Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. 1970/01/01 00:01:03 ignoring optional flag "type"="gce" 1970/01/01 00:01:03 parsed 1 programs [ 64.854981][ T4426] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 66.843658][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.845046][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.848083][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.851025][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.852273][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.853946][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.147716][ T4558] chnl_net:caif_netlink_parms(): no params data found [ 67.165011][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.166235][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.167790][ T4558] device bridge_slave_0 entered promiscuous mode [ 67.169720][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.170928][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.172423][ T4558] device bridge_slave_1 entered promiscuous mode [ 67.183325][ T4558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.185900][ T4558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.193307][ T4558] team0: Port device team_slave_0 added [ 67.195432][ T4558] team0: Port device team_slave_1 added [ 67.202387][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.203544][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.207950][ T4558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.210246][ T4558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.211300][ T4558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.215759][ T4558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.274667][ T4558] device hsr_slave_0 entered promiscuous mode [ 67.313848][ T4558] device hsr_slave_1 entered promiscuous mode [ 67.847598][ T4558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.885535][ T4558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.937684][ T4558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.974671][ T4558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.057368][ T4558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.061270][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.062682][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.069646][ T4558] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.072115][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.073574][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.076282][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.077408][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.078921][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.082238][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.083722][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.085078][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.086185][ T1644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.090086][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.092934][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.099616][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.101962][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.106095][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.107818][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.109516][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.115179][ T4558] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.117854][ T4558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.120323][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.121916][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.125204][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.126712][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.130269][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.180015][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.181395][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.185785][ T4558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.198194][ T4558] device veth0_vlan entered promiscuous mode [ 68.200101][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.201779][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.203412][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.204991][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.206992][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.208407][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.211619][ T4558] device veth1_vlan entered promiscuous mode [ 68.219226][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.220774][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.222280][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.224821][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.227387][ T4558] device veth0_macvtap entered promiscuous mode [ 68.229639][ T4558] device veth1_macvtap entered promiscuous mode [ 68.235702][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.237658][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.239134][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.240578][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.242036][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.244363][ T4558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.245541][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.247248][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.249855][ T4558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.251216][ T4558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.252596][ T4558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.254614][ T4558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.608437][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:08 executed programs: 0 [ 68.941089][ T4774] chnl_net:caif_netlink_parms(): no params data found [ 68.959432][ T4774] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.960678][ T4774] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.962189][ T4774] device bridge_slave_0 entered promiscuous mode [ 68.964453][ T4774] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.965583][ T4774] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.967067][ T4774] device bridge_slave_1 entered promiscuous mode [ 68.975964][ T4774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.978558][ T4774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.989001][ T4774] team0: Port device team_slave_0 added [ 68.991159][ T4774] team0: Port device team_slave_1 added [ 68.998867][ T4774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.000048][ T4774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.003883][ T4774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.006061][ T4774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.007066][ T4774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.010736][ T4774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.074859][ T4774] device hsr_slave_0 entered promiscuous mode [ 69.123906][ T4774] device hsr_slave_1 entered promiscuous mode [ 69.163685][ T4774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.164884][ T4774] Cannot create hsr debugfs directory [ 69.634693][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.635855][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.635871][ T21] cfg80211: failed to load regulatory.db [ 70.903683][ T4071] Bluetooth: hci0: command 0x0409 tx timeout [ 71.376379][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.983827][ T4186] Bluetooth: hci0: command 0x041b tx timeout [ 73.696392][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.747097][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.676085][ T4774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.705623][ T4774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.734973][ T4774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.775395][ T4774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.846243][ T4774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.850034][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.851590][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.854674][ T4774] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.857146][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.858784][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.860276][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.861412][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.862677][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.866738][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.868285][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.869795][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.870889][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.873294][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.876684][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.879495][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.881600][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.883172][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.886667][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.888516][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.891215][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.892777][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.896749][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.898375][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.900624][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.940561][ T4774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.944548][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.945865][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.961678][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.963417][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.970222][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.971745][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.974357][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.975745][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.977619][ T4774] device veth0_vlan entered promiscuous mode [ 74.981115][ T4774] device veth1_vlan entered promiscuous mode [ 74.988437][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.990008][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.991506][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.993019][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.996530][ T4774] device veth0_macvtap entered promiscuous mode [ 74.998870][ T4774] device veth1_macvtap entered promiscuous mode [ 75.003485][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.005567][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.007669][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.009681][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.011269][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.012780][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.014382][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.016925][ T4774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.018491][ T4774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.020514][ T4774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.021651][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.023209][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.025989][ T4774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.027393][ T4774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.028765][ T4774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.030186][ T4774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.049396][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.055227][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.056063][ T1644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.056999][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.057738][ T1644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.060589][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:15 executed programs: 2 [ 75.074145][ T4979] Bluetooth: hci0: command 0x040f tx timeout [ 75.171395][ T5011] loop0: detected capacity change from 0 to 32768 [ 75.246388][ T248] BUG: spinlock bad magic on CPU#1, jfsCommit/248 [ 75.247491][ T248] lock: 0xffff0000ed5fcaa8, .magic: ffff8000, .owner: €Ò_í/0, .owner_cpu: 512 [ 75.249011][ T248] CPU: 1 PID: 248 Comm: jfsCommit Not tainted syzkaller #0 [ 75.250182][ T248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 75.251821][ T248] Call trace: [ 75.252274][ T248] dump_backtrace+0x0/0x43c [ 75.252950][ T248] show_stack+0x2c/0x3c [ 75.253543][ T248] __dump_stack+0x30/0x40 [ 75.254204][ T248] dump_stack_lvl+0xf8/0x160 [ 75.254830][ T248] dump_stack+0x1c/0x5c [ 75.255463][ T248] spin_dump+0x110/0x208 [ 75.256056][ T248] do_raw_spin_lock+0x1e0/0x2f0 [ 75.256779][ T248] _raw_spin_lock_irqsave+0xcc/0x14c [ 75.257542][ T248] __wake_up+0xe0/0x16c [ 75.258165][ T248] release_metapage+0x17c/0x920 [ 75.258868][ T248] xtTruncate+0xb70/0x2698 [ 75.259565][ T248] jfs_free_zero_link+0x2a4/0x410 [ 75.260329][ T248] jfs_evict_inode+0x2fc/0x3fc [ 75.261132][ T248] evict+0x3c8/0x810 [ 75.261746][ T248] iput+0x6c4/0x77c [ 75.262403][ T248] txUpdateMap+0x6ac/0x7cc [ 75.263095][ T248] jfs_lazycommit+0x384/0x9bc [ 75.263822][ T248] kthread+0x374/0x454 [ 75.264529][ T248] ret_from_fork+0x10/0x20 [ 75.265226][ T248] ================================================================================ [ 75.266719][ T248] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 75.268024][ T248] index 1112 is out of range for type 'unsigned long[8]' [ 75.269127][ T248] CPU: 1 PID: 248 Comm: jfsCommit Not tainted syzkaller #0 [ 75.270357][ T248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 75.272064][ T248] Call trace: [ 75.272605][ T248] dump_backtrace+0x0/0x43c [ 75.273317][ T248] show_stack+0x2c/0x3c [ 75.273943][ T248] __dump_stack+0x30/0x40 [ 75.274671][ T248] dump_stack_lvl+0xf8/0x160 [ 75.275397][ T248] dump_stack+0x1c/0x5c [ 75.276111][ T248] ubsan_epilogue+0x14/0x48 [ 75.276877][ T248] __ubsan_handle_out_of_bounds+0xd4/0x108 [ 75.277827][ T248] queued_spin_lock_slowpath+0x724/0x798 [ 75.278701][ T248] do_raw_spin_lock+0x2ec/0x2f0 [ 75.279429][ T248] _raw_spin_lock_irqsave+0xcc/0x14c [ 75.280219][ T248] __wake_up+0xe0/0x16c [ 75.280897][ T248] release_metapage+0x17c/0x920 [ 75.281623][ T248] xtTruncate+0xb70/0x2698 [ 75.282317][ T248] jfs_free_zero_link+0x2a4/0x410 [ 75.283037][ T248] jfs_evict_inode+0x2fc/0x3fc [ 75.283765][ T248] evict+0x3c8/0x810 [ 75.284384][ T248] iput+0x6c4/0x77c [ 75.285006][ T248] txUpdateMap+0x6ac/0x7cc [ 75.285741][ T248] jfs_lazycommit+0x384/0x9bc [ 75.286532][ T248] kthread+0x374/0x454 [ 75.287229][ T248] ret_from_fork+0x10/0x20 [ 75.287962][ T248] ================================================================================ [ 75.289492][ T248] ================================================================== [ 75.290757][ T248] BUG: KASAN: use-after-free in queued_spin_lock_slowpath+0x57c/0x798 [ 75.292119][ T248] Write of size 8 at addr ffff0000215b0a04 by task jfsCommit/248 [ 75.293335][ T248] [ 75.293725][ T248] CPU: 1 PID: 248 Comm: jfsCommit Not tainted syzkaller #0 [ 75.294870][ T248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 75.296447][ T248] Call trace: [ 75.296949][ T248] dump_backtrace+0x0/0x43c [ 75.297650][ T248] show_stack+0x2c/0x3c [ 75.298270][ T248] __dump_stack+0x30/0x40 [ 75.298936][ T248] dump_stack_lvl+0xf8/0x160 [ 75.299660][ T248] print_address_description+0x78/0x30c [ 75.300564][ T248] kasan_report+0xec/0x15c [ 75.301251][ T248] __asan_report_store8_noabort+0x44/0x50 [ 75.302234][ T248] queued_spin_lock_slowpath+0x57c/0x798 [ 75.303189][ T248] do_raw_spin_lock+0x2ec/0x2f0 [ 75.303938][ T248] _raw_spin_lock_irqsave+0xcc/0x14c [ 75.304707][ T248] __wake_up+0xe0/0x16c [ 75.305339][ T248] release_metapage+0x17c/0x920 [ 75.306064][ T248] xtTruncate+0xb70/0x2698 [ 75.306756][ T248] jfs_free_zero_link+0x2a4/0x410 [ 75.307536][ T248] jfs_evict_inode+0x2fc/0x3fc [ 75.308273][ T248] evict+0x3c8/0x810 [ 75.308811][ T248] iput+0x6c4/0x77c [ 75.309372][ T248] txUpdateMap+0x6ac/0x7cc [ 75.310042][ T248] jfs_lazycommit+0x384/0x9bc [ 75.310790][ T248] kthread+0x374/0x454 [ 75.311431][ T248] ret_from_fork+0x10/0x20 [ 75.312138][ T248] [ 75.312488][ T248] The buggy address belongs to the page: [ 75.313406][ T248] page:00000000711d3e08 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x615b0 [ 75.315061][ T248] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 75.316315][ T248] raw: 01ffc00000000000 fffffc0000856c08 fffffc0000856c08 0000000000000000 [ 75.317787][ T248] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 75.319236][ T248] page dumped because: kasan: bad access detected [ 75.320327][ T248] [ 75.320692][ T248] Memory state around the buggy address: [ 75.321532][ T248] ffff0000215b0900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.322754][ T248] ffff0000215b0980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.324098][ T248] >ffff0000215b0a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.325359][ T248] ^ [ 75.326002][ T248] ffff0000215b0a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.327297][ T248] ffff0000215b0b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.328711][ T248] ==================================================================