Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts.
2026/04/06 17:53:39 parsed 1 programs
[ 84.972776][ T4270] cgroup: Unknown subsys name 'net'
[ 85.107095][ T4270] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 86.729853][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 88.954748][ T4287] chnl_net:caif_netlink_parms(): no params data found
[ 89.018506][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.027199][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.036511][ T4287] device bridge_slave_0 entered promiscuous mode
[ 89.046752][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.054499][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.063376][ T4287] device bridge_slave_1 entered promiscuous mode
[ 89.090230][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.102158][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.129281][ T4287] team0: Port device team_slave_0 added
[ 89.137386][ T4287] team0: Port device team_slave_1 added
[ 89.157835][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.165437][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.194253][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.209727][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.217297][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.245997][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.281192][ T4287] device hsr_slave_0 entered promiscuous mode
[ 89.288743][ T4287] device hsr_slave_1 entered promiscuous mode
[ 89.438839][ T4287] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 89.452681][ T4287] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.466515][ T4287] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 89.479668][ T4287] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 89.515690][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.523387][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.532140][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.539898][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.616853][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.633888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 89.645790][ T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.657074][ T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.666211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 89.682812][ T4287] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.699138][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 89.709534][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.717967][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.734460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 89.744323][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.753336][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.778846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 89.791352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 89.806340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 89.826072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 89.840429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 89.857122][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 90.098055][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 90.106345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 90.122050][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.142190][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 90.153249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 90.182091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 90.193270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 90.204132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 90.213171][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 90.223777][ T4287] device veth0_vlan entered promiscuous mode
[ 90.244372][ T4287] device veth1_vlan entered promiscuous mode
[ 90.277193][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 90.301149][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 90.310830][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 90.321785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 90.334944][ T4287] device veth0_macvtap entered promiscuous mode
[ 90.348517][ T4287] device veth1_macvtap entered promiscuous mode
