Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. 1970/01/01 00:01:03 ignoring optional flag "type"="gce" 1970/01/01 00:01:03 parsed 1 programs [ 65.229417][ T4400] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.609827][ T1979] cfg80211: failed to load regulatory.db [ 69.611415][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.612430][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.655901][ T4480] chnl_net:caif_netlink_parms(): no params data found [ 69.675373][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.676572][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.678008][ T4480] device bridge_slave_0 entered promiscuous mode [ 69.680301][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.681450][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.682916][ T4480] device bridge_slave_1 entered promiscuous mode [ 69.690079][ T4480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.692626][ T4480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.700724][ T4480] team0: Port device team_slave_0 added [ 69.702419][ T4480] team0: Port device team_slave_1 added [ 69.708479][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.709538][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.713489][ T4480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.715814][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.716831][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.721123][ T4480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.769844][ T4480] device hsr_slave_0 entered promiscuous mode [ 69.818398][ T4480] device hsr_slave_1 entered promiscuous mode [ 70.507232][ T4480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.571214][ T4480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.638918][ T4480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.659582][ T4480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.754937][ T4480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.761570][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.763053][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.767999][ T4480] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.773260][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.774753][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.776130][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.777152][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.780897][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.785363][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.787131][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.796592][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.797695][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.804706][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.806544][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.809106][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.811308][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.812892][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.814437][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.819991][ T4480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.821666][ T4480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.825838][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.827453][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.833336][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.838142][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.840812][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.849012][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.916208][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.917538][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.921594][ T4480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.927227][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.928868][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.939385][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.940877][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.942983][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.944321][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.953352][ T4480] device veth0_vlan entered promiscuous mode [ 70.959781][ T4480] device veth1_vlan entered promiscuous mode [ 70.971847][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.973206][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.974479][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.975927][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.982500][ T4480] device veth0_macvtap entered promiscuous mode [ 70.984900][ T4480] device veth1_macvtap entered promiscuous mode [ 70.992803][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.993984][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.995390][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.996766][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.998375][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.009982][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.011174][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.012764][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.015250][ T4480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.016453][ T4480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.017758][ T4480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.028209][ T4480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.502844][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.523506][ T442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.524791][ T442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.526247][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.535880][ T442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.537157][ T442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.539694][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:11 executed programs: 0 [ 71.919854][ T4718] chnl_net:caif_netlink_parms(): no params data found [ 71.937992][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.939606][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.941158][ T4718] device bridge_slave_0 entered promiscuous mode [ 71.943248][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.944338][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.945873][ T4718] device bridge_slave_1 entered promiscuous mode [ 71.954976][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.957838][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.965622][ T4718] team0: Port device team_slave_0 added [ 71.967421][ T4718] team0: Port device team_slave_1 added [ 71.975132][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.976210][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.980290][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.982809][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.983896][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.987826][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.039693][ T4718] device hsr_slave_0 entered promiscuous mode [ 72.088631][ T4718] device hsr_slave_1 entered promiscuous mode [ 72.128341][ T4718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.129585][ T4718] Cannot create hsr debugfs directory [ 73.928456][ T4154] Bluetooth: hci0: command 0x0409 tx timeout [ 74.301165][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.008383][ T4155] Bluetooth: hci0: command 0x041b tx timeout [ 76.651234][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.702272][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.660997][ T4718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.690003][ T4718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.729434][ T4718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.769711][ T4718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.832494][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.836252][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.837746][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.841633][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.844066][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.845576][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.847031][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.848114][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.849785][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.863495][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.865101][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.866502][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.867594][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.870761][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.873454][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.876156][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.877874][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.879985][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.882802][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.884614][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.887292][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.889509][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.892178][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.893638][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.895986][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.933978][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.935276][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.938521][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.945362][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.946909][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.953210][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.954791][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.956315][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.957540][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.960546][ T4718] device veth0_vlan entered promiscuous mode [ 77.963674][ T4718] device veth1_vlan entered promiscuous mode [ 77.970919][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.972479][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.974300][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.975856][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.978285][ T4718] device veth0_macvtap entered promiscuous mode [ 77.980778][ T4718] device veth1_macvtap entered promiscuous mode [ 77.985247][ T4718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.986878][ T4718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.989882][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.991080][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.992586][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.993846][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.995332][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.997707][ T4718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.999214][ T4718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.001229][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.003067][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.004448][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.006297][ T4718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.007598][ T4718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.010130][ T4718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.011373][ T4718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.030129][ T1893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.035137][ T1893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.036641][ T442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.037903][ T442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.038584][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.040722][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:18 executed programs: 2 [ 78.089569][ T4147] Bluetooth: hci0: command 0x040f tx timeout [ 78.155769][ T4944] loop0: detected capacity change from 0 to 32768 [ 78.212272][ T248] BUG: spinlock bad magic on CPU#1, jfsCommit/248 [ 78.213288][ T248] lock: 0xffff0000e98bc168, .magic: ffff8000, .owner: @É‹é/0, .owner_cpu: 512 [ 78.214661][ T248] CPU: 1 PID: 248 Comm: jfsCommit Not tainted syzkaller #0 [ 78.215742][ T248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 78.217202][ T248] Call trace: [ 78.217662][ T248] dump_backtrace+0x0/0x43c [ 78.218362][ T248] show_stack+0x2c/0x3c [ 78.219006][ T248] __dump_stack+0x30/0x40 [ 78.219684][ T248] dump_stack_lvl+0xf8/0x160 [ 78.220403][ T248] dump_stack+0x1c/0x5c [ 78.221030][ T248] spin_dump+0x110/0x208 [ 78.221677][ T248] do_raw_spin_lock+0x1e0/0x2f0 [ 78.222362][ T248] _raw_spin_lock_irqsave+0xcc/0x14c [ 78.223163][ T248] __wake_up+0xe0/0x16c [ 78.223720][ T248] release_metapage+0x17c/0x920 [ 78.224366][ T248] xtTruncate+0xb70/0x2698 [ 78.224957][ T248] jfs_free_zero_link+0x2a4/0x410 [ 78.225636][ T248] jfs_evict_inode+0x2fc/0x3fc [ 78.226318][ T248] evict+0x3c8/0x810 [ 78.226893][ T248] iput+0x6c4/0x77c [ 78.227398][ T248] txUpdateMap+0x6ac/0x7cc [ 78.227982][ T248] jfs_lazycommit+0x384/0x9bc [ 78.228657][ T248] kthread+0x374/0x454 [ 78.229232][ T248] ret_from_fork+0x10/0x20 [ 78.229781][ T248] ================================================================================ [ 78.230993][ T248] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 78.232163][ T248] index 1112 is out of range for type 'unsigned long[8]' [ 78.233131][ T248] CPU: 1 PID: 248 Comm: jfsCommit Not tainted syzkaller #0 [ 78.234135][ T248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 78.235521][ T248] Call trace: [ 78.236008][ T248] dump_backtrace+0x0/0x43c [ 78.236619][ T248] show_stack+0x2c/0x3c [ 78.237244][ T248] __dump_stack+0x30/0x40 [ 78.237820][ T248] dump_stack_lvl+0xf8/0x160 [ 78.238487][ T248] dump_stack+0x1c/0x5c [ 78.239065][ T248] ubsan_epilogue+0x14/0x48 [ 78.239670][ T248] __ubsan_handle_out_of_bounds+0xd4/0x108 [ 78.240460][ T248] queued_spin_lock_slowpath+0x724/0x798 [ 78.241316][ T248] do_raw_spin_lock+0x2ec/0x2f0 [ 78.241981][ T248] _raw_spin_lock_irqsave+0xcc/0x14c [ 78.242681][ T248] __wake_up+0xe0/0x16c [ 78.243266][ T248] release_metapage+0x17c/0x920 [ 78.244029][ T248] xtTruncate+0xb70/0x2698 [ 78.244651][ T248] jfs_free_zero_link+0x2a4/0x410 [ 78.245349][ T248] jfs_evict_inode+0x2fc/0x3fc [ 78.246006][ T248] evict+0x3c8/0x810 [ 78.246497][ T248] iput+0x6c4/0x77c [ 78.246993][ T248] txUpdateMap+0x6ac/0x7cc [ 78.247721][ T248] jfs_lazycommit+0x384/0x9bc [ 78.248487][ T248] kthread+0x374/0x454 [ 78.249124][ T248] ret_from_fork+0x10/0x20 [ 78.249784][ T248] ================================================================================ [ 78.251204][ T248] ================================================================== [ 78.252474][ T248] BUG: KASAN: use-after-free in queued_spin_lock_slowpath+0x57c/0x798 [ 78.253729][ T248] Write of size 8 at addr ffff0000215c1f5c by task jfsCommit/248 [ 78.254912][ T248] [ 78.255258][ T248] CPU: 1 PID: 248 Comm: jfsCommit Not tainted syzkaller #0 [ 78.256295][ T248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 78.257712][ T248] Call trace: [ 78.258172][ T248] dump_backtrace+0x0/0x43c [ 78.258787][ T248] show_stack+0x2c/0x3c [ 78.259369][ T248] __dump_stack+0x30/0x40 [ 78.259982][ T248] dump_stack_lvl+0xf8/0x160 [ 78.260629][ T248] print_address_description+0x78/0x30c [ 78.261394][ T248] kasan_report+0xec/0x15c [ 78.261982][ T248] __asan_report_store8_noabort+0x44/0x50 [ 78.262870][ T248] queued_spin_lock_slowpath+0x57c/0x798 [ 78.263617][ T248] do_raw_spin_lock+0x2ec/0x2f0 [ 78.264315][ T248] _raw_spin_lock_irqsave+0xcc/0x14c [ 78.265100][ T248] __wake_up+0xe0/0x16c [ 78.265652][ T248] release_metapage+0x17c/0x920 [ 78.266375][ T248] xtTruncate+0xb70/0x2698 [ 78.267051][ T248] jfs_free_zero_link+0x2a4/0x410 [ 78.267793][ T248] jfs_evict_inode+0x2fc/0x3fc [ 78.268600][ T248] evict+0x3c8/0x810 [ 78.269217][ T248] iput+0x6c4/0x77c [ 78.269849][ T248] txUpdateMap+0x6ac/0x7cc [ 78.270532][ T248] jfs_lazycommit+0x384/0x9bc [ 78.271304][ T248] kthread+0x374/0x454 [ 78.271929][ T248] ret_from_fork+0x10/0x20 [ 78.272592][ T248] [ 78.273023][ T248] The buggy address belongs to the page: [ 78.273905][ T248] page:0000000036f6b47a refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x615c1 [ 78.275388][ T248] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 78.276395][ T248] raw: 01ffc00000000000 fffffc0000857048 fffffc0000857048 0000000000000000 [ 78.277653][ T248] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 78.278876][ T248] page dumped because: kasan: bad access detected [ 78.279788][ T248] [ 78.280111][ T248] Memory state around the buggy address: [ 78.280967][ T248] ffff0000215c1e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.282104][ T248] ffff0000215c1e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.283252][ T248] >ffff0000215c1f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.284339][ T248] ^ [ 78.285279][ T248] ffff0000215c1f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.286380][ T248] ffff0000215c2000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.287533][ T248] ================================================================== [ 80.168257][ T4147] Bluetooth: hci0: command 0x0419 tx timeout