Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. 2026/03/02 07:37:20 parsed 1 programs [ 77.357633][ T4188] cgroup: Unknown subsys name 'net' [ 77.470821][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.232708][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.539533][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.558455][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.569163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.596866][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.605417][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.614348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.877878][ T4246] chnl_net:caif_netlink_parms(): no params data found [ 82.934468][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.942163][ T4246] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.958525][ T4246] device bridge_slave_0 entered promiscuous mode [ 82.979761][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.994360][ T4246] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.002329][ T4246] device bridge_slave_1 entered promiscuous mode [ 83.060226][ T4246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.071851][ T4246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.118987][ T4246] team0: Port device team_slave_0 added [ 83.129677][ T4246] team0: Port device team_slave_1 added [ 83.150810][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.158718][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.185827][ T4246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.199111][ T4246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.206225][ T4246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.232419][ T4246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.263462][ T4246] device hsr_slave_0 entered promiscuous mode [ 83.270403][ T4246] device hsr_slave_1 entered promiscuous mode [ 83.387155][ T4246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.399567][ T4246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.410592][ T4246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.421441][ T4246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.461078][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.468374][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.476271][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.483340][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.547833][ T4246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.581066][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.590425][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.599210][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.608657][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 83.621441][ T4246] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.634419][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.642930][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.650068][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.674164][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.682549][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.689654][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.709509][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.718878][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.752546][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.764757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.779232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.792897][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.913728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.921388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.935679][ T4246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.972116][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.981325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.000715][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.009703][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.023493][ T4246] device veth0_vlan entered promiscuous mode [ 84.047947][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.056566][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.069198][ T4246] device veth1_vlan entered promiscuous mode [ 84.117726][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.126531][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.135224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.144113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.155530][ T4246] device veth0_macvtap entered promiscuous mode [ 84.175565][ T4246] device veth1_macvtap entered promiscuous mode [ 84.209338][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.218146][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.227565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.235863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.244638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.258625][ T4246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.267783][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.277525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.291226][ T4246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.300313][ T4246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.309220][ T4246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.318181][ T4246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/03/02 07:37:31 executed programs: 0 [ 85.947276][ T1175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.028518][ T4286] chnl_net:caif_netlink_parms(): no params data found [ 86.074722][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.081885][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.090229][ T4286] device bridge_slave_0 entered promiscuous mode [ 86.099644][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.107015][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.115768][ T4286] device bridge_slave_1 entered promiscuous mode [ 86.137328][ T4286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.148979][ T4286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.171140][ T4286] team0: Port device team_slave_0 added [ 86.179092][ T4286] team0: Port device team_slave_1 added [ 86.197262][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.204337][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.230333][ T4286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.242467][ T4286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.249543][ T4286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.275657][ T4286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.307530][ T4286] device hsr_slave_0 entered promiscuous mode [ 86.314436][ T4286] device hsr_slave_1 entered promiscuous mode [ 86.321579][ T4286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.329704][ T4286] Cannot create hsr debugfs directory [ 87.954526][ T4255] Bluetooth: hci0: command 0x0409 tx timeout [ 88.762219][ T1175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.919170][ T1175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.001446][ T1175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.890586][ T4286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.903032][ T4286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.912669][ T4286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.937428][ T4286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.007990][ T4286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.020585][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.030611][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.041844][ T4286] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.048985][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 90.071054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.079974][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.089261][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.096424][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.119386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.127545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.136699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.145798][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.152858][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.163414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.178922][ T1175] device hsr_slave_0 left promiscuous mode [ 90.187863][ T1175] device hsr_slave_1 left promiscuous mode [ 90.195258][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.202719][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.211349][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.218960][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.226855][ T1175] device bridge_slave_1 left promiscuous mode [ 90.233103][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.246668][ T1175] device bridge_slave_0 left promiscuous mode [ 90.252832][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.270771][ T1175] device