Warning: Permanently added '10.128.1.59' (ED25519) to the list of known hosts.
2026/01/06 23:23:48 parsed 1 programs
[ 52.658431][ T4185] cgroup: Unknown subsys name 'net'
[ 52.774366][ T4185] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 53.996509][ T4185] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 55.637492][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 55.645527][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 55.657054][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 55.671050][ T497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 55.678945][ T497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 55.687595][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 55.855762][ T4225] chnl_net:caif_netlink_parms(): no params data found
[ 55.914909][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.922685][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.930769][ T4225] device bridge_slave_0 entered promiscuous mode
[ 55.940570][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.947673][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.955936][ T4225] device bridge_slave_1 entered promiscuous mode
[ 55.984198][ T4225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 55.995494][ T4225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 56.026752][ T4225] team0: Port device team_slave_0 added
[ 56.035147][ T4225] team0: Port device team_slave_1 added
[ 56.058346][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 56.066483][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 56.094282][ T4225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 56.107354][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 56.116443][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 56.144356][ T4225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 56.184157][ T4225] device hsr_slave_0 entered promiscuous mode
[ 56.191292][ T4225] device hsr_slave_1 entered promiscuous mode
[ 56.320863][ T4225] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 56.331880][ T4225] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 56.343000][ T4225] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 56.352652][ T4225] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 56.383155][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.390499][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.398210][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.405311][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.430158][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state
[ 56.438401][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state
[ 56.474097][ T4225] 8021q: adding VLAN 0 to HW filter on device bond0
[ 56.486406][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 56.496073][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 56.508477][ T4225] 8021q: adding VLAN 0 to HW filter on device team0
[ 56.519330][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 56.530135][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 56.538561][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.545642][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.561099][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 56.570431][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 56.579319][ T497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.586377][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.596756][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 56.613917][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 56.623675][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 56.636879][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 56.661045][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 56.669101][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 56.677957][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 56.686354][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 56.694627][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 56.703303][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 56.711672][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 56.722851][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 56.834672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 56.843269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 56.857387][ T4225] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 56.875969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 56.884671][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 56.906206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 56.914567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 56.923167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 56.931257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 56.941533][ T4225] device veth0_vlan entered promiscuous mode
