 87.202323][ T4507] RSP: 002b:00007ffe00d904a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.210912][ T4507] RAX: 0000000000000000 RBX: 00007f7590ab73b9 RCX: 00007f7590a6d0d7 [ 87.219044][ T4507] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe00d90560 [ 87.226998][ T4507] RBP: 00007ffe00d90560 R08: 0000000000000000 R09: 0000000000000000 [ 87.234971][ T4507] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe00d91620 [ 87.242930][ T4507] R13: 00007f7590ab73b9 R14: 0000000000015214 R15: 0000000000000003 [ 87.251112][ T4507] [ 87.428414][ T4890] loop0: detected capacity change from 0 to 32768 [ 87.475697][ T4890] ERROR: (device loop0): dbDiscardAG: -EIO [ 87.475697][ T4890] [ 87.483907][ T4890] attempt to access beyond end of device [ 87.483907][ T4890] loop0: rw=2051, want=18014398509498368, limit=32768 [ 87.496649][ T4890] JFS: sb_issue_discard(ffff888024d02000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 87.507286][ T4890] blkno = 8000000000400, nblocks = 400 [ 87.512817][ T4890] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 87.512817][ T4890] [ 87.526522][ T4507] BUG: Bad page state in process syz-executor.0 pfn:22c48 [ 87.533996][ T4507] page:ffffea00008b1200 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x22c48 [ 87.544185][ T4507] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 87.553774][ T4507] raw: 00fff00000002006 ffffea000088f7c8 ffffc90002fdfa00 0000000000000000 [ 87.562486][ T4507] raw: 0000000000000004 ffff888029e3f7c0 00000000ffffffff 0000000000000000 [ 87.571339][ T4507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 87.578641][ T4507] page_owner tracks the page as allocated [ 87.584350][ T4507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4890, ts 87475520359, free_ts 87335467512 [ 87.599734][ T4507] get_page_from_freelist+0x1b77/0x1c60 [ 87.605293][ T4507] __alloc_pages+0x1e1/0x470 [ 87.609917][ T4507] __page_cache_alloc+0xd2/0x3f0 [ 87.614852][ T4507] do_read_cache_page+0x1da/0x1030 [ 87.619982][ T4507] __get_metapage+0x35d/0x1060 [ 87.624739][ T4507] dbAllocCtl+0xd4/0x9b0 [ 87.628994][ T4507] dbAllocAG+0x1e7/0xfe0 [ 87.633328][ T4507] dbDiscardAG+0x2ca/0x8e0 [ 87.637869][ T4507] jfs_ioc_trim+0x41e/0x680 [ 87.642484][ T4507] jfs_ioctl+0x2a5/0x3a0 [ 87.646705][ T4507] __se_sys_ioctl+0xfa/0x170 [ 87.651410][ T4507] do_syscall_64+0x4c/0xa0 [ 87.655827][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.661746][ T4507] page last free stack trace: [ 87.666410][ T4507] free_unref_page_prepare+0x637/0x6c0 [ 87.671893][ T4507] free_unref_page+0x94/0x280 [ 87.676570][ T4507] __unfreeze_partials+0x1a5/0x200 [ 87.681885][ T4507] put_cpu_partial+0x12d/0x190 [ 87.686647][ T4507] qlist_free_all+0x35/0x90 [ 87.691237][ T4507] kasan_quarantine_reduce+0x150/0x160 [ 87.696785][ T4507] __kasan_slab_alloc+0x2f/0xd0 [ 87.701687][ T4507] slab_post_alloc_hook+0x4c/0x380 [ 87.707366][ T4507] kmem_cache_alloc+0x100/0x290 [ 87.712206][ T4507] shmem_alloc_inode+0x16/0x30 [ 87.716999][ T4507] new_inode_pseudo+0x5f/0x210 [ 87.721762][ T4507] new_inode+0x25/0x1c0 [ 87.725896][ T4507] shmem_get_inode+0x334/0xa90 [ 87.730672][ T4507] shmem_mknod+0x55/0x1b0 [ 87.734991][ T4507] path_openat+0x11e1/0x2f30 [ 87.739597][ T4507] do_filp_open+0x1b3/0x3e0 [ 87.744092][ T4507] Modules linked in: [ 87.748066][ T4507] CPU: 0 PID: 4507 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 87.757251][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.767431][ T4507] Call Trace: [ 87.770697][ T4507] [ 87.773619][ T4507] dump_stack_lvl+0x168/0x230 [ 87.778300][ T4507] ? show_regs_print_info+0x20/0x20 [ 87.783574][ T4507] ? clockevents_increase_min_delta+0x130/0x130 [ 87.789788][ T4507] ? rcu_is_watching+0x11/0xa0 [ 87.794528][ T4507] bad_page+0x14b/0x170 [ 87.798690][ T4507] free_unref_page_prepare+0x383/0x6c0 [ 87.804127][ T4507] free_unref_page_list+0x122/0x7e0 [ 87.809329][ T4507] ? free_unref_page_commit+0x4c0/0x4c0 [ 87.814890][ T4507] release_pages+0x184b/0x1bb0 [ 87.819642][ T4507] ? lru_cache_disable+0x30/0x30 [ 87.824648][ T4507] __pagevec_release+0x6d/0xe0 [ 87.829382][ T4507] truncate_inode_pages_range+0x2f3/0xef0 [ 87.835166][ T4507] ? invalidate_inode_page+0x360/0x360 [ 87.840598][ T4507] ? do_raw_spin_unlock+0x11d/0x230 [ 87.845775][ T4507] ? _raw_spin_unlock+0x24/0x40 [ 87.850597][ T4507] dbUnmount+0x105/0x170 [ 87.854813][ T4507] jfs_umount+0x1fa/0x360 [ 87.859123][ T4507] jfs_put_super+0x88/0x190 [ 87.863600][ T4507] ? jfs_free_inode+0x20/0x20 [ 87.868313][ T4507] generic_shutdown_super+0x130/0x300 [ 87.873675][ T4507] kill_block_super+0x7c/0xe0 [ 87.878323][ T4507] deactivate_locked_super+0x93/0xf0 [ 87.883586][ T4507] cleanup_mnt+0x418/0x4d0 [ 87.887990][ T4507] task_work_run+0x125/0x1a0 [ 87.892555][ T4507] exit_to_user_mode_loop+0x10f/0x130 [ 87.897908][ T4507] exit_to_user_mode_prepare+0xee/0x180 [ 87.903530][ T4507] syscall_exit_to_user_mode+0x16/0x40 [ 87.908987][ T4507] do_syscall_64+0x58/0xa0 [ 87.913394][ T4507] ? clear_bhb_loop+0x30/0x80 [ 87.918045][ T4507] ? clear_bhb_loop+0x30/0x80 [ 87.922697][ T4507] entry_SYSCALL_64_after_hwframe+0x66/0xd0