Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. 2025/10/17 07:28:13 parsed 1 programs [ 91.162242][ T24] cfg80211: failed to load regulatory.db [ 93.982045][ T5832] cgroup: Unknown subsys name 'net' [ 94.095076][ T5832] cgroup: Unknown subsys name 'cpuset' [ 94.104328][ T5832] cgroup: Unknown subsys name 'rlimit' [ 95.715847][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.630134][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.462229][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 99.556226][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.563678][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.571168][ T5853] bridge_slave_0: entered allmulticast mode [ 99.579199][ T5853] bridge_slave_0: entered promiscuous mode [ 99.588138][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.595421][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.602606][ T5853] bridge_slave_1: entered allmulticast mode [ 99.610190][ T5853] bridge_slave_1: entered promiscuous mode [ 99.645652][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.657699][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.695274][ T5853] team0: Port device team_slave_0 added [ 99.703255][ T5853] team0: Port device team_slave_1 added [ 99.736201][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.743250][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.769442][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.783528][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.791563][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.817740][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.869000][ T5853] hsr_slave_0: entered promiscuous mode [ 99.875732][ T5853] hsr_slave_1: entered promiscuous mode [ 100.044956][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.056681][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.067285][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.077740][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.109122][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.116310][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.124158][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.131278][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.191481][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.209572][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.218509][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.238064][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.253721][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.260901][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.275857][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.282997][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.487884][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.538294][ T5853] veth0_vlan: entered promiscuous mode [ 100.551889][ T5853] veth1_vlan: entered promiscuous mode [ 100.581435][ T5853] veth0_macvtap: entered promiscuous mode [ 100.590885][ T5853] veth1_macvtap: entered promiscuous mode [ 100.612921][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.627649][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.643691][ T1586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.653560][ T1586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.663263][ T1586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.672802][ T1586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.813582][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.908136][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.985852][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.077582][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.957285][ T5900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 101.966008][ T5900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.973589][ T5900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.982179][ T5900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.991091][ T5900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.089826][ T1586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.098129][ T1586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.128821][ T1586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.137952][ T1586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.295022][ T12] bridge_slave_1: left allmulticast mode [ 103.303363][ T12] bridge_slave_1: left promiscuous mode [ 103.310333][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.332028][ T12] bridge_slave_0: left allmulticast mode [ 103.337677][ T12] bridge_slave_0: left promiscuous mode [ 103.351037][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.819674][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.832880][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.843970][ T12] bond0 (unregistering): Released all slaves [ 103.954136][ T12] hsr_slave_0: left promiscuous mode [ 103.960075][ T12] hsr_slave_1: left promiscuous mode [ 103.966554][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.974552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.982632][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.990259][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.006269][ T12] veth1_macvtap: left promiscuous mode [ 104.011905][ T12] veth0_macvtap: left promiscuous mode [ 104.017505][ T12] veth1_vlan: left promiscuous mode [ 104.023025][ T12] veth0_vlan: left promiscuous mode [ 104.309492][ T12] team0 (unregistering): Port device team_slave_1 removed [ 104.334965][ T12] team0 (unregistering): Port device team_slave_0 removed 2025/10/17 07:28:29 executed programs: 0 [ 105.748567][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.757254][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.769229][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.777495][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.785184][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.206907][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 106.544284][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.577670][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.596622][ T5968] bridge_slave_0: entered allmulticast mode [ 106.605738][ T5968] bridge_slave_0: entered promiscuous mode [ 106.616307][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.631452][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.638817][ T5968] bridge_slave_1: entered allmulticast mode [ 106.667629][ T5968] bridge_slave_1: entered promiscuous mode [ 106.722422][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.744520][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.818943][ T5968] team0: Port device team_slave_0 added [ 106.828650][ T5968] team0: Port device team_slave_1 added [ 106.877661][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.885399][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.912449][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.925227][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.932318][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.958520][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.045905][ T5968] hsr_slave_0: entered promiscuous mode [ 107.054483][ T5968] hsr_slave_1: entered promiscuous mode [ 107.800331][ T5968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.807277][ T5900] Bluetooth: hci0: command tx timeout [ 107.818096][ T5968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.830893][ T5968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.841944][ T5968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.944277][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.968053][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.994485][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.001679][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.013709][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.020853][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.293991][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.360619][ T5968] veth0_vlan: entered promiscuous mode [ 108.383259][ T5968] veth1_vlan: entered promiscuous mode [ 108.425150][ T5968] veth0_macvtap: entered promiscuous mode [ 108.436606][ T5968] veth1_macvtap: entered promiscuous mode [ 108.460497][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.477440][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.497592][ T1586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.522368][ T1586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.538635][ T1586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.548424][ T1586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.610218][ T1586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.622051][ T1586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.667364][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.678802][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.051407][ T6043] loop0: detected capacity change from 0 to 32768 [ 109.093794][ T6043] ================================================================== [ 109.101876][ T6043] BUG: KASAN: slab-out-of-bounds in dtSearch+0x1683/0x21b0 [ 109.109071][ T6043] Read of size 1 at addr ffff888061c8bfe0 by task syz.0.17/6043 [ 109.116696][ T6043] [ 109.119020][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 109.119049][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.119065][ T6043] Call Trace: [ 109.119074][ T6043] [ 109.119083][ T6043] dump_stack_lvl+0x189/0x250 [ 109.119112][ T6043] ? __kasan_check_byte+0x12/0x40 [ 109.119151][ T6043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.119176][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.119206][ T6043] ? lock_release+0x4b/0x3e0 [ 109.119242][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.119270][ T6043] ? __virt_addr_valid+0x4a5/0x5c0 [ 109.119298][ T6043] print_report+0xca/0x240 [ 109.119328][ T6043] ? dtSearch+0x1683/0x21b0 [ 109.119349][ T6043] kasan_report+0x118/0x150 [ 109.119378][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.119408][ T6043] ? dtSearch+0x1683/0x21b0 [ 109.119434][ T6043] dtSearch+0x1683/0x21b0 [ 109.119465][ T6043] ? __kmalloc_noprof+0x432/0x7f0 [ 109.119503][ T6043] jfs_lookup+0x155/0x380 [ 109.119532][ T6043] ? __pfx_jfs_lookup+0x10/0x10 [ 109.119556][ T6043] ? d_alloc_parallel+0x14ac/0x1610 [ 109.119607][ T6043] ? __pfx_d_alloc_parallel+0x10/0x10 [ 109.119647][ T6043] ? __raw_spin_lock_init+0x45/0x100 [ 109.119673][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.119701][ T6043] ? __init_waitqueue_head+0xa9/0x150 [ 109.119730][ T6043] __lookup_slow+0x297/0x3d0 [ 109.119768][ T6043] ? __pfx___lookup_slow+0x10/0x10 [ 109.119803][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.119840][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.119869][ T6043] ? down_read+0x1ad/0x2e0 [ 109.119899][ T6043] lookup_slow+0x53/0x70 [ 109.119936][ T6043] link_path_walk+0x935/0xea0 [ 109.119979][ T6043] path_lookupat+0x97/0x430 [ 109.120018][ T6043] do_o_path+0x97/0x1f0 [ 109.120054][ T6043] ? __pfx_do_o_path+0x10/0x10 [ 109.120086][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.120122][ T6043] path_openat+0x311f/0x3830 [ 109.120174][ T6043] ? __pfx_css_rstat_updated+0x10/0x10 [ 109.120213][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.120245][ T6043] ? count_memcg_event_mm+0x21/0x260 [ 109.120276][ T6043] ? __up_read+0x280/0x680 [ 109.120298][ T6043] ? __pfx_path_openat+0x10/0x10 [ 109.120321][ T6043] ? __pfx___up_read+0x10/0x10 [ 109.120343][ T6043] ? do_user_addr_fault+0xbbc/0x1380 [ 109.120384][ T6043] do_filp_open+0x1fa/0x410 [ 109.120405][ T6043] ? __lock_acquire+0xab9/0xd20 [ 109.120437][ T6043] ? __pfx_do_filp_open+0x10/0x10 [ 109.120473][ T6043] ? _raw_spin_unlock+0x28/0x50 [ 109.120509][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.120537][ T6043] ? alloc_fd+0x64c/0x6c0 [ 109.120573][ T6043] do_sys_openat2+0x121/0x1c0 [ 109.120610][ T6043] ? __pfx_do_sys_openat2+0x10/0x10 [ 109.120650][ T6043] ? __pfx___se_sys_futex+0x10/0x10 [ 109.120683][ T6043] __x64_sys_openat+0x138/0x170 [ 109.120724][ T6043] do_syscall_64+0xfa/0xfa0 [ 109.120749][ T6043] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.120772][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.120796][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 109.120824][ T6043] ? exc_page_fault+0xab/0x100 [ 109.120848][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.120872][ T6043] RIP: 0033:0x7f411b38eec9 [ 109.120892][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.120913][ T6043] RSP: 002b:00007fff0f0fe128 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.120939][ T6043] RAX: ffffffffffffffda RBX: 00007f411b5e5fa0 RCX: 00007f411b38eec9 [ 109.120958][ T6043] RDX: 0000000000309102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 109.120976][ T6043] RBP: 00007f411b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.120991][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.121006][ T6043] R13: 00007f411b5e5fa0 R14: 00007f411b5e5fa0 R15: 0000000000000004 [ 109.121034][ T6043] [ 109.121043][ T6043] [ 109.501639][ T6043] Allocated by task 6043: [ 109.505951][ T6043] kasan_save_track+0x3e/0x80 [ 109.510621][ T6043] __kasan_slab_alloc+0x6c/0x80 [ 109.515463][ T6043] kmem_cache_alloc_lru_noprof+0x35d/0x6d0 [ 109.521259][ T6043] jfs_alloc_inode+0x28/0x70 [ 109.525853][ T6043] alloc_inode+0x6a/0x1b0 [ 109.530206][ T6043] new_inode+0x22/0x170 [ 109.534390][ T6043] ialloc+0x4c/0x8f0 [ 109.538273][ T6043] jfs_create+0x18d/0xa80 [ 109.542603][ T6043] path_openat+0x14f4/0x3830 [ 109.547178][ T6043] do_filp_open+0x1fa/0x410 [ 109.551663][ T6043] do_sys_openat2+0x121/0x1c0 [ 109.556336][ T6043] __x64_sys_openat+0x138/0x170 [ 109.561182][ T6043] do_syscall_64+0xfa/0xfa0 [ 109.565672][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.571547][ T6043] [ 109.573850][ T6043] The buggy address belongs to the object at ffff888061c8b6f0 [ 109.573850][ T6043] which belongs to the cache jfs_ip of size 2216 [ 109.587539][ T6043] The buggy address is located 72 bytes to the right of [ 109.587539][ T6043] allocated 2216-byte region [ffff888061c8b6f0, ffff888061c8bf98) [ 109.602276][ T6043] [ 109.604583][ T6043] The buggy address belongs to the physical page: [ 109.610970][ T6043] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61c88 [ 109.619727][ T6043] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 109.628206][ T6043] memcg:ffff888076b9c101 [ 109.632428][ T6043] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 109.639956][ T6043] page_type: f5(slab) [ 109.643924][ T6043] raw: 00fff00000000040 ffff8881422e9dc0 dead000000000122 0000000000000000 [ 109.652494][ T6043] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff888076b9c101 [ 109.661064][ T6043] head: 00fff00000000040 ffff8881422e9dc0 dead000000000122 0000000000000000 [ 109.669717][ T6043] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff888076b9c101 [ 109.678377][ T6043] head: 00fff00000000003 ffffea0001872201 00000000ffffffff 00000000ffffffff [ 109.687042][ T6043] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 109.695688][ T6043] page dumped because: kasan: bad access detected [ 109.702085][ T6043] page_owner tracks the page as allocated [ 109.707783][ T6043] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6043, tgid 6043 (syz.0.17), ts 109068821036, free_ts 99248681200 [ 109.729825][ T6043] post_alloc_hook+0x240/0x2a0 [ 109.734583][ T6043] get_page_from_freelist+0x2365/0x2440 [ 109.740124][ T6043] __alloc_frozen_pages_noprof+0x181/0x370 [ 109.745926][ T6043] alloc_pages_mpol+0x232/0x4a0 [ 109.750767][ T6043] allocate_slab+0x96/0x3a0 [ 109.755268][ T6043] ___slab_alloc+0xe94/0x18a0 [ 109.759943][ T6043] __slab_alloc+0x65/0x100 [ 109.764360][ T6043] kmem_cache_alloc_lru_noprof+0x3ef/0x6d0 [ 109.770163][ T6043] jfs_alloc_inode+0x28/0x70 [ 109.774761][ T6043] alloc_inode+0x6a/0x1b0 [ 109.779081][ T6043] new_inode+0x22/0x170 [ 109.783229][ T6043] jfs_fill_super+0x569/0xd80 [ 109.787908][ T6043] get_tree_bdev_flags+0x40e/0x4d0 [ 109.793006][ T6043] vfs_get_tree+0x92/0x2b0 [ 109.797424][ T6043] do_new_mount+0x302/0xa10 [ 109.801917][ T6043] __se_sys_mount+0x313/0x410 [ 109.806588][ T6043] page last free pid 5848 tgid 5848 stack trace: [ 109.812993][ T6043] __free_frozen_pages+0xbc4/0xd30 [ 109.818112][ T6043] vfree+0x25a/0x400 [ 109.822012][ T6043] kcov_close+0x28/0x50 [ 109.826170][ T6043] __fput+0x44c/0xa70 [ 109.830181][ T6043] task_work_run+0x1d4/0x260 [ 109.834768][ T6043] do_exit+0x6b5/0x2300 [ 109.838912][ T6043] do_group_exit+0x21c/0x2d0 [ 109.843488][ T6043] get_signal+0x1285/0x1340 [ 109.847985][ T6043] arch_do_signal_or_restart+0xa0/0x790 [ 109.853520][ T6043] exit_to_user_mode_loop+0x72/0x130 [ 109.858794][ T6043] do_syscall_64+0x2bd/0xfa0 [ 109.863370][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.869248][ T6043] [ 109.871551][ T6043] Memory state around the buggy address: [ 109.877168][ T6043] ffff888061c8be80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.885212][ T6043] ffff888061c8bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 109.893257][ T6043] >ffff888061c8bf80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.901297][ T6043] ^ [ 109.908470][ T6043] ffff888061c8c000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.916520][ T6043] ffff888061c8c080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.924560][ T6043] ================================================================== [ 109.985827][ T5900] Bluetooth: hci0: command tx timeout [ 