Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts.
2026/06/21 08:20:48 parsed 1 programs
2026/06/21 08:20:48 serving rpc on tcp://44235
syzkaller login: [ 74.380198][ T5781] cgroup: Unknown subsys name 'net'
[ 74.509319][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 76.114044][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 78.408159][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.416311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.447222][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.459909][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 79.228183][ T5829] chnl_net:caif_netlink_parms(): no params data found
[ 79.290703][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.298694][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.306329][ T5829] bridge_slave_0: entered allmulticast mode
[ 79.313344][ T5829] bridge_slave_0: entered promiscuous mode
[ 79.322166][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.329559][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.336858][ T5829] bridge_slave_1: entered allmulticast mode
[ 79.345099][ T5829] bridge_slave_1: entered promiscuous mode
[ 79.374733][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.388343][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.420564][ T5829] team0: Port device team_slave_0 added
[ 79.430930][ T5829] team0: Port device team_slave_1 added
[ 79.456503][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.464194][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.490191][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.505131][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.512113][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.538122][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.576171][ T5829] hsr_slave_0: entered promiscuous mode
[ 79.583512][ T5829] hsr_slave_1: entered promiscuous mode
[ 79.730812][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.742269][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 79.751620][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.761781][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.838397][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.867608][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.880046][ T79] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.887409][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.905493][ T79] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.912600][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.098939][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 80.147937][ T5829] veth0_vlan: entered promiscuous mode
[ 80.159008][ T5829] veth1_vlan: entered promiscuous mode
[ 80.197447][ T5829] veth0_macvtap: entered promiscuous mode
[ 80.206472][ T5829] veth1_macvtap: entered promiscuous mode
[ 80.225633][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 80.244052][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.259162][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.275220][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.285058][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.294123][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.487215][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.495598][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.504581][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.513940][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.522017][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 80.530443][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.797370][ T4818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/06/21 08:20:58 executed programs: 0
[ 82.736324][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 82.744894][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 82.752973][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.761461][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.771573][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 82.779510][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 82.891080][ T5885] chnl_net:caif_netlink_parms(): no params data found
[ 82.944792][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.951949][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.959199][ T5885] bridge_slave_0: entered allmulticast mode
