Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts.
2026/10/05 22:23:56 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 108.882575][ T4502] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 111.966433][ T4650] chnl_net:caif_netlink_parms(): no params data found
[ 112.040351][ T4650] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.049593][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.058380][ T4650] device bridge_slave_0 entered promiscuous mode
[ 112.069407][ T4650] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.078126][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.088023][ T4650] device bridge_slave_1 entered promiscuous mode
[ 112.120291][ T4650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.133983][ T4650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.167684][ T4650] team0: Port device team_slave_0 added
[ 112.178335][ T4650] team0: Port device team_slave_1 added
[ 112.206488][ T4650] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.213779][ T4650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.243343][ T4650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.257566][ T4650] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.266283][ T4650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.293943][ T4650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.336686][ T4650] device hsr_slave_0 entered promiscuous mode
[ 112.344120][ T4650] device hsr_slave_1 entered promiscuous mode
[ 113.022085][ T4650] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.034782][ T4650] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.068157][ T4650] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.079003][ T4650] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.212233][ T4650] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.280611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 113.295957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 113.311367][ T4650] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.331977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 113.342130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 113.351363][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.358567][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.376667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 113.387158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 113.397788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 113.408928][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.416155][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.425257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 113.447179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 113.456980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 113.467928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 113.478730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 113.488689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 113.519931][ T4650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 113.531626][ T4650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 113.547011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 113.557827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 113.566891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 113.577825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 113.586992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 113.596408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 113.754213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 113.763568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 113.790662][ T4650] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 113.813712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 113.824504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 113.847797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 113.858413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 113.868500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 113.878967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 113.891140][ T4650] device veth0_vlan entered promiscuous mode
[ 113.917938][ T4650] device veth1_vlan entered promiscuous mode
[ 113.928338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 113.989563][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 114.012303][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 114.029381][ T4650] device veth0_macvtap entered promiscuous mode
[ 114.077888][ T4650] device veth1_macvtap entered promiscuous mode
[ 114.107646][ T4650] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.118502][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 114.131191][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 114.149202][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 114.160940][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 114.178167][ T4650] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.201081][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 114.212847][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 114.227676][ T4650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.239028][ T4650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.258017][ T4650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.268869][ T4650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.730743][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.746119][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.766059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 114.810571][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.836701][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.846551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 116.649646][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/10/05 22:24:10 executed programs: 0
