[ 92.026025][ T1246] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts.
2025/09/11 03:19:13 parsed 1 programs
[ 99.840273][ T5843] cgroup: Unknown subsys name 'net'
[ 100.098689][ T5843] cgroup: Unknown subsys name 'cpuset'
[ 100.133486][ T5843] cgroup: Unknown subsys name 'rlimit'
[ 102.140056][ T5843] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 107.095821][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.095849][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.257586][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.257608][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 109.474746][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 109.476329][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 109.477237][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 109.478430][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 109.479226][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 112.349912][ T5926] chnl_net:caif_netlink_parms(): no params data found
[ 112.846570][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.847975][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.848157][ T5926] bridge_slave_0: entered allmulticast mode
[ 112.850265][ T5926] bridge_slave_0: entered promiscuous mode
[ 112.861182][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.861355][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.861592][ T5926] bridge_slave_1: entered allmulticast mode
[ 112.868665][ T5926] bridge_slave_1: entered promiscuous mode
[ 113.050180][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.057253][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.187638][ T5926] team0: Port device team_slave_0 added
[ 113.190525][ T5926] team0: Port device team_slave_1 added
[ 113.605403][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.605417][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.605438][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.724028][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.724046][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.724076][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.924204][ T5926] hsr_slave_0: entered promiscuous mode
[ 113.925404][ T5926] hsr_slave_1: entered promiscuous mode
[ 114.348650][ T5926] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 114.370404][ T5926] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 114.409217][ T5926] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 114.447776][ T5926] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 114.660429][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.699397][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.725460][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.726214][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.741053][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.741987][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.008837][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 115.074909][ T5926] veth0_vlan: entered promiscuous mode
[ 115.082304][ T5926] veth1_vlan: entered promiscuous mode
[ 115.124149][ T5926] veth0_macvtap: entered promiscuous mode
[ 115.128553][ T5926] veth1_macvtap: entered promiscuous mode
[ 115.156694][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 115.167312][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 115.188108][ T3018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.189681][ T3018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.189731][ T3018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.189770][ T3018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.000947][ T3018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.228728][ T3018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.539162][ T3018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/09/11 03:19:33 executed programs: 0
[ 116.678628][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 116.692342][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 116.694111][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 116.695438][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 116.696515][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 116.998810][ T5950] chnl_net:caif_netlink_parms(): no params data found
[ 117.295942][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.296164][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.296363][ T5950] bridge_slave_0: entered allmulticast mode
[ 117.298902][ T5950] bridge_slave_0: entered promiscuous mode
[ 117.302414][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.302523][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.307745][ T5950] bridge_slave_1: entered allmulticast mode
