[ 138.849248][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.849278][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.987886][ T66] veth1_macvtap: left promiscuous mode [ 138.987982][ T66] veth0_macvtap: left promiscuous mode [ 138.988322][ T66] veth1_vlan: left promiscuous mode [ 138.988459][ T66] veth0_vlan: left promiscuous mode [ 140.086353][ T66] team0 (unregistering): Port device team_slave_1 removed [ 140.146431][ T66] team0 (unregistering): Port device team_slave_0 removed [ 140.349897][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 141.128820][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 Warning: Permanently added '10.128.1.135' (ED25519) to the list of known hosts. 2026/09/10 05:10:48 ignoring optional flag "type"="gce" 2026/09/10 05:10:49 parsed 1 programs [ 159.646477][ T5951] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.147396][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.147563][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.147699][ T6021] bridge_slave_0: entered allmulticast mode [ 164.149642][ T6021] bridge_slave_0: entered promiscuous mode [ 164.152490][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.152643][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.152772][ T6021] bridge_slave_1: entered allmulticast mode [ 164.154775][ T6021] bridge_slave_1: entered promiscuous mode [ 164.341027][ T6021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.344512][ T6021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.519134][ T6021] team0: Port device team_slave_0 added [ 164.521972][ T6021] team0: Port device team_slave_1 added [ 164.678369][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.678385][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.678404][ T6021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.680215][ T6021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.680234][ T6021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.680253][ T6021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.071901][ T6021] hsr_slave_0: entered promiscuous mode [ 165.073672][ T6021] hsr_slave_1: entered promiscuous mode [ 167.611513][ T6021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 167.653325][ T6021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.654901][ T6021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 167.689502][ T6021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.694442][ T6021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 167.751705][ T6021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.753845][ T6021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 167.785271][ T6021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 168.018555][ T6021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.062362][ T6021] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.085172][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.102799][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.133097][ T984] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.133257][ T984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.933130][ T6021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.094599][ T6021] veth0_vlan: entered promiscuous mode [ 169.116979][ T6021] veth1_vlan: entered promiscuous mode [ 169.200447][ T6021] veth0_macvtap: entered promiscuous mode [ 169.244423][ T6021] veth1_macvtap: entered promiscuous mode [ 169.335698][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.363086][ T6021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.500931][ T3341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.506429][ T984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.635147][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.659964][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.415070][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.907837][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.302734][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.816556][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.984001][ T12] bridge_slave_1: left allmulticast mode [ 172.984045][ T12] bridge_slave_1: left promiscuous mode [ 172.984563][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.127506][ T12] bridge_slave_0: left allmulticast mode [ 173.127548][ T12] bridge_slave_0: left promiscuous mode [ 173.127857][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.066238][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.157956][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.208916][ T12] bond0 (unregistering): Released all slaves [ 174.745674][ T12] hsr_slave_0: left promiscuous mode [ 174.785673][ T12] hsr_slave_1: left promiscuous mode [ 174.788783][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.788809][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.827001][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.827045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.886668][ T12] veth1_macvtap: left promiscuous mode [ 174.886720][ T12] veth0_macvtap: left promiscuous mode [ 174.886861][ T12] veth1_vlan: left promiscuous mode [ 174.886969][ T12] veth0_vlan: left promiscuous mode [ 175.577945][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.636328][ T12] team0 (unregistering): Port device team_slave_0 removed [ 176.138969][ T3341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.139003][ T3341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.311919][ T90] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.311943][ T90] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.808978][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 178.180827][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 178.523345][ T5664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.542197][ T5664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.558035][ T5664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.559374][ T5664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.588948][ T5664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.236940][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 180.421242][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 2026/09/10 05:11:18 executed programs: 0 [ 180.944863][ T4909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.962711][ T4909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.963689][ T4909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.965204][ T4909] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.982413][ T4909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.520027][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.520253][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.520388][ T6345] bridge_slave_0: entered allmulticast mode [ 182.522361][ T6345] bridge_slave_0: entered promiscuous mode [ 182.524765][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.524918][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.525026][ T6345] bridge_slave_1: entered allmulticast mode [ 182.587891][ T6345] bridge_slave_1: entered promiscuous mode [ 182.810978][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.815044][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.999337][ T6345] team0: Port device team_slave_0 added [ 183.003414][ T6345] team0: Port device team_slave_1 added [ 183.037849][ T5664] Bluetooth: hci0: command tx timeout [ 183.188167][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.188185][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.188206][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.190107][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.190121][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.190143][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.722905][ T6345] hsr_slave_0: entered promiscuous mode [ 183.724552][ T6345] hsr_slave_1: entered promiscuous mode [ 185.116857][ T5664] Bluetooth: hci0: command tx timeout [ 185.973067][ T6345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.011374][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.012801][ T6345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.054332][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.072522][ T6345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.119131][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.121030][ T6345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.162046][ T6345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.324846][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.398121][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.421873][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.422122][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.457493][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.457638][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.195443][ T5664] Bluetooth: hci0: command tx timeout [ 187.241853][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.373160][ T6345] veth0_vlan: entered promiscuous mode [ 187.401988][ T6345] veth1_vlan: entered promiscuous mode [ 187.472467][ T6345] veth0_macvtap: entered promiscuous mode [ 187.492139][ T6345] veth1_macvtap: entered promiscuous mode [ 187.550220][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.573201][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.627536][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.627593][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.627634][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.627673][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.076807][ T3341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.076853][ T3341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.205709][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.205736][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/10 05:11:25 executed programs: 2 [ 188.431178][ T6474] loop0: detected capacity change from 0 to 512 [ 188.683174][ T6474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.895134][ T6474] loop0: detected capacity change