Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts.
2026/07/06 02:03:56 parsed 1 programs
[ 93.476945][ T4667] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 94.976887][ T4688] chnl_net:caif_netlink_parms(): no params data found
[ 95.013908][ T4688] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.021006][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.029203][ T4688] device bridge_slave_0 entered promiscuous mode
[ 95.039266][ T4688] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.046429][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.054151][ T4688] device bridge_slave_1 entered promiscuous mode
[ 95.071837][ T4688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.082943][ T4688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.106699][ T4688] team0: Port device team_slave_0 added
[ 95.114268][ T4688] team0: Port device team_slave_1 added
[ 95.130387][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.137433][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.163535][ T4688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.178175][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.185190][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.211215][ T4688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.236729][ T4688] device hsr_slave_0 entered promiscuous mode
[ 95.244378][ T4688] device hsr_slave_1 entered promiscuous mode
[ 95.671837][ T4688] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.694435][ T4688] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.714602][ T4688] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.734796][ T4688] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.776585][ T4688] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.783730][ T4688] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.791495][ T4688] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.798647][ T4688] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.858552][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.884097][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 95.898810][ T473] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.907615][ T473] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.916217][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 95.938398][ T4688] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.964011][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 95.979418][ T473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.986561][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.028158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 96.038768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 96.062529][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.069627][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.092327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 96.110311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 96.120154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 96.130736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 96.140826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 96.156056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 96.172784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 96.197027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 96.212630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 96.234843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 96.252598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 96.264406][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 96.476567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 96.492383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 96.505189][ T4688] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.539772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 96.551336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 96.574472][ T4688] device veth0_vlan entered promiscuous mode
[ 96.581666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 96.591238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 96.605399][ T4688] device veth1_vlan entered promiscuous mode
[ 96.615198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 96.623627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 96.643261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 96.668397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 96.693860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 96.702952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 96.720574][ T4688] device veth0_macvtap entered promiscuous mode
[ 96.731193][ T4688] device veth1_macvtap entered promiscuous mode
[ 96.749884][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.758627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 96.768897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 96.777505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 96.792902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 96.814378][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.823652][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 96.837783][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 96.849535][ T4688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.858583][ T4688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.868204][ T4688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.878550][ T4688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.236854][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.256090][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.266052][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 97.284087][ T1278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.308365][ T473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.317576][ T473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.326771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 99.438354][ T1278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.446206][ T1278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.497286][ T1278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.294517][ T1278] device hsr_slave_0 left promiscuous mode