[ 117.311096][ T5950] bridge_slave_1: entered promiscuous mode
[ 117.691885][ T3018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.716535][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 117.756319][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 117.890352][ T5950] team0: Port device team_slave_0 added
[ 117.901498][ T5950] team0: Port device team_slave_1 added
[ 118.035803][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.035824][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 118.035845][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 118.037624][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 118.037639][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 118.037665][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.294666][ T5950] hsr_slave_0: entered promiscuous mode
[ 118.295606][ T5950] hsr_slave_1: entered promiscuous mode
[ 118.296357][ T5950] debugfs: 'hsr0' already exists in 'hsr'
[ 118.296438][ T5950] Cannot create hsr debugfs directory
[ 118.754435][ T5155] Bluetooth: hci0: command tx timeout
[ 118.854631][ T3018] bridge_slave_1: left allmulticast mode
[ 118.854806][ T3018] bridge_slave_1: left promiscuous mode
[ 118.856707][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.934701][ T3018] bridge_slave_0: left allmulticast mode
[ 118.934738][ T3018] bridge_slave_0: left promiscuous mode
[ 118.935039][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.593629][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 120.653726][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.696131][ T3018] bond0 (unregistering): Released all slaves
[ 120.822890][ T5155] Bluetooth: hci0: command tx timeout
[ 121.092851][ T3018] hsr_slave_0: left promiscuous mode
[ 121.142996][ T3018] hsr_slave_1: left promiscuous mode
[ 121.145801][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 121.145883][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 121.205016][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 121.205051][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 121.323421][ T3018] veth1_macvtap: left promiscuous mode
[ 121.323688][ T3018] veth0_macvtap: left promiscuous mode
[ 121.324027][ T3018] veth1_vlan: left promiscuous mode
[ 121.324358][ T3018] veth0_vlan: left promiscuous mode
[ 122.903753][ T5155] Bluetooth: hci0: command tx timeout
[ 123.364180][ T3018] team0 (unregistering): Port device team_slave_1 removed
[ 123.547064][ T3018] team0 (unregistering): Port device team_slave_0 removed
[ 124.982912][ T5155] Bluetooth: hci0: command tx timeout
[ 126.199829][ T5950] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 126.238010][ T5950] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 126.349262][ T5950] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 126.384239][ T5950] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 126.637555][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0
[ 126.690280][ T5950] 8021q: adding VLAN 0 to HW filter on device team0
[ 126.859387][ T37] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.859614][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 126.879643][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.879808][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.345759][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.456204][ T5950] veth0_vlan: entered promiscuous mode
[ 127.477863][ T5950] veth1_vlan: entered promiscuous mode
[ 127.539137][ T5950] veth0_macvtap: entered promiscuous mode
[ 127.554115][ T5950] veth1_macvtap: entered promiscuous mode
[ 127.587159][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.609981][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.627655][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.628490][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.628769][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.628812][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.912037][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.912061][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.010649][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.010673][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/09/11 03:19:45 executed programs: 2
[ 128.564259][ T6038] loop0: detected capacity change from 0 to 32768
[ 128.931341][ T6038] ==================================================================
[ 128.931359][ T6038] BUG: KASAN: slab-use-after-free in jfs_readdir+0x118f/0x3ae0
[ 128.931394][ T6038] Read of size 8 at addr ffff88803bede648 by task syz.0.17/6038
[ 128.931407][ T6038]
[ 128.931436][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.931454][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 128.931470][ T6038] Call Trace:
