Warning: Permanently added '10.128.1.246' (ED25519) to the list of known hosts. 2026/01/04 21:01:28 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 136.983147][ T6143] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 137.236280][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.242988][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.640448][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.649450][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.658765][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.669059][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.676756][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.387880][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.407088][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.450719][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.458874][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.958396][ T6209] chnl_net:caif_netlink_parms(): no params data found [ 143.045344][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.052541][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.059787][ T6209] bridge_slave_0: entered allmulticast mode [ 143.067181][ T6209] bridge_slave_0: entered promiscuous mode [ 143.076563][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.084464][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.091704][ T6209] bridge_slave_1: entered allmulticast mode [ 143.100901][ T6209] bridge_slave_1: entered promiscuous mode [ 143.143100][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.155786][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.194308][ T6209] team0: Port device team_slave_0 added [ 143.232426][ T6209] team0: Port device team_slave_1 added [ 143.271748][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.283288][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.309806][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.326548][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.333714][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.359731][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.408892][ T6209] hsr_slave_0: entered promiscuous mode [ 143.415541][ T6209] hsr_slave_1: entered promiscuous mode [ 143.908675][ T6209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.920086][ T6209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.931553][ T6209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.951997][ T6209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.078517][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.115988][ T6209] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.128664][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.135812][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.159407][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.166569][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.429448][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.486712][ T6209] veth0_vlan: entered promiscuous mode [ 144.501424][ T6209] veth1_vlan: entered promiscuous mode [ 144.541561][ T6209] veth0_macvtap: entered promiscuous mode [ 144.555126][ T6209] veth1_macvtap: entered promiscuous mode [ 144.578796][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.596034][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.615029][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.629643][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.639731][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.654843][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.832037][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.938971][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.004923][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.115721][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/04 21:01:42 executed programs: 0 [ 145.787906][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.797448][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.805558][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.816472][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.824410][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.087912][ T6294] chnl_net:caif_netlink_parms(): no params data found [ 146.257818][ T6294] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.266008][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.273305][ T6294] bridge_slave_0: entered allmulticast mode [ 146.281104][ T6294] bridge_slave_0: entered promiscuous mode [ 146.292310][ T6294] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.300348][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.307810][ T6294] bridge_slave_1: entered allmulticast mode [ 146.316748][ T6294] bridge_slave_1: entered promiscuous mode [ 146.397024][ T6294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.409767][ T6294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.503074][ T6294] team0: Port device team_slave_0 added [ 146.512026][ T6294] team0: Port device team_slave_1 added [ 146.578818][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.588318][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.652237][ T6294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.665080][ T6294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.672024][ T6294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.698228][ T6294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.770337][ T6294] hsr_slave_0: entered promiscuous mode [ 146.781673][ T6294] hsr_slave_1: entered promiscuous mode [ 146.788763][ T6294] debugfs: 'hsr0' already exists in 'hsr' [ 146.794859][ T6294] Cannot create hsr debugfs directory [ 147.289838][ T50] bridge_slave_1: left allmulticast mode [ 147.300048][ T50] bridge_slave_1: left promiscuous mode [ 147.306857][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.320354][ T50] bridge_slave_0: left allmulticast mode [ 147.326569][ T50] bridge_slave_0: left promiscuous mode [ 147.332507][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.697462][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.709488][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.721284][ T50] bond0 (unregistering): Released all slaves [ 147.855205][ T50] hsr_slave_0: left promiscuous mode [ 147.862908][ T50] hsr_slave_1: left promiscuous mode [ 147.869052][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.883281][ T53] Bluetooth: hci0: command tx timeout [ 147.892900][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.913689][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.921081][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.954848][ T50] veth1_macvtap: left promiscuous mode [ 147.962973][ T50] veth0_macvtap: left promiscuous mode [ 147.973488][ T50] veth1_vlan: left promiscuous mode [ 147.979493][ T50] veth0_vlan: left promiscuous mode [ 148.387594][ T50] team0 (unregistering): Port device team_slave_1 removed [ 148.418587][ T50] team0 (unregistering): Port device team_slave_0 removed [ 148.897327][ T6294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.920459][ T6294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.934182][ T6294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.947740][ T6294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.253165][ T6294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.307016][ T6294] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.328087][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.335351][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.381905][ T3780] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.389110][ T3780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.714609][ T6294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.780035][ T6294] veth0_vlan: entered promiscuous mode [ 149.798170][ T6294] veth1_vlan: entered promiscuous mode [ 149.838912][ T6294] veth0_macvtap: entered promiscuous mode [ 149.850227][ T6294] veth1_macvtap: entered promiscuous mode [ 149.875835][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.891986][ T6294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.910201][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.931489][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.952061][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.963221][ T53] Bluetooth: hci0: command tx timeout [ 149.966693][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.031892][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.056658][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.092999][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.101504][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.473860][ T6409] loop0: detected capacity change from 0 to 32768 [ 150.544520][ T6409] loop0: detected capacity change from 32768 to 32767 [ 150.583090][ T6294] ERROR: (device loop0): diRead: i_ino != di_number [ 150.583090][ T6294] [ 150.604552][ T6294] ERROR: (device loop0): remounting filesystem as read-only [ 150.612404][ T6294] jfs_lookup: iget failed on inum 32 [ 150.638918][ T6294] ERROR: (device loop0): diRead: i_ino != di_number [ 150.638918][ T6294] [ 150.662437][ T6294] jfs_lookup: iget failed on inum 32 [ 151.531596][ T112] ------------[ cut here ]------------ [ 151.537569][ T112] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2780:24 [ 151.545888][ T112] index 4294967295 is out of range for type 's8[1365]' (aka 'signed char[1365]') [ 151.557132][ T112] CPU: 1 UID: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 151.557159][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.557173][ T112] Call Trace: [ 151.557183][ T112] [ 151.557193][ T112] dump_stack_lvl+0xe8/0x150 [ 151.557229][ T112] ubsan_epilogue+0xa/0x40 [ 151.557271][ T112] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 151.557311][ T112] dbJoin+0x29f/0x300 [ 151.557353][ T112] dbFreeBits+0x4e1/0xdb0 [ 151.557403][ T112] dbFree+0x336/0x650 [ 151.557448][ T112] txFreeMap+0x9e6/0xde0 [ 151.557482][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.557510][ T112] ? __mark_inode_dirty+0x45c/0x1330 [ 151.557554][ T112] xtTruncate+0xcea/0x2e70 [ 151.557613][ T112] ? __pfx_xtTruncate+0x10/0x10 [ 