Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts.
2025/07/21 15:12:00 ignoring optional flag "sandboxArg"="0"
2025/07/21 15:12:00 ignoring optional flag "type"="gce"
2025/07/21 15:12:00 parsed 1 programs
2025/07/21 15:12:02 executed programs: 0
[ 95.853282][ T6157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.904087][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.913615][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.921584][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.930321][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.939548][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.088710][ T6165] chnl_net:caif_netlink_parms(): no params data found
[ 96.154278][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.161625][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.169391][ T6165] bridge_slave_0: entered allmulticast mode
[ 96.177039][ T6165] bridge_slave_0: entered promiscuous mode
[ 96.185035][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.193038][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.200451][ T6165] bridge_slave_1: entered allmulticast mode
[ 96.207650][ T6165] bridge_slave_1: entered promiscuous mode
[ 96.236929][ T6165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.250004][ T6165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.281347][ T6165] team0: Port device team_slave_0 added
[ 96.290277][ T6165] team0: Port device team_slave_1 added
[ 96.319507][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.326964][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.353703][ T6165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.366867][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.373915][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.400139][ T6165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.441858][ T6165] hsr_slave_0: entered promiscuous mode
[ 96.448372][ T6165] hsr_slave_1: entered promiscuous mode
[ 97.085820][ T6165] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.097781][ T6165] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.120102][ T6165] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.132775][ T6165] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.257012][ T6165] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.285621][ T6165] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.301541][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.308970][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.333594][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.341481][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.614436][ T6165] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.679711][ T6165] veth0_vlan: entered promiscuous mode
[ 97.694488][ T6165] veth1_vlan: entered promiscuous mode
[ 97.731908][ T6165] veth0_macvtap: entered promiscuous mode
[ 97.751578][ T6165] veth1_macvtap: entered promiscuous mode
[ 97.771591][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.785975][ T6165] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.796916][ T6165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.805985][ T6165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.815870][ T6165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.824949][ T6165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.919117][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.936110][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.972941][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.983295][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.026782][ T5157] Bluetooth: hci0: command tx timeout
[ 98.080172][ T6225] loop0: detected capacity change from 0 to 1024
[ 98.149533][ T6225] hfsplus: request for non-existent node 65030 in B*Tree
[ 98.159392][ T6225] hfsplus: request for non-existent node 65030 in B*Tree
