Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. 2025/09/18 23:31:54 parsed 1 programs [ 89.257449][ T5796] cgroup: Unknown subsys name 'net' [ 89.430082][ T5796] cgroup: Unknown subsys name 'rlimit' [ 91.183925][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.212466][ T1187] cfg80211: failed to load regulatory.db [ 94.008009][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 94.084511][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.091806][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.099046][ T5818] bridge_slave_0: entered allmulticast mode [ 94.106921][ T5818] bridge_slave_0: entered promiscuous mode [ 94.117322][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.125356][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.133948][ T5818] bridge_slave_1: entered allmulticast mode [ 94.141812][ T5818] bridge_slave_1: entered promiscuous mode [ 94.202372][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.214849][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.258134][ T5818] team0: Port device team_slave_0 added [ 94.266287][ T5818] team0: Port device team_slave_1 added [ 94.298454][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.305582][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.331558][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.350754][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.357818][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.384226][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.428757][ T5818] hsr_slave_0: entered promiscuous mode [ 94.436321][ T5818] hsr_slave_1: entered promiscuous mode [ 94.616646][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.629102][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.639168][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.660892][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.748746][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.784035][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.799326][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.806737][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.833405][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.840560][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.894754][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.075283][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.119665][ T5818] veth0_vlan: entered promiscuous mode [ 95.133958][ T5818] veth1_vlan: entered promiscuous mode [ 95.167435][ T5818] veth0_macvtap: entered promiscuous mode [ 95.177642][ T5818] veth1_macvtap: entered promiscuous mode [ 95.200258][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.216089][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.228666][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.238653][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.247487][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.256350][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.420997][ T3447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.354644][ T5881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.364083][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.372365][ T5881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.380926][ T5881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.389089][ T5881] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.396590][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.660442][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.674512][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.705838][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.714365][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/18 23:32:06 executed programs: 0 [ 98.156334][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.164709][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.174559][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.183058][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.191413][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.199145][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.231277][ T3447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.395092][ T5895] chnl_net:caif_netlink_parms(): no params data found [ 98.468574][ T5895] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.475966][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.483529][ T5895] bridge_slave_0: entered allmulticast mode [ 98.490554][ T5895] bridge_slave_0: entered promiscuous mode [ 98.499053][ T5895] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.507146][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.514630][ T5895] bridge_slave_1: entered allmulticast mode [ 98.522813][ T5895] bridge_slave_1: entered