Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. 1970/01/01 00:01:07 parsed 1 programs [ 68.401792][ T4490] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.611012][ T1540] cfg80211: failed to load regulatory.db [ 69.619380][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.620486][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.015194][ T4503] chnl_net:caif_netlink_parms(): no params data found [ 70.034957][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.036150][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.037623][ T4503] device bridge_slave_0 entered promiscuous mode [ 70.040051][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.041630][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.043224][ T4503] device bridge_slave_1 entered promiscuous mode [ 70.051692][ T4503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.054091][ T4503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.064082][ T4503] team0: Port device team_slave_0 added [ 70.066165][ T4503] team0: Port device team_slave_1 added [ 70.072947][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.074038][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.077948][ T4503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.080342][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.081352][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.084971][ T4503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.140085][ T4503] device hsr_slave_0 entered promiscuous mode [ 70.189196][ T4503] device hsr_slave_1 entered promiscuous mode [ 70.849940][ T4503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.890376][ T4503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.922137][ T4503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.970243][ T4503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.125731][ T4503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.130767][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.132195][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.135354][ T4503] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.137960][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.140774][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.142188][ T1605] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.143265][ T1605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.144890][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.150945][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.152562][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.153978][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.155090][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.158600][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.165665][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.168678][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.173116][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.174887][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.177823][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.181707][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.186246][ T4503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.187822][ T4503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.191098][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.192585][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.194137][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.195890][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.209383][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.241596][ T4503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.249984][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.251361][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.252563][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.254184][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.270601][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.272217][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.273949][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.275207][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.280982][ T4503] device veth0_vlan entered promiscuous mode [ 71.290945][ T4503] device veth1_vlan entered promiscuous mode [ 71.300999][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.302508][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.303866][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.305264][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.307555][ T4503] device veth0_macvtap entered promiscuous mode [ 71.313330][ T4503] device veth1_macvtap entered promiscuous mode [ 71.318484][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.331069][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.332540][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.333943][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.335300][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.337516][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.340513][ T4503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.341896][ T4503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.343223][ T4503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.344558][ T4503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.359544][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.361144][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.682606][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.683971][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.685678][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.693397][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.694755][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.696624][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.044153][ T4207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:12 executed programs: 0 [ 72.971423][ T4801] chnl_net:caif_netlink_parms(): no params data found [ 72.993309][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.994509][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.996100][ T4801] device bridge_slave_0 entered promiscuous mode [ 72.998295][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.000027][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.001593][ T4801] device bridge_slave_1 entered promiscuous mode [ 73.012216][ T4801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.015008][ T4801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.024483][ T4801] team0: Port device