[ 117.678667][ T4823] chnl_net:caif_netlink_parms(): no params data found
[ 117.743593][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.751883][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.761267][ T4823] device bridge_slave_0 entered promiscuous mode
[ 117.771586][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.781707][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.791285][ T4823] device bridge_slave_1 entered promiscuous mode
[ 117.825783][ T4823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 117.838336][ T4823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 117.872558][ T4823] team0: Port device team_slave_0 added
[ 117.881929][ T4823] team0: Port device team_slave_1 added
[ 117.908685][ T4823] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 117.916598][ T4823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 117.949230][ T4823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 117.962485][ T4823] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 117.970095][ T4823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 117.997591][ T4823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.046948][ T4823] device hsr_slave_0 entered promiscuous mode
[ 118.058624][ T4823] device hsr_slave_1 entered promiscuous mode
[ 118.066442][ T4823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 118.078416][ T4823] Cannot create hsr debugfs directory
[ 118.502980][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.553174][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.624675][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.478546][ T4823] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 119.490141][ T4823] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 119.501142][ T4823] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 119.511917][ T4823] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 119.576389][ T4887] Bluetooth: hci0: command 0x0409 tx timeout
[ 119.648574][ T4823] 8021q: adding VLAN 0 to HW filter on device bond0
[ 119.692696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 119.704119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 119.718489][ T4823] 8021q: adding VLAN 0 to HW filter on device team0
[ 119.733282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 119.744665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 119.757820][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.765561][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.776279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 119.818552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 119.832182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 119.841701][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.849334][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.864647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 119.905478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 119.918808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 119.930553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 119.943782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 119.954196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 119.978173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 119.990251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 120.003190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 120.014711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 120.027614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 120.053525][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 120.193699][ T144] device hsr_slave_0 left promiscuous mode
[ 120.207638][ T144] device hsr_slave_1 left promiscuous mode
[ 120.219196][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 120.227798][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 120.239775][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 120.248465][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 120.261372][ T144] device bridge_slave_1 left promiscuous mode
[ 120.269230][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.281402][ T144] device bridge_slave_0 left promiscuous mode
[ 120.289020][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.315473][ T144] device veth1_macvtap left promiscuous mode
[ 120.321841][ T144] device veth0_macvtap left promiscuous mode
[ 120.331249][ T144] device veth1_vlan left promiscuous mode
[ 120.337285][ T144] device veth0_vlan left promiscuous mode
[ 120.528839][ T144] team0 (unregistering): Port device team_slave_1 removed
[ 120.545334][ T144] team0 (unregistering): Port device team_slave_0 removed
[ 120.559367][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.574557][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 120.643809][ T144] bond0 (unregistering): Released all slaves