veth1_macvtap left promiscuous mode [ 90.277554][ T1175] device veth0_macvtap left promiscuous mode [ 90.283616][ T1175] device veth1_vlan left promiscuous mode [ 90.289753][ T1175] device veth0_vlan left promiscuous mode [ 90.459764][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 90.472690][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 90.487401][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.500836][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.559221][ T1175] bond0 (unregistering): Released all slaves [ 90.627891][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.637036][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.647277][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.656551][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.665324][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.673834][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.690180][ T4286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.700684][ T4286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.713250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.722521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.732633][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.741075][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.749678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.851522][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.859596][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.871326][ T4286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.902565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.911465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.925224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.933536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.942226][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.950617][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.960309][ T4286] device veth0_vlan entered promiscuous mode [ 90.974981][ T4286] device veth1_vlan entered promiscuous mode [ 90.993076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.001387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.010647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.019512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.029887][ T4286] device veth0_macvtap entered promiscuous mode [ 91.041699][ T4286] device veth1_macvtap entered promiscuous mode [ 91.059897][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.069554][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.082755][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.095072][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.103124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.112880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.125075][ T4286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.134218][ T4286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.142929][ T4286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.152756][ T4286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.228049][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.242854][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.258329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.281577][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.289861][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.298057][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.586573][ T4330] loop0: detected capacity change from 0 to 32768 [ 91.744431][ T4330] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 91.744431][ T4330] [ 91.764807][ T4330] ERROR: (device loop0): remounting filesystem as read-only [ 91.773358][ T4330] BUG: Bad page state in process syz.0.17 pfn:23324 [ 91.795325][ T4330] page:ffffea00008cc900 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2f pfn:0x23324 [ 91.823815][ T4330] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 91.833436][ T4330] raw: 00fff00000002006 ffffea00008a5508 ffffc90002e4f980 0000000000000000 [ 91.861350][ T4330] raw: 000000000000002f ffff88807343ce88 00000000ffffffff 0000000000000000 [ 91.870434][ T4330] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 91.880571][ T4330] page_owner tracks the page as allocated [ 91.887290][ T4330] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4330, ts 91734642286, free_ts 90901612736 [ 91.904331][ T4330] get_page_from_freelist+0x1bbd/0x1ca0 [ 91.909952][ T4330] __alloc_pages+0x1ee/0x480 [ 91.915127][ T4330] __page_cache_alloc+0xce/0x440 [ 91.920105][ T4330] pagecache_get_page+0x9b6/0xf10 [ 91.926738][ T4330] __get_metapage+0x282/0x1060 [ 91.931541][ T4330] diNewExt+0x9f1/0x2cc0 [ 91.936204][ T4330] diAllocAG+0xe19/0x1c30 [ 91.940640][ T4330] diAlloc+0x1c9/0x1900 [ 91.946729][ T4330] ialloc+0x89/0x940 [ 91.950672][ T4330] jfs_mkdir+0x1db/0xad0 [ 91.958015][ T4330] vfs_mkdir+0x387/0x570 [ 91.962460][ T4330] do_mkdirat+0x1df/0x5b0 [ 91.968360][ T4330] __x64_sys_mkdirat+0x85/0x90 [ 91.973292][ T4330] do_syscall_64+0x4c/0xa0 [ 91.978216][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.985697][ T4330] page last free stack trace: [ 91.990407][ T4330] free_unref_page_prepare+0x637/0x6c0 [ 91.998371][ T4330] free_unref_page+0x8f/0x2a0 [ 92.003108][ T4330] __unfreeze_partials+0x1a5/0x200 [ 92.010085][ T4330] put_cpu_partial+0x12d/0x190 [ 92.015147][ T4330] qlist_free_all+0x35/0x90 [ 92.019681][ T4330] kasan_quarantine_reduce+0x150/0x160 [ 92.026966][ T4330] __kasan_slab_alloc+0x2f/0xd0 [ 92.031858][ T4330] slab_post_alloc_hook+0x4c/0x380 [ 92.038971][ T4330] kmem_cache_alloc_trace+0x103/0x2a0 [ 92.045685][ T4330] netdevice_event+0x324/0x900 [ 92.050595][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 92.056408][ T4330] __dev_notify_flags+0x194/0x300 [ 92.061574][ T4330] dev_change_flags+0xe3/0x1a0 [ 92.068028][ T4330] vlan_device_event+0x568/0x1fa0 [ 92.073189][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 92.078975][ T4330] __dev_notify_flags+0x194/0x300 [ 92.085552][ T4330] Modules linked in: [ 92.089497][ T4330] CPU: 1 PID: 4330 Comm: syz.0.17 Not tainted syzkaller #0 [ 92.096708][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.106797][ T4330] Call Trace: [ 92.110110][ T4330] [ 92.113086][ T4330] dump_stack_lvl+0x188/0x250 [ 92.117834][ T4330] ? show_regs_print_info+0x20/0x20 [ 92.123077][ T4330] ? clockevents_increase_min_delta+0x130/0x130 [ 92.129361][ T4330] bad_page+0x14b/0x170 [ 92.133579][ T4330] free_unref_page_prepare+0x383/0x6c0 [ 92.139087][ T4330] free_unref_page_list+0x119/0x820 [ 92.144316][ T4330] ? uncharge_page+0x490/0x490 [ 92.149123][ T4330] ? free_unref_page_commit+0x4c0/0x4c0 [ 92.154716][ T4330] release_pages+0x186c/0x1be0 [ 92.159524][ T4330] ? lru_cache_disable+0x30/0x30 [ 92.164522][ T4330] __pagevec_release+0x6d/0xe0 [ 92.169312][ T4330] truncate_inode_pages_range+0x362/0xfe0 [ 92.175067][ T4330] ? invalidate_inode_page+0x360/0x360 [ 92.180558][ T4330] ? parse_options+0xcb4/0xe90 [ 92.185376][ T4330] ? jfs_fill_super+0xb00/0xb00 [ 92.190309][ T4330] ? shrink_dentry_list+0x66a/0x680 [ 92.195545][ T4330] ? sync_filesystem+0x103/0x220 [ 92.200526][ T4330] jfs_remount+0x33d/0x5b0 [ 92.204982][ T4330] ? jfs_statfs+0x550/0x550 [ 92.209541][ T4330] ? hook_sb_remount+0x19/0xc0 [ 92.214332][ T4330] ? bpf_lsm_sb_remount+0x5/0x10 [ 92.219316][ T4330] reconfigure_super+0x219/0x8a0 [ 92.224309][ T4330] vfs_fsconfig_locked+0x18d/0x3f0 [ 92.229483][ T4330] __se_sys_fsconfig+0x65a/0x790 [ 92.234456][ T4330] ? __x64_sys_fsconfig+0xc0/0xc0 [ 92.239517][ T4330] ? vtime_user_exit+0x2c8/0x3e0 [ 92.244487][ T4330] ? lockdep_hardirqs_on+0x94/0x140 [ 92.249715][ T4330] ? __x64_sys_fsconfig+0x1c/0xc0 [ 92.254761][ T4330] do_syscall_64+0x4c/0xa0 [ 92.259225][ T4330] ? clear_bhb_loop+0x30/0x80 [ 92.263920][ T4330] ? clear_bhb_loop+0x30/0x80 [ 92.268629][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.274559][ T4330] RIP: 0033:0x7fe87c177799 [ 92.279008][ T4330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.298678][ T4330] RSP: 002b:00007ffc14adaea8 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 92.307147][ T4330] RAX: ffffffffffffffda RBX: 00007fe87c3f0fa0 RCX: 00007fe87c177799 [ 92.315154][ T4330] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 92.323153][ T4330] RBP: 00007fe87c20dbd9 R08: 0000000000000000 R09: 0000000000000000 [ 92.331151][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.339146][ T4330] R13: 00007fe87c3f0fac R14: 00007fe87c3f0fa0 R15: 00007fe87c3f0fa0 [ 92.347165][ T4330] [ 92.352189][ T4254] Bluetooth: hci0: command 0x040f tx timeout [ 92.361969][ T4330] Disabling lock debugging due to kernel taint [ 92.371726][ T4330] BUG: Bad page state in process syz.0.17 pfn:22954 [ 92.379048][ T4330] page:ffffea00008a5500 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2e pfn:0x22954 [ 92.389563][ T4330] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 92.399346][ T4330] raw: 00fff00000002006 ffffea000089b888 ffffc90002e4f980 0000000000000000 [ 92.408453][ T4330] raw: 000000000000002e ffff88807343cd90 00000000ffffffff 0000000000000000 [ 92.417578][ T4330] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 92.425105][ T4330] page_owner tracks the page as allocated [ 92.430839][ T4330] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4330, ts 91734540934, free_ts 90901619080 [ 92.448552][ T4330] get_page_from_freelist+0x1bbd/0x1ca0 [ 92.454566][ T4330] __alloc_pages+0x1ee/0x480 [ 92.459777][ T4330] __page_cache_alloc+0xce/0x440 [ 92.464985][ T4330] pagecache_get_page+0x9b6/0xf10 [ 92.470114][ T4330] __get_metapage+0x282/0x1060 [ 92.475210][ T4330] diNewExt+0x9f1/0x2cc0 [ 92.479506][ T4330] diAllocAG+0xe19/0x1c30 [ 92.484305][ T4330] diAlloc+0x1c9/0x1900 [ 92.488506][ T4330] ialloc+0x89/0x940 [ 92.492423][ T4330] jfs_mkdir+0x1db/0xad0 [ 92.497386][ T4330] vfs_mkdir+0x387/0x570 [ 92.501664][ T4330] do_mkdirat+0x1df/0x5b0 [ 92.506390][ T4330] __x64_sys_mkdirat+0x85/0x90 [ 92.511380][ T4330] do_syscall_64+0x4c/0xa0 [ 92.517446][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.523446][ T4330] page last free stack trace: [ 92.528838][ T4330] free_unref_page_prepare+0x637/0x6c0 [ 92.535047][ T4330] free_unref_page+0x8f/0x2a0 [ 92.539761][ T4330] __unfreeze_partials+0x1a5/0x200 [ 92.545231][ T4330] put_cpu_partial+0x12d/0x190 [ 92.550028][ T4330] qlist_free_all+0x35/0x90 [ 92.555731][ T4330] kasan_quarantine_reduce+0x150/0x160 [ 92.561460][ T4330] __kasan_slab_alloc+0x2f/0xd0 [ 92.566974][ T4330] slab_post_alloc_hook+0x4c/0x380 [ 92.572385][ T4330] kmem_cache_alloc_trace+0x103/0x2a0 [ 92.578580][ T4330] netdevice_event+0x324/0x900 [ 92.583382][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 92.589113][ T4330] __dev_notify_flags+0x194/0x300 [ 92.599223][ T4330] dev_change_flags+0xe3/0x1a0 [ 92.608107][ T4330] vlan_device_event+0x568/0x1fa0 [ 92.614704][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 92.620234][ T4330] __dev_notify_flags+0x194/0x300 [ 92.625749][ T4330] Modules linked in: [ 92.629681][ T4330] CPU: 1 PID: 4330 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 92.638295][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.648373][ T4330] Call Trace: [ 92.651671][ T4330] [ 92.654618][ T4330] dump_stack_lvl+0x188/0x250 [ 92.659336][ T4330] ? show_regs_print_info+0x20/0x20 [ 92.664571][ T4330] ? clockevents_increase_min_delta+0x130/0x130 [ 92.670851][ T4330] bad_page+0x14b/0x170 [ 92.675089][ T4330] free_unref_page_prepare+0x383/0x6c0 [ 92.680583][ T4330] free_unref_page_list+0x119/0x820 [ 92.685812][ T4330] ? uncharge_page+0x490/0x490 [ 92.690609][ T4330] ? free_unref_page_commit+0x4c0/0x4c0 [ 92.696199][ T4330] release_pages+0x186c/0x1be0 [ 92.701005][ T4330] ? lru_cache_disable+0x30/0x30 [ 92.705973][ T4330] __pagevec_release+0x6d/0xe0 [ 92.710765][ T4330] truncate_inode_pages_range+0x362/0xfe0 [ 92.716536][ T4330] ? invalidate_inode_page+0x360/0x360 [ 92.722026][ T4330] ? parse_options+0xcb4/0xe90 [ 92.726822][ T4330] ? jfs_fill_super+0xb00/0xb00 [ 92.731711][ T4330] ? shrink_dentry_list+0x66a/0x680 [ 92.736941][ T4330] ? sync_filesystem+0x103/0x220 [ 92.742004][ T4330] jfs_remount+0x33d/0x5b0 [ 92.746449][ T4330] ? jfs_statfs+0x550/0x550 [ 92.750979][ T4330] ? hook_sb_remount+0x19/0xc0 [ 92.755765][ T4330] ? bpf_lsm_sb_remount+0x5/0x10 [ 92.760724][ T4330] reconfigure_super+0x219/0x8a0 [ 92.765692][ T4330] vfs_fsconfig_locked+0x18d/0x3f0 [ 92.770856][ T4330] __se_sys_fsconfig+0x65a/0x790 [ 92.775828][ T4330] ? __x64_sys_fsconfig+0xc0/0xc0 [ 92.780885][ T4330] ? vtime_user_exit+0x2c8/0x3e0 [ 92.785853][ T4330] ? lockdep_hardirqs_on+0x94/0x140 [ 92.791084][ T4330] ? __x64_sys_fsconfig+0x1c/0xc0 [ 92.796144][ T4330] do_syscall_64+0x4c/0xa0 [ 92.800588][ T4330] ? clear_bhb_loop+0x30/0x80 [ 92.805288][ T4330] ? clear_bhb_loop+0x30/0x80 [ 92.809969][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.815864][ T4330] RIP: 0033:0x7fe87c177799 [ 92.820279][ T4330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.840025][ T4330] RSP: 002b:00007ffc14adaea8 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 92.848443][ T4330] RAX: ffffffffffffffda RBX: 00007fe87c3f0fa0 RCX: 00007fe87c177799 [ 92.856421][ T4330] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 92.864395][ T4330] RBP: 00007fe87c20dbd9 R08: 0000000000000000 R09: 0000000000000000 [ 92.872378][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.880364][ T4330] R13: 00007fe87c3f0fac R14: 00007fe87c3f0fa0 R15: 00007fe87c3f0fa0 [ 92.888376][ T4330] [ 92.897732][ T4330] BUG: Bad page state in process syz.0.17 pfn:226e2 [ 92.907204][ T4330] page:ffffea000089b880 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x226e2 [ 92.918346][ T4330] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 92.928530][ T4330] raw: 00fff00000002006 ffffea0001d6a6c8 ffffc90002e4f980 0000000000000000 [ 92.939129][ T4330] raw: 000000000000002d ffff88807343cc98 00000000ffffffff 0000000000000000 [ 92.948131][ T4330] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 92.955773][ T4330] page_owner tracks the page as allocated [ 92.961529][ T4330] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4330, ts 91734495740, free_ts 90901624941 [ 92.994112][ T4330] get_page_from_freelist+0x1bbd/0x1ca0 [ 92.999733][ T4330] __alloc_pages+0x1ee/0x480 [ 93.013909][ T4330] __page_cache_alloc+0xce/0x440 [ 93.019027][ T4330] pagecache_get_page+0x9b6/0xf10 [ 93.033844][ T4330] __get_metapage+0x282/0x1060 [ 93.038824][ T4330] diNewExt+0x9f1/0x2cc0 [ 93.043107][ T4330] diAllocAG+0xe19/0x1c30 [ 93.052740][ T4330] diAlloc+0x1c9/0x1900 [ 93.057876][ T4330] ialloc+0x89/0x940 [ 93.061824][ T4330] jfs_mkdir+0x1db/0xad0 [ 93.066722][ T4330] vfs_mkdir+0x387/0x570 [ 93.071010][ T4330] do_mkdirat+0x1df/0x5b0 [ 93.086548][ T4330] __x64_sys_mkdirat+0x85/0x90 [ 93.091379][ T4330] do_syscall_64+0x4c/0xa0 [ 93.098552][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.105716][ T4330] page last free stack trace: [ 93.110422][ T4330] free_unref_page_prepare+0x637/0x6c0 [ 93.125572][ T4330] free_unref_page+0x8f/0x2a0 [ 93.130312][ T4330] __unfreeze_partials+0x1a5/0x200 [ 93.135945][ T4330] put_cpu_partial+0x12d/0x190 [ 93.141357][ T4330] qlist_free_all+0x35/0x90 [ 93.146694][ T4330] kasan_quarantine_reduce+0x150/0x160 [ 93.152735][ T4330] __kasan_slab_alloc+0x2f/0xd0 [ 93.157986][ T4330] slab_post_alloc_hook+0x4c/0x380 [ 93.163172][ T4330] kmem_cache_alloc_trace+0x103/0x2a0 [ 93.168889][ T4330] netdevice_event+0x324/0x900 [ 93.173694][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 93.179145][ T4330] __dev_notify_flags+0x194/0x300 [ 93.184763][ T4330] dev_change_flags+0xe3/0x1a0 [ 93.189587][ T4330] vlan_device_event+0x568/0x1fa0 [ 93.194730][ T4330] raw_notifier_call_chain+0xcb/0x160 [ 93.200131][ T4330] __dev_notify_flags+0x194/0x300 [ 93.205534][ T4330] Modules linked in: [ 93.209457][ T4330] CPU: 1 PID: 4330 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 93.218042][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.228103][ T4330] Call Trace: [ 93.231379][ T4330] [ 93.234307][ T4330] dump_stack_lvl+0x188/0x250 [ 93.238997][ T4330] ? show_regs_print_info+0x20/0x20 [ 93.244194][ T4330] ? clockevents_increase_min_delta+0x130/0x130 [ 93.250447][ T4330] bad_page+0x14b/0x170 [ 93.254624][ T4330] free_unref_page_prepare+0x383/0x6c0 [ 93.260079][ T4330] free_unref_page_list+0x119/0x820 [ 93.265278][ T4330] ? uncharge_page+0x490/0x490 [ 93.270062][ T4330] ? free_unref_page_commit+0x4c0/0x4c0 [ 93.275643][ T4330] release_pages+0x186c/0x1be0 [ 93.280431][ T4330] ? lru_cache_disable+0x30/0x30 [ 93.285370][ T4330] __pagevec_release+0x6d/0xe0 [ 93.290136][ T4330] truncate_inode_pages_range+0x362/0xfe0 [ 93.295880][ T4330] ? invalidate_inode_page+0x360/0x360 [ 93.301334][ T4330] ? parse_options+0xcb4/0xe90 [ 93.306094][ T4330] ? jfs_fill_super+0xb00/0xb00 [ 93.310940][ T4330] ? shrink_dentry_list+0x66a/0x680 [ 93.316142][ T4330] ? sync_filesystem+0x103/0x220 [ 93.321110][ T4330] jfs_remount+0x33d/0x5b0 [ 93.325560][ T4330] ? jfs_statfs+0x550/0x550 [ 93.330060][ T4330] ? hook_sb_remount+0x19/0xc0 [ 93.334824][ T4330] ? bpf_lsm_sb_remount+0x5/0x10 [ 93.339761][ T4330] reconfigure_super+0x219/0x8a0 [ 93.344705][ T4330] vfs_fsconfig_locked+0x18d/0x3f0 [ 93.349908][ T4330] __se_sys_fsconfig+0x65a/0x790 [ 93.354843][ T4330] ? __x64_sys_fsconfig+0xc0/0xc0 [ 93.359862][ T4330] ? vtime_user_exit+0x2c8/0x3e0 [ 93.364805][ T4330] ? lockdep_hardirqs_on+0x94/0x140 [ 93.370028][ T4330] ? __x64_sys_fsconfig+0x1c/0xc0 [ 93.375054][ T4330] do_syscall_64+0x4c/0xa0 [ 93.379473][ T4330] ? clear_bhb_loop+0x30/0x80 [ 93.384152][ T4330] ? clear_bhb_loop+0x30/0x80 [ 93.388838][ T4330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.394727][ T4330] RIP: 0033:0x7fe87c177799 [ 93.399145][ T4330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.418750][ T4330] RSP: 002b:00007ffc14adaea8 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 93.427160][ T4330] RAX: ffffffffffffffda RBX: 00007fe87c3f0fa0 RCX: 00007fe87c177799 [ 93.435129][ T4330] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 93.443098][ T4330] RBP: 00007fe87c20dbd9 R08: 0000000000000000 R09: 0000000000000000 [ 93.451073][ T4330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.459039][ T4330] R13: 00007fe87c3f0fac R14: 00007fe87c3f0fa0 R15: 00007fe87c3f0fa0 [ 93.467022][ T4330] [ 93.475118][ T155] read_mapping_page failed! [ 93.479659][ T155] ERROR: (device loop0): txCommit: [ 93.479659][ T155] [ 93.487642][ T13] cfg80211: failed to load regulatory.db [ 93.495652][ T155] ERROR: (device loop0): remounting filesystem as read-only [ 93.503024][ T155] jfs_write_inode: jfs_commit_inode failed! [ 93.510066][ T278] BUG: Bad page state in process jfsCommit pfn:23ea0 [ 93.517789][ T278] page:ffffea00008fa800 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2c pfn:0x23ea0 [ 93.529003][ T278] flags: 0xfff00000002005(locked|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 93.539263][ T278] raw: 00fff00000002005 dead000000000100 dead000000000122 0000000000000000 [ 93.548411][ T278] raw: 000000000000002c ffff88807343cba0 00000000ffffffff 0000000000000000 [ 93.558339][ T278] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 93.565822][ T278] page_owner tracks the page as allocated [ 93.571572][ T278] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4330, ts 91734272319, free_ts 91018684757 [ 93.587304][ T278] get_page_from_freelist+0x1bbd/0x1ca0 [ 93.592895][ T278] __alloc_pages+0x1ee/0x480 [ 93.597790][ T278] __page_cache_alloc+0xce/0x440 [ 93.602756][ T278] pagecache_get_page+0x9b6/0xf10 [ 93.608467][ T278] __get_metapage+0x282/0x1060 [ 93.613265][ T278] diNewExt+0x9f1/0x2cc0 [ 93.617789][ T278] diAllocAG+0xe19/0x1c30 [ 93.622146][ T278] diAlloc+0x1c9/0x1900 [ 93.626992][ T278] ialloc+0x89/0x940 [ 93.630916][ T278] jfs_mkdir+0x1db/0xad0 [ 93.636361][ T278] vfs_mkdir+0x387/0x570 [ 93.640663][ T278] do_mkdirat+0x1df/0x5b0 [ 93.645718][ T278] __x64_sys_mkdirat+0x85/0x90 [ 93.650510][ T278] do_syscall_64+0x4c/0xa0 [ 93.655319][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.661239][ T278] page last free stack trace: [ 93.666637][ T278] free_unref_page_prepare+0x637/0x6c0 [ 93.672132][ T278] free_unref_page+0x8f/0x2a0 [ 93.677050][ T278] qlist_free_all+0x35/0x90 [ 93.681580][ T278] kasan_quarantine_reduce+0x150/0x160 [ 93.687748][ T278] __kasan_slab_alloc+0x2f/0xd0 [ 93.692636][ T278] slab_post_alloc_hook+0x4c/0x380 [ 93.698014][ T278] kmem_cache_alloc_node+0x12d/0x2d0 [ 93.703333][ T278] __alloc_skb+0xf4/0x750 [ 93.708326][ T278] alloc_skb_with_frags+0xa7/0x730 [ 93.713467][ T278] sock_alloc_send_pskb+0x87f/0x9a0 [ 93.719122][ T278] unix_dgram_sendmsg+0x5fc/0x18a0 [ 93.724859][ T278] __sys_sendto+0x46d/0x620 [ 93.729426][ T278] __x64_sys_sendto+0xda/0xf0 [ 93.734476][ T278] do_syscall_64+0x4c/0xa0 [ 93.739260][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.748186][ T278] Modules linked in: [ 93.752113][ T278] CPU: 0 PID: 278 Comm: jfsCommit Tainted: G B syzkaller #0 [ 93.760718][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.770793][ T278] Call Trace: [ 93.774129][ T278] [ 93.777081][ T278] dump_stack_lvl+0x188/0x250 [ 93.781833][ T278] ? show_regs_print_info+0x20/0x20 [ 93.787056][ T278] ? clockevents_increase_min_delta+0x130/0x130 [ 93.793342][ T278] bad_page+0x14b/0x170 [ 93.797537][ T278] free_unref_page_prepare+0x383/0x6c0 [ 93.803035][ T278] free_unref_page+0x8f/0x2a0 [ 93.807740][ T278] ? mark_free_pages+0x5c0/0x5c0 [ 93.812701][ T278] ? __mem_cgroup_uncharge+0xab/0xe0 [ 93.818013][ T278] txUnlock+0x27e/0xcb0 [ 93.822201][ T278] jfs_lazycommit+0x581/0xb40 [ 93.826899][ T278] ? txFreelock+0x5a0/0x5a0 [ 93.831426][ T278] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 93.837378][ T278] ? sched_dynamic_update+0x210/0x210 [ 93.842786][ T278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.848705][ T278] ? __kthread_parkme+0x157/0x1b0 [ 93.853743][ T278] kthread+0x436/0x520 [ 93.857837][ T278] ? txFreelock+0x5a0/0x5a0 [ 93.862381][ T278] ? kthread_blkcg+0xd0/0xd0 [ 93.866986][ T278] ret_from_fork+0x1f/0x30 [ 93.871449][ T278] [ 93.878079][ T278] page:ffffea00008fa800 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2c pfn:0x23ea0 [ 93.888428][ T278] flags: 0xfff00000002005(locked|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 93.897927][ T278] raw: 00fff00000002005 dead000000000100 dead000000000122 0000000000000000 [ 93.906854][ T278] raw: 000000000000002c ffff88807343cba0 00000000ffffffff 0000000000000000 [ 93.915665][ T278] page dumped because: VM_BUG_ON_PAGE(((unsigned int) page_ref_count(page) + 127u <= 127u)) [ 93.925912][ T278] page_owner tracks the page as allocated [ 93.931645][ T278] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 4330, ts 91734272319, free_ts 91018684757 [ 93.947092][ T278] get_page_from_freelist+0x1bbd/0x1ca0 [ 93.952685][ T278] __alloc_pages+0x1ee/0x480 [ 93.957508][ T278] __page_cache_alloc+0xce/0x440 [ 93.962474][ T278] pagecache_get_page+0x9b6/0xf10 [ 93.967793][ T278] __get_metapage+0x282/0x1060 [ 93.972599][ T278] diNewExt+0x9f1/0x2cc0 [ 93.977123][ T278] diAllocAG+0xe19/0x1c30 [ 93.981497][ T278] diAlloc+0x1c9/0x1900 [ 93.986501][ T278] ialloc+0x89/0x940 [ 93.990613][ T278] jfs_mkdir+0x1db/0xad0 [ 93.995148][ T278] vfs_mkdir+0x387/0x570 [ 93.999460][ T278] do_mkdirat+0x1df/0x5b0 [ 94.004048][ T278] __x64_sys_mkdirat+0x85/0x90 [ 94.008993][ T278] do_syscall_64+0x4c/0xa0 [ 94.013465][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.019728][ T278] page last free stack trace: [ 94.024677][ T278] free_unref_page_prepare+0x637/0x6c0 [ 94.030178][ T278] free_unref_page+0x8f/0x2a0 [ 94.035154][ T278] qlist_free_all+0x35/0x90 [ 94.039689][ T278] kasan_quarantine_reduce+0x150/0x160 [ 94.045684][ T278] __kasan_slab_alloc+0x2f/0xd0 [ 94.050575][ T278] slab_post_alloc_hook+0x4c/0x380 [ 94.056362][ T278] kmem_cache_alloc_node+0x12d/0x2d0 [ 94.061683][ T278] __alloc_skb+0xf4/0x750 [ 94.066293][ T278] alloc_skb_with_frags+0xa7/0x730 [ 94.071435][ T278] sock_alloc_send_pskb+0x87f/0x9a0 [ 94.077387][ T278] unix_dgram_sendmsg+0x5fc/0x18a0 [ 94.082531][ T278] __sys_sendto+0x46d/0x620 [ 94.087281][ T278] __x64_sys_sendto+0xda/0xf0 [ 94.091996][ T278] do_syscall_64+0x4c/0xa0 [ 94.097685][ T278] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.104314][ T278] ------------[ cut here ]------------ [ 94.109793][ T278] kernel BUG at include/linux/mm.h:1224! [ 94.116226][ T278] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 94.122352][ T278] CPU: 0 PID: 278 Comm: jfsCommit Tainted: G B syzkaller #0 [ 94.130960][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.141041][ T278] RIP: 0010:put_metapage+0x278/0x280 [ 94.146375][ T278] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 92 be ec fe e9 f3 fe ff ff e8 b8 b2 a7 fe 48 8b 3c 24 48 c7 c6 e0 52 62 8a e8 38 99 da fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 94.166017][ T278] RSP: 0018:ffffc90002bcfce0 EFLAGS: 00010246 [ 94.172129][ T278] RAX: 412a48b102080100 RBX: ffff88807343cba0 RCX: 0000000000000000 [ 94.180138][ T278] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000579f90 [ 94.188136][ T278] RBP: 000000000000007f R08: ffff8880b902795b R09: fffff52000579f4c [ 94.196135][ T278] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff88807343cbc8 [ 94.204135][ T278] R13: ffffea00008fa834 R14: 1ffff1100e687979 R15: 1ffff1100e687986 [ 94.212135][ T278] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 94.221093][ T278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.227695][ T278] CR2: 000000c001498000 CR3: 000000002a5bd000 CR4: 00000000003506f0 [ 94.235689][ T278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.243682][ T278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.251676][ T278] Call Trace: [ 94.254974][ T278] [ 94.257922][ T278] txUnlock+0x427/0xcb0 [ 94.262103][ T278] jfs_lazycommit+0x581/0xb40 [ 94.266805][ T278] ? txFreelock+0x5a0/0x5a0 [ 94.271323][ T278] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 94.277246][ T278] ? sched_dynamic_update+0x210/0x210 [ 94.282642][ T278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 94.288559][ T278] ? __kthread_parkme+0x157/0x1b0 [ 94.293601][ T278] kthread+0x436/0x520 [ 94.297683][ T278] ? txFreelock+0x5a0/0x5a0 [ 94.302207][ T278] ? kthread_blkcg+0xd0/0xd0 [ 94.306817][ T278] ret_from_fork+0x1f/0x30 [ 94.311265][ T278] [ 94.314319][ T278] Modules linked in: [ 94.321414][ T278] ---[ end trace 739eef9bc7b5c899 ]--- [ 94.326943][ T278] RIP: 0010:put_metapage+0x278/0x280 [ 94.332263][ T278] Code: 38 c1 0f 8c 00 ff ff ff 4c 89 ef e8 92 be ec fe e9 f3 fe ff ff e8 b8 b2 a7 fe 48 8b 3c 24 48 c7 c6 e0 52 62 8a e8 38 99 da fe <0f> 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 70 [ 94.352288][ T278] RSP: 0018:ffffc90002bcfce0 EFLAGS: 00010246 [ 94.361370][ T278] RAX: 412a48b102080100 RBX: ffff88807343cba0 RCX: 0000000000000000 [ 94.369673][ T278] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000579f90 [ 94.377836][ T278] RBP: 00000000000000