team_slave_0 added [ 73.026565][ T4801] team0: Port device team_slave_1 added [ 73.035287][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.036431][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.041434][ T4801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.043852][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.045016][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.049906][ T4801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.100510][ T4801] device hsr_slave_0 entered promiscuous mode [ 73.139372][ T4801] device hsr_slave_1 entered promiscuous mode [ 73.169257][ T4801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.170424][ T4801] Cannot create hsr debugfs directory [ 74.832181][ T4207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.969002][ T4160] Bluetooth: hci0: command 0x0409 tx timeout [ 77.049104][ T4160] Bluetooth: hci0: command 0x041b tx timeout [ 77.362457][ T4207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.403783][ T4207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.544077][ T4801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.570855][ T4801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.610143][ T4801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.660671][ T4801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.737008][ T4801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.741964][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.743512][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.746185][ T4801] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.748695][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.750812][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.752302][ T1756] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.753438][ T1756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.754824][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.757449][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.760581][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.762094][ T1756] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.763145][ T1756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.777707][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.780107][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.783665][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.785427][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.787799][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.790332][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.792057][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.795005][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.796442][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.800354][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.801912][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.804275][ T4801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.845738][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.847116][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.851835][ T4801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.858296][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.860301][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.867798][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.869863][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.871458][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.872807][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.875399][ T4801] device veth0_vlan entered promiscuous mode [ 78.879842][ T4801] device veth1_vlan entered promiscuous mode [ 78.887529][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.889135][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.890603][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.892094][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.894780][ T4801] device veth0_macvtap entered promiscuous mode [ 78.897369][ T4801] device veth1_macvtap entered promiscuous mode [ 78.905788][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.907396][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.909616][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.911000][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.912488][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.913861][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.915395][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.917704][ T4801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.919934][ T4801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.922125][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.923356][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.924941][ T1756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.927682][ T4801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.929818][ T4801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.931125][ T4801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.932470][ T4801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.955745][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.957111][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.958679][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.967975][ T1756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.970184][ T1756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.972025][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:18 executed programs: 2 [ 79.094149][ T5006] loop0: detected capacity change from 0 to 32768 [ 79.105810][ T5006] read_mapping_page failed! [ 79.106882][ T5006] ERROR: (device loop0): txAbort: [ 79.106882][ T5006] [ 79.108498][ T5006] ERROR: (device loop0): remounting filesystem as read-only [ 79.119534][ T4801] BUG: spinlock bad magic on CPU#1, syz-executor/4801 [ 79.120615][ T4801] lock: 0xffff0000ee44caa8, .magic: ffff8000, .owner: €ÒDî/0, .owner_cpu: 512 [ 79.121915][ T4801] CPU: 1 PID: 4801 Comm: syz-executor Not tainted syzkaller #0 [ 79.123011][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 79.124482][ T4801] Call trace: [ 79.124943][ T4801] dump_backtrace+0x0/0x43c [ 79.125628][ T4801] show_stack+0x2c/0x3c [ 79.126201][ T4801] __dump_stack+0x30/0x40 [ 79.126780][ T4801] dump_stack_lvl+0xf8/0x160 [ 79.127444][ T4801] dump_stack+0x1c/0x5c [ 79.128008][ T4801] spin_dump+0x110/0x208 [ 79.128580][ T4801] do_raw_spin_lock+0x1e0/0x2f0 [ 79.129265][ T4801] _raw_spin_lock_irqsave+0xcc/0x14c [ 79.130061][ T4801] __wake_up+0xe0/0x16c [ 79.130689][ T4801] release_metapage+0x17c/0x920 [ 79.131402][ T4801] xtTruncate+0xb70/0x2698 [ 79.132190][ T4801] jfs_free_zero_link+0x2a4/0x410 [ 79.133052][ T4801] jfs_evict_inode+0x2fc/0x3fc [ 79.133815][ T4801] evict+0x3c8/0x810 [ 79.134427][ T4801] iput+0x6c4/0x77c [ 79.135011][ T4801] dentry_unlink_inode+0x360/0x438 [ 79.135802][ T4801] __dentry_kill+0x320/0x598 [ 79.136526][ T4801] shrink_dentry_list+0x410/0x7c8 [ 79.137331][ T4801] shrink_dcache_parent+0xb0/0x354 [ 79.138103][ T4801] do_one_tree+0x2c/0xf0 [ 79.138724][ T4801] shrink_dcache_for_umount+0x68/0x114 [ 79.139492][ T4801] generic_shutdown_super+0x68/0x2f0 [ 79.140278][ T4801] kill_block_super+0x70/0xdc [ 79.140939][ T4801] deactivate_locked_super+0xb8/0x13c [ 79.141723][ T4801] deactivate_super+0xf8/0x118 [ 79.142418][ T4801] cleanup_mnt+0x3a4/0x458 [ 79.143068][ T4801] __cleanup_mnt+0x20/0x30 [ 79.143689][ T4801] task_work_run+0x12c/0x1e0 [ 79.144355][ T4801] do_notify_resume+0x24b4/0x3128 [ 79.145077][ T4801] el0_svc+0xf0/0x1e0 [ 79.145627][ T4801] el0t_64_sync_handler+0xcc/0xe4 [ 79.146369][ T4801] el0t_64_sync+0x1a0/0x1a4 [ 79.147090][ T4801] ================================================================================ [ 79.148449][ T4801] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 79.149686][ T4801] index 1112 is out of range for type 'unsigned long[8]' [ 79.150720][ T4801] CPU: 1 PID: 4801 Comm: syz-executor Not tainted syzkaller #0 [ 79.151778][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 79.153197][ T4801] Call trace: [ 79.153697][ T4801] dump_backtrace+0x0/0x43c [ 79.154329][ T4801] show_stack+0x2c/0x3c [ 79.154867][ T4801] __dump_stack+0x30/0x40 [ 79.155493][ T4801] dump_stack_lvl+0xf8/0x160 [ 79.156209][ T4801] dump_stack+0x1c/0x5c [ 79.156826][ T4801] ubsan_epilogue+0x14/0x48 [ 79.157496][ T4801] __ubsan_handle_out_of_bounds+0xd4/0x108 [ 79.158332][ T4801] queued_spin_lock_slowpath+0x724/0x798 [ 79.159128][ T4801] do_raw_spin_lock+0x2ec/0x2f0 [ 79.159855][ T4801] _raw_spin_lock_irqsave+0xcc/0x14c [ 79.160581][ T4801] __wake_up+0xe0/0x16c [ 79.161177][ T4801] release_metapage+0x17c/0x920 [ 79.161933][ T4801] xtTruncate+0xb70/0x2698 [ 79.162569][ T4801] jfs_free_zero_link+0x2a4/0x410 [ 79.163350][ T4801] jfs_evict_inode+0x2fc/0x3fc [ 79.164016][ T4801] evict+0x3c8/0x810 [ 79.164526][ T4801] iput+0x6c4/0x77c [ 79.165062][ T4801] dentry_unlink_inode+0x360/0x438 [ 79.165840][ T4801] __dentry_kill+0x320/0x598 [ 79.166496][ T4801] shrink_dentry_list+0x410/0x7c8 [ 79.167179][ T4801] shrink_dcache_parent+0xb0/0x354 [ 79.167826][ T4801] do_one_tree+0x2c/0xf0 [ 79.168462][ T4801] shrink_dcache_for_umount+0x68/0x114 [ 79.169249][ T4801] generic_shutdown_super+0x68/0x2f0 [ 79.169967][ T4801] kill_block_super+0x70/0xdc [ 79.170636][ T4801] deactivate_locked_super+0xb8/0x13c [ 79.171333][ T4801] deactivate_super+0xf8/0x118 [ 79.171967][ T4801] cleanup_mnt+0x3a4/0x458 [ 79.172557][ T4801] __cleanup_mnt+0x20/0x30 [ 79.173150][ T4801] task_work_run+0x12c/0x1e0 [ 79.173844][ T4801] do_notify_resume+0x24b4/0x3128 [ 79.174532][ T4801] el0_svc+0xf0/0x1e0 [ 79.175150][ T4801] el0t_64_sync_handler+0xcc/0xe4 [ 79.175926][ T4801] el0t_64_sync+0x1a0/0x1a4 [ 79.176503][ T4801] ================================================================================ [ 79.177829][ T4801] ================================================================== [ 79.178990][ T4801] BUG: KASAN: use-after-free in queued_spin_lock_slowpath+0x57c/0x798 [ 79.180128][ T4801] Write of size 8 at addr ffff0000215c1f5c by task syz-executor/4801 [ 79.181307][ T4801] [ 79.181622][ T4801] CPU: 1 PID: 4801 Comm: syz-executor Not tainted syzkaller #0 [ 79.182821][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 79.184210][ T4801] Call trace: [ 79.184632][ T4801] dump_backtrace+0x0/0x43c [ 79.185309][ T4801] show_stack+0x2c/0x3c [ 79.185885][ T4801] __dump_stack+0x30/0x40 [ 79.186530][ T4801] dump_stack_lvl+0xf8/0x160 [ 79.187192][ T4801] print_address_description+0x78/0x30c [ 79.187983][ T4801] kasan_report+0xec/0x15c [ 79.188630][ T4801] __asan_report_store8_noabort+0x44/0x50 [ 79.189448][ T4801] queued_spin_lock_slowpath+0x57c/0x798 [ 79.190254][ T4801] do_raw_spin_lock+0x2ec/0x2f0 [ 79.190907][ T4801] _raw_spin_lock_irqsave+0xcc/0x14c [ 79.191652][ T4801] __wake_up+0xe0/0x16c [ 79.192230][ T4801] release_metapage+0x17c/0x920 [ 79.192935][ T4801] xtTruncate+0xb70/0x2698 [ 79.193610][ T4801] jfs_free_zero_link+0x2a4/0x410 [ 79.194339][ T4801] jfs_evict_inode+0x2fc/0x3fc [ 79.195046][ T4801] evict+0x3c8/0x810 [ 79.195629][ T4801] iput+0x6c4/0x77c [ 79.196193][ T4801] dentry_unlink_inode+0x360/0x438 [ 79.196919][ T4801] __dentry_kill+0x320/0x598 [ 79.197563][ T4801] shrink_dentry_list+0x410/0x7c8 [ 79.198293][ T4801] shrink_dcache_parent+0xb0/0x354 [ 79.199037][ T4801] do_one_tree+0x2c/0xf0 [ 79.199685][ T4801] shrink_dcache_for_umount+0x68/0x114 [ 79.200517][ T4801] generic_shutdown_super+0x68/0x2f0 [ 79.201301][ T4801] kill_block_super+0x70/0xdc [ 79.201985][ T4801] deactivate_locked_super+0xb8/0x13c [ 79.202730][ T4801] deactivate_super+0xf8/0x118 [ 79.203435][ T4801] cleanup_mnt+0x3a4/0x458 [ 79.204056][ T4801] __cleanup_mnt+0x20/0x30 [ 79.204719][ T4801] task_work_run+0x12c/0x1e0 [ 79.205329][ T4801] do_notify_resume+0x24b4/0x3128 [ 79.206034][ T4801] el0_svc+0xf0/0x1e0 [ 79.206588][ T4801] el0t_64_sync_handler+0xcc/0xe4 [ 79.207286][ T4801] el0t_64_sync+0x1a0/0x1a4 [ 79.207929][ T4801] [ 79.208269][ T4801] The buggy address belongs to the page: [ 79.209087][ T4801] page:00000000ea172039 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x615c1 [ 79.210479][ T4801] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 79.211528][ T4801] raw: 01ffc00000000000 fffffc0000857048 fffffc0000857048 0000000000000000 [ 79.212666][ T4801] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 79.213803][ T4801] page dumped because: kasan: bad access detected [ 79.214736][ T4801] [ 79.215085][ T4801] Memory state around the buggy address: [ 79.215930][ T4801] ffff0000215c1e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.217068][ T4801] ffff0000215c1e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.218360][ T4801] >ffff0000215c1f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.219490][ T4801] ^ [ 79.220493][ T4801] ffff0000215c1f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.221626][ T4801] ffff0000215c2000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.222796][ T4801] ==================================================================