[ 120.753998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 120.764679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 120.778892][ T4823] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 120.831811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 120.844107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 120.874005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 120.884340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 120.898160][ T4823] device veth0_vlan entered promiscuous mode
[ 120.910714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 120.920046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 120.940732][ T4823] device veth1_vlan entered promiscuous mode
[ 120.974672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 120.985529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 120.994529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 121.008000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 121.022281][ T4823] device veth0_macvtap entered promiscuous mode
[ 121.034834][ T4823] device veth1_macvtap entered promiscuous mode
[ 121.058445][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 121.066587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 121.076126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 121.086483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 121.097267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 121.119129][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 121.136172][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 121.155996][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 121.180181][ T4823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.196215][ T4823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.215064][ T4823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.224184][ T4823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.330895][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.362396][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.371985][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 121.407141][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.424943][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.433008][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 121.655205][ T4884] Bluetooth: hci0: command 0x041b tx timeout
[ 121.813909][ T4956] loop0: detected capacity change from 0 to 32768
[ 121.894187][ T4956] UFO tlock:0xffffc900028c2288
[ 121.910169][ T4956] ==================================================================
[ 121.918746][ T4956] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0x8ee/0x12c0
[ 121.926725][ T4956] Read of size 1 at addr ffff888070f53e00 by task syz.0.17/4956
[ 121.934641][ T4956]
[ 121.937557][ T4956] CPU: 1 PID: 4956 Comm: syz.0.17 Not tainted syzkaller #0
[ 121.944798][ T4956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 121.955054][ T4956] Call Trace:
[ 121.958519][ T4956]
[ 121.961518][ T4956] dump_stack_lvl+0x188/0x250
[ 121.966335][ T4956] ? show_regs_print_info+0x20/0x20
[ 121.971689][ T4956] ? load_image+0x410/0x410
[ 121.976248][ T4956] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 121.981785][ T4956] print_address_description+0x60/0x2d0
[ 121.987717][ T4956] ? dtInsertEntry+0x8ee/0x12c0
[ 121.992884][ T4956] kasan_report+0xdf/0x130
[ 121.997794][ T4956] ? dtInsertEntry+0x8ee/0x12c0
[ 122.002880][ T4956] dtInsertEntry+0x8ee/0x12c0
[ 122.007728][ T4956] dtInsert+0x992/0x57e0
[ 122.012069][ T4956] ? txLock+0x20d/0x1b20
[ 122.016384][ T4956] ? UniStrupr+0x2e0/0x2e0
[ 122.021175][ T4956] ? __rwlock_init+0x140/0x140
[ 122.026417][ T4956] ? do_raw_spin_unlock+0x11d/0x230
[ 122.031764][ T4956] ? txLock+0xed4/0x1b20
[ 122.036073][ T4956] ? dtInitRoot+0x220/0x660
[ 122.040983][ T4956] jfs_mkdir+0x764/0xb00
[ 122.045287][ T4956] ? jfs_symlink+0xfd0/0xfd0
[ 122.050131][ T4956] ? make_kgid+0x650/0x650
[ 122.054848][ T4956] ? apparmor_path_mkdir+0x1ac/0x230
[ 122.060313][ T4956] ? inode_permission+0xef/0x480
[ 122.065294][ T4956] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 122.070579][ T4956] ? security_inode_mkdir+0xb3/0x100
[ 122.076092][ T4956] vfs_mkdir+0x386/0x570
[ 122.080396][ T4956] do_mkdirat+0x1dd/0x5c0
[ 122.084959][ T4956] ? vfs_mkdir+0x570/0x570
[ 122.089645][ T4956] __x64_sys_mkdirat+0x85/0x90
[ 122.094549][ T4956] do_syscall_64+0x4c/0xa0
[ 122.099010][ T4956] ? clear_bhb_loop+0x30/0x80
[ 122.104084][ T4956] ? clear_bhb_loop+0x30/0x80
[ 122.109341][ T4956] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.115757][ T4956] RIP: 0033:0x7f78d0e15dd7
[ 122.120491][ T4956] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.143138][ T4956] RSP: 002b:00007f78d0479e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 122.152470][ T4956] RAX: ffffffffffffffda RBX: 00007f78d0479ee0 RCX: 00007f78d0e15dd7
[ 122.160772][ T4956] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
[ 122.169640][ T4956] RBP: 00002000000002c0 R08: 0000200000000080 R09: 0000000000000000
[ 122.178680][ T4956] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000000
[ 122.187931][ T4956] R13: 00007f78d0479ea0 R14: 0000000000000000 R15: 0000000000000000
[ 122.196143][ T4956]
[ 122.199349][ T4956]
[ 122.201864][ T4956] Allocated by task 0:
[ 122.206131][ T4956] (stack is not available)
[ 122.210942][ T4956]
[ 122.213300][ T4956] The buggy address belongs to the object at ffff888070f53d68
[ 122.213300][ T4956] which belongs to the cache vm_area_struct of size 200
[ 122.227829][ T4956] The buggy address is located 152 bytes inside of
[ 122.227829][ T4956] 200-byte region [ffff888070f53d68, ffff888070f53e30)
[ 122.241448][ T4956] The buggy address belongs to the page:
[ 122.247154][ T4956] page:ffffea0001c3d4c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70f53
[ 122.257472][ T4956] memcg:ffff88805bc03a01
[ 122.262078][ T4956] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 122.269994][ T4956] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888140007a00
[ 122.278796][ T4956] raw: 0000000000000000 00000000800f000f 00000001ffffffff ffff88805bc03a01
[ 122.287933][ T4956] page dumped because: kasan: bad access detected
[ 122.294894][ T4956] page_owner tracks the page as allocated
[ 122.300862][ T4956] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4961, ts 121739302013, free_ts 121688624446
[ 122.317993][ T4956] get_page_from_freelist+0x24f6/0x2670
[ 122.323697][ T4956] __alloc_pages+0x1ee/0x480
[ 122.328514][ T4956] new_slab+0xc0/0x4b0
[ 122.332643][ T4956] ___slab_alloc+0x807/0xdd0
[ 122.337372][ T4956] kmem_cache_alloc+0xf0/0x280
[ 122.342266][ T4956] copy_mm+0x8b6/0x13d0
[ 122.346465][ T4956] copy_process+0x17a7/0x3e70
[ 122.351383][ T4956] kernel_clone+0x23f/0x990
[ 122.356284][ T4956] __x64_sys_clone+0x19a/0x210
[ 122.361184][ T4956] do_syscall_64+0x4c/0xa0
[ 122.365731][ T4956] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.371746][ T4956] page last free stack trace:
[ 122.376721][ T4956] free_unref_page_prepare+0x637/0x6c0
[ 122.382410][ T4956] free_unref_page_list+0x119/0x830
[ 122.387843][ T4956] release_pages+0x185f/0x1bd0
[ 122.392652][ T4956] tlb_finish_mmu+0x1b4/0x370
[ 122.397485][ T4956] exit_mmap+0x3d0/0x640
[ 122.401993][ T4956] __mmput+0x115/0x390
[ 122.406523][ T4956] exit_mm+0x632/0x7b0
[ 122.410738][ T4956] do_exit+0x5b8/0x2110
[ 122.415098][ T4956] do_group_exit+0x12c/0x2f0
[ 122.420236][ T4956] __x64_sys_exit_group+0x3b/0x40
[ 122.425645][ T4956] do_syscall_64+0x4c/0xa0
[ 122.430310][ T4956] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.436330][ T4956]
[ 122.438765][ T4956] Memory state around the buggy address:
[ 122.444623][ T4956] ffff888070f53d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 122.453157][ T4956] ffff888070f53d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 122.461256][ T4956] >ffff888070f53e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 122.469968][ T4956] ^
[ 122.474413][ T4956] ffff888070f53e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 122.482969][ T4956] ffff888070f53f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 122.491617][ T4956] ==================================================================
[ 122.499919][ T4956] Disabling lock debugging due to kernel taint
[ 122.510859][ T4956] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 122.518208][ T4956] CPU: 1 PID: 4956 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 122.527572][ T4956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 122.537928][ T4956] Call Trace:
[ 122.541246][ T4956]
[ 122.544551][ T4956] dump_stack_lvl+0x188/0x250
[ 122.549288][ T4956] ? show_regs_print_info+0x20/0x20
[ 122.554664][ T4956] ? load_image+0x410/0x410
[ 122.559236][ T4956] panic+0x2f8/0x850
[ 122.563283][ T4956] ? bpf_jit_dump+0xd0/0xd0
[ 122.567918][ T4956] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 122.574022][ T4956] ? _raw_spin_unlock+0x40/0x40
[ 122.579208][ T4956] ? dtInsertEntry+0x8ee/0x12c0
[ 122.584855][ T4956] check_panic_on_warn+0x80/0xa0
[ 122.589933][ T4956] ? dtInsertEntry+0x8ee/0x12c0
[ 122.594920][ T4956] end_report+0x6d/0xf0
[ 122.599121][ T4956] kasan_report+0x102/0x130
[ 122.603848][ T4956] ? dtInsertEntry+0x8ee/0x12c0
[ 122.608935][ T4956] dtInsertEntry+0x8ee/0x12c0
[ 122.613782][ T4956] dtInsert+0x992/0x57e0
[ 122.618175][ T4956] ? txLock+0x20d/0x1b20
[ 122.622556][ T4956] ? UniStrupr+0x2e0/0x2e0
[ 122.627656][ T4956] ? __rwlock_init+0x140/0x140
[ 122.632645][ T4956] ? do_raw_spin_unlock+0x11d/0x230
[ 122.638685][ T4956] ? txLock+0xed4/0x1b20
[ 122.643462][ T4956] ? dtInitRoot+0x220/0x660
[ 122.648020][ T4956] jfs_mkdir+0x764/0xb00
[ 122.652404][ T4956] ? jfs_symlink+0xfd0/0xfd0
[ 122.657210][ T4956] ? make_kgid+0x650/0x650
[ 122.661925][ T4956] ? apparmor_path_mkdir+0x1ac/0x230
[ 122.667439][ T4956] ? inode_permission+0xef/0x480
[ 122.674095][ T4956] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 122.680698][ T4956] ? security_inode_mkdir+0xb3/0x100
[ 122.688805][ T4956] vfs_mkdir+0x386/0x570
[ 122.694875][ T4956] do_mkdirat+0x1dd/0x5c0
[ 122.700669][ T4956] ? vfs_mkdir+0x570/0x570
[ 122.705241][ T4956] __x64_sys_mkdirat+0x85/0x90
[ 122.711243][ T4956] do_syscall_64+0x4c/0xa0
[ 122.717331][ T4956] ? clear_bhb_loop+0x30/0x80
[ 122.723326][ T4956] ? clear_bhb_loop+0x30/0x80
[ 122.729563][ T4956] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.737188][ T4956] RIP: 0033:0x7f78d0e15dd7
[ 122.742004][ T4956] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.764489][ T4956] RSP: 002b:00007f78d0479e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 122.775169][ T4956] RAX: ffffffffffffffda RBX: 00007f78d0479ee0 RCX: 00007f78d0e15dd7
[ 122.784216][ T4956] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
[ 122.793359][ T4956] RBP: 00002000000002c0 R08: 0000200000000080 R09: 0000000000000000
[ 122.802668][ T4956] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000000
[ 122.811254][ T4956] R13: 00007f78d0479ea0 R14: 0000000000000000 R15: 0000000000000000
[ 122.820850][ T4956]
[ 122.824723][ T4956] Kernel Offset: disabled
[ 122.829492][ T4956] Rebooting in 86400 seconds..