[ 92.273145][ T10] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts.
2025/10/12 23:43:04 parsed 1 programs
[ 99.463059][ T5807] cgroup: Unknown subsys name 'net'
[ 99.735402][ T5807] cgroup: Unknown subsys name 'cpuset'
[ 99.799130][ T5807] cgroup: Unknown subsys name 'rlimit'
[ 101.847001][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 106.677513][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 106.684829][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 106.686154][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 106.687801][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 106.692799][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 107.351075][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.351098][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.464242][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.464266][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.377480][ T5887] chnl_net:caif_netlink_parms(): no params data found
[ 112.809263][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.810624][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.810806][ T5887] bridge_slave_0: entered allmulticast mode
[ 112.812998][ T5887] bridge_slave_0: entered promiscuous mode
[ 112.837261][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.837421][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.837665][ T5887] bridge_slave_1: entered allmulticast mode
[ 112.842634][ T5887] bridge_slave_1: entered promiscuous mode
[ 113.026422][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.032009][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.182571][ T5887] team0: Port device team_slave_0 added
[ 113.185316][ T5887] team0: Port device team_slave_1 added
[ 113.321122][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.321136][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.321155][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.324635][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.324652][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.324678][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.526744][ T5887] hsr_slave_0: entered promiscuous mode
[ 113.528091][ T5887] hsr_slave_1: entered promiscuous mode
[ 113.910440][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.958740][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.984003][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 114.023090][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 114.381244][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.404342][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.423157][ T68] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.423765][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.441072][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.442954][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.704722][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.766118][ T5887] veth0_vlan: entered promiscuous mode
[ 114.779333][ T5887] veth1_vlan: entered promiscuous mode
[ 114.815056][ T5887] veth0_macvtap: entered promiscuous mode
[ 114.823732][ T5887] veth1_macvtap: entered promiscuous mode
[ 114.843916][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.860614][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.873981][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.876367][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.876423][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.876468][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 115.683773][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.910885][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/10/12 23:43:25 executed programs: 0
[ 116.419817][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 116.421723][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 116.423365][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 116.427598][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 116.429202][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 116.632117][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.900238][ T5912] chnl_net:caif_netlink_parms(): no params data found
[ 117.233479][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.330325][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.330458][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.330608][ T5912] bridge_slave_0: entered allmulticast mode
[ 117.332525][ T5912] bridge_slave_0: entered promiscuous mode
[ 117.335096][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.335246][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.335386][ T5912] bridge_slave_1: entered allmulticast mode
[ 117.337304][ T5912] bridge_slave_1: entered promiscuous mode
[ 117.513337][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 117.516706][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 117.692106][ T5912] team0: Port device team_slave_0 added
[ 117.697497][ T5912] team0: Port device team_slave_1 added
[ 117.874480][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 117.874498][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 117.874525][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 117.877392][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 117.877409][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 117.877436][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.057705][ T5912] hsr_slave_0: entered promiscuous mode
[ 118.059615][ T5912] hsr_slave_1: entered promiscuous mode
[ 118.061201][ T5912] debugfs: 'hsr0' already exists in 'hsr'
[ 118.061326][ T5912] Cannot create hsr debugfs directory
[ 118.510595][ T5119] Bluetooth: hci0: command tx timeout
[ 118.710686][ T12] bridge_slave_1: left allmulticast mode
[ 118.710781][ T12] bridge_slave_1: left promiscuous mode
[ 118.712501][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.799689][ T12] bridge_slave_0: left allmulticast mode
[ 118.799714][ T12] bridge_slave_0: left promiscuous mode
[ 118.799925][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.519344][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 120.579213][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.589298][ T5119] Bluetooth: hci0: command tx timeout
[ 120.605729][ T12] bond0 (unregistering): Released all slaves
[ 120.958584][ T12] hsr_slave_0: left promiscuous mode
[ 120.978573][ T12] hsr_slave_1: left promiscuous mode
[ 120.979781][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 120.979871][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 121.031090][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 121.031124][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 121.142219][ T12] veth1_macvtap: left promiscuous mode
[ 121.143256][ T12] veth0_macvtap: left promiscuous mode
[ 121.143570][ T12] veth1_vlan: left promiscuous mode
[ 121.143905][ T12] veth0_vlan: left promiscuous mode
[ 122.678619][ T5119] Bluetooth: hci0: command tx timeout
[ 123.109184][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 123.289167][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 124.758607][ T5119] Bluetooth: hci0: command tx timeout
[ 126.116143][ T5912] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 126.154393][ T5912] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 126.208184][ T5912] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 126.254715][ T5912] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 126.461393][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0
[ 126.503824][ T5912] 8021q: adding VLAN 0 to HW filter on device team0
[ 126.670932][ T68] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.672063][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 126.708113][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.708271][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.137206][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.221591][ T5912] veth0_vlan: entered promiscuous mode
[ 127.235004][ T5912] veth1_vlan: entered promiscuous mode
[ 127.285619][ T5912] veth0_macvtap: entered promiscuous mode
[ 127.292849][ T5912] veth1_macvtap: entered promiscuous mode
[ 127.322970][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.342080][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.361019][ T1180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.362005][ T1180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.362294][ T1180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.363714][ T1180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.550472][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.550516][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.605673][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.605695][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/10/12 23:43:36 executed programs: 2
[ 127.992036][ T5988] loop0: detected capacity change from 0 to 32768
[ 128.052864][ T5988]
[ 128.052864][ T5988] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 128.052864][ T5988]
[ 128.082062][ T5988] read_mapping_page failed!