from 512 to 511 [ 188.987675][ T6345] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0 [ 189.090972][ T6345] ================================================================== [ 189.090987][ T6345] BUG: KASAN: use-after-free in ext4_read_inline_data+0x1c9/0x2b0 [ 189.091021][ T6345] Read of size 324 at addr ffff8880528ddc05 by task syz-executor/6345 [ 189.091035][ T6345] [ 189.091051][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.091068][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.091083][ T6345] Call Trace: [ 189.091090][ T6345] [ 189.091096][ T6345] dump_stack_lvl+0xe8/0x150 [ 189.091121][ T6345] print_address_description+0x55/0x1e0 [ 189.091149][ T6345] ? ext4_read_inline_data+0x1c9/0x2b0 [ 189.091169][ T6345] print_report+0x58/0x70 [ 189.091189][ T6345] kasan_report+0x117/0x150 [ 189.091214][ T6345] ? ext4_read_inline_data+0x1c9/0x2b0 [ 189.091237][ T6345] kasan_check_range+0x264/0x2c0 [ 189.091261][ T6345] ? ext4_read_inline_data+0x1c9/0x2b0 [ 189.091281][ T6345] __asan_memcpy+0x29/0x70 [ 189.091301][ T6345] ext4_read_inline_data+0x1c9/0x2b0 [ 189.091322][ T6345] ext4_inlinedir_to_tree+0x32e/0xe20 [ 189.091342][ T6345] ? __update_page_owner_handle+0x5a/0x580 [ 189.091366][ T6345] ? __lock_acquire+0x747/0x2de0 [ 189.091388][ T6345] ? try_to_take_rt_mutex+0x842/0xb00 [ 189.091406][ T6345] ? __pfx_ext4_inlinedir_to_tree+0x10/0x10 [ 189.091441][ T6345] ? do_raw_spin_lock+0x12b/0x2f0 [ 189.091462][ T6345] ext4_htree_fill_tree+0x52b/0x1180 [ 189.091486][ T6345] ? reacquire_held_locks+0x117/0x1a0 [ 189.091509][ T6345] ? rt_spin_lock+0x1e2/0x400 [ 189.091524][ T6345] ? __pfx_ext4_htree_fill_tree+0x10/0x10 [ 189.091545][ T6345] ? do_raw_spin_lock+0x12b/0x2f0 [ 189.091565][ T6345] ? inode_query_iversion+0x120/0x180 [ 189.091589][ T6345] ext4_readdir+0x34e6/0x4260 [ 189.091615][ T6345] ? lock_acquire+0x115/0x350 [ 189.091634][ T6345] ? __pfx_ext4_readdir+0x10/0x10 [ 189.091653][ T6345] ? iterate_dir+0x215/0x4e0 [ 189.091673][ T6345] ? down_read_killable+0x14c/0x220 [ 189.091697][ T6345] ? __pfx_down_read_killable+0x10/0x10 [ 189.091719][ T6345] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 189.091740][ T6345] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 189.091762][ T6345] iterate_dir+0x2f1/0x4e0 [ 189.091783][ T6345] __se_sys_getdents64+0xf1/0x280 [ 189.091814][ T6345] ? __pfx___se_sys_getdents64+0x10/0x10 [ 189.091835][ T6345] ? exc_page_fault+0x6a/0xc0 [ 189.091853][ T6345] ? __pfx_filldir64+0x10/0x10 [ 189.091876][ T6345] ? do_user_addr_fault+0xc4c/0x1340 [ 189.091896][ T6345] do_syscall_64+0x166/0x520 [ 189.091916][ T6345] ? trace_irq_disable+0x3b/0x140 [ 189.091936][ T6345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.091951][ T6345] ? clear_bhb_loop+0x70/0xc0 [ 189.091969][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.091985][ T6345] RIP: 0033:0x7f2a0930ce33 [ 189.092002][ T6345] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 c1 a1 fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 189.092016][ T6345] RSP: 002b:00007ffd38e43058 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 189.092039][ T6345] RAX: ffffffffffffffda RBX: 000055555f911a90 RCX: 00007f2a0930ce33 [ 189.092051][ T6345] RDX: 0000000000008000 RSI: 000055555f911ac0 RDI: 0000000000000006 [ 189.092061][ T6345] RBP: 000055555f911ac0 R08: 00007f2a09463ca0 R09: 0000000000000001 [ 189.092072][ T6345] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555f911a94 [ 189.092082][ T6345] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd38e463e0 [ 189.092099][ T6345] [ 189.092105][ T6345] [ 189.092109][ T6345] The buggy address belongs to the physical page: [ 189.092120][ T6345] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f7f33053 pfn:0x528dd [ 189.092143][ T6345] flags: 0x80000000000000(node=0|zone=1) [ 189.092165][ T6345] raw: 0080000000000000 ffffea00014a4048 ffffea00014a4108 0000000000000000 [ 189.092178][ T6345] raw: 00000007f7f33053 0000000000000000 00000000ffffffff 0000000000000000 [ 189.092186][ T6345] page dumped because: kasan: bad access detected [ 189.092197][ T6345] page_owner tracks the page as freed [ 189.092202][ T6345] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6434, tgid 6434 (sed), ts 186701763275 [ 189.092223][ T6345] post_alloc_hook+0x1f9/0x250 [ 189.092241][ T6345] get_page_from_freelist+0x2591/0x2600 [ 189.092262][ T6345] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 189.092287][ T6345] alloc_pages_mpol+0xd4/0x280 [ 189.092299][ T6345] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 189.092322][ T6345] vma_alloc_folio_noprof+0xe1/0x1e0 [ 189.092334][ T6345] do_wp_page+0x121f/0x3d20 [ 189.092350][ T6345] handle_mm_fault+0xd69/0x28c0 [ 189.092366][ T6345] do_user_addr_fault+0xa4f/0x1340 [ 189.092380][ T6345] exc_page_fault+0x6a/0xc0 [ 189.092397][ T6345] asm_exc_page_fault+0x26/0x30 [ 189.092410][ T6345] page last free pid 6434 tgid 6434 ts 186725125789 stack trace: [ 189.092421][ T6345] free_unref_folios+0xd0f/0x1950 [ 189.092438][ T6345] folios_put_refs+0x815/0x920 [ 189.092455][ T6345] free_pages_and_swap_cache+0x2ba/0x490 [ 189.092472][ T6345] tlb_flush_mmu+0x6d3/0xa30 [ 189.092492][ T6345] tlb_finish_mmu+0xf4/0x220 [ 189.092512][ T6345] exit_mmap+0x4b2/0x9f0 [ 189.092528][ T6345] __mmput+0xcb/0x3d0 [ 189.092544][ T6345] exit_mm+0x186/0x240 [ 189.092557][ T6345] do_exit+0x6cd/0x2360 [ 189.092569][ T6345] do_group_exit+0x22d/0x2f0 [ 189.092582][ T6345] __x64_sys_exit_group+0x3f/0x40 [ 189.092596][ T6345] x64_sys_call+0x18c6/0x18d0 [ 189.092609][ T6345] do_syscall_64+0x166/0x520 [ 189.092627][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.092641][ T6345] [ 189.092645][ T6345] Memory state around the buggy address: [ 189.092652][ T6345] ffff8880528ddb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 189.092663][ T6345] ffff8880528ddb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 189.092673][ T6345] >ffff8880528ddc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 189.092681][ T6345] ^ [ 189.092688][ T6345] ffff8880528ddc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 189.092698][ T6345] ffff8880528ddd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 189.092706][ T6345] ================================================================== [ 189.094011][ T6345] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 189.714534][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 189.724635][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.734853][ T6345] Call Trace: [ 189.738222][ T6345] [ 189.741193][ T6345] vpanic+0x56d/0xa60 [ 189.745326][ T6345] ? rcu_is_watching+0x16/0xb0 [ 189.750468][ T6345] ? __pfx_vpanic+0x10/0x10 [ 189.755723][ T6345] panic+0xc5/0xd0 [ 189.759820][ T6345] ? __pfx_panic+0x10/0x10 [ 189.765057][ T6345] ? preempt_schedule_thunk+0x16/0x40 [ 189.770582][ T6345] ? ext4_read_inline_data+0x1c9/0x2b0 [ 189.776398][ T6345] ? preempt_schedule_thunk+0x16/0x40 [ 189.781892][ T6345] ? ext4_read_inline_data+0x1c9/0x2b0 [ 189.787564][ T6345] check_panic_on_warn+0x89/0xb0 [ 189.792537][ T6345] ? ext4_read_inline_data+0x1c9/0x2b0 [ 189.798135][ T6345] end_report+0x73/0x170 [ 189.802423][ T6345] ? ext4_read_inline_data+0x1c9/0x2b0 [ 189.808290][ T6345] kasan_report+0x128/0x150 [ 189.812855][ T6345] ? ext4_read_inline_data+0x1c9/0x2b0 [ 189.818362][ T6345] kasan_check_range+0x264/0x2c0 [ 189.823349][ T6345] ? ext4_read_inline_data+0x1c9/0x2b0 [ 189.828838][ T6345] __asan_memcpy+0x29/0x70 [ 189.833376][ T6345] ext4_read_inline_data+0x1c9/0x2b0 [ 189.838789][ T6345] ext4_inlinedir_to_tree+0x32e/0xe20 [ 189.844294][ T6345] ? __update_page_owner_handle+0x5a/0x580 [ 189.850328][ T6345] ? __lock_acquire+0x747/0x2de0 [ 189.855330][ T6345] ? try_to_take_rt_mutex+0x842/0xb00 [ 189.861066][ T6345] ? __pfx_ext4_inlinedir_to_tree+0x10/0x10 [ 189.867031][ T6345] ? do_raw_spin_lock+0x12b/0x2f0 [ 189.872412][ T6345] ext4_htree_fill_tree+0x52b/0x1180 [ 189.877766][ T6345] ? reacquire_held_locks+0x117/0x1a0 [ 189.883197][ T6345] ? rt_spin_lock+0x1e2/0x400 [ 189.888143][ T6345] ? __pfx_ext4_htree_fill_tree+0x10/0x10 [ 189.894191][ T6345] ? do_raw_spin_lock+0x12b/0x2f0 [ 189.899264][ T6345] ? inode_query_iversion+0x120/0x180 [ 189.904784][ T6345] ext4_readdir+0x34e6/0x4260 [ 189.909556][ T6345] ? lock_acquire+0x115/0x350 [ 189.914385][ T6345] ? __pfx_ext4_readdir+0x10/0x10 [ 189.919565][ T6345] ? iterate_dir+0x215/0x4e0 [ 189.924319][ T6345] ? down_read_killable+0x14c/0x220 [ 189.929681][ T6345] ? __pfx_down_read_killable+0x10/0x10 [ 189.935464][ T6345] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 189.941493][ T6345] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 189.947453][ T6345] iterate_dir+0x2f1/0x4e0 [ 189.951935][ T6345] __se_sys_getdents64+0xf1/0x280 [ 189.957194][ T6345] ? __pfx___se_sys_getdents64+0x10/0x10 [ 189.962982][ T6345] ? exc_page_fault+0x6a/0xc0 [ 189.967812][ T6345] ? __pfx_filldir64+0x10/0x10 [ 189.972722][ T6345] ? do_user_addr_fault+0xc4c/0x1340 [ 189.978316][ T6345] do_syscall_64+0x166/0x520 [ 189.982962][ T6345] ? trace_irq_disable+0x3b/0x140 [ 189.988076][ T6345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.995054][ T6345] ? clear_bhb_loop+0x70/0xc0 [ 189.999792][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.005916][ T6345] RIP: 0033:0x7f2a0930ce33 [ 190.010391][ T6345] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 c1 a1 fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 190.030075][ T6345] RSP: 002b:00007ffd38e43058 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 190.038617][ T6345] RAX: ffffffffffffffda RBX: 000055555f911a90 RCX: 00007f2a0930ce33 [ 190.046631][ T6345] RDX: 0000000000008000 RSI: 000055555f911ac0 RDI: 0000000000000006 [ 190.054651][ T6345] RBP: 000055555f911ac0 R08: 00007f2a09463ca0 R09: 0000000000000001 [ 190.062935][ T6345] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555f911a94 [ 190.071214][ T6345] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd38e463e0 [ 190.079242][ T6345] [ 190.082929][ T6345] Kernel Offset: disabled [ 190.087302][ T6345] Rebooting in 86400 seconds..