------------[ cut here ]------------ WARNING: CPU: 1 PID: 6463 at fs/jfs/jfs_dmap.c:2878 dbAdjTree+0x3d8/0x4b8 fs/jfs/jfs_dmap.c:2878 Modules linked in: CPU: 1 PID: 6463 Comm: syz.7.278 Tainted: G W 6.1.122-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : dbAdjTree+0x3d8/0x4b8 fs/jfs/jfs_dmap.c:2878 lr : dbAdjTree+0x3d8/0x4b8 fs/jfs/jfs_dmap.c:2878 sp : ffff800021766fa0 x29: ffff800021766fb0 x28: ffff0000f5b82804 x27: 0000000000000001 x26: 0000000000020056 x25: 1fffe0001eb70404 x24: dfff800000000000 x23: ffff0000f5b82018 x22: 0000000000000155 x21: 0000000000000004 x20: 0000000000000001 x19: ffff0000f5b82010 x18: ffff800021766de0 x17: ffff800018b7b000 x16: ffff8000082ffa88 x15: 0000000000000000 x14: 0000000000000406 x13: ffff0000d76f5340 x12: 0000000000000001 x11: 0000000000ff0100 x10: 0000000000000000 x9 : ffff800009a302bc x8 : ffff0000d76f5340 x7 : ffff80000875bd24 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000004 x1 : 0000000000000155 x0 : 0000000000020056 Call trace: dbAdjTree+0x3d8/0x4b8 fs/jfs/jfs_dmap.c:2878 dbJoin+0x1ec/0x2a4 fs/jfs/jfs_dmap.c:2846 dbFreeBits+0x458/0xc30 fs/jfs/jfs_dmap.c:2343 dbFreeDmap fs/jfs/jfs_dmap.c:2092 [inline] dbFree+0x2d4/0x5b0 fs/jfs/jfs_dmap.c:409 txFreeMap+0x7e8/0xb84 fs/jfs/jfs_txnmgr.c:2515 xtTruncate+0xb0c/0x2a08 fs/jfs/jfs_xtree.c:2467 jfs_free_zero_link+0x374/0x598 fs/jfs/namei.c:758 jfs_evict_inode+0x300/0x3f4 fs/jfs/inode.c:153 evict+0x418/0x894 fs/inode.c:705 iput_final fs/inode.c:1834 [inline] iput+0x7c0/0x8a4 fs/inode.c:1860 dentry_unlink_inode+0x37c/0x4bc fs/dcache.c:405 __dentry_kill+0x324/0x5e4 fs/dcache.c:611 dentry_kill+0xc8/0x250 dput+0x218/0x454 fs/dcache.c:918 __fput+0x488/0x7c8 fs/file_table.c:328 ____fput+0x20/0x30 fs/file_table.c:348 task_work_run+0x240/0x2f0 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 4432 hardirqs last enabled at (4431): [] __raw_spin_unlock_irq include/linux/spinlock_api_smp.h:159 [inline] hardirqs last enabled at (4431): [] _raw_spin_unlock_irq+0x3c/0x90 kernel/locking/spinlock.c:202 hardirqs last disabled at (4432): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (4324): [] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (4324): [] remove_user_radios drivers/net/wireless/mac80211_hwsim.c:5386 [inline] softirqs last enabled at (4324): [] mac80211_hwsim_netlink_notify+0x380/0x7c4 drivers/net/wireless/mac80211_hwsim.c:5404 softirqs last disabled at (4322): [] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (4322): [] remove_user_radios drivers/net/wireless/mac80211_hwsim.c:5377 [inline] softirqs last disabled at (4322): [] mac80211_hwsim_netlink_notify+0x114/0x7c4 drivers/net/wireless/mac80211_hwsim.c:5404 ---[ end trace 0000000000000000 ]---