[ 82.966536][ T5885] bridge_slave_0: entered promiscuous mode
[ 82.974970][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.982067][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.989620][ T5885] bridge_slave_1: entered allmulticast mode
[ 82.997109][ T5885] bridge_slave_1: entered promiscuous mode
[ 83.023165][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.035074][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.060240][ T5885] team0: Port device team_slave_0 added
[ 83.068412][ T5885] team0: Port device team_slave_1 added
[ 83.088026][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.095044][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.120979][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.133228][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.140187][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.166139][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.200127][ T5885] hsr_slave_0: entered promiscuous mode
[ 83.206645][ T5885] hsr_slave_1: entered promiscuous mode
[ 83.214944][ T5885] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 83.222881][ T5885] Cannot create hsr debugfs directory
[ 83.237847][ T4818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.824180][ T5845] Bluetooth: hci0: command tx timeout
[ 85.354887][ T4818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.415758][ T4818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.281569][ T5885] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.291404][ T5885] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.300597][ T5885] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.310177][ T5885] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.326752][ T4818] hsr_slave_0: left promiscuous mode
[ 86.332835][ T4818] hsr_slave_1: left promiscuous mode
[ 86.338696][ T4818] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 86.346941][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 86.355932][ T4818] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 86.363388][ T4818] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 86.371004][ T4818] bridge_slave_1: left allmulticast mode
[ 86.376769][ T4818] bridge_slave_1: left promiscuous mode
[ 86.383145][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.394298][ T4818] bridge_slave_0: left allmulticast mode
[ 86.399970][ T4818] bridge_slave_0: left promiscuous mode
[ 86.405805][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.425671][ T4818] veth1_macvtap: left promiscuous mode
[ 86.431368][ T4818] veth0_macvtap: left promiscuous mode
[ 86.437597][ T4818] veth1_vlan: left promiscuous mode
[ 86.444291][ T4818] veth0_vlan: left promiscuous mode
[ 86.805700][ T4818] team0 (unregistering): Port device team_slave_1 removed
[ 86.835156][ T4818] team0 (unregistering): Port device team_slave_0 removed
[ 86.863653][ T4818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 86.902849][ T5845] Bluetooth: hci0: command tx timeout
[ 86.907109][ T787] cfg80211: failed to load regulatory.db
[ 86.914797][ T4818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 87.107207][ T4818] bond0 (unregistering): Released all slaves
[ 87.248885][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0
[ 87.282135][ T5885] 8021q: adding VLAN 0 to HW filter on device team0
[ 87.295328][ T79] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.302469][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.323221][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.330365][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.527561][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.569963][ T5885] veth0_vlan: entered promiscuous mode
[ 87.579427][ T5885] veth1_vlan: entered promiscuous mode
[ 87.604491][ T5885] veth0_macvtap: entered promiscuous mode
[ 87.619225][ T5885] veth1_macvtap: entered promiscuous mode
[ 87.657050][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.681291][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.696243][ T5885] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.707099][ T5885] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.716973][ T5885] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.726115][ T5885] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/06/21 08:21:03 executed programs: 2