151.557677][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.557703][ T112] ? __asan_memset+0x22/0x50 [ 151.557740][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.557767][ T112] ? __dquot_initialize+0x218/0xcb0 [ 151.557795][ T112] jfs_free_zero_link+0x33a/0x4a0 [ 151.557824][ T112] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 151.557850][ T112] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 151.557885][ T112] ? do_raw_spin_lock+0x121/0x290 [ 151.557920][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.557959][ T112] jfs_evict_inode+0x363/0x440 [ 151.557979][ T112] ? evict+0x5e8/0xae0 [ 151.557999][ T112] ? __pfx_jfs_evict_inode+0x10/0x10 [ 151.558024][ T112] evict+0x5f4/0xae0 [ 151.558058][ T112] ? __pfx_evict+0x10/0x10 [ 151.558081][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.558108][ T112] ? _raw_spin_unlock+0x28/0x50 [ 151.558143][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.558169][ T112] ? iput+0xcc6/0x1030 [ 151.558213][ T112] jfs_lazycommit+0x43f/0xa90 [ 151.558253][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 151.558291][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 151.558333][ T112] ? __kthread_parkme+0x7b/0x200 [ 151.558360][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.558387][ T112] ? __kthread_parkme+0x1a1/0x200 [ 151.558422][ T112] kthread+0x711/0x8a0 [ 151.558458][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 151.558489][ T112] ? __pfx_kthread+0x10/0x10 [ 151.558516][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.558550][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.558587][ T112] ? __pfx_kthread+0x10/0x10 [ 151.558620][ T112] ret_from_fork+0x510/0xa50 [ 151.558647][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 151.558667][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.558694][ T112] ? __switch_to+0xc9e/0x1480 [ 151.558734][ T112] ? __pfx_kthread+0x10/0x10 [ 151.558767][ T112] ret_from_fork_asm+0x1a/0x30 [ 151.558821][ T112] [ 151.558831][ T112] ---[ end trace ]--- [ 151.834695][ T112] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 151.841890][ T112] CPU: 1 UID: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 151.850989][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.861039][ T112] Call Trace: [ 151.864391][ T112] [ 151.867310][ T112] vpanic+0x1e0/0x670 [ 151.871330][ T112] panic+0xb9/0xc0 [ 151.875131][ T112] ? __pfx_panic+0x10/0x10 [ 151.879538][ T112] ? __pfx__printk+0x10/0x10 [ 151.884127][ T112] ? dump_stack_lvl+0x103/0x150 [ 151.888968][ T112] check_panic_on_warn+0x89/0xb0 [ 151.893901][ T112] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 151.899700][ T112] dbJoin+0x29f/0x300 [ 151.903786][ T112] dbFreeBits+0x4e1/0xdb0 [ 151.908131][ T112] dbFree+0x336/0x650 [ 151.912111][ T112] txFreeMap+0x9e6/0xde0 [ 151.916348][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.921984][ T112] ? __mark_inode_dirty+0x45c/0x1330 [ 151.927292][ T112] xtTruncate+0xcea/0x2e70 [ 151.931828][ T112] ? __pfx_xtTruncate+0x10/0x10 [ 151.936713][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.942784][ T112] ? __asan_memset+0x22/0x50 [ 151.947386][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.953023][ T112] ? __dquot_initialize+0x218/0xcb0 [ 151.958228][ T112] jfs_free_zero_link+0x33a/0x4a0 [ 151.963250][ T112] ? __pfx_jfs_free_zero_link+0x10/0x10 [ 151.968793][ T112] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 151.974958][ T112] ? do_raw_spin_lock+0x121/0x290 [ 151.979993][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.985639][ T112] jfs_evict_inode+0x363/0x440 [ 151.990437][ T112] ? evict+0x5e8/0xae0 [ 151.994666][ T112] ? __pfx_jfs_evict_inode+0x10/0x10 [ 151.999951][ T112] evict+0x5f4/0xae0 [ 152.003844][ T112] ? __pfx_evict+0x10/0x10 [ 152.008248][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.013875][ T112] ? _raw_spin_unlock+0x28/0x50 [ 152.018729][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.024398][ T112] ? iput+0xcc6/0x1030 [ 152.028476][ T112] jfs_lazycommit+0x43f/0xa90 [ 152.033159][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 152.038366][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 152.044184][ T112] ? __kthread_parkme+0x7b/0x200 [ 152.049119][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.054746][ T112] ? __kthread_parkme+0x1a1/0x200 [ 152.059783][ T112] kthread+0x711/0x8a0 [ 152.063855][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 152.069054][ T112] ? __pfx_kthread+0x10/0x10 [ 152.073654][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.079304][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 152.084505][ T112] ? __pfx_kthread+0x10/0x10 [ 152.089094][ T112] ret_from_fork+0x510/0xa50 [ 152.093776][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 152.099026][ T112] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.104664][ T112] ? __switch_to+0xc9e/0x1480 [ 152.109355][ T112] ? __pfx_kthread+0x10/0x10 [ 152.113952][ T112] ret_from_fork_asm+0x1a/0x30 [ 152.118749][ T112] [ 152.122191][ T112] Kernel Offset: disabled [ 152.126533][ T112] Rebooting in 86400 seconds..