[ 128.931476][ T6038]
[ 128.931483][ T6038] dump_stack_lvl+0x189/0x250
[ 128.931512][ T6038] ? __kasan_check_byte+0x12/0x40
[ 128.931534][ T6038] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.931558][ T6038] ? lock_release+0x4b/0x3e0
[ 128.931582][ T6038] ? __virt_addr_valid+0x4a5/0x5c0
[ 128.931598][ T6038] print_report+0xca/0x240
[ 128.931618][ T6038] ? jfs_readdir+0x118f/0x3ae0
[ 128.931638][ T6038] kasan_report+0x118/0x150
[ 128.931660][ T6038] ? jfs_readdir+0x118f/0x3ae0
[ 128.931684][ T6038] jfs_readdir+0x118f/0x3ae0
[ 128.931710][ T6038] ? __lock_acquire+0xab9/0xd20
[ 128.931733][ T6038] ? do_raw_spin_lock+0x121/0x290
[ 128.931753][ T6038] ? __pfx_jfs_readdir+0x10/0x10
[ 128.931783][ T6038] ? rwbase_write_lock+0x56f/0x750
[ 128.931802][ T6038] ? __pfx_jfs_readdir+0x10/0x10
[ 128.931823][ T6038] wrap_directory_iterator+0x96/0xe0
[ 128.931843][ T6038] iterate_dir+0x3a2/0x580
[ 128.931863][ T6038] __se_sys_getdents+0xe4/0x250
[ 128.931882][ T6038] ? __pfx___se_sys_getdents+0x10/0x10
[ 128.931900][ T6038] ? __pfx_filldir+0x10/0x10
[ 128.931924][ T6038] ? rcu_is_watching+0x15/0xb0
[ 128.931951][ T6038] ? do_syscall_64+0xbe/0x3b0
[ 128.931967][ T6038] do_syscall_64+0xfa/0x3b0
[ 128.931980][ T6038] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.932003][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.932020][ T6038] ? clear_bhb_loop+0x60/0xb0
[ 128.932037][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.932053][ T6038] RIP: 0033:0x7f69bf49eba9
[ 128.932071][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.932084][ T6038] RSP: 002b:00007ffde8b02568 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 128.932105][ T6038] RAX: ffffffffffffffda RBX: 00007f69bf6e5fa0 RCX: 00007f69bf49eba9
[ 128.932117][ T6038] RDX: fffffffffffffd90 RSI: 0000000000000000 RDI: 0000000000000004
[ 128.932128][ T6038] RBP: 00007f69bf521e19 R08: 0000000000000000 R09: 0000000000000000
[ 128.932137][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 128.932147][ T6038] R13: 00007f69bf6e5fa0 R14: 00007f69bf6e5fa0 R15: 0000000000000003
[ 128.932164][ T6038]
[ 128.932169][ T6038]
[ 128.932173][ T6038] Allocated by task 6038:
[ 128.932180][ T6038] kasan_save_track+0x3e/0x80
[ 128.932196][ T6038] __kasan_slab_alloc+0x6c/0x80
[ 128.932213][ T6038] kmem_cache_alloc_noprof+0x143/0x310
[ 128.932233][ T6038] mempool_alloc_noprof+0x19d/0x4e0
[ 128.932251][ T6038] __get_metapage+0x509/0xde0
[ 128.932271][ T6038] dtSplitRoot+0x202/0x16c0
[ 128.932290][ T6038] dtInsert+0xef8/0x5f40
[ 128.932307][ T6038] jfs_symlink+0x715/0xe60
[ 128.932327][ T6038] vfs_symlink+0x143/0x2f0
[ 128.932345][ T6038] do_symlinkat+0x1b1/0x3f0
[ 128.932363][ T6038] __x64_sys_symlink+0x7a/0x90
[ 128.932381][ T6038] do_syscall_64+0xfa/0x3b0
[ 128.932393][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.932407][ T6038]
[ 128.932410][ T6038] Freed by task 6038:
[ 128.932417][ T6038] kasan_save_track+0x3e/0x80
[ 128.932439][ T6038] kasan_save_free_info+0x46/0x50
[ 128.932452][ T6038] __kasan_slab_free+0x5b/0x80
[ 128.932469][ T6038] kmem_cache_free+0x195/0x510
[ 128.932489][ T6038] release_metapage+0x84c/0xab0
[ 128.932511][ T6038] jfs_readdir+0xece/0x3ae0
[ 128.932529][ T6038] wrap_directory_iterator+0x96/0xe0
[ 128.932545][ T6038] iterate_dir+0x3a2/0x580
[ 128.932560][ T6038] __se_sys_getdents+0xe4/0x250
[ 128.932576][ T6038] do_syscall_64+0xfa/0x3b0
[ 128.932588][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.932606][ T6038]
[ 128.932612][ T6038] The buggy address belongs to the object at ffff88803bede618
[ 128.932612][ T6038] which belongs to the cache jfs_mp of size 248
[ 128.932630][ T6038] The buggy address is located 48 bytes inside of
[ 128.932630][ T6038] freed 248-byte region [ffff88803bede618, ffff88803bede710)
[ 128.932651][ T6038]
[ 128.932656][ T6038] The buggy address belongs to the physical page:
[ 128.932674][ T6038] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3bede
[ 128.932698][ T6038] flags: 0x80000000000000(node=0|zone=1)
[ 128.932717][ T6038] page_type: f5(slab)
[ 128.932735][ T6038] raw: 0080000000000000 ffff8881472b6500 dead000000000122 0000000000000000
[ 128.932754][ T6038] raw: 0000000000000000 00000000800d000d 00000000f5000000 0000000000000000
[ 128.932765][ T6038] page dumped because: kasan: bad access detected
[ 128.932780][ T6038] page_owner tracks the page as allocated
[ 128.932787][ T6038] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6038, tgid 6038 (syz.0.17), ts 128609346159, free_ts 128397802956
[ 128.932823][ T6038] post_alloc_hook+0x240/0x2a0
[ 128.932853][ T6038] get_page_from_freelist+0x2119/0x21b0