[ 128.082369][ T5988] ERROR: (device loop0): txCommit:
[ 128.082369][ T5988]
[ 128.100369][ T5988] read_mapping_page failed!
[ 128.100474][ T5988] ERROR: (device loop0): txCommit:
[ 128.100474][ T5988]
[ 128.119578][ T5988] ==================================================================
[ 128.119597][ T5988] BUG: KASAN: slab-out-of-bounds in dtSplitPage+0x12c6/0x3b20
[ 128.119638][ T5988] Read of size 1 at addr ffff8880572dc3e5 by task syz.0.17/5988
[ 128.119656][ T5988]
[ 128.119681][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.119704][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 128.119726][ T5988] Call Trace:
[ 128.119737][ T5988]
[ 128.119747][ T5988] dump_stack_lvl+0x189/0x250
[ 128.119775][ T5988] ? __virt_addr_valid+0x1c8/0x5c0
[ 128.119800][ T5988] ? rcu_is_watching+0x15/0xb0
[ 128.119828][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.119854][ T5988] ? rcu_is_watching+0x15/0xb0
[ 128.119881][ T5988] ? lock_release+0x4b/0x3e0
[ 128.119903][ T5988] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 128.119939][ T5988] ? __virt_addr_valid+0x1c8/0x5c0
[ 128.119965][ T5988] ? __virt_addr_valid+0x4a5/0x5c0
[ 128.119991][ T5988] print_report+0xca/0x240
[ 128.120023][ T5988] ? dtSplitPage+0x12c6/0x3b20
[ 128.120053][ T5988] kasan_report+0x118/0x150
[ 128.120079][ T5988] ? dtSplitPage+0x12c6/0x3b20
[ 128.120114][ T5988] dtSplitPage+0x12c6/0x3b20
[ 128.120145][ T5988] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.120184][ T5988] ? rt_mutex_slowunlock+0x493/0x8a0
[ 128.120205][ T5988] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.120237][ T5988] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 128.120288][ T5988] dtInsert+0x109b/0x5f40
[ 128.120325][ T5988] ? rt_mutex_slowunlock+0x493/0x8a0
[ 128.120355][ T5988] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 128.120388][ T5988] ? rt_spin_unlock+0x161/0x200
[ 128.120415][ T5988] ? __pfx_dtInsert+0x10/0x10
[ 128.120441][ T5988] ? txLock+0xaf3/0x1cb0
[ 128.120487][ T5988] ? dtInitRoot+0x22a/0x670
[ 128.120518][ T5988] jfs_mkdir+0x6ec/0xa70
[ 128.120541][ T5988] ? __pfx_jfs_mkdir+0x10/0x10
[ 128.120574][ T5988] ? generic_permission+0x2e5/0x690
[ 128.120605][ T5988] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 128.120630][ T5988] vfs_mkdir+0x306/0x510
[ 128.120665][ T5988] do_mkdirat+0x247/0x590
[ 128.120697][ T5988] ? __pfx_do_mkdirat+0x10/0x10
[ 128.120730][ T5988] ? getname_flags+0x1e5/0x540
[ 128.120757][ T5988] __x64_sys_mkdirat+0x87/0xa0
[ 128.120790][ T5988] do_syscall_64+0xfa/0xfa0
[ 128.120822][ T5988] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.120855][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.120877][ T5988] ? clear_bhb_loop+0x60/0xb0
[ 128.120901][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.120922][ T5988] RIP: 0033:0x7f12f0fceec9
[ 128.120946][ T5988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.120964][ T5988] RSP: 002b:00007ffc05926068 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 128.121000][ T5988] RAX: ffffffffffffffda RBX: 00007f12f1225fa0 RCX: 00007f12f0fceec9
[ 128.121016][ T5988] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 128.121032][ T5988] RBP: 00007f12f1051f91 R08: 0000000000000000 R09: 0000000000000000
[ 128.121045][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 128.121058][ T5988] R13: 00007f12f1225fa0 R14: 00007f12f1225fa0 R15: 0000000000000003
[ 128.121083][ T5988]
[ 128.121091][ T5988]
[ 128.121100][ T5988] Allocated by task 5988:
[ 128.121110][ T5988] kasan_save_track+0x3e/0x80
[ 128.121128][ T5988] __kasan_slab_alloc+0x6c/0x80
[ 128.121146][ T5988] kmem_cache_alloc_lru_noprof+0x188/0x6b0
[ 128.121176][ T5988] jfs_alloc_inode+0x28/0x70
[ 128.121199][ T5988] alloc_inode+0x6a/0x1b0
