Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. 2025/06/05 21:02:15 ignoring optional flag "sandboxArg"="0" 2025/06/05 21:02:15 ignoring optional flag "type"="gce" 2025/06/05 21:02:15 parsed 1 programs [ 81.513030][ T1110] cfg80211: failed to load regulatory.db 2025/06/05 21:02:18 executed programs: 0 [ 83.774405][ T4409] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 83.930972][ T4490] chnl_net:caif_netlink_parms(): no params data found [ 83.975558][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.982872][ T4490] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.990801][ T4490] device bridge_slave_0 entered promiscuous mode [ 83.998698][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.005902][ T4490] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.013806][ T4490] device bridge_slave_1 entered promiscuous mode [ 84.036994][ T4490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.048161][ T4490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.072725][ T4490] team0: Port device team_slave_0 added [ 84.080606][ T4490] team0: Port device team_slave_1 added [ 84.099504][ T4490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.106791][ T4490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.132909][ T4490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.144968][ T4490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.152214][ T4490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.180126][ T4490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.211279][ T4490] device hsr_slave_0 entered promiscuous mode [ 84.218272][ T4490] device hsr_slave_1 entered promiscuous mode [ 84.745479][ T4490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.757304][ T4490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.767499][ T4490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.778063][ T4490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.807892][ T4490] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.814994][ T4490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.822425][ T4490] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.829551][ T4490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.890102][ T4490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.906507][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.916609][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.924422][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.934955][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 84.951003][ T4490] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.961839][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.972005][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.981063][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.988207][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.008273][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.018849][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.028833][ T3084] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.035970][ T3084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.046825][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.056951][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.077320][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.088760][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.099186][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.110534][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.119974][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.130009][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.143488][ T4490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.157686][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.167800][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.178778][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.187470][ T3084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.321393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.329497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.344961][ T4490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.368549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.380053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.401661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.410496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.422123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.430313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.440545][ T4490] device veth0_vlan entered promiscuous mode [ 85.453839][ T4490] device veth1_vlan entered promiscuous mode [ 85.478568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.487991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.496271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.504927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.523439][ T4490] device veth0_macvtap entered promiscuous mode [ 85.535745][ T4490] device veth1_macvtap entered promiscuous mode [ 85.554226][ T4490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.566345][ T4490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.575549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.583847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.593141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.602306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.612904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.622293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.634797][ T4490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.644227][ T4490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.653804][ T4490] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.663546][ T4490] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.728355][ T3084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.743316][ T3084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.761787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.777471][ T3084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.786909][ T3084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.797921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.906144][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 86.171786][ T4568] loop0: detected capacity change from 0 to 32768 [ 86.219478][ T4568] ======================================================= [ 86.219478][ T4568] WARNING: The mand mount option has been deprecated and [ 86.219478][ T4568] and is ignored by this kernel. Remove the mand [ 86.219478][ T4568] option from the mount to silence this warning. [ 86.219478][ T4568] ======================================================= [ 86.337387][ T4568] ERROR: (device loop0): dbDiscardAG: -EIO [ 86.337387][ T4568] [ 86.367212][ T4568] attempt to access beyond end of device [ 86.367212][ T4568] loop0: rw=2051, want=18014398509498368, limit=32768 [ 86.396657][ T4568] JFS: sb_issue_discard(ffff88807f0e6000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 86.416470][ T4568] blkno = 8000000000400, nblocks = 400 [ 86.426684][ T4568] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 86.426684][ T4568] [ 86.446724][ T4490] BUG: Bad page state in process syz-executor.0 pfn:24388 [ 86.454310][ T4490] page:ffffea000090e200 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x24388 [ 86.466496][ T4490] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 86.476571][ T4490] raw: 00fff00000002004 ffffea0000872a88 ffffc9000327fa00 0000000000000000 [ 86.485674][ T4490] raw: 0000000000000004 ffff888024d849b0 00000000ffffffff 0000000000000000 [ 86.494379][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 86.502117][ T4490] page_owner tracks the page as allocated [ 86.508001][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4568, ts 86330610615, free_ts 86312306326 [ 86.523062][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 86.528866][ T4490] __alloc_pages+0x1e1/0x470 [ 86.533486][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 86.540050][ T4490] do_read_cache_page+0x1da/0x1030 [ 86.545312][ T4490] __get_metapage+0x35d/0x1060 [ 86.550153][ T4490] dbAllocCtl+0xd4/0x9a0 [ 86.554517][ T4490] dbAllocAG+0x1e9/0xf10 [ 86.558962][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 86.563414][ T4490] jfs_ioc_trim+0x42b/0x660 [ 86.568372][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 86.572650][ T4490] __se_sys_ioctl+0xfa/0x170 [ 86.578946][ T4490] do_syscall_64+0x4c/0xa0 [ 86.583448][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.589834][ T4490] page last free stack trace: [ 86.594525][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 86.602359][ T4490] free_unref_page+0x94/0x280 [ 86.607521][ T4490] __unfreeze_partials+0x1a5/0x200 [ 86.612661][ T4490] put_cpu_partial+0x12d/0x190 [ 86.619260][ T4490] qlist_free_all+0x35/0x90 [ 86.623809][ T4490] kasan_quarantine_reduce+0x150/0x160 [ 86.629956][ T4490] __kasan_slab_alloc+0x2f/0xd0 [ 86.634836][ T4490] slab_post_alloc_hook+0x4c/0x380 [ 86.641556][ T4490] kmem_cache_alloc+0x100/0x290 [ 86.646833][ T4490] vm_area_dup+0x1e/0xb0 [ 86.651104][ T4490] __split_vma+0xb1/0x410 [ 86.656990][ T4490] __do_munmap+0x375/0xdc0 [ 86.661504][ T4490] __vm_munmap+0x137/0x230 [ 86.666947][ T4490] __x64_sys_munmap+0x67/0x70 [ 86.671660][ T4490] do_syscall_64+0x4c/0xa0 [ 86.678414][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.684361][ T4490] Modules linked in: [ 86.688697][ T4490] CPU: 1 PID: 4490 Comm: syz-executor.0 Not tainted 5.15.185-syzkaller #0 [ 86.697290][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.707377][ T4490] Call Trace: [ 86.710690][ T4490] [ 86.713655][ T4490] dump_stack_lvl+0x168/0x230 [ 86.718480][ T4490] ? show_regs_print_info+0x20/0x20 [ 86.723703][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 86.729980][ T4490] bad_page+0x14b/0x170 [ 86.734157][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 86.739650][ T4490] free_unref_page_list+0x122/0x7e0 [ 86.744884][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 86.750595][ T4490] release_pages+0x184b/0x1bb0 [ 86.755394][ T4490] ? lru_cache_disable+0x30/0x30 [ 86.760362][ T4490] __pagevec_release+0x6d/0xe0 [ 86.765145][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 86.770894][ T4490] ? invalidate_inode_page+0x360/0x360 [ 86.776407][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 86.781640][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 86.786532][ T4490] dbUnmount+0x105/0x170 [ 86.790799][ T4490] jfs_umount+0x1fa/0x360 [ 86.795253][ T4490] jfs_put_super+0x88/0x190 [ 86.799776][ T4490] ? jfs_free_inode+0x20/0x20 [ 86.804475][ T4490] generic_shutdown_super+0x130/0x300 [ 86.809876][ T4490] kill_block_super+0x7c/0xe0 [ 86.814599][ T4490] deactivate_locked_super+0x93/0xf0 [ 86.819913][ T4490] cleanup_mnt+0x418/0x4d0 [ 86.824363][ T4490] ? lockdep_hardirqs_on+0x94/0x140 [ 86.829595][ T4490] task_work_run+0x125/0x1a0 [ 86.834301][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 86.839701][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 86.845275][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 86.850758][ T4490] do_syscall_64+0x58/0xa0 [ 86.855199][ T4490] ? clear_bhb_loop+0x30/0x80 [ 86.859892][ T4490] ? clear_bhb_loop+0x30/0x80 [ 86.864696][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.870661][ T4490] RIP: 0033:0x7f1c679170d7 [ 86.875159][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 86.894881][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.903336][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 86.911420][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 86.919638][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 86.927646][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 86.935752][ T4490] R13: 00007f1c679613b9 R14: 0000000000014f1d R15: 0000000000000003 [ 86.943767][ T4490] [ 86.959156][ T4490] Disabling lock debugging due to kernel taint [ 87.313570][ T4624] loop0: detected capacity change from 0 to 32768 [ 87.418235][ T4624] ERROR: (device loop0): dbDiscardAG: -EIO [ 87.418235][ T4624] [ 87.437690][ T4624] attempt to access beyond end of device [ 87.437690][ T4624] loop0: rw=2051, want=18014398509498368, limit=32768 [ 87.455357][ T4624] JFS: sb_issue_discard(ffff88807175a000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 87.471759][ T4624] blkno = 8000000000400, nblocks = 400 [ 87.477498][ T4624] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 87.477498][ T4624] [ 87.500954][ T4490] BUG: Bad page state in process syz-executor.0 pfn:716f4 [ 87.515784][ T4490] page:ffffea0001c5bd00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x716f4 [ 87.527918][ T4490] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 87.538478][ T4490] raw: 00fff00000002006 ffffea0001c5bc88 ffffc9000327fa00 0000000000000000 [ 87.547520][ T4490] raw: 0000000000000004 ffff88801e3449b0 00000000ffffffff 0000000000000000 [ 87.557007][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 87.564313][ T4490] page_owner tracks the page as allocated [ 87.570524][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4624, ts 87417973019, free_ts 87403967448 [ 87.587318][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 87.592902][ T4490] __alloc_pages+0x1e1/0x470 [ 87.597807][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 87.602772][ T4490] do_read_cache_page+0x1da/0x1030 [ 87.608685][ T4490] __get_metapage+0x35d/0x1060 [ 87.613478][ T4490] dbAllocCtl+0xd4/0x9a0 [ 87.618340][ T4490] dbAllocAG+0x1e9/0xf10 [ 87.622610][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 87.627839][ T4490] jfs_ioc_trim+0x42b/0x660 [ 87.632536][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 87.637343][ T4490] __se_sys_ioctl+0xfa/0x170 [ 87.641966][ T4490] do_syscall_64+0x4c/0xa0 [ 87.647206][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.653129][ T4490] page last free stack trace: [ 87.658438][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 87.663934][ T4490] free_unref_page_list+0x122/0x7e0 [ 87.669922][ T4490] release_pages+0x184b/0x1bb0 [ 87.674711][ T4490] tlb_finish_mmu+0x164/0x2e0 [ 87.679996][ T4490] exit_mmap+0x3a6/0x5f0 [ 87.684269][ T4490] __mmput+0x115/0x3b0 [ 87.688725][ T4490] exit_mm+0x567/0x6c0 [ 87.692820][ T4490] do_exit+0x599/0x20a0 [ 87.697874][ T4490] do_group_exit+0x12e/0x300 [ 87.702583][ T4490] __x64_sys_exit_group+0x3b/0x40 [ 87.708096][ T4490] do_syscall_64+0x4c/0xa0 [ 87.712540][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.718783][ T4490] Modules linked in: [ 87.722712][ T4490] CPU: 0 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 87.732616][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.742773][ T4490] Call Trace: [ 87.746072][ T4490] [ 87.749028][ T4490] dump_stack_lvl+0x168/0x230 [ 87.753727][ T4490] ? show_regs_print_info+0x20/0x20 [ 87.758945][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 87.765210][ T4490] ? rcu_is_watching+0x11/0xa0 [ 87.770006][ T4490] bad_page+0x14b/0x170 [ 87.774181][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 87.779669][ T4490] free_unref_page_list+0x122/0x7e0 [ 87.784895][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 87.790474][ T4490] release_pages+0x184b/0x1bb0 [ 87.795272][ T4490] ? lru_cache_disable+0x30/0x30 [ 87.800239][ T4490] __pagevec_release+0x6d/0xe0 [ 87.805021][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 87.810764][ T4490] ? invalidate_inode_page+0x360/0x360 [ 87.816254][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 87.821474][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 87.826350][ T4490] dbUnmount+0x105/0x170 [ 87.830627][ T4490] jfs_umount+0x1fa/0x360 [ 87.835088][ T4490] jfs_put_super+0x88/0x190 [ 87.839659][ T4490] ? jfs_free_inode+0x20/0x20 [ 87.844355][ T4490] generic_shutdown_super+0x130/0x300 [ 87.849758][ T4490] kill_block_super+0x7c/0xe0 [ 87.854459][ T4490] deactivate_locked_super+0x93/0xf0 [ 87.859761][ T4490] cleanup_mnt+0x418/0x4d0 [ 87.864201][ T4490] task_work_run+0x125/0x1a0 [ 87.868818][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 87.874307][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 87.879884][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 87.885386][ T4490] do_syscall_64+0x58/0xa0 [ 87.889917][ T4490] ? clear_bhb_loop+0x30/0x80 [ 87.894610][ T4490] ? clear_bhb_loop+0x30/0x80 [ 87.899307][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.905234][ T4490] RIP: 0033:0x7f1c679170d7 [ 87.909675][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 87.929298][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.937839][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 87.945833][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 87.953823][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 87.961815][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 87.969808][ T4490] R13: 00007f1c679613b9 R14: 0000000000015419 R15: 0000000000000003 [ 87.976163][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 87.977896][ T4490] [ 88.317390][ T4688] loop0: detected capacity change from 0 to 32768 [ 88.342483][ T4688] ERROR: (device loop0): dbDiscardAG: -EIO [ 88.342483][ T4688] [ 88.365813][ T4688] attempt to access beyond end of device [ 88.365813][ T4688] loop0: rw=2051, want=18014398509498368, limit=32768 [ 88.385292][ T4688] JFS: sb_issue_discard(ffff888064a84000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 88.396387][ T4688] blkno = 8000000000400, nblocks = 400 [ 88.401935][ T4688] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 88.401935][ T4688] [ 88.417122][ T4490] BUG: Bad page state in process syz-executor.0 pfn:7327e [ 88.424363][ T4490] page:ffffea0001cc9f80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7327e [ 88.437358][ T4490] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 88.447251][ T4490] raw: 00fff00000002006 ffffea0000a6e408 ffffc9000327fa00 0000000000000000 [ 88.456949][ T4490] raw: 0000000000000004 ffff88801f4c54d8 00000000ffffffff 0000000000000000 [ 88.465944][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 88.473258][ T4490] page_owner tracks the page as allocated [ 88.479801][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4688, ts 88342215474, free_ts 88171742506 [ 88.495053][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 88.501494][ T4490] __alloc_pages+0x1e1/0x470 [ 88.506359][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 88.511652][ T4490] do_read_cache_page+0x1da/0x1030 [ 88.517600][ T4490] __get_metapage+0x35d/0x1060 [ 88.522400][ T4490] dbAllocCtl+0xd4/0x9a0 [ 88.527039][ T4490] dbAllocAG+0x1e9/0xf10 [ 88.531322][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 88.536682][ T4490] jfs_ioc_trim+0x42b/0x660 [ 88.541214][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 88.546385][ T4490] __se_sys_ioctl+0xfa/0x170 [ 88.550998][ T4490] do_syscall_64+0x4c/0xa0 [ 88.556189][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.562125][ T4490] page last free stack trace: [ 88.567149][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 88.572644][ T4490] free_unref_page+0x94/0x280 [ 88.578164][ T4490] tlb_finish_mmu+0x236/0x2e0 [ 88.582880][ T4490] exit_mmap+0x3a6/0x5f0 [ 88.587503][ T4490] __mmput+0x115/0x3b0 [ 88.591597][ T4490] exit_mm+0x567/0x6c0 [ 88.596417][ T4490] do_exit+0x599/0x20a0 [ 88.600601][ T4490] do_group_exit+0x12e/0x300 [ 88.605639][ T4490] __x64_sys_exit_group+0x3b/0x40 [ 88.610895][ T4490] do_syscall_64+0x4c/0xa0 [ 88.616096][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.622021][ T4490] Modules linked in: [ 88.626250][ T4490] CPU: 0 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 88.636158][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.646314][ T4490] Call Trace: [ 88.649615][ T4490] [ 88.652569][ T4490] dump_stack_lvl+0x168/0x230 [ 88.657269][ T4490] ? show_regs_print_info+0x20/0x20 [ 88.662585][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 88.668847][ T4490] ? rcu_is_watching+0x11/0xa0 [ 88.673641][ T4490] bad_page+0x14b/0x170 [ 88.677913][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 88.683399][ T4490] free_unref_page_list+0x122/0x7e0 [ 88.688628][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 88.694221][ T4490] release_pages+0x184b/0x1bb0 [ 88.699186][ T4490] ? lru_cache_disable+0x30/0x30 [ 88.704162][ T4490] __pagevec_release+0x6d/0xe0 [ 88.708953][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 88.714701][ T4490] ? invalidate_inode_page+0x360/0x360 [ 88.720192][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 88.725425][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 88.730394][ T4490] dbUnmount+0x105/0x170 [ 88.734669][ T4490] jfs_umount+0x1fa/0x360 [ 88.739024][ T4490] jfs_put_super+0x88/0x190 [ 88.743543][ T4490] ? jfs_free_inode+0x20/0x20 [ 88.748267][ T4490] generic_shutdown_super+0x130/0x300 [ 88.753658][ T4490] kill_block_super+0x7c/0xe0 [ 88.758355][ T4490] deactivate_locked_super+0x93/0xf0 [ 88.763664][ T4490] cleanup_mnt+0x418/0x4d0 [ 88.768102][ T4490] task_work_run+0x125/0x1a0 [ 88.772713][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 88.778105][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 88.783675][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 88.789152][ T4490] do_syscall_64+0x58/0xa0 [ 88.793587][ T4490] ? clear_bhb_loop+0x30/0x80 [ 88.798401][ T4490] ? clear_bhb_loop+0x30/0x80 [ 88.803094][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.809010][ T4490] RIP: 0033:0x7f1c679170d7 [ 88.813440][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 88.833065][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 88.841499][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 88.849496][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 88.857544][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 88.865535][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 88.873614][ T4490] R13: 00007f1c679613b9 R14: 00000000000157fa R15: 0000000000000003 [ 88.881611][ T4490] [ 89.224270][ T4746] loop0: detected capacity change from 0 to 32768 [ 89.245998][ T4746] ERROR: (device loop0): dbDiscardAG: -EIO [ 89.245998][ T4746] [ 89.254210][ T4746] attempt to access beyond end of device [ 89.254210][ T4746] loop0: rw=2051, want=18014398509498368, limit=32768 2025/06/05 21:02:23 executed programs: 4 [ 89.271222][ T4746] JFS: sb_issue_discard(ffff888064a98000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 89.282281][ T4746] blkno = 8000000000400, nblocks = 400 [ 89.288492][ T4746] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 89.288492][ T4746] [ 89.303904][ T4490] BUG: Bad page state in process syz-executor.0 pfn:1b5dc [ 89.311553][ T4490] page:ffffea00006d7700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1b5dc [ 89.322062][ T4490] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 89.332450][ T4490] raw: 00fff00000002006 ffffea0001e1cfc8 ffffc9000327fa00 0000000000000000 [ 89.342706][ T4490] raw: 0000000000000004 ffff888074267000 00000000ffffffff 0000000000000000 [ 89.352000][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 89.359564][ T4490] page_owner tracks the page as allocated [ 89.365972][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4746, ts 89245774060, free_ts 89198060799 [ 89.381195][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 89.387696][ T4490] __alloc_pages+0x1e1/0x470 [ 89.392316][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 89.397575][ T4490] do_read_cache_page+0x1da/0x1030 [ 89.402709][ T4490] __get_metapage+0x35d/0x1060 [ 89.408224][ T4490] dbAllocCtl+0xd4/0x9a0 [ 89.412499][ T4490] dbAllocAG+0x1e9/0xf10 [ 89.417586][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 89.422045][ T4490] jfs_ioc_trim+0x42b/0x660 [ 89.427053][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 89.431359][ T4490] __se_sys_ioctl+0xfa/0x170 [ 89.437503][ T4490] do_syscall_64+0x4c/0xa0 [ 89.442068][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.448679][ T4490] page last free stack trace: [ 89.453372][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 89.459746][ T4490] free_unref_page+0x94/0x280 [ 89.464450][ T4490] __vunmap+0x8ab/0xa40 [ 89.468959][ T4490] free_work+0x56/0x80 [ 89.473047][ T4490] process_one_work+0x863/0x1000 [ 89.478506][ T4490] worker_thread+0xaa8/0x12a0 [ 89.483213][ T4490] kthread+0x436/0x520 [ 89.487859][ T4490] ret_from_fork+0x1f/0x30 [ 89.492303][ T4490] Modules linked in: [ 89.496520][ T4490] CPU: 0 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 89.506428][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.516500][ T4490] Call Trace: [ 89.519876][ T4490] [ 89.522824][ T4490] dump_stack_lvl+0x168/0x230 [ 89.527625][ T4490] ? show_regs_print_info+0x20/0x20 [ 89.532842][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 89.539266][ T4490] ? rcu_is_watching+0x11/0xa0 [ 89.544057][ T4490] bad_page+0x14b/0x170 [ 89.548233][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 89.553716][ T4490] free_unref_page_list+0x122/0x7e0 [ 89.559046][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 89.564634][ T4490] release_pages+0x184b/0x1bb0 [ 89.569423][ T4490] ? lru_cache_disable+0x30/0x30 [ 89.574390][ T4490] __pagevec_release+0x6d/0xe0 [ 89.579182][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 89.584952][ T4490] ? invalidate_inode_page+0x360/0x360 [ 89.590447][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 89.595675][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 89.600603][ T4490] dbUnmount+0x105/0x170 [ 89.604973][ T4490] jfs_umount+0x1fa/0x360 [ 89.609338][ T4490] jfs_put_super+0x88/0x190 [ 89.613865][ T4490] ? jfs_free_inode+0x20/0x20 [ 89.618569][ T4490] generic_shutdown_super+0x130/0x300 [ 89.623974][ T4490] kill_block_super+0x7c/0xe0 [ 89.628680][ T4490] deactivate_locked_super+0x93/0xf0 [ 89.633990][ T4490] cleanup_mnt+0x418/0x4d0 [ 89.638432][ T4490] task_work_run+0x125/0x1a0 [ 89.643045][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 89.648448][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 89.654059][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 89.659555][ T4490] do_syscall_64+0x58/0xa0 [ 89.663997][ T4490] ? clear_bhb_loop+0x30/0x80 [ 89.668697][ T4490] ? clear_bhb_loop+0x30/0x80 [ 89.673565][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.679481][ T4490] RIP: 0033:0x7f1c679170d7 [ 89.683917][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 89.703543][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 89.711979][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 89.720060][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 89.728074][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 89.736075][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 89.744082][ T4490] R13: 00007f1c679613b9 R14: 0000000000015b88 R15: 0000000000000003 [ 89.752156][ T4490] [ 90.055335][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 90.086908][ T4802] loop0: detected capacity change from 0 to 32768 [ 90.106803][ T4802] ERROR: (device loop0): dbDiscardAG: -EIO [ 90.106803][ T4802] [ 90.116073][ T4802] attempt to access beyond end of device [ 90.116073][ T4802] loop0: rw=2051, want=18014398509498368, limit=32768 [ 90.132706][ T4802] JFS: sb_issue_discard(ffff888065404000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 90.144283][ T4802] blkno = 8000000000400, nblocks = 400 [ 90.150113][ T4802] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 90.150113][ T4802] [ 90.165574][ T4490] BUG: Bad page state in process syz-executor.0 pfn:7370d [ 90.172811][ T4490] page:ffffea0001cdc340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7370d [ 90.183615][ T4490] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 90.192515][ T4490] raw: 00fff00000002004 ffffea0001d0ac48 ffffc9000327fa00 0000000000000000 [ 90.202210][ T4490] raw: 0000000000000004 ffff888074267aa8 00000000ffffffff 0000000000000000 [ 90.211170][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 90.218952][ T4490] page_owner tracks the page as allocated [ 90.224687][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4802, ts 90106213458, free_ts 90039893993 [ 90.240630][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 90.246579][ T4490] __alloc_pages+0x1e1/0x470 [ 90.251186][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 90.256457][ T4490] do_read_cache_page+0x1da/0x1030 [ 90.261707][ T4490] __get_metapage+0x35d/0x1060 [ 90.266835][ T4490] dbAllocCtl+0xd4/0x9a0 [ 90.271102][ T4490] dbAllocAG+0x1e9/0xf10 [ 90.275689][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 90.280129][ T4490] jfs_ioc_trim+0x42b/0x660 [ 90.284656][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 90.289298][ T4490] __se_sys_ioctl+0xfa/0x170 [ 90.293915][ T4490] do_syscall_64+0x4c/0xa0 [ 90.298955][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.304889][ T4490] page last free stack trace: [ 90.310659][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 90.316420][ T4490] free_unref_page_list+0x122/0x7e0 [ 90.321913][ T4490] release_pages+0x184b/0x1bb0 [ 90.327045][ T4490] tlb_finish_mmu+0x164/0x2e0 [ 90.331743][ T4490] exit_mmap+0x3a6/0x5f0 [ 90.336361][ T4490] __mmput+0x115/0x3b0 [ 90.340545][ T4490] exit_mm+0x567/0x6c0 [ 90.344637][ T4490] do_exit+0x599/0x20a0 [ 90.349239][ T4490] do_group_exit+0x12e/0x300 [ 90.353865][ T4490] __x64_sys_exit_group+0x3b/0x40 [ 90.359374][ T4490] do_syscall_64+0x4c/0xa0 [ 90.364013][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.370264][ T4490] Modules linked in: [ 90.374181][ T4490] CPU: 0 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 90.384090][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.394166][ T4490] Call Trace: [ 90.397464][ T4490] [ 90.400407][ T4490] dump_stack_lvl+0x168/0x230 [ 90.405109][ T4490] ? show_regs_print_info+0x20/0x20 [ 90.410333][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 90.416687][ T4490] ? rcu_is_watching+0x11/0xa0 [ 90.421472][ T4490] bad_page+0x14b/0x170 [ 90.425693][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 90.431249][ T4490] free_unref_page_list+0x122/0x7e0 [ 90.436725][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 90.442313][ T4490] release_pages+0x184b/0x1bb0 [ 90.447142][ T4490] ? lru_cache_disable+0x30/0x30 [ 90.452108][ T4490] __pagevec_release+0x6d/0xe0 [ 90.457000][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 90.462756][ T4490] ? invalidate_inode_page+0x360/0x360 [ 90.468253][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 90.473480][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 90.478358][ T4490] dbUnmount+0x105/0x170 [ 90.482620][ T4490] jfs_umount+0x1fa/0x360 [ 90.486970][ T4490] jfs_put_super+0x88/0x190 [ 90.491539][ T4490] ? jfs_free_inode+0x20/0x20 [ 90.496236][ T4490] generic_shutdown_super+0x130/0x300 [ 90.501796][ T4490] kill_block_super+0x7c/0xe0 [ 90.506499][ T4490] deactivate_locked_super+0x93/0xf0 [ 90.511820][ T4490] cleanup_mnt+0x418/0x4d0 [ 90.516263][ T4490] task_work_run+0x125/0x1a0 [ 90.520879][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 90.526276][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 90.531857][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 90.537342][ T4490] do_syscall_64+0x58/0xa0 [ 90.541781][ T4490] ? clear_bhb_loop+0x30/0x80 [ 90.546479][ T4490] ? clear_bhb_loop+0x30/0x80 [ 90.551181][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.557100][ T4490] RIP: 0033:0x7f1c679170d7 [ 90.561531][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 90.581161][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 90.589600][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 90.597594][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 90.605790][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 90.614132][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 90.622124][ T4490] R13: 00007f1c679613b9 R14: 0000000000015eee R15: 0000000000000003 [ 90.630147][ T4490] [ 90.867490][ T4852] loop0: detected capacity change from 0 to 32768 [ 90.935495][ T4852] ERROR: (device loop0): dbDiscardAG: -EIO [ 90.935495][ T4852] [ 90.943616][ T4852] attempt to access beyond end of device [ 90.943616][ T4852] loop0: rw=2051, want=18014398509498368, limit=32768 [ 90.956974][ T4852] JFS: sb_issue_discard(ffff888074492000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 90.967780][ T4852] blkno = 8000000000400, nblocks = 400 [ 90.973326][ T4852] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 90.973326][ T4852] [ 90.988454][ T4490] BUG: Bad page state in process syz-executor.0 pfn:1adcf [ 90.995718][ T4490] page:ffffea00006b73c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1adcf [ 91.005909][ T4490] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 91.015585][ T4490] raw: 00fff00000002006 ffffea0001cc7548 ffffc9000327fa00 0000000000000000 [ 91.024209][ T4490] raw: 0000000000000004 ffff888074267d90 00000000ffffffff 0000000000000000 [ 91.033069][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 91.040378][ T4490] page_owner tracks the page as allocated [ 91.046171][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4852, ts 90935283386, free_ts 90866095108 [ 91.061154][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 91.067503][ T4490] __alloc_pages+0x1e1/0x470 [ 91.072198][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 91.077439][ T4490] do_read_cache_page+0x1da/0x1030 [ 91.082570][ T4490] __get_metapage+0x35d/0x1060 [ 91.087427][ T4490] dbAllocCtl+0xd4/0x9a0 [ 91.091773][ T4490] dbAllocAG+0x1e9/0xf10 [ 91.096428][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 91.101530][ T4490] jfs_ioc_trim+0x42b/0x660 [ 91.106253][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 91.110515][ T4490] __se_sys_ioctl+0xfa/0x170 [ 91.115218][ T4490] do_syscall_64+0x4c/0xa0 [ 91.119646][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.125583][ T4490] page last free stack trace: [ 91.130255][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 91.135830][ T4490] free_unref_page+0x94/0x280 [ 91.140518][ T4490] __unfreeze_partials+0x1a5/0x200 [ 91.145707][ T4490] put_cpu_partial+0x12d/0x190 [ 91.150481][ T4490] qlist_free_all+0x35/0x90 [ 91.154972][ T4490] kasan_quarantine_reduce+0x150/0x160 [ 91.160532][ T4490] __kasan_slab_alloc+0x2f/0xd0 [ 91.165515][ T4490] slab_post_alloc_hook+0x4c/0x380 [ 91.170641][ T4490] kmem_cache_alloc_trace+0x103/0x2a0 [ 91.176362][ T4490] nsim_fib_event_work+0x1109/0x3240 [ 91.181674][ T4490] process_one_work+0x863/0x1000 [ 91.186935][ T4490] worker_thread+0xdca/0x12a0 [ 91.191664][ T4490] kthread+0x436/0x520 [ 91.196195][ T4490] ret_from_fork+0x1f/0x30 [ 91.200633][ T4490] Modules linked in: [ 91.204519][ T4490] CPU: 0 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 91.214608][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.224662][ T4490] Call Trace: [ 91.227934][ T4490] [ 91.230940][ T4490] dump_stack_lvl+0x168/0x230 [ 91.235607][ T4490] ? show_regs_print_info+0x20/0x20 [ 91.240794][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 91.247056][ T4490] ? rcu_is_watching+0x11/0xa0 [ 91.251808][ T4490] bad_page+0x14b/0x170 [ 91.255962][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 91.261439][ T4490] free_unref_page_list+0x122/0x7e0 [ 91.266635][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 91.272197][ T4490] release_pages+0x184b/0x1bb0 [ 91.277033][ T4490] ? lru_cache_disable+0x30/0x30 [ 91.281974][ T4490] __pagevec_release+0x6d/0xe0 [ 91.286726][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 91.292446][ T4490] ? invalidate_inode_page+0x360/0x360 [ 91.298017][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 91.303228][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 91.308083][ T4490] dbUnmount+0x105/0x170 [ 91.312321][ T4490] jfs_umount+0x1fa/0x360 [ 91.316639][ T4490] jfs_put_super+0x88/0x190 [ 91.321214][ T4490] ? jfs_free_inode+0x20/0x20 [ 91.326006][ T4490] generic_shutdown_super+0x130/0x300 [ 91.331396][ T4490] kill_block_super+0x7c/0xe0 [ 91.336080][ T4490] deactivate_locked_super+0x93/0xf0 [ 91.341360][ T4490] cleanup_mnt+0x418/0x4d0 [ 91.345771][ T4490] task_work_run+0x125/0x1a0 [ 91.350350][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 91.355818][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 91.361381][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 91.366840][ T4490] do_syscall_64+0x58/0xa0 [ 91.371253][ T4490] ? clear_bhb_loop+0x30/0x80 [ 91.376011][ T4490] ? clear_bhb_loop+0x30/0x80 [ 91.380685][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.386675][ T4490] RIP: 0033:0x7f1c679170d7 [ 91.391090][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 91.410694][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 91.419112][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 91.427091][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 91.435064][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 91.443025][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 91.451104][ T4490] R13: 00007f1c679613b9 R14: 0000000000016243 R15: 0000000000000003 [ 91.459079][ T4490] [ 91.700689][ T4854] loop0: detected capacity change from 0 to 32768 [ 91.765570][ T4854] ERROR: (device loop0): dbDiscardAG: -EIO [ 91.765570][ T4854] [ 91.773793][ T4854] attempt to access beyond end of device [ 91.773793][ T4854] loop0: rw=2051, want=18014398509498368, limit=32768 [ 91.786532][ T4854] JFS: sb_issue_discard(ffff888076d98000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 91.797462][ T4854] blkno = 8000000000400, nblocks = 400 [ 91.803016][ T4854] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 91.803016][ T4854] [ 91.818416][ T4490] BUG: Bad page state in process syz-executor.0 pfn:230d2 [ 91.825697][ T4490] page:ffffea00008c3480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x230d2 [ 91.835894][ T4490] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 91.844599][ T4490] raw: 00fff00000002004 ffffea00008d6bc8 ffffc9000327fa00 0000000000000000 [ 91.853311][ T4490] raw: 0000000000000004 ffff8880791bdaa8 00000000ffffffff 0000000000000000 [ 91.861991][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 91.869601][ T4490] page_owner tracks the page as allocated [ 91.875387][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4854, ts 91765281807, free_ts 91463619664 [ 91.890856][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 91.896454][ T4490] __alloc_pages+0x1e1/0x470 [ 91.901056][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 91.906021][ T4490] do_read_cache_page+0x1da/0x1030 [ 91.911164][ T4490] __get_metapage+0x35d/0x1060 [ 91.915961][ T4490] dbAllocCtl+0xd4/0x9a0 [ 91.920233][ T4490] dbAllocAG+0x1e9/0xf10 [ 91.924466][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 91.928911][ T4490] jfs_ioc_trim+0x42b/0x660 [ 91.933510][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 91.937772][ T4490] __se_sys_ioctl+0xfa/0x170 [ 91.942363][ T4490] do_syscall_64+0x4c/0xa0 [ 91.946879][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.952786][ T4490] page last free stack trace: [ 91.957479][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 91.962944][ T4490] free_unref_page_list+0x122/0x7e0 [ 91.968213][ T4490] release_pages+0x184b/0x1bb0 [ 91.972988][ T4490] __pagevec_release+0x6d/0xe0 [ 91.977777][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 91.983511][ T4490] blkdev_flush_mapping+0x182/0x340 [ 91.989026][ T4490] blkdev_put+0x4d1/0x7d0 [ 91.993389][ T4490] deactivate_locked_super+0x93/0xf0 [ 91.998702][ T4490] cleanup_mnt+0x418/0x4d0 [ 92.003268][ T4490] task_work_run+0x125/0x1a0 [ 92.007912][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 92.013319][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 92.018988][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 92.024488][ T4490] do_syscall_64+0x58/0xa0 [ 92.028988][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.034896][ T4490] Modules linked in: [ 92.038826][ T4490] CPU: 1 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 92.048808][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.058945][ T4490] Call Trace: [ 92.062228][ T4490] [ 92.065146][ T4490] dump_stack_lvl+0x168/0x230 [ 92.069831][ T4490] ? show_regs_print_info+0x20/0x20 [ 92.075045][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 92.081284][ T4490] ? rcu_is_watching+0x11/0xa0 [ 92.086050][ T4490] bad_page+0x14b/0x170 [ 92.090197][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 92.095649][ T4490] free_unref_page_list+0x122/0x7e0 [ 92.100944][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 92.106493][ T4490] release_pages+0x184b/0x1bb0 [ 92.111248][ T4490] ? lru_cache_disable+0x30/0x30 [ 92.116198][ T4490] __pagevec_release+0x6d/0xe0 [ 92.120953][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 92.126697][ T4490] ? invalidate_inode_page+0x360/0x360 [ 92.132165][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 92.137436][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 92.142279][ T4490] dbUnmount+0x105/0x170 [ 92.146532][ T4490] jfs_umount+0x1fa/0x360 [ 92.150852][ T4490] jfs_put_super+0x88/0x190 [ 92.155343][ T4490] ? jfs_free_inode+0x20/0x20 [ 92.160007][ T4490] generic_shutdown_super+0x130/0x300 [ 92.165376][ T4490] kill_block_super+0x7c/0xe0 [ 92.170060][ T4490] deactivate_locked_super+0x93/0xf0 [ 92.175336][ T4490] cleanup_mnt+0x418/0x4d0 [ 92.179741][ T4490] task_work_run+0x125/0x1a0 [ 92.184320][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 92.189683][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 92.195309][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 92.200758][ T4490] do_syscall_64+0x58/0xa0 [ 92.205162][ T4490] ? clear_bhb_loop+0x30/0x80 [ 92.209835][ T4490] ? clear_bhb_loop+0x30/0x80 [ 92.214586][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.220562][ T4490] RIP: 0033:0x7f1c679170d7 [ 92.224973][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 92.244590][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 92.252999][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 92.260964][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 92.269013][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 92.276991][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 92.284953][ T4490] R13: 00007f1c679613b9 R14: 0000000000016584 R15: 0000000000000003 [ 92.292915][ T4490] [ 92.296502][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 92.542502][ T4856] loop0: detected capacity change from 0 to 32768 [ 92.596397][ T4856] ERROR: (device loop0): dbDiscardAG: -EIO [ 92.596397][ T4856] [ 92.604476][ T4856] attempt to access beyond end of device [ 92.604476][ T4856] loop0: rw=2051, want=18014398509498368, limit=32768 [ 92.617333][ T4856] JFS: sb_issue_discard(ffff8880745a4000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 92.627942][ T4856] blkno = 8000000000400, nblocks = 400 [ 92.633664][ T4856] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 92.633664][ T4856] [ 92.648388][ T4490] BUG: Bad page state in process syz-executor.0 pfn:7338f [ 92.655710][ T4490] page:ffffea0001cce3c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x7338f [ 92.666451][ T4490] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 92.675059][ T4490] raw: 00fff00000002004 ffffea0000a781c8 ffffc9000327fa00 0000000000000000 [ 92.683981][ T4490] raw: 0000000000000004 ffff8880224e76c8 00000000ffffffff 0000000000000000 [ 92.692749][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 92.700252][ T4490] page_owner tracks the page as allocated [ 92.706269][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4856, ts 92596130369, free_ts 92540995059 [ 92.721452][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 92.727044][ T4490] __alloc_pages+0x1e1/0x470 [ 92.731627][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 92.736585][ T4490] do_read_cache_page+0x1da/0x1030 [ 92.741704][ T4490] __get_metapage+0x35d/0x1060 [ 92.746495][ T4490] dbAllocCtl+0xd4/0x9a0 [ 92.750747][ T4490] dbAllocAG+0x1e9/0xf10 [ 92.755040][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 92.759507][ T4490] jfs_ioc_trim+0x42b/0x660 [ 92.764028][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 92.768330][ T4490] __se_sys_ioctl+0xfa/0x170 [ 92.772937][ T4490] do_syscall_64+0x4c/0xa0 [ 92.777394][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.783642][ T4490] page last free stack trace: [ 92.788428][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 92.793911][ T4490] free_unref_page_list+0x122/0x7e0 [ 92.799184][ T4490] release_pages+0x184b/0x1bb0 [ 92.804051][ T4490] tlb_finish_mmu+0x164/0x2e0 [ 92.809155][ T4490] unmap_region+0x315/0x360 [ 92.813683][ T4490] __do_munmap+0x9d3/0xdc0 [ 92.818147][ T4490] __vm_munmap+0x137/0x230 [ 92.822574][ T4490] __x64_sys_munmap+0x67/0x70 [ 92.827310][ T4490] do_syscall_64+0x4c/0xa0 [ 92.831753][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.837701][ T4490] Modules linked in: [ 92.841601][ T4490] CPU: 1 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 92.851480][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.861666][ T4490] Call Trace: [ 92.864963][ T4490] [ 92.867980][ T4490] dump_stack_lvl+0x168/0x230 [ 92.872915][ T4490] ? show_regs_print_info+0x20/0x20 [ 92.878221][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 92.884472][ T4490] ? rcu_is_watching+0x11/0xa0 [ 92.889228][ T4490] bad_page+0x14b/0x170 [ 92.893376][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 92.898831][ T4490] free_unref_page_list+0x122/0x7e0 [ 92.904030][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 92.909577][ T4490] release_pages+0x184b/0x1bb0 [ 92.914335][ T4490] ? lru_cache_disable+0x30/0x30 [ 92.919264][ T4490] __pagevec_release+0x6d/0xe0 [ 92.924039][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 92.929754][ T4490] ? invalidate_inode_page+0x360/0x360 [ 92.935342][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 92.940655][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 92.945511][ T4490] dbUnmount+0x105/0x170 [ 92.949769][ T4490] jfs_umount+0x1fa/0x360 [ 92.954209][ T4490] jfs_put_super+0x88/0x190 [ 92.958714][ T4490] ? jfs_free_inode+0x20/0x20 [ 92.963394][ T4490] generic_shutdown_super+0x130/0x300 [ 92.968773][ T4490] kill_block_super+0x7c/0xe0 [ 92.973465][ T4490] deactivate_locked_super+0x93/0xf0 [ 92.978742][ T4490] cleanup_mnt+0x418/0x4d0 [ 92.983155][ T4490] task_work_run+0x125/0x1a0 [ 92.987832][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 92.993547][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 92.999085][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 93.004554][ T4490] do_syscall_64+0x58/0xa0 [ 93.008997][ T4490] ? clear_bhb_loop+0x30/0x80 [ 93.013659][ T4490] ? clear_bhb_loop+0x30/0x80 [ 93.018319][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.024218][ T4490] RIP: 0033:0x7f1c679170d7 [ 93.028732][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 93.048329][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.056737][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 93.064852][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 93.072822][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 93.080786][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 93.088757][ T4490] R13: 00007f1c679613b9 R14: 00000000000168cc R15: 0000000000000003 [ 93.096723][ T4490] [ 93.322400][ T4858] loop0: detected capacity change from 0 to 32768 [ 93.385258][ T4858] ERROR: (device loop0): dbDiscardAG: -EIO [ 93.385258][ T4858] [ 93.393390][ T4858] attempt to access beyond end of device [ 93.393390][ T4858] loop0: rw=2051, want=18014398509498368, limit=32768 [ 93.405996][ T4858] JFS: sb_issue_discard(ffff888079a3c000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 93.416566][ T4858] blkno = 8000000000400, nblocks = 400 [ 93.422113][ T4858] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 93.422113][ T4858] [ 93.437716][ T4490] BUG: Bad page state in process syz-executor.0 pfn:79bc0 [ 93.445106][ T4490] page:ffffea0001e6f000 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x79bc0 [ 93.455433][ T4490] flags: 0xfff00000002004(uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 93.464144][ T4490] raw: 00fff00000002004 ffffea0001e48308 ffffc9000327fa00 0000000000000000 [ 93.472834][ T4490] raw: 0000000000000004 ffff8880239130f8 00000000ffffffff 0000000000000000 [ 93.481884][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 93.489220][ T4490] page_owner tracks the page as allocated [ 93.494932][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4858, ts 93384916958, free_ts 93210253382 [ 93.510211][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 93.515913][ T4490] __alloc_pages+0x1e1/0x470 [ 93.520522][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 93.525969][ T4490] do_read_cache_page+0x1da/0x1030 [ 93.531100][ T4490] __get_metapage+0x35d/0x1060 [ 93.535906][ T4490] dbAllocCtl+0xd4/0x9a0 [ 93.540248][ T4490] dbAllocAG+0x1e9/0xf10 [ 93.544482][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 93.549010][ T4490] jfs_ioc_trim+0x42b/0x660 [ 93.553532][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 93.557828][ T4490] __se_sys_ioctl+0xfa/0x170 [ 93.562454][ T4490] do_syscall_64+0x4c/0xa0 [ 93.566911][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.572926][ T4490] page last free stack trace: [ 93.577641][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 93.583114][ T4490] free_unref_page+0x94/0x280 [ 93.587845][ T4490] qlist_free_all+0x35/0x90 [ 93.592497][ T4490] kasan_quarantine_reduce+0x150/0x160 [ 93.598000][ T4490] __kasan_slab_alloc+0x2f/0xd0 [ 93.602878][ T4490] slab_post_alloc_hook+0x4c/0x380 [ 93.608023][ T4490] kmem_cache_alloc+0x100/0x290 [ 93.612881][ T4490] ptlock_alloc+0x1c/0x60 [ 93.617232][ T4490] pte_alloc_one+0xc5/0x2f0 [ 93.621750][ T4490] __pte_alloc+0x21/0x150 [ 93.626146][ T4490] handle_mm_fault+0x395c/0x43c0 [ 93.631318][ T4490] do_user_addr_fault+0x489/0xc80 [ 93.636420][ T4490] exc_page_fault+0x60/0x100 [ 93.641023][ T4490] asm_exc_page_fault+0x22/0x30 [ 93.645910][ T4490] Modules linked in: [ 93.649807][ T4490] CPU: 1 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 93.659681][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.669723][ T4490] Call Trace: [ 93.672990][ T4490] [ 93.675914][ T4490] dump_stack_lvl+0x168/0x230 [ 93.680593][ T4490] ? show_regs_print_info+0x20/0x20 [ 93.685777][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 93.692005][ T4490] ? rcu_is_watching+0x11/0xa0 [ 93.696763][ T4490] bad_page+0x14b/0x170 [ 93.700906][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 93.706356][ T4490] free_unref_page_list+0x122/0x7e0 [ 93.711545][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 93.717082][ T4490] release_pages+0x184b/0x1bb0 [ 93.721833][ T4490] ? lru_cache_disable+0x30/0x30 [ 93.726816][ T4490] __pagevec_release+0x6d/0xe0 [ 93.731652][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 93.737364][ T4490] ? invalidate_inode_page+0x360/0x360 [ 93.742820][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 