Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. 2026/01/29 21:59:04 parsed 1 programs syzkaller login: [ 52.979328][ T4189] cgroup: Unknown subsys name 'net' [ 53.137961][ T4189] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.368551][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.078891][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.090998][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.108658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.124512][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.132422][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.141562][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.439642][ T154] ODEBUG: Out of memory. ODEBUG disabled [ 57.839950][ T4269] syz-executor (4269) used greatest stack depth: 21112 bytes left [ 57.883976][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 57.939511][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.947258][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.955066][ T4273] device bridge_slave_0 entered promiscuous mode [ 57.963949][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.971063][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.979469][ T4273] device bridge_slave_1 entered promiscuous mode [ 58.008394][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.019271][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.039211][ T4273] team0: Port device team_slave_0 added [ 58.064331][ T4273] team0: Port device team_slave_1 added [ 58.078929][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.085973][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.111968][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.124480][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.131723][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.157626][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.193089][ T4273] device hsr_slave_0 entered promiscuous mode [ 58.199730][ T4273] device hsr_slave_1 entered promiscuous mode [ 58.285350][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.296186][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.305085][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.315074][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.371681][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.384657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.392446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.406389][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.427573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.436949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.446387][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.453593][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.462265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.474928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.484014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.492452][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.499836][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.514292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.523141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.547147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.556275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.565351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.576348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.585533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.601308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.611613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.636227][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.718144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.726438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.738716][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.782927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.800125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.809415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.817516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.830361][ T4273] device veth0_vlan entered promiscuous mode [ 58.843375][ T4273] device veth1_vlan entered promiscuous mode [ 58.865684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.873894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.882180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.894803][ T4273] device veth0_macvtap entered promiscuous mode [ 58.907067][ T4273] device veth1_macvtap entered promiscuous mode [ 58.924276][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.931993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.943941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.952514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.966336][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.975883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.985336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.998416][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.008099][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.018248][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.027318][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/29 21:59:12 executed programs: 0 [ 59.738578][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 59.796989][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.804308][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.811930][ T4298] device bridge_slave_0 entered promiscuous mode [ 59.820755][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.828364][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.836712][ T4298] device bridge_slave_1 entered promiscuous mode [ 59.858660][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.871163][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.895687][ T4298] team0: Port device team_slave_0 added [ 59.903550][ T4298] team0: Port device team_slave_1 added [ 59.923039][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.930006][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.956114][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.970184][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.977252][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.003640][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.037769][ T4298] device hsr_slave_0 entered promiscuous mode [ 60.044594][ T4298] device hsr_slave_1 entered promiscuous mode [ 60.051082][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.059023][ T4298] Cannot create hsr debugfs directory [ 60.137798][ T4298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.703216][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 63.087925][ T4298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.783377][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 64.377199][ T4298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.437627][ T4298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.627816][ T4298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.636806][ T4298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.646320][ T4298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.663393][ T4298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.706827][ T154] device hsr_slave_0 left promiscuous mode [ 64.715101][ T154] device hsr_slave_1 left promiscuous mode [ 64.721822][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.730040][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.738912][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.746428][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.754155][ T154] device bridge_slave_1 left promiscuous mode [ 64.761068][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.772393][ T154] device bridge_slave_0 left promiscuous mode [ 64.779558][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.795661][ T154] device veth1_macvtap left promiscuous mode [ 64.801827][ T154] device veth0_macvtap left promiscuous mode [ 64.808073][ T154] device veth1_vlan left promiscuous mode [ 64.814132][ T154] device veth0_vlan left promiscuous mode [ 64.917321][ T154] team0 (unregistering): Port device team_slave_1 removed [ 64.928946][ T154] team0 (unregistering): Port device team_slave_0 removed [ 64.943861][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.956765][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.997862][ T154] bond0 (unregistering): Released all slaves [ 65.042794][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.054775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.062498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.071222][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.082078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.091301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.099762][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.106814][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.115623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.128970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.138251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.147007][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.154124][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.163682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.175580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.185285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.194999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.203987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.214127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.222592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.234996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.245858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.266629][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.275483][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.286584][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.362524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.370401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.383902][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.399572][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.408402][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.427094][ T4298] device veth0_vlan entered promiscuous mode [ 65.435032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.443732][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.452394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.460736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.472099][ T4298] device veth1_vlan entered promiscuous mode [ 65.493364][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.501808][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.510367][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.520424][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.532228][ T4298] device veth0_macvtap entered promiscuous mode [ 65.543604][ T4298] device veth1_macvtap entered promiscuous mode [ 65.561681][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.569482][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.579434][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.588035][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.597801][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.609103][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.618837][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.628272][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.638740][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.648527][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.658567][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.667623][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.726156][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.737899][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.754442][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.768158][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.778333][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.788777][ T1475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.842085][ T4324] loop0: detected capacity change from 0 to 2048 [ 65.863157][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 65.884874][ T4324] ======================================================= [ 65.884874][ T4324] WARNING: The mand mount option has been deprecated and [ 65.884874][ T4324] and is ignored by this kernel. Remove the mand [ 65.884874][ T4324] option from the mount to silence this warning. [ 65.884874][ T4324] ======================================================= [ 65.978038][ T4324] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 66.005407][ T4324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.879229][ T4324] ================================================================== [ 66.887421][ T4324] BUG: KASAN: null-ptr-deref in udf_bread+0x2db/0x5b0 [ 