[ 90.367740][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.376360][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 90.385497][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 90.394445][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 90.404163][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 90.415955][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.425029][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 90.434520][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 90.446568][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.457689][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.466799][ T4287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.476800][ T4287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.615987][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.632926][ T4310] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 90.642304][ T4310] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 90.651799][ T4310] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 90.660384][ T4310] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 90.668527][ T4310] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 90.676622][ T4310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 90.926815][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.943039][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 90.958044][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 90.984597][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 90.998135][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.016117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 92.201834][ T129] cfg80211: failed to load regulatory.db
[ 92.742244][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/04/06 17:53:51 executed programs: 0
[ 93.975247][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.984286][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.993813][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.002101][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.011719][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 94.019112][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.148847][ T4364] chnl_net:caif_netlink_parms(): no params data found
[ 94.201841][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.209643][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.219513][ T4364] device bridge_slave_0 entered promiscuous mode
[ 94.228442][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.236131][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.244685][ T4364] device bridge_slave_1 entered promiscuous mode
[ 94.269598][ T4364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.282357][ T4364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.308209][ T4364] team0: Port device team_slave_0 added
[ 94.316918][ T4364] team0: Port device team_slave_1 added
[ 94.339102][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.347147][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.376210][ T4364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.389243][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.396737][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.424451][ T4364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.458800][ T4364] device hsr_slave_0 entered promiscuous mode
[ 94.466373][ T4364] device hsr_slave_1 entered promiscuous mode
[ 94.473807][ T4364] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 94.482431][ T4364] Cannot create hsr debugfs directory
[ 95.168744][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.228555][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.040835][ T4311] Bluetooth: hci0: command 0x0409 tx timeout
[ 96.087630][ T4364] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.105248][ T4364] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.126913][ T11] device hsr_slave_0 left promiscuous mode
[ 96.134331][ T11] device hsr_slave_1 left promiscuous mode
[ 96.144238][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 96.152461][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 96.164874][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 96.173679][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 96.185142][ T11] device bridge_slave_1 left promiscuous mode
[ 96.193849][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.211994][ T11] device bridge_slave_0 left promiscuous mode
[ 96.218953][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.251646][ T11] device veth1_macvtap left promiscuous mode
[ 96.258220][ T11] device veth0_macvtap left promiscuous mode
[ 96.266283][ T11] device veth1_vlan left promiscuous mode
[ 96.273998][ T11] device veth0_vlan left promiscuous mode
[ 96.852489][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 96.887753][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 96.920079][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 96.953791][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 97.171942][ T11] bond0 (unregistering): Released all slaves
