Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts.
2025/10/05 21:51:20 parsed 1 programs
[ 86.922113][ T993] cfg80211: failed to load regulatory.db
[ 88.003840][ T5819] cgroup: Unknown subsys name 'net'
[ 88.235295][ T5819] cgroup: Unknown subsys name 'cpuset'
[ 88.290625][ T5819] cgroup: Unknown subsys name 'rlimit'
[ 89.988810][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.008960][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.012530][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.016090][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.017675][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.018350][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 97.209726][ T1449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.209750][ T1449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.272206][ T1449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.272233][ T1449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.608824][ T5900] chnl_net:caif_netlink_parms(): no params data found
[ 100.010733][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.012670][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.012824][ T5900] bridge_slave_0: entered allmulticast mode
[ 100.014416][ T5900] bridge_slave_0: entered promiscuous mode
[ 100.019331][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.019452][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.019564][ T5900] bridge_slave_1: entered allmulticast mode
[ 100.024274][ T5900] bridge_slave_1: entered promiscuous mode
[ 100.315561][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.318316][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.563096][ T5900] team0: Port device team_slave_0 added
[ 100.566412][ T5900] team0: Port device team_slave_1 added
[ 100.723119][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