[ 87.835212][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.847559][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.868835][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.877119][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.919277][ T5924] syz.0.17[5924]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 87.934549][ T5924] loop0: detected capacity change from 0 to 512
[ 87.947422][ T5924] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 87.961584][ T5924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 87.996172][ T5924] EXT4-fs (loop0): 1 truncate cleaned up
[ 88.002533][ T5924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 88.068277][ T5924] ==================================================================
[ 88.076388][ T5924] BUG: KASAN: slab-out-of-bounds in ext4_read_inline_data+0x1c0/0x2a0
[ 88.084567][ T5924] Read of size 68 at addr ffff888025899c80 by task syz.0.17/5924
[ 88.092267][ T5924]
[ 88.094588][ T5924] CPU: 0 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0
[ 88.101773][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 88.111818][ T5924] Call Trace:
[ 88.115083][ T5924]
[ 88.118016][ T5924] dump_stack_lvl+0x18c/0x250
[ 88.122702][ T5924] ? __lock_acquire+0x7d80/0x7d80
[ 88.127751][ T5924] ? show_regs_print_info+0x20/0x20
[ 88.132960][ T5924] ? load_image+0x420/0x420
[ 88.137449][ T5924] ? __virt_addr_valid+0x10c/0x380
[ 88.142544][ T5924] ? __virt_addr_valid+0x10c/0x380
[ 88.147635][ T5924] ? __virt_addr_valid+0x10c/0x380
[ 88.152735][ T5924] print_report+0xa8/0x210
[ 88.157141][ T5924] ? ext4_read_inline_data+0x1c0/0x2a0
[ 88.162580][ T5924] kasan_report+0x117/0x150
[ 88.167068][ T5924] ? ext4_read_inline_data+0x1c0/0x2a0
[ 88.172509][ T5924] kasan_check_range+0x241/0x290
[ 88.177436][ T5924] ? ext4_read_inline_data+0x1c0/0x2a0
[ 88.182892][ T5924] __asan_memcpy+0x29/0x70
[ 88.187311][ T5924] ext4_read_inline_data+0x1c0/0x2a0
[ 88.192602][ T5924] ext4_convert_inline_data_nolock+0x138/0x730
[ 88.198744][ T5924] ? ext4_add_dirent_to_inline+0xef/0x400
[ 88.204452][ T5924] ? ext4_add_dirent_to_inline+0x400/0x400
[ 88.210243][ T5924] ? ext4_get_inode_loc+0xc6/0xf0
[ 88.215252][ T5924] ext4_try_add_inline_entry+0x73c/0xa70
[ 88.220871][ T5924] ? ext4_da_write_inline_data_begin+0xf80/0xf80
[ 88.227196][ T5924] ext4_add_entry+0x5cc/0xd90
[ 88.231867][ T5924] ? ext4_inc_count+0x1b0/0x1b0
[ 88.236701][ T5924] ? __ext4_mark_inode_dirty+0x4c4/0x6d0
[ 88.242316][ T5924] ? ext4_init_new_dir+0x47c/0x550
[ 88.247412][ T5924] ext4_mkdir+0x524/0xc90
[ 88.251731][ T5924] ? ext4_symlink+0x940/0x940
[ 88.256393][ T5924] ? inode_permission+0xf3/0x480
[ 88.261323][ T5924] ? bpf_lsm_inode_mkdir+0x9/0x10
[ 88.266326][ T5924] ? security_inode_mkdir+0xb7/0x100
[ 88.271605][ T5924] vfs_mkdir+0x2a5/0x470
[ 88.275852][ T5924] do_mkdirat+0x1dc/0x450
[ 88.280202][ T5924] ? vfs_mkdir+0x470/0x470
[ 88.284623][ T5924] __x64_sys_mkdirat+0x89/0xa0
[ 88.289372][ T5924] do_syscall_64+0x55/0xb0
[ 88.293773][ T5924] ? clear_bhb_loop+0x40/0x90
[ 88.298433][ T5924] ? clear_bhb_loop+0x40/0x90
[ 88.303091][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 88.308982][ T5924] RIP: 0033:0x7f3e82b9bcc7
[ 88.313380][ T5924] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.332974][ T5924] RSP: 002b:00007fff8f21def8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 88.341374][ T5924] RAX: ffffffffffffffda RBX: 00007fff8f21df80 RCX: 00007f3e82b9bcc7
[ 88.349330][ T5924] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c
[ 88.357282][ T5924] RBP: 0000200000000140 R08: 0000200000000080 R09: 0000000000000000
[ 88.365235][ T5924] R10: 0000200000000140 R11: 0000000000000246 R12: 0000200000000080
[ 88.373208][ T5924] R13: 00007fff8f21df40 R14: 0000000000000000 R15: 0000000000000000
[ 88.381236][ T5924]
[ 88.384241][ T5924]
[ 88.386541][ T5924] Allocated by task 1:
[ 88.390584][ T5924] kasan_set_track+0x4e/0x70
[ 88.395159][ T5924] __kasan_slab_alloc+0x6c/0x80
[ 88.400005][ T5924] slab_post_alloc_hook+0x6a/0x4d0
[ 88.405101][ T5924] kmem_cache_alloc+0x17e/0x2c0
[ 88.409937][ T5924] __kernfs_new_node+0xe5/0x7f0
[ 88.414776][ T5924] kernfs_new_node+0x14c/0x260
[ 88.419518][ T5924] __kernfs_create_file+0x4b/0x2e0
