Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts.
2025/12/05 17:26:05 parsed 1 programs
[ 86.912343][ T9] cfg80211: failed to load regulatory.db
[ 87.665468][ T5804] cgroup: Unknown subsys name 'net'
[ 87.907327][ T5804] cgroup: Unknown subsys name 'cpuset'
[ 88.002187][ T5804] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 89.695834][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.745121][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.745144][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.927366][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.927386][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.326055][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.327567][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.328444][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.329550][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.330458][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.738948][ T5886] chnl_net:caif_netlink_parms(): no params data found
[ 99.172473][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.174078][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.174330][ T5886] bridge_slave_0: entered allmulticast mode
[ 99.176104][ T5886] bridge_slave_0: entered promiscuous mode
[ 99.194028][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.194156][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.194348][ T5886] bridge_slave_1: entered allmulticast mode
[ 99.196908][ T5886] bridge_slave_1: entered promiscuous mode
[ 99.357294][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.362195][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.505955][ T5886] team0: Port device team_slave_0 added
[ 99.513147][ T5886] team0: Port device team_slave_1 added
[ 99.793858][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.793870][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.793883][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.797655][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.797670][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.797691][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.988183][ T5886] hsr_slave_0: entered promiscuous mode
[ 99.989201][ T5886] hsr_slave_1: entered promiscuous mode
[ 100.333600][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.383371][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.408223][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.446017][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.680838][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.803011][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.815637][ T1500] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.816772][ T1500] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.853785][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.854256][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.089136][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.135078][ T5886] veth0_vlan: entered promiscuous mode
[ 101.140916][ T5886] veth1_vlan: entered promiscuous mode
[ 101.179656][ T5886] veth0_macvtap: entered promiscuous mode
[ 101.185788][ T5886] veth1_macvtap: entered promiscuous mode
[ 101.203981][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.216161][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.234011][ T3451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.235956][ T3451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.235999][ T3451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.236032][ T3451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.056632][ T1146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.316239][ T1146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/12/05 17:26:23 executed programs: 0
[ 102.572418][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 102.597399][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 102.598268][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 102.599384][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 102.600049][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.649094][ T1146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.878071][ T5912] chnl_net:caif_netlink_parms(): no params data found
[ 103.205148][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.205297][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.205429][ T5912] bridge_slave_0: entered allmulticast mode
[ 103.206974][ T5912] bridge_slave_0: entered promiscuous mode
[ 103.210555][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.210627][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.210918][ T5912] bridge_slave_1: entered allmulticast mode