[ 102.321404][ T1278] device hsr_slave_1 left promiscuous mode
[ 102.329993][ T1278] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.342734][ T1278] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.362579][ T1278] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.370000][ T1278] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.389354][ T1278] device bridge_slave_1 left promiscuous mode
[ 102.396084][ T1278] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.404788][ T1278] device bridge_slave_0 left promiscuous mode
[ 102.410983][ T1278] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.424736][ T1278] device veth1_macvtap left promiscuous mode
[ 102.430953][ T1278] device veth0_macvtap left promiscuous mode
[ 102.437707][ T1278] device veth1_vlan left promiscuous mode
[ 102.443725][ T1278] device veth0_vlan left promiscuous mode
[ 102.548471][ T1278] team0 (unregistering): Port device team_slave_1 removed
[ 102.561158][ T1278] team0 (unregistering): Port device team_slave_0 removed
[ 102.571776][ T1278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.586733][ T1278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.630966][ T1278] bond0 (unregistering): Released all slaves
2026/07/06 02:04:09 executed programs: 0
[ 104.204148][ T5056] chnl_net:caif_netlink_parms(): no params data found
[ 104.304978][ T5056] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.313614][ T5056] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.321707][ T5056] device bridge_slave_0 entered promiscuous mode
[ 104.330813][ T5056] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.340040][ T5056] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.348721][ T5056] device bridge_slave_1 entered promiscuous mode
[ 104.377059][ T5056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.388577][ T5056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.436218][ T5056] team0: Port device team_slave_0 added
[ 104.454686][ T5056] team0: Port device team_slave_1 added
[ 104.494828][ T5056] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.501885][ T5056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.569258][ T5056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.585340][ T5056] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.593508][ T5056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.619693][ T5056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.659528][ T5056] device hsr_slave_0 entered promiscuous mode
[ 104.666571][ T5056] device hsr_slave_1 entered promiscuous mode
[ 105.274979][ T5056] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.285799][ T5056] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.295308][ T5056] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.306508][ T5056] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.369393][ T5056] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.416123][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 105.424369][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 105.436263][ T5056] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.446501][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 105.456946][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 105.466177][ T473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.473282][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.483013][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 105.534620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 105.546625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 105.555728][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.562857][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.572947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 105.581723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 105.602426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 105.614311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 105.624979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 105.633856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 105.642916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 105.651129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 105.659668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 105.668085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 105.676398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 105.687157][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 105.861065][ T5056] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.868463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 105.877388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 105.924308][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 105.933660][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 105.989463][ T5056] device veth0_vlan entered promiscuous mode
