Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. 1970/01/01 00:01:08 parsed 1 programs [ 69.622541][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.623129][ T1970] cfg80211: failed to load regulatory.db [ 69.623650][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.675836][ T4500] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 71.094855][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.096167][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.098063][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.102909][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.104123][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.105818][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.244796][ T4524] chnl_net:caif_netlink_parms(): no params data found [ 71.264850][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.266049][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.267557][ T4524] device bridge_slave_0 entered promiscuous mode [ 71.269489][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.270526][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.272646][ T4524] device bridge_slave_1 entered promiscuous mode [ 71.281003][ T4524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.284159][ T4524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.292482][ T4524] team0: Port device team_slave_0 added [ 71.295720][ T4524] team0: Port device team_slave_1 added [ 71.303277][ T4524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.304394][ T4524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.308276][ T4524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.310771][ T4524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.311939][ T4524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.315818][ T4524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.362687][ T4524] device hsr_slave_0 entered promiscuous mode [ 71.411731][ T4524] device hsr_slave_1 entered promiscuous mode [ 72.023301][ T4524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.053954][ T4524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.093300][ T4524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.136169][ T4524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.242660][ T4524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.246697][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.248111][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.252845][ T4524] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.260414][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.262134][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.263525][ T1644] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.264655][ T1644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.265960][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.267453][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.268855][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.269910][ T1644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.271224][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.277476][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.279054][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.282191][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.293250][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.294742][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.297272][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.298792][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.305979][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.307438][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.322468][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.323963][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.326322][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.395422][ T4524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.403186][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.404443][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.405638][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.407090][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.420513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.422106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.423688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.425003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.427493][ T4524] device veth0_vlan entered promiscuous mode [ 72.435248][ T4524] device veth1_vlan entered promiscuous mode [ 72.442052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.443625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.444984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.446445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.452811][ T4524] device veth0_macvtap entered promiscuous mode [ 72.455104][ T4524] device veth1_macvtap entered promiscuous mode [ 72.460252][ T4524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.461410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.463771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.465253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.466776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.469591][ T4524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.473130][ T4524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.474290][ T4524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.475501][ T4524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.476799][ T4524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.479619][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.481093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.858225][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:13 executed programs: 0 [ 73.828142][ T4815] chnl_net:caif_netlink_parms(): no params data found [ 73.849178][ T4815] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.850385][ T4815] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.852842][ T4815] device bridge_slave_0 entered promiscuous mode [ 73.854910][ T4815] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.856006][ T4815] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.857575][ T4815] device bridge_slave_1 entered promiscuous mode [ 73.869919][ T4815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.873438][ T4815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.883974][ T4815] team0: Port device team_slave_0 added [ 73.885747][ T4815] team0: Port device team_slave_1 added [ 73.893584][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.894685][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.898913][ T4815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.902277][ T4815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.903252][ T4815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.907515][ T4815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.943654][ T4815] device hsr_slave_0 entered promiscuous mode [ 73.982036][ T4815] device hsr_slave_1 entered promiscuous mode [ 74.012388][ T4815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.013560][ T4815] Cannot create hsr debugfs directory [ 75.325188][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.781973][ T4170] Bluetooth: hci0: command 0x0409 tx timeout [ 77.614751][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.657568][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.862470][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 78.635254][ T4815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.683419][ T4815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.732723][ T4815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.783256][ T4815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.870330][ T4815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.874885][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.876502][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.880078][ T4815] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.883449][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.884921][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.886476][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.887688][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.889364][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.894429][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.895949][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.897418][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.898554][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.901230][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.906812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.909968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.912486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.914891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.917219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.918776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.922315][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.923690][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.926598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.927983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.931024][ T4815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.970668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.972980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.977027][ T4815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.983594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.985139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.991868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.993320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.995445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.996901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.998791][ T4815] device veth0_vlan entered promiscuous mode [ 79.010832][ T4815] device veth1_vlan entered promiscuous mode [ 79.019176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.020796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.023088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.024663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.027358][ T4815] device veth0_macvtap entered promiscuous mode [ 79.029892][ T4815] device veth1_macvtap entered promiscuous mode [ 79.035424][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.037114][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.039231][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.040417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.042424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.044564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.046074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.049313][ T4815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.050910][ T4815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.053067][ T4815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.054294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.055885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.058433][ T4815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.059766][ T4815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.061176][ T4815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.063627][ T4815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.086963][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.088325][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.090040][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.101312][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.102800][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.104582][ T1644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:19 executed programs: 2 [ 79.242677][ T4972] loop0: detected capacity change from 0 to 32768 [ 79.306522][ T248] BUG: spinlock bad magic on CPU#1, jfsCommit/248 [ 79.307556][ T248] lock: 0xffff0000ee444aa8, .magic: ffff8000, .owner: €RDî/0, .owner_cpu: 512 [ 79.308923][ T248] CPU: 1 PID: 248 Comm: jfsCommit Not tainted syzkaller #0 [ 79.309953][ T248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 79.311355][ T248] Call trace: [ 79.311788][ T248] dump_backtrace+0x0/0x43c [ 79.312469][ T248] show_stack+0x2c/0x3c [ 79.313048][ T248] __dump_stack+0x30/0x40 [ 79.313707][ T248] dump_stack_lvl+0xf8/0x160 [ 79.314387][ T248] dump_stack+0x1c/0x5c [ 79.314982][ T248] spin_dump+0x110/0x208 [ 79.315627][ T248] do_raw_spin_lock+0x1e0/0x2f0 [ 79.316417][ T248] _raw_spin_lock_irqsave+0xcc/0x14c [ 79.317298][ T248] __wake_up+0xe0/0x16c [ 79.317938][ T248] release_metapage+0x17c/0x920 [ 79.318735][ T248] xtTruncate+0xb70/0x2698 [ 79.319476][ T248] jfs_free_zero_link+0x2a4/0x410 [ 79.320313][ T248] jfs_evict_inode+0x2fc/0x3fc [ 79.321047][ T248] evict+0x3c8/0x810 [ 79.321666][ T248] iput+0x6c4/0x77c [ 79.322266][ T248] txUpdateMap+0x6ac/0x7cc [ 79.322930][ T248] jfs_lazycommit+0x384/0x9bc [ 79.323688][ T248] kthread+0x374/0x454 [ 79.324316][ T248] ret_from_fork+0x10/0x20 [ 79.325054][ T248] ================================================================================ [ 79.326636][ T248] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:130:9 [ 79.327985][ T248] index 1112 is out of range for type 'unsigned long[8]' [ 79.329060][ T248] CPU: 1 PID: 248 Comm: jfsCommit Not tainted syzkaller #0 [ 79.330352][ T248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 79.332060][ T248] Call trace: [ 79.332601][ T248] dump_backtrace+0x0/0x43c [ 79.333334][ T248] show_stack+0x2c/0x3c [ 79.334026][ T248] __dump_stack+0x30/0x40 [ 79.334717][ T248] dump_stack_lvl+0xf8/0x160 [ 79.335434][ T248] dump_stack+0x1c/0x5c [ 79.336131][ T248] ubsan_epilogue+0x14/0x48 [ 79.336829][ T248] __ubsan_handle_out_of_bounds+0xd4/0x108 [ 79.337769][ T248] queued_spin_lock_slowpath+0x724/0x798 [ 79.338739][ T248] do_raw_spin_lock+0x2ec/0x2f0 [ 79.339499][ T248] _raw_spin_lock_irqsave+0xcc/0x14c [ 79.340274][ T248] __wake_up+0xe0/0x16c [ 79.340982][ T248] release_metapage+0x17c/0x920 [ 79.341752][ T248] xtTruncate+0xb70/0x2698 [ 79.342432][ T248] jfs_free_zero_link+0x2a4/0x410 [ 79.343256][ T248] jfs_evict_inode+0x2fc/0x3fc [ 79.344021][ T248] evict+0x3c8/0x810 [ 79.344603][ T248] iput+0x6c4/0x77c [ 79.345211][ T248] txUpdateMap+0x6ac/0x7cc [ 79.345963][ T248] jfs_lazycommit+0x384/0x9bc [ 79.346661][ T248] kthread+0x374/0x454 [ 79.347276][ T248] ret_from_fork+0x10/0x20 [ 79.347950][ T248] ================================================================================ [ 79.349418][ T248] ================================================================== [ 79.350695][ T248] BUG: KASAN: use-after-free in queued_spin_lock_slowpath+0x57c/0x798 [ 79.352088][ T248] Write of size 8 at addr ffff0000215b0a04 by task jfsCommit/248 [ 79.353407][ T248] [ 79.353796][ T248] CPU: 1 PID: 248 Comm: jfsCommit Not tainted syzkaller #0 [ 79.354950][ T248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 79.356476][ T248] Call trace: [ 79.356999][ T248] dump_backtrace+0x0/0x43c [ 79.357768][ T248] show_stack+0x2c/0x3c [ 79.358444][ T248] __dump_stack+0x30/0x40 [ 79.359178][ T248] dump_stack_lvl+0xf8/0x160 [ 79.359946][ T248] print_address_description+0x78/0x30c [ 79.360863][ T248] kasan_report+0xec/0x15c [ 79.361616][ T248] __asan_report_store8_noabort+0x44/0x50 [ 79.362503][ T248] queued_spin_lock_slowpath+0x57c/0x798 [ 79.363433][ T248] do_raw_spin_lock+0x2ec/0x2f0 [ 79.364184][ T248] _raw_spin_lock_irqsave+0xcc/0x14c [ 79.365035][ T248] __wake_up+0xe0/0x16c [ 79.365661][ T248] release_metapage+0x17c/0x920 [ 79.366410][ T248] xtTruncate+0xb70/0x2698 [ 79.367049][ T248] jfs_free_zero_link+0x2a4/0x410 [ 79.367858][ T248] jfs_evict_inode+0x2fc/0x3fc [ 79.368611][ T248] evict+0x3c8/0x810 [ 79.369235][ T248] iput+0x6c4/0x77c [ 79.369864][ T248] txUpdateMap+0x6ac/0x7cc [ 79.370526][ T248] jfs_lazycommit+0x384/0x9bc [ 79.371260][ T248] kthread+0x374/0x454 [ 79.371937][ T248] ret_from_fork+0x10/0x20 [ 79.372648][ T248] [ 79.373023][ T248] The buggy address belongs to the page: [ 79.373837][ T248] page:000000003501ea60 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x615b0 [ 79.375415][ T248] flags: 0x1ffc00000000000(node=0|zone=0|lastcpupid=0x7ff) [ 79.376550][ T248] raw: 01ffc00000000000 fffffc0000856c08 fffffc0000856c08 0000000000000000 [ 79.377839][ T248] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 79.379201][ T248] page dumped because: kasan: bad access detected [ 79.380198][ T248] [ 79.380543][ T248] Memory state around the buggy address: [ 79.381348][ T248] ffff0000215b0900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.382568][ T248] ffff0000215b0980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.383736][ T248] >ffff0000215b0a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.384998][ T248] ^ [ 79.385568][ T248] ffff0000215b0a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.386739][ T248] ffff0000215b0b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.387948][ T248] ==================================================================