93.748009][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 93.752852][ T4490] dbUnmount+0x105/0x170 [ 93.757085][ T4490] jfs_umount+0x1fa/0x360 [ 93.761429][ T4490] jfs_put_super+0x88/0x190 [ 93.766005][ T4490] ? jfs_free_inode+0x20/0x20 [ 93.770676][ T4490] generic_shutdown_super+0x130/0x300 [ 93.776060][ T4490] kill_block_super+0x7c/0xe0 [ 93.780909][ T4490] deactivate_locked_super+0x93/0xf0 [ 93.786296][ T4490] cleanup_mnt+0x418/0x4d0 [ 93.790738][ T4490] task_work_run+0x125/0x1a0 [ 93.795323][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 93.800826][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 93.806390][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 93.811855][ T4490] do_syscall_64+0x58/0xa0 [ 93.816264][ T4490] ? clear_bhb_loop+0x30/0x80 [ 93.820930][ T4490] ? clear_bhb_loop+0x30/0x80 [ 93.825621][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.831594][ T4490] RIP: 0033:0x7f1c679170d7 [ 93.835999][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 93.855690][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.864201][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 93.872168][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 93.880126][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 93.888083][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 93.896582][ T4490] R13: 00007f1c679613b9 R14: 0000000000016bd9 R15: 0000000000000003 [ 93.904569][ T4490] [ 94.153893][ T4860] loop0: detected capacity change from 0 to 32768 [ 94.225894][ T4860] ERROR: (device loop0): dbDiscardAG: -EIO [ 94.225894][ T4860] [ 94.233960][ T4860] attempt to access beyond end of device [ 94.233960][ T4860] loop0: rw=2051, want=18014398509498368, limit=32768 [ 94.246595][ T4860] JFS: sb_issue_discard(ffff888077fbc000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 94.257409][ T4860] blkno = 8000000000400, nblocks = 400 [ 94.262887][ T4860] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 94.262887][ T4860] [ 94.277415][ T4490] BUG: Bad page state in process syz-executor.0 pfn:1fe6b [ 94.284740][ T4490] page:ffffea00007f9ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1fe6b [ 94.295678][ T4490] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 94.305313][ T4490] raw: 00fff00000002006 ffffea00007d0588 ffffc9000327fa00 0000000000000000 [ 94.313911][ T4490] raw: 0000000000000004 ffff88807280f8b8 00000000ffffffff 0000000000000000 [ 94.322522][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 94.330160][ T4490] page_owner tracks the page as allocated [ 94.335939][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4860, ts 94225578541, free_ts 94216451079 [ 94.351254][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 94.356857][ T4490] __alloc_pages+0x1e1/0x470 [ 94.361459][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 94.366432][ T4490] do_read_cache_page+0x1da/0x1030 [ 94.371551][ T4490] __get_metapage+0x35d/0x1060 [ 94.376554][ T4490] dbAllocCtl+0xd4/0x9a0 [ 94.380830][ T4490] dbAllocAG+0x1e9/0xf10 [ 94.385235][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 94.389674][ T4490] jfs_ioc_trim+0x42b/0x660 [ 94.394169][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 94.398696][ T4490] __se_sys_ioctl+0xfa/0x170 [ 94.403313][ T4490] do_syscall_64+0x4c/0xa0 [ 94.407964][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.413882][ T4490] page last free stack trace: [ 94.418592][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 94.424067][ T4490] free_unref_page+0x94/0x280 [ 94.428793][ T4490] __unfreeze_partials+0x1a5/0x200 [ 94.433920][ T4490] put_cpu_partial+0x12d/0x190 [ 94.438760][ T4490] qlist_free_all+0x35/0x90 [ 94.443281][ T4490] kasan_quarantine_reduce+0x150/0x160 [ 94.449121][ T4490] __kasan_slab_alloc+0x2f/0xd0 [ 94.453993][ T4490] slab_post_alloc_hook+0x4c/0x380 [ 94.459140][ T4490] kmem_cache_alloc+0x100/0x290 [ 94.463999][ T4490] __se_sys_flock+0x14f/0x580 [ 94.468929][ T4490] do_syscall_64+0x4c/0xa0 [ 94.473368][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.479325][ T4490] Modules linked in: [ 94.483227][ T4490] CPU: 1 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 94.493106][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.503158][ T4490] Call Trace: [ 94.506578][ T4490] [ 94.509506][ T4490] dump_stack_lvl+0x168/0x230 [ 94.514271][ T4490] ? show_regs_print_info+0x20/0x20 [ 94.519465][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 94.525705][ T4490] ? rcu_is_watching+0x11/0xa0 [ 94.530463][ T4490] bad_page+0x14b/0x170 [ 94.534784][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 94.540247][ T4490] free_unref_page_list+0x122/0x7e0 [ 94.545452][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 94.551022][ T4490] release_pages+0x184b/0x1bb0 [ 94.555873][ T4490] ? lru_cache_disable+0x30/0x30 [ 94.560802][ T4490] __pagevec_release+0x6d/0xe0 [ 94.565770][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 94.571506][ T4490] ? invalidate_inode_page+0x360/0x360 [ 94.576986][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 94.582174][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 94.587191][ T4490] dbUnmount+0x105/0x170 [ 94.591447][ T4490] jfs_umount+0x1fa/0x360 [ 94.595769][ T4490] jfs_put_super+0x88/0x190 [ 94.600272][ T4490] ? jfs_free_inode+0x20/0x20 [ 94.604953][ T4490] generic_shutdown_super+0x130/0x300 [ 94.610336][ T4490] kill_block_super+0x7c/0xe0 [ 94.615019][ T4490] deactivate_locked_super+0x93/0xf0 [ 94.620397][ T4490] cleanup_mnt+0x418/0x4d0 [ 94.624848][ T4490] task_work_run+0x125/0x1a0 [ 94.629440][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 94.634868][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 94.640442][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 94.645927][ T4490] do_syscall_64+0x58/0xa0 [ 94.650344][ T4490] ? clear_bhb_loop+0x30/0x80 [ 94.655009][ T4490] ? clear_bhb_loop+0x30/0x80 [ 94.659680][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.665660][ T4490] RIP: 0033:0x7f1c679170d7 [ 94.670071][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 94.689814][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 94.698224][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 94.706204][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 94.714180][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 94.722142][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 94.730102][ T4490] R13: 00007f1c679613b9 R14: 0000000000016f19 R15: 0000000000000003 [ 94.738117][ T4490] [ 94.980550][ T4862] loop0: detected capacity change from 0 to 32768 2025/06/05 21:02:29 executed programs: 11 [ 95.022731][ T4862] ERROR: (device loop0): dbDiscardAG: -EIO [ 95.022731][ T4862] [ 95.030902][ T4862] attempt to access beyond end of device [ 95.030902][ T4862] loop0: rw=2051, want=18014398509498368, limit=32768 [ 95.043628][ T4862] JFS: sb_issue_discard(ffff8880656a2000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 95.054271][ T4862] blkno = 8000000000400, nblocks = 400 [ 95.060223][ T4862] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 95.060223][ T4862] [ 95.076652][ T4490] BUG: Bad page state in process syz-executor.0 pfn:78dd2 [ 95.083885][ T4490] page:ffffea0001e37480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x78dd2 [ 95.094104][ T4490] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 95.104212][ T4490] raw: 00fff00000002006 ffffea0001d47508 ffffc9000327fa00 0000000000000000 [ 95.112950][ T4490] raw: 0000000000000004 ffff888023913d90 00000000ffffffff 0000000000000000 [ 95.121650][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 95.129043][ T4490] page_owner tracks the page as allocated [ 95.134762][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4862, ts 95022290697, free_ts 94742849827 [ 95.149724][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 95.155412][ T4490] __alloc_pages+0x1e1/0x470 [ 95.160012][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 95.165253][ T4490] do_read_cache_page+0x1da/0x1030 [ 95.170374][ T4490] __get_metapage+0x35d/0x1060 [ 95.175500][ T4490] dbAllocCtl+0xd4/0x9a0 [ 95.179762][ T4490] dbAllocAG+0x1e9/0xf10 [ 95.184082][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 95.188525][ T4490] jfs_ioc_trim+0x42b/0x660 [ 95.193065][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 95.197430][ T4490] __se_sys_ioctl+0xfa/0x170 [ 95.202031][ T4490] do_syscall_64+0x4c/0xa0 [ 95.206481][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.212495][ T4490] page