Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. 2025/10/03 17:52:56 parsed 1 programs [ 77.466391][ T5793] cgroup: Unknown subsys name 'net' [ 77.632553][ T5793] cgroup: Unknown subsys name 'rlimit' [ 79.444138][ T5793] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.431812][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.440037][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.468116][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.476033][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.101828][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 83.200732][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.210202][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.217475][ T5841] bridge_slave_0: entered allmulticast mode [ 83.224814][ T5841] bridge_slave_0: entered promiscuous mode [ 83.233124][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.240326][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.247503][ T5841] bridge_slave_1: entered allmulticast mode [ 83.254686][ T5841] bridge_slave_1: entered promiscuous mode [ 83.290170][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.301675][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.333767][ T5841] team0: Port device team_slave_0 added [ 83.349974][ T5841] team0: Port device team_slave_1 added [ 83.375088][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.382041][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.407955][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.420782][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.427821][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.453724][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.492846][ T5841] hsr_slave_0: entered promiscuous mode [ 83.499374][ T5841] hsr_slave_1: entered promiscuous mode [ 83.661054][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.672356][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.681888][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.691598][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.733089][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.740351][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.748246][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.755545][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.818489][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.848943][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.860123][ T2944] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.869038][ T2944] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.897409][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.904608][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.917404][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.924762][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.148077][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.189713][ T5841] veth0_vlan: entered promiscuous mode [ 84.202022][ T5841] veth1_vlan: entered promiscuous mode [ 84.230375][ T5841] veth0_macvtap: entered promiscuous mode [ 84.241243][ T5841] veth1_macvtap: entered promiscuous mode [ 84.257667][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.272028][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.283679][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.292852][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.302909][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.311875][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.437317][ T3540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.898335][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.907754][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.916519][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.925418][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.933295][ T5878] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.942265][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/10/03 17:53:07 executed programs: 0 [ 86.148256][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.157707][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.165543][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.173527][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.182848][ T5102] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.190274][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.336536][ T5900] chnl_net:caif_netlink_parms(): no params data found [ 86.402697][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.409997][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.417916][ T5900] bridge_slave_0: entered allmulticast mode [ 86.425004][ T5900] bridge_slave_0: entered promiscuous mode [ 86.433580][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.441093][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.448524][ T5900] bridge_slave_1: entered allmulticast mode [ 86.455698][ T5900] bridge_slave_1: entered promiscuous mode [ 