Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. 2025/12/05 10:32:20 parsed 1 programs [ 68.884453][ T5786] cgroup: Unknown subsys name 'net' [ 69.038970][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.445007][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.487430][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.493973][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.094070][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.102000][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.126225][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.134088][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.493911][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 72.550451][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.558095][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.566910][ T5809] bridge_slave_0: entered allmulticast mode [ 72.574079][ T5809] bridge_slave_0: entered promiscuous mode [ 72.586309][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.593797][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.600875][ T5809] bridge_slave_1: entered allmulticast mode [ 72.607788][ T5809] bridge_slave_1: entered promiscuous mode [ 72.636318][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.648196][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.676263][ T5809] team0: Port device team_slave_0 added [ 72.686294][ T5809] team0: Port device team_slave_1 added [ 72.706340][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.713433][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.739353][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.751451][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.758659][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.784592][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.822572][ T5809] hsr_slave_0: entered promiscuous mode [ 72.828913][ T5809] hsr_slave_1: entered promiscuous mode [ 72.976645][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.988614][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.998381][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.015985][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.049009][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.056361][ T5809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.064198][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.071276][ T5809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.134299][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.150902][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.160273][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.177157][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.188243][ T2912] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.195375][ T2912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.209225][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.216352][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.379518][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.410703][ T5809] veth0_vlan: entered promiscuous mode [ 73.420521][ T5809] veth1_vlan: entered promiscuous mode [ 73.448895][ T5809] veth0_macvtap: entered promiscuous mode [ 73.457333][ T5809] veth1_macvtap: entered promiscuous mode [ 73.472096][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.490952][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.501839][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.511163][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.519926][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.528722][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.918007][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.289809][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.298914][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.306634][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.314912][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.325912][ T5870] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.333383][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/12/05 10:32:29 executed programs: 0 [ 76.457766][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.504275][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.511902][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.520561][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.528750][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.536988][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.544612][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.710621][ T5895] chnl_net:caif_netlink_parms(): no params data found [ 