[ 35.184923][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.223339][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.283529][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.324998][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.552921][ T148] device hsr_slave_0 left promiscuous mode [ 38.600529][ T148] device hsr_slave_1 left promiscuous mode [ 38.689845][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.691272][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.693410][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.694596][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.696194][ T148] device bridge_slave_1 left promiscuous mode [ 38.697407][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.750885][ T148] device bridge_slave_0 left promiscuous mode [ 38.752026][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.879618][ T148] device veth1_macvtap left promiscuous mode [ 38.880745][ T148] device veth0_macvtap left promiscuous mode [ 38.881772][ T148] device veth1_vlan left promiscuous mode [ 38.882811][ T148] device veth0_vlan left promiscuous mode [ 38.989036][ T148] team0 (unregistering): Port device team_slave_1 removed [ 38.997020][ T148] team0 (unregistering): Port device team_slave_0 removed [ 39.002633][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.043355][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.173202][ T148] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. 1970/01/01 00:00:39 ignoring optional flag "type"="gce" 1970/01/01 00:00:39 parsed 1 programs [ 39.862744][ T4246] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:39 executed programs: 0 [ 39.929891][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 39.948728][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.950544][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.952154][ T4253] device bridge_slave_0 entered promiscuous mode [ 39.954352][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.955634][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.957301][ T4253] device bridge_slave_1 entered promiscuous mode [ 39.966743][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.969269][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.978264][ T4253] team0: Port device team_slave_0 added [ 39.981057][ T4253] team0: Port device team_slave_1 added [ 39.988955][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.992693][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.996964][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.999497][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.000744][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.005238][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.050616][ T4253] device hsr_slave_0 entered promiscuous mode [ 40.109551][ T4253] device hsr_slave_1 entered promiscuous mode [ 40.790561][ T4253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.831306][ T4253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.860654][ T4253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.910950][ T4253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.975634][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.980748][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.982450][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.985867][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.989109][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.990936][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.992307][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.993548][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.995531][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.999158][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.001069][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.002937][ T614] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.004099][ T614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.007696][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.014366][ T614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.017590][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.020389][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.023641][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.025395][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.027166][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.033302][ T4253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.034979][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.037376][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.038817][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.041458][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.043062][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.046904][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.090483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.091804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.095425][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.103919][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.105616][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.113922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.115595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.117176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.118614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.122960][ T4253] device veth0_vlan entered promiscuous mode [ 41.126602][ T4253] device veth1_vlan entered promiscuous mode [ 41.136304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.137831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.139293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.141349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.144449][ T4253] device veth0_macvtap entered promiscuous mode [ 41.147333][ T4253] device veth1_macvtap entered promiscuous mode [ 41.154347][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.155605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.157602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.159238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.161055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.164775][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.167540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.169245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.175042][ T4253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.176515][ T4253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.178017][ T4253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.179507][ T4253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.343315][ T4381] loop0: detected capacity change from 0 to 32768 [ 41.377854][ T4381] ================================================================== [ 41.379326][ T4381] BUG: KASAN: slab-out-of-bounds in dtSearch+0x1344/0x1ba8 [ 41.380685][ T4381] Read of size 1 at addr ffff0000e2634058 by task syz-executor.0/4381 [ 41.382208][ T4381] [ 41.382670][ T4381] CPU: 0 PID: 4381 Comm: syz-executor.0 Not tainted syzkaller #0 [ 41.384248][ T4381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 41.385927][ T4381] Call trace: [ 41.386485][ T4381] dump_backtrace+0x0/0x458 [ 41.387252][ T4381] show_stack+0x2c/0x3c [ 41.388000][ T4381] __dump_stack+0x30/0x40 [ 41.388796][ T4381] dump_stack_lvl+0xf4/0x15c [ 41.389542][ T4381] print_address_description+0x78/0x30c [ 41.390500][ T4381] kasan_report+0xec/0x158 [ 41.391274][ T4381] __asan_report_load1_noabort+0x44/0x50 [ 41.392181][ T4381] dtSearch+0x1344/0x1ba8 [ 41.392875][ T4381] jfs_lookup+0x164/0x378 [ 41.393568][ T4381] __lookup_slow+0x25c/0x39c [ 41.394336][ T4381] lookup_slow+0x60/0x84 [ 41.395036][ T4381] walk_component+0x2b8/0x3b8 [ 41.395829][ T4381] link_path_walk+0x5a0/0xbd4 [ 41.396573][ T4381] path_lookupat+0xb4/0x3f0 [ 41.397287][ T4381] do_o_path+0xa4/0x1dc [ 41.397966][ T4381] path_openat+0x22e8/0x2808 [ 41.398756][ T4381] do_filp_open+0x188/0x370 [ 41.399467][ T4381] do_sys_openat2+0x134/0x3fc [ 41.400332][ T4381] __arm64_sys_openat+0x11c/0x150 [ 41.401186][ T4381] invoke_syscall+0x98/0x28c [ 41.401976][ T4381] el0_svc_common+0x13c/0x258 [ 41.402744][ T4381] do_el0_svc+0x5c/0x140 [ 41.403420][ T4381] el0_svc+0x78/0x1d0 [ 41.404081][ T4381] el0t_64_sync_handler+0xcc/0xe4 [ 41.404925][ T4381] el0t_64_sync+0x1a0/0x1a4 [ 41.405766][ T4381] [ 41.406178][ T4381] Allocated by task 4381: [ 41.406893][ T4381] __kasan_slab_alloc+0x8c/0xcc [ 41.407680][ T4381] slab_post_alloc_hook+0x74/0x3f8 [ 41.408581][ T4381] kmem_cache_alloc+0x1dc/0x3d8 [ 41.409368][ T4381] jfs_alloc_inode+0x24/0x60 [ 41.410109][ T4381] new_inode_pseudo+0x68/0x200 [ 41.410911][ T4381] new_inode+0x38/0x174 [ 41.411578][ T4381] ialloc+0x54/0x7b4 [ 41.412210][ T4381] jfs_create+0x1a4/0x90c [ 41.412932][ T4381] path_openat+0xdb8/0x2808 [ 41.413748][ T4381] do_filp_open+0x188/0x370 [ 41.414495][ T4381] do_sys_openat2+0x134/0x3fc [ 41.415274][ T4381] __arm64_sys_openat+0x11c/0x150 [ 41.416136][ T4381] invoke_syscall+0x98/0x28c [ 41.416925][ T4381] el0_svc_common+0x13c/0x258 [ 41.417705][ T4381] do_el0_svc+0x5c/0x140 [ 41.418410][ T4381] el0_svc+0x78/0x1d0 [ 41.419037][ T4381] el0t_64_sync_handler+0xcc/0xe4 [ 41.419848][ T4381] el0t_64_sync+0x1a0/0x1a4 [ 41.420590][ T4381] [ 41.420960][ T4381] The buggy address belongs to the object at ffff0000e2633780 [ 41.420960][ T4381] which