86.485234][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.496849][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.528204][ T5900] team0: Port device team_slave_0 added [ 86.536228][ T5900] team0: Port device team_slave_1 added [ 86.563002][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.570225][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.596789][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.609019][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.616505][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.642600][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.685059][ T5900] hsr_slave_0: entered promiscuous mode [ 86.691424][ T5900] hsr_slave_1: entered promiscuous mode [ 86.697770][ T5900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.706010][ T5900] Cannot create hsr debugfs directory [ 86.817108][ T9] cfg80211: failed to load regulatory.db [ 86.954641][ T3540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.255367][ T5102] Bluetooth: hci0: command tx timeout [ 89.537350][ T3540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.616955][ T3540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.334268][ T5102] Bluetooth: hci0: command tx timeout [ 90.472822][ T5900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.488317][ T5900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.506912][ T3540] hsr_slave_0: left promiscuous mode [ 90.513441][ T3540] hsr_slave_1: left promiscuous mode [ 90.520072][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.528384][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.536379][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.543765][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.552004][ T3540] bridge_slave_1: left allmulticast mode [ 90.558132][ T3540] bridge_slave_1: left promiscuous mode [ 90.564467][ T3540] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.575225][ T3540] bridge_slave_0: left allmulticast mode [ 90.580874][ T3540] bridge_slave_0: left promiscuous mode [ 90.587443][ T3540] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.607988][ T3540] veth1_macvtap: left promiscuous mode [ 90.613640][ T3540] veth0_macvtap: left promiscuous mode [ 90.619618][ T3540] veth1_vlan: left promiscuous mode [ 90.625389][ T3540] veth0_vlan: left promiscuous mode [ 90.957990][ T3540] team0 (unregistering): Port device team_slave_1 removed [ 90.983895][ T3540] team0 (unregistering): Port device team_slave_0 removed [ 91.016848][ T3540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.044188][ T3540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.301944][ T3540] bond0 (unregistering): Released all slaves [ 91.385155][ T5900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.394911][ T5900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.488524][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.515055][ T5900] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.528639][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.535793][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.556274][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.563384][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.755944][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.797680][ T5900] veth0_vlan: entered promiscuous mode [ 91.809962][ T5900] veth1_vlan: entered promiscuous mode [ 91.863089][ T5900] veth0_macvtap: entered promiscuous mode [ 91.873296][ T5900] veth1_macvtap: entered promiscuous mode [ 91.898302][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.916649][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.929478][ T5900] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.938739][ T5900] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.948367][ T5900] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.957624][ T5900] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.037199][ T2944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.046439][ T2944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.070542][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.079847][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.123795][ T5947] syz.0.17[5947]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.367748][ T5947] loop0: detected capacity change from 0 to 32768 [ 92.406699][ T5947] [ 92.406699][ T5947] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.406699][ T5947] [ 92.424037][ T5102] Bluetooth: hci0: command tx timeout [ 92.456725][ T5947] read_mapping_page failed! [ 92.461562][ T5947] ERROR: (device loop0): txCommit: [ 92.461562][ T5947] [ 92.478360][ T5947] read_mapping_page failed! [ 92.483408][ T5947] ERROR: (device loop0): txCommit: [ 92.483408][ T5947] [ 92.505119][ T5947] read_mapping_page failed! [ 92.509668][ T5947] ERROR: (device loop0): txCommit: [ 92.509668][ T5947] [ 92.523575][ T5947] ================================================================== [ 92.531654][ T5947] BUG: KASAN: slab-out-of-bounds in dtSplitPage+0x12ca/0x3b10 [ 92.539161][ T5947] Read of