[ 97.270076][ T4364] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.281315][ T4364] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.369063][ T4364] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.393934][ T4364] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.406643][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 97.415554][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 97.427211][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 97.437310][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 97.449429][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.456772][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.466660][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 97.494499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 97.505476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 97.514518][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.521724][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.530195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 97.543744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 97.564134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 97.575721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 97.585487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 97.611797][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 97.626757][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 97.636434][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 97.645700][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 97.662723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 97.672922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 97.686921][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 97.938834][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 97.950495][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 97.974743][ T4364] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.007850][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 98.017493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 98.038910][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 98.052813][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 98.071592][ T4364] device veth0_vlan entered promiscuous mode
[ 98.087824][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 98.096270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 98.114716][ T4364] device veth1_vlan entered promiscuous mode
[ 98.130678][ T4311] Bluetooth: hci0: command 0x041b tx timeout
[ 98.157509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 98.167125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 98.178497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 98.187758][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 98.201681][ T4364] device veth0_macvtap entered promiscuous mode
[ 98.228860][ T4364] device veth1_macvtap entered promiscuous mode
[ 98.259712][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.268776][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 98.279161][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 98.288404][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 98.299395][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 98.313369][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.321662][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 98.332052][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 98.344505][ T4364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.354370][ T4364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.364680][ T4364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.374706][ T4364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.438755][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.454233][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.463831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 98.486505][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.495770][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.504327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 98.797451][ T4426] loop0: detected capacity change from 0 to 32768
[ 98.836263][ T4426] ==================================================================
[ 98.844989][ T4426] BUG: KASAN: slab-out-of-bounds in dtSearch+0x1650/0x2050
[ 98.852355][ T4426] Read of size 1 at addr ffff88806e8c4054 by task syz.0.17/4426
[ 98.860411][ T4426]
[ 98.862888][ T4426] CPU: 0 PID: 4426 Comm: syz.0.17 Not tainted syzkaller #0
[ 98.870410][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 98.880996][ T4426] Call Trace:
[ 98.884338][ T4426]
[ 98.887317][ T4426] dump_stack_lvl+0x188/0x24e
[ 98.892185][ T4426] ? read_lock_is_recursive+0x10/0x10
[ 98.898065][ T4426] ? show_regs_print_info+0x12/0x12
[ 98.903602][ T4426] ? load_image+0x400/0x400
[ 98.908199][ T4426] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 98.913784][ T4426] ? __virt_addr_valid+0x188/0x540
[ 98.919031][ T4426] ? __virt_addr_valid+0x465/0x540