[ 98.168938][ T6225] ==================================================================
[ 98.177048][ T6225] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0xc0/0x2a0
[ 98.185233][ T6225] Read of size 8 at addr ffff888034b842c0 by task syz-executor.0/6225
[ 98.193466][ T6225]
[ 98.195839][ T6225] CPU: 0 UID: 0 PID: 6225 Comm: syz-executor.0 Not tainted 6.16.0-rc7-syzkaller-g89be9a83ccf1 #0 PREEMPT(full)
[ 98.195866][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 98.195882][ T6225] Call Trace:
[ 98.195891][ T6225]
[ 98.195898][ T6225] dump_stack_lvl+0x189/0x250
[ 98.195918][ T6225] ? __virt_addr_valid+0x1c8/0x5c0
[ 98.195935][ T6225] ? rcu_is_watching+0x15/0xb0
[ 98.195949][ T6225] ? __kasan_check_byte+0x12/0x40
[ 98.195964][ T6225] ? __pfx_dump_stack_lvl+0x10/0x10
[ 98.195979][ T6225] ? rcu_is_watching+0x15/0xb0
[ 98.195992][ T6225] ? lock_release+0x4b/0x3e0
[ 98.196006][ T6225] ? __virt_addr_valid+0x1c8/0x5c0
[ 98.196021][ T6225] ? __virt_addr_valid+0x4a5/0x5c0
[ 98.196037][ T6225] print_report+0xca/0x230
[ 98.196056][ T6225] ? hfsplus_bnode_read+0xc0/0x2a0
[ 98.196075][ T6225] kasan_report+0x118/0x150
[ 98.196089][ T6225] ? hfsplus_bnode_read+0xc0/0x2a0
[ 98.196110][ T6225] hfsplus_bnode_read+0xc0/0x2a0
[ 98.196130][ T6225] hfsplus_bnode_dump+0x300/0x450
[ 98.196152][ T6225] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 98.196171][ T6225] ? hfsplus_bnode_write_u16+0x8b/0xd0
[ 98.196191][ T6225] ? hfsplus_bnode_move+0x393/0xb90
[ 98.196210][ T6225] ? __pfx___hfsplus_brec_find+0x10/0x10
[ 98.196235][ T6225] hfsplus_brec_remove+0x480/0x550
[ 98.196256][ T6225] __hfsplus_delete_attr+0x1d4/0x360
[ 98.196272][ T6225] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 98.196286][ T6225] ? hfsplus_find_init+0x8c/0x1d0
[ 98.196302][ T6225] hfsplus_delete_all_attrs+0x277/0x410
[ 98.196318][ T6225] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10
[ 98.196334][ T6225] ? rcu_is_watching+0x15/0xb0
[ 98.196348][ T6225] ? __mark_inode_dirty+0x8c5/0xdf0
[ 98.196368][ T6225] hfsplus_delete_cat+0x92c/0xd20
[ 98.196387][ T6225] ? __pfx_hfsplus_delete_cat+0x10/0x10
[ 98.196407][ T6225] ? __pfx___mutex_lock+0x10/0x10
[ 98.196433][ T6225] hfsplus_unlink+0x359/0x730
[ 98.196454][ T6225] ? __pfx_hfsplus_unlink+0x10/0x10
[ 98.196474][ T6225] ? down_write_nested+0x169/0x200
[ 98.196491][ T6225] ? __pfx_down_write_nested+0x10/0x10
[ 98.196509][ T6225] hfsplus_rename+0xcb/0x1c0
[ 98.196526][ T6225] ? __pfx_hfsplus_rename+0x10/0x10
[ 98.196544][ T6225] vfs_rename+0xb99/0xec0
[ 98.196563][ T6225] ? __pfx_vfs_rename+0x10/0x10
[ 98.196577][ T6225] ? d_alloc+0x144/0x190
[ 98.196594][ T6225] ? bpf_lsm_path_rename+0x9/0x20
[ 98.196613][ T6225] ? security_path_rename+0x17d/0x490
[ 98.196635][ T6225] do_renameat2+0x878/0xc50
[ 98.196655][ T6225] ? __pfx_do_renameat2+0x10/0x10
[ 98.196674][ T6225] ? getname_flags+0x1e5/0x540
[ 98.196691][ T6225] __x64_sys_renameat2+0xce/0xe0
[ 98.196710][ T6225] do_syscall_64+0xfa/0x3b0
[ 98.196726][ T6225] ? lockdep_hardirqs_on+0x9c/0x150
[ 98.196739][ T6225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.196753][ T6225] ? clear_bhb_loop+0x60/0xb0
[ 98.196768][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.196781][ T6225] RIP: 0033:0x7ffa6187dda9
[ 98.196800][ T6225] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 98.196811][ T6225] RSP: 002b:00007ffa6263b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 98.196827][ T6225] RAX: ffffffffffffffda RBX: 00007ffa619abf80 RCX: 00007ffa6187dda9
[ 98.196837][ T6225] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000005
[ 98.196846][ T6225] RBP: 00007ffa618ca47a R08: 0000000000000000 R09: 0000000000000000
[ 98.196854][ T6225] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000
[ 98.196863][ T6225] R13: 000000000000000b R14: 00007ffa619abf80 R15: 00007ffee7c1d128
[ 98.196878][ T6225]
[ 98.196883][ T6225]
[ 98.561988][ T6225] Allocated by task 6225:
