Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. 1970/01/01 00:00:34 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:00:35 parsed 1 programs [ 39.057493][ T6528] cgroup: Unknown subsys name 'net' [ 39.162072][ T6528] cgroup: Unknown subsys name 'cpuset' [ 39.165675][ T6528] cgroup: Unknown subsys name 'rlimit' [ 39.371066][ T6528] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 50.722908][ T560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.722997][ T560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.738413][ T560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.738473][ T560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.786292][ T6540] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.583238][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 51.632618][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.634850][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.637065][ T6557] bridge_slave_0: entered allmulticast mode [ 51.639992][ T6557] bridge_slave_0: entered promiscuous mode [ 51.643819][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.646046][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.648170][ T6557] bridge_slave_1: entered allmulticast mode [ 51.650088][ T6557] bridge_slave_1: entered promiscuous mode [ 51.666949][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.668704][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.743444][ T6557] team0: Port device team_slave_0 added [ 51.749249][ T6557] team0: Port device team_slave_1 added [ 51.765385][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.765435][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.765485][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.766815][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.766843][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.766883][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.800322][ T6557] hsr_slave_0: entered promiscuous mode [ 51.801921][ T6557] hsr_slave_1: entered promiscuous mode [ 51.973730][ T6557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.980489][ T6557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.984935][ T6557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.988648][ T6557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.031905][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.041642][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.046793][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.046918][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.054427][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.054500][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.154956][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.175298][ T6557] veth0_vlan: entered promiscuous mode [ 52.178235][ T6557] veth1_vlan: entered promiscuous mode [ 52.193201][ T6557] veth0_macvtap: entered promiscuous mode [ 52.195449][ T6557] veth1_macvtap: entered promiscuous mode [ 52.204948][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.207057][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.213326][ T6557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.215874][ T6557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.218303][ T6557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.221435][ T6557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.581891][ T560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.662313][ T560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.741779][ T560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.841786][ T560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.096116][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.096728][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.098888][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.103505][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.105971][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:53 executed programs: 0 [ 54.389763][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.391384][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.391780][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.392424][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.392809][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.484391][ T6633] chnl_net:caif_netlink_parms(): no params data found [ 54.526159][ T6633] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.526233][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.526355][ T6633] bridge_slave_0: entered allmulticast mode [ 54.527200][ T6633] bridge_slave_0: entered promiscuous mode [ 54.528310][ T6633] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.528355][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.528487][ T6633] bridge_slave_1: entered allmulticast mode [ 54.530035][ T6633] bridge_slave_1: entered promiscuous mode [ 54.549594][ T6633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.551348][ T6633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.567163][ T6633] team0: Port device team_slave_0 added [ 54.569562][ T6633] team0: Port device team_slave_1 added [ 54.582791][ T6633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.582854][ T6633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.583181][ T6633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.584252][ T6633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.584277][ T6633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.584309][ T6633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.618163][ T6633] hsr_slave_0: entered promiscuous mode [ 54.618710][ T6633] hsr_slave_1: entered promiscuous mode [ 54.619069][ T6633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.620297][ T6633] Cannot create hsr debugfs directory [ 55.455762][ T560] bridge_slave_1: left allmulticast mode [ 55.455872][ T560] bridge_slave_1: left promiscuous mode [ 55.456275][ T560] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.467106][ T560] bridge_slave_0: left allmulticast mode [ 55.467162][ T560] bridge_slave_0: left promiscuous mode [ 55.467274][ T560] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.449847][ T6092] Bluetooth: hci0: command tx timeout [ 57.032955][ T560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.081935][ T560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.121055][ T560] bond0 (unregistering): Released all slaves [ 57.251528][ T560] hsr_slave_0: left promiscuous mode [ 57.253872][ T560] hsr_slave_1: left promiscuous mode [ 57.255961][ T560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.258262][ T560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.262970][ T560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.265201][ T560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.278688][ T560] veth1_macvtap: left promiscuous mode [ 57.282890][ T560] veth0_macvtap: left promiscuous mode [ 57.284636][ T560] veth1_vlan: left promiscuous mode [ 57.286256][ T560] veth0_vlan: left promiscuous mode [ 58.529636][ T6092] Bluetooth: hci0: command tx timeout [ 59.271208][ T560] team0 (unregistering): Port device team_slave_1 removed [ 59.430244][ T560] team0 (unregistering): Port device team_slave_0 removed [ 60.609837][ T6092] Bluetooth: hci0: command tx timeout [ 62.342739][ T6633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.347233][ T6633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.352726][ T6633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.361446][ T6633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.422243][ T6633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.427569][ T6633] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.440179][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.440265][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.441467][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.441517][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.689269][ T6092] Bluetooth: hci0: command tx timeout [ 62.900638][ T6633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.952175][ T6633] veth0_vlan: entered promiscuous mode [ 62.954929][ T6633] veth1_vlan: entered promiscuous mode [ 62.975958][ T6633] veth0_macvtap: entered promiscuous mode [ 62.977733][ T6633] veth1_macvtap: entered promiscuous mode [ 63.402564][ T6633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.404432][ T6633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.405867][ T6633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.405909][ T6633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.405940][ T6633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.405970][ T6633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.473483][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.473563][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.493982][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.494042][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.739391][ T6711] loop0: detected capacity change from 0 to 32768 [ 63.761162][ T6711] ================================================================== [ 63.761196][ T6711] BUG: KASAN: slab-out-of-bounds in dtReadFirst+0x408/0x7b8 [ 63.761219][ T6711] Read of size 4 at addr ffff0000e3e6c028 by task syz.0.16/6711 [ 63.761235][ T6711] [ 63.761246][ T6711] CPU: 1 UID: 0 PID: 6711 Comm: syz.0.16 Not tainted 6.16.0-rc5-syzkaller-gec4801305969 #0 PREEMPT [ 63.761259][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.761266][ T6711] Call trace: [ 63.761270][ T6711] show_stack+0x2c/0x3c (C) [ 63.761283][ T6711] __dump_stack+0x30/0x40 [ 63.761298][ T6711] dump_stack_lvl+0xd8/0x12c [ 63.761311][ T6711] print_address_description+0xa8/0x254 [ 63.761324][ T6711] print_report+0x68/0x84 [ 63.761336][ T6711] kasan_report+0xb0/0x110 [ 63.761348][ T6711] __asan_report_load4_noabort+0x20/0x2c [ 63.761360][ T6711] dtReadFirst+0x408/0x7b8 [ 63.761371][ T6711] jfs_readdir+0x548/0x3018 [ 63.761382][ T6711] wrap_directory_iterator+0x90/0xf0 [ 63.761396][ T6711] shared_jfs_readdir+0x30/0x40 [ 63.761409][ T6711] iterate_dir+0x458/0x5e0 [ 63.761421][ T6711] __arm64_sys_getdents64+0x110/0x2fc [ 63.761434][ T6711] invoke_syscall+0x98/0x2b8 [ 63.761444][ T6711] el0_svc_common+0x130/0x23c [ 63.761454][ T6711] do_el0_svc+0x48/0x58 [ 63.761464][ T6711] el0_svc+0x58/0x180 [ 63.761475][ T6711] el0t_64_sync_handler+0x84/0x12c [ 63.761486][ T6711] el0t_64_sync+0x198/0x19c [ 63.761499][ T6711] [ 63.761602][ T6711] Allocated by task 6711: [ 63.761614][ T6711] kasan_save_track+0x40/0x78 [ 63.761632][ T6711] kasan_save_alloc_info+0x44/0x54 [ 63.761647][ T6711] __kasan_slab_alloc+0x70/0x88 [ 63.761662][ T6711] kmem_cache_alloc_lru_noprof+0x23c/0x3ec [ 63.761677][ T6711] jfs_alloc_inode+0x2c/0x68 [ 63.761694][ T6711] alloc_inode+0x68/0x19c [ 63.761709][ T6711] new_inode+0x2c/0x130 [ 63.761724][ T6711] ialloc+0x54/0x78c [ 63.761739][ T6711] jfs_create+0x170/0x8c4 [ 63.761755][ T6711] path_openat+0x12d8/0x2c40 [ 63.761779][ T6711] do_filp_open+0x18c/0x36c [ 63.761794][ T6711] do_sys_openat2+0x11c/0x1b4 [ 63.761811][ T6711] __arm64_sys_openat+0x120/0x158 [ 63.761827][ T6711] invoke_syscall+0x98/0x2b8 [ 63.761841][ T6711] el0_svc_common+0x130/0x23c [ 63.761862][ T6711] do_el0_svc+0x48/0x58 [ 63.761876][ T6711] el0_svc+0x58/0x180 [ 63.761890][ T6711] el0t_64_sync_handler+0x84/0x12c [ 63.761905][ T6711] el0t_64_sync+0x198/0x19c [ 63.761920][ T6711] [ 63.761928][ T6711] The buggy address belongs to the object at ffff0000e3e6b750 [ 63.761928][ T6711] which belongs to the cache jfs_ip of size 2232 [ 63.761944][ T6711] The buggy address is located 32 bytes to the right of [ 63.761944][ T6711] allocated 2232-byte region [ffff0000e3e6b750, ffff0000e3e6c008) [ 63.761962][ T6711] [ 63.761971][ T6711] The buggy address belongs to the physical page: [ 63.761982][ T6711] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x123e68 [ 63.761999][ T6711] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 63.762014][ T6711] memcg:ffff0000d151df01 [ 63.762025][ T6711] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 63.762042][ T6711] page_type: f5(slab) [ 63.762058][ T6711] raw: 05ffc00000000040 ffff0000c47e08c0 dead000000000122 0000000000000000 [ 63.762075][ T6711] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff0000d151df01 [ 63.762091][ T6711] head: 05ffc00000000040 ffff0000c47e08c0 dead000000000122 0000000000000000 [ 63.762107][ T6711] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff0000d151df01 [ 63.762123][ T6711] head: 05ffc00000000003 fffffdffc38f9a01 00000000ffffffff 00000000ffffffff [ 63.762139][ T6711] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 63.762151][ T6711] page dumped because: kasan: bad access detected [ 63.762161][ T6711] [ 63.762170][ T6711] Memory state around the buggy address: [ 63.762182][ T6711] ffff0000e3e6bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 63.762195][ T6711] ffff0000e3e6bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 63.762209][ T6711] >ffff0000e3e6c000: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.762221][ T6711] ^ [ 63.762233][ T6711] ffff0000e3e6c080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.762246][ T6711] ffff0000e3e6c100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 63.762258][ T6711] ================================================================== [ 63.762290][ T6711] Disabling lock debugging due to kernel taint [ 63.762311][ T6711] ERROR: (device loop0): dtReadFirst: btstack overrun [ 63.762311][ T6711] [ 63.765632][ T6711] ERROR: (device loop0): remounting filesystem as read-only [ 63.765657][ T6711] btstack dump: [ 63.765670][ T6711] bn = 0, index = 0 [ 63.765686][ T6711] bn = 0, index = 0 [ 63.765701][ T6711] bn = 0, index = 0 [ 63.765715][ T6711] bn = 0, index = 0 [ 63.765730][ T6711] bn = 0, index = 0 [ 63.765745][ T6711] bn = 0, index = 0 [ 63.765760][ T6711] bn = 0, index = 0 [ 63.765786][ T6711] bn = 0, index = 0