[ 103.259221][ T5912] bridge_slave_1: entered promiscuous mode
[ 103.387400][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.390958][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.706352][ T1146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.753772][ T5912] team0: Port device team_slave_0 added
[ 103.756723][ T5912] team0: Port device team_slave_1 added
[ 103.904305][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.904320][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.904332][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.906670][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.906682][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.906695][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.319233][ T5912] hsr_slave_0: entered promiscuous mode
[ 104.320090][ T5912] hsr_slave_1: entered promiscuous mode
[ 104.320795][ T5912] debugfs: 'hsr0' already exists in 'hsr'
[ 104.320867][ T5912] Cannot create hsr debugfs directory
[ 104.663825][ T61] Bluetooth: hci0: command tx timeout
[ 104.753735][ T1146] bridge_slave_1: left allmulticast mode
[ 104.754103][ T1146] bridge_slave_1: left promiscuous mode
[ 104.755284][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.852781][ T1146] bridge_slave_0: left allmulticast mode
[ 104.852799][ T1146] bridge_slave_0: left promiscuous mode
[ 104.852951][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.532534][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 106.592181][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 106.633784][ T1146] bond0 (unregistering): Released all slaves
[ 106.744678][ T61] Bluetooth: hci0: command tx timeout
[ 106.991777][ T1146] hsr_slave_0: left promiscuous mode
[ 107.031696][ T1146] hsr_slave_1: left promiscuous mode
[ 107.032679][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 107.032742][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 107.065194][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 107.065221][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 107.138332][ T1146] veth1_macvtap: left promiscuous mode
[ 107.138486][ T1146] veth0_macvtap: left promiscuous mode
[ 107.138647][ T1146] veth1_vlan: left promiscuous mode
[ 107.138818][ T1146] veth0_vlan: left promiscuous mode
[ 108.821681][ T61] Bluetooth: hci0: command tx timeout
[ 109.152202][ T1146] team0 (unregistering): Port device team_slave_1 removed
[ 109.362389][ T1146] team0 (unregistering): Port device team_slave_0 removed
[ 110.901785][ T61] Bluetooth: hci0: command tx timeout
[ 111.871807][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 111.919126][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 111.957628][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 111.995602][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 112.250371][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0
[ 112.280430][ T5912] 8021q: adding VLAN 0 to HW filter on device team0
[ 112.289751][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.289960][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 112.305218][ T1500] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.305471][ T1500] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 112.878921][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 112.951137][ T5912] veth0_vlan: entered promiscuous mode
[ 112.974750][ T5912] veth1_vlan: entered promiscuous mode
[ 113.031074][ T5912] veth0_macvtap: entered promiscuous mode
[ 113.040740][ T5912] veth1_macvtap: entered promiscuous mode
[ 113.061342][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.076350][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.094307][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.096985][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.097029][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.097062][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.311104][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.311122][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.366463][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.366484][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/05 17:26:34 executed programs: 2
[ 113.727830][ T5988] loop0: detected capacity change from 0 to 32768
[ 113.842630][ T5988] ==================================================================
[ 113.842650][ T5988] BUG: KASAN: slab-use-after-free in jfs_readdir+0x118f/0x3ae0
[ 113.842685][ T5988] Read of size 8 at addr ffff88801df67d98 by task syz.0.17/5988
[ 113.842700][ T5988]
[ 113.842718][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 113.842736][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 113.842753][ T5988] Call Trace:
[ 113.842761][ T5988]
[ 113.842769][ T5988] dump_stack_lvl+0x189/0x250
[ 113.842790][ T5988] ? __kasan_check_byte+0x12/0x40
[ 113.842813][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10
[ 113.842832][ T5988] ? lock_release+0x4b/0x3b0
[ 113.842856][ T5988] ? __virt_addr_valid+0x4a5/0x5c0
[ 113.842879][ T5988] print_report+0xca/0x240
[ 113.842898][ T5988] ? jfs_readdir+0x118f/0x3ae0
[ 113.842916][ T5988] kasan_report+0x118/0x150
[ 113.842936][ T5988] ? jfs_readdir+0x118f/0x3ae0
[ 113.842958][ T5988] jfs_readdir+0x118f/0x3ae0
[ 113.842988][ T5988] ? do_raw_spin_lock+0x121/0x290
[ 113.843007][ T5988] ? __pfx_jfs_readdir+0x10/0x10
[ 113.843038][ T5988] ? rwbase_write_lock+0x56f/0x750
[ 113.843058][ T5988] ? __pfx_jfs_readdir+0x10/0x10
[ 113.843079][ T5988] wrap_directory_iterator+0x99/0xe0
[ 113.843099][ T5988] iterate_dir+0x3a5/0x580
[ 113.843119][ T5988] __se_sys_getdents64+0xe4/0x260
[ 113.843137][ T5988] ? __pfx___se_sys_getdents64+0x10/0x10
[ 113.843155][ T5988] ? __pfx_filldir64+0x10/0x10
[ 113.843173][ T5988] ? __x64_sys_lseek+0x187/0x1f0
[ 113.843192][ T5988] ? do_syscall_64+0xbe/0xf80
[ 113.843208][ T5988] do_syscall_64+0xfa/0xf80
[ 113.843223][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.843240][ T5988] ? clear_bhb_loop+0x60/0xb0
[ 113.843259][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.843275][ T5988] RIP: 0033:0x7f505a60f749
[ 113.843299][ T5988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 113.843313][ T5988] RSP: 002b:00007ffdfa86c878 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 113.843332][ T5988] RAX: ffffffffffffffda RBX: 00007f505a865fa0 RCX: 00007f505a60f749
[ 113.843346][ T5988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 113.843356][ T5988] RBP: 00007f505a693f91 R08: 0000000000000000 R09: 0000000000000000
[ 113.843367][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 113.843377][ T5988] R13: 00007f505a865fa0 R14: 00007f505a865fa0 R15: 0000000000000003
[ 113.843395][ T5988]
[ 113.843402][ T5988]
[ 113.843406][ T5988] Allocated by task 5988:
[ 113.843414][ T5988] kasan_save_track+0x3e/0x80
[ 113.843431][ T5988] __kasan_slab_alloc+0x6c/0x80
[ 113.843447][ T5988] kmem_cache_alloc_noprof+0x181/0x6d0
[ 113.843465][ T5988] mempool_alloc_noprof+0x185/0x390
[ 113.843479][ T5988] __get_metapage+0x509/0xde0
[ 113.843558][ T5988] dtSplitRoot+0x202/0x16c0
[ 113.843576][ T5988] dtInsert+0xef8/0x5f40
[ 113.843593][ T5988] jfs_create+0x6c8/0xa80
[ 113.843612][ T5988] path_openat+0x18d1/0x3df0
[ 113.843627][ T5988] do_filp_open+0x1fa/0x410
[ 113.843641][ T5988] do_sys_openat2+0x121/0x200
[ 113.843661][ T5988] __x64_sys_openat+0x138/0x170
[ 113.843681][ T5988] do_syscall_64+0xfa/0xf80
[ 113.843693][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.843708][ T5988]
[ 113.843712][ T5988] Freed by task 5988:
[ 113.843720][ T5988] kasan_save_track+0x3e/0x80
[ 113.843735][ T5988] __kasan_save_free_info+0x46/0x50
[ 113.843746][ T5988] __kasan_slab_free+0x5c/0x80
[ 113.843759][ T5988] kmem_cache_free+0x18f/0x8d0
[ 113.843777][ T5988] mempool_free+0xf5/0x140
[ 113.843790][ T5988] release_metapage+0x84c/0xab0
[ 113.843803][ T5988] jfs_readdir+0xece/0x3ae0
[ 113.843820][ T5988] wrap_directory_iterator+0x99/0xe0
[ 113.843836][ T5988] iterate_dir+0x3a5/0x580
[ 113.843849][ T5988] __se_sys_getdents64+0xe4/0x260
[ 113.843865][ T5988] do_syscall_64+0xfa/0xf80
[ 113.843877][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.843892][ T5988]
[ 113.843896][ T5988] The buggy address belongs to the object at ffff88801df67d68
[ 113.843896][ T5988] which belongs to the cache jfs_mp of size 248
[ 113.843910][ T5988] The buggy address is located 48 bytes inside of
[ 113.843910][ T5988] freed 248-byte region [ffff88801df67d68, ffff88801df67e60)
[ 113.843928][ T5988]
[ 113.843932][ T5988] The buggy address belongs to the physical page:
[ 113.843955][ T5988] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1df67
[ 113.843971][ T5988] flags: 0x80000000000000(node=0|zone=1)
[ 113.843988][ T5988] page_type: f5(slab)
[ 113.844004][ T5988] raw: 0080000000000000 ffff88801dbb7a00 dead000000000122 0000000000000000
[ 113.844017][ T5988] raw: 0000000000000000 00000000800d000d 00000000f5000000 0000000000000000
[ 113.844025][ T5988] page dumped because: kasan: bad access detected
[ 113.844037][ T5988] page_owner tracks the page as allocated
[ 113.844043][ T5988] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5988, tgid 5988 (syz.0.17), ts 113749003289, free_ts 113080378553
[ 113.844072][ T5988] post_alloc_hook+0x234/0x290
[ 113.844090][ T5988] get_page_from_freelist+0x28c0/0x2960
[ 113.844109][ T5988] __alloc_frozen_pages_noprof+0x181/0x370
