Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. 1970/01/01 00:01:25 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:25 ignoring optional flag "type"="gce" 1970/01/01 00:01:25 parsed 1 programs [ 88.459528][ T4457] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 94.931323][ T4477] chnl_net:caif_netlink_parms(): no params data found [ 94.968638][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.970817][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.973571][ T4477] device bridge_slave_0 entered promiscuous mode [ 94.977205][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.979322][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.981949][ T4477] device bridge_slave_1 entered promiscuous mode [ 95.000777][ T4477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.005064][ T4477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.019965][ T4477] team0: Port device team_slave_0 added [ 95.023115][ T4477] team0: Port device team_slave_1 added [ 95.037124][ T4477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.039043][ T4477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.045832][ T4477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.053895][ T4477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.055754][ T4477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.062881][ T4477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.130877][ T4477] device hsr_slave_0 entered promiscuous mode [ 95.168280][ T4477] device hsr_slave_1 entered promiscuous mode [ 96.010342][ T4477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.060069][ T4477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.099722][ T4477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.150663][ T4477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.282739][ T4477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.290489][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.293123][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.298810][ T4477] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.313839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.316544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.321856][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.323921][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.340007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.344790][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.347563][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.350658][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.352672][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.357538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.366510][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.370941][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.376502][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.389328][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.394614][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.397710][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.410662][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.413460][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.419530][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.422311][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.430254][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.577740][ T4477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.586848][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.589666][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.603539][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.606410][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.641011][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.643801][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.646661][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.650671][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.655523][ T4477] device veth0_vlan entered promiscuous mode [ 96.663594][ T4477] device veth1_vlan entered promiscuous mode [ 96.685283][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.689686][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.692233][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.695291][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.702058][ T4477] device veth0_macvtap entered promiscuous mode [ 96.706623][ T4477] device veth1_macvtap entered promiscuous mode [ 96.720532][ T4477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.723565][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.726079][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.730187][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.733321][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.740586][ T4477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.749457][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.752664][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.757207][ T4477] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.763268][ T4477] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.765779][ T4477] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.768544][ T4477] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.254412][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.256662][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.259744][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.283711][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.285943][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.292046][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:38 executed programs: 0 [ 98.871543][ T4683] chnl_net:caif_netlink_parms(): no params data found [ 98.935874][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.938096][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.941757][ T4683] device bridge_slave_0 entered promiscuous mode [ 98.945547][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.947650][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.951591][ T4683] device bridge_slave_1 entered promiscuous mode [ 98.974855][ T4683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.990005][ T4683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.022486][ T4683] team0: Port device team_slave_0 added [ 99.026006][ T4683] team0: Port device team_slave_1 added [ 99.046973][ T4683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.049050][ T4683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.056257][ T4683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.061004][ T4683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.062937][ T4683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.071204][ T4683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.140161][ T4683] device hsr_slave_0 entered promiscuous mode [ 99.188270][ T4683] device hsr_slave_1 entered promiscuous mode [ 99.228382][ T4683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.230578][ T4683] Cannot create hsr debugfs directory [ 99.545812][ T153] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.818186][ T4134] Bluetooth: hci0: command 0x0409 tx timeout [ 102.344332][ T153] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.424660][ T153] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.475863][ T153] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.898822][ T4047] Bluetooth: hci0: command 0x041b tx timeout [ 103.409523][ T4683] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.440454][ T4683] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.470471][ T4683] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.530434][ T4683] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.617325][ T4683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.625591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.630912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.635613][ T4683] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.640902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.643609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.646099][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.648034][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.650606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.655763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.658969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.661573][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.663456][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.670780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.676121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.683713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.686950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.690958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 