promiscuous mode [ 98.555280][ T5895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.567546][ T5895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.604222][ T5895] team0: Port device team_slave_0 added [ 98.616080][ T5895] team0: Port device team_slave_1 added [ 98.644619][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.651686][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.678425][ T5895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.696216][ T5895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.703542][ T5895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.729677][ T5895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.776750][ T5895] hsr_slave_0: entered promiscuous mode [ 98.783404][ T5895] hsr_slave_1: entered promiscuous mode [ 98.789646][ T5895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.799698][ T5895] Cannot create hsr debugfs directory [ 100.282728][ T5881] Bluetooth: hci0: command tx timeout [ 100.854157][ T3447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.937044][ T3447] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.849603][ T5895] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.881980][ T5895] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.896030][ T5895] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.909151][ T5895] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.943120][ T3447] hsr_slave_0: left promiscuous mode [ 101.949493][ T3447] hsr_slave_1: left promiscuous mode [ 101.962932][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.970446][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.986402][ T3447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.994400][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.002844][ T3447] bridge_slave_1: left allmulticast mode [ 102.008556][ T3447] bridge_slave_1: left promiscuous mode [ 102.015357][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.028392][ T3447] bridge_slave_0: left allmulticast mode [ 102.035725][ T3447] bridge_slave_0: left promiscuous mode [ 102.041852][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.073744][ T3447] veth1_macvtap: left promiscuous mode [ 102.079825][ T3447] veth0_macvtap: left promiscuous mode [ 102.085712][ T3447] veth1_vlan: left promiscuous mode [ 102.091563][ T3447] veth0_vlan: left promiscuous mode [ 102.361374][ T5881] Bluetooth: hci0: command tx timeout [ 102.521934][ T3447] team0 (unregistering): Port device team_slave_1 removed [ 102.559840][ T3447] team0 (unregistering): Port device team_slave_0 removed [ 102.597360][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.633264][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.976183][ T3447] bond0 (unregistering): Released all slaves [ 103.191009][ T5895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.218629][ T5895] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.248935][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.256173][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.309558][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.316775][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.430045][ T5895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.629057][ T5895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.744630][ T5895] veth0_vlan: entered promiscuous mode [ 103.759430][ T5895] veth1_vlan: entered promiscuous mode [ 103.810561][ T5895] veth0_macvtap: entered promiscuous mode [ 103.823263][ T5895] veth1_macvtap: entered promiscuous mode [ 103.861073][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.876617][ T5895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.893477][ T5895] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.902609][ T5895] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.912447][ T5895] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.922616][ T5895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.986791][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.996236][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.027114][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.035142][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.088333][ T5942] syz.0.17[5942]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.410289][ T5942] loop0: detected capacity change from 0 to 32768 [ 104.448328][ T5881] Bluetooth: hci0: command tx timeout [ 104.458326][ T5942] ================================================================== [ 104.466532][ T5942] BUG: KASAN: slab-out-of-bounds in dtSearch+0x167a/0x21b0 [ 104.473877][ T5942] Read of size 1 at addr ffff888060e44058 by task syz.0.17/5942 [ 104.481619][ T5942] [ 104.483990][ T5942] CPU: 0 PID: 5942 Comm: syz.0.17 Not tainted syzkaller #0 [ 