[ 56.956503][ T4225] device veth1_vlan entered promiscuous mode
[ 56.988918][ T4225] device veth0_macvtap entered promiscuous mode
[ 57.000708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 57.008749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 57.017609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 57.027029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 57.041939][ T4225] device veth1_macvtap entered promiscuous mode
[ 57.051613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 57.064866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 57.090223][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 57.097647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 57.106124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 57.116535][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 57.125296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 57.134155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 57.146021][ T4225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.154997][ T4225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.163812][ T4225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.173070][ T4225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 57.257931][ T4225] syz-executor (4225) used greatest stack depth: 20320 bytes left
2026/01/06 23:23:56 executed programs: 0
[ 59.176206][ T4287] chnl_net:caif_netlink_parms(): no params data found
[ 59.231705][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.238837][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 59.247083][ T4287] device bridge_slave_0 entered promiscuous mode
[ 59.255574][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.266207][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 59.274403][ T4287] device bridge_slave_1 entered promiscuous mode
[ 59.296152][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 59.307007][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 59.331892][ T4287] team0: Port device team_slave_0 added
[ 59.339788][ T4287] team0: Port device team_slave_1 added
[ 59.361692][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 59.368639][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.395061][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 59.407571][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 59.414704][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.440800][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 59.474723][ T4287] device hsr_slave_0 entered promiscuous mode
[ 59.481551][ T4287] device hsr_slave_1 entered promiscuous mode
[ 59.487985][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 59.495931][ T4287] Cannot create hsr debugfs directory
[ 59.581502][ T4287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 61.130149][ T4305] Bluetooth: hci0: command 0x0409 tx timeout
[ 62.037358][ T4287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.097844][ T4287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.174635][ T4287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 62.366011][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 62.375108][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 62.383415][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 62.392656][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 62.452544][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0
[ 62.463870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 62.472300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 62.496965][ T4287] 8021q: adding VLAN 0 to HW filter on device team0
[ 62.506552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 62.515350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 62.524051][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 62.531243][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 62.541704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 62.550543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 62.559057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 62.567651][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 62.574713][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 62.592145][ T154] device hsr_slave_0 left promiscuous mode
[ 62.598559][ T154] device hsr_slave_1 left promiscuous mode
[ 62.605032][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 62.612849][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 62.621072][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 62.628448][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 62.636122][ T154] device bridge_slave_1 left promiscuous mode
[ 62.642581][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 62.657466][ T154] device bridge_slave_0 left promiscuous mode
[ 62.664484][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 62.679674][ T154] device veth1_macvtap left promiscuous mode
