Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts. 2025/09/28 05:50:40 parsed 1 programs [ 122.209923][ T6208] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 125.458759][ T6231] chnl_net:caif_netlink_parms(): no params data found [ 125.553446][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.560821][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.569502][ T6231] bridge_slave_0: entered allmulticast mode [ 125.576547][ T6231] bridge_slave_0: entered promiscuous mode [ 125.584166][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.595301][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.602657][ T6231] bridge_slave_1: entered allmulticast mode [ 125.610200][ T6231] bridge_slave_1: entered promiscuous mode [ 125.648466][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.660192][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.689677][ T6231] team0: Port device team_slave_0 added [ 125.698694][ T6231] team0: Port device team_slave_1 added [ 125.728553][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.736150][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.763240][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.776454][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.783586][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.809932][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.851317][ T6231] hsr_slave_0: entered promiscuous mode [ 125.857773][ T6231] hsr_slave_1: entered promiscuous mode [ 126.378275][ T6231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.395359][ T6231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.409302][ T6231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.423308][ T6231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.528703][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.556058][ T6231] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.570439][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.577645][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.593719][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.600964][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.864488][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.930349][ T6231] veth0_vlan: entered promiscuous mode [ 126.947838][ T6231] veth1_vlan: entered promiscuous mode [ 126.989444][ T6231] veth0_macvtap: entered promiscuous mode [ 127.001341][ T6231] veth1_macvtap: entered promiscuous mode [ 127.029283][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.046924][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.068397][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.088987][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.107601][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.128583][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.257675][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.350341][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.427392][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.537851][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.578287][ T5904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.593348][ T5904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.601565][ T5904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.616780][ T5904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.640742][ T5904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 129.041560][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.055271][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.087120][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.096800][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.627241][ T13] bridge_slave_1: left allmulticast mode [ 129.632929][ T13] bridge_slave_1: left promiscuous mode [ 129.640248][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.650570][ T13] bridge_slave_0: left allmulticast mode [ 129.658990][ T13] bridge_slave_0: left promiscuous mode [ 129.664796][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.881700][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.892299][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.902675][ T13] bond0 (unregistering): Released all slaves [ 130.017210][ T13] hsr_slave_0: left promiscuous mode [ 130.023450][ T13] hsr_slave_1: left promiscuous mode [ 130.030717][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.038592][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.048566][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.056391][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.076162][ T13] veth1_macvtap: left promiscuous mode [ 130.081833][ T13] veth0_macvtap: left promiscuous mode [ 130.087999][ T13] veth1_vlan: left promiscuous mode [ 130.093462][ T13] veth0_vlan: left promiscuous mode [ 130.533950][ T13] team0 (unregistering): Port device team_slave_1 removed [ 130.577892][ T13] team0 (unregistering): Port device team_slave_0 removed [ 132.955613][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.962895][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/28 05:50:55 executed programs: 0 [ 133.223696][ T5904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.237299][ T5904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.248315][ T5904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.258619][ T5904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.266968][ T5904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.548758][ T6466] chnl_net:caif_netlink_parms(): no params data found [ 133.672196][ T6466] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.679635][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.687936][ T6466] bridge_slave_0: entered allmulticast mode [ 133.696517][ T6466] bridge_slave_0: entered promiscuous mode [ 133.706197][ T6466] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.713464][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.721196][ T6466] bridge_slave_1: entered allmulticast mode [ 133.729578][ T6466] bridge_slave_1: entered promiscuous mode [ 133.773978][ T6466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.790364][ T6466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.834968][ T6466] team0: Port device team_slave_0 added [ 133.844215][ T6466] team0: Port device team_slave_1 added [ 133.887131][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.894214][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.921079][ T6466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.936261][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.943228][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.970130][ T6466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.031474][ T6466] hsr_slave_0: entered promiscuous mode [ 134.041396][ T6466] hsr_slave_1: entered promiscuous mode [ 134.550520][ T6466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 134.561458][ T6466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 134.573045][ T6466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 134.584127][ T6466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.688702][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.713690][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.732061][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.739426][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.757842][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.765082][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.015880][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.083221][ T6466] veth0_vlan: entered promiscuous mode [ 135.097340][ T6466] veth1_vlan: entered promiscuous mode [ 135.144049][ T6466] veth0_macvtap: entered promiscuous mode [ 135.159315][ T6466] veth1_macvtap: entered promiscuous mode [ 135.189462][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.204311][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.219556][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.229554][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.247320][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.270323][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.339824][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.348003][ T5184] Bluetooth: hci0: command tx timeout [ 135.364001][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.403008][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.413417][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.747954][ T6544] loop0: detected capacity change from 0 to 32768 [ 135.772764][ T6544] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 135.781995][ T6544] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 135.808512][ T6544] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 135.887747][ T6544] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 135.901693][ T6544] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 135.912257][ T6544] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 135.929180][ T6544] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 135.939237][ T6544] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6544 [syz.0.16] iterate_dir+0x399/0x570 [ 135.948895][ T6544] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 135.953423][ T6548] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 135.957462][ T6544] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 135.957690][ T6544] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 135.983622][ T6544] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 135.990312][ T6548] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 135.991519][ T6544] gfs2: fsid=syz:syz.s: File system withdrawn [ 136.005832][ T6548] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6544 [syz.0.16] iterate_dir+0x399/0x570 [ 136.007211][ T6544] CPU: 0 UID: 0 PID: 6544 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 136.007230][ T6544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.007251][ T6544] Call Trace: [ 136.007258][ T6544] [ 136.007265][ T6544] dump_stack_lvl+0x189/0x250 [ 136.007292][ T6544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.007311][ T6544] ? __pfx__printk+0x10/0x10 [ 136.007332][ T6544] ? kobject_uevent_env+0x36b/0x8c0 [ 136.007364][ T6544] gfs2_withdraw+0xb30/0x1430 [ 136.007405][ T6544] ? __pfx_gfs2_withdraw+0x10/0x10 [ 136.007432][ T6544] ? __pfx__printk+0x10/0x10 [ 136.007458][ T6544] ? gfs2_consist_inode_i+0xf5/0x110 [ 136.007476][ T6544] gfs2_dirent_scan+0x545/0x690 [ 136.007503][ T6544] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 136.007530][ T6544] gfs2_dir_read+0x804/0x16f0 [ 136.007562][ T6544] ? __pfx_inode_dio_wait+0x10/0x10 [ 136.007596][ T6544] ? __pfx___might_resched+0x10/0x10 [ 136.007619][ T6544] ? __pfx_gfs2_dir_read+0x10/0x10 [ 136.007640][ T6544] ? _raw_spin_unlock+0x28/0x50 [ 136.007655][ T6544] ? gfs2_glock_nq+0x10c7/0x1830 [ 136.007682][ T6544] ? gfs2_glock_wait+0x20f/0x2a0 [ 136.007700][ T6544] gfs2_readdir+0x14c/0x1b0 [ 136.007725][ T6544] ? __pfx_gfs2_readdir+0x10/0x10 [ 136.007749][ T6544] ? iterate_dir+0x399/0x570 [ 136.007769][ T6544] ? down_read_killable+0x1d1/0x350 [ 136.007794][ T6544] iterate_dir+0x399/0x570 [ 136.007815][ T6544] __se_sys_getdents64+0xe4/0x260 [ 136.007834][ T6544] ? __pfx___se_sys_getdents64+0x10/0x10 [ 136.007849][ T6544] ? __pfx_filldir64+0x10/0x10 [ 136.007873][ T6544] ? do_syscall_64+0xbe/0xfa0 [ 136.007895][ T6544] do_syscall_64+0xfa/0xfa0 [ 136.007912][ T6544] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.007930][ T6544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.007944][ T6544] ? clear_bhb_loop+0x60/0xb0 [ 136.007964][ T6544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.007979][ T6544] RIP: 0033:0x7f0a0218e929 [ 136.008000][ T6544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.008013][ T6544] RSP: 002b:00007f0a03021038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 136.008030][ T6544] RAX: ffffffffffffffda RBX: 00007f0a023b5fa0 RCX: 00007f0a0218e929 [ 136.008041][ T6544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 136.008050][ T6544] RBP: 00007f0a02210b39 R08: 0000000000000000 R09: 0000000000000000 [ 136.008060][ T6544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.008069][ T6544] R13: 0000000000000000 R14: 00007f0a023b5fa0 R15: 00007ffcd47e3f78 [ 136.008097][ T6544] [ 136.278075][ T6548] ================================================================== [ 136.286438][ T6548] BUG: KASAN: global-out-of-bounds in pid_task+0x5a/0x140 [ 136.293671][ T6548] Read of size 8 at addr ffffffff92c8b918 by task syz.0.16/6548 [ 136.301375][ T6548] [ 136.303757][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 136.303776][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.303785][ T6548] Call Trace: [ 136.303794][ T6548] [ 136.303801][ T6548] dump_stack_lvl+0x189/0x250 [ 136.303822][ T6548] ? __kasan_check_byte+0x12/0x40 [ 136.303840][ T6548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.303856][ T6548] ? lock_release+0x4b/0x3e0 [ 136.303878][ T6548] ? __virt_addr_valid+0x4a5/0x5c0 [ 136.303896][ T6548] print_report+0xca/0x240 [ 136.303917][ T6548] ? pid_task+0x5a/0x140 [ 136.303930][ T6548] kasan_report+0x118/0x150 [ 136.303950][ T6548] ? pid_task+0x5a/0x140 [ 136.303966][ T6548] ? gfs2_dump_glock+0xf0b/0x1bc0 [ 136.303989][ T6548] pid_task+0x5a/0x140 [ 136.304005][ T6548] gfs2_dump_glock+0x10b4/0x1bc0 [ 136.304029][ T6548] ? gfs2_dump_glock+0xf0b/0x1bc0 [ 136.304053][ T6548] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 136.304076][ T6548] ? preempt_count_add+0x91/0x1a0 [ 136.304095][ T6548] ? __se_sys_getdents+0xe4/0x250 [ 136.304104][ T6548] ? do_syscall_64+0xfa/0xfa0 [ 136.304121][ T6548] ? __pfx__printk+0x10/0x10 [ 136.304133][ T6548] gfs2_consist_inode_i+0xf5/0x110 [ 136.304143][ T6548] gfs2_dirent_scan+0x545/0x690 [ 136.304157][ T6548] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 136.304171][ T6548] gfs2_dir_read+0x804/0x16f0 [ 136.304186][ T6548] ? __pfx_inode_dio_wait+0x10/0x10 [ 136.304201][ T6548] ? __pfx___might_resched+0x10/0x10 [ 136.304214][ T6548] ? __pfx_gfs2_dir_read+0x10/0x10 [ 136.304227][ T6548] ? _raw_spin_unlock+0x28/0x50 [ 136.304236][ T6548] ? gfs2_glock_nq+0x10c7/0x1830 [ 136.304247][ T6548] ? gfs2_glock_wait+0x20f/0x2a0 [ 136.304256][ T6548] gfs2_readdir+0x14c/0x1b0 [ 136.304270][ T6548] ? __pfx_gfs2_readdir+0x10/0x10 [ 136.304283][ T6548] ? iterate_dir+0x399/0x570 [ 136.304292][ T6548] ? down_read_killable+0x1d1/0x350 [ 136.304305][ T6548] iterate_dir+0x399/0x570 [ 136.304314][ T6548] __se_sys_getdents+0xe4/0x250 [ 136.304324][ T6548] ? __pfx___se_sys_getdents+0x10/0x10 [ 136.304332][ T6548] ? __pfx_filldir+0x10/0x10 [ 136.304343][ T6548] ? do_syscall_64+0xbe/0xfa0 [ 136.304354][ T6548] do_syscall_64+0xfa/0xfa0 [ 136.304364][ T6548] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.304380][ T6548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.304389][ T6548] ? clear_bhb_loop+0x60/0xb0 [ 136.304399][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.304408][ T6548] RIP: 0033:0x7f0a0218e929 [ 136.304418][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.304425][ T6548] RSP: 002b:00007f0a03000038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 136.304436][ T6548] RAX: ffffffffffffffda RBX: 00007f0a023b6080 RCX: 00007f0a0218e929 [ 136.304443][ T6548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 136.304449][ T6548] RBP: 00007f0a02210b39 R08: 0000000000000000 R09: 0000000000000000 [ 136.304454][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.304460][ T6548] R13: 0000000000000000 R14: 00007f0a023b6080 R15: 00007ffcd47e3f78 [ 136.304469][ T6548] [ 136.304472][ T6548] [ 136.615891][ T6548] The buggy address belongs to the variable: [ 136.621947][ T6548] copy_signal.