[ 71.973275][ T144] device veth1_macvtap left promiscuous mode [ 71.979883][ T144] device veth0_macvtap left promiscuous mode [ 71.985974][ T144] device veth1_vlan left promiscuous mode [ 71.993145][ T144] device veth0_vlan left promiscuous mode [ 72.174367][ T144] team0 (unregistering): Port device team_slave_1 removed [ 72.186913][ T144] team0 (unregistering): Port device team_slave_0 removed [ 72.197898][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.210959][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.274643][ T144] bond0 (unregistering): Released all slaves [ 76.471339][ T21] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts. 2026/03/24 14:12:36 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 90.563692][ T4633] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 91.973468][ T4651] chnl_net:caif_netlink_parms(): no params data found [ 92.012657][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.020028][ T4651] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.028212][ T4651] device bridge_slave_0 entered promiscuous mode [ 92.036274][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.044277][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.052399][ T4651] device bridge_slave_1 entered promiscuous mode [ 92.073969][ T4651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.085067][ T4651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.115446][ T4651] team0: Port device team_slave_0 added [ 92.123011][ T4651] team0: Port device team_slave_1 added [ 92.139492][ T4651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.146457][ T4651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.173076][ T4651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.187915][ T4651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.194966][ T4651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.221071][ T4651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.250118][ T4651] device hsr_slave_0 entered promiscuous mode [ 92.257019][ T4651] device hsr_slave_1 entered promiscuous mode [ 92.808366][ T4651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.827747][ T4651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.837617][ T4651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.861284][ T4651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.904566][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.911727][ T4651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.919390][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.926476][ T4651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.949079][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.959389][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.027225][ T4651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.064811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.078719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.101112][ T4651] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.113493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.124120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.134293][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.141612][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.163119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.173217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.182565][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.189706][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.202282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.218368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.238812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.250328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.261976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.272152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.295249][ T4651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.315601][ T4651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.342722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.358653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.379587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.399287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.418249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.433199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.603586][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.611666][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.632587][ T4651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.682714][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.692287][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.728343][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.737661][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.760095][ T4651] device veth0_vlan entered promiscuous mode [ 93.778139][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.786654][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.809551][ T4651] device veth1_vlan entered promiscuous mode [ 93.833863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.843454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.853841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.863913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.876677][ T4651] device veth0_macvtap entered promiscuous mode [ 93.887059][ T4651] device veth1_macvtap entered promiscuous mode [ 93.929272][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.937473][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.956996][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.965418][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.975695][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.996319][ T4651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.008064][ T4651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.017014][ T4651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.026750][ T4651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.035750][ T4651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.046197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.055887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.270834][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.284953][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.299770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.329102][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.337315][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.352573][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.483106][ T144] ODEBUG: Out of memory. ODEBUG disabled [ 96.559800][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/24 14:12:46 executed programs: 0 [ 97.622830][ T4874] chnl_net:caif_netlink_parms(): no params data found [ 97.686521][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.696211][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.705005][ T4874] device bridge_slave_0 entered promiscuous mode [ 97.713945][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.722507][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.731354][ T4874] device bridge_slave_1 entered promiscuous mode [ 97.755799][ T4874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.769404][ T4874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.799017][ T4874] team0: Port device team_slave_0 added [ 97.807519][ T4874] team0: Port device team_slave_1 added [ 97.831494][ T4874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.838831][ T4874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.865709][ T4874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.878646][ T4874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.886111][ T4874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.912749][ T4874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.952235][ T4874] device hsr_slave_0 entered promiscuous mode [ 97.962038][ T4874] device hsr_slave_1 entered promiscuous mode [ 97.969573][ T4874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.977235][ T4874] Cannot create hsr debugfs directory [ 99.502192][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.552602][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.588991][ T4232] Bluetooth: hci0: command 0x0409 tx timeout [ 99.616187][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.466012][ T4874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.476058][ T4874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.484766][ T4874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.494812][ T4874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.553534][ T4874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.564773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.573838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.585059][ T4874] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.613047][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.621951][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.630785][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.637888][ T4253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.646491][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.657646][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.666714][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.676029][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.683395][ T4253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.706729][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.719669][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.745069][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.754250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.764968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.772917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.783559][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.803321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.811788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.823518][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.831964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.861246][ T4874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.928310][ T144] device hsr_slave_0 left promiscuous mode [ 100.935029][ T144] device hsr_slave_1 left promiscuous mode [ 100.942209][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.951076][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.958944][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.966605][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.974835][ T144] device bridge_slave_1 left promiscuous mode [ 100.981197][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.990128][ T144] device bridge_slave_0 left promiscuous mode [ 100.996454][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.007709][ T144] device veth1_macvtap left promiscuous mode [ 101.014508][ T144] device veth0_macvtap left promiscuous mode [ 101.021148][ T144] device veth1_vlan left promiscuous mode [ 101.027043][ T144] device veth0_vlan left promiscuous mode [ 101.149710][ T144] team0 (unregistering): Port device team_slave_1 removed [ 101.162223][ T144] team0 (unregistering): Port device team_slave_0 removed [ 101.174982][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.189979][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.236256][ T144] bond0 (unregistering): Released all slaves [ 101.285822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.293768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.306070][ T4874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.322395][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.333441][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.362052][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.373560][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.382914][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.391292][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.399597][ T4874] device veth0_vlan entered promiscuous mode [ 101.411443][ T4874] device veth1_vlan entered promiscuous mode [ 101.440679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.449255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.457448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.466269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.477635][ T4874] device veth0_macvtap entered promiscuous mode [ 101.499216][ T4874] device veth1_macvtap entered promiscuous mode [ 101.515465][ T4874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.523602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.532750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.541547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.550453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.562683][ T4874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.570788][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.579728][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.592490][ T4874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.601710][ T4874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.610786][ T4874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.619858][ T4874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.678638][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 101.687935][ T4274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.695785][ T4274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.704970][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.715675][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.723874][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.739056][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.003736][ T5068] loop0: detected capacity change from 0 to 32768 [ 102.104589][ T5068] ======================================================= [ 102.104589][ T5068] WARNING: The mand mount option has been deprecated and [ 102.104589][ T5068] and is ignored by this kernel. Remove the mand [ 102.104589][ T5068] option from the mount to silence this warning. [ 102.104589][ T5068] ======================================================= [ 102.175861][ T4874] ================================================================== [ 102.184337][ T4874] BUG: KASAN: use-after-free in jfs_readdir+0x129f/0x3cf0 [ 102.191677][ T4874] Read of size 8 at addr ffff88807698c030 by task syz-executor/4874 [ 102.199677][ T4874] [ 102.202038][ T4874] CPU: 1 PID: 4874 Comm: syz-executor Not tainted syzkaller #0 [ 102.209612][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.219866][ T4874] Call Trace: [ 102.223422][ T4874] [ 102.226355][ T4874] dump_stack_lvl+0x188/0x250 [ 102.231263][ T4874] ? show_regs_print_info+0x20/0x20 [ 102.236695][ T4874] ? load_image+0x400/0x400 [ 102.241323][ T4874] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 102.246809][ T4874] ? unlock_page+0x17c/0x1f0 [ 102.251496][ T4874] print_address_description+0x60/0x2d0 [ 102.257139][ T4874] ? jfs_readdir+0x129f/0x3cf0 [ 102.261916][ T4874] kasan_report+0xdf/0x130 [ 102.266652][ T4874] ? jfs_readdir+0x129f/0x3cf0 [ 102.271629][ T4874] jfs_readdir+0x129f/0x3cf0 [ 102.276368][ T4874] ? dtInitRoot+0x660/0x660 [ 102.280904][ T4874] ? end_current_label_crit_section+0x14b/0x170 [ 102.287484][ T4874] ? common_file_perm+0x171/0x1c0 [ 102.292646][ T4874] iterate_dir+0x218/0x560 [ 102.297093][ T4874] __se_sys_getdents64+0xf2/0x270 [ 102.302333][ T4874] ? __x64_sys_getdents64+0x80/0x80 [ 102.308083][ T4874] ? filldir+0x720/0x720 [ 102.312348][ T4874] ? vtime_user_exit+0x2c8/0x3e0 [ 102.317591][ T4874] ? lockdep_hardirqs_on+0x94/0x140 [ 102.323083][ T4874] do_syscall_64+0x4c/0xa0 [ 102.327697][ T4874] ? clear_bhb_loop+0x30/0x80 [ 102.332671][ T4874] ? clear_bhb_loop+0x30/0x80 [ 102.337551][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.343906][ T4874] RIP: 0033:0x7fc8336b58b3 [ 102.348524][ T4874] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 102.368987][ T4874] RSP: 002b:00007ffde67f7e38 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 102.377594][ T4874] RAX: ffffffffffffffda RBX: 0000555568ef0a30 RCX: 00007fc8336b58b3 [ 102.385839][ T4874] RDX: 0000000000008000 RSI: 0000555568ef0a60 RDI: 0000000000000005 [ 102.393840][ T4874] RBP: 0000555568ef0a60 R08: 00000000000285e1 R09: 0000000000000001 [ 102.401919][ T4874] R10: 00007fc8338c5cc0 R11: 0000000000000293 R12: 0000555568ef0a34 [ 102.410131][ T4874] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffde67fa0e0 [ 102.418250][ T4874] [ 102.421385][ T4874] [ 102.423716][ T4874] Allocated by task 4874: [ 102.428320][ T4874] __kasan_slab_alloc+0x9c/0xd0 [ 102.433279][ T4874] slab_post_alloc_hook+0x4c/0x380 [ 102.438395][ T4874] kmem_cache_alloc+0x100/0x290 [ 102.443337][ T4874] mempool_alloc+0x18d/0x4e0 [ 102.447926][ T4874] __get_metapage+0x5e8/0x1060 [ 102.452738][ T4874] dtReadFirst+0xd5/0x8f0 [ 102.457075][ T4874] jfs_readdir+0x97e/0x3cf0 [ 102.461576][ T4874] iterate_dir+0x218/0x560 [ 102.465989][ T4874] __se_sys_getdents64+0xf2/0x270 [ 102.471014][ T4874] do_syscall_64+0x4c/0xa0 [ 102.475441][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.481331][ T4874] [ 102.483649][ T4874] Freed by task 4874: [ 102.487618][ T4874] kasan_set_track+0x4b/0x70 [ 102.492207][ T4874] kasan_set_free_info+0x1f/0x40 [ 102.497284][ T4874] ____kasan_slab_free+0xd5/0x110 [ 102.502306][ T4874] slab_free_freelist_hook+0xea/0x170 [ 102.507685][ T4874] kmem_cache_free+0x8f/0x210 [ 