Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. 1970/01/01 00:01:23 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:23 ignoring optional flag "type"="gce" 1970/01/01 00:01:24 parsed 1 programs [ 86.954862][ T4423] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 93.664484][ T4471] chnl_net:caif_netlink_parms(): no params data found [ 93.699076][ T4471] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.700697][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.702866][ T4471] device bridge_slave_0 entered promiscuous mode [ 93.706079][ T4471] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.708226][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.710686][ T4471] device bridge_slave_1 entered promiscuous mode [ 93.727643][ T4471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.731615][ T4471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.746840][ T4471] team0: Port device team_slave_0 added [ 93.751584][ T4471] team0: Port device team_slave_1 added [ 93.764598][ T4471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.766175][ T4471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.771784][ T4471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.775475][ T4471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.777004][ T4471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.782808][ T4471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.860447][ T4471] device hsr_slave_0 entered promiscuous mode [ 93.897588][ T4471] device hsr_slave_1 entered promiscuous mode [ 94.723096][ T4471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.759498][ T4471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.809225][ T4471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.829887][ T4471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.943474][ T4471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.952593][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.954466][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.961959][ T4471] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.966146][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.968368][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.970244][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.971683][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.973462][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.980530][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.982536][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.984410][ T1753] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.985729][ T1753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.994446][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.999762][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.003483][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.006174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.012889][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.016695][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.020796][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.027105][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.031000][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.035575][ T4471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.040835][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.043292][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.045495][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.148046][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.149582][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.156468][ T4471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.172245][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.174400][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.189566][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.191713][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.194435][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.196809][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.203449][ T4471] device veth0_vlan entered promiscuous mode [ 95.210136][ T4471] device veth1_vlan entered promiscuous mode [ 95.224766][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.228383][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.230444][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.232618][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.238714][ T4471] device veth0_macvtap entered promiscuous mode [ 95.242480][ T4471] device veth1_macvtap entered promiscuous mode [ 95.255682][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.257483][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.259449][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.261387][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.263563][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.273422][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.275017][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.278877][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.283721][ T4471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.285507][ T4471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.287174][ T4471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.292031][ T4471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.703391][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.705289][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.710724][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.733870][ T296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.735685][ T296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.738742][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:35 executed programs: 0 [ 96.031446][ T4605] chnl_net:caif_netlink_parms(): no params data found [ 96.085048][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.086501][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.091598][ T4605] device bridge_slave_0 entered promiscuous mode [ 96.094890][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.096371][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.098672][ T4605] device bridge_slave_1 entered promiscuous mode [ 96.119193][ T4605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.123202][ T4605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.142942][ T4605] team0: Port device team_slave_0 added [ 96.146421][ T4605] team0: Port device team_slave_1 added [ 96.193132][ T4605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.194494][ T4605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.200214][ T4605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.204123][ T4605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.205502][ T4605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.210849][ T4605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.269497][ T4605] device hsr_slave_0 entered promiscuous mode [ 96.297753][ T4605] device hsr_slave_1 entered promiscuous mode [ 96.308534][ T4605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.310070][ T4605] Cannot create hsr debugfs directory [ 96.368317][ T4605] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.959157][ T1534] Bluetooth: hci0: command 0x0409 tx timeout [ 98.789678][ T4605] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.037910][ T4099] Bluetooth: hci0: command 0x041b tx timeout [ 100.534898][ T4605] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.611122][ T4605] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.802961][ T4605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.834889][ T4605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.869315][ T4605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.889609][ T4605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.005603][ T4605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.012556][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.014722][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.020156][ T4605] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.025776][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.028245][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.030323][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.031799][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.034297][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.040174][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.042475][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.044500][ T1753] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.045945][ T1753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.052331][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.057139][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.064386][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.068071][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.070417][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.074919][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.078192][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.097650][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.099922][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.102052][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.104015][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.109424][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.182160][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.183998][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.190561][ T4605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.202825][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.205167][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.220715][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.223344][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.225847][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.228604][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.230766][ T4605] device veth0_vlan entered promiscuous mode [ 101.238516][ T4605] device veth1_vlan entered promiscuous mode [ 101.252353][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.254582][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.256766][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.260453][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.280300][ T4605] device veth0_macvtap entered promiscuous mode [ 101.285600][ T4605] device veth1_macvtap entered promiscuous mode [ 101.294905][ T4605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.297010][ T4605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.300949][ T4605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.303399][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.305688][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.309759][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.312072][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.315286][ T4605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.318437][ T4605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.321291][ T4605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.323342][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.325675][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.332985][ T4605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.334965][ T4605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.336728][ T4605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.339341][ T4605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.415041][ T338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.416843][ T338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.419538][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.440979][ T1753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.442666][ T1753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.445261][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:41 executed programs: 2 [ 101.692638][ T4847] loop0: detected capacity change from 0 to 32768 [ 101.756082][ T240] BUG: spinlock bad magic on CPU#1, jfsCommit/240 [ 101.757430][ T240] lock: 0xffff0000e23fc168, .magic: ffff8000, .owner: @É?â/0, .owner_cpu: 512 [ 101.759410][ T240] CPU: 1 PID: 240 Comm: jfsCommit Not tainted 5.15.175-syzkaller #0 [ 101.761184][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.763427][ T240] Call trace: [ 101.764122][ T240] dump_backtrace+0x0/0x530 [ 101.765110][ T240] show_stack+0x2c/0x3c [ 101.766006][ T240] dump_stack_lvl+0x108/0x170 [ 101.767157][ T240] dump_stack+0x1c/0x58 [ 101.768171][ T240] spin_bug+0x124/0x240 [ 101.769084][ T240] do_raw_spin_lock+0x200/0x35c [ 101.770077][ T240] _raw_spin_lock_irqsave+0xcc/0x14c [ 101.771176][ T240] __wake_up+0xe8/0x1a0 [ 101.771998][ T240] release_metapage+0x17c/0x918 [ 101.772977][ T240] xtTruncate+0xc90/0x2b10 [ 101.773932][ T240] jfs_free_zero_link+0x374/0x598 [ 101.775027][ T240] jfs_evict_inode+0x308/0x408 [ 101.775988][ T240] evict+0x418/0x894 [ 101.776806][ T240] iput+0x744/0x824 [ 101.777537][ T240] txUpdateMap+0x76c/0x914 [ 101.778419][ T240] jfs_lazycommit+0x3b0/0xa40 [ 101.779451][ T240] kthread+0x37c/0x45c [ 101.780328][ T240] ret_from_fork+0x10/0x20 [ 101.781285][ T240] ================================================================================ [ 101.783291][ T240] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 101.785132][ T240] index 1150 is out of range for type 'unsigned long[8]' [ 101.786671][ T240] CPU: 1 PID: 240 Comm: jfsCommit Not tainted 5.15.175-syzkaller #0 [ 101.788458][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.790691][ T240] Call trace: [ 101.791441][ T240] dump_backtrace+0x0/0x530 [ 101.792391][ T240] show_stack+0x2c/0x3c [ 101.793249][ T240] dump_stack_lvl+0x108/0x170 [ 101.794235][ T240] dump_stack+0x1c/0x58 [ 101.795071][ T240] __ubsan_handle_out_of_bounds+0x108/0x15c [ 101.796309][ T240] queued_spin_lock_slowpath+0x854/0x938 [ 101.797479][ T240] do_raw_spin_lock+0x334/0x35c [ 101.798534][ T240] _raw_spin_lock_irqsave+0xcc/0x14c [ 101.799765][ T240] __wake_up+0xe8/0x1a0 [ 101.800696][ T240] release_metapage+0x17c/0x918 [ 101.801765][ T240] xtTruncate+0xc90/0x2b10 [ 101.802699][ T240] jfs_free_zero_link+0x374/0x598 [ 101.803810][ T240] jfs_evict_inode+0x308/0x408 [ 101.804889][ T240] evict+0x418/0x894 [ 101.805673][ T240] iput+0x744/0x824 [ 101.806521][ T240] txUpdateMap+0x76c/0x914 [ 101.807560][ T240] jfs_lazycommit+0x3b0/0xa40 [ 101.808564][ T240] kthread+0x37c/0x45c [ 101.809443][ T240] ret_from_fork+0x10/0x20 [ 101.810474][ T240] ================================================================================ [ 101.812442][ T240] ================================================================== [ 101.814174][ T240] BUG: KASAN: use-after-free in queued_spin_lock_slowpath+0x364/0x938 [ 101.815987][ T240] Write of size 8 at addr ffff000027884790 by task jfsCommit/240 [ 101.817538][ T240] [ 101.818064][ T240] CPU: 1 PID: 240 Comm: jfsCommit Not tainted 5.15.175-syzkaller #0 [ 101.819743][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.821825][ T240] Call trace: [ 101.822519][ T240] dump_backtrace+0x0/0x530 [ 101.823458][ T240] show_stack+0x2c/0x3c [ 101.824326][ T240] dump_stack_lvl+0x108/0x170 [ 101.825378][ T240] print_address_description+0x7c/0x3f0 [ 101.826619][ T240] kasan_report+0x174/0x1e4 [ 101.827621][ T240] __asan_report_store8_noabort+0x44/0x50 [ 101.828921][ T240] queued_spin_lock_slowpath+0x364/0x938 [ 101.830149][ T240] do_raw_spin_lock+0x334/0x35c [ 101.831092][ T240] _raw_spin_lock_irqsave+0xcc/0x14c [ 101.832413][ T240] __wake_up+0xe8/0x1a0 [ 101.833278][ T240] release_metapage+0x17c/0x918 [ 101.834322][ T240] xtTruncate+0xc90/0x2b10 [ 101.835336][ T240] jfs_free_zero_link+0x374/0x598 [ 101.836488][ T240] jfs_evict_inode+0x308/0x408 [ 101.837564][ T240] evict+0x418/0x894 [ 101.838486][ T240] iput+0x744/0x824 [ 101.839245][ T240] txUpdateMap+0x76c/0x914 [ 101.840085][ T240] jfs_lazycommit+0x3b0/0xa40 [ 101.841104][ T240] kthread+0x37c/0x45c [ 101.842043][ T240] ret_from_fork+0x10/0x20 [ 101.842930][ T240] [ 101.843433][ T240] The buggy address belongs to the page: [ 101.844608][ T240] page:000000002dc4baf8 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67884 [ 101.846712][ T240] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 101.848241][ T240] raw: 01ffc00000000000 fffffc00009e2108 fffffc00009e2108 0000000000000000 [ 101.850026][ T240] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 101.851982][ T240] page dumped because: kasan: bad access detected [ 101.853404][ T240] [ 101.853879][ T240] Memory state around the buggy address: [ 101.855045][ T240] ffff000027884680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.856749][ T240] ffff000027884700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.858637][ T240] >ffff000027884780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.860487][ T240] ^ [ 101.861504][ T240] ffff000027884800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.863156][ T240] ffff000027884880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 101.865003][ T240] ==================================================================