76.806417][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.813776][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.821224][ T5895] bridge_slave_0: entered allmulticast mode [ 76.828451][ T5895] bridge_slave_0: entered promiscuous mode [ 76.838403][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.845623][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.854369][ T5895] bridge_slave_1: entered allmulticast mode [ 76.861536][ T5895] bridge_slave_1: entered promiscuous mode [ 76.897750][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.909791][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.951072][ T5895] team0: Port device team_slave_0 added [ 76.959936][ T5895] team0: Port device team_slave_1 added [ 76.993577][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.000539][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.026617][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.041328][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.048369][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.074892][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.109273][ T5895] hsr_slave_0: entered promiscuous mode [ 77.115562][ T5895] hsr_slave_1: entered promiscuous mode [ 77.121556][ T5895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.130199][ T5895] Cannot create hsr debugfs directory [ 78.593909][ T5102] Bluetooth: hci0: command tx timeout [ 78.673686][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.755255][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.584683][ T5895] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.594148][ T5895] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.603628][ T5895] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.612432][ T5895] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.681826][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.714922][ T5895] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.727641][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.734779][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.750547][ T42] hsr_slave_0: left promiscuous mode [ 79.756529][ T42] hsr_slave_1: left promiscuous mode [ 79.762627][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.770177][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.780162][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.787817][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.796298][ T42] bridge_slave_1: left allmulticast mode [ 79.801947][ T42] bridge_slave_1: left promiscuous mode [ 79.808219][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.819481][ T42] bridge_slave_0: left allmulticast mode [ 79.825169][ T42] bridge_slave_0: left promiscuous mode [ 79.830798][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.849817][ T42] veth1_macvtap: left promiscuous mode [ 79.856266][ T42] veth0_macvtap: left promiscuous mode [ 79.861815][ T42] veth1_vlan: left promiscuous mode [ 79.867646][ T42] veth0_vlan: left promiscuous mode [ 80.188420][ T42] team0 (unregistering): Port device team_slave_1 removed [ 80.218538][ T42] team0 (unregistering): Port device team_slave_0 removed [ 80.245727][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.275055][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.526295][ T42] bond0 (unregistering): Released all slaves [ 80.619795][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.626936][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.673540][ T5102] Bluetooth: hci0: command tx timeout [ 80.827294][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.865519][ T5895] veth0_vlan: entered promiscuous mode [ 80.886010][ T5895] veth1_vlan: entered promiscuous mode [ 80.917177][ T5895] veth0_macvtap: entered promiscuous mode [ 80.927664][ T5895] veth1_macvtap: entered promiscuous mode [ 80.949096][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.965518][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.977502][ T5895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.988340][ T5895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.997645][ T5895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.007373][ T5895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.068239][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.085429][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.117326][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.135185][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.211673][ T5941] syz.0.17[5941]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.456084][ T5941] loop0: detected capacity change from 0 to 32768 [ 81.499397][ T5941] ================================================================== [ 