Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. 2025/08/24 11:19:48 parsed 1 programs [ 86.870105][ T31] cfg80211: failed to load regulatory.db [ 87.345501][ T5839] cgroup: Unknown subsys name 'net' [ 87.591670][ T5839] cgroup: Unknown subsys name 'cpuset' [ 87.647701][ T5839] cgroup: Unknown subsys name 'rlimit' [ 89.354100][ T5839] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.103252][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 94.490275][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.490456][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.490662][ T5871] bridge_slave_0: entered allmulticast mode [ 94.494743][ T5871] bridge_slave_0: entered promiscuous mode [ 94.500431][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.500608][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.500768][ T5871] bridge_slave_1: entered allmulticast mode [ 94.503430][ T5871] bridge_slave_1: entered promiscuous mode [ 94.702647][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.706573][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.922057][ T5871] team0: Port device team_slave_0 added [ 94.925323][ T5871] team0: Port device team_slave_1 added [ 95.089284][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.089296][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.089309][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.091992][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.092006][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.092026][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.334925][ T5871] hsr_slave_0: entered promiscuous mode [ 95.335861][ T5871] hsr_slave_1: entered promiscuous mode [ 95.714762][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.735074][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.770995][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.820209][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.017376][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.039316][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.047849][ T175] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.048052][ T175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.071218][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.071453][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.295701][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.361778][ T5871] veth0_vlan: entered promiscuous mode [ 96.368667][ T5871] veth1_vlan: entered promiscuous mode [ 96.405627][ T5871] veth0_macvtap: entered promiscuous mode [ 96.415941][ T5871] veth1_macvtap: entered promiscuous mode [ 96.439732][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.454985][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.470131][ T144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.472233][ T144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.475882][ T144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.478296][ T144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.212138][ T175] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.471437][ T175] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.732087][ T175] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.954866][ T175] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.391770][ T175] bridge_slave_1: left allmulticast mode [ 99.391863][ T175] bridge_slave_1: left promiscuous mode [ 99.393282][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.494348][ T175] bridge_slave_0: left allmulticast mode [ 99.494382][ T175] bridge_slave_0: left promiscuous mode [ 99.494652][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.417802][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.478006][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.501333][ T175] bond0 (unregistering): Released all slaves [ 101.867226][ T175] hsr_slave_0: left promiscuous mode [ 101.907848][ T175] hsr_slave_1: left promiscuous mode [ 101.909896][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.909953][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.962898][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.962929][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.051016][ T175] veth1_macvtap: left promiscuous mode [ 102.051314][ T175] veth0_macvtap: left promiscuous mode [ 102.051630][ T175] veth1_vlan: left promiscuous mode [ 102.051958][ T175] veth0_vlan: left promiscuous mode [ 104.098107][ T175] team0 (unregistering): Port device team_slave_1 removed [ 104.297760][ T175] team0 (unregistering): Port device team_slave_0 removed [ 106.376823][ T3691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.376849][ T3691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.464430][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.464450][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.488509][ T6001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.493310][ T6001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.496814][ T6001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.514695][ T6001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.516287][ T6001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/08/24 11:20:13 executed programs: 0 [ 109.394033][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.395938][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.396766][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.400595][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.401291][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.357668][ T6012] chnl_net:caif_netlink_parms(): no params data found [ 110.722364][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.722470][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.722599][ T6012] bridge_slave_0: entered allmulticast mode [ 110.724099][ T6012] bridge_slave_0: entered promiscuous mode [ 110.741110][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.741315][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.741526][ T6012] bridge_slave_1: entered allmulticast mode [ 110.744199][ T6012] bridge_slave_1: entered promiscuous mode [ 111.141337][ T6012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.143950][ T6012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.319845][ T6012] team0: Port device team_slave_0 added [ 111.321989][ T6012] team0: Port device team_slave_1 added [ 111.479879][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.479895][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.479908][ T6012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.481249][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.481261][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.481278][ T6012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.509174][ T6001] Bluetooth: hci0: command tx timeout [ 111.894035][ T6012] hsr_slave_0: entered promiscuous mode [ 111.894774][ T6012] hsr_slave_1: entered promiscuous mode [ 113.587143][ T6001] Bluetooth: hci0: command tx timeout [ 113.684779][ T6012] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.721583][ T6012] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.764164][ T6012] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.794719][ T6012] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.972547][ T6012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.999499][ T6012] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.008780][ T3691] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.008932][ T3691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.034451][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.034765][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.382554][ T6012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.453700][ T6012] veth0_vlan: entered promiscuous mode [ 114.471680][ T6012] veth1_vlan: entered promiscuous mode [ 114.529884][ T6012] veth0_macvtap: entered promiscuous mode [ 114.535684][ T6012] veth1_macvtap: entered promiscuous mode [ 114.565100][ T6012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.587942][ T6012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.605984][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.606488][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.606526][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.606559][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.886346][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.886365][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.957140][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.957158][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/24 11:20:18 executed programs: 2 [ 115.635625][ T6102] loop0: detected capacity change from 0 to 32768 [ 115.667286][ T6001] Bluetooth: hci0: command tx timeout [ 115.737891][ T6102] [ 115.737891][ T6102] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 115.737891][ T6102] [ 115.833596][ T6102] read_mapping_page failed! [ 115.842543][ T6102] ERROR: (device loop0): txCommit: [ 115.842543][ T6102] [ 115.859003][ T6102] read_mapping_page failed! [ 115.859086][ T6102] ERROR: (device loop0): txCommit: [ 115.859086][ T6102] [ 115.863435][ T6102] =========[ 115.863435][ T6102] ================================================================== [ 115.863452][ T6102] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xe9a/0x1430 [ 115.863480][ T6102] Read of size 4 at addr ffff888041d7443c by task syz.0.17/6102 [ 115.863494][ T6102] [ 115.863520][ T6102] CPU: 0 UID: 0 PID: 6102 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.863541][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.863557][ T6102] Call Trace: [ 115.863564][ T6102] [ 115.863571][ T6102] dump_stack_lvl+0x189/0x250 [ 115.863595][ T6102] ? __virt_addr_valid+0x1c8/0x5c0 [ 115.863617][ T6102] ? rcu_is_watching+0x15/0xb0 [ 115.863640][ T6102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.863662][ T6102] ? rcu_is_watching+0x15/0xb0 [ 115.863683][ T6102] ? lock_release+0x4b/0x3e0 [ 115.863703][ T6102] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 115.863725][ T6102] ? __virt_addr_valid+0x1c8/0x5c0 [ 115.863746][ T6102] ? __virt_addr_valid+0x4a5/0x5c0 [ 115.863774][ T6102] print_report+0xca/0x240 [ 115.863794][ T6102] ? dtInsertEntry+0xe9a/0x1430 [ 115.863812][ T6102] kasan_report+0x118/0x150 [ 115.863832][ T6102] ? reacquire_held_locks+0x127/0x1d0 [ 115.863855][ T6102] ? dtInsertEntry+0xe9a/0x1430 [ 115.863877][ T6102] dtInsertEntry+0xe9a/0x1430 [ 115.863901][ T6102] ? release_metapage+0x28d/0xab0 [ 115.863926][ T6102] dtSplitPage+0x2a83/0x3b20 [ 115.863969][ T6102] dtInsert+0x109b/0x5f40 [ 115.863995][ T6102] ? kasan_quarantine_put+0xdd/0x220 [ 115.864014][ T6102] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.864039][ T6102] ? __pfx_dtInsert+0x10/0x10 [ 115.864056][ T6102] ? dtSearch+0x1d29/0x21b0 [ 115.864087][ T6102] jfs_symlink+0x715/0xe60 [ 115.864112][ T6102] ? __pfx_jfs_symlink+0x10/0x10 [ 115.864131][ T6102] ? smk_access+0x14c/0x4e0 [ 115.864165][ T6102] ? generic_permission+0x2e5/0x690 [ 115.864190][ T6102] ? bpf_lsm_inode_symlink+0x9/0x20 [ 115.864208][ T6102] vfs_symlink+0x143/0x2f0 [ 115.864228][ T6102] do_symlinkat+0x1b1/0x3f0 [ 115.864249][ T6102] ? __pfx_do_symlinkat+0x10/0x10 [ 115.864267][ T6102] ? strncpy_from_user+0x150/0x290 [ 115.864287][ T6102] ? getname_flags+0x1e5/0x540 [ 115.864310][ T6102] __x64_sys_symlink+0x7a/0x90 [ 115.864330][ T6102] do_syscall_64+0xfa/0x3b0 [ 115.864350][ T6102] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.864368][ T6102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.864385][ T6102] ? clear_bhb_loop+0x60/0xb0 [ 115.864407][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.864424][ T6102] RIP: 0033:0x7f633e79ebe9 [ 115.864444][ T6102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.864458][ T6102] RSP: 002b:00007ffe72ab67d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 115.864478][ T6102] RAX: ffffffffffffffda RBX: 00007f633e9c5fa0 RCX: 00007f633e79ebe9 [ 115.864491][ T6102] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 115.864503][ T6102] RBP: 00007f633e821e19 R08: 0000000000000000 R09: 0000000000000000 [ 115.864514][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.864524][ T6102] R13: 