[ 62.685854][ T154] device veth0_macvtap left promiscuous mode
[ 62.692197][ T154] device veth1_vlan left promiscuous mode
[ 62.698047][ T154] device veth0_vlan left promiscuous mode
[ 62.823037][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 62.834437][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 62.846473][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 62.858575][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 62.907278][ T154] bond0 (unregistering): Released all slaves
[ 62.983580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 62.996661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 63.007655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 63.016502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 63.025103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 63.037127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 63.045993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 63.058848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 63.068364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 63.085571][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 63.097618][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 63.105439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 63.113924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 63.195855][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 63.203361][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 63.209885][ T4249] Bluetooth: hci0: command 0x041b tx timeout
[ 63.223154][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 63.245496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 63.254455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 63.271440][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 63.279618][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 63.287694][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 63.296279][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 63.306254][ T4287] device veth0_vlan entered promiscuous mode
[ 63.317358][ T4287] device veth1_vlan entered promiscuous mode
[ 63.335928][ T4287] device veth0_macvtap entered promiscuous mode
[ 63.343435][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 63.352411][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 63.360726][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 63.368976][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 63.377658][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 63.386973][ T4287] device veth1_macvtap entered promiscuous mode
[ 63.406481][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 63.414073][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 63.424070][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 63.432823][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 63.445331][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 63.453758][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 63.464086][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 63.477054][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.486215][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.496233][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.505144][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 63.572876][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 63.597325][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 63.606088][ T497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 63.616774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 63.624474][ T497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 63.635293][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 63.913382][ T4320] loop0: detected capacity change from 0 to 32768
[ 64.086380][ T4320]
[ 64.086380][ T4320] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 64.086380][ T4320]
[ 64.130159][ T4320] read_mapping_page failed!
[ 64.134975][ T4320] ERROR: (device loop0): txCommit:
[ 64.134975][ T4320]
[ 64.162824][ T4320] read_mapping_page failed!
[ 64.167458][ T4320] ERROR: (device loop0): txCommit:
[ 64.167458][ T4320]
[ 64.188198][ T4320] ==================================================================
[ 64.196412][ T4320] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xd74/0x1270
[ 64.203959][ T4320] Read of size 4 at addr ffff88805f9c404c by task syz.0.17/4320
[ 64.211582][ T4320]
[ 64.213913][ T4320] CPU: 1 PID: 4320 Comm: syz.0.17 Not tainted syzkaller #0
[ 64.221105][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 64.231157][ T4320] Call Trace:
[ 64.234430][ T4320]
[ 64.237355][ T4320] dump_stack_lvl+0x168/0x230
[ 64.242033][ T4320] ? show_regs_print_info+0x20/0x20
[ 64.247224][ T4320] ? _printk+0xcc/0x110
[ 64.251383][ T4320] ? load_image+0x3b0/0x3b0
[ 64.255889][ T4320] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 64.261266][ T4320] print_address_description+0x60/0x2d0