81.507506][ T5941] BUG: KASAN: slab-use-after-free in jfs_readdir+0x1173/0x3a90 [ 81.515081][ T5941] Read of size 8 at addr ffff88805fc0a410 by task syz.0.17/5941 [ 81.522714][ T5941] [ 81.525052][ T5941] CPU: 1 PID: 5941 Comm: syz.0.17 Not tainted syzkaller #0 [ 81.532253][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.542313][ T5941] Call Trace: [ 81.545582][ T5941] [ 81.548503][ T5941] dump_stack_lvl+0x16c/0x230 [ 81.553174][ T5941] ? __lock_acquire+0x7c80/0x7c80 [ 81.558184][ T5941] ? show_regs_print_info+0x20/0x20 [ 81.563368][ T5941] ? load_image+0x3b0/0x3b0 [ 81.567857][ T5941] ? __virt_addr_valid+0x469/0x540 [ 81.572954][ T5941] print_report+0xac/0x220 [ 81.577361][ T5941] ? jfs_readdir+0x1173/0x3a90 [ 81.582111][ T5941] kasan_report+0x117/0x150 [ 81.586600][ T5941] ? jfs_readdir+0x1173/0x3a90 [ 81.591355][ T5941] jfs_readdir+0x1173/0x3a90 [ 81.595943][ T5941] ? dtInitRoot+0x670/0x670 [ 81.600440][ T5941] ? __up_read+0x280/0x670 [ 81.604837][ T5941] ? down_write+0x162/0x1f0 [ 81.609321][ T5941] ? down_read_killable+0x340/0x340 [ 81.614501][ T5941] ? end_current_label_crit_section+0x149/0x170 [ 81.620728][ T5941] ? dtInitRoot+0x670/0x670 [ 81.625218][ T5941] wrap_directory_iterator+0x92/0xd0 [ 81.630536][ T5941] iterate_dir+0x1c2/0x580 [ 81.634942][ T5941] __se_sys_getdents64+0xe9/0x260 [ 81.639957][ T5941] ? __x64_sys_getdents64+0x80/0x80 [ 81.645140][ T5941] ? filldir+0x680/0x680 [ 81.649369][ T5941] ? lockdep_hardirqs_on+0x98/0x150 [ 81.654549][ T5941] do_syscall_64+0x55/0xb0 [ 81.658951][ T5941] ? clear_bhb_loop+0x40/0x90 [ 81.663621][ T5941] ? clear_bhb_loop+0x40/0x90 [ 81.668285][ T5941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.674164][ T5941] RIP: 0033:0x7f797b38f749 [ 81.678575][ T5941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.698165][ T5941] RSP: 002b:00007ffd19410558 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 81.706562][ T5941] RAX: ffffffffffffffda RBX: 00007f797b5e5fa0 RCX: 00007f797b38f749 [ 81.714516][ T5941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 81.722469][ T5941] RBP: 00007f797b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 81.730421][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.738377][ T5941] R13: 00007f797b5e5fa0 R14: 00007f797b5e5fa0 R15: 0000000000000003 [ 81.746337][ T5941] [ 81.749340][ T5941] [ 81.751651][ T5941] Allocated by task 5941: [ 81.755958][ T5941] kasan_set_track+0x4e/0x70 [ 81.760532][ T5941] __kasan_slab_alloc+0x6c/0x80 [ 81.765364][ T5941] slab_post_alloc_hook+0x6e/0x4d0 [ 81.770463][ T5941] kmem_cache_alloc+0x11e/0x2e0 [ 81.775299][ T5941] mempool_alloc+0x1a1/0x4f0 [ 81.779877][ T5941] __get_metapage+0x54c/0xfa0 [ 81.784540][ T5941] dtSplitRoot+0x203/0x16b0 [ 81.789028][ T5941] dtInsert+0xeec/0x5f40 [ 81.793256][ T5941] jfs_create+0x6a1/0xa40 [ 81.797569][ T5941] path_openat+0x1277/0x3190 [ 81.802144][ T5941] do_filp_open+0x1c5/0x3d0 [ 81.806631][ T5941] do_sys_openat2+0x12c/0x1c0 [ 81.811289][ T5941] __x64_sys_openat+0x139/0x160 [ 81.816121][ T5941] do_syscall_64+0x55/0xb0 [ 81.820525][ T5941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.826399][ T5941] [ 81.828703][ T5941] Freed by task 5941: [ 81.832659][ T5941] kasan_set_track+0x4e/0x70 [ 81.837231][ T5941] kasan_save_free_info+0x2e/0x50 [ 81.842256][ T5941] ____kasan_slab_free+0x126/0x1e0 [ 81.847364][ T5941] slab_free_freelist_hook+0x130/0x1b0 [ 81.852821][ T5941] kmem_cache_free+0xf8/0x280 [ 81.857498][ T5941] release_metapage+0x6ed/0x870 [ 81.862333][ T5941] jfs_readdir+0xeb2/0x3a90 [ 81.866824][ T5941] wrap_directory_iterator+0x92/0xd0 [ 81.872102][ T5941] iterate_dir+0x1c2/0x580 [ 81.876513][ T5941] __se_sys_getdents64+0xe9/0x260 [ 81.881520][ T5941] do_syscall_64+0x55/0xb0 [ 81.885930][ T5941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.891807][ T5941] [ 81.894116][ T5941] The buggy address belongs to the object at ffff88805fc0a3e0 [ 81.894116][ T5941] which belongs to the cache jfs_mp of size 184 [ 81.907720][ T5941] The buggy address is located 48 bytes inside of [ 81.907720][ T5941] freed 184-byte region [ffff88805fc0a3e0, ffff88805fc0a498) [ 81.921413][ T5941] [ 81.923719][ T5941] The buggy address belongs to the physical page: [ 81.930124][ T5941] page:ffffea00017f0280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fc0a [ 81.940255][ T5941] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 81.947782][ T5941] page_type: 0xffffffff() [ 81.952099][ T5941] raw: 00fff00000000800 ffff8881436c08c0 dead000000000122 0000000000000000 [ 81.960665][ T5941] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 81.969240][ T5941] page dumped because: kasan: bad access detected [ 