size 1 at addr ffff888061529215 by task syz.0.17/5947 [ 92.546809][ T5947] [ 92.549164][ T5947] CPU: 0 PID: 5947 Comm: syz.0.17 Not tainted syzkaller #0 [ 92.556373][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.566442][ T5947] Call Trace: [ 92.569740][ T5947] [ 92.572695][ T5947] dump_stack_lvl+0x16c/0x230 [ 92.577391][ T5947] ? read_lock_is_recursive+0x20/0x20 [ 92.582776][ T5947] ? show_regs_print_info+0x20/0x20 [ 92.587973][ T5947] ? load_image+0x3b0/0x3b0 [ 92.592473][ T5947] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 92.597842][ T5947] ? __virt_addr_valid+0x18c/0x540 [ 92.602962][ T5947] ? __virt_addr_valid+0x469/0x540 [ 92.608068][ T5947] print_report+0xac/0x220 [ 92.612479][ T5947] ? dtSplitPage+0x12ca/0x3b10 [ 92.617239][ T5947] kasan_report+0x117/0x150 [ 92.621734][ T5947] ? dtSplitPage+0x12ca/0x3b10 [ 92.626493][ T5947] dtSplitPage+0x12ca/0x3b10 [ 92.631086][ T5947] ? __lock_acquire+0x7c80/0x7c80 [ 92.636112][ T5947] dtInsert+0x108f/0x5f40 [ 92.640439][ T5947] ? kasan_quarantine_put+0xd8/0x220 [ 92.645716][ T5947] ? txLock+0x2b1/0x2090 [ 92.649949][ T5947] ? __rwlock_init+0x150/0x150 [ 92.654703][ T5947] ? slab_free_freelist_hook+0x130/0x1b0 [ 92.660335][ T5947] ? txLock+0xead/0x2090 [ 92.664579][ T5947] ? UniStrupr+0x2e0/0x2e0 [ 92.669001][ T5947] ? dtInitRoot+0x22a/0x670 [ 92.673499][ T5947] jfs_mkdir+0x6c6/0xa30 [ 92.677735][ T5947] ? jfs_symlink+0xe50/0xe50 [ 92.682334][ T5947] ? make_vfsuid+0x51/0xb0 [ 92.686749][ T5947] ? generic_permission+0x1f3/0x590 [ 92.691963][ T5947] ? inode_permission+0xf3/0x480 [ 92.696912][ T5947] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 92.701925][ T5947] ? security_inode_mkdir+0xb7/0x100 [ 92.707216][ T5947] vfs_mkdir+0x296/0x440 [ 92.711469][ T5947] do_mkdirat+0x1d4/0x440 [ 92.715800][ T5947] ? vfs_mkdir+0x440/0x440 [ 92.720226][ T5947] __x64_sys_mkdirat+0x89/0xa0 [ 92.725005][ T5947] do_syscall_64+0x55/0xb0 [ 92.729431][ T5947] ? clear_bhb_loop+0x40/0x90 [ 92.734106][ T5947] ? clear_bhb_loop+0x40/0x90 [ 92.738769][ T5947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.744668][ T5947] RIP: 0033:0x7f414838eec9 [ 92.749080][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.768685][ T5947] RSP: 002b:00007ffda8cb4ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 92.777090][ T5947] RAX: ffffffffffffffda RBX: 00007f41485e5fa0 RCX: 00007f414838eec9 [ 92.785088][ T5947] RDX: 00000000000000f1 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 92.793056][ T5947] RBP: 00007f4148411f91 R08: 0000000000000000 R09: 0000000000000000 [ 92.801032][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.809013][ T5947] R13: 00007f41485e5fa0 R14: 00007f41485e5fa0 R15: 0000000000000003 [ 92.816997][ T5947] [ 92.820015][ T5947] [ 92.822342][ T5947] Allocated by task 5947: [ 92.826671][ T5947] kasan_set_track+0x4e/0x70 [ 92.831282][ T5947] __kasan_slab_alloc+0x6c/0x80 [ 92.836137][ T5947] slab_post_alloc_hook+0x6e/0x4d0 [ 92.841243][ T5947] kmem_cache_alloc_lru+0x115/0x2e0 [ 92.846434][ T5947] jfs_alloc_inode+0x28/0x60 [ 92.851012][ T5947] iget_locked+0x1ad/0x840 [ 92.855417][ T5947] jfs_iget+0x24/0x3c0 [ 92.859474][ T5947] jfs_lookup+0x1c6/0x380 [ 92.863792][ T5947] __lookup_slow+0x281/0x3b0 [ 92.868377][ T5947] lookup_slow+0x53/0x70 [ 92.872610][ T5947] walk_component+0x2be/0x3f0 [ 92.877279][ T5947] path_lookupat+0x169/0x440 [ 92.881862][ T5947] filename_lookup+0x1f4/0x510 [ 92.886620][ T5947] user_path_at_empty+0x42/0x60 [ 92.891461][ T5947] __se_sys_chdir+0x95/0x290 [ 92.896041][ T5947] do_syscall_64+0x55/0xb0 [ 92.900449][ T5947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.906332][ T5947] [ 92.908644][ T5947] The buggy address belongs to the object at ffff888061528940 [ 92.908644][ T5947] which belongs to the cache jfs_ip of size 2240 [ 92.922334][ T5947] The buggy address is located 21 bytes to the right of [ 92.922334][ T5947] allocated 2240-byte region [ffff888061528940, ffff888061529200) [ 92.936988][ T5947] [ 92.939311][ T5947] The buggy address belongs to the physical page: [ 92.945718][ T5947] page:ffffea0001854a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61528 [ 92.955853][ T5947] head:ffffea0001854a00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 92.964771][ T5947] memcg:ffff88802a57cb01 [ 92.968993][ T5947] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 92.976965][ T5947] page_type: 0xffffffff() [ 92.981282][ T5947] raw: 00fff00000000840 ffff888018b63780 dead000000000122 0000000000000000 [ 92.989854][ T5947] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88802a57cb01 [ 92.998428][ T5947] page dumped because: kasan: bad access detected [ 93.004843][ T5947] page_owner tracks the page as allocated [ 93.010547][ T5947] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5947, tgid 5947 (syz.0.17), ts 92434104015, free_ts 82750589720 [ 93.033895][ T5947] post_alloc_hook+0x1cd/0x210 [ 93.038668][ T5947] get_page_from_freelist+0x195c/0x19f0 [ 93.044207][ T5947] __alloc_pages+0x1e3/0x460 [ 