[ 64.266807][ T4320] ? dtInsertEntry+0xd74/0x1270
[ 64.271652][ T4320] kasan_report+0xdf/0x130
[ 64.276064][ T4320] ? dtInsertEntry+0xd74/0x1270
[ 64.280914][ T4320] dtInsertEntry+0xd74/0x1270
[ 64.285626][ T4320] dtSplitPage+0x24f7/0x31d0
[ 64.290250][ T4320] dtInsert+0xfb2/0x57a0
[ 64.294503][ T4320] ? UniStrupr+0x2e0/0x2e0
[ 64.298902][ T4320] ? do_raw_spin_lock+0x11d/0x280
[ 64.303916][ T4320] ? __rwlock_init+0x140/0x140
[ 64.308686][ T4320] jfs_create+0x69d/0xa50
[ 64.313013][ T4320] ? jfs_lookup+0x380/0x380
[ 64.317503][ T4320] ? jfs_get_parent+0xa0/0xa0
[ 64.322179][ T4320] ? make_kgid+0x640/0x640
[ 64.326587][ T4320] ? generic_permission+0x230/0x510
[ 64.331775][ T4320] ? inode_permission+0xef/0x480
[ 64.336692][ T4320] ? bpf_lsm_inode_create+0x5/0x10
[ 64.341783][ T4320] ? security_inode_create+0xb3/0x100
[ 64.347135][ T4320] ? jfs_lookup+0x380/0x380
[ 64.351622][ T4320] path_openat+0x11e1/0x2f30
[ 64.356226][ T4320] ? do_filp_open+0x3e0/0x3e0
[ 64.360897][ T4320] do_filp_open+0x1b3/0x3e0
[ 64.365385][ T4320] ? vfs_tmpfile+0x300/0x300
[ 64.369969][ T4320] ? _raw_spin_unlock+0x24/0x40
[ 64.374798][ T4320] ? alloc_fd+0x598/0x630
[ 64.379113][ T4320] do_sys_openat2+0x142/0x4a0
[ 64.383773][ T4320] ? __lock_acquire+0x7c60/0x7c60
[ 64.388782][ T4320] ? do_sys_open+0xe0/0xe0
[ 64.393180][ T4320] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 64.399141][ T4320] ? lock_chain_count+0x20/0x20
[ 64.403974][ T4320] ? vtime_user_exit+0x2dc/0x400
[ 64.408896][ T4320] __x64_sys_openat+0x135/0x160
[ 64.413731][ T4320] do_syscall_64+0x4c/0xa0
[ 64.418130][ T4320] ? clear_bhb_loop+0x30/0x80
[ 64.422787][ T4320] ? clear_bhb_loop+0x30/0x80
[ 64.427445][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 64.433330][ T4320] RIP: 0033:0x7f3dfc932749
[ 64.437729][ T4320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 64.457312][ T4320] RSP: 002b:00007ffdcb021ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 64.465710][ T4320] RAX: ffffffffffffffda RBX: 00007f3dfcb88fa0 RCX: 00007f3dfc932749
[ 64.473661][ T4320] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 64.481614][ T4320] RBP: 00007f3dfc9b6f91 R08: 0000000000000000 R09: 0000000000000000
[ 64.489566][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 64.497515][ T4320] R13: 00007f3dfcb88fa0 R14: 00007f3dfcb88fa0 R15: 0000000000000004
[ 64.505479][ T4320]
[ 64.508478][ T4320]
[ 64.510782][ T4320] Allocated by task 4320:
[ 64.515086][ T4320] __kasan_slab_alloc+0x9c/0xd0
[ 64.519920][ T4320] slab_post_alloc_hook+0x4c/0x380
[ 64.525011][ T4320] kmem_cache_alloc+0x100/0x290
[ 64.529848][ T4320] jfs_alloc_inode+0x17/0x50
[ 64.534417][ T4320] iget_locked+0x191/0x820
[ 64.538812][ T4320] jfs_iget+0x20/0x3f0
[ 64.542857][ T4320] jfs_lookup+0x1c2/0x380
[ 64.547164][ T4320] __lookup_slow+0x27d/0x3d0
[ 64.551738][ T4320] lookup_slow+0x53/0x70
[ 64.555959][ T4320] walk_component+0x319/0x460
[ 64.560613][ T4320] path_lookupat+0x169/0x440
[ 64.565183][ T4320] filename_lookup+0x1e2/0x4f0
[ 64.569925][ T4320] user_path_at_empty+0x40/0x190
[ 64.574839][ T4320] __se_sys_chdir+0x91/0x280
[ 64.579407][ T4320] do_syscall_64+0x4c/0xa0
[ 64.583804][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 64.589677][ T4320]
[ 64.591982][ T4320] The buggy address belongs to the object at ffff88805f9c3780
[ 64.591982][ T4320] which belongs to the cache jfs_ip of size 2240
[ 64.605664][ T4320] The buggy address is located 12 bytes to the right of
[ 64.605664][ T4320] 2240-byte region [ffff88805f9c3780, ffff88805f9c4040)
[ 64.619441][ T4320] The buggy address belongs to the page:
[ 64.625059][ T4320] page:ffffea00017e7000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f9c0
[ 64.635186][ T4320] head:ffffea00017e7000 order:3 compound_mapcount:0 compound_pincount:0
[ 64.643493][ T4320] memcg:ffff88802b5e0b01
[ 64.647709][ T4320] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 64.655683][ T4320] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801d4fbc80
[ 64.664247][ T4320] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88802b5e0b01
[ 64.672892][ T4320] page dumped because: kasan: bad access detected
[ 64.679289][ T4320] page_owner tracks the page as allocated
[ 64.684978][ T4320] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4320, ts 64070417369, free_ts 54548306174
[ 64.706416][ T4320] get_page_from_freelist+0x1b77/0x1c60
[ 64.711960][ T4320] __alloc_pages+0x1e1/0x470
[ 64.716538][ T4320] new_slab+0xc0/0x4b0
[ 64.720600][ T4320] ___slab_alloc+0x81e/0xdf0
[ 64.725175][ T4320] kmem_cache_alloc+0x195/0x290
[ 64.730094][ T4320] jfs_alloc_inode+0x17/0x50
[ 64.734663][ T4320] new_inode_pseudo+0x5f/0x210
[ 64.739410][ T4320] new_inode+0x25/0x1c0
[ 64.743547][ T4320] jfs_fill_super+0x392/0xaf0
[ 64.748204][ T4320] mount_bdev+0x287/0x3c0