66.894186][ T4324] Write of size 8 at addr 0000000000000000 by task syz.0.17/4324 [ 66.901880][ T4324] [ 66.904198][ T4324] CPU: 0 PID: 4324 Comm: syz.0.17 Not tainted syzkaller #0 [ 66.911368][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.921406][ T4324] Call Trace: [ 66.924670][ T4324] [ 66.927588][ T4324] dump_stack_lvl+0x188/0x250 [ 66.932247][ T4324] ? udf_bread+0x2db/0x5b0 [ 66.936645][ T4324] ? show_regs_print_info+0x20/0x20 [ 66.941826][ T4324] ? load_image+0x400/0x400 [ 66.946314][ T4324] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 66.951759][ T4324] ? udf_bread+0x2db/0x5b0 [ 66.956155][ T4324] kasan_report+0xd5/0x130 [ 66.960553][ T4324] ? udf_bread+0x2db/0x5b0 [ 66.964948][ T4324] kasan_check_range+0x235/0x290 [ 66.969867][ T4324] udf_bread+0x2db/0x5b0 [ 66.974102][ T4324] ? udf_expand_file_adinicb+0xc10/0xc10 [ 66.979732][ T4324] ? udf_mkdir+0x156/0x4a0 [ 66.984143][ T4324] ? udf_next_aext+0x350/0x400 [ 66.988891][ T4324] udf_fiiter_append_blk+0x35b/0x890 [ 66.994151][ T4324] ? inode_bmap+0x2cf/0x660 [ 66.998635][ T4324] ? udf_fiiter_update_elen+0x220/0x220 [ 67.004158][ T4324] ? udf_fiiter_init+0x280/0x480 [ 67.009076][ T4324] udf_fiiter_add_entry+0x140b/0x1d20 [ 67.014440][ T4324] ? udf_add_nondir+0x310/0x310 [ 67.019283][ T4324] ? __mark_inode_dirty+0x757/0xc90 [ 67.024462][ T4324] ? __lock_acquire+0x7d10/0x7d10 [ 67.029472][ T4324] ? do_raw_spin_lock+0x128/0x2f0 [ 67.034473][ T4324] ? __rwlock_init+0x140/0x140 [ 67.039231][ T4324] ? udf_free_inode+0x2d0/0x2d0 [ 67.044068][ T4324] udf_mkdir+0x156/0x4a0 [ 67.048291][ T4324] ? udf_symlink+0x1350/0x1350 [ 67.053040][ T4324] ? apparmor_path_mkdir+0x1ac/0x230 [ 67.058303][ T4324] ? generic_permission+0x230/0x510 [ 67.063482][ T4324] ? inode_permission+0xef/0x480 [ 67.068395][ T4324] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 67.073396][ T4324] ? security_inode_mkdir+0xb3/0x100 [ 67.078682][ T4324] vfs_mkdir+0x387/0x570 [ 67.082942][ T4324] do_mkdirat+0x1df/0x5b0 [ 67.087254][ T4324] ? vfs_mkdir+0x570/0x570 [ 67.091648][ T4324] ? getname_flags+0x1fe/0x500 [ 67.096392][ T4324] __x64_sys_mkdirat+0x85/0x90 [ 67.101153][ T4324] do_syscall_64+0x4c/0xa0 [ 67.105544][ T4324] ? clear_bhb_loop+0x30/0x80 [ 67.110198][ T4324] ? clear_bhb_loop+0x30/0x80 [ 67.114854][ T4324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.120732][ T4324] RIP: 0033:0x7f43c922deb9 [ 67.125130][ T4324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.144725][ T4324] RSP: 002b:00007ffdba3da238 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 67.153123][ T4324] RAX: ffffffffffffffda RBX: 00007f43c94a8fa0 RCX: 00007f43c922deb9 [ 67.161074][ T4324] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 67.169024][ T4324] RBP: 00007f43c929bc1f R08: 0000000000000000 R09: 0000000000000000 [ 67.176979][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.184933][ T4324] R13: 00007f43c94a8fac R14: 00007f43c94a8fa0 R15: 00007f43c94a8fa0 [ 67.192897][ T4324] [ 67.195897][ T4324] ================================================================== [ 67.203929][ T4324] Disabling lock debugging due to kernel taint [ 67.213793][ T4324] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 67.221003][ T4324] CPU: 0 PID: 4324 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 67.229566][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.239597][ T4324] Call Trace: [ 67.242860][ T4324] [ 67.245779][ T4324] dump_stack_lvl+0x188/0x250 [ 67.250440][ T4324] ? show_regs_print_info+0x20/0x20 [ 67.255612][ T4324] ? load_image+0x400/0x400 [ 67.260093][ T4324] panic+0x2e5/0x810 [ 67.263969][ T4324] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 67.270100][ T4324] ? bpf_jit_dump+0xd0/0xd0 [ 67.274585][ T4324] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 67.280549][ T4324] ? _raw_spin_unlock+0x40/0x40 [ 67.285376][ T4324] ? udf_bread+0x2db/0x5b0 [ 67.289765][ T4324] check_panic_on_warn+0x80/0xa0 [ 67.294679][ T4324] ? udf_bread+0x2db/0x5b0 [ 67.299070][ T4324] end_report+0x6d/0xf0 [ 67.303203][ T4324] kasan_report+0x102/0x130 [ 67.307678][ T4324] ? udf_bread+0x2db/0x5b0 [ 67.312067][ T4324] kasan_check_range+0x235/0x290 [ 67.316981][ T4324] udf_bread+0x2db/0x5b0 [ 67.321201][ T4324] ? udf_expand_file_adinicb+0xc10/0xc10 [ 67.326854][ T4324] ? udf_mkdir+0x156/0x4a0 [ 67.331259][ T4324] ? udf_next_aext+0x350/0x400 [ 67.336001][ T4324] udf_fiiter_append_blk+0x35b/0x890 [ 67.341264][ T4324] ? inode_bmap+0x2cf/0x660 [ 67.345743][ T4324] ? udf_fiiter_update_elen+0x220/0x220 [ 67.351266][ T4324] ? udf_fiiter_init+0x280/0x480 [ 67.356180][ T4324] udf_fiiter_add_entry+0x140b/0x1d20 [ 67.361536][ T4324] ? udf_add_nondir+0x310/0x310 [ 67.366366][ T4324] ? __mark_inode_dirty+0x757/0xc90 [ 67.371549][ T4324] ? __lock_acquire+0x7d10/0x7d10 [ 67.376556][ T4324] ? do_raw_spin_lock+0x128/0x2f0 [ 67.381559][ T4324] ? __rwlock_init+0x140/0x140 [ 67.386302][ T4324] ? udf_free_inode+0x2d0/0x2d0 [ 67.391128][ T4324] udf_mkdir+0x156/0x4a0 [ 67.395348][ T4324] ? udf_symlink+0x1350/0x1350 [ 67.400101][ T4324] ? apparmor_path_mkdir+0x1ac/0x230 [ 67.405361][ T4324] ? generic_permission+0x230/0x510 [ 67.410534][ T4324] ? inode_permission+0xef/0x480 [ 67.415448][ T4324] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 67.420445][ T4324] ? security_inode_mkdir+0xb3/0x100 [ 67.425710][ T4324] vfs_mkdir+0x387/0x570 [ 67.429934][ T4324] do_mkdirat+0x1df/0x5b0 [ 67.434237][ T4324] ? vfs_mkdir+0x570/0x570 [ 67.438627][ T4324] ? getname_flags+0x1fe/0x500 [ 67.443362][ T4324] __x64_sys_mkdirat+0x85/0x90 [ 67.448102][ T4324] do_syscall_64+0x4c/0xa0 [ 67.452495][ T4324] ? clear_bhb_loop+0x30/0x80 [ 67.457149][ T4324] ? clear_bhb_loop+0x30/0x80 [ 67.461805][ T4324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.467674][ T4324] RIP: 0033:0x7f43c922deb9 [ 67.472072][ T4324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.491667][ T4324] RSP: 002b:00007ffdba3da238 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 67.500061][ T4324] RAX: ffffffffffffffda RBX: 00007f43c94a8fa0 RCX: 00007f43c922deb9 [ 67.508024][ T4324] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 67.515980][ T4324] RBP: 00007f43c929bc1f R08: 0000000000000000 R09: 0000000000000000 [ 67.523935][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.531895][ T4324] R13: 00007f43c94a8fac R14: 00007f43c94a8fa0 R15: 00007f43c94a8fa0 [ 67.539849][ T4324] [ 67.543229][ T4324] Kernel Offset: disabled [ 67.547570][ T4324] Rebooting in 86400 seconds..