Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts.
2026/07/19 22:35:09 parsed 1 programs
2026/07/19 22:35:09 serving rpc on tcp://38987
syzkaller login: [ 67.802865][ T4198] cgroup: Unknown subsys name 'net'
[ 67.941181][ T4198] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 69.524249][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 71.267041][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.273509][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.549742][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.558776][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.581519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 71.598603][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.606685][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.615187][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 71.947055][ T4241] chnl_net:caif_netlink_parms(): no params data found
[ 72.018234][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.027419][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.035721][ T4241] device bridge_slave_0 entered promiscuous mode
[ 72.048483][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.055826][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.064516][ T4241] device bridge_slave_1 entered promiscuous mode
[ 72.092533][ T4241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 72.106066][ T4241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 72.138161][ T4241] team0: Port device team_slave_0 added
[ 72.146355][ T4241] team0: Port device team_slave_1 added
[ 72.169237][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.176415][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 72.202502][ T4241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.219184][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.227536][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 72.255866][ T4241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.299301][ T4241] device hsr_slave_0 entered promiscuous mode
[ 72.306396][ T4241] device hsr_slave_1 entered promiscuous mode
[ 72.451733][ T4241] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 72.463876][ T4241] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 72.474355][ T4241] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 72.486220][ T4241] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 72.570400][ T4241] 8021q: adding VLAN 0 to HW filter on device bond0
[ 72.586078][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 72.596549][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 72.608408][ T4241] 8021q: adding VLAN 0 to HW filter on device team0
[ 72.619082][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 72.628145][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 72.639540][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.647068][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.660334][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 72.672678][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 72.683597][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 72.692521][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.699663][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.723592][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 72.734919][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 72.758807][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 72.771110][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 72.781536][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 72.791706][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 72.801088][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 72.817670][ T4241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 72.830638][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 72.842266][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 72.855514][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 72.988366][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 72.997177][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 73.013287][ T4241] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 73.041614][ T3089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 73.067088][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 73.077473][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 73.085425][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 73.096320][ T4241] device veth0_vlan entered promiscuous mode
[ 73.110254][ T4241] device veth1_vlan entered promiscuous mode
[ 73.138386][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 73.149713][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 73.159412][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 73.172682][ T4241] device veth0_macvtap entered promiscuous mode
[ 73.185364][ T4241] device veth1_macvtap entered promiscuous mode
[ 73.203381][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 73.211572][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 73.220723][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 73.230424][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 73.242704][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 73.251302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 73.260366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 73.279399][ T4241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 73.289041][ T4241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 73.298499][ T4241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 73.307934][ T4241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/07/19 22:35:19 executed programs: 0
