Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs [ 31.783443][ T4336] cgroup: Unknown subsys name 'net' [ 32.077571][ T4336] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.340090][ T4336] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.517589][ T4380] chnl_net:caif_netlink_parms(): no params data found [ 37.534886][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.536330][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.537904][ T4380] device bridge_slave_0 entered promiscuous mode [ 37.540259][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.541426][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.543000][ T4380] device bridge_slave_1 entered promiscuous mode [ 37.549574][ T4380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.551970][ T4380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.558777][ T4380] team0: Port device team_slave_0 added [ 37.560578][ T4380] team0: Port device team_slave_1 added [ 37.565803][ T4380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.566988][ T4380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.571111][ T4380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.610449][ T4380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.611689][ T4380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.616134][ T4380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.656317][ T4380] device hsr_slave_0 entered promiscuous mode [ 37.685145][ T4380] device hsr_slave_1 entered promiscuous mode [ 37.761439][ T4380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.806493][ T4380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.846044][ T4380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.876041][ T4380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.913444][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.914714][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.916214][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.917360][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.934281][ T4380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.938084][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.940734][ T1571] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.942433][ T1571] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.944211][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 37.950325][ T4380] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.953234][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.954829][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.956116][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.959966][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.961584][ T1571] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.962813][ T1571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.973722][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.975624][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.977181][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.978760][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.981737][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.984109][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.035645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.036926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.040140][ T4380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.045404][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.051794][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.053544][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.055708][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.059360][ T4380] device veth0_vlan entered promiscuous mode [ 38.062650][ T4380] device veth1_vlan entered promiscuous mode [ 38.070673][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.072300][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.073912][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.077433][ T4380] device veth0_macvtap entered promiscuous mode [ 38.080179][ T4380] device veth1_macvtap entered promiscuous mode [ 38.086245][ T4380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.087574][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.089557][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.092558][ T4380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.093818][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.107528][ T4380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.108952][ T4380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.110434][ T4380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.111904][ T4380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.393048][ T4425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.396022][ T4425] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.397598][ T4425] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.399219][ T4425] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.401037][ T4425] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.402345][ T4425] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.920372][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.921720][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.923663][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.933001][ T1586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.934261][ T1586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.937982][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.327928][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:39 