[ 64.752514][ T4320] legacy_get_tree+0xe6/0x180
[ 64.757175][ T4320] vfs_get_tree+0x88/0x270
[ 64.761571][ T4320] do_new_mount+0x24a/0xa40
[ 64.766052][ T4320] __se_sys_mount+0x2d6/0x3c0
[ 64.770706][ T4320] do_syscall_64+0x4c/0xa0
[ 64.775104][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 64.780979][ T4320] page last free stack trace:
[ 64.785631][ T4320] free_unref_page_prepare+0x637/0x6c0
[ 64.791070][ T4320] free_unref_page_list+0x122/0x7e0
[ 64.796248][ T4320] release_pages+0x184b/0x1bb0
[ 64.800986][ T4320] tlb_finish_mmu+0x164/0x2e0
[ 64.805643][ T4320] unmap_region+0x315/0x360
[ 64.810122][ T4320] __do_munmap+0x9d3/0xdc0
[ 64.814515][ T4320] __vm_munmap+0x137/0x230
[ 64.818908][ T4320] __x64_sys_munmap+0x67/0x70
[ 64.823561][ T4320] do_syscall_64+0x4c/0xa0
[ 64.827957][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 64.833830][ T4320]
[ 64.836134][ T4320] Memory state around the buggy address:
[ 64.841740][ T4320] ffff88805f9c3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 64.849777][ T4320] ffff88805f9c3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 64.857812][ T4320] >ffff88805f9c4000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 64.865855][ T4320] ^
[ 64.872242][ T4320] ffff88805f9c4080: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[ 64.880278][ T4320] ffff88805f9c4100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 64.888313][ T4320] ==================================================================
[ 64.896347][ T4320] Disabling lock debugging due to kernel taint
[ 64.921811][ T4320] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 64.929026][ T4320] CPU: 1 PID: 4320 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 64.937608][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 64.947649][ T4320] Call Trace:
[ 64.950910][ T4320]
[ 64.953817][ T4320] dump_stack_lvl+0x168/0x230
[ 64.958471][ T4320] ? show_regs_print_info+0x20/0x20
[ 64.963640][ T4320] ? load_image+0x3b0/0x3b0
[ 64.968118][ T4320] panic+0x2c9/0x7f0
[ 64.971984][ T4320] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 64.978116][ T4320] ? bpf_jit_dump+0xd0/0xd0
[ 64.982598][ T4320] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 64.988462][ T4320] ? _raw_spin_unlock+0x40/0x40
[ 64.993284][ T4320] ? dtInsertEntry+0xd74/0x1270
[ 64.998106][ T4320] check_panic_on_warn+0x80/0xa0
[ 65.003016][ T4320] ? dtInsertEntry+0xd74/0x1270
[ 65.007837][ T4320] end_report+0x6d/0xf0
[ 65.011963][ T4320] kasan_report+0x102/0x130
[ 65.016438][ T4320] ? dtInsertEntry+0xd74/0x1270
[ 65.021259][ T4320] dtInsertEntry+0xd74/0x1270
[ 65.025916][ T4320] dtSplitPage+0x24f7/0x31d0
[ 65.030487][ T4320] dtInsert+0xfb2/0x57a0
[ 65.034708][ T4320] ? UniStrupr+0x2e0/0x2e0
[ 65.039091][ T4320] ? do_raw_spin_lock+0x11d/0x280
[ 65.044086][ T4320] ? __rwlock_init+0x140/0x140
[ 65.048824][ T4320] jfs_create+0x69d/0xa50
[ 65.053130][ T4320] ? jfs_lookup+0x380/0x380
[ 65.057611][ T4320] ? jfs_get_parent+0xa0/0xa0
[ 65.062263][ T4320] ? make_kgid+0x640/0x640
[ 65.066652][ T4320] ? generic_permission+0x230/0x510
[ 65.071820][ T4320] ? inode_permission+0xef/0x480
[ 65.076728][ T4320] ? bpf_lsm_inode_create+0x5/0x10
[ 65.081808][ T4320] ? security_inode_create+0xb3/0x100
[ 65.087155][ T4320] ? jfs_lookup+0x380/0x380
[ 65.091630][ T4320] path_openat+0x11e1/0x2f30
[ 65.096199][ T4320] ? do_filp_open+0x3e0/0x3e0
[ 65.100848][ T4320] do_filp_open+0x1b3/0x3e0
[ 65.105323][ T4320] ? vfs_tmpfile+0x300/0x300
[ 65.109886][ T4320] ? _raw_spin_unlock+0x24/0x40
[ 65.114709][ T4320] ? alloc_fd+0x598/0x630
[ 65.119012][ T4320] do_sys_openat2+0x142/0x4a0
[ 65.123661][ T4320] ? __lock_acquire+0x7c60/0x7c60
[ 65.128658][ T4320] ? do_sys_open+0xe0/0xe0
[ 65.133048][ T4320] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 65.139004][ T4320] ? lock_chain_count+0x20/0x20
[ 65.143826][ T4320] ? vtime_user_exit+0x2dc/0x400
[ 65.148737][ T4320] __x64_sys_openat+0x135/0x160
[ 65.153561][ T4320] do_syscall_64+0x4c/0xa0
[ 65.157954][ T4320] ? clear_bhb_loop+0x30/0x80
[ 65.162604][ T4320] ? clear_bhb_loop+0x30/0x80
[ 65.167252][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 65.173120][ T4320] RIP: 0033:0x7f3dfc932749
[ 65.177510][ T4320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 65.197097][ T4320] RSP: 002b:00007ffdcb021ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 65.205483][ T4320] RAX: ffffffffffffffda RBX: 00007f3dfcb88fa0 RCX: 00007f3dfc932749
[ 65.213431][ T4320] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 65.221379][ T4320] RBP: 00007f3dfc9b6f91 R08: 0000000000000000 R09: 0000000000000000
[ 65.229324][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 65.237267][ T4320] R13: 00007f3dfcb88fa0 R14: 00007f3dfcb88fa0 R15: 0000000000000004
[ 65.245214][ T4320]
[ 65.248512][ T4320] Kernel Offset: disabled
[ 65.252829][ T4320] Rebooting in 86400 seconds..