[ 75.769739][ T4300] chnl_net:caif_netlink_parms(): no params data found
[ 75.836125][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.843336][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.852154][ T4300] device bridge_slave_0 entered promiscuous mode
[ 75.861389][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.868871][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.877453][ T4300] device bridge_slave_1 entered promiscuous mode
[ 75.905431][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.918493][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.947953][ T4300] team0: Port device team_slave_0 added
[ 75.956304][ T4300] team0: Port device team_slave_1 added
[ 75.977205][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.985064][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.011052][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.024796][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.031802][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.058438][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.098290][ T4300] device hsr_slave_0 entered promiscuous mode
[ 76.105397][ T4300] device hsr_slave_1 entered promiscuous mode
[ 76.112198][ T4300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 76.120536][ T4300] Cannot create hsr debugfs directory
[ 76.227314][ T4300] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.665134][ T4262] Bluetooth: hci0: command 0x0409 tx timeout
[ 78.656462][ T4300] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.730362][ T4300] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.801936][ T4300] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.923505][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.933508][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.945954][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.955298][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.047720][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.061437][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 79.069583][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 79.083589][ T4300] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.115128][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 79.123882][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 79.132533][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.139649][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.169701][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 79.178121][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 79.187557][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 79.196665][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.203755][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.212189][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 79.225799][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 79.252082][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 79.261103][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 79.270276][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 79.288263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 79.297486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 79.313548][ T154] device hsr_slave_0 left promiscuous mode
[ 79.320421][ T154] device hsr_slave_1 left promiscuous mode
[ 79.327894][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 79.335494][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 79.345494][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 79.352915][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 79.360787][ T154] device bridge_slave_1 left promiscuous mode
[ 79.367808][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.381549][ T154] device bridge_slave_0 left promiscuous mode
[ 79.387982][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.405875][ T154] device veth1_macvtap left promiscuous mode
[ 79.412249][ T154] device veth0_macvtap left promiscuous mode
[ 79.419193][ T154] device veth1_vlan left promiscuous mode
[ 79.425474][ T154] device veth0_vlan left promiscuous mode
[ 79.606861][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 79.625390][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 79.640978][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 79.659956][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 79.719048][ T154] bond0 (unregistering): Released all slaves
[ 79.744672][ T4217] Bluetooth: hci0: command 0x041b tx timeout
[ 79.771084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 79.780498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 79.789319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 79.798017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 79.807420][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 79.929140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 79.937573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 79.950685][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.972407][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 79.981949][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 80.006994][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 80.016070][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 80.025026][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 80.032858][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 80.045043][ T4300] device veth0_vlan entered promiscuous mode