00007f633e9c5fa0 R14: 00007f633e9c5fa0 R15: 0000000000000002 [ 115.864543][ T6102] [ 115.864549][ T6102] [ 115.864553][ T6102] Allocated by task 6102: [ 115.864561][ T6102] kasan_save_track+0x3e/0x80 [ 115.864578][ T6102] __kasan_slab_alloc+0x6c/0x80 [ 115.864595][ T6102] kmem_cache_alloc_lru_noprof+0x14c/0x310 [ 115.864614][ T6102] jfs_alloc_inode+0x28/0x70 [ 115.864631][ T6102] alloc_inode+0x6a/0x1b0 [ 115.864648][ T6102] iget_locked+0xf0/0x570 [ 115.864667][ T6102] jfs_iget+0x24/0x3e0 [ 115.864683][ T6102] jfs_lookup+0x1c5/0x380 [ 115.864700][ T6102] __lookup_slow+0x29a/0x3d0 [ 115.864718][ T6102] lookup_slow+0x53/0x70 [ 115.864731][ T6102] walk_component+0x2d2/0x400 [ 115.864750][ T6102] path_lookupat+0x163/0x430 [ 115.864769][ T6102] filename_lookup+0x212/0x570 [ 115.864783][ T6102] user_path_at+0x3a/0x60 [ 115.864800][ T6102] __se_sys_chdir+0x91/0x280 [ 115.864817][ T6102] do_syscall_64+0xfa/0x3b0 [ 115.864834][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.864847][ T6102] [ 115.864851][ T6102] The buggy address belongs to the object at ffff888041d73ae0 [ 115.864851][ T6102] which belongs to the cache jfs_ip of size 2384 [ 115.864864][ T6102] The buggy address is located 12 bytes to the right of [ 115.864864][ T6102] allocated 2384-byte region [ffff888041d73ae0, ffff888041d74430) [ 115.864882][ T6102] [ 115.864885][ T6102] The buggy address belongs to the physical page: [ 115.864905][ T6102] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41d70 [ 115.864923][ T6102] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 115.864935][ T6102] memcg:ffff8880314f2c01 [ 115.864942][ T6102] flags: 0x80000000000040(head|node=0|zone=1) [ 115.864958][ T6102] page_type: f5(slab) [ 115.864971][ T6102] raw: 0080000000000040 ffff88801dfbe780 dead000000000122 0000000000000000 [ 115.864985][ T6102] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff8880314f2c01 [ 115.864999][ T6102] head: 0080000000000040 ffff88801dfbe780 dead000000000122 0000000000000000 [ 115.865011][ T6102] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff8880314f2c01 [ 115.865026][ T6102] head: 0080000000000003 ffffea0001075c01 00000000ffffffff 00000000ffffffff [ 115.865038][ T6102] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 115.865046][ T6102] page dumped because: kasan: bad access detected [ 115.865058][ T6102] page_owner tracks the page as allocated [ 115.865064][ T6102] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6102, tgid 6102 (syz.0.17), ts 115641603227, free_ts 115108208855 [ 115.865093][ T6102] post_alloc_hook+0x240/0x2a0 [ 115.865114][ T6102] get_page_from_freelist+0x2119/0x21b0 [ 115.865128][ T6102] __alloc_frozen_pages_noprof+0x181/0x370 [ 115.865142][ T6102] alloc_pages_mpol+0xd1/0x380 [ 115.865160][ T6102] allocate_slab+0x8a/0x370 [ 115.865174][ T6102] ___slab_alloc+0x8d1/0xdd0 [ 115.865192][ T6102] kmem_cache_alloc_lru_noprof+0xea/0x310 [ 115.865210][ T6102] jfs_alloc_inode+0x28/0x70 [ 115.865226][ T6102] alloc_inode+0x6a/0x1b0 [ 115.865242][ T6102] new_inode+0x22/0x170 [ 115.865259][ T6102] jfs_fill_super+0x569/0xd80 [ 115.865274][ T6102] get_tree_bdev_flags+0x40e/0x4d0 [ 115.865292][ T6102] vfs_get_tree+0x8f/0x2b0 [ 115.865307][ T6102] do_new_mount+0x2a2/0x9e0 [ 115.865323][ T6102] __se_sys_mount+0x317/0x410 [ 115.865341][ T6102] do_syscall_64+0xfa/0x3b0 [ 115.865358][ T6102] page last free pid 10 tgid 10 stack trace: [ 115.865368][ T6102] __free_frozen_pages+0xb59/0xce0 [ 115.865387][ T6102] __slab_free+0x2db/0x390 [ 115.865400][ T6102] qlist_free_all+0x97/0x140 [ 115.865415][ T6102] kasan_quarantine_reduce+0x148/0x160 [ 115.865431][ T6102] __kasan_slab_alloc+0x22/0x80 [ 115.865448][ T6102] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 115.865466][ T6102] __alloc_skb+0x112/0x2d0 [ 115.865483][ T6102] mld_newpack+0x13c/0xc40 [ 115.865498][ T6102] add_grhead+0x5a/0x2a0 [ 115.865512][ T6102] add_grec+0x1452/0x1740 [ 115.865525][ T6102] mld_ifc_work+0x6ed/0xd60 [ 115.865538][ T6102] process_scheduled_works+0xade/0x17b0 [ 115.865556][ T6102] worker_thread+0x8a0/0xda0 [ 115.865572][ T6102] kthread+0x70e/0x8a0 [ 115.865591][ T6102] ret_from_fork+0x3fc/0x770 [ 115.865608][ T6102] ret_from_fork_asm+0x1a/0x30 [ 115.865623][ T6102] [ 115.865627][ T6102] Memory state around the buggy address: [ 115.865636][ T6102] ffff888041d74300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.865647][ T6102] ffff888041d74380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.865658][ T6102] >ffff888041d74400: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 115.865666][ T6102] ^ [ 115.865675][ T6102] ffff888041d74480: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 115.865686][ T6102] ffff888041d74500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.865694][ T6102] ================================================================== [ 115.880523][ T6102] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.880542][ T6102] CPU: 0 UID: 0 PID: 6102 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.880563][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.880573][ T6102] Call Trace: [ 115.880580][ T6102] [ 115.880588][ T6102] dump_stack_lvl+0x99/0x250 [ 115.880615][ T6102] ? __asan_memcpy+0x40/0x70 [ 115.880633][ T6102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.880654][ T6102] ? __pfx__printk+0x10/0x10 [ 115.880677][ T6102] vpanic+0x281/0x750 [ 115.880698][ T6102] ? preempt_schedule+0xae/0xc0 [ 115.880717][ T6102] ? __pfx_vpanic+0x10/0x10 [ 115.880736][ T6102] ? preempt_schedule_common+0x83/0xd0 [ 115.880760][ T6102] ? preempt_schedule+0xae/0xc0 [ 115.880778][ T6102] ? __pfx_preempt_schedule+0x10/0x10 [ 115.880799][ T6102] panic+0xb9/0xc0 [ 115.880819][ T6102] ? __pfx_panic+0x10/0x10 [ 115.880841][ T6102] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 115.880863][ T6102] ? is_module_address+0x17/0xf0 [ 115.880881][ T6102] ? dtInsertEntry+0xe9a/0x1430 [ 115.880900][ T6102] check_panic_on_warn+0x89/0xb0 [ 115.880917][ T6102] ? dtInsertEntry+0xe9a/0x1430 [ 115.880935][ T6102] end_report+0x78/0x160 [ 115.880954][ T6102] kasan_report+0x129/0x150 [ 115.880972][ T6102] ? reacquire_held_locks+0x127/0x1d0 [ 115.880996][ T6102] ? dtInsertEntry+0xe9a/0x1430 [ 115.881018][ T6102] dtInsertEntry+0xe9a/0x1430 [ 115.881041][ T6102] ? release_metapage+0x28d/0xab0 [ 115.881066][ T6102] dtSplitPage+0x2a83/0x3b20 [ 115.881109][ T6102] dtInsert+0x109b/0x5f40 [ 115.881134][ T6102] ? kasan_quarantine_put+0xdd/0x220 [ 115.881152][ T6102] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.881177][ T6102] ? __pfx_dtInsert+0x10/0x10 [ 115.881194][ T6102] ? dtSearch+0x1d29/0x21b0 [ 115.881225][ T6102] jfs_symlink+0x715/0xe60 [ 115.881250][ T6102] ? __pfx_jfs_symlink+0x10/0x10 [ 115.881269][ T6102] ? smk_access+0x14c/0x4e0 [ 115.881303][ T6102] ? generic_permission+0x2e5/0x690 [ 115.881329][ T6102] ? bpf_lsm_inode_symlink+0x9/0x20 [ 115.881347][ T6102] vfs_symlink+0x143/0x2f0 [ 115.881367][ T6102] do_symlinkat+0x1b1/0x3f0 [ 115.881387][ T6102] ? __pfx_do_symlinkat+0x10/0x10 [ 115.881405][ T6102] ? strncpy_from_user+0x150/0x290 [ 115.881425][ T6102] ? getname_flags+0x1e5/0x540 [ 115.881448][ T6102] __x64_sys_symlink+0x7a/0x90 [ 115.881468][ T6102] do_syscall_64+0xfa/0x3b0 [ 115.881487][ T6102] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.881505][ T6102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.881521][ T6102] ? clear_bhb_loop+0x60/0xb0 [ 115.881538][ T6102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.881554][ T6102] RIP: 0033:0x7f633e79ebe9 [ 115.881569][ T6102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.881583][ T6102] RSP: 002b:00007ffe72ab67d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 115.881601][ T6102] RAX: ffffffffffffffda RBX: 00007f633e9c5fa0 RCX: 00007f633e79ebe9 [ 115.881614][ T6102] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 115.881626][ T6102] RBP: 00007f633e821e19 R08: 0000000000000000 R09: 0000000000000000 [ 115.881636][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.881647][ T6102] R13: 00007f633e9c5fa0 R14: 00007f633e9c5fa0 R15: 0000000000000002 [ 115.881665][ T6102] [ 115.881918][ T6102] Kernel Offset: disabled