93.048793][ T5947] alloc_slab_page+0x5d/0x170 [ 93.053461][ T5947] new_slab+0x87/0x2e0 [ 93.057520][ T5947] ___slab_alloc+0xc6d/0x1300 [ 93.062187][ T5947] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 93.067386][ T5947] jfs_alloc_inode+0x28/0x60 [ 93.071962][ T5947] iget_locked+0x1ad/0x840 [ 93.076375][ T5947] jfs_iget+0x24/0x3c0 [ 93.080448][ T5947] jfs_fill_super+0x70c/0xac0 [ 93.085173][ T5947] mount_bdev+0x22b/0x2d0 [ 93.089508][ T5947] legacy_get_tree+0xea/0x180 [ 93.094192][ T5947] vfs_get_tree+0x8c/0x280 [ 93.098597][ T5947] do_new_mount+0x24b/0xa40 [ 93.103087][ T5947] __se_sys_mount+0x2da/0x3c0 [ 93.107762][ T5947] page last free stack trace: [ 93.112414][ T5947] free_unref_page_prepare+0x7ce/0x8e0 [ 93.117869][ T5947] free_unref_page+0x32/0x2e0 [ 93.122540][ T5947] vfree+0x1a6/0x320 [ 93.126424][ T5947] kcov_close+0x2b/0x50 [ 93.130574][ T5947] __fput+0x234/0x970 [ 93.134549][ T5947] task_work_run+0x1ce/0x250 [ 93.139129][ T5947] do_exit+0x90b/0x23c0 [ 93.143280][ T5947] do_group_exit+0x21b/0x2d0 [ 93.147864][ T5947] get_signal+0x12fc/0x1400 [ 93.152362][ T5947] arch_do_signal_or_restart+0x96/0x780 [ 93.157901][ T5947] exit_to_user_mode_loop+0x70/0x110 [ 93.163179][ T5947] exit_to_user_mode_prepare+0xf6/0x180 [ 93.168727][ T5947] syscall_exit_to_user_mode+0x1a/0x50 [ 93.174188][ T5947] do_syscall_64+0x61/0xb0 [ 93.178608][ T5947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.184489][ T5947] [ 93.186799][ T5947] Memory state around the buggy address: [ 93.192413][ T5947] ffff888061529100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.200459][ T5947] ffff888061529180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.208521][ T5947] >ffff888061529200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.216567][ T5947] ^ [ 93.221139][ T5947] ffff888061529280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.229187][ T5947] ffff888061529300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.237246][ T5947] ================================================================== [ 93.256559][ T5947] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.263781][ T5947] CPU: 0 PID: 5947 Comm: syz.0.17 Not tainted syzkaller #0 [ 93.270990][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.281056][ T5947] Call Trace: [ 93.284348][ T5947] [ 93.287297][ T5947] dump_stack_lvl+0x16c/0x230 [ 93.292008][ T5947] ? show_regs_print_info+0x20/0x20 [ 93.297226][ T5947] ? load_image+0x3b0/0x3b0 [ 93.301750][ T5947] panic+0x2c0/0x710 [ 93.305662][ T5947] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.311831][ T5947] ? bpf_jit_dump+0xd0/0xd0 [ 93.316338][ T5947] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 93.322234][ T5947] ? _raw_spin_unlock+0x40/0x40 [ 93.327173][ T5947] ? dtSplitPage+0x12ca/0x3b10 [ 93.331930][ T5947] check_panic_on_warn+0x84/0xa0 [ 93.336861][ T5947] ? dtSplitPage+0x12ca/0x3b10 [ 93.341643][ T5947] end_report+0x6f/0x140 [ 93.345876][ T5947] kasan_report+0x128/0x150 [ 93.350379][ T5947] ? dtSplitPage+0x12ca/0x3b10 [ 93.355159][ T5947] dtSplitPage+0x12ca/0x3b10 [ 93.359765][ T5947] ? __lock_acquire+0x7c80/0x7c80 [ 93.364802][ T5947] dtInsert+0x108f/0x5f40 [ 93.369138][ T5947] ? kasan_quarantine_put+0xd8/0x220 [ 93.374422][ T5947] ? txLock+0x2b1/0x2090 [ 93.378678][ T5947] ? __rwlock_init+0x150/0x150 [ 93.383439][ T5947] ? slab_free_freelist_hook+0x130/0x1b0 [ 93.389103][ T5947] ? txLock+0xead/0x2090 [ 93.393351][ T5947] ? UniStrupr+0x2e0/0x2e0 [ 93.397780][ T5947] ? dtInitRoot+0x22a/0x670 [ 93.402306][ T5947] jfs_mkdir+0x6c6/0xa30 [ 93.406550][ T5947] ? jfs_symlink+0xe50/0xe50 [ 93.411165][ T5947] ? make_vfsuid+0x51/0xb0 [ 93.415587][ T5947] ? generic_permission+0x1f3/0x590 [ 93.420800][ T5947] ? inode_permission+0xf3/0x480 [ 93.425757][ T5947] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 93.430775][ T5947] ? security_inode_mkdir+0xb7/0x100 [ 93.436061][ T5947] vfs_mkdir+0x296/0x440 [ 93.440308][ T5947] do_mkdirat+0x1d4/0x440 [ 93.444639][ T5947] ? vfs_mkdir+0x440/0x440 [ 93.449060][ T5947] __x64_sys_mkdirat+0x89/0xa0 [ 93.453828][ T5947] do_syscall_64+0x55/0xb0 [ 93.458242][ T5947] ? clear_bhb_loop+0x40/0x90 [ 93.462919][ T5947] ? clear_bhb_loop+0x40/0x90 [ 93.467592][ T5947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.473491][ T5947] RIP: 0033:0x7f414838eec9 [ 93.477907][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.497542][ T5947] RSP: 002b:00007ffda8cb4ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 93.505959][ T5947] RAX: ffffffffffffffda RBX: 00007f41485e5fa0 RCX: 00007f414838eec9 [ 93.513936][ T5947] RDX: 00000000000000f1 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 93.521985][ T5947] RBP: 00007f4148411f91 R08: 0000000000000000 R09: 0000000000000000 [ 93.530081][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.538054][ T5947] R13: 00007f41485e5fa0 R14: 00007f41485e5fa0 R15: 0000000000000003 [ 93.546032][ T5947] [ 93.549337][ T5947] Kernel Offset: disabled [ 93.553659][ T5947] Rebooting in 86400 seconds..