[ 98.566413][ T6225] kasan_save_track+0x3e/0x80
[ 98.571355][ T6225] __kasan_kmalloc+0x93/0xb0
[ 98.576283][ T6225] __kmalloc_noprof+0x27a/0x4f0
[ 98.581137][ T6225] __hfs_bnode_create+0xf3/0x810
[ 98.586162][ T6225] hfsplus_bnode_find+0x224/0xd20
[ 98.591267][ T6225] hfsplus_brec_find+0x15c/0x500
[ 98.596197][ T6225] __hfsplus_getxattr+0x301/0x7e0
[ 98.601294][ T6225] hfsplus_getxattr+0x10d/0x180
[ 98.606137][ T6225] __vfs_getxattr+0x3f4/0x430
[ 98.610802][ T6225] smk_fetch+0xb4/0x140
[ 98.615042][ T6225] smack_d_instantiate+0x6f5/0x940
[ 98.620230][ T6225] security_d_instantiate+0x10a/0x200
[ 98.625599][ T6225] d_splice_alias+0x6e/0x330
[ 98.630243][ T6225] hfsplus_lookup+0x803/0x890
[ 98.635000][ T6225] lookup_one_qstr_excl_raw+0x118/0x280
[ 98.640554][ T6225] do_renameat2+0x401/0xc50
[ 98.645048][ T6225] __x64_sys_renameat2+0xce/0xe0
[ 98.649972][ T6225] do_syscall_64+0xfa/0x3b0
[ 98.654465][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.660464][ T6225]
[ 98.662786][ T6225] The buggy address belongs to the object at ffff888034b84200
[ 98.662786][ T6225] which belongs to the cache kmalloc-192 of size 192
[ 98.676951][ T6225] The buggy address is located 40 bytes to the right of
[ 98.676951][ T6225] allocated 152-byte region [ffff888034b84200, ffff888034b84298)
[ 98.692147][ T6225]
[ 98.694559][ T6225] The buggy address belongs to the physical page:
[ 98.700982][ T6225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34b84
[ 98.710014][ T6225] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 98.717469][ T6225] page_type: f5(slab)
[ 98.721445][ T6225] raw: 00fff00000000000 ffff88801a4413c0 dead000000000100 dead000000000122
[ 98.730202][ T6225] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 98.738885][ T6225] page dumped because: kasan: bad access detected
[ 98.745764][ T6225] page_owner tracks the page as allocated
[ 98.751478][ T6225] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 21969415103, free_ts 21965608453
[ 98.770581][ T6225] post_alloc_hook+0x240/0x2a0
[ 98.775361][ T6225] get_page_from_freelist+0x21d5/0x22b0
[ 98.781085][ T6225] __alloc_frozen_pages_noprof+0x181/0x370
[ 98.786890][ T6225] alloc_pages_mpol+0x232/0x4a0
[ 98.791734][ T6225] allocate_slab+0x8a/0x3b0
[ 98.796412][ T6225] ___slab_alloc+0xbfc/0x1480
[ 98.801083][ T6225] __kmalloc_cache_noprof+0x296/0x3d0
[ 98.806446][ T6225] call_usermodehelper_setup+0x8e/0x270
[ 98.812105][ T6225] kobject_uevent_env+0x65c/0x8c0
[ 98.817419][ T6225] kernel_add_sysfs_param+0x100/0x130
[ 98.823127][ T6225] param_sysfs_builtin+0x1de/0x290
[ 98.828256][ T6225] param_sysfs_builtin_init+0x32/0x40
[ 98.833801][ T6225] do_one_initcall+0x233/0x820
[ 98.838582][ T6225] do_initcall_level+0x137/0x1f0
[ 98.843512][ T6225] do_initcalls+0x69/0xd0
[ 98.847832][ T6225] kernel_init_freeable+0x3d9/0x570
[ 98.853022][ T6225] page last free pid 9 tgid 9 stack trace:
[ 98.858930][ T6225] __free_frozen_pages+0xc65/0xe60
[ 98.864134][ T6225] vfree+0x25a/0x400
[ 98.868023][ T6225] delayed_vfree_work+0x55/0x80
[ 98.873332][ T6225] process_scheduled_works+0xade/0x17b0
[ 98.879245][ T6225] worker_thread+0x8a0/0xda0
[ 98.883847][ T6225] kthread+0x711/0x8a0
[ 98.888126][ T6225] ret_from_fork+0x3fc/0x770
[ 98.892794][ T6225] ret_from_fork_asm+0x1a/0x30
[ 98.897781][ T6225]
[ 98.900185][ T6225] Memory state around the buggy address:
[ 98.905892][ T6225] ffff888034b84180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 98.913943][ T6225] ffff888034b84200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 98.922083][ T6225] >ffff888034b84280: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 98.930393][ T6225] ^
[ 98.936715][ T6225] ffff888034b84300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 98.944860][ T6225] ffff888034b84380: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 98.952996][ T6225] ==================================================================