[ 98.924628][ T4426] ? dtSearch+0x1650/0x2050
[ 98.929163][ T4426] print_report+0xa8/0x210
[ 98.933636][ T4426] kasan_report+0x10b/0x140
[ 98.938403][ T4426] ? dtSearch+0x1650/0x2050
[ 98.943664][ T4426] dtSearch+0x1650/0x2050
[ 98.948061][ T4426] jfs_lookup+0x1ad/0x420
[ 98.952514][ T4426] ? jfs_get_parent+0xa0/0xa0
[ 98.957264][ T4426] ? d_alloc_parallel+0x13f2/0x1530
[ 98.962590][ T4426] ? lockdep_softirqs_off+0x430/0x430
[ 98.968186][ T4426] ? d_hash_and_lookup+0x1b0/0x1b0
[ 98.973847][ T4426] ? __init_waitqueue_head+0xa5/0x150
[ 98.979488][ T4426] __lookup_slow+0x29d/0x3f0
[ 98.984298][ T4426] ? lookup_one_len+0x2d0/0x2d0
[ 98.989388][ T4426] ? try_to_unlazy+0x34c/0x5a0
[ 98.994199][ T4426] ? down_read+0x1a8/0x2d0
[ 98.999653][ T4426] lookup_slow+0x53/0x70
[ 99.004256][ T4426] link_path_walk+0x945/0xe70
[ 99.009280][ T4426] ? handle_lookup_down+0x130/0x130
[ 99.014956][ T4426] __filename_parentat+0x226/0x650
[ 99.020656][ T4426] ? verify_lock_unused+0x140/0x140
[ 99.026278][ T4426] ? vfs_path_parent_lookup+0x50/0x50
[ 99.031888][ T4426] ? __x64_sys_mkdirat+0x78/0x90
[ 99.037498][ T4426] ? __virt_addr_valid+0x188/0x540
[ 99.042661][ T4426] filename_create+0xd5/0x470
[ 99.047567][ T4426] ? __might_fault+0xa6/0x120
[ 99.052735][ T4426] ? kern_path_create+0x50/0x50
[ 99.057818][ T4426] ? __virt_addr_valid+0x188/0x540
[ 99.063268][ T4426] ? __virt_addr_valid+0x465/0x540
[ 99.069022][ T4426] do_mkdirat+0xa5/0x440
[ 99.073313][ T4426] ? vfs_mkdir+0x570/0x570
[ 99.077864][ T4426] __x64_sys_mkdirat+0x85/0x90
[ 99.082941][ T4426] do_syscall_64+0x4c/0xa0
[ 99.087924][ T4426] ? clear_bhb_loop+0x60/0xb0
[ 99.092726][ T4426] ? clear_bhb_loop+0x60/0xb0
[ 99.097698][ T4426] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 99.103900][ T4426] RIP: 0033:0x7f046259b687
[ 99.108392][ T4426] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 99.128860][ T4426] RSP: 002b:00007ffe5f862ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 99.137964][ T4426] RAX: ffffffffffffffda RBX: 00007ffe5f862f70 RCX: 00007f046259b687
[ 99.146615][ T4426] RDX: 00000000000001ff RSI: 0000200000000200 RDI: 00000000ffffff9c
[ 99.155156][ T4426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 99.163430][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000200
[ 99.171616][ T4426] R13: 00007ffe5f862f30 R14: 0000000000000000 R15: 0000000000000000
[ 99.180352][ T4426]
[ 99.183765][ T4426]
[ 99.186433][ T4426] Allocated by task 4426:
[ 99.191169][ T4426] kasan_set_track+0x4b/0x70
[ 99.196081][ T4426] __kasan_slab_alloc+0x6b/0x80
[ 99.201249][ T4426] slab_post_alloc_hook+0x4b/0x480
[ 99.206766][ T4426] kmem_cache_alloc_lru+0x11a/0x2e0
[ 99.212291][ T4426] jfs_alloc_inode+0x24/0x60
[ 99.217113][ T4426] new_inode_pseudo+0x5f/0x1c0
[ 99.222554][ T4426] new_inode+0x25/0x1c0
[ 99.227021][ T4426] ialloc+0x48/0x950
[ 99.231230][ T4426] jfs_create+0x1d2/0xad0
[ 99.235680][ T4426] path_openat+0x1181/0x2ee0
[ 99.240842][ T4426] do_filp_open+0x1f1/0x430
[ 99.245486][ T4426] do_sys_openat2+0x150/0x4b0
[ 99.250574][ T4426] __x64_sys_openat+0x135/0x160
[ 99.255902][ T4426] do_syscall_64+0x4c/0xa0
[ 99.260788][ T4426] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 99.267267][ T4426]
[ 99.269723][ T4426] The buggy address belongs to the object at ffff88806e8c3780
[ 99.269723][ T4426] which belongs to the cache jfs_ip of size 2240
[ 99.284074][ T4426] The buggy address is located 20 bytes to the right of
[ 99.284074][ T4426] 2240-byte region [ffff88806e8c3780, ffff88806e8c4040)
[ 99.298929][ T4426]
[ 99.301373][ T4426] The buggy address belongs to the physical page:
[ 99.308001][ T4426] page:ffffea0001ba3000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6e8c0
[ 99.318643][ T4426] head:ffffea0001ba3000 order:3 compound_mapcount:0 compound_pincount:0
[ 99.327295][ T4426] memcg:ffff88802e1ae601
[ 99.332110][ T4426] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 99.340969][ T4426] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888145ea2000
[ 99.349946][ T4426] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88802e1ae601
[ 99.359172][ T4426] page dumped because: kasan: bad access detected
[ 99.366174][ T4426] page_owner tracks the page as allocated
[ 99.372264][ T4426] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4426, tgid 4426 (syz.0.17), ts 98807957899, free_ts 28349733226
[ 99.397083][ T4426] post_alloc_hook+0x173/0x1a0
[ 99.402246][ T4426] get_page_from_freelist+0x1a1e/0x1ab0
[ 99.408089][ T4426] __alloc_pages+0x1ec/0x4f0
[ 99.412840][ T4426] alloc_slab_page+0x5d/0x160
[ 99.417592][ T4426] new_slab+0x87/0x2c0
[ 99.422027][ T4426] ___slab_alloc+0xbc6/0x1240
[ 99.427385][ T4426] kmem_cache_alloc_lru+0x1ae/0x2e0
[ 99.433076][ T4426] jfs_alloc_inode+0x24/0x60