104.491217][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.501293][ T5942] Call Trace: [ 104.504581][ T5942] [ 104.507527][ T5942] dump_stack_lvl+0x16c/0x230 [ 104.512229][ T5942] ? __lock_acquire+0x7c80/0x7c80 [ 104.517268][ T5942] ? show_regs_print_info+0x20/0x20 [ 104.522479][ T5942] ? load_image+0x3b0/0x3b0 [ 104.526991][ T5942] ? __virt_addr_valid+0x469/0x540 [ 104.532132][ T5942] print_report+0xac/0x220 [ 104.536573][ T5942] ? dtSearch+0x167a/0x21b0 [ 104.541114][ T5942] kasan_report+0x117/0x150 [ 104.545876][ T5942] ? dtSearch+0x167a/0x21b0 [ 104.550421][ T5942] dtSearch+0x167a/0x21b0 [ 104.554791][ T5942] jfs_lookup+0x156/0x380 [ 104.559141][ T5942] ? jfs_get_parent+0xb0/0xb0 [ 104.563854][ T5942] ? apparmor_path_rmdir+0x2f0/0x2f0 [ 104.569157][ T5942] ? make_vfsuid+0x51/0xb0 [ 104.573594][ T5942] ? inode_permission+0xf3/0x480 [ 104.578559][ T5942] ? bpf_lsm_inode_create+0x9/0x10 [ 104.583693][ T5942] ? security_inode_create+0xb7/0x100 [ 104.589099][ T5942] ? jfs_get_parent+0xb0/0xb0 [ 104.593817][ T5942] path_openat+0x10b8/0x3190 [ 104.598442][ T5942] ? do_filp_open+0x3d0/0x3d0 [ 104.603150][ T5942] do_filp_open+0x1c5/0x3d0 [ 104.607679][ T5942] ? vfs_tmpfile+0x490/0x490 [ 104.612304][ T5942] ? _raw_spin_unlock+0x28/0x40 [ 104.617167][ T5942] ? alloc_fd+0x58f/0x630 [ 104.621513][ T5942] do_sys_openat2+0x12c/0x1c0 [ 104.626206][ T5942] ? do_sys_open+0xe0/0xe0 [ 104.630656][ T5942] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 104.636649][ T5942] ? lock_chain_count+0x20/0x20 [ 104.641602][ T5942] __x64_sys_creat+0x90/0xb0 [ 104.646206][ T5942] do_syscall_64+0x55/0xb0 [ 104.650638][ T5942] ? clear_bhb_loop+0x40/0x90 [ 104.655327][ T5942] ? clear_bhb_loop+0x40/0x90 [ 104.660020][ T5942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.666023][ T5942] RIP: 0033:0x7f6e7bd8eba9 [ 104.670448][ T5942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.690176][ T5942] RSP: 002b:00007ffe662564b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 104.698605][ T5942] RAX: ffffffffffffffda RBX: 00007f6e7bfd5fa0 RCX: 00007f6e7bd8eba9 [ 104.706586][ T5942] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 104.714564][ T5942] RBP: 00007f6e7be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 104.722541][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.730520][ T5942] R13: 00007f6e7bfd5fa0 R14: 00007f6e7bfd5fa0 R15: 0000000000000002 [ 104.738772][ T5942] [ 104.741806][ T5942] [ 104.744144][ T5942] Allocated by task 5942: [ 104.748479][ T5942] kasan_set_track+0x4e/0x70 [ 104.753080][ T5942] __kasan_slab_alloc+0x6c/0x80 [ 104.757942][ T5942] slab_post_alloc_hook+0x6e/0x4d0 [ 104.763067][ T5942] kmem_cache_alloc_lru+0x115/0x2e0 [ 104.768379][ T5942] jfs_alloc_inode+0x28/0x60 [ 104.772981][ T5942] new_inode_pseudo+0x63/0x1d0 [ 104.777754][ T5942] new_inode+0x22/0x1b0 [ 104.781913][ T5942] ialloc+0x4c/0x950 [ 104.785822][ T5942] jfs_create+0x18b/0xa40 [ 104.790158][ T5942] path_openat+0x1277/0x3190 [ 104.794763][ T5942] do_filp_open+0x1c5/0x3d0 [ 104.799281][ T5942] do_sys_openat2+0x12c/0x1c0 [ 104.803969][ T5942] __x64_sys_openat+0x139/0x160 [ 104.808835][ T5942] do_syscall_64+0x55/0xb0 [ 104.813273][ T5942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.819185][ T5942] [ 104.821517][ T5942] The buggy address belongs to the object at ffff888060e43780 [ 104.821517][ T5942] which belongs to the cache jfs_ip of size 2240 [ 104.835232][ T5942] The buggy address is located 24 bytes to the right of [ 104.835232][ T5942] allocated 2240-byte region [ffff888060e43780, ffff888060e44040) [ 104.849908][ T5942] [ 104.852241][ T5942] The buggy address belongs to the physical page: [ 104.858664][ T5942] page:ffffea0001839000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60e40 [ 104.868842][ T5942] head:ffffea0001839000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 104.877780][ T5942] memcg:ffff88801abbd101 [ 104.882022][ T5942] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 104.890018][ T5942] page_type: 0xffffffff() [ 104.894360][ T5942] raw: 00fff00000000840 ffff888142efe140 dead000000000122 0000000000000000 [ 104.902952][ T5942] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88801abbd101 [ 104.911547][ T5942] page dumped because: kasan: bad access detected [ 104.917972][ T5942] page_owner tracks the page as allocated [ 104.923690][ T5942] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5942, tgid 5942 (syz.0.17), ts 104423326193, free_ts 26538889830 [ 104.947148][ T5942] post_alloc_hook+0x1cd/0x210 [ 104.952024][ T5942] get_page_from_freelist+0x195c/0x19f0 [ 104.957586][ T5942] __alloc_pages+0x1e3/0x460 [ 104.962220][ T5942] alloc_slab_page+0x5d/0x170 [ 104.966920][ T5942] new_slab+0x87/0x2e0 [ 104.971091][ T5942] ___slab_alloc+0xc6d/0x1300 [ 104.975787][ T5942] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 104.981002][ T5942] jfs_alloc_inode+0x28/0x60 [ 104.985599][ T5942] new_inode_pseudo+0x63/0x1d0 [ 104.990366][ T5942] new_inode+0x22/0x1b0 [ 104.994526][ T5942] jfs_fill_super+0x396/0xac0 [ 104.999214][ T5942] mount_bdev+0x22b/0x2d0 [ 105.003551][ T5942] legacy_get_tree+0xea/0x180 [ 105.008243][ T5942] vfs_get_tree+0x8c/0x280 [ 105.012663][ T5942] do_new_mount+0x24b/0xa40 [ 105.017172][ T5942] __se_sys_mount+0x2da/0x3c0 [ 105.021857][ T5942] page last free stack trace: [ 105.026532][ T5942] free_unref_page_prepare+0x7ce/0x8e0 [ 105.032008][ T5942] free_unref_page+0x32/0x2e0 [ 105.036699][ T5942] free_contig_range+0xa1/0x160 [ 105.041557][ T5942] destroy_args+0x80/0x850 [ 105.045996][ T5942] debug_vm_pgtable+0x3cc/0x410 [ 105.050855][ T5942] do_one_initcall+0x1fd/0x750 [ 105.055631][ T5942] do_initcall_level+0x137/0x1f0 [ 105.060576][ T5942] do_initcalls+0x69/0xd0 [ 105.064915][ T5942] kernel_init_freeable+0x3d2/0x570 [ 105.070124][ T5942] kernel_init+0x1d/0x1c0 [ 105.074458][ T5942] ret_from_fork+0x48/0x80 [ 105.078883][ T5942] ret_from_fork_asm+0x11/0x20 [ 105.083750][ T5942] [ 105.086080][ T5942] Memory state around the buggy address: [ 105.091810][ T5942] ffff888060e43f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.099877][ T5942] ffff888060e43f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.107943][ T5942] >ffff888060e44000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 105.116007][ T5942] ^ [ 105.122959][ T5942] ffff888060e44080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.131043][ T5942] ffff888060e44100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.139121][ T5942] ================================================================== [ 105.181250][ T5942] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.188511][ T5942] CPU: 1 PID: 5942 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.195747][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.205843][ T5942] Call Trace: [ 105.209156][ T5942] [ 105.212112][ T5942] dump_stack_lvl+0x16c/0x230 [ 105.216836][ T5942] ? show_regs_print_info+0x20/0x20 [ 105.222165][ T5942] ? load_image+0x3b0/0x3b0 [ 105.226707][ T5942] panic+0x2c0/0x710 [ 105.230652][ T5942] ? bpf_jit_dump+0xd0/0xd0 [ 105.235196][ T5942] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 105.241123][ T5942] ? _raw_spin_unlock+0x40/0x40 [ 105.246000][ T5942] ? print_memory_metadata+0x314/0x400 [ 105.251509][ T5942] ? dtSearch+0x167a/0x21b0 [ 105.256050][ T5942] check_panic_on_warn+0x84/0xa0 [ 105.261044][ T5942] ? dtSearch+0x167a/0x21b0 [ 105.265597][ T5942] end_report+0x6f/0x140 [ 105.269875][ T5942] kasan_report+0x128/0x150 [ 105.274417][ T5942] ? dtSearch+0x167a/0x21b0 [ 105.278967][ T5942] dtSearch+0x167a/0x21b0 [ 105.283351][ T5942] jfs_lookup+0x156/0x380 [ 105.287721][ T5942] ? jfs_get_parent+0xb0/0xb0 [ 105.292441][ T5942] ? apparmor_path_rmdir+0x2f0/0x2f0 [ 105.297745][ T5942] ? make_vfsuid+0x51/0xb0 [ 105.302279][ T5942] ? inode_permission+0xf3/0x480 [ 105.307247][ T5942] ? bpf_lsm_inode_create+0x9/0x10 [ 105.312455][ T5942] ? security_inode_create+0xb7/0x100 [ 105.317838][ T5942] ? jfs_get_parent+0xb0/0xb0 [ 105.322529][ T5942] path_openat+0x10b8/0x3190 [ 105.327149][ T5942] ? do_filp_open+0x3d0/0x3d0 [ 105.331863][ T5942] do_filp_open+0x1c5/0x3d0 [ 105.336397][ T5942] ? vfs_tmpfile+0x490/0x490 [ 105.341110][ T5942] ? _raw_spin_unlock+0x28/0x40 [ 105.345990][ T5942] ? alloc_fd+0x58f/0x630 [ 105.350362][ T5942] do_sys_openat2+0x12c/0x1c0 [ 105.355062][ T5942] ? do_sys_open+0xe0/0xe0 [ 105.359510][ T5942] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 105.365502][ T5942] ? lock_chain_count+0x20/0x20 [ 105.370390][ T5942] __x64_sys_creat+0x90/0xb0 [ 105.375002][ T5942] do_syscall_64+0x55/0xb0 [ 105.379431][ T5942] ? clear_bhb_loop+0x40/0x90 [ 105.384117][ T5942] ? clear_bhb_loop+0x40/0x90 [ 105.388803][ T5942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.394719][ T5942] RIP: 0033:0x7f6e7bd8eba9 [ 105.399150][ T5942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.418779][ T5942] RSP: 002b:00007ffe662564b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 105.427228][ T5942] RAX: ffffffffffffffda RBX: 00007f6e7bfd5fa0 RCX: 00007f6e7bd8eba9 [ 105.435295][ T5942] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 105.443278][ T5942] RBP: 00007f6e7be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 105.451255][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.459238][ T5942] R13: 00007f6e7bfd5fa0 R14: 00007f6e7bfd5fa0 R15: 0000000000000002 [ 105.467271][ T5942] [ 105.470614][ T5942] Kernel Offset: disabled [ 105.474947][ T5942] Rebooting in 86400 seconds..