Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. 1970/01/01 00:01:23 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:23 ignoring optional flag "type"="gce" 1970/01/01 00:01:24 parsed 1 programs [ 87.034912][ T4425] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 93.174012][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.175784][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.178151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.187995][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.189774][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.191757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.128529][ T4493] chnl_net:caif_netlink_parms(): no params data found [ 94.159939][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.161459][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.163738][ T4493] device bridge_slave_0 entered promiscuous mode [ 94.166798][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.169993][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.172210][ T4493] device bridge_slave_1 entered promiscuous mode [ 94.186730][ T4493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.192006][ T4493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.206106][ T4493] team0: Port device team_slave_0 added [ 94.210562][ T4493] team0: Port device team_slave_1 added [ 94.222540][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.224065][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.229421][ T4493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.233008][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.238380][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.244134][ T4493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.300037][ T4493] device hsr_slave_0 entered promiscuous mode [ 94.338492][ T4493] device hsr_slave_1 entered promiscuous mode [ 95.066206][ T4493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.109694][ T4493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.160118][ T4493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.182295][ T4493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.308842][ T4493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.323291][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.325564][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.330134][ T4493] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.341252][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.343470][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.351621][ T4105] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.353380][ T4105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.355497][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.359918][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.362127][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.364851][ T4105] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.366410][ T4105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.379855][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.382328][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.384769][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.393799][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.420602][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.423072][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.425431][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.432317][ T4493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.434532][ T4493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.439043][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.449574][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.451963][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.454158][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.460139][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.529145][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.530829][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.536641][ T4493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.550052][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.552460][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.564875][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.567062][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.570645][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.572987][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.576747][ T4493] device veth0_vlan entered promiscuous mode [ 95.584963][ T4493] device veth1_vlan entered promiscuous mode [ 95.597545][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.599809][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.601750][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.603831][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.610851][ T4493] device veth0_macvtap entered promiscuous mode [ 95.614922][ T4493] device veth1_macvtap entered promiscuous mode [ 95.626549][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.628677][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.630789][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.632705][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.634839][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.641788][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.644782][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.646858][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.652249][ T4493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.654194][ T4493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.656088][ T4493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.657943][ T4493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:36 executed programs: 0 [ 96.172903][ T4625] chnl_net:caif_netlink_parms(): no params data found [ 96.211659][ T4625] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.213366][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.215509][ T4625] device bridge_slave_0 entered promiscuous mode [ 96.219532][ T4625] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.221078][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.223306][ T4625] device bridge_slave_1 entered promiscuous mode [ 96.261252][ T4625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.265282][ T4625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.309054][ T4625] team0: Port device team_slave_0 added [ 96.311930][ T4625] team0: Port device team_slave_1 added [ 96.329474][ T4625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.331005][ T4625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.336697][ T4625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.343479][ T4625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.345084][ T4625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.351517][ T4625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.430555][ T4625] device hsr_slave_0 entered promiscuous mode [ 96.490980][ T4625] device hsr_slave_1 entered promiscuous mode [ 96.520998][ T4625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.522736][ T4625] Cannot create hsr debugfs directory [ 96.583535][ T4625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.108517][ T4066] Bluetooth: hci0: command 0x0409 tx timeout [ 98.835945][ T4625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.188361][ T4066] Bluetooth: hci0: command 0x041b tx timeout [ 100.793249][ T4625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.845927][ T4625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.994289][ T4625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.030272][ T4625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.079821][ T4625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.140251][ T4625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.260872][ T4625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.267328][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.269967][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.273961][ T4625] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.277979][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.280720][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.282705][ T569] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.284335][ T569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.286148][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.290902][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.293097][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.295181][ T4105] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.296690][ T4105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.303292][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.307656][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.312862][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.315317][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.317591][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.322656][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.325101][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.333392][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.335599][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.340255][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.342644][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.346771][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.415198][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.416797][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.423836][ T4625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.434871][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.437136][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.450610][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.452688][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.454888][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.456965][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.460896][ T4625] device veth0_vlan entered promiscuous mode [ 101.466498][ T4625] device veth1_vlan entered promiscuous mode [ 101.479776][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.481750][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.483912][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.486157][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.493405][ T4625] device veth0_macvtap entered promiscuous mode [ 101.497282][ T4625] device veth1_macvtap entered promiscuous mode [ 101.507873][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.513386][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.516477][ T4625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.520016][ T4625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.522180][ T4625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.525176][ T4625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.527252][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.529966][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.532240][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.534468][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.536649][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.542574][ T4625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.544540][ T4625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.546443][ T4625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.549145][ T4625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.596833][ T569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.598741][ T569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.602170][ T569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.616269][ T569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.618014][ T569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.620653][ T4105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:41 executed programs: 2 [ 101.859820][ T4871] loop0: detected capacity change from 0 to 32768 [ 101.975612][ T240] BUG: spinlock bad magic on CPU#1, jfsCommit/240 [ 101.977001][ T240] lock: 0xffff0000e1ad89e8, .magic: ffff8000, .owner: À‘­á/0, .owner_cpu: 512 [ 101.978797][ T240] CPU: 1 PID: 240 Comm: jfsCommit Not tainted 5.15.175-syzkaller #0 [ 101.980439][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.982486][ T240] Call trace: [ 101.983106][ T240] dump_backtrace+0x0/0x530 [ 101.984163][ T240] show_stack+0x2c/0x3c [ 101.985052][ T240] dump_stack_lvl+0x108/0x170 [ 101.986036][ T240] dump_stack+0x1c/0x58 [ 101.986954][ T240] spin_bug+0x124/0x240 [ 101.987839][ T240] do_raw_spin_lock+0x200/0x35c [ 101.988846][ T240] _raw_spin_lock_irqsave+0xcc/0x14c [ 101.989909][ T240] __wake_up+0xe8/0x1a0 [ 101.990861][ T240] release_metapage+0x17c/0x918 [ 101.991965][ T240] xtTruncate+0xc90/0x2b10 [ 101.992887][ T240] jfs_free_zero_link+0x374/0x598 [ 101.993924][ T240] jfs_evict_inode+0x308/0x408 [ 101.994910][ T240] evict+0x418/0x894 [ 101.995729][ T240] iput+0x744/0x824 [ 101.996526][ T240] txUpdateMap+0x76c/0x914 [ 101.997548][ T240] jfs_lazycommit+0x3b0/0xa40 [ 101.998538][ T240] kthread+0x37c/0x45c [ 101.999405][ T240] ret_from_fork+0x10/0x20 [ 102.000401][ T240] ================================================================================ [ 102.002305][ T240] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 102.003997][ T240] index 1150 is out of range for type 'unsigned long[8]' [ 102.005535][ T240] CPU: 1 PID: 240 Comm: jfsCommit Not tainted 5.15.175-syzkaller #0 [ 102.007219][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.009425][ T240] Call trace: [ 102.010076][ T240] dump_backtrace+0x0/0x530 [ 102.011106][ T240] show_stack+0x2c/0x3c [ 102.012042][ T240] dump_stack_lvl+0x108/0x170 [ 102.013066][ T240] dump_stack+0x1c/0x58 [ 102.013923][ T240] __ubsan_handle_out_of_bounds+0x108/0x15c [ 102.015125][ T240] queued_spin_lock_slowpath+0x854/0x938 [ 102.016378][ T240] do_raw_spin_lock+0x334/0x35c [ 102.017339][ T240] _raw_spin_lock_irqsave+0xcc/0x14c [ 102.018489][ T240] __wake_up+0xe8/0x1a0 [ 102.019347][ T240] release_metapage+0x17c/0x918 [ 102.020369][ T240] xtTruncate+0xc90/0x2b10 [ 102.021453][ T240] jfs_free_zero_link+0x374/0x598 [ 102.022538][ T240] jfs_evict_inode+0x308/0x408 [ 102.023599][ T240] evict+0x418/0x894 [ 102.024405][ T240] iput+0x744/0x824 [ 102.025245][ T240] txUpdateMap+0x76c/0x914 [ 102.026220][ T240] jfs_lazycommit+0x3b0/0xa40 [ 102.027273][ T240] kthread+0x37c/0x45c [ 102.028180][ T240] ret_from_fork+0x10/0x20 [ 102.029201][ T240] ================================================================================ [ 102.031129][ T240] ================================================================== [ 102.032835][ T240] BUG: KASAN: use-after-free in queued_spin_lock_slowpath+0x364/0x938 [ 102.034642][ T240] Write of size 8 at addr ffff000027884790 by task jfsCommit/240 [ 102.036315][ T240] [ 102.036787][ T240] CPU: 1 PID: 240 Comm: jfsCommit Not tainted 5.15.175-syzkaller #0 [ 102.038421][ T240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.040409][ T240] Call trace: [ 102.041110][ T240] dump_backtrace+0x0/0x530 [ 102.042067][ T240] show_stack+0x2c/0x3c [ 102.043027][ T240] dump_stack_lvl+0x108/0x170 [ 102.044094][ T240] print_address_description+0x7c/0x3f0 [ 102.045207][ T240] kasan_report+0x174/0x1e4 [ 102.046244][ T240] __asan_report_store8_noabort+0x44/0x50 [ 102.047525][ T240] queued_spin_lock_slowpath+0x364/0x938 [ 102.048725][ T240] do_raw_spin_lock+0x334/0x35c [ 102.049785][ T240] _raw_spin_lock_irqsave+0xcc/0x14c [ 102.050922][ T240] __wake_up+0xe8/0x1a0 [ 102.051871][ T240] release_metapage+0x17c/0x918 [ 102.052869][ T240] xtTruncate+0xc90/0x2b10 [ 102.053806][ T240] jfs_free_zero_link+0x374/0x598 [ 102.054840][ T240] jfs_evict_inode+0x308/0x408 [ 102.055798][ T240] evict+0x418/0x894 [ 102.056737][ T240] iput+0x744/0x824 [ 102.057505][ T240] txUpdateMap+0x76c/0x914 [ 102.058502][ T240] jfs_lazycommit+0x3b0/0xa40 [ 102.059524][ T240] kthread+0x37c/0x45c [ 102.060466][ T240] ret_from_fork+0x10/0x20 [ 102.061375][ T240] [ 102.061924][ T240] The buggy address belongs to the page: [ 102.063202][ T240] page:000000008aabca23 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67884 [ 102.065284][ T240] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 102.066882][ T240] raw: 01ffc00000000000 fffffc00009e2108 fffffc00009e2108 0000000000000000 [ 102.068807][ T240] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 102.070548][ T240] page dumped because: kasan: bad access detected [ 102.071913][ T240] [ 102.072428][ T240] Memory state around the buggy address: [ 102.073660][ T240] ffff000027884680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.075345][ T240] ffff000027884700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.077160][ T240] >ffff000027884780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.078902][ T240] ^ [ 102.079830][ T240] ffff000027884800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.081484][ T240] ffff000027884880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.083269][ T240] ================================================================== [ 102.268571][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 104.368356][ T13] Bluetooth: hci0: command 0x0419 tx timeout