[ 98.982222][ T6225] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 98.989586][ T6225] CPU: 0 UID: 0 PID: 6225 Comm: syz-executor.0 Not tainted 6.16.0-rc7-syzkaller-g89be9a83ccf1 #0 PREEMPT(full)
[ 99.002158][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 99.012862][ T6225] Call Trace:
[ 99.016167][ T6225]
[ 99.019301][ T6225] dump_stack_lvl+0x99/0x250
[ 99.024099][ T6225] ? __asan_memcpy+0x40/0x70
[ 99.028810][ T6225] ? __pfx_dump_stack_lvl+0x10/0x10
[ 99.034131][ T6225] ? __pfx__printk+0x10/0x10
[ 99.038881][ T6225] panic+0x2db/0x790
[ 99.042842][ T6225] ? __pfx_preempt_schedule+0x10/0x10
[ 99.048511][ T6225] ? __pfx_panic+0x10/0x10
[ 99.053166][ T6225] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 99.059183][ T6225] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 99.065861][ T6225] ? hfsplus_bnode_read+0xc0/0x2a0
[ 99.071011][ T6225] check_panic_on_warn+0x89/0xb0
[ 99.075980][ T6225] ? hfsplus_bnode_read+0xc0/0x2a0
[ 99.081133][ T6225] end_report+0x78/0x160
[ 99.085496][ T6225] kasan_report+0x129/0x150
[ 99.090024][ T6225] ? hfsplus_bnode_read+0xc0/0x2a0
[ 99.095255][ T6225] hfsplus_bnode_read+0xc0/0x2a0
[ 99.100211][ T6225] hfsplus_bnode_dump+0x300/0x450
[ 99.105250][ T6225] ? __pfx_hfsplus_bnode_dump+0x10/0x10
[ 99.110819][ T6225] ? hfsplus_bnode_write_u16+0x8b/0xd0
[ 99.116282][ T6225] ? hfsplus_bnode_move+0x393/0xb90
[ 99.121568][ T6225] ? __pfx___hfsplus_brec_find+0x10/0x10
[ 99.127377][ T6225] hfsplus_brec_remove+0x480/0x550
[ 99.132523][ T6225] __hfsplus_delete_attr+0x1d4/0x360
[ 99.138160][ T6225] ? __pfx___hfsplus_delete_attr+0x10/0x10
[ 99.144497][ T6225] ? hfsplus_find_init+0x8c/0x1d0
[ 99.149623][ T6225] hfsplus_delete_all_attrs+0x277/0x410
[ 99.155255][ T6225] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10
[ 99.161334][ T6225] ? rcu_is_watching+0x15/0xb0
[ 99.166127][ T6225] ? __mark_inode_dirty+0x8c5/0xdf0
[ 99.171457][ T6225] hfsplus_delete_cat+0x92c/0xd20
[ 99.176533][ T6225] ? __pfx_hfsplus_delete_cat+0x10/0x10
[ 99.182193][ T6225] ? __pfx___mutex_lock+0x10/0x10
[ 99.187315][ T6225] hfsplus_unlink+0x359/0x730
[ 99.192121][ T6225] ? __pfx_hfsplus_unlink+0x10/0x10
[ 99.197506][ T6225] ? down_write_nested+0x169/0x200
[ 99.202708][ T6225] ? __pfx_down_write_nested+0x10/0x10
[ 99.208596][ T6225] hfsplus_rename+0xcb/0x1c0
[ 99.213183][ T6225] ? __pfx_hfsplus_rename+0x10/0x10
[ 99.218479][ T6225] vfs_rename+0xb99/0xec0
[ 99.222810][ T6225] ? __pfx_vfs_rename+0x10/0x10
[ 99.227776][ T6225] ? d_alloc+0x144/0x190
[ 99.232016][ T6225] ? bpf_lsm_path_rename+0x9/0x20
[ 99.237269][ T6225] ? security_path_rename+0x17d/0x490
[ 99.242729][ T6225] do_renameat2+0x878/0xc50
[ 99.247508][ T6225] ? __pfx_do_renameat2+0x10/0x10
[ 99.252585][ T6225] ? getname_flags+0x1e5/0x540
[ 99.257353][ T6225] __x64_sys_renameat2+0xce/0xe0
[ 99.262650][ T6225] do_syscall_64+0xfa/0x3b0
[ 99.267234][ T6225] ? lockdep_hardirqs_on+0x9c/0x150
[ 99.272426][ T6225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.278570][ T6225] ? clear_bhb_loop+0x60/0xb0
[ 99.283328][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.289215][ T6225] RIP: 0033:0x7ffa6187dda9
[ 99.293626][ T6225] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 99.313408][ T6225] RSP: 002b:00007ffa6263b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[ 99.322437][ T6225] RAX: ffffffffffffffda RBX: 00007ffa619abf80 RCX: 00007ffa6187dda9
[ 99.330694][ T6225] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000005
[ 99.339398][ T6225] RBP: 00007ffa618ca47a R08: 0000000000000000 R09: 0000000000000000
[ 99.347636][ T6225] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000
[ 99.355898][ T6225] R13: 000000000000000b R14: 00007ffa619abf80 R15: 00007ffee7c1d128
[ 99.364053][ T6225]
[ 99.367679][ T6225] Kernel Offset: disabled
[ 99.372192][ T6225] Rebooting in 86400 seconds..