last free stack trace: [ 95.217188][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 95.222657][ T4490] free_unref_page_list+0x122/0x7e0 [ 95.227900][ T4490] release_pages+0x184b/0x1bb0 [ 95.232698][ T4490] __pagevec_release+0x6d/0xe0 [ 95.237483][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 95.243211][ T4490] blkdev_flush_mapping+0x182/0x340 [ 95.248458][ T4490] blkdev_put+0x4d1/0x7d0 [ 95.252880][ T4490] deactivate_locked_super+0x93/0xf0 [ 95.258205][ T4490] cleanup_mnt+0x418/0x4d0 [ 95.262633][ T4490] task_work_run+0x125/0x1a0 [ 95.267506][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 95.272895][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 95.278469][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 95.283936][ T4490] do_syscall_64+0x58/0xa0 [ 95.288387][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.294292][ T4490] Modules linked in: [ 95.298212][ T4490] CPU: 1 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 95.308101][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.318143][ T4490] Call Trace: [ 95.321408][ T4490] [ 95.324346][ T4490] dump_stack_lvl+0x168/0x230 [ 95.329014][ T4490] ? show_regs_print_info+0x20/0x20 [ 95.334317][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 95.340543][ T4490] ? rcu_is_watching+0x11/0xa0 [ 95.345387][ T4490] bad_page+0x14b/0x170 [ 95.349543][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 95.354992][ T4490] free_unref_page_list+0x122/0x7e0 [ 95.360191][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 95.365741][ T4490] release_pages+0x184b/0x1bb0 [ 95.370507][ T4490] ? lru_cache_disable+0x30/0x30 [ 95.375522][ T4490] __pagevec_release+0x6d/0xe0 [ 95.380470][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 95.386183][ T4490] ? invalidate_inode_page+0x360/0x360 [ 95.391638][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 95.396913][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 95.401759][ T4490] dbUnmount+0x105/0x170 [ 95.406000][ T4490] jfs_umount+0x1fa/0x360 [ 95.410337][ T4490] jfs_put_super+0x88/0x190 [ 95.414920][ T4490] ? jfs_free_inode+0x20/0x20 [ 95.419587][ T4490] generic_shutdown_super+0x130/0x300 [ 95.425059][ T4490] kill_block_super+0x7c/0xe0 [ 95.429726][ T4490] deactivate_locked_super+0x93/0xf0 [ 95.435089][ T4490] cleanup_mnt+0x418/0x4d0 [ 95.439495][ T4490] task_work_run+0x125/0x1a0 [ 95.444072][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 95.449433][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 95.454966][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 95.460423][ T4490] do_syscall_64+0x58/0xa0 [ 95.464834][ T4490] ? clear_bhb_loop+0x30/0x80 [ 95.469626][ T4490] ? clear_bhb_loop+0x30/0x80 [ 95.474385][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.480274][ T4490] RIP: 0033:0x7f1c679170d7 [ 95.484686][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 95.504492][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 95.512909][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 95.520875][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 95.528836][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 95.536925][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 95.544882][ T4490] R13: 00007f1c679613b9 R14: 0000000000017255 R15: 0000000000000003 [ 95.552844][ T4490] [ 95.791269][ T4864] loop0: detected capacity change from 0 to 32768 [ 95.845933][ T4864] ERROR: (device loop0): dbDiscardAG: -EIO [ 95.845933][ T4864] [ 95.854147][ T4864] attempt to access beyond end of device [ 95.854147][ T4864] loop0: rw=2051, want=18014398509498368, limit=32768 [ 95.867017][ T4864] JFS: sb_issue_discard(ffff88801faba000, 2251799813686272, 1024, GFP_NOFS, 0) = -5 => failed! [ 95.877630][ T4864] blkno = 8000000000400, nblocks = 400 [ 95.883184][ T4864] ERROR: (device loop0): dbFree: block to be freed is outside the map [ 95.883184][ T4864] [ 95.899157][ T4490] BUG: Bad page state in process syz-executor.0 pfn:751c8 [ 95.906427][ T4490] page:ffffea0001d47200 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x751c8 [ 95.916703][ T4490] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 95.926308][ T4490] raw: 00fff00000002006 ffffea0001e6e548 ffffc9000327fa00 0000000000000000 [ 95.935014][ T4490] raw: 0000000000000004 ffff88807280fc98 00000000ffffffff 0000000000000000 [ 95.943709][ T4490] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 95.951025][ T4490] page_owner tracks the page as allocated [ 95.956774][ T4490] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4864, ts 95845424635, free_ts 95836062549 [ 95.971843][ T4490] get_page_from_freelist+0x1b77/0x1c60 [ 95.977531][ T4490] __alloc_pages+0x1e1/0x470 [ 95.982145][ T4490] __page_cache_alloc+0xd2/0x3f0 [ 95.987121][ T4490] do_read_cache_page+0x1da/0x1030 [ 95.992280][ T4490] __get_metapage+0x35d/0x1060 [ 95.997263][ T4490] dbAllocCtl+0xd4/0x9a0 [ 96.001530][ T4490] dbAllocAG+0x1e9/0xf10 [ 96.006236][ T4490] dbDiscardAG+0x2ca/0x8e0 [ 96.010687][ T4490] jfs_ioc_trim+0x42b/0x660 [ 96.015231][ T4490] jfs_ioctl+0x2a5/0x3a0 [ 96.019572][ T4490] __se_sys_ioctl+0xfa/0x170 [ 96.024150][ T4490] do_syscall_64+0x4c/0xa0 [ 96.028591][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.034499][ T4490] page last free stack trace: [ 96.039197][ T4490] free_unref_page_prepare+0x637/0x6c0 [ 96.044780][ T4490] free_unref_page+0x94/0x280 [ 96.049489][ T4490] __unfreeze_partials+0x1a5/0x200 [ 96.054619][ T4490] put_cpu_partial+0x12d/0x190 [ 96.059430][ T4490] qlist_free_all+0x35/0x90 [ 96.063935][ T4490] kasan_quarantine_reduce+0x150/0x160 [ 96.069453][ T4490] __kasan_slab_alloc+0x2f/0xd0 [ 96.074340][ T4490] slab_post_alloc_hook+0x4c/0x380 [ 96.079507][ T4490] kmem_cache_alloc+0x100/0x290 [ 96.084375][ T4490] getname_flags+0xb5/0x500 [ 96.089197][ T4490] do_sys_openat2+0xcf/0x4a0 [ 96.094032][ T4490] __x64_sys_openat+0x135/0x160 [ 96.098947][ T4490] do_syscall_64+0x4c/0xa0 [ 96.103476][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.109413][ T4490] Modules linked in: [ 96.113313][ T4490] CPU: 1 PID: 4490 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0 [ 96.123196][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.133320][ T4490] Call Trace: [ 96.136603][ T4490] [ 96.139529][ T4490] dump_stack_lvl+0x168/0x230 [ 96.144306][ T4490] ? show_regs_print_info+0x20/0x20 [ 96.149541][ T4490] ? clockevents_increase_min_delta+0x130/0x130 [ 96.155794][ T4490] ? rcu_is_watching+0x11/0xa0 [ 96.160560][ T4490] bad_page+0x14b/0x170 [ 96.164734][ T4490] free_unref_page_prepare+0x383/0x6c0 [ 96.170219][ T4490] free_unref_page_list+0x122/0x7e0 [ 96.175427][ T4490] ? free_unref_page_commit+0x4c0/0x4c0 [ 96.180978][ T4490] release_pages+0x184b/0x1bb0 [ 96.185840][ T4490] ? lru_cache_disable+0x30/0x30 [ 96.190768][ T4490] __pagevec_release+0x6d/0xe0 [ 96.195573][ T4490] truncate_inode_pages_range+0x2f3/0xef0 [ 96.201295][ T4490] ? invalidate_inode_page+0x360/0x360 [ 96.206838][ T4490] ? do_raw_spin_unlock+0x11d/0x230 [ 96.212026][ T4490] ? _raw_spin_unlock+0x24/0x40 [ 96.216867][ T4490] dbUnmount+0x105/0x170 [ 96.221108][ T4490] jfs_umount+0x1fa/0x360 [ 96.225432][ T4490] jfs_put_super+0x88/0x190 [ 96.229921][ T4490] ? jfs_free_inode+0x20/0x20 [ 96.234593][ T4490] generic_shutdown_super+0x130/0x300 [ 96.239958][ T4490] kill_block_super+0x7c/0xe0 [ 96.244626][ T4490] deactivate_locked_super+0x93/0xf0 [ 96.249899][ T4490] cleanup_mnt+0x418/0x4d0 [ 96.254403][ T4490] task_work_run+0x125/0x1a0 [ 96.259022][ T4490] exit_to_user_mode_loop+0x10f/0x130 [ 96.264400][ T4490] exit_to_user_mode_prepare+0xb1/0x140 [ 96.269955][ T4490] syscall_exit_to_user_mode+0x16/0x40 [ 96.275423][ T4490] do_syscall_64+0x58/0xa0 [ 96.279849][ T4490] ? clear_bhb_loop+0x30/0x80 [ 96.284525][ T4490] ? clear_bhb_loop+0x30/0x80 [ 96.289242][ T4490] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.295739][ T4490] RIP: 0033:0x7f1c679170d7 [ 96.300236][ T4490] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 96.319845][ T4490] RSP: 002b:00007ffd50441ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 96.328259][ T4490] RAX: 0000000000000000 RBX: 00007f1c679613b9 RCX: 00007f1c679170d7 [ 96.336686][ T4490] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd50441f90 [ 96.344653][ T4490] RBP: 00007ffd50441f90 R08: 0000000000000000 R09: 0000000000000000 [ 96.352700][ T4490] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd50443050 [ 96.360660][ T4490] R13: 00007f1c679613b9 R14: 000000000001757d R15: 0000000000000003 [ 96.368630][ T4490]