[ 80.060203][ T4300] device veth1_vlan entered promiscuous mode
[ 80.067689][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 80.090015][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 80.099022][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 80.109884][ T4300] device veth0_macvtap entered promiscuous mode
[ 80.130915][ T4300] device veth1_macvtap entered promiscuous mode
[ 80.152293][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 80.160211][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 80.169925][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 80.178963][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 80.188734][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 80.201079][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.210463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 80.220567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 80.233196][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.242561][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.252532][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.261428][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.338794][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.357052][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.366160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 80.398548][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.406653][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.416574][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 80.703975][ T4315] loop0: detected capacity change from 0 to 32768
[ 80.860077][ T4300] ==================================================================
[ 80.868433][ T4300] BUG: KASAN: slab-out-of-bounds in dtReadFirst+0x4f7/0x900
[ 80.875783][ T4300] Read of size 4 at addr ffff88805eacc050 by task syz-executor/4300
[ 80.883801][ T4300]
[ 80.886170][ T4300] CPU: 1 PID: 4300 Comm: syz-executor Not tainted syzkaller #0
[ 80.893834][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 80.903932][ T4300] Call Trace:
[ 80.907245][ T4300]
2026/07/19 22:35:25 executed programs: 3
[ 80.910226][ T4300] dump_stack_lvl+0x188/0x250
[ 80.914951][ T4300] ? show_regs_print_info+0x20/0x20
[ 80.920193][ T4300] ? _printk+0xda/0x130
[ 80.924408][ T4300] ? load_image+0x410/0x410
[ 80.929045][ T4300] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 80.934560][ T4300] print_address_description+0x60/0x2d0
[ 80.940155][ T4300] ? dtReadFirst+0x4f7/0x900
[ 80.944784][ T4300] kasan_report+0xdf/0x130
[ 80.949251][ T4300] ? dtReadFirst+0x4f7/0x900
[ 80.953898][ T4300] dtReadFirst+0x4f7/0x900
[ 80.958368][ T4300] jfs_readdir+0x88b/0x3d40
[ 80.962964][ T4300] ? dtInitRoot+0x660/0x660
[ 80.967523][ T4300] ? clear_nonspinnable+0x60/0x60
[ 80.972584][ T4300] ? end_current_label_crit_section+0x14b/0x170
[ 80.978863][ T4300] ? common_file_perm+0x171/0x1c0
[ 80.983929][ T4300] ? iterate_dir+0x133/0x550
[ 80.988556][ T4300] iterate_dir+0x213/0x550
[ 80.993018][ T4300] __se_sys_getdents64+0xf2/0x270
[ 80.998079][ T4300] ? __x64_sys_getdents64+0x80/0x80
[ 81.003314][ T4300] ? filldir+0x700/0x700
[ 81.007626][ T4300] ? lockdep_hardirqs_on+0x94/0x140
[ 81.012868][ T4300] do_syscall_64+0x4c/0xa0
[ 81.017582][ T4300] ? clear_bhb_loop+0x30/0x80
[ 81.022297][ T4300] ? clear_bhb_loop+0x30/0x80
[ 81.027011][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.032950][ T4300] RIP: 0033:0x7ff85a390833
[ 81.037402][ T4300] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[ 81.057126][ T4300] RSP: 002b:00007ffe387dad08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[ 81.065726][ T4300] RAX: ffffffffffffffda RBX: 0000555595489a40 RCX: 00007ff85a390833
[ 81.073740][ T4300] RDX: 0000000000008000 RSI: 0000555595489a70 RDI: 0000000000000005
[ 81.081743][ T4300] RBP: 0000555595489a70 R08: 00000000000285d1 R09: 0000000000000001
[ 81.089848][ T4300] R10: 00007ff85a5bae20 R11: 0000000000000293 R12: 0000555595489a44
[ 81.097855][ T4300] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe387dcfb0
[ 81.105910][ T4300]
[ 81.108960][ T4300]
[ 81.111308][ T4300] Allocated by task 4315:
[ 81.115676][ T4300] __kasan_slab_alloc+0x92/0xc0
[ 81.120605][ T4300] slab_post_alloc_hook+0x4c/0x380
[ 81.125849][ T4300] kmem_cache_alloc+0x15d/0x280
[ 81.130730][ T4300] jfs_alloc_inode+0x17/0x50
[ 81.135347][ T4300] new_inode_pseudo+0x5f/0x210
[ 81.140141][ T4300] new_inode+0x25/0x1d0
[ 81.144317][ T4300] ialloc+0x49/0x920
[ 81.148418][ T4300] jfs_create+0x1d5/0xae0
[ 81.152782][ T4300] path_openat+0x120a/0x2fb0
[ 81.157415][ T4300] do_filp_open+0x1df/0x400
[ 81.161949][ T4300] do_sys_openat2+0x14b/0x500
[ 81.166647][ T4300] __x64_sys_openat+0x135/0x160
[ 81.171531][ T4300] do_syscall_64+0x4c/0xa0
[ 81.175969][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.181895][ T4300]
[ 81.184261][ T4300] The buggy address belongs to the object at ffff88805eacb780
[ 81.184261][ T4300] which belongs to the cache jfs_ip of size 2240
[ 81.198077][ T4300] The buggy address is located 16 bytes to the right of
[ 81.198077][ T4300] 2240-byte region [ffff88805eacb780, ffff88805eacc040)
