BUG: Bad page state in process syz-executor.0 pfn:10146e page:0000000013cb066a refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10146e flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003246988 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c87709b0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:101c9f page:000000007507379c refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x101c9f flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00036af008 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000d9b9b9b0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:116432 page:0000000004a0ec3e refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x116432 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000346f988 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c184c4d8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:11b0d5 page:000000001de945d8 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x11b0d5 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003454f08 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cb8d34d8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10dc17 page:00000000c588ffee refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10dc17 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000338e308 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cdb5c000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:116ddd page:00000000028f0c63 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x116ddd flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003262448 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cdb5caa8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10e339 page:0000000064ec5583 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10e339 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00034be788 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c184c9b0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10dffc page:00000000fc7e19b3 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10dffc flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00035d0688 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c7b9cba0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:11bed0 page:00000000f3f263dc refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x11bed0 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003236448 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cdfe24d8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:1011bd page:0000000018b383fd refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1011bd flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000355ae08 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cb0ad000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10b6d3 page:0000000080dfd08a refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10b6d3 flags: 0x5ffc00000002004(uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002004 fffffc000355f048 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cb0adaa8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:111536 page:00000000535fd9b5 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x111536 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000306f688 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cb0846c8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:101725 page:0000000056ee61f0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x101725 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00033782c8 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c7bdd5d0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10deee page:000000005247ade3 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10deee flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003521048 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000ce7551f0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10dffd page:00000000dbedf6d5 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10dffd flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00032ef588 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000ce755c98 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10e431 page:0000000077d3ad05 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10e431 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00036a4a48 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c1bdb0f8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10b8b3 page:0000000058b36e39 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10b8b3 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003056ec8 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000ce3c77c0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:116de9 page:0000000012cea0a2 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x116de9 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003499308 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000ca6942e8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:107819 page:000000003f1fc404 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x107819 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000305b808 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c1bdbba0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:107930 page:00000000135c492b refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x107930 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00032b8288 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000ca694d90 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10aced page:00000000c142079b refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10aced flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00033d2ac8 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c8f4e8b8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:111bec page:000000001dd1f3c8 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x111bec flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000346ff88 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000d1eba3e0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:11195d page:0000000082f9a7ba refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x11195d flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000323fe88 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000d1ac66c8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:111c80 page:00000000c2c4831a refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x111c80 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00032297c8 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000d1ebae88 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10779e page:00000000271c5f8b refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10779e flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003464588 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000d1e7e9b0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10833f page:0000000044d150fd refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10833f flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000355b1c8 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c91211f0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:108611 page:0000000021147528 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x108611 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000338a348 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c9121c98 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:112e28 page:00000000172eb907 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x112e28 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00030452c8 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c956e4d8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:11abae page:00000000c047913e refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x11abae flags: 0x5ffc00000002004(uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002004 fffffc00032ae748 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c11a4000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:1078e2 page:000000002d580b04 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1078e2 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000344fa48 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c11a4aa8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10fbaa page:00000000cb0adf3f refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10fbaa flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00033cc248 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000daa3a7c0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:1094c9 page:000000000ec12069 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1094c9 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003240208 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c87702e8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:11a923 page:000000008a487fde refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x11a923 flags: 0x5ffc00000002004(uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002004 fffffc0003223608 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c8770000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:116dc6 page:00000000be04dd21 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x116dc6 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003694e88 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c84e6000 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10966a page:000000009f328093 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10966a flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00030948c8 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c84e6aa8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:109a0e page:00000000dd0ef732 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x109a0e flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000329ee08 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000d6443aa8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:109851 page:00000000dfe7714b refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x109851 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000306d088 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000d27e25d0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:112715 page:00000000a5f6b0e4 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x112715 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003226e48 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c0bae0f8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:111ac5 page:000000004e21392d refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x111ac5 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00034550c8 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c8770d90 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:1091bf page:000000006aaeb904 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1091bf flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003467d88 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000c0baeba0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:111a16 page:00000000658cc283 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x111a16 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000321ed88 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cb8d37c0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:1119a9 page:0000000097b8bde5 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1119a9 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000323cd08 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000d9b9bba0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10e2ad page:00000000f54abc80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10e2ad flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003474448 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000d2d158b8 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:1114b0 page:00000000a9f44865 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x1114b0 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc00032e2908 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cd3c53e0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:111d11 page:00000000ce158219 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x111d11 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc000339d308 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cd3c5e88 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 0 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 BUG: Bad page state in process syz-executor.0 pfn:10acd3 page:000000001b03d11e refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x10acd3 flags: 0x5ffc00000002006(referenced|uptodate|private|node=0|zone=2|lastcpupid=0x7ff) raw: 05ffc00000002006 fffffc0003249b08 ffff80001f2f75c0 0000000000000000 raw: 0000000000000004 ffff0000cdfe27c0 00000000ffffffff 0000000000000000 page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set Modules linked in: CPU: 1 PID: 4304 Comm: syz-executor.0 Tainted: G B syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 Call trace: dump_backtrace+0x0/0x458 arch/arm64/kernel/stacktrace.c:152 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:216 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 bad_page+0x188/0x1a8 mm/page_alloc.c:652 check_free_page_bad+0xf4/0x16c mm/page_alloc.c:1199 check_free_page mm/page_alloc.c:1209 [inline] free_pages_prepare mm/page_alloc.c:1334 [inline] free_pcp_prepare mm/page_alloc.c:1391 [inline] free_unref_page_prepare+0x738/0xa84 mm/page_alloc.c:3317 free_unref_page_list+0xdc/0x730 mm/page_alloc.c:3433 release_pages+0x13bc/0x16dc mm/swap.c:963 __pagevec_release+0x84/0xf8 mm/swap.c:983 pagevec_release include/linux/pagevec.h:81 [inline] truncate_inode_pages_range+0x2c8/0xa04 mm/truncate.c:329 truncate_inode_pages+0x2c/0x3c mm/truncate.c:425 dbUnmount+0xf4/0x168 fs/jfs/jfs_dmap.c:264 jfs_umount+0x1c4/0x328 fs/jfs/jfs_umount.c:89 jfs_put_super+0x90/0x188 fs/jfs/super.c:194 generic_shutdown_super+0x130/0x2f0 fs/super.c:475 kill_block_super+0x70/0xdc fs/super.c:1427 deactivate_locked_super+0xb8/0x134 fs/super.c:335 deactivate_super+0xf0/0x110 fs/super.c:366 cleanup_mnt+0x3b8/0x46c fs/namespace.c:1148 __cleanup_mnt+0x20/0x30 fs/namespace.c:1155 task_work_run+0x12c/0x1d8 kernel/task_work.c:188 tracehook_notify_resume include/linux/tracehook.h:189 [inline] do_notify_resume+0x2450/0x309c arch/arm64/kernel/signal.c:949 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline] el0_svc+0xf0/0x1d0 arch/arm64/kernel/entry-common.c:609 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584