belongs to the cache jfs_ip of size 2240 [ 41.423235][ T4381] The buggy address is located 24 bytes to the right of [ 41.423235][ T4381] 2240-byte region [ffff0000e2633780, ffff0000e2634040) [ 41.425465][ T4381] The buggy address belongs to the page: [ 41.426338][ T4381] page:00000000d5cafd46 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x122630 [ 41.428004][ T4381] head:00000000d5cafd46 order:3 compound_mapcount:0 compound_pincount:0 [ 41.429548][ T4381] memcg:ffff0000c8d8dc01 [ 41.430274][ T4381] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 41.431657][ T4381] raw: 05ffc00000010200 0000000000000000 dead000000000122 ffff0000c68ca300 [ 41.432998][ T4381] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff0000c8d8dc01 [ 41.434366][ T4381] page dumped because: kasan: bad access detected [ 41.435474][ T4381] [ 41.435861][ T4381] Memory state around the buggy address: [ 41.436819][ T4381] ffff0000e2633f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.438199][ T4381] ffff0000e2633f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.439513][ T4381] >ffff0000e2634000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 41.440901][ T4381] ^ [ 41.442046][ T4381] ffff0000e2634080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.443368][ T4381] ffff0000e2634100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.444762][ T4381] ================================================================== [ 41.446135][ T4381] Disabling lock debugging due to kernel taint [ 41.448790][ T4381] ERROR: (device loop0): dtSearch: stack overrun! [ 41.448790][ T4381] [ 41.453011][ T4381] ERROR: (device loop0): remounting filesystem as read-only [ 41.454172][ T4381] btstack dump: [ 41.454759][ T4381] bn = 0, index = 0 [ 41.455389][ T4381] bn = 0, index = 0 [ 41.456065][ T4381] bn = 0, index = 0 [ 41.456705][ T4381] bn = 0, index = 0 [ 41.457368][ T4381] bn = 0, index = 0 [ 41.457937][ T4381] bn = 0, index = 0 [ 41.458594][ T4381] bn = 0, index = 0 [ 41.459190][ T4381] bn = 0, index = 0 [ 41.459999][ T4381] jfs_lookup: dtSearch returned -5 [ 41.464457][ T4253] ------------[ cut here ]------------ [ 41.465390][ T4253] kernel BUG at fs/jfs/inode.c:175! [ 41.466172][ T4253] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 41.467355][ T4253] Modules linked in: [ 41.467988][ T4253] CPU: 1 PID: 4253 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 41.469538][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 41.471492][ T4253] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.472891][ T4253] pc : jfs_evict_inode+0x3ac/0x3f4 [ 41.473792][ T4253] lr : jfs_evict_inode+0x3ac/0x3f4 [ 41.474648][ T4253] sp : ffff80001f4677b0 [ 41.475462][ T4253] x29: ffff80001f4677b0 x28: ffff0000e2633bd8 x27: ffff8000117f1180 [ 41.477037][ T4253] x26: ffff0000e2633c88 x25: ffff8000117f1180 x24: dfff800000000000 [ 41.478650][ T4253] x23: dfff800000000000 x22: ffff700003e8cf04 x21: ffff0000e2633d78 [ 41.480280][ T4253] x20: ffff0000e2633838 x19: ffff0000e2633bb0 x18: 0000000000000000 [ 41.481918][ T4253] x17: 0000000000000000 x16: ffff8000082dbd3c x15: 0000000000000406 [ 41.483458][ T4253] x14: 0000000000000003 x13: 1ffff00003e8ce9c x12: 0000000000000000 [ 41.485139][ T4253] x11: ff808000097ac454 x10: 0000000000000000 x9 : ffff8000097ac454 [ 41.486736][ T4253] x8 : ffff0000ce3f51c0 x7 : 0000000000000000 x6 : ffff80000895470c [ 41.488101][ T4253] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010 [ 41.489505][ T4253] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff0000e2633b90 [ 41.490914][ T4253] Call trace: [ 41.491565][ T4253] jfs_evict_inode+0x3ac/0x3f4 [ 41.492483][ T4253] evict+0x3d8/0x824 [ 41.493200][ T4253] evict_inodes+0x604/0x6a4 [ 41.493935][ T4253] generic_shutdown_super+0xa4/0x2f8 [ 41.494924][ T4253] kill_block_super+0x78/0xe0 [ 41.495851][ T4253] deactivate_locked_super+0xc0/0x13c [ 41.496785][ T4253] deactivate_super+0xf0/0x110 [ 41.497644][ T4253] cleanup_mnt+0x3bc/0x470 [ 41.498430][ T4253] __cleanup_mnt+0x20/0x30 [ 41.499155][ T4253] task_work_run+0x13c/0x1e8 [ 41.500021][ T4253] do_notify_resume+0x2488/0x30a8 [ 41.500931][ T4253] el0_svc+0xf0/0x1d0 [ 41.501585][ T4253] el0t_64_sync_handler+0xcc/0xe4 [ 41.502491][ T4253] el0t_64_sync+0x1a0/0x1a4 [ 41.503317][ T4253] Code: d110c260 97c28c81 17ffff97 97b35cee (d4210000) [ 41.504536][ T4253] ---[ end trace 57cacd34aaa10d19 ]--- [ 41.695460][ T4253] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 41.696622][ T4253] SMP: stopping secondary CPUs [ 41.697478][ T4253] Kernel Offset: disabled [ 41.698249][ T4253] CPU features: 0xa,000003c1,7d33ffd9 [ 41.699171][ T4253] Memory Limit: none [ 41.895256][ T4253] Rebooting in 86400 seconds..