[ 88.424645][ T5924] sysfs_add_file_mode_ns+0x237/0x2f0
[ 88.430057][ T5924] sysfs_merge_group+0x184/0x320
[ 88.434981][ T5924] dev_pm_qos_expose_flags+0x1c9/0x2a0
[ 88.440419][ T5924] usb_hub_create_port_device+0x6c9/0xbc0
[ 88.446119][ T5924] hub_probe+0x26b3/0x37d0
[ 88.450517][ T5924] usb_probe_interface+0x5c2/0xaf0
[ 88.455605][ T5924] really_probe+0x247/0xae0
[ 88.460088][ T5924] __driver_probe_device+0x1f5/0x390
[ 88.465371][ T5924] driver_probe_device+0x4f/0x420
[ 88.470384][ T5924] __device_attach_driver+0x2ca/0x510
[ 88.475754][ T5924] bus_for_each_drv+0x252/0x2e0
[ 88.480615][ T5924] __device_attach+0x2c1/0x420
[ 88.485379][ T5924] bus_probe_device+0x180/0x260
[ 88.490210][ T5924] device_add+0x87c/0xc40
[ 88.494530][ T5924] usb_set_configuration+0x1ad0/0x2150
[ 88.499975][ T5924] usb_generic_driver_probe+0x8d/0x150
[ 88.505420][ T5924] usb_probe_device+0x12a/0x260
[ 88.510247][ T5924] really_probe+0x247/0xae0
[ 88.514731][ T5924] __driver_probe_device+0x1f5/0x390
[ 88.519998][ T5924] driver_probe_device+0x4f/0x420
[ 88.525026][ T5924] __device_attach_driver+0x2ca/0x510
[ 88.530384][ T5924] bus_for_each_drv+0x252/0x2e0
[ 88.535211][ T5924] __device_attach+0x2c1/0x420
[ 88.539955][ T5924] bus_probe_device+0x180/0x260
[ 88.544781][ T5924] device_add+0x87c/0xc40
[ 88.549095][ T5924] usb_new_device+0x995/0x1550
[ 88.553841][ T5924] register_root_hub+0x255/0x540
[ 88.558759][ T5924] usb_add_hcd+0xa34/0xe80
[ 88.563158][ T5924] vhci_hcd_probe+0x144/0x370
[ 88.567822][ T5924] platform_probe+0x13b/0x1c0
[ 88.572479][ T5924] really_probe+0x247/0xae0
[ 88.576991][ T5924] __driver_probe_device+0x1f5/0x390
[ 88.582261][ T5924] driver_probe_device+0x4f/0x420
[ 88.587312][ T5924] __device_attach_driver+0x2ca/0x510
[ 88.592667][ T5924] bus_for_each_drv+0x252/0x2e0
[ 88.597508][ T5924] __device_attach+0x2c1/0x420
[ 88.602264][ T5924] bus_probe_device+0x180/0x260
[ 88.607093][ T5924] device_add+0x87c/0xc40
[ 88.611402][ T5924] platform_device_add+0x4c3/0x830
[ 88.616517][ T5924] vhci_hcd_init+0x3cb/0x500
[ 88.621094][ T5924] do_one_initcall+0x242/0x790
[ 88.625867][ T5924] do_initcall_level+0x13d/0x1f0
[ 88.630812][ T5924] do_initcalls+0x69/0xd0
[ 88.635158][ T5924] kernel_init_freeable+0x3d9/0x560
[ 88.640395][ T5924] kernel_init+0x1d/0x1c0
[ 88.644710][ T5924] ret_from_fork+0x48/0x80
[ 88.649108][ T5924] ret_from_fork_asm+0x11/0x20
[ 88.653855][ T5924]
[ 88.656165][ T5924] The buggy address belongs to the object at ffff888025899ba0
[ 88.656165][ T5924] which belongs to the cache kernfs_node_cache of size 184
[ 88.670724][ T5924] The buggy address is located 40 bytes to the right of
[ 88.670724][ T5924] allocated 184-byte region [ffff888025899ba0, ffff888025899c58)
[ 88.685291][ T5924]
[ 88.687603][ T5924] The buggy address belongs to the physical page:
[ 88.694003][ T5924] page:ffffea0000962640 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25899
[ 88.704145][ T5924] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 88.711671][ T5924] page_type: 0xffffffff()
[ 88.715996][ T5924] raw: 00fff00000000800 ffff888019e4ddc0 dead000000000122 0000000000000000
[ 88.724582][ T5924] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 88.733144][ T5924] page dumped because: kasan: bad access detected
[ 88.739550][ T5924] page_owner tracks the page as allocated
[ 88.745244][ T5924] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 9625837345, free_ts 8616778959
[ 88.762587][ T5924] post_alloc_hook+0x1c1/0x200
[ 88.767343][ T5924] get_page_from_freelist+0x2181/0x22a0
[ 88.772878][ T5924] __alloc_pages+0x1f0/0x460
[ 88.777470][ T5924] alloc_page_interleave+0x24/0x1e0
[ 88.782660][ T5924] alloc_slab_page+0x5d/0x180
[ 88.787332][ T5924] new_slab+0x87/0x2d0
[ 88.791387][ T5924] ___slab_alloc+0xc5c/0x12f0
[ 88.796047][ T5924] kmem_cache_alloc+0x109/0x2c0
[ 88.800906][ T5924] __kernfs_new_node+0xe5/0x7f0
[ 88.805744][ T5924] kernfs_new_node+0x14c/0x260
[ 88.810493][ T5924] __kernfs_create_file+0x4b/0x2e0
[ 88.815597][ T5924] sysfs_add_file_mode_ns+0x237/0x2f0
[ 88.820957][ T5924] internal_create_group+0x431/0xd10
[ 88.826232][ T5924] sysfs_create_groups+0x59/0x120
[ 88.831244][ T5924] device_add_attrs+0x1b2/0x830
[ 88.836081][ T5924] device_add+0x51a/0xc40
[ 88.840395][ T5924] page last free stack trace:
[ 88.845049][ T5924] free_unref_page_prepare+0x7d7/0x8f0
[ 88.850493][ T5924] free_unref_page+0x32/0x2e0
[ 88.855158][ T5924] vfree+0x1a7/0x340
[ 88.859040][ T5924] delayed_vfree_work+0x55/0x80
[ 88.863900][ T5924] process_scheduled_works+0xa60/0x1600
[ 88.869429][ T5924] worker_thread+0xa5e/0xfe0
[ 88.874016][ T5924] kthread+0x2fa/0x390
[ 88.878084][ T5924] ret_from_fork+0x48/0x80
[ 88.882577][ T5924] ret_from_fork_asm+0x11/0x20
[ 88.887344][ T5924]
[ 88.889665][ T5924] Memory state around the buggy address:
[ 88.895298][ T5924] ffff888025899b80: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00
[ 88.903347][ T5924] ffff888025899c00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 88.911399][ T5924] >ffff888025899c80: fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 88.919526][ T5924] ^
[ 88.923586][ T5924] ffff888025899d00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc
[ 88.931650][ T5924] ffff888025899d80: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 88.939694][ T5924] ==================================================================
[ 88.956050][ T5924] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 88.963290][ T5924] CPU: 0 PID: 5924 Comm: syz.0.17 Not tainted syzkaller #0
[ 88.970500][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 88.980569][ T5924] Call Trace:
[ 88.983863][ T5924]
[ 88.986803][ T5924] dump_stack_lvl+0x18c/0x250
[ 88.991489][ T5924] ? show_regs_print_info+0x20/0x20
[ 88.996678][ T5924] ? load_image+0x420/0x420
[ 89.001165][ T5924] panic+0x2ca/0x720
[ 89.005048][ T5924] ? bpf_jit_dump+0xd0/0xd0
[ 89.009540][ T5924] ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 89.015516][ T5924] ? _raw_spin_unlock+0x40/0x40
[ 89.020365][ T5924] ? print_memory_metadata+0x314/0x400
[ 89.025811][ T5924] ? ext4_read_inline_data+0x1c0/0x2a0
[ 89.031256][ T5924] check_panic_on_warn+0x84/0xa0
[ 89.036180][ T5924] ? ext4_read_inline_data+0x1c0/0x2a0
[ 89.041629][ T5924] end_report+0x6f/0x130
[ 89.045864][ T5924] kasan_report+0x128/0x150
[ 89.050362][ T5924] ? ext4_read_inline_data+0x1c0/0x2a0
[ 89.055810][ T5924] kasan_check_range+0x241/0x290
[ 89.060737][ T5924] ? ext4_read_inline_data+0x1c0/0x2a0
[ 89.066193][ T5924] __asan_memcpy+0x29/0x70
[ 89.070610][ T5924] ext4_read_inline_data+0x1c0/0x2a0
[ 89.075896][ T5924] ext4_convert_inline_data_nolock+0x138/0x730
[ 89.082062][ T5924] ? ext4_add_dirent_to_inline+0xef/0x400
[ 89.087798][ T5924] ? ext4_add_dirent_to_inline+0x400/0x400
[ 89.093607][ T5924] ? ext4_get_inode_loc+0xc6/0xf0
[ 89.098632][ T5924] ext4_try_add_inline_entry+0x73c/0xa70
[ 89.104266][ T5924] ? ext4_da_write_inline_data_begin+0xf80/0xf80
[ 89.110591][ T5924] ext4_add_entry+0x5cc/0xd90
[ 89.115263][ T5924] ? ext4_inc_count+0x1b0/0x1b0
[ 89.120139][ T5924] ? __ext4_mark_inode_dirty+0x4c4/0x6d0
[ 89.125778][ T5924] ? ext4_init_new_dir+0x47c/0x550
[ 89.130887][ T5924] ext4_mkdir+0x524/0xc90
[ 89.135215][ T5924] ? ext4_symlink+0x940/0x940
[ 89.139882][ T5924] ? inode_permission+0xf3/0x480
[ 89.144831][ T5924] ? bpf_lsm_inode_mkdir+0x9/0x10
[ 89.149857][ T5924] ? security_inode_mkdir+0xb7/0x100
[ 89.155138][ T5924] vfs_mkdir+0x2a5/0x470
[ 89.159373][ T5924] do_mkdirat+0x1dc/0x450
[ 89.163694][ T5924] ? vfs_mkdir+0x470/0x470
[ 89.168101][ T5924] __x64_sys_mkdirat+0x89/0xa0
[ 89.172856][ T5924] do_syscall_64+0x55/0xb0
[ 89.177264][ T5924] ? clear_bhb_loop+0x40/0x90
[ 89.181932][ T5924] ? clear_bhb_loop+0x40/0x90
[ 89.186595][ T5924] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 89.192488][ T5924] RIP: 0033:0x7f3e82b9bcc7
[ 89.196894][ T5924] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 89.216493][ T5924] RSP: 002b:00007fff8f21def8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 89.224895][ T5924] RAX: ffffffffffffffda RBX: 00007fff8f21df80 RCX: 00007f3e82b9bcc7
[ 89.232861][ T5924] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c
[ 89.240826][ T5924] RBP: 0000200000000140 R08: 0000200000000080 R09: 0000000000000000
[ 89.248787][ T5924] R10: 0000200000000140 R11: 0000000000000246 R12: 0000200000000080
[ 89.256751][ T5924] R13: 00007fff8f21df40 R14: 0000000000000000 R15: 0000000000000000
[ 89.264717][ T5924]
[ 89.267847][ T5924] Kernel Offset: disabled
[ 89.272156][ T5924] Rebooting in 86400 seconds..