81.975647][ T5941] page_owner tracks the page as allocated [ 81.981344][ T5941] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5941, tgid 5941 (syz.0.17), ts 81485437638, free_ts 81130040304 [ 82.002164][ T5941] post_alloc_hook+0x1cd/0x210 [ 82.006920][ T5941] get_page_from_freelist+0x195c/0x19f0 [ 82.012453][ T5941] __alloc_pages+0x1e3/0x460 [ 82.017029][ T5941] alloc_slab_page+0x5d/0x170 [ 82.021692][ T5941] new_slab+0x87/0x2e0 [ 82.025749][ T5941] ___slab_alloc+0xc6d/0x1300 [ 82.030411][ T5941] kmem_cache_alloc+0x1b7/0x2e0 [ 82.035260][ T5941] mempool_alloc+0x1a1/0x4f0 [ 82.039848][ T5941] __get_metapage+0x54c/0xfa0 [ 82.044516][ T5941] diRead+0x1f7/0xb90 [ 82.048496][ T5941] jfs_iget+0x90/0x440 [ 82.052557][ T5941] jfs_fill_super+0x70c/0xac0 [ 82.057218][ T5941] mount_bdev+0x22b/0x2d0 [ 82.061532][ T5941] legacy_get_tree+0xea/0x180 [ 82.066192][ T5941] vfs_get_tree+0x8c/0x280 [ 82.070588][ T5941] do_new_mount+0x24b/0xa40 [ 82.075078][ T5941] page last free stack trace: [ 82.079732][ T5941] free_unref_page_prepare+0x7ce/0x8e0 [ 82.085179][ T5941] free_unref_page+0x32/0x2e0 [ 82.089843][ T5941] vfree+0x1a6/0x320 [ 82.093723][ T5941] delayed_vfree_work+0x55/0x80 [ 82.098557][ T5941] process_scheduled_works+0xa45/0x15b0 [ 82.104087][ T5941] worker_thread+0xa55/0xfc0 [ 82.108659][ T5941] kthread+0x2fa/0x390 [ 82.112708][ T5941] ret_from_fork+0x48/0x80 [ 82.117122][ T5941] ret_from_fork_asm+0x11/0x20 [ 82.121880][ T5941] [ 82.124186][ T5941] Memory state around the buggy address: [ 82.129810][ T5941] ffff88805fc0a300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.137855][ T5941] ffff88805fc0a380: 00 00 00 00 fc fc fc fc fc fc fc fc fa fb fb fb [ 82.145897][ T5941] >ffff88805fc0a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.153947][ T5941] ^ [ 82.158523][ T5941] ffff88805fc0a480: fb fb fb fc fc fc fc fc fc fc fc 00 00 00 00 00 [ 82.166571][ T5941] ffff88805fc0a500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.174621][ T5941] ================================================================== [ 82.197770][ T173] cfg80211: failed to load regulatory.db [ 82.206664][ T5941] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.213874][ T5941] CPU: 0 PID: 5941 Comm: syz.0.17 Not tainted syzkaller #0 [ 82.221075][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.231133][ T5941] Call Trace: [ 82.234399][ T5941] [ 82.237315][ T5941] dump_stack_lvl+0x16c/0x230 [ 82.241983][ T5941] ? show_regs_print_info+0x20/0x20 [ 82.247166][ T5941] ? load_image+0x3b0/0x3b0 [ 82.251656][ T5941] panic+0x2c0/0x710 [ 82.255536][ T5941] ? bpf_jit_dump+0xd0/0xd0 [ 82.260020][ T5941] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 82.265899][ T5941] ? _raw_spin_unlock+0x40/0x40 [ 82.270730][ T5941] ? print_memory_metadata+0x314/0x400 [ 82.276174][ T5941] ? jfs_readdir+0x1173/0x3a90 [ 82.280927][ T5941] check_panic_on_warn+0x84/0xa0 [ 82.285850][ T5941] ? jfs_readdir+0x1173/0x3a90 [ 82.290599][ T5941] end_report+0x6f/0x140 [ 82.294827][ T5941] kasan_report+0x128/0x150 [ 82.299314][ T5941] ? jfs_readdir+0x1173/0x3a90 [ 82.304065][ T5941] jfs_readdir+0x1173/0x3a90 [ 82.308649][ T5941] ? dtInitRoot+0x670/0x670 [ 82.313149][ T5941] ? __up_read+0x280/0x670 [ 82.317547][ T5941] ? down_write+0x162/0x1f0 [ 82.322030][ T5941] ? down_read_killable+0x340/0x340 [ 82.327211][ T5941] ? end_current_label_crit_section+0x149/0x170 [ 82.333438][ T5941] ? dtInitRoot+0x670/0x670 [ 82.337926][ T5941] wrap_directory_iterator+0x92/0xd0 [ 82.343196][ T5941] iterate_dir+0x1c2/0x580 [ 82.347596][ T5941] __se_sys_getdents64+0xe9/0x260 [ 82.352606][ T5941] ? __x64_sys_getdents64+0x80/0x80 [ 82.357787][ T5941] ? filldir+0x680/0x680 [ 82.362014][ T5941] ? lockdep_hardirqs_on+0x98/0x150 [ 82.367202][ T5941] do_syscall_64+0x55/0xb0 [ 82.371604][ T5941] ? clear_bhb_loop+0x40/0x90 [ 82.376288][ T5941] ? clear_bhb_loop+0x40/0x90 [ 82.380968][ T5941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.386860][ T5941] RIP: 0033:0x7f797b38f749 [ 82.391275][ T5941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.410870][ T5941] RSP: 002b:00007ffd19410558 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 82.419271][ T5941] RAX: ffffffffffffffda RBX: 00007f797b5e5fa0 RCX: 00007f797b38f749 [ 82.427226][ T5941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 82.435177][ T5941] RBP: 00007f797b413f91 R08: 0000000000000000 R09: 0000000000000000 [ 82.443131][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.451084][ T5941] R13: 00007f797b5e5fa0 R14: 00007f797b5e5fa0 R15: 0000000000000003 [ 82.459064][ T5941] [ 82.462283][ T5941] Kernel Offset: disabled [ 82.466593][ T5941] Rebooting in 86400 seconds..