103.697033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 103.700440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 103.706237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.710515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.715806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.719221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.723873][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.801032][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.803123][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.809215][ T4683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.822144][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.824916][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.836869][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.840275][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.843015][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.845461][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.895368][ T4683] device veth0_vlan entered promiscuous mode [ 103.904857][ T4683] device veth1_vlan entered promiscuous mode [ 103.921216][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.923822][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.926396][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.929910][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.934907][ T4683] device veth0_macvtap entered promiscuous mode [ 103.940928][ T4683] device veth1_macvtap entered promiscuous mode [ 103.952695][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.955466][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.960637][ T4683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.962678][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.965875][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.968919][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.971600][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.976197][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.979785][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.983460][ T4683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.985475][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.988468][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.993914][ T4683] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.996279][ T4683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.999089][ T4683] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.001375][ T4683] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.039755][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.042002][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.044847][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.059644][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.061788][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.064830][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:44 executed programs: 2 [ 104.301207][ T4920] loop0: detected capacity change from 0 to 32768 [ 104.393203][ T241] BUG: spinlock bad magic on CPU#0, jfsCommit/241 [ 104.394958][ T241] lock: 0xffff0000ebd9caa8, .magic: ffff8000, .owner: €ÒÙë/0, .owner_cpu: 512 [ 104.397301][ T241] CPU: 0 PID: 241 Comm: jfsCommit Not tainted 5.15.185-syzkaller #0 [ 104.399418][ T241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.402101][ T241] Call trace: [ 104.403003][ T241] dump_backtrace+0x0/0x43c [ 104.404232][ T241] show_stack+0x2c/0x3c [ 104.405339][ T241] __dump_stack+0x30/0x40 [ 104.406501][ T241] dump_stack_lvl+0xf8/0x160 [ 104.407720][ T241] dump_stack+0x1c/0x5c [ 104.408849][ T241] spin_dump+0x110/0x208 [ 104.409972][ T241] do_raw_spin_lock+0x1e0/0x2f0 [ 104.411270][ T241] _raw_spin_lock_irqsave+0xcc/0x14c [ 104.412682][ T241] __wake_up+0xe0/0x16c [ 104.413780][ T241] release_metapage+0x17c/0x920 [ 104.415073][ T241] xtTruncate+0xb70/0x2698 [ 104.416253][ T241] jfs_free_zero_link+0x2a4/0x410 [ 104.417582][ T241] jfs_evict_inode+0x2fc/0x3fc [ 104.418855][ T241] evict+0x3c8/0x810 [ 104.419906][ T241] iput+0x6c4/0x77c [ 104.420945][ T241] txUpdateMap+0x6ac/0x7cc [ 104.422123][ T241] jfs_lazycommit+0x384/0x9bc [ 104.423352][ T241] kthread+0x374/0x454 [ 104.424459][ T241] ret_from_fork+0x10/0x20 [ 104.425691][ T241] ================================================================================ [ 104.428159][ T241] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 104.430351][ T241] index 1112 is out of range for type 'unsigned long[8]' [ 104.432204][ T241] CPU: 0 PID: 241 Comm: jfsCommit Not tainted 5.15.185-syzkaller #0 [ 104.434327][ T241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.436990][ T241] Call trace: [ 104.437852][ T241] dump_backtrace+0x0/0x43c [ 104.439050][ T241] show_stack+0x2c/0x3c [ 104.440150][ T241] __dump_stack+0x30/0x40 [ 104.441299][ T241] dump_stack_lvl+0xf8/0x160 [ 104.442513][ T241] dump_stack+0x1c/0x5c [ 104.443626][ T241] ubsan_epilogue+0x14/0x48 [ 104.444825][ T241] __ubsan_handle_out_of_bounds+0xd4/0x108 [ 104.446360][ T241] queued_spin_lock_slowpath+0x724/0x798 [ 104.447871][ T241] do_raw_spin_lock+0x2ec/0x2f0 [ 104.449172][ T241] _raw_spin_lock_irqsave+0xcc/0x14c [ 104.450573][ T241] __wake_up+0xe0/0x16c [ 104.451669][ T241] release_metapage+0x17c/0x920 [ 104.452972][ T241] xtTruncate+0xb70/0x2698 [ 104.454233][ T241] jfs_free_zero_link+0x2a4/0x410 [ 104.455631][ T241] jfs_evict_inode+0x2fc/0x3fc [ 104.456943][ T241] evict+0x3c8/0x810 [ 104.457984][ T241] iput+0x6c4/0x77c [ 104.459000][ T241] txUpdateMap+0x6ac/0x7cc [ 104.460169][ T241] jfs_lazycommit+0x384/0x9bc [ 104.461418][ T241] kthread+0x374/0x454 [ 104.462538][ T241] ret_from_fork+0x10/0x20 [ 104.463725][ T241] ================================================================================ [ 104.466196][ T241] ================================================================== [ 104.468338][ T241] BUG: KASAN: use-after-free in queued_spin_lock_slowpath+0x57c/0x798 [ 104.470547][ T241] Write of size 8 at addr ffff0000215971b4 by task jfsCommit/241 [ 104.472598][ T241] [ 104.473204][ T241] CPU: 0 PID: 241 Comm: jfsCommit Not tainted 5.15.185-syzkaller #0 [ 104.475340][ T241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.478021][ T241] Call trace: [ 104.478891][ T241] dump_backtrace+0x0/0x43c [ 104.480096][ T241] show_stack+0x2c/0x3c [ 104.481214][ T241] __dump_stack+0x30/0x40 [ 104.482395][ T241] dump_stack_lvl+0xf8/0x160 [ 104.483609][ T241] print_address_description+0x78/0x30c [ 104.485078][ T241] kasan_report+0xec/0x15c [ 104.486233][ T241] __asan_report_store8_noabort+0x44/0x50 [ 104.487714][ T241] queued_spin_lock_slowpath+0x57c/0x798 [ 104.489293][ T241] do_raw_spin_lock+0x2ec/0x2f0 [ 104.490587][ T241] _raw_spin_lock_irqsave+0xcc/0x14c [ 104.492002][ T241] __wake_up+0xe0/0x16c [ 104.493116][ T241] release_metapage+0x17c/0x920 [ 104.494394][ T241] xtTruncate+0xb70/0x2698 [ 104.495569][ T241] jfs_free_zero_link+0x2a4/0x410 [ 104.496883][ T241] jfs_evict_inode+0x2fc/0x3fc [ 104.498137][ T241] evict+0x3c8/0x810 [ 104.499181][ T241] iput+0x6c4/0x77c [ 104.500202][ T241] txUpdateMap+0x6ac/0x7cc [ 104.501380][ T241] jfs_lazycommit+0x384/0x9bc [ 104.502632][ T241] kthread+0x374/0x454 [ 104.503714][ T241] ret_from_fork+0x10/0x20 [ 104.504879][ T241] [ 104.505485][ T241] The buggy address belongs to the page: [ 104.506955][ T241] page:000000000d4c75f8 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61597 [ 104.509686][ T241] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 104.511609][ T241] raw: 01ffc00000000000 fffffc00008565c8 fffffc00008565c8 0000000000000000 [ 104.513886][ T241] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 104.516162][ T241] page dumped because: kasan: bad access detected [ 104.517855][ T241] [ 104.518460][ T241] Memory state around the buggy address: [ 104.520096][ T241] ffff000021597080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.522237][ T241] ffff000021597100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.524391][ T241] >ffff000021597180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.526523][ T241] ^ [ 104.528039][ T241] ffff000021597200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.530238][ T241] ffff000021597280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.532379][ T241] ================================================================== [ 104.978562][ T4047] Bluetooth: hci0: command 0x040f tx timeout [ 107.058118][ T4047] Bluetooth: hci0: command 0x0419 tx timeout