Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. 2026/03/07 11:12:07 parsed 1 programs [ 70.315350][ T4190] cgroup: Unknown subsys name 'net' [ 70.445881][ T4190] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.432677][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.439259][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.030365][ T4190] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 73.562494][ T4204] chnl_net:caif_netlink_parms(): no params data found [ 73.639572][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.647195][ T4204] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.655564][ T4204] device bridge_slave_0 entered promiscuous mode [ 73.664757][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.672384][ T4204] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.693306][ T4204] device bridge_slave_1 entered promiscuous mode [ 73.715040][ T4204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.726867][ T4204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.749990][ T4204] team0: Port device team_slave_0 added [ 73.757502][ T4204] team0: Port device team_slave_1 added [ 73.776024][ T4204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.783272][ T4204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.809423][ T4204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.822577][ T4204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.830091][ T4204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.856363][ T4204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.889195][ T4204] device hsr_slave_0 entered promiscuous mode [ 73.896023][ T4204] device hsr_slave_1 entered promiscuous mode [ 73.998608][ T4204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.010560][ T4204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.020492][ T4204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.030963][ T4204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.055910][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.063255][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.071308][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.078386][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.126564][ T4204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.141244][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.152135][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.160986][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.169719][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.183369][ T4204] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.195635][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.204348][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.211499][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.231012][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.239862][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.246952][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.261723][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.271982][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.283184][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.295581][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.308272][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.320595][ T4204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.410432][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.417940][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.432867][ T4204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.452283][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.472060][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.481193][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.490172][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.500936][ T4204] device veth0_vlan entered promiscuous mode [ 74.513391][ T4204] device veth1_vlan entered promiscuous mode [ 74.536175][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.545108][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.557448][ T4204] device veth0_macvtap entered promiscuous mode [ 74.568672][ T4204] device veth1_macvtap entered promiscuous mode [ 74.586660][ T4204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.594383][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.602704][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.611170][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.619971][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.631723][ T4204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.640101][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.648765][ T1237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.660747][ T4204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.671559][ T4204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.680842][ T4204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.689731][ T4204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.831412][ T1237] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.585997][ T1237] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.944936][ T1237] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.987383][ T1237] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.787622][ T1237] device hsr_slave_0 left promiscuous mode [ 80.805098][ T1237] device hsr_slave_1 left promiscuous mode [ 80.814098][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.822372][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.832474][ T1237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.840899][ T1237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.848823][ T1237] device bridge_slave_1 left promiscuous mode [ 80.857557][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.881939][ T1237] device bridge_slave_0 left promiscuous mode [ 80.888220][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.914752][ T1237] device veth1_macvtap left promiscuous mode [ 80.921751][ T1237] device veth0_macvtap left promiscuous mode [ 80.927891][ T1237] device veth1_vlan left promiscuous mode [ 80.936449][ T1237] device veth0_vlan left promiscuous mode [ 81.130983][ T1237] team0 (unregistering): Port device team_slave_1 removed [ 81.146599][ T1237] team0 (unregistering): Port device team_slave_0 removed [ 81.160735][ T1237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.177451][ T1237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.236111][ T1237] bond0 (unregistering): Released all slaves [ 82.873304][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.892109][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.917209][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.947785][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.956881][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.967963][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/03/07 