Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. 1970/01/01 00:01:04 parsed 1 programs [ 65.937760][ T4474] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.636552][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.637743][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.646263][ T1540] cfg80211: failed to load regulatory.db [ 70.297114][ T4513] chnl_net:caif_netlink_parms(): no params data found [ 70.319161][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.320361][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.321950][ T4513] device bridge_slave_0 entered promiscuous mode [ 70.324524][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.325945][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.327492][ T4513] device bridge_slave_1 entered promiscuous mode [ 70.336852][ T4513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.339346][ T4513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.348021][ T4513] team0: Port device team_slave_0 added [ 70.349885][ T4513] team0: Port device team_slave_1 added [ 70.359457][ T4513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.360706][ T4513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.364993][ T4513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.367897][ T4513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.369056][ T4513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.373285][ T4513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.417184][ T4513] device hsr_slave_0 entered promiscuous mode [ 70.455836][ T4513] device hsr_slave_1 entered promiscuous mode [ 71.053707][ T4513] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.087780][ T4513] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.185849][ T4513] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.207380][ T4513] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.256637][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.257905][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.259494][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.260618][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.290002][ T4513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.294603][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.297274][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.299654][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.301756][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 71.319666][ T4513] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.322290][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.323987][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.326305][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.327475][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.333348][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.335155][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.337984][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.339121][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.347175][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.350034][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.352723][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.354808][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.357920][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.368288][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.370093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.372924][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.374386][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.378930][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.380664][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.383152][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.503832][ T4513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.507640][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.508946][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.516987][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.518575][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.526273][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.527941][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.531457][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.533244][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.538390][ T4513] device veth0_vlan entered promiscuous mode [ 71.542763][ T4513] device veth1_vlan entered promiscuous mode [ 71.564494][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.567495][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.568998][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.570697][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.574887][ T4513] device veth0_macvtap entered promiscuous mode [ 71.579421][ T4513] device veth1_macvtap entered promiscuous mode [ 71.584894][ T4513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.587155][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.588826][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.590315][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.596331][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.599998][ T4513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.601276][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.603048][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.607524][ T4513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.609089][ T4513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.610626][ T4513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.612037][ T4513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.982265][ T136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.868920][ T136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.479477][ T136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.539525][ T136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.789657][ T4195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.790959][ T4195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.792323][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.804437][ T4195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.806018][ T4195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.807925][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:18 executed programs: 0 [ 78.461867][ T4968] chnl_net:caif_netlink_parms(): no params data found [ 78.481800][ T4968] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.483001][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.484621][ T4968] device bridge_slave_0 entered promiscuous