Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://35089 [ 32.253532][ T4340] cgroup: Unknown subsys name 'net' [ 32.560795][ T4340] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.842986][ T4340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.039275][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.040483][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.042153][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.052736][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.054011][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.055313][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.692239][ T4397] chnl_net:caif_netlink_parms(): no params data found [ 38.709082][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.710375][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.711836][ T4397] device bridge_slave_0 entered promiscuous mode [ 38.714299][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.715719][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.717255][ T4397] device bridge_slave_1 entered promiscuous mode [ 38.728333][ T4397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.730822][ T4397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.736831][ T4397] team0: Port device team_slave_0 added [ 38.738803][ T4397] team0: Port device team_slave_1 added [ 38.744303][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.745451][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.749681][ T4397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.752337][ T4397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.753374][ T4397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.757240][ T4397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.818979][ T4397] device hsr_slave_0 entered promiscuous mode [ 38.857641][ T4397] device hsr_slave_1 entered promiscuous mode [ 38.932927][ T4397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.989193][ T4397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.047355][ T4397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.081072][ T4397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.168533][ T4397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.172914][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.174704][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.178006][ T4397] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.180434][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.182428][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.184147][ T1577] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.185250][ T1577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.186955][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.205219][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.206888][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.208813][ T1577] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.209975][ T1577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.212485][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.215237][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.219613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.221363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.222884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.224853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.226462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.230347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.231879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.234661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.236295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.239808][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.309793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.311049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.314980][ T4397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.320948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.322661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.329763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.331538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.333343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.334864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.346833][ T4397] device veth0_vlan entered promiscuous mode [ 39.351064][ T4397] device veth1_vlan entered promiscuous mode [ 39.358490][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.360100][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.361542][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.362957][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.365198][ T4397] device veth0_macvtap entered promiscuous mode [ 39.367890][ T4397] device veth1_macvtap entered promiscuous mode [ 39.379870][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.381136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.382709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.384057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.385523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.388666][ T4397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.390134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.391664][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.394980][ T4397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.396346][ T4397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.398006][ T4397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.399388][ T4397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.943076][ T4438] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.944677][ T4438] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.946002][ T4438] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.949058][ T4438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.950436][ T4438] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.951643][ T4438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:40 executed programs: 0 [ 40.424292][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.425975][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.427226][ T4439] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.429071][ T4439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.430399][ T4439] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 40.431593][ T4439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.731410][ T4448] chnl_net:caif_netlink_parms(): no params data found [ 40.746359][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.748877][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.750938][ T4448] device bridge_slave_0 entered promiscuous mode [ 40.752997][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.754098][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.755609][ T4448] device bridge_slave_1 entered promiscuous mode [ 40.763617][ T4448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.766808][ T4448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.774065][ T4448] team0: Port device team_slave_0 added [ 40.775838][ T4448] team0: Port device team_slave_1 added [ 40.781418][ T4448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.782624][ T4448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.786636][ T4448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.790157][ T4448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.791205][ T4448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.794937][ T4448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.820465][ T4448] device hsr_slave_0 entered promiscuous mode [ 40.857683][ T4448] device hsr_slave_1 entered promiscuous mode [ 40.897560][ T4448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.898896][ T4448] Cannot create hsr debugfs directory [ 41.228898][ T4448] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.488010][ T4439] Bluetooth: hci1: command 0x0409 tx timeout [ 44.028703][ T4448] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.557783][ T4439] Bluetooth: hci1: command 0x041b tx timeout [ 45.348406][ T4448] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.449238][ T4448] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.643706][ T4448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.730504][ T4448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.820538][ T4448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.910769][ T4448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.004485][ T4448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.008154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.009540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.011730][ T4448] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.014078][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.015605][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.017174][ T536] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.018340][ T536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.020016][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.070685][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.072499][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.073880][ T536] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.074956][ T536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.077302][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.080526][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.083767][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.085919][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.087533][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.090413][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.092099][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.094628][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.096049][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.099359][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.100887][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.103043][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.120659][ T1755] device hsr_slave_0 left promiscuous mode [ 46.157906][ T1755] device hsr_slave_1 left promiscuous mode [ 46.267567][ T1755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.268800][ T1755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.270728][ T1755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.271811][ T1755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.273179][ T1755] device bridge_slave_1 left promiscuous mode [ 46.274565][ T1755] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.308260][ T1755] device bridge_slave_0 left promiscuous mode [ 46.309405][ T1755] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.437695][ T1755] device veth1_macvtap left promiscuous mode [ 46.438738][ T1755] device veth0_macvtap left promiscuous mode [ 46.439681][ T1755] device veth1_vlan left promiscuous mode [ 46.440564][ T1755] device veth0_vlan left promiscuous mode [ 46.637484][ T4439] Bluetooth: hci1: command 0x040f tx timeout [ 48.608700][ T1755] team0 (unregistering): Port device team_slave_1 removed [ 48.717748][ T4439] Bluetooth: hci1: command 0x0419 tx timeout [ 48.798063][ T1755] team0 (unregistering): Port device team_slave_0 removed [ 48.977915][ T1755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.188616][ T1755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.828305][ T1755] bond0 (unregistering): Released all slaves [ 51.137415][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.139200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.142361][ T4448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.147122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.149101][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.155281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.156765][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.159070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.161176][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.163322][ T4448] device veth0_vlan entered promiscuous mode [ 51.167616][ T4448] device veth1_vlan entered promiscuous mode [ 51.173616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.175072][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.176442][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.178230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.180504][ T4448] device veth0_macvtap entered promiscuous mode [ 51.182769][ T4448] device veth1_macvtap entered promiscuous mode [ 51.188681][ T4448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.189929][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.191418][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.193525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.194947][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.197402][ T4448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.203862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.205516][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.207845][ T4448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.209224][ T4448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.210496][ T4448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.211985][ T4448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.233245][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.234584][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.238307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.241274][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.242527][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.243754][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.371357][ T4464] loop0: detected capacity change from 0 to 32768 [ 51.389535][ T93] BUG: spinlock bad magic on CPU#0, jfsCommit/93 [ 51.390643][ T93] ================================================================== [ 51.391958][ T93] BUG: KASAN: slab-out-of-bounds in string+0x1ec/0x278 [ 51.392896][ T93] Read of size 1 at addr ffff0000e57a49e0 by task jfsCommit/93 [ 51.394034][ T93] [ 51.394374][ T93] CPU: 0 PID: 93 Comm: jfsCommit Not tainted syzkaller #0 [ 51.395442][ T93] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 51.396898][ T93] Call trace: [ 51.397376][ T93] dump_backtrace+0x1c4/0x1f0 [ 51.398160][ T93] show_stack+0x2c/0x3c [ 51.398770][ T93] __dump_stack+0x30/0x40 [ 51.399510][ T93] dump_stack_lvl+0xf4/0x15c [ 51.400292][ T93] print_address_description+0x88/0x218 [ 51.401211][ T93] print_report+0x50/0x68 [ 51.401874][ T93] kasan_report+0xa8/0xfc [ 51.402583][ T93] __asan_report_load1_noabort+0x2c/0x38 [ 51.403372][ T93] string+0x1ec/0x278 [ 51.404032][ T93] vsnprintf+0x10ec/0x18d8 [ 51.404719][ T93] vprintk_store+0x36c/0xb60 [ 51.405500][ T93] vprintk_emit+0x118/0x2f0 [ 51.406262][ T93] vprintk_default+0x54/0x80 [ 51.407023][ T93] vprintk+0x200/0x2a0 [ 51.407724][ T93] _printk+0xe0/0x130 [ 51.408367][ T93] spin_dump+0x10c/0x1fc [ 51.409122][ T93] do_raw_spin_lock+0x1ec/0x2f8 [ 51.409883][ T93] _raw_spin_lock_irqsave+0x74/0xb0 [ 51.410726][ T93] __wake_up+0xe8/0x180 [ 51.411417][ T93] release_metapage+0x19c/0xc4c [ 51.412164][ T93] xtTruncate+0xb8c/0x266c [ 51.412861][ T93] jfs_free_zero_link+0x2c0/0x424 [ 51.413666][ T93] jfs_evict_inode+0x2f4/0x3e4 [ 51.414474][ T93] evict+0x3d8/0x824 [ 51.415083][ T93] iput+0x728/0x7e8 [ 51.415692][ T93] txUpdateMap+0x68c/0x7b0 [ 51.416387][ T93] jfs_lazycommit+0x360/0x930 [ 51.417184][ T93] kthread+0x254/0x2e0 [ 51.417825][ T93] ret_from_fork+0x10/0x20 [ 51.418581][ T93] [ 51.418942][ T93] Allocated by task 4464: [ 51.419640][ T93] kasan_set_track+0x4c/0x80 [ 51.420327][ T93] kasan_save_alloc_info+0x24/0x30 [ 51.421086][ T93] __kasan_slab_alloc+0x70/0x88 [ 51.421838][ T93] slab_post_alloc_hook+0x74/0x430 [ 51.422618][ T93] kmem_cache_alloc_lru+0x1a8/0x284 [ 51.423416][ T93] jfs_alloc_inode+0x2c/0x68 [ 51.424122][ T93] iget_locked+0x174/0x754 [ 51.424818][ T93] jfs_iget+0x30/0x400 [ 51.425442][ T93] jfs_lookup+0x1c0/0x378 [ 51.426153][ T93] lookup_one_qstr_excl+0x108/0x230 [ 51.427003][ T93] do_unlinkat+0x194/0x504 [ 51.427708][ T93] __arm64_sys_unlinkat+0xe0/0xfc [ 51.428553][ T93] invoke_syscall+0x98/0x290 [ 51.429330][ T93] el0_svc_common+0x13c/0x258 [ 51.430096][ T93] do_el0_svc+0x5c/0x134 [ 51.430794][ T93] el0_svc+0x58/0x128 [ 51.431481][ T93] el0t_64_sync_handler+0x84/0xf0 [ 51.432299][ T93] el0t_64_sync+0x18c/0x190 [ 51.433066][ T93] [ 51.433439][ T93] The buggy address belongs to the object at ffff0000e57a40c0 [ 51.433439][ T93] which belongs to the cache jfs_ip of size 2240 [ 51.435667][ T93] The buggy address is located 96 bytes to the right of [ 51.435667][ T93] 2240-byte region [ffff0000e57a40c0, ffff0000e57a4980) [ 51.438026][ T93] [ 51.438425][ T93] The buggy address belongs to the physical page: [ 51.439516][ T93] page:000000008ce9a988 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1257a0 [ 51.441881][ T93] head:000000008ce9a988 order:3 compound_mapcount:0 compound_pincount:0 [ 51.443250][ T93] memcg:ffff0000cdcbe901 [ 51.443929][ T93] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 51.445211][ T93] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c432b080 [ 51.446647][ T93] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff0000cdcbe901 [ 51.447972][ T93] page dumped because: kasan: bad access detected [ 51.448991][ T93] [ 51.449362][ T93] Memory state around the buggy address: [ 51.450265][ T93] ffff0000e57a4880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.451668][ T93] ffff0000e57a4900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 51.452938][ T93] >ffff0000e57a4980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.454267][ T93] ^ [ 51.455432][ T93] ffff0000e57a4a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.456676][ T93] ffff0000e57a4a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.457885][ T93] ================================================================== [ 51.390633][ T93] lock: 0xffff0000e57a4168, .magic: ffff8000, .owner: /0, .owner_cpu: 512 [ 51.460572][ T93] CPU: 0 PID: 93 Comm: jfsCommit Tainted: G B syzkaller #0 [ 51.461987][ T93] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 51.463634][ T93] Call trace: [ 51.464324][ T93] dump_backtrace+0x1c4/0x1f0 [ 51.465136][ T93] show_stack+0x2c/0x3c [ 51.465810][ T93] __dump_stack+0x30/0x40 [ 51.466556][ T93] dump_stack_lvl+0xf4/0x15c [ 51.467275][ T93] dump_stack+0x1c/0x5c [ 51.467913][ T93] spin_dump+0x110/0x1fc [ 51.468605][ T93] do_raw_spin_lock+0x1ec/0x2f8 [ 51.469402][ T93] _raw_spin_lock_irqsave+0x74/0xb0 [ 51.470208][ T93] __wake_up+0xe8/0x180 [ 51.470907][ T93] release_metapage+0x19c/0xc4c [ 51.471650][ T93] xtTruncate+0xb8c/0x266c [ 51.472333][ T93] jfs_free_zero_link+0x2c0/0x424 [ 51.473144][ T93] jfs_evict_inode+0x2f4/0x3e4 [ 51.473863][ T93] evict+0x3d8/0x824 [ 51.474556][ T93] iput+0x728/0x7e8 [ 51.475182][ T93] txUpdateMap+0x68c/0x7b0 [ 51.475905][ T93] jfs_lazycommit+0x360/0x930 [ 51.476694][ T93] kthread+0x254/0x2e0 [ 51.477357][ T93] ret_from_fork+0x10/0x20 [ 51.478060][ T93] ================================================================================ [ 51.479612][ T93] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 51.480970][ T93] index 1152 is out of range for type 'unsigned long[8]' [ 51.482070][ T93] CPU: 0 PID: 93 Comm: jfsCommit Tainted: G B syzkaller #0 [ 51.483502][ T93] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 51.485139][ T93] Call trace: [ 51.485670][ T93] dump_backtrace+0x1c4/0x1f0 [ 51.486389][ T93] show_stack+0x2c/0x3c [ 51.487103][ T93] __dump_stack+0x30/0x40 [ 51.487791][ T93] dump_stack_lvl+0xf4/0x15c [ 51.488558][ T93] dump_stack+0x1c/0x5c [ 51.489317][ T93] ubsan_epilogue+0x14/0x48 [ 51.489998][ T93] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 51.490931][ T93] queued_spin_lock_slowpath+0x8a8/0xc14 [ 51.491840][ T93] do_raw_spin_lock+0x2f4/0x2f8 [ 51.492624][ T93] _raw_spin_lock_irqsave+0x74/0xb0 [ 51.493495][ T93] __wake_up+0xe8/0x180 [ 51.494197][ T93] release_metapage+0x19c/0xc4c [ 51.494983][ T93] xtTruncate+0xb8c/0x266c [ 51.495737][ T93] jfs_free_zero_link+0x2c0/0x424 [ 51.496614][ T93] jfs_evict_inode+0x2f4/0x3e4 [ 51.497355][ T93] evict+0x3d8/0x824 [ 51.497926][ T93] iput+0x728/0x7e8 [ 51.498580][ T93] txUpdateMap+0x68c/0x7b0 [ 51.499324][ T93] jfs_lazycommit+0x360/0x930 [ 51.500088][ T93] kthread+0x254/0x2e0 [ 51.500750][ T93] ret_from_fork+0x10/0x20 [ 51.501468][ T93] ================================================================================ [ 51.502884][ T93] Unable to handle kernel paging request at virtual address ffff8000152ea190 [ 51.504264][ T93] KASAN: probably user-memory-access in range [0x00000000a9750c80-0x00000000a9750c87] [ 51.505850][ T93] Mem abort info: [ 51.506464][ T93] ESR = 0x0000000096000047 [ 51.507207][ T93] EC = 0x25: DABT (current EL), IL = 32 bits [ 51.508323][ T93] SET = 0, FnV = 0 [ 51.509029][ T93] EA = 0, S1PTW = 0 [ 51.509679][ T93] FSC = 0x07: level 3 translation fault [ 51.510631][ T93] Data abort info: [ 51.511231][ T93] ISV = 0, ISS = 0x00000047 [ 51.511997][ T93] CM = 0, WnR = 1 [ 51.512616][ T93] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020dd2f000 [ 51.513842][ T93] [ffff8000152ea190] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fff9003, pte=0000000000000000 [ 51.515975][ T93] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 51.517159][ T93] Modules linked in: [ 51.517800][ T93] CPU: 0 PID: 93 Comm: jfsCommit Tainted: G B syzkaller #0 [ 51.519184][ T93] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 51.520773][ T93] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 51.522080][ T93] pc : queued_spin_lock_slowpath+0x598/0xc14 [ 51.523041][ T93] lr : queued_spin_lock_slowpath+0x8a8/0xc14 [ 51.524034][ T93] sp : ffff80001ffc7380 [ 51.524692][ T93] x29: ffff80001ffc7420 x28: 1fffe00033e75030 x27: ffff8000152ea190 [ 51.526022][ T93] x26: ffff00019f3a8188 x25: ffff80001ffc73a0 x24: 1fffe0001caf482d [ 51.527348][ T93] x23: dfff800000000000 x22: ffff700003ff8e74 x21: ffff8000152ea190 [ 51.528668][ T93] x20: ffff00019f3a8180 x19: ffff0000e57a4168 x18: 1fffe00033e7277e [ 51.529909][ T93] x17: 3d3d3d3d3d3d3d3d x16: ffff800008195560 x15: 3d3d3d3d3d3d3d3d [ 51.531185][ T93] x14: ffff700002ff04bc x13: 1ffff00002ff04bc x12: 0000000000000004 [ 51.532473][ T93] x11: ff008000081955e4 x10: ffff8000152ea180 x9 : 0000000000000001 [ 51.533718][ T93] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001 [ 51.534996][ T93] x5 : ffff80001ffc6dd8 x4 : ffff800015464e60 x3 : ffff8000081955ac [ 51.536299][ T93] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff00019f3a8188 [ 51.537566][ T93] Call trace: [ 51.538104][ T93] queued_spin_lock_slowpath+0x598/0xc14 [ 51.539013][ T93] do_raw_spin_lock+0x2f4/0x2f8 [ 51.539843][ T93] _raw_spin_lock_irqsave+0x74/0xb0 [ 51.540694][ T93] __wake_up+0xe8/0x180 [ 51.541331][ T93] release_metapage+0x19c/0xc4c [ 51.542129][ T93] xtTruncate+0xb8c/0x266c [ 51.542821][ T93] jfs_free_zero_link+0x2c0/0x424 [ 51.543634][ T93] jfs_evict_inode+0x2f4/0x3e4 [ 51.544426][ T93] evict+0x3d8/0x824 [ 51.545038][ T93] iput+0x728/0x7e8 [ 51.545649][ T93] txUpdateMap+0x68c/0x7b0 [ 51.546316][ T93] jfs_lazycommit+0x360/0x930 [ 51.547097][