[ 128.121215][ T5988] iget_locked+0x106/0x580
[ 128.121235][ T5988] jfs_iget+0x24/0x470
[ 128.121260][ T5988] jfs_lookup+0x1c5/0x380
[ 128.121288][ T5988] __lookup_slow+0x29d/0x3d0
[ 128.121311][ T5988] lookup_slow+0x53/0x70
[ 128.121333][ T5988] walk_component+0x2d2/0x400
[ 128.121354][ T5988] path_lookupat+0x163/0x430
[ 128.121375][ T5988] filename_lookup+0x212/0x570
[ 128.121397][ T5988] user_path_at+0x3a/0x60
[ 128.121421][ T5988] __se_sys_chdir+0x91/0x280
[ 128.121439][ T5988] do_syscall_64+0xfa/0xfa0
[ 128.121474][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.121493][ T5988]
[ 128.121499][ T5988] The buggy address belongs to the object at ffff8880572dba80
[ 128.121499][ T5988] which belongs to the cache jfs_ip of size 2368
[ 128.121517][ T5988] The buggy address is located 37 bytes to the right of
[ 128.121517][ T5988] allocated 2368-byte region [ffff8880572dba80, ffff8880572dc3c0)
[ 128.121538][ T5988]
[ 128.121543][ T5988] The buggy address belongs to the physical page:
[ 128.121561][ T5988] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x572d8
[ 128.121580][ T5988] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 128.121596][ T5988] memcg:ffff88803ec5da01
[ 128.121606][ T5988] flags: 0x80000000000040(head|node=0|zone=1)
[ 128.121627][ T5988] page_type: f5(slab)
[ 128.121645][ T5988] raw: 0080000000000040 ffff88801e7718c0 dead000000000122 0000000000000000
[ 128.121663][ T5988] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff88803ec5da01
[ 128.121682][ T5988] head: 0080000000000040 ffff88801e7718c0 dead000000000122 0000000000000000
[ 128.121700][ T5988] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff88803ec5da01
[ 128.121718][ T5988] head: 0080000000000003 ffffea00015cb601 00000000ffffffff 00000000ffffffff
[ 128.121735][ T5988] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 128.121746][ T5988] page dumped because: kasan: bad access detected
[ 128.121760][ T5988] page_owner tracks the page as allocated
[ 128.121767][ T5988] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5988, tgid 5988 (syz.0.17), ts 127999506717, free_ts 108717735119
[ 128.121804][ T5988] post_alloc_hook+0x240/0x2a0
[ 128.121823][ T5988] get_page_from_freelist+0x28c0/0x2960
[ 128.121847][ T5988] __alloc_frozen_pages_noprof+0x181/0x370
[ 128.121870][ T5988] alloc_pages_mpol+0xd1/0x380
[ 128.121890][ T5988] allocate_slab+0x96/0x3a0
[ 128.121915][ T5988] ___slab_alloc+0xb12/0x13f0
[ 128.121938][ T5988] __slab_alloc+0xc6/0x1f0
[ 128.121960][ T5988] kmem_cache_alloc_lru_noprof+0xf0/0x6b0
[ 128.121991][ T5988] jfs_alloc_inode+0x28/0x70
[ 128.122015][ T5988] alloc_inode+0x6a/0x1b0
[ 128.122031][ T5988] new_inode+0x22/0x170
[ 128.122049][ T5988] jfs_fill_super+0x569/0xd80
[ 128.122073][ T5988] get_tree_bdev_flags+0x40e/0x4d0
[ 128.122090][ T5988] vfs_get_tree+0x92/0x2b0
[ 128.122105][ T5988] do_new_mount+0x302/0xa10
[ 128.122123][ T5988] __se_sys_mount+0x313/0x410
[ 128.122142][ T5988] page last free pid 5853 tgid 5853 stack trace:
[ 128.122153][ T5988] __free_frozen_pages+0xfb6/0x1140
[ 128.122174][ T5988] vfree+0x2ad/0x470
[ 128.122188][ T5988] kcov_close+0x2e/0x60
[ 128.122205][ T5988] __fput+0x45b/0xa80
[ 128.122228][ T5988] task_work_run+0x1d4/0x260
[ 128.122253][ T5988] do_exit+0x6b5/0x2300
[ 128.122276][ T5988] do_group_exit+0x21c/0x2d0
[ 128.122299][ T5988] get_signal+0x125d/0x1310
[ 128.122326][ T5988] arch_do_signal_or_restart+0xa0/0x790
[ 128.122352][ T5988] exit_to_user_mode_loop+0x72/0x130
[ 128.122370][ T5988] do_syscall_64+0x2bd/0xfa0
[ 128.122397][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.122416][ T5988]
[ 128.122421][ T5988] Memory state around the buggy address:
[ 128.122433][ T5988] ffff8880572dc280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 128.122447][ T5988] ffff8880572dc300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 128.122468][ T5988] >ffff8880572dc380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 128.122479][ T5988] ^
[ 128.122491][ T5988] ffff8880572dc400: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[ 128.122505][ T5988] ffff8880572dc480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 128.122516][ T5988] ==================================================================
[ 128.122538][ T5988] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 128.122554][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 128.122577][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 128.122590][ T5988] Call Trace:
[ 128.122598][ T5988]
[ 128.122607][ T5988] dump_stack_lvl+0x99/0x250
[ 128.122634][ T5988] ? __asan_memcpy+0x40/0x70
[ 128.122663][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10
[ 128.122689][ T5988] ? __pfx__printk+0x10/0x10
[ 128.122722][ T5988] vpanic+0x237/0x6d0
[ 128.122744][ T5988] ? __pfx_vpanic+0x10/0x10
[ 128.122769][ T5988] panic+0xb9/0xc0
[ 128.122788][ T5988] ? __pfx_panic+0x10/0x10
[ 128.122806][ T5988] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 128.122840][ T5988] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 128.122877][ T5988] ? is_module_address+0x17/0xf0
[ 128.122909][ T5988] ? dtSplitPage+0x12c6/0x3b20
[ 128.122941][ T5988] check_panic_on_warn+0x89/0xb0
[ 128.122969][ T5988] ? dtSplitPage+0x12c6/0x3b20
[ 128.122999][ T5988] end_report+0x78/0x160
[ 128.123020][ T5988] kasan_report+0x129/0x150
[ 128.123044][ T5988] ? dtSplitPage+0x12c6/0x3b20
[ 128.123078][ T5988] dtSplitPage+0x12c6/0x3b20
[ 128.123109][ T5988] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.123149][ T5988] ? rt_mutex_slowunlock+0x493/0x8a0
[ 128.123172][ T5988] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.123204][ T5988] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 128.123256][ T5988] dtInsert+0x109b/0x5f40
[ 128.123293][ T5988] ? rt_mutex_slowunlock+0x493/0x8a0
[ 128.123323][ T5988] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 128.123355][ T5988] ? rt_spin_unlock+0x161/0x200
[ 128.123383][ T5988] ? __pfx_dtInsert+0x10/0x10
[ 128.123409][ T5988] ? txLock+0xaf3/0x1cb0
[ 128.123448][ T5988] ? dtInitRoot+0x22a/0x670
[ 128.123486][ T5988] jfs_mkdir+0x6ec/0xa70
[ 128.123510][ T5988] ? __pfx_jfs_mkdir+0x10/0x10
[ 128.123544][ T5988] ? generic_permission+0x2e5/0x690
[ 128.123574][ T5988] ? bpf_lsm_inode_mkdir+0x9/0x20
[ 128.123598][ T5988] vfs_mkdir+0x306/0x510
[ 128.123632][ T5988] do_mkdirat+0x247/0x590
[ 128.123666][ T5988] ? __pfx_do_mkdirat+0x10/0x10
[ 128.123698][ T5988] ? getname_flags+0x1e5/0x540
[ 128.123725][ T5988] __x64_sys_mkdirat+0x87/0xa0
[ 128.123757][ T5988] do_syscall_64+0xfa/0xfa0
[ 128.123787][ T5988] ? lockdep_hardirqs_on+0x9c/0x150
[ 128.123819][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.123840][ T5988] ? clear_bhb_loop+0x60/0xb0
[ 128.123865][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.123887][ T5988] RIP: 0033:0x7f12f0fceec9
[ 128.123905][ T5988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.123923][ T5988] RSP: 002b:00007ffc05926068 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 128.123945][ T5988] RAX: ffffffffffffffda RBX: 00007f12f1225fa0 RCX: 00007f12f0fceec9
[ 128.123962][ T5988] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 128.123977][ T5988] RBP: 00007f12f1051f91 R08: 0000000000000000 R09: 0000000000000000
[ 128.123990][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 128.124003][ T5988] R13: 00007f12f1225fa0 R14: 00007f12f1225fa0 R15: 0000000000000003
[ 128.124028][ T5988]
[ 128.124356][ T5988] Kernel Offset: disabled