mode [ 78.486953][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.488140][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.489766][ T4968] device bridge_slave_1 entered promiscuous mode [ 78.503054][ T4968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.506074][ T4968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.516273][ T4968] team0: Port device team_slave_0 added [ 78.518559][ T4968] team0: Port device team_slave_1 added [ 78.526744][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.527968][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.532390][ T4968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.534945][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.536193][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.540446][ T4968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.587186][ T4968] device hsr_slave_0 entered promiscuous mode [ 78.615616][ T4968] device hsr_slave_1 entered promiscuous mode [ 78.665332][ T4968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.666502][ T4968] Cannot create hsr debugfs directory [ 79.156891][ T4968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.206732][ T4968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.237079][ T4968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.268944][ T4968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.338569][ T4968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.342738][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.344306][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.350160][ T4968] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.352776][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.354573][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.357371][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.358558][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.367754][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.369470][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.371181][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.372800][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.373937][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.375687][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.377446][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.384529][ T4968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.388960][ T4968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.391626][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.394106][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.396428][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.398176][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.399778][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.401360][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.403118][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.404636][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.408345][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.409930][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.464972][ T4968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.468299][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.469672][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.477101][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.479275][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.489528][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.491291][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.492831][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.494178][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.497946][ T4968] device veth0_vlan entered promiscuous mode [ 79.501781][ T4968] device veth1_vlan entered promiscuous mode [ 79.512696][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.514265][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.515764][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.517357][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.531562][ T4968] device veth0_macvtap entered promiscuous mode [ 79.534450][ T4968] device veth1_macvtap entered promiscuous mode [ 79.541985][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.543647][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.547651][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.549540][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.551042][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.552575][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.554106][ T1639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.559304][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.561151][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.563426][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.565621][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.567315][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.570132][ T4968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.571546][ T4968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.573058][ T4968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.574613][ T4968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.610431][ T1639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.611790][ T1639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.613207][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.622222][ T1639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.623526][ T1639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.624811][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.762677][ T5084] loop0: detected capacity change from 0 to 32768 [ 79.787081][ T5084] read_mapping_page failed! [ 79.787976][ T5084] ERROR: (device loop0): txAbort: [ 79.787976][ T5084] [ 79.796967][ T5084] ERROR: (device loop0): remounting filesystem as read-only [ 79.809572][ T4968] BUG: spinlock bad magic on CPU#0, syz-executor/4968 [ 79.810752][ T4968] lock: 0xffff0000e231caa8, .magic: ffff8000, .owner: €Ò1â/0, .owner_cpu: 512 [ 79.812143][ T4968] CPU: 0 PID: 4968 Comm: syz-executor Not tainted syzkaller #0 [ 79.813376][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 79.815069][ T4968] Call trace: [ 79.815677][ T4968] dump_backtrace+0x0/0x458 [ 79.816472][ T4968] show_stack+0x2c/0x3c [ 79.817142][ T4968] __dump_stack+0x30/0x40 [ 79.817872][ T4968] dump_stack_lvl+0xf4/0x15c [ 79.818658][ T4968] dump_stack+0x1c/0x5c [ 79.819344][ T4968] spin_dump+0x110/0x208 [ 79.820049][ T4968] do_raw_spin_lock+0x1f0/0x2fc [ 79.820970][ T4968] _raw_spin_lock_irqsave+0xcc/0x148 [ 79.821857][ T4968] __wake_up+0xe0/0x174 [ 79.822561][ T4968] release_metapage+0x17c/0x8f8 [ 79.823404][ T4968] xtTruncate+0xb98/0x26f8 [ 79.824205][ T4968] jfs_free_zero_link+0x2c0/0x42c [ 79.825054][ T4968] jfs_evict_inode+0x2fc/0x3f4 [ 79.825876][ T4968] evict+0x3e0/0x828 [ 79.826537][ T4968] iput+0x6ac/0x764 [ 79.827226][ T4968] dentry_unlink_inode+0x360/0x438 [ 79.828124][ T4968] __dentry_kill+0x320/0x598 [ 79.828894][ T4968] shrink_dentry_list+0x400/0x7b8 [ 79.829760][ T4968] shrink_dcache_parent+0xb4/0x364 [ 79.830626][ T4968] do_one_tree+0x2c/0xf0 [ 79.831360][ T4968] shrink_dcache_for_umount+0x68/0x114 [ 79.832300][ T4968] generic_shutdown_super+0x68/0x2f0 [ 79.833179][ T4968] kill_block_super+0x70/0xdc [ 79.833937][ T4968] deactivate_locked_super+0xb8/0x134 [ 79.834926][ T4968] deactivate_super+0xf0/0x110 [ 79.835696][ T4968] cleanup_mnt+0x3b8/0x46c [ 79.836459][ T4968] __cleanup_mnt+0x20/0x30 [ 79.837224][ T4968] task_work_run+0x12c/0x1d8 [ 79.838060][ T4968] do_notify_resume+0x2450/0x309c [ 79.838916][ T4968] el0_svc+0xf0/0x1d0 [ 79.839591][ T4968] el0t_64_sync_handler+0xcc/0xe4 [ 79.840434][ T4968] el0t_64_sync+0x1a0/0x1a4 [ 79.841165][ T4968] ================================================================================ [ 79.842806][ T4968] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 79.844210][ T4968] index 1115 is out of range for type 'unsigned long[8]' [ 79.845399][ T4968] CPU: 0 PID: 4968 Comm: syz-executor Not tainted syzkaller #0 [ 79.846622][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 79.848127][ T4968] Call trace: [ 79.848619][ T4968] dump_backtrace+0x0/0x458 [ 79.849333][ T4968] show_stack+0x2c/0x3c [ 79.850024][ T4968] __dump_stack+0x30/0x40 [ 79.850762][ T4968] dump_stack_lvl+0xf4/0x15c [ 79.851551][ T4968] dump_stack+0x1c/0x5c [ 79.852326][ T4968] ubsan_epilogue+0x14/0x48 [ 79.853069][ T4968] __ubsan_handle_out_of_bounds+0xd4/0x100 [ 79.854058][ T4968] queued_spin_lock_slowpath+0x73c/0x7ac [ 79.854962][ T4968] do_raw_spin_lock+0x2f8/0x2fc [ 79.855849][ T4968] _raw_spin_lock_irqsave+0xcc/0x148 [ 79.856729][ T4968] __wake_up+0xe0/0x174 [ 79.857443][ T4968] release_metapage+0x17c/0x8f8 [ 79.858281][ T4968] xtTruncate+0xb98/0x26f8 [ 79.859057][ T4968] jfs_free_zero_link+0x2c0/0x42c [ 79.859920][ T4968] jfs_evict_inode+0x2fc/0x3f4 [ 79.860719][ T4968] evict+0x3e0/0x828 [ 79.861360][ T4968] iput+0x6ac/0x764 [ 79.861989][ T4968] dentry_unlink_inode+0x360/0x438 [ 79.862871][ T4968] __dentry_kill+0x320/0x598 [ 79.863576][ T4968] shrink_dentry_list+0x400/0x7b8 [ 79.864386][ T4968] shrink_dcache_parent+0xb4/0x364 [ 79.865274][ T4968] do_one_tree+0x2c/0xf0 [ 79.865993][ T4968] shrink_dcache_for_umount+0x68/0x114 [ 79.866881][ T4968] generic_shutdown_super+0x68/0x2f0 [ 79.867771][ T4968] kill_block_super+0x70/0xdc [ 79.868544][ T4968] deactivate_locked_super+0xb8/0x134 [ 79.869543][ T4968] deactivate_super+0xf0/0x110 [ 79.870397][ T4968] cleanup_mnt+0x3b8/0x46c [ 79.871095][ T4968] __cleanup_mnt+0x20/0x30 [ 79.871834][ T4968] task_work_run+0x12c/0x1d8 [ 79.872601][ T4968] do_notify_resume+0x2450/0x309c [ 79.873498][ T4968] el0_svc+0xf0/0x1d0 [ 79.874169][ T4968] el0t_64_sync_handler+0xcc/0xe4 [ 79.875018][ T4968] el0t_64_sync+0x1a0/0x1a4 [ 79.875756][ T4968] ================================================================================ [ 79.877370][ T4968] ================================================================== [ 79.878803][ T4968] BUG: KASAN: use-after-free in queued_spin_lock_slowpath+0x480/0x7ac [ 79.880161][ T4968] Write of size 8 at addr ffff0000216fc780 by task syz-executor/4968 [ 79.881549][ T4968] [ 79.881954][ T4968] CPU: 0 PID: 4968 Comm: syz-executor Not tainted syzkaller #0 [ 79.883217][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 79.884979][ T4968] Call trace: [ 79.885499][ T4968] dump_backtrace+0x0/0x458 [ 79.886213][ T4968] show_stack+0x2c/0x3c [ 79.886956][ T4968] __dump_stack+0x30/0x40 [ 79.887649][ T4968] dump_stack_lvl+0xf4/0x15c [ 79.888375][ T4968] print_address_description+0x78/0x30c [ 79.889277][ T4968] kasan_report+0xec/0x158 [ 79.890029][ T4968] __asan_report_store8_noabort+0x44/0x50 [ 79.891028][ T4968] queued_spin_lock_slowpath+0x480/0x7ac [ 79.891946][ T4968] do_raw_spin_lock+0x2f8/0x2fc [ 79.892734][ T4968] _raw_spin_lock_irqsave+0xcc/0x148 [ 79.893617][ T4968] __wake_up+0xe0/0x174 [ 79.894272][ T4968] release_metapage+0x17c/0x8f8 [ 79.895032][ T4968] xtTruncate+0xb98/0x26f8 [ 79.895799][ T4968] jfs_free_zero_link+0x2c0/0x42c [ 79.896602][ T4968] jfs_evict_inode+0x2fc/0x3f4 [ 79.897377][ T4968] evict+0x3e0/0x828 [ 79.898041][ T4968] iput+0x6ac/0x764 [ 79.898657][ T4968] dentry_unlink_inode+0x360/0x438 [ 79.899522][ T4968] __dentry_kill+0x320/0x598 [ 79.900317][ T4968] shrink_dentry_list+0x400/0x7b8 [ 79.901191][ T4968] shrink_dcache_parent+0xb4/0x364 [ 79.902083][ T4968] do_one_tree+0x2c/0xf0 [ 79.902814][ T4968] shrink_dcache_for_umount+0x68/0x114 [ 79.903714][ T4968] generic_shutdown_super+0x68/0x2f0 [ 79.904602][ T4968] kill_block_super+0x70/0xdc [ 79.905424][ T4968] deactivate_locked_super+0xb8/0x134 [ 79.906282][ T4968] deactivate_super+0xf0/0x110 [ 79.907067][ T4968] cleanup_mnt+0x3b8/0x46c [ 79.907813][ T4968] __cleanup_mnt+0x20/0x30 [ 79.908610][ T4968] task_work_run+0x12c/0x1d8 [ 79.909357][ T4968] do_notify_resume+0x2450/0x309c [ 79.910194][ T4968] el0_svc+0xf0/0x1d0 [ 79.910866][ T4968] el0t_64_sync_handler+0xcc/0xe4 [ 79.911750][ T4968] el0t_64_sync+0x1a0/0x1a4 [ 79.912529][ T4968] [ 79.912967][ T4968] The buggy address belongs to the page: [ 79.913889][ T4968] page:00000000f9da2857 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x616fc [ 79.915596][ T4968] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 79.916823][ T4968] raw: 01ffc00000000000 fffffc000085bf08 fffffc000085bf08 0000000000000000 [ 79.918172][ T4968] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 79.919621][ T4968] page dumped because: kasan: bad access detected [ 79.920763][ T4968] [ 79.921142][ T4968] Memory state around the buggy address: [ 79.922088][ T4968] ffff0000216fc680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.923519][ T4968] ffff0000216fc700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.924934][ T4968] >ffff0000216fc780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.926348][ T4968] ^ [ 79.927028][ T4968] ffff0000216fc800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.928403][ T4968] ffff0000216fc880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.929816][ T4968] ==================================================================