[ 128.932872][ T6038] __alloc_frozen_pages_noprof+0x181/0x370
[ 128.932893][ T6038] alloc_pages_mpol+0xd1/0x380
[ 128.932920][ T6038] allocate_slab+0x8a/0x370
[ 128.932939][ T6038] ___slab_alloc+0x8d1/0xdc0
[ 128.932970][ T6038] kmem_cache_alloc_noprof+0xe6/0x310
[ 128.932995][ T6038] mempool_alloc_noprof+0x19d/0x4e0
[ 128.933012][ T6038] __get_metapage+0x509/0xde0
[ 128.933031][ T6038] diMount+0xc5/0xd90
[ 128.933043][ T6038] jfs_mount+0x426/0x870
[ 128.933063][ T6038] jfs_fill_super+0x6bc/0xd80
[ 128.933080][ T6038] get_tree_bdev_flags+0x40e/0x4d0
[ 128.933097][ T6038] vfs_get_tree+0x8f/0x2b0
[ 128.933114][ T6038] do_new_mount+0x2a2/0x9e0
[ 128.933134][ T6038] __se_sys_mount+0x317/0x410
[ 128.933153][ T6038] page last free pid 5824 tgid 5824 stack trace:
[ 128.933162][ T6038] __free_frozen_pages+0xb59/0xce0
[ 128.933182][ T6038] vfree+0x2ad/0x470
[ 128.933201][ T6038] delayed_vfree_work+0x55/0x80
[ 128.933212][ T6038] process_scheduled_works+0xade/0x17b0
[ 128.933230][ T6038] worker_thread+0x8a0/0xda0
[ 128.933247][ T6038] kthread+0x70e/0x8a0
[ 128.933267][ T6038] ret_from_fork+0x3f9/0x770
[ 128.933285][ T6038] ret_from_fork_asm+0x1a/0x30
[ 128.933299][ T6038]
[ 128.933303][ T6038] Memory state around the buggy address:
[ 128.933310][ T6038] ffff88803bede500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 128.933320][ T6038] ffff88803bede580: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 128.933330][ T6038] >ffff88803bede600: fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb
[ 128.933338][ T6038] ^
[ 128.933346][ T6038] ffff88803bede680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 128.933355][ T6038] ffff88803bede700: fb fb fc fc fc fc fc fc fc fc 00 00 00 00 00 00
[ 128.933363][ T6038] ==================================================================
[ 128.933702][ T6038] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 128.933721][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.933745][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 128.933758][ T6038] Call Trace:
[ 128.933765][ T6038]
[ 128.933774][ T6038] dump_stack_lvl+0x99/0x250
[ 128.933810][ T6038] ? __asan_memcpy+0x40/0x70
[ 128.933834][ T6038] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.933866][ T6038] ? __pfx__printk+0x10/0x10
[ 128.933896][ T6038] vpanic+0x281/0x750
[ 128.933930][ T6038] ? preempt_schedule+0xae/0xc0
[ 128.933963][ T6038] ? __pfx_vpanic+0x10/0x10
[ 128.933995][ T6038] ? preempt_schedule_common+0x83/0xd0
[ 128.934028][ T6038] ? preempt_schedule+0xae/0xc0
[ 128.934059][ T6038] ? __pfx_preempt_schedule+0x10/0x10
[ 128.934096][ T6038] panic+0xb9/0xc0
[ 128.934128][ T6038] ? __pfx_panic+0x10/0x10
[ 128.934163][ T6038] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 128.934204][ T6038] ? jfs_readdir+0x118f/0x3ae0
[ 128.934233][ T6038] check_panic_on_warn+0x89/0xb0
[ 128.934256][ T6038] ? jfs_readdir+0x118f/0x3ae0
[ 128.934285][ T6038] end_report+0x78/0x160
[ 128.934314][ T6038] kasan_report+0x129/0x150
[ 128.934345][ T6038] ? jfs_readdir+0x118f/0x3ae0
[ 128.934379][ T6038] jfs_readdir+0x118f/0x3ae0
[ 128.934416][ T6038] ? __lock_acquire+0xab9/0xd20
[ 128.934456][ T6038] ? do_raw_spin_lock+0x121/0x290
[ 128.934482][ T6038] ? __pfx_jfs_readdir+0x10/0x10
[ 128.934524][ T6038] ? rwbase_write_lock+0x56f/0x750
[ 128.934551][ T6038] ? __pfx_jfs_readdir+0x10/0x10
[ 128.934582][ T6038] wrap_directory_iterator+0x96/0xe0
[ 128.934610][ T6038] iterate_dir+0x3a2/0x580
[ 128.934638][ T6038] __se_sys_getdents+0xe4/0x250
[ 128.934667][ T6038] ? __pfx___se_sys_getdents+0x10/0x10
[ 128.934693][ T6038] ? __pfx_filldir+0x10/0x10
[ 128.934721][ T6038] ? rcu_is_watching+0x15/0xb0
[ 128.934758][ T6038] ? do_syscall_64+0xbe/0x3b0
[ 128.934781][ T6038] do_syscall_64+0xfa/0x3b0
[ 128.934801][ T6038] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.934834][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.934857][ T6038] ? clear_bhb_loop+0x60/0xb0
[ 128.934883][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.934905][ T6038] RIP: 0033:0x7f69bf49eba9
[ 128.934924][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.934942][ T6038] RSP: 002b:00007ffde8b02568 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 128.934965][ T6038] RAX: ffffffffffffffda RBX: 00007f69bf6e5fa0 RCX: 00007f69bf49eba9
[ 128.934981][ T6038] RDX: fffffffffffffd90 RSI: 0000000000000000 RDI: 0000000000000004
[ 128.934996][ T6038] RBP: 00007f69bf521e19 R08: 0000000000000000 R09: 0000000000000000
[ 128.935010][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 128.935024][ T6038] R13: 00007f69bf6e5fa0 R14: 00007f69bf6e5fa0 R15: 0000000000000003
[ 128.935048][ T6038]
[ 128.935354][ T6038] Kernel Offset: disabled