110.050974][ T6043] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.058211][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 110.067312][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.077354][ T6043] Call Trace: [ 110.080619][ T6043] [ 110.083532][ T6043] dump_stack_lvl+0x99/0x250 [ 110.088117][ T6043] ? __asan_memcpy+0x40/0x70 [ 110.092695][ T6043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.097885][ T6043] ? __pfx__printk+0x10/0x10 [ 110.102469][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.108097][ T6043] vpanic+0x237/0x6d0 [ 110.112077][ T6043] ? __pfx_vpanic+0x10/0x10 [ 110.116584][ T6043] ? preempt_schedule+0xae/0xc0 [ 110.121428][ T6043] ? __pfx_preempt_schedule+0x10/0x10 [ 110.126805][ T6043] panic+0xb9/0xc0 [ 110.130526][ T6043] ? __pfx_panic+0x10/0x10 [ 110.134940][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.140566][ T6043] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 110.146463][ T6043] ? dtSearch+0x1683/0x21b0 [ 110.150960][ T6043] check_panic_on_warn+0x89/0xb0 [ 110.155890][ T6043] ? dtSearch+0x1683/0x21b0 [ 110.160380][ T6043] end_report+0x78/0x160 [ 110.164618][ T6043] kasan_report+0x129/0x150 [ 110.169119][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.174757][ T6043] ? dtSearch+0x1683/0x21b0 [ 110.179252][ T6043] dtSearch+0x1683/0x21b0 [ 110.183581][ T6043] ? __kmalloc_noprof+0x432/0x7f0 [ 110.188605][ T6043] jfs_lookup+0x155/0x380 [ 110.192927][ T6043] ? __pfx_jfs_lookup+0x10/0x10 [ 110.197767][ T6043] ? d_alloc_parallel+0x14ac/0x1610 [ 110.202976][ T6043] ? __pfx_d_alloc_parallel+0x10/0x10 [ 110.208350][ T6043] ? __raw_spin_lock_init+0x45/0x100 [ 110.213626][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.219255][ T6043] ? __init_waitqueue_head+0xa9/0x150 [ 110.224618][ T6043] __lookup_slow+0x297/0x3d0 [ 110.229210][ T6043] ? __pfx___lookup_slow+0x10/0x10 [ 110.234319][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.239956][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.245585][ T6043] ? down_read+0x1ad/0x2e0 [ 110.250000][ T6043] lookup_slow+0x53/0x70 [ 110.254244][ T6043] link_path_walk+0x935/0xea0 [ 110.258928][ T6043] path_lookupat+0x97/0x430 [ 110.263433][ T6043] do_o_path+0x97/0x1f0 [ 110.267593][ T6043] ? __pfx_do_o_path+0x10/0x10 [ 110.272351][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.277986][ T6043] path_openat+0x311f/0x3830 [ 110.282570][ T6043] ? __pfx_css_rstat_updated+0x10/0x10 [ 110.288028][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.293667][ T6043] ? count_memcg_event_mm+0x21/0x260 [ 110.298948][ T6043] ? __up_read+0x280/0x680 [ 110.303354][ T6043] ? __pfx_path_openat+0x10/0x10 [ 110.308283][ T6043] ? __pfx___up_read+0x10/0x10 [ 110.313040][ T6043] ? do_user_addr_fault+0xbbc/0x1380 [ 110.318330][ T6043] do_filp_open+0x1fa/0x410 [ 110.322819][ T6043] ? __lock_acquire+0xab9/0xd20 [ 110.327666][ T6043] ? __pfx_do_filp_open+0x10/0x10 [ 110.332687][ T6043] ? _raw_spin_unlock+0x28/0x50 [ 110.337553][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.343206][ T6043] ? alloc_fd+0x64c/0x6c0 [ 110.347544][ T6043] do_sys_openat2+0x121/0x1c0 [ 110.352227][ T6043] ? __pfx_do_sys_openat2+0x10/0x10 [ 110.357435][ T6043] ? __pfx___se_sys_futex+0x10/0x10 [ 110.362633][ T6043] __x64_sys_openat+0x138/0x170 [ 110.367494][ T6043] do_syscall_64+0xfa/0xfa0 [ 110.371992][ T6043] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.377183][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.383240][ T6043] ? srso_alias_return_thunk+0x5/0xfbef5 [ 110.388865][ T6043] ? exc_page_fault+0xab/0x100 [ 110.393619][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.399510][ T6043] RIP: 0033:0x7f411b38eec9 [ 110.403917][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.423511][ T6043] RSP: 002b:00007fff0f0fe128 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 110.431917][ T6043] RAX: ffffffffffffffda RBX: 00007f411b5e5fa0 RCX: 00007f411b38eec9 [ 110.439876][ T6043] RDX: 0000000000309102 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 110.447835][ T6043] RBP: 00007f411b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 110.455795][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.463753][ T6043] R13: 00007f411b5e5fa0 R14: 00007f411b5e5fa0 R15: 0000000000000004 [ 110.471725][ T6043] [ 110.474952][ T6043] Kernel Offset: disabled [ 110.479264][ T6043] Rebooting in 86400 seconds..