[ 105.997410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 106.006733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 106.016079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 106.027131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 106.039561][ T5056] device veth1_vlan entered promiscuous mode
[ 106.046444][ T1325] Bluetooth: hci0: command 0x0409 tx timeout
[ 106.105834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 106.117593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 106.127727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 106.137877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 106.148717][ T5056] device veth0_macvtap entered promiscuous mode
[ 106.185455][ T5056] device veth1_macvtap entered promiscuous mode
[ 106.202494][ T5056] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.210755][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 106.219646][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 106.227995][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 106.237969][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 106.249316][ T5056] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.257514][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 106.266847][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 106.277169][ T5056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.286338][ T5056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.295263][ T5056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.304586][ T5056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.406515][ T4536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.418564][ T4536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.435606][ T473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 106.478279][ T473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.488051][ T473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.498382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 106.928667][ T5169] loop0: detected capacity change from 0 to 32768
[ 107.118093][ T5169] ==================================================================
[ 107.126344][ T5169] BUG: KASAN: use-after-free in jfs_readdir+0x127e/0x3d40
[ 107.133603][ T5169] Read of size 8 at addr ffff8880742cebd0 by task syz.0.17/5169
[ 107.141232][ T5169]
[ 107.143565][ T5169] CPU: 0 PID: 5169 Comm: syz.0.17 Not tainted syzkaller #0
[ 107.150763][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 107.160908][ T5169] Call Trace:
[ 107.164186][ T5169]
[ 107.167135][ T5169] dump_stack_lvl+0x188/0x250
[ 107.171823][ T5169] ? show_regs_print_info+0x20/0x20
[ 107.177027][ T5169] ? load_image+0x410/0x410
[ 107.181526][ T5169] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 107.186992][ T5169] print_address_description+0x60/0x2d0
[ 107.192541][ T5169] ? jfs_readdir+0x127e/0x3d40
[ 107.197305][ T5169] kasan_report+0xdf/0x130
[ 107.201721][ T5169] ? jfs_readdir+0x127e/0x3d40
[ 107.206494][ T5169] jfs_readdir+0x127e/0x3d40
[ 107.211115][ T5169] ? dtInitRoot+0x660/0x660
[ 107.215632][ T5169] ? clear_nonspinnable+0x60/0x60
[ 107.220656][ T5169] ? end_current_label_crit_section+0x14b/0x170
[ 107.226898][ T5169] ? common_file_perm+0x171/0x1c0
[ 107.231928][ T5169] ? iterate_dir+0x133/0x550
[ 107.236522][ T5169] iterate_dir+0x213/0x550
[ 107.240943][ T5169] __se_sys_getdents+0xf2/0x260
[ 107.245797][ T5169] ? __x64_sys_getdents+0x80/0x80
[ 107.250834][ T5169] ? fillonedir+0x4c0/0x4c0
[ 107.255347][ T5169] ? lockdep_hardirqs_on+0x94/0x140
[ 107.260556][ T5169] do_syscall_64+0x4c/0xa0
[ 107.264978][ T5169] ? clear_bhb_loop+0x30/0x80
[ 107.269661][ T5169] ? clear_bhb_loop+0x30/0x80
[ 107.274344][ T5169] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.280254][ T5169] RIP: 0033:0x7f5a90b04379
[ 107.284681][ T5169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.304292][ T5169] RSP: 002b:00007f5a90168028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 107.312716][ T5169] RAX: ffffffffffffffda RBX: 00007f5a90d5ffa0 RCX: 00007f5a90b04379
[ 107.320694][ T5169] RDX: fffffffffffffd90 RSI: 0000000000000000 RDI: 0000000000000004
[ 107.328672][ T5169] RBP: 00007f5a90b97d68 R08: 0000000000000000 R09: 0000000000000000
[ 107.336662][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.344636][ T5169] R13: 00007f5a90d60038 R14: 00007f5a90d5ffa0 R15: 00007ffcc16b6988
[ 107.352626][ T5169]
[ 107.355641][ T5169]
[ 107.357958][ T5169] Allocated by task 5169:
[ 107.362277][ T5169] __kasan_slab_alloc+0x92/0xc0
[ 107.367128][ T5169] slab_post_alloc_hook+0x4c/0x380
[ 107.372323][ T5169] kmem_cache_alloc+0x15d/0x280
[ 107.377259][ T5169] mempool_alloc+0x19d/0x510
[ 107.381842][ T5169] __get_metapage+0x5e8/0x1060
[ 107.386602][ T5169] dtSplitRoot+0x1cb/0x14d0
[ 107.391102][ T5169] dtInsert+0xe84/0x57e0
[ 107.395521][ T5169] jfs_symlink+0x8bb/0xfd0
[ 107.399933][ T5169] vfs_symlink+0x245/0x3d0
[ 107.404355][ T5169] do_symlinkat+0x1ab/0x6b0
[ 107.408865][ T5169] __x64_sys_symlink+0x7a/0x90
[ 107.413624][ T5169] do_syscall_64+0x4c/0xa0
[ 107.418036][ T5169] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.423923][ T5169]
[ 107.426237][ T5169] Freed by task 5169:
[ 107.430206][ T5169] kasan_set_track+0x4b/0x70
[ 107.434792][ T5169] kasan_set_free_info+0x1f/0x40
[ 107.439721][ T5169] ____kasan_slab_free+0xd5/0x110
[ 107.444738][ T5169] slab_free_freelist_hook+0xec/0x170
[ 107.450107][ T5169] kmem_cache_free+0x8f/0x210
[ 107.454789][ T5169] release_metapage+0x9c6/0xda0
[ 107.459636][ T5169] jfs_readdir+0x1008/0x3d40
[ 107.464224][ T5169] iterate_dir+0x213/0x550
[ 107.468635][ T5169] __se_sys_getdents+0xf2/0x260
[ 107.473480][ T5169] do_syscall_64+0x4c/0xa0