executed programs: 0 [ 39.621544][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.623007][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.624544][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.626791][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.628247][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.629522][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.670401][ T4446] chnl_net:caif_netlink_parms(): no params data found [ 39.685999][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.687162][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.688621][ T4446] device bridge_slave_0 entered promiscuous mode [ 39.690594][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.691804][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.693380][ T4446] device bridge_slave_1 entered promiscuous mode [ 39.700170][ T4446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.702488][ T4446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.708940][ T4446] team0: Port device team_slave_0 added [ 39.710720][ T4446] team0: Port device team_slave_1 added [ 39.716433][ T4446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.717622][ T4446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.722136][ T4446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.724508][ T4446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.725997][ T4446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.730398][ T4446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.776035][ T4446] device hsr_slave_0 entered promiscuous mode [ 39.825159][ T4446] device hsr_slave_1 entered promiscuous mode [ 39.865020][ T4446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.866409][ T4446] Cannot create hsr debugfs directory [ 41.306090][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.675251][ T4425] Bluetooth: hci0: command 0x0409 tx timeout [ 43.585813][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.666684][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.764984][ T4425] Bluetooth: hci0: command 0x041b tx timeout [ 44.618862][ T4446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.697767][ T4446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.816927][ T4446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.906643][ T4446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.035050][ T4446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.038462][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.040086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.042572][ T4446] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.044802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.046735][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.048231][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.049438][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.051449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.054113][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.056239][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.057779][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.059007][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.118690][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.121711][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.124390][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.126329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.128000][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.130502][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.132141][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.134683][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.136516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.139133][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.140636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.142890][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.259354][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.260736][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.263697][ T4446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.270292][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.272024][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.277973][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.279720][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.281270][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.282693][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.284711][ T4446] device veth0_vlan entered promiscuous mode [ 45.288151][ T4446] device veth1_vlan entered promiscuous mode [ 45.294677][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.296588][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.298061][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.299660][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.302439][ T4446] device veth0_macvtap entered promiscuous mode [ 45.304742][ T4446] device veth1_macvtap entered promiscuous mode [ 45.310859][ T4446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.312652][ T4446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.314800][ T4446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.316361][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.317934][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.319436][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.321025][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.323575][ T4446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.325673][ T4446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.327865][ T4446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.329131][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.330878][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.609653][ T4446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.611217][ T4446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.612787][ T4446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.614246][ T4446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.637519][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.638829][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.641055][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 45.700795][ T4417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.702196][ T4417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.703662][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 45.828418][ T4538] loop0: detected capacity change from 0 to 32768 [ 45.835990][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 45.861147][ T92] BUG: spinlock bad magic on CPU#1, jfsCommit/92 [ 45.862174][ T92] ================================================================== [ 45.863503][ T92] BUG: KASAN: slab-out-of-bounds in string+0x204/0x280 [ 45.864625][ T92] Read of size 1 at addr ffff0000ea19c9e0 by task jfsCommit/92 [ 45.865908][ T92] [ 45.866276][ T92] CPU: 1 PID: 92 Comm: jfsCommit Not tainted syzkaller #0 [ 45.867527][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.869332][ T92] Call trace: [ 45.869906][ T92] dump_backtrace+0x1c0/0x1ec [ 45.870751][ T92] show_stack+0x2c/0x3c [ 45.871467][ T92] __dump_stack+0x30/0x40 [ 45.872228][ T92] dump_stack_lvl+0xf4/0x15c [ 45.873019][ T92] print_address_description+0x88/0x218 [ 45.874050][ T92] print_report+0x50/0x68 [ 45.874820][ T92] kasan_report+0xa8/0xfc [ 45.875569][ T92] __asan_report_load1_noabort+0x2c/0x38 [ 45.876513][ T92] string+0x204/0x280 [ 45.877186][ T92] vsnprintf+0x10b0/0x18a8 [ 45.877913][ T92] vprintk_store+0x37c/0xb6c [ 45.878700][ T92] vprintk_emit+0x118/0x2f0 [ 45.879497][ T92] vprintk_default+0x54/0x80 [ 45.880323][ T92] vprintk+0x200/0x2a0 [ 45.881049][ T92] _printk+0xe0/0x130 [ 45.881725][ T92] spin_dump+0x10c/0x208 [ 45.882467][ T92] do_raw_spin_lock+0x1ec/0x2f8 [ 45.883297][ T92] _raw_spin_lock_irqsave+0x74/0xb0 [ 45.884185][ T92] __wake_up+0xe4/0x17c [ 45.884923][ T92] release_metapage+0x19c/0xc6c [ 45.885764][ T92] xtTruncate+0xb88/0x2644 [ 45.886558][ T92] jfs_free_zero_link+0x2c0/0x42c [ 45.887429][ T92] jfs_evict_inode+0x2f4/0x3e4 [ 45.888282][ T92] evict+0x3e0/0x828 [ 45.888979][ T92] iput+0x754/0x7e4 [ 45.889622][ T92] txUpdateMap+0x674/0x794 [ 45.890387][ T92] jfs_lazycommit+0x354/0x908 [ 45.891182][ T92] kthread+0x250/0x2d8 [ 45.891881][ T92] ret_from_fork+0x10/0x20 [ 45.892604][ T92] [ 45.893002][ T92] Allocated by task 4538: [ 45.893768][ T92] kasan_set_track+0x4c/0x80 [ 45.894549][ T92] kasan_save_alloc_info+0x24/0x30 [ 45.895468][ T92] __kasan_slab_alloc+0x70/0x88 [ 45.896317][ T92] slab_post_alloc_hook+0x74/0x430 [ 45.897167][ T92] kmem_cache_alloc_lru+0x1a4/0x280 [ 45.898049][ T92] jfs_alloc_inode+0x2c/0x68 [ 45.898840][ T92] iget_locked+0x178/0x7c4 [ 45.899605][ T92] jfs_iget+0x30/0x3e4 [ 45.900305][ T92] jfs_lookup+0x1c0/0x378 [ 45.901141][ T92] lookup_one_qstr_excl+0x108/0x230 [ 45.902055][ T92] do_unlinkat+0x1a8/0x500 [ 45.902815][ T92] __arm64_sys_unlinkat+0xe0/0xfc [ 45.903666][ T92] invoke_syscall+0x98/0x2b4 [ 45.904485][ T92] el0_svc_common+0x138/0x258 [ 45.905319][ T92] do_el0_svc+0x58/0x130 [ 45.906115][ T92] el0_svc+0x58/0x128 [ 45.906815][ T92] el0t_64_sync_handler+0x84/0xf0 [ 45.907646][ T92] el0t_64_sync+0x18c/0x190 [ 45.908470][ T92] [ 45.908874][ T92] The buggy address belongs to the object at ffff0000ea19c0c0 [ 45.908874][ T92] which belongs to the cache jfs_ip of size 2240 [ 45.911442][ T92] The buggy address is located 96 bytes to the right of [ 45.911442][ T92] 2240-byte region [ffff0000ea19c0c0, ffff0000ea19c980) [ 45.913897][ T92] [ 45.914280][ T92] The buggy address belongs to the physical page: [ 45.915375][ T92] page:00000000d40e9042 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a198 [ 45.917214][ T92] head:00000000d40e9042 order:3 compound_mapcount:0 compound_pincount:0 [ 45.918627][ T92] memcg:ffff0000c39a6501 [ 45.919299][ T92] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 45.920662][ T92] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c4c15980 [ 45.922133][ T92] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff0000c39a6501 [ 45.923599][ T92] page dumped because: kasan: bad access detected [ 45.924701][ T92] [ 45.925082][ T92] Memory state around the buggy address: [ 45.925994][ T92] ffff0000ea19c880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.927341][ T92] ffff0000ea19c900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.928722][ T92] >ffff0000ea19c980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.930091][ T92] ^ [ 45.931281][ T92] ffff0000ea19ca00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.932572][ T92] ffff0000ea19ca80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 45.933988][ T92] ================================================================== [ 45.862162][ T92] lock: 