11:12:23 executed programs: 0 [ 83.837737][ T1237] ODEBUG: Out of memory. ODEBUG disabled [ 83.947031][ T4363] chnl_net:caif_netlink_parms(): no params data found [ 84.042534][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.052695][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.062763][ T4363] device bridge_slave_0 entered promiscuous mode [ 84.081726][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.089290][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.097841][ T4363] device bridge_slave_1 entered promiscuous mode [ 84.149937][ T4363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.168847][ T4363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.220391][ T4363] team0: Port device team_slave_0 added [ 84.228358][ T4363] team0: Port device team_slave_1 added [ 84.265443][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.273013][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.314508][ T4363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.342038][ T4363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.356967][ T4363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.392538][ T4363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.456672][ T4363] device hsr_slave_0 entered promiscuous mode [ 84.478938][ T4363] device hsr_slave_1 entered promiscuous mode [ 85.097378][ T4363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.108848][ T4363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.119843][ T4363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.130225][ T4363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.201699][ T4363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.259406][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.267238][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.280892][ T4363] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.295817][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.305907][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.316073][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.323236][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.410468][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.420401][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.429892][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.438341][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.445488][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.455145][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.465611][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.482715][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.492956][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.502834][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.512474][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.530074][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.544360][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.570827][ T1262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.639349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.653516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.683588][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.749852][ T4409] Bluetooth: hci0: command 0x0409 tx timeout [ 86.028337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.037219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.053395][ T4363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.118824][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.130805][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.185770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.194696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.206437][ T4363] device veth0_vlan entered promiscuous mode [ 86.214978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.223565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.237695][ T4363] device veth1_vlan entered promiscuous mode [ 86.290780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.300362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.308631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.320747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.334199][ T4363] device veth0_macvtap entered promiscuous mode [ 86.366601][ T4363] device veth1_macvtap entered promiscuous mode [ 86.391371][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.398788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.408955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.417168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.426354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.441804][ T4363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.457159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.480784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.491745][ T4363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.500739][ T4363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.511332][ T4363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.520839][ T4363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.604826][ T4454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.629998][ T4454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.638747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.705142][ T4454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.715616][ T4454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.726678][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.802427][ T1327] cfg80211: failed to load regulatory.db [ 87.122886][ T4487] loop0: detected capacity change from 0 to 32768 [ 87.839453][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 88.337019][ T4521] loop0: detected capacity change from 0 to 32768 [ 89.019302][ T276] ================================================================== [ 89.027680][ T276] BUG: KASAN: use-after-free in jfs_lazycommit+0x761/0xb40 [ 89.034937][ T276] Read of size 4 at addr ffff88814c578a94 by task jfsCommit/276 [ 89.042603][ T276] [ 89.044976][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 89.052213][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.062313][ T276] Call Trace: [ 89.065625][ T276] [ 89.068588][ T276] dump_stack_lvl+0x188/0x250 [ 89.073328][ T276] ? show_regs_print_info+0x20/0x20 [ 89.078571][ T276] ? load_image+0x400/0x400 [ 89.083103][ T276] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 89.088599][ T276] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 89.094099][ T276] ? lockdep_hardirqs_off+0x70/0x100 [ 89.099430][ T276] print_address_description+0x60/0x2d0 [ 89.105021][ T276] ? jfs_lazycommit+0x761/0xb40 [ 89.109915][ T276] kasan_report+0xdf/0x130 [ 89.114395][ T276] ? jfs_lazycommit+0x761/0xb40 [ 89.119300][ T276] jfs_lazycommit+0x761/0xb40 [ 89.124025][ T276] ? txFreelock+0x5a0/0x5a0 [ 89.128570][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 89.134781][ T276] ? sched_dynamic_update+0x210/0x210 [ 89.140213][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.146200][ T276] ? __kthread_parkme+0x157/0x1b0 [ 89.151265][ T276] kthread+0x436/0x520 [ 89.155376][ T276] ? txFreelock+0x5a0/0x5a0 [ 89.159918][ T276] ? kthread_blkcg+0xd0/0xd0 [ 89.164546][ T276] ret_from_fork+0x1f/0x30 [ 89.169017][ T276] [ 89.172067][ T276] [ 89.174417][ T276] Allocated by task 4521: [ 89.178771][ T276] __kasan_kmalloc+0xb5/0xf0 [ 89.183404][ T276] jfs_fill_super+0xd8/0xb00 [ 89.188027][ T276] mount_bdev+0x287/0x3c0 [ 89.192393][ T276] legacy_get_tree+0xe6/0x180 [ 89.197107][ T276] vfs_get_tree+0x88/0x270 [ 89.201561][ T276] do_new_mount+0x24a/0xa40 [ 89.206095][ T276] __se_sys_mount+0x2e3/0x3d0 [ 89.210888][ T276] do_syscall_64+0x4c/0xa0 [ 89.215334][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.221348][ T276] [ 89.223737][ T276] Freed by task 4363: [ 89.227745][ T276] kasan_set_track+0x4b/0x70 [ 89.232364][ T276] kasan_set_free_info+0x1f/0x40 [ 89.237384][ T276] ____kasan_slab_free+0xd5/0x110 [ 89.242439][ T276] slab_free_freelist_hook+0xea/0x170 [ 89.247847][ T276] kfree+0xef/0x2a0 [ 89.251682][ T276] generic_shutdown_super+0x130/0x300 [ 89.257128][ T276] kill_block_super+0x7c/0xe0 [ 89.261847][ T276] deactivate_locked_super+0x93/0xf0 [ 89.267172][ T276] cleanup_mnt+0x42d/0x4e0 [ 89.271628][ T276] task_work_run+0x125/0x1a0 [ 89.276248][ T276] exit_to_user_mode_loop+0x10f/0x130 [ 89.281644][ T276] exit_to_user_mode_prepare+0xee/0x180 [ 89.287223][ T276] syscall_exit_to_user_mode+0x16/0x40 [ 89.292748][ T276] do_syscall_64+0x58/0xa0 [ 89.297275][ T276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.303292][ T276] [ 89.305629][ T276] Last potentially related work creation: [ 89.311364][ T276] kasan_save_stack+0x35/0x60 [ 89.316086][ T276] kasan_record_aux_stack+0xb8/0x100 [ 89.321409][ T276] kvfree_call_rcu+0x105/0x7d0 [ 89.326203][ T276] ops_init+0x2dc/0x600 [ 89.330381][ T276] register_pernet_operations+0x2af/0x610 [ 89.336127][ T276] register_pernet_subsys+0x24/0x40 [ 89.341347][ T276] tcf_register_action+0xd7/0x2f0 [ 89.346390][ T276] do_one_initcall+0x272/0x730 [ 89.351197][ T276] do_initcall_level+0x137/0x1f0 [ 89.356169][ T276] do_initcalls+0x4b/0x90 [ 89.360529][ T276] kernel_init_freeable+0x3e9/0x570 [ 89.365748][ T276] kernel_init+0x19/0x1b0 [ 89.370102][ T276] ret_from_fork+0x1f/0x30 [ 89.374543][ T276] [ 89.376879][ T276] The buggy address belongs to the object at ffff88814c578a00 [ 89.376879][ T276] which belongs to the cache kmalloc-256 of size 256 [ 89.390958][ T276] The buggy address is located 148 bytes inside of [ 89.390958][ T276] 256-byte region [ffff88814c578a00, ffff88814c578b00) [ 89.404372][ T276] The buggy address belongs to the page: [ 89.410042][ T276] page:ffffea0005315e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14c578 [ 89.420297][ T276] head:ffffea0005315e00 order:1 compound_mapcount:0 [ 89.427086][ T276] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 89.435192][ T276] raw: 057ff00000010200 0000000000000000 0000000600000001 ffff888016c41b40 [ 89.443796][ T276] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 89.452394][ T276] page dumped because: kasan: bad access detected [ 89.458829][ T276] page_owner tracks the page as allocated [ 89.464561][ T276] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 19975842805, free_ts 0 [ 89.482670][ T276] get_page_from_freelist+0x1bbd/0x1ca0 [ 89.488241][ T276] __alloc_pages+0x1ee/0x480 [ 89.492855][ T276] alloc_page_interleave+0x24/0x1e0 [ 89.498158][ T276] new_slab+0xc0/0x4b0 [ 89.502254][ T276] ___slab_alloc+0x80a/0xdd0 [ 89.506855][ T276] __kmalloc+0x1cd/0x330 [ 89.511113][ T276] __register_sysctl_table+0xa1f/0x1230 [ 89.516682][ T276] llc_sysctl_init+0x1f/0x80 [ 89.521297][ T276] llc2_init+0x57/0x110 [ 89.525472][ T276] do_one_initcall+0x272/0x730 [ 89.530251][ T276] do_initcall_level+0x137/0x1f0 [ 89.535203][ T276] do_initcalls+0x4b/0x90 [ 89.539556][ T276] kernel_init_freeable+0x3e9/0x570 [ 89.544774][ T276] kernel_init+0x19/0x1b0 [ 89.549468][ T276] ret_from_fork+0x1f/0x30 [ 89.553899][ T276] page_owner free stack trace missing [ 89.559278][ T276] [ 89.561624][ T276] Memory state around the buggy address: [ 89.567542][ T276] ffff88814c578980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.575635][ T276] ffff88814c578a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.583712][ T276] >ffff88814c578a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.591796][ T276] ^ [ 89.596456][ T276] ffff88814c578b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.604572][ T276] ffff88814c578b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.612642][ T276] ================================================================== [ 89.620716][ T276] Disabling lock debugging due to kernel taint [ 89.627009][ T276] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.634224][ T276] CPU: 0 PID: 276 Comm: jfsCommit Tainted: G B syzkaller #0 [ 89.642832][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.652901][ T276] Call Trace: [ 89.656246][ T276] [ 89.659210][ T276] dump_stack_lvl+0x188/0x250 [ 89.663915][ T276] ? show_regs_print_info+0x20/0x20 [ 89.669146][ T276] ? load_image+0x400/0x400 [ 89.673676][ T276] panic+0x2e5/0x810 [ 89.677684][ T276] ? bpf_jit_dump+0xd0/0xd0 [ 89.682204][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.688116][ T276] ? _raw_spin_unlock+0x40/0x40 [ 89.692997][ T276] ? jfs_lazycommit+0x761/0xb40 [ 89.697871][ T276] check_panic_on_warn+0x80/0xa0 [ 89.702919][ T276] ? jfs_lazycommit+0x761/0xb40 [ 89.707807][ T276] end_report+0x6d/0xf0 [ 89.711984][ T276] kasan_report+0x102/0x130 [ 89.716518][ T276] ? jfs_lazycommit+0x761/0xb40 [ 89.721404][ T276] jfs_lazycommit+0x761/0xb40 [ 89.726108][ T276] ? txFreelock+0x5a0/0x5a0 [ 89.730661][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 89.736579][ T276] ? sched_dynamic_update+0x210/0x210 [ 89.741972][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 89.747884][ T276] ? __kthread_parkme+0x157/0x1b0 [ 89.752932][ T276] kthread+0x436/0x520 [ 89.757021][ T276] ? txFreelock+0x5a0/0x5a0 [ 89.761537][ T276] ? kthread_blkcg+0xd0/0xd0 [ 89.766155][ T276] ret_from_fork+0x1f/0x30 [ 89.770663][ T276] [ 89.773929][ T276] Kernel Offset: disabled [ 89.778272][ T276] Rebooting in 86400 seconds..