[ 113.844128][ T5988] alloc_pages_mpol+0xd1/0x380
[ 113.844146][ T5988] allocate_slab+0x86/0x3b0
[ 113.844160][ T5988] ___slab_alloc+0xb10/0x1400
[ 113.844179][ T5988] __slab_alloc+0xc6/0x1f0
[ 113.844197][ T5988] kmem_cache_alloc_noprof+0xec/0x6d0
[ 113.844213][ T5988] mempool_alloc_noprof+0x185/0x390
[ 113.844227][ T5988] __get_metapage+0x509/0xde0
[ 113.844246][ T5988] diReadSpecial+0x25b/0x710
[ 113.844260][ T5988] jfs_mount+0x73/0x870
[ 113.844272][ T5988] jfs_fill_super+0x6bc/0xd80
[ 113.844288][ T5988] get_tree_bdev_flags+0x40e/0x4d0
[ 113.844304][ T5988] vfs_get_tree+0x92/0x2a0
[ 113.844319][ T5988] do_new_mount+0x302/0xa10
[ 113.844336][ T5988] page last free pid 5912 tgid 5912 stack trace:
[ 113.844347][ T5988] __free_frozen_pages+0xfb6/0x1140
[ 113.844364][ T5988] __put_partials+0x149/0x170
[ 113.844383][ T5988] __slab_free+0x139/0x210
[ 113.844397][ T5988] qlist_free_all+0x97/0x100
[ 113.844412][ T5988] kasan_quarantine_reduce+0x148/0x160
[ 113.844428][ T5988] __kasan_slab_alloc+0x22/0x80
[ 113.844444][ T5988] kmem_cache_alloc_node_noprof+0x23b/0x700
[ 113.844461][ T5988] __alloc_skb+0x255/0x430
[ 113.844476][ T5988] netlink_sendmsg+0x5c6/0xb30
[ 113.844501][ T5988] __sock_sendmsg+0x21c/0x270
[ 113.844521][ T5988] __sys_sendto+0x3c7/0x520
[ 113.844535][ T5988] __x64_sys_sendto+0xde/0x100
[ 113.844550][ T5988] do_syscall_64+0xfa/0xf80
[ 113.844562][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.844577][ T5988]
[ 113.844581][ T5988] Memory state around the buggy address:
[ 113.844591][ T5988] ffff88801df67c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 113.844602][ T5988] ffff88801df67d00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fa fb fb
[ 113.844613][ T5988] >ffff88801df67d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 113.844621][ T5988] ^
[ 113.844630][ T5988] ffff88801df67e00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 113.844641][ T5988] ffff88801df67e80: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00
[ 113.844649][ T5988] ==================================================================
[ 113.844660][ T5988] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 113.844678][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 113.844696][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 113.844706][ T5988] Call Trace:
[ 113.844713][ T5988]
[ 113.844720][ T5988] dump_stack_lvl+0x99/0x250
[ 113.844739][ T5988] ? __asan_memcpy+0x40/0x70
[ 113.844753][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10
[ 113.844772][ T5988] ? __pfx__printk+0x10/0x10
[ 113.844792][ T5988] vpanic+0x237/0x6d0
[ 113.844813][ T5988] ? __pfx_vpanic+0x10/0x10
[ 113.844837][ T5988] panic+0xb9/0xc0
[ 113.844856][ T5988] ? __pfx_panic+0x10/0x10
[ 113.844875][ T5988] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 113.844899][ T5988] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 113.844923][ T5988] ? jfs_readdir+0x118f/0x3ae0
[ 113.844942][ T5988] check_panic_on_warn+0x89/0xb0
[ 113.844965][ T5988] ? jfs_readdir+0x118f/0x3ae0
[ 113.844984][ T5988] end_report+0x6f/0x140
[ 113.845003][ T5988] kasan_report+0x129/0x150
[ 113.845025][ T5988] ? jfs_readdir+0x118f/0x3ae0
[ 113.845048][ T5988] jfs_readdir+0x118f/0x3ae0
[ 113.845079][ T5988] ? do_raw_spin_lock+0x121/0x290
[ 113.845098][ T5988] ? __pfx_jfs_readdir+0x10/0x10
[ 113.845128][ T5988] ? rwbase_write_lock+0x56f/0x750
[ 113.845148][ T5988] ? __pfx_jfs_readdir+0x10/0x10
[ 113.845168][ T5988] wrap_directory_iterator+0x99/0xe0
[ 113.845187][ T5988] iterate_dir+0x3a5/0x580
[ 113.845206][ T5988] __se_sys_getdents64+0xe4/0x260
[ 113.845225][ T5988] ? __pfx___se_sys_getdents64+0x10/0x10
[ 113.845243][ T5988] ? __pfx_filldir64+0x10/0x10
[ 113.845261][ T5988] ? __x64_sys_lseek+0x187/0x1f0
[ 113.845280][ T5988] ? do_syscall_64+0xbe/0xf80
[ 113.845296][ T5988] do_syscall_64+0xfa/0xf80
[ 113.845311][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.845328][ T5988] ? clear_bhb_loop+0x60/0xb0
[ 113.845346][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.845362][ T5988] RIP: 0033:0x7f505a60f749
[ 113.845376][ T5988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 113.845389][ T5988] RSP: 002b:00007ffdfa86c878 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 113.845408][ T5988] RAX: ffffffffffffffda RBX: 00007f505a865fa0 RCX: 00007f505a60f749
[ 113.845420][ T5988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 113.845431][ T5988] RBP: 00007f505a693f91 R08: 0000000000000000 R09: 0000000000000000
[ 113.845442][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 113.845452][ T5988] R13: 00007f505a865fa0 R14: 00007f505a865fa0 R15: 0000000000000003
[ 113.845472][ T5988]
[ 113.845903][ T5988] Kernel Offset: disabled