[ 81.212035][ T4300] The buggy address belongs to the page:
[ 81.217706][ T4300] page:ffffea00017ab200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5eac8
[ 81.227892][ T4300] head:ffffea00017ab200 order:3 compound_mapcount:0 compound_pincount:0
[ 81.236271][ T4300] memcg:ffff88807c17c901
[ 81.240618][ T4300] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 81.248743][ T4300] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801ded7000
[ 81.257360][ T4300] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88807c17c901
[ 81.265968][ T4300] page dumped because: kasan: bad access detected
[ 81.272436][ T4300] page_owner tracks the page as allocated
[ 81.278176][ T4300] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4315, ts 80815210630, free_ts 70199720125
[ 81.299654][ T4300] get_page_from_freelist+0x24f6/0x2670
[ 81.305255][ T4300] __alloc_pages+0x1ee/0x480
[ 81.309871][ T4300] new_slab+0xc0/0x4b0
[ 81.313963][ T4300] ___slab_alloc+0x807/0xdd0
[ 81.318578][ T4300] kmem_cache_alloc+0xf0/0x280
[ 81.323374][ T4300] jfs_alloc_inode+0x17/0x50
[ 81.327994][ T4300] new_inode_pseudo+0x5f/0x210
[ 81.332871][ T4300] new_inode+0x25/0x1d0
[ 81.337054][ T4300] jfs_fill_super+0x37b/0xad0
[ 81.341767][ T4300] mount_bdev+0x28a/0x3c0
[ 81.346128][ T4300] legacy_get_tree+0xe6/0x180
[ 81.350861][ T4300] vfs_get_tree+0x88/0x270
[ 81.355306][ T4300] do_new_mount+0x247/0xa40
[ 81.359866][ T4300] __se_sys_mount+0x2e3/0x3d0
[ 81.364576][ T4300] do_syscall_64+0x4c/0xa0
[ 81.369016][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.374935][ T4300] page last free stack trace:
[ 81.379634][ T4300] free_unref_page_prepare+0x637/0x6c0
[ 81.385135][ T4300] free_unref_page_list+0x119/0x830
[ 81.390449][ T4300] release_pages+0x185f/0x1bd0
[ 81.395244][ T4300] tlb_finish_mmu+0x1b4/0x370
[ 81.400040][ T4300] unmap_region+0x344/0x3b0
[ 81.404573][ T4300] __do_munmap+0xa29/0xe10
[ 81.409108][ T4300] __vm_munmap+0x13f/0x240
[ 81.413822][ T4300] __x64_sys_munmap+0x67/0x70
[ 81.418730][ T4300] do_syscall_64+0x4c/0xa0
[ 81.423329][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.429270][ T4300]
[ 81.431622][ T4300] Memory state around the buggy address:
[ 81.437284][ T4300] ffff88805eacbf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 81.445370][ T4300] ffff88805eacbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 81.453474][ T4300] >ffff88805eacc000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 81.461562][ T4300] ^
[ 81.468296][ T4300] ffff88805eacc080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 81.476402][ T4300] ffff88805eacc100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 81.484487][ T4300] ==================================================================
[ 81.492832][ T4300] Disabling lock debugging due to kernel taint
[ 81.519872][ T4300] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 81.527133][ T4300] CPU: 1 PID: 4300 Comm: syz-executor Tainted: G B syzkaller #0
[ 81.536274][ T4300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 81.546361][ T4300] Call Trace:
[ 81.549664][ T4300]
[ 81.552623][ T4300] dump_stack_lvl+0x188/0x250
[ 81.557334][ T4300] ? show_regs_print_info+0x20/0x20
[ 81.562562][ T4300] ? load_image+0x410/0x410
[ 81.567108][ T4300] panic+0x2f8/0x850
[ 81.571116][ T4300] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 81.577303][ T4300] ? bpf_jit_dump+0xd0/0xd0
[ 81.582363][ T4300] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 81.588495][ T4300] ? _raw_spin_unlock+0x40/0x40
[ 81.593422][ T4300] ? dtReadFirst+0x4f7/0x900
[ 81.598149][ T4300] check_panic_on_warn+0x80/0xa0
[ 81.603135][ T4300] ? dtReadFirst+0x4f7/0x900
[ 81.607793][ T4300] end_report+0x6d/0xf0
[ 81.611983][ T4300] kasan_report+0x102/0x130
[ 81.616523][ T4300] ? dtReadFirst+0x4f7/0x900
[ 81.621160][ T4300] dtReadFirst+0x4f7/0x900
[ 81.626167][ T4300] jfs_readdir+0x88b/0x3d40
[ 81.630726][ T4300] ? dtInitRoot+0x660/0x660
[ 81.635272][ T4300] ? clear_nonspinnable+0x60/0x60
[ 81.640325][ T4300] ? end_current_label_crit_section+0x14b/0x170
[ 81.646595][ T4300] ? common_file_perm+0x171/0x1c0
[ 81.651669][ T4300] ? iterate_dir+0x133/0x550
[ 81.656463][ T4300] iterate_dir+0x213/0x550
[ 81.660924][ T4300] __se_sys_getdents64+0xf2/0x270
[ 81.666105][ T4300] ? __x64_sys_getdents64+0x80/0x80
[ 81.671347][ T4300] ? filldir+0x700/0x700
[ 81.675806][ T4300] ? lockdep_hardirqs_on+0x94/0x140
[ 81.681052][ T4300] do_syscall_64+0x4c/0xa0
[ 81.685506][ T4300] ? clear_bhb_loop+0x30/0x80
[ 81.690240][ T4300] ? clear_bhb_loop+0x30/0x80
[ 81.694967][ T4300] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.700889][ T4300] RIP: 0033:0x7ff85a390833
[ 81.705328][ T4300] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[ 81.724959][ T4300] RSP: 002b:00007ffe387dad08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[ 81.733527][ T4300] RAX: ffffffffffffffda RBX: 0000555595489a40 RCX: 00007ff85a390833
[ 81.741523][ T4300] RDX: 0000000000008000 RSI: 0000555595489a70 RDI: 0000000000000005
[ 81.749532][ T4300] RBP: 0000555595489a70 R08: 00000000000285d1 R09: 0000000000000001
[ 81.757538][ T4300] R10: 00007ff85a5bae20 R11: 0000000000000293 R12: 0000555595489a44
[ 81.765632][ T4300] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffe387dcfb0
[ 81.773623][ T4300]
[ 81.776778][ T4300] Kernel Offset: disabled
[ 81.781238][ T4300] Rebooting in 86400 seconds..