[ 107.477887][ T5169] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.483772][ T5169]
[ 107.486091][ T5169] The buggy address belongs to the object at ffff8880742ceba0
[ 107.486091][ T5169] which belongs to the cache jfs_mp of size 184
[ 107.499788][ T5169] The buggy address is located 48 bytes inside of
[ 107.499788][ T5169] 184-byte region [ffff8880742ceba0, ffff8880742cec58)
[ 107.512975][ T5169] The buggy address belongs to the page:
[ 107.518625][ T5169] page:ffffea0001d0b380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x742ce
[ 107.528856][ T5169] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 107.536418][ T5169] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888146806dc0
[ 107.545006][ T5169] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 107.553582][ T5169] page dumped because: kasan: bad access detected
[ 107.560004][ T5169] page_owner tracks the page as allocated
[ 107.565713][ T5169] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5169, ts 107057234371, free_ts 106925524564
[ 107.584823][ T5169] get_page_from_freelist+0x24f6/0x2670
[ 107.590402][ T5169] __alloc_pages+0x1ee/0x480
[ 107.595018][ T5169] new_slab+0xc0/0x4b0
[ 107.599185][ T5169] ___slab_alloc+0x807/0xdd0
[ 107.603875][ T5169] kmem_cache_alloc+0xf0/0x280
[ 107.608738][ T5169] mempool_alloc+0x19d/0x510
[ 107.613347][ T5169] __get_metapage+0x5e8/0x1060
[ 107.618127][ T5169] diReadSpecial+0x24b/0x710
[ 107.622894][ T5169] jfs_mount+0x6f/0x860
[ 107.627051][ T5169] jfs_fill_super+0x4d6/0xad0
[ 107.631731][ T5169] mount_bdev+0x28a/0x3c0
[ 107.636063][ T5169] legacy_get_tree+0xe6/0x180
[ 107.640737][ T5169] vfs_get_tree+0x88/0x270
[ 107.645148][ T5169] do_new_mount+0x247/0xa40
[ 107.649655][ T5169] __se_sys_mount+0x2e3/0x3d0
[ 107.654329][ T5169] do_syscall_64+0x4c/0xa0
[ 107.658740][ T5169] page last free stack trace:
[ 107.663402][ T5169] free_unref_page_prepare+0x637/0x6c0
[ 107.668859][ T5169] free_unref_page_list+0x119/0x830
[ 107.674051][ T5169] release_pages+0x185f/0x1bd0
[ 107.678812][ T5169] tlb_finish_mmu+0x1b4/0x370
[ 107.683493][ T5169] unmap_region+0x344/0x3b0
[ 107.688080][ T5169] __do_munmap+0xa29/0xe10
[ 107.692491][ T5169] __vm_munmap+0x13f/0x240
[ 107.696900][ T5169] __x64_sys_munmap+0x67/0x70
[ 107.701568][ T5169] do_syscall_64+0x4c/0xa0
[ 107.705976][ T5169] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.711865][ T5169]
[ 107.714182][ T5169] Memory state around the buggy address:
[ 107.719808][ T5169] ffff8880742cea80: fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00
[ 107.727872][ T5169] ffff8880742ceb00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc
[ 107.735936][ T5169] >ffff8880742ceb80: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 107.743992][ T5169] ^
[ 107.750657][ T5169] ffff8880742cec00: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc
[ 107.758714][ T5169] ffff8880742cec80: fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 107.766765][ T5169] ==================================================================
[ 107.774926][ T5169] Disabling lock debugging due to kernel taint
[ 107.792394][ T5169] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.799634][ T5169] CPU: 1 PID: 5169 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 107.808228][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 107.818458][ T5169] Call Trace:
[ 107.821740][ T5169]
[ 107.824670][ T5169] dump_stack_lvl+0x188/0x250
[ 107.829357][ T5169] ? show_regs_print_info+0x20/0x20
[ 107.834658][ T5169] ? load_image+0x410/0x410
[ 107.839179][ T5169] panic+0x2f8/0x850
[ 107.843082][ T5169] ? bpf_jit_dump+0xd0/0xd0
[ 107.847590][ T5169] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 107.853573][ T5169] ? _raw_spin_unlock+0x40/0x40
[ 107.858411][ T5169] ? jfs_readdir+0x127e/0x3d40
[ 107.863165][ T5169] check_panic_on_warn+0x80/0xa0
[ 107.868088][ T5169] ? jfs_readdir+0x127e/0x3d40
[ 107.872832][ T5169] end_report+0x6d/0xf0
[ 107.876969][ T5169] kasan_report+0x102/0x130
[ 107.881455][ T5169] ? jfs_readdir+0x127e/0x3d40
[ 107.886200][ T5169] jfs_readdir+0x127e/0x3d40
[ 107.890801][ T5169] ? dtInitRoot+0x660/0x660
[ 107.895287][ T5169] ? clear_nonspinnable+0x60/0x60
[ 107.900293][ T5169] ? end_current_label_crit_section+0x14b/0x170
[ 107.906513][ T5169] ? common_file_perm+0x171/0x1c0
[ 107.911518][ T5169] ? iterate_dir+0x133/0x550
[ 107.916090][ T5169] iterate_dir+0x213/0x550
[ 107.920485][ T5169] __se_sys_getdents+0xf2/0x260
[ 107.925400][ T5169] ? __x64_sys_getdents+0x80/0x80
[ 107.930403][ T5169] ? fillonedir+0x4c0/0x4c0
[ 107.934891][ T5169] ? lockdep_hardirqs_on+0x94/0x140
[ 107.940069][ T5169] do_syscall_64+0x4c/0xa0
[ 107.944461][ T5169] ? clear_bhb_loop+0x30/0x80
[ 107.949115][ T5169] ? clear_bhb_loop+0x30/0x80
[ 107.953774][ T5169] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.959646][ T5169] RIP: 0033:0x7f5a90b04379
[ 107.964041][ T5169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.983627][ T5169] RSP: 002b:00007f5a90168028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 107.992020][ T5169] RAX: ffffffffffffffda RBX: 00007f5a90d5ffa0 RCX: 00007f5a90b04379
[ 107.999972][ T5169] RDX: fffffffffffffd90 RSI: 0000000000000000 RDI: 0000000000000004
[ 108.008101][ T5169] RBP: 00007f5a90b97d68 R08: 0000000000000000 R09: 0000000000000000
[ 108.016054][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 108.024006][ T5169] R13: 00007f5a90d60038 R14: 00007f5a90d5ffa0 R15: 00007ffcc16b6988
[ 108.031967][ T5169]
[ 108.035167][ T5169] Kernel Offset: disabled
[ 108.039479][ T5169] Rebooting in 86400 seconds..