__key.111+0x18/0x20 [ 136.627078][ T6548] [ 136.629420][ T6548] The buggy address belongs to the physical page: [ 136.635828][ T6548] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c8b [ 136.644639][ T6548] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 136.652662][ T6548] raw: 00fff00000002000 ffffea00004b22c8 ffffea00004b22c8 0000000000000000 [ 136.661328][ T6548] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 136.669914][ T6548] page dumped because: kasan: bad access detected [ 136.676340][ T6548] page_owner info is not present (never set?) [ 136.682665][ T6548] [ 136.684993][ T6548] Memory state around the buggy address: [ 136.690618][ T6548] ffffffff92c8b800: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 136.698849][ T6548] ffffffff92c8b880: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 136.706909][ T6548] >ffffffff92c8b900: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 136.715048][ T6548] ^ [ 136.719921][ T6548] ffffffff92c8b980: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 136.728065][ T6548] ffffffff92c8ba00: 00 00 f9 f9 00 00 f9 f9 01 f9 f9 f9 00 f9 f9 f9 [ 136.736152][ T6548] ================================================================== [ 136.746349][ T6548] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 136.753647][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 136.762949][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.773087][ T6548] Call Trace: [ 136.776443][ T6548] [ 136.779382][ T6548] dump_stack_lvl+0x99/0x250 [ 136.783959][ T6548] ? __asan_memcpy+0x40/0x70 [ 136.788622][ T6548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.793805][ T6548] ? __pfx__printk+0x10/0x10 [ 136.798386][ T6548] vpanic+0x237/0x6d0 [ 136.802352][ T6548] ? __pfx_vpanic+0x10/0x10 [ 136.806839][ T6548] ? preempt_schedule+0xae/0xc0 [ 136.811775][ T6548] ? __pfx_preempt_schedule+0x10/0x10 [ 136.817139][ T6548] panic+0xb9/0xc0 [ 136.820847][ T6548] ? __pfx_panic+0x10/0x10 [ 136.825255][ T6548] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 136.831144][ T6548] ? pid_task+0x5a/0x140 [ 136.835369][ T6548] check_panic_on_warn+0x89/0xb0 [ 136.840474][ T6548] ? pid_task+0x5a/0x140 [ 136.844727][ T6548] end_report+0x78/0x160 [ 136.848955][ T6548] kasan_report+0x129/0x150 [ 136.853531][ T6548] ? pid_task+0x5a/0x140 [ 136.857844][ T6548] ? gfs2_dump_glock+0xf0b/0x1bc0 [ 136.862858][ T6548] pid_task+0x5a/0x140 [ 136.866996][ T6548] gfs2_dump_glock+0x10b4/0x1bc0 [ 136.871924][ T6548] ? gfs2_dump_glock+0xf0b/0x1bc0 [ 136.877036][ T6548] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 136.882485][ T6548] ? preempt_count_add+0x91/0x1a0 [ 136.887492][ T6548] ? __se_sys_getdents+0xe4/0x250 [ 136.892495][ T6548] ? do_syscall_64+0xfa/0xfa0 [ 136.897168][ T6548] ? __pfx__printk+0x10/0x10 [ 136.901844][ T6548] gfs2_consist_inode_i+0xf5/0x110 [ 136.906943][ T6548] gfs2_dirent_scan+0x545/0x690 [ 136.911781][ T6548] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 136.917323][ T6548] gfs2_dir_read+0x804/0x16f0 [ 136.921988][ T6548] ? __pfx_inode_dio_wait+0x10/0x10 [ 136.927270][ T6548] ? __pfx___might_resched+0x10/0x10 [ 136.932542][ T6548] ? __pfx_gfs2_dir_read+0x10/0x10 [ 136.937649][ T6548] ? _raw_spin_unlock+0x28/0x50 [ 136.942486][ T6548] ? gfs2_glock_nq+0x10c7/0x1830 [ 136.947505][ T6548] ? gfs2_glock_wait+0x20f/0x2a0 [ 136.952868][ T6548] gfs2_readdir+0x14c/0x1b0 [ 136.957359][ T6548] ? __pfx_gfs2_readdir+0x10/0x10 [ 136.962367][ T6548] ? iterate_dir+0x399/0x570 [ 136.966954][ T6548] ? down_read_killable+0x1d1/0x350 [ 136.972147][ T6548] iterate_dir+0x399/0x570 [ 136.976808][ T6548] __se_sys_getdents+0xe4/0x250 [ 136.981663][ T6548] ? __pfx___se_sys_getdents+0x10/0x10 [ 136.987124][ T6548] ? __pfx_filldir+0x10/0x10 [ 136.991803][ T6548] ? do_syscall_64+0xbe/0xfa0 [ 136.996562][ T6548] do_syscall_64+0xfa/0xfa0 [ 137.001066][ T6548] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.006278][ T6548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.012330][ T6548] ? clear_bhb_loop+0x60/0xb0 [ 137.017020][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.022911][ T6548] RIP: 0033:0x7f0a0218e929 [ 137.027403][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.047186][ T6548] RSP: 002b:00007f0a03000038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 137.055677][ T6548] RAX: ffffffffffffffda RBX: 00007f0a023b6080 RCX: 00007f0a0218e929 [ 137.063633][ T6548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 137.071587][ T6548] RBP: 00007f0a02210b39 R08: 0000000000000000 R09: 0000000000000000 [ 137.079544][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.087496][ T6548] R13: 0000000000000000 R14: 00007f0a023b6080 R15: 00007ffcd47e3f78 [ 137.095462][ T6548] [ 137.098779][ T6548] Kernel Offset: disabled [ 137.103095][ T6548] Rebooting in 86400 seconds..