[ 99.437805][ T4426] new_inode_pseudo+0x5f/0x1c0
[ 99.443857][ T4426] new_inode+0x25/0x1c0
[ 99.448138][ T4426] jfs_fill_super+0x398/0xad0
[ 99.453111][ T4426] mount_bdev+0x287/0x3c0
[ 99.457756][ T4426] legacy_get_tree+0xe6/0x180
[ 99.462758][ T4426] vfs_get_tree+0x88/0x270
[ 99.467491][ T4426] do_new_mount+0x24a/0xa40
[ 99.472044][ T4426] __se_sys_mount+0x2e3/0x3d0
[ 99.476778][ T4426] page last free stack trace:
[ 99.481479][ T4426] free_unref_page_prepare+0x8b4/0x9a0
[ 99.487106][ T4426] free_unref_page+0x2e/0x3f0
[ 99.491982][ T4426] free_contig_range+0x9d/0x150
[ 99.496947][ T4426] destroy_args+0xf0/0xa0a
[ 99.501509][ T4426] debug_vm_pgtable+0x33c/0x38e
[ 99.506681][ T4426] do_one_initcall+0x26a/0x840
[ 99.511591][ T4426] do_initcall_level+0x137/0x1e4
[ 99.516908][ T4426] do_initcalls+0x4b/0x8a
[ 99.521643][ T4426] kernel_init_freeable+0x415/0x5be
[ 99.527240][ T4426] kernel_init+0x19/0x1b0
[ 99.531691][ T4426] ret_from_fork+0x1f/0x30
[ 99.536412][ T4426]
[ 99.538929][ T4426] Memory state around the buggy address:
[ 99.544754][ T4426] ffff88806e8c3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 99.553018][ T4426] ffff88806e8c3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 99.561289][ T4426] >ffff88806e8c4000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 99.569849][ T4426] ^
[ 99.577159][ T4426] ffff88806e8c4080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 99.585350][ T4426] ffff88806e8c4100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 99.593714][ T4426] ==================================================================
[ 99.634504][ T4426] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 99.642225][ T4426] CPU: 1 PID: 4426 Comm: syz.0.17 Not tainted syzkaller #0
[ 99.650091][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 99.660741][ T4426] Call Trace:
[ 99.664451][ T4426]
[ 99.667787][ T4426] dump_stack_lvl+0x188/0x24e
[ 99.673157][ T4426] ? memcpy+0x3c/0x60
[ 99.677465][ T4426] ? show_regs_print_info+0x12/0x12
[ 99.683092][ T4426] ? load_image+0x400/0x400
[ 99.687950][ T4426] panic+0x2e5/0x730
[ 99.692107][ T4426] ? bpf_jit_dump+0xd0/0xd0
[ 99.697222][ T4426] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 99.703437][ T4426] ? _raw_spin_unlock+0x40/0x40
[ 99.708623][ T4426] check_panic_on_warn+0x80/0xa0
[ 99.714239][ T4426] ? dtSearch+0x1650/0x2050
[ 99.720358][ T4426] end_report+0x66/0x110
[ 99.724971][ T4426] kasan_report+0x118/0x140
[ 99.729726][ T4426] ? dtSearch+0x1650/0x2050
[ 99.734719][ T4426] dtSearch+0x1650/0x2050
[ 99.739119][ T4426] jfs_lookup+0x1ad/0x420
[ 99.743693][ T4426] ? jfs_get_parent+0xa0/0xa0
[ 99.748683][ T4426] ? d_alloc_parallel+0x13f2/0x1530
[ 99.754007][ T4426] ? lockdep_softirqs_off+0x430/0x430
[ 99.759694][ T4426] ? d_hash_and_lookup+0x1b0/0x1b0
[ 99.765116][ T4426] ? __init_waitqueue_head+0xa5/0x150
[ 99.770858][ T4426] __lookup_slow+0x29d/0x3f0
[ 99.775612][ T4426] ? lookup_one_len+0x2d0/0x2d0
[ 99.780686][ T4426] ? try_to_unlazy+0x34c/0x5a0
[ 99.785613][ T4426] ? down_read+0x1a8/0x2d0
[ 99.790254][ T4426] lookup_slow+0x53/0x70
[ 99.794784][ T4426] link_path_walk+0x945/0xe70
[ 99.799581][ T4426] ? handle_lookup_down+0x130/0x130
[ 99.804934][ T4426] __filename_parentat+0x226/0x650
[ 99.810733][ T4426] ? verify_lock_unused+0x140/0x140
[ 99.816632][ T4426] ? vfs_path_parent_lookup+0x50/0x50
[ 99.822133][ T4426] ? __x64_sys_mkdirat+0x78/0x90
[ 99.827115][ T4426] ? __virt_addr_valid+0x188/0x540
[ 99.832267][ T4426] filename_create+0xd5/0x470
[ 99.837164][ T4426] ? __might_fault+0xa6/0x120
[ 99.842061][ T4426] ? kern_path_create+0x50/0x50
[ 99.847032][ T4426] ? __virt_addr_valid+0x188/0x540
[ 99.852371][ T4426] ? __virt_addr_valid+0x465/0x540
[ 99.857521][ T4426] do_mkdirat+0xa5/0x440
[ 99.861906][ T4426] ? vfs_mkdir+0x570/0x570
[ 99.866907][ T4426] __x64_sys_mkdirat+0x85/0x90
[ 99.871900][ T4426] do_syscall_64+0x4c/0xa0
[ 99.876558][ T4426] ? clear_bhb_loop+0x60/0xb0
[ 99.881379][ T4426] ? clear_bhb_loop+0x60/0xb0
[ 99.886433][ T4426] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 99.893059][ T4426] RIP: 0033:0x7f046259b687
[ 99.897613][ T4426] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 99.917862][ T4426] RSP: 002b:00007ffe5f862ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 99.926624][ T4426] RAX: ffffffffffffffda RBX: 00007ffe5f862f70 RCX: 00007f046259b687
[ 99.934800][ T4426] RDX: 00000000000001ff RSI: 0000200000000200 RDI: 00000000ffffff9c
[ 99.942879][ T4426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 99.951235][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000200
[ 99.959350][ T4426] R13: 00007ffe5f862f30 R14: 0000000000000000 R15: 0000000000000000
[ 99.967636][ T4426]
[ 99.971612][ T4426] Kernel Offset: disabled
[ 99.975959][ T4426] Rebooting in 86400 seconds..