102.512368][ T4874] release_metapage+0x97b/0xe10 [ 102.517321][ T4874] jfs_readdir+0x103b/0x3cf0 [ 102.522268][ T4874] iterate_dir+0x218/0x560 [ 102.526786][ T4874] __se_sys_getdents64+0xf2/0x270 [ 102.531895][ T4874] do_syscall_64+0x4c/0xa0 [ 102.536495][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.542384][ T4874] [ 102.544791][ T4874] The buggy address belongs to the object at ffff88807698c000 [ 102.544791][ T4874] which belongs to the cache jfs_mp of size 184 [ 102.558768][ T4874] The buggy address is located 48 bytes inside of [ 102.558768][ T4874] 184-byte region [ffff88807698c000, ffff88807698c0b8) [ 102.571982][ T4874] The buggy address belongs to the page: [ 102.577630][ T4874] page:ffffea0001da6300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7698c [ 102.587877][ T4874] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 102.595717][ T4874] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801e13f780 [ 102.604300][ T4874] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 102.612974][ T4874] page dumped because: kasan: bad access detected [ 102.619401][ T4874] page_owner tracks the page as allocated [ 102.625106][ T4874] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4874, ts 102175547819, free_ts 102173038772 [ 102.644415][ T4874] get_page_from_freelist+0x1bbd/0x1ca0 [ 102.650062][ T4874] __alloc_pages+0x1ee/0x480 [ 102.654641][ T4874] new_slab+0xc0/0x4b0 [ 102.658704][ T4874] ___slab_alloc+0x80a/0xdd0 [ 102.663273][ T4874] kmem_cache_alloc+0x195/0x290 [ 102.668103][ T4874] mempool_alloc+0x18d/0x4e0 [ 102.672680][ T4874] __get_metapage+0x5e8/0x1060 [ 102.677431][ T4874] dtReadFirst+0xd5/0x8f0 [ 102.681844][ T4874] jfs_readdir+0x97e/0x3cf0 [ 102.686340][ T4874] iterate_dir+0x218/0x560 [ 102.690737][ T4874] __se_sys_getdents64+0xf2/0x270 [ 102.695811][ T4874] do_syscall_64+0x4c/0xa0 [ 102.700241][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.706141][ T4874] page last free stack trace: [ 102.710901][ T4874] free_unref_page_prepare+0x637/0x6c0 [ 102.716446][ T4874] free_unref_page+0x8f/0x2a0 [ 102.721113][ T4874] __mmdrop+0xaa/0x3e0 [ 102.725167][ T4874] exit_mm+0x588/0x6e0 [ 102.729218][ T4874] do_exit+0x5a9/0x20c0 [ 102.733362][ T4874] do_group_exit+0x12e/0x300 [ 102.737928][ T4874] get_signal+0x6ca/0x12c0 [ 102.742325][ T4874] arch_do_signal_or_restart+0xe7/0x12c0 [ 102.747943][ T4874] exit_to_user_mode_loop+0x9e/0x130 [ 102.753212][ T4874] exit_to_user_mode_prepare+0xee/0x180 [ 102.758826][ T4874] syscall_exit_to_user_mode+0x16/0x40 [ 102.764271][ T4874] do_syscall_64+0x58/0xa0 [ 102.768674][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.774565][ T4874] [ 102.776890][ T4874] Memory state around the buggy address: [ 102.782680][ T4874] ffff88807698bf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.790735][ T4874] ffff88807698bf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 102.798785][ T4874] >ffff88807698c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.806825][ T4874] ^ [ 102.812446][ T4874] ffff88807698c080: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc [ 102.820492][ T4874] ffff88807698c100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 2026/03/24 14:12:51 executed programs: 3 [ 102.828621][ T4874] ================================================================== [ 102.836657][ T4874] Disabling lock debugging due to kernel taint [ 102.848013][ T4874] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.855319][ T4874] CPU: 0 PID: 4874 Comm: syz-executor Tainted: G B syzkaller #0 [ 102.864254][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.874483][ T4874] Call Trace: [ 102.877763][ T4874] [ 102.880691][ T4874] dump_stack_lvl+0x188/0x250 [ 102.885394][ T4874] ? show_regs_print_info+0x20/0x20 [ 102.890602][ T4874] ? load_image+0x400/0x400 [ 102.895238][ T4874] panic+0x2e5/0x810 [ 102.899176][ T4874] ? bpf_jit_dump+0xd0/0xd0 [ 102.903972][ T4874] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 102.910270][ T4874] ? _raw_spin_unlock+0x40/0x40 [ 102.915104][ T4874] ? jfs_readdir+0x129f/0x3cf0 [ 102.919939][ T4874] check_panic_on_warn+0x80/0xa0 [ 102.924859][ T4874] ? jfs_readdir+0x129f/0x3cf0 [ 102.929614][ T4874] end_report+0x6d/0xf0 [ 102.933869][ T4874] kasan_report+0x102/0x130 [ 102.938528][ T4874] ? jfs_readdir+0x129f/0x3cf0 [ 102.943275][ T4874] jfs_readdir+0x129f/0x3cf0 [ 102.947859][ T4874] ? dtInitRoot+0x660/0x660 [ 102.952370][ T4874] ? end_current_label_crit_section+0x14b/0x170 [ 102.958601][ T4874] ? common_file_perm+0x171/0x1c0 [ 102.963630][ T4874] iterate_dir+0x218/0x560 [ 102.968230][ T4874] __se_sys_getdents64+0xf2/0x270 [ 102.973237][ T4874] ? __x64_sys_getdents64+0x80/0x80 [ 102.978419][ T4874] ? filldir+0x720/0x720 [ 102.982898][ T4874] ? vtime_user_exit+0x2c8/0x3e0 [ 102.987832][ T4874] ? lockdep_hardirqs_on+0x94/0x140 [ 102.993129][ T4874] do_syscall_64+0x4c/0xa0 [ 102.997545][ T4874] ? clear_bhb_loop+0x30/0x80 [ 103.002291][ T4874] ? clear_bhb_loop+0x30/0x80 [ 103.006956][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.012944][ T4874] RIP: 0033:0x7fc8336b58b3 [ 103.017637][ T4874] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 103.037685][ T4874] RSP: 002b:00007ffde67f7e38 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 103.046173][ T4874] RAX: ffffffffffffffda RBX: 0000555568ef0a30 RCX: 00007fc8336b58b3 [ 103.054212][ T4874] RDX: 0000000000008000 RSI: 0000555568ef0a60 RDI: 0000000000000005 [ 103.062166][ T4874] RBP: 0000555568ef0a60 R08: 00000000000285e1 R09: 0000000000000001 [ 103.070311][ T4874] R10: 00007fc8338c5cc0 R11: 0000000000000293 R12: 0000555568ef0a34 [ 103.078269][ T4874] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffde67fa0e0 [ 103.086317][ T4874] [ 103.089789][ T4874] Kernel Offset: disabled [ 103.094105][ T4874] Rebooting in 86400 seconds..