0xffff0000ea19c168, .magic: ffff8000, .owner: /0, .owner_cpu: 512 [ 45.936894][ T92] CPU: 1 PID: 92 Comm: jfsCommit Tainted: G B syzkaller #0 [ 45.938397][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.940093][ T92] Call trace: [ 45.940645][ T92] dump_backtrace+0x1c0/0x1ec [ 45.941455][ T92] show_stack+0x2c/0x3c [ 45.942190][ T92] __dump_stack+0x30/0x40 [ 45.942943][ T92] dump_stack_lvl+0xf4/0x15c [ 45.943724][ T92] dump_stack+0x1c/0x5c [ 45.944475][ T92] spin_dump+0x110/0x208 [ 45.945251][ T92] do_raw_spin_lock+0x1ec/0x2f8 [ 45.946104][ T92] _raw_spin_lock_irqsave+0x74/0xb0 [ 45.947033][ T92] __wake_up+0xe4/0x17c [ 45.947782][ T92] release_metapage+0x19c/0xc6c [ 45.948543][ T92] xtTruncate+0xb88/0x2644 [ 45.949285][ T92] jfs_free_zero_link+0x2c0/0x42c [ 45.950172][ T92] jfs_evict_inode+0x2f4/0x3e4 [ 45.950983][ T92] evict+0x3e0/0x828 [ 45.951673][ T92] iput+0x754/0x7e4 [ 45.952292][ T92] txUpdateMap+0x674/0x794 [ 45.953342][ T92] jfs_lazycommit+0x354/0x908 [ 45.954167][ T92] kthread+0x250/0x2d8 [ 45.954846][ T92] ret_from_fork+0x10/0x20 [ 45.955635][ T92] ================================================================================ [ 45.957237][ T92] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 45.958754][ T92] index 1147 is out of range for type 'unsigned long[8]' [ 45.959972][ T92] CPU: 1 PID: 92 Comm: jfsCommit Tainted: G B syzkaller #0 [ 45.961546][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.963124][ T92] Call trace: [ 45.963624][ T92] dump_backtrace+0x1c0/0x1ec [ 45.964346][ T92] show_stack+0x2c/0x3c [ 45.964996][ T92] __dump_stack+0x30/0x40 [ 45.965660][ T92] dump_stack_lvl+0xf4/0x15c [ 45.966363][ T92] dump_stack+0x1c/0x5c [ 45.967007][ T92] ubsan_epilogue+0x14/0x48 [ 45.967713][ T92] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 45.968499][ T92] queued_spin_lock_slowpath+0x8a8/0xc18 [ 45.969352][ T92] do_raw_spin_lock+0x2f4/0x2f8 [ 45.970100][ T92] _raw_spin_lock_irqsave+0x74/0xb0 [ 45.970894][ T92] __wake_up+0xe4/0x17c [ 45.971494][ T92] release_metapage+0x19c/0xc6c [ 45.972194][ T92] xtTruncate+0xb88/0x2644 [ 45.972928][ T92] jfs_free_zero_link+0x2c0/0x42c [ 45.973746][ T92] jfs_evict_inode+0x2f4/0x3e4 [ 45.974550][ T92] evict+0x3e0/0x828 [ 45.975203][ T92] iput+0x754/0x7e4 [ 45.975850][ T92] txUpdateMap+0x674/0x794 [ 45.976604][ T92] jfs_lazycommit+0x354/0x908 [ 45.977428][ T92] kthread+0x250/0x2d8 [ 45.978113][ T92] ret_from_fork+0x10/0x20 [ 45.978857][ T92] ================================================================================ [ 45.980427][ T92] Unable to handle kernel paging request at virtual address ffff800015189f80 [ 45.981831][ T92] KASAN: probably user-memory-access in range [0x00000000a8c4fc00-0x00000000a8c4fc07] [ 45.983461][ T92] Mem abort info: [ 45.984047][ T92] ESR = 0x0000000096000047 [ 45.984762][ T92] EC = 0x25: DABT (current EL), IL = 32 bits [ 45.985928][ T92] SET = 0, FnV = 0 [ 45.986581][ T92] EA = 0, S1PTW = 0 [ 45.987287][ T92] FSC = 0x07: level 3 translation fault [ 45.988255][ T92] Data abort info: [ 45.988863][ T92] ISV = 0, ISS = 0x00000047 [ 45.989600][ T92] CM = 0, WnR = 1 [ 45.990258][ T92] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000002229cd000 [ 45.991498][ T92] [ffff800015189f80] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fffa003, pte=0000000000000000 [ 45.993824][ T92] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 45.995021][ T92] Modules linked in: [ 45.995753][ T92] CPU: 1 PID: 92 Comm: jfsCommit Tainted: G B syzkaller #0 [ 45.997245][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.998983][ T92] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.000403][ T92] pc : queued_spin_lock_slowpath+0x598/0xc18 [ 46.001410][ T92] lr : queued_spin_lock_slowpath+0x8a8/0xc18 [ 46.002460][ T92] sp : ffff800020557340 [ 46.003123][ T92] x29: ffff8000205573e0 x28: ffff800015189f80 x27: 1fffe0001d43382d [ 46.004445][ T92] x26: ffff800015220f40 x25: 1fffe00033eacdf0 x24: dfff800000000000 [ 46.005911][ T92] x23: ffff7000040aae6c x22: ffff00019f566f88 x21: ffff800015189f80 [ 46.007284][ T92] x20: ffff00019f566f80 x19: ffff0000ea19c168 x18: 0000000000000000 [ 46.008698][ T92] x17: 3d3d3d3d3d3d3d3d x16: ffff800008193848 x15: 0000000000000000 [ 46.010094][ T92] x14: ffff700002fc1cbc x13: 1ffff00002fc1cbc x12: 0000000000ff0100 [ 46.011535][ T92] x11: ff008000081938cc x10: ffff800015189f80 x9 : 0000000000000000 [ 46.012947][ T92] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001 [ 46.014394][ T92] x5 : ffff800020556d98 x4 : ffff800015304cc0 x3 : ffff800008193894 [ 46.015813][ T92] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff00019f566f88 [ 46.017243][ T92] Call trace: [ 46.017778][ T92] queued_spin_lock_slowpath+0x598/0xc18 [ 46.018758][ T92] do_raw_spin_lock+0x2f4/0x2f8 [ 46.019593][ T92] _raw_spin_lock_irqsave+0x74/0xb0 [ 46.020489][ T92] __wake_up+0xe4/0x17c [ 46.021207][ T92] release_metapage+0x19c/0xc6c [ 46.022021][ T92] xtTruncate+0xb88/0x2644 [ 46.022793][ T92] jfs_free_zero_link+0x2c0/0x42c [ 46.023675][ T92] jfs_evict_inode+0x2f4/0x3e4 [ 46.024535][ T92] evict+0x3e0/0x828 [ 46.025247][ T92] iput+0x754/0x7e4 [ 46.025941][ T92] txUpdateMap+0x674/0x794 [ 46.026706][ T92] jfs_lazycommit+0x354/0x908 [ 46.027518][ T92] kthread+0x250/0x2d8 [ 46.028163][ T92] ret_from_fork+0x10/0x20 [ 46.028784][ T92] Code: aa1503e0 979340b7 aa1603e0 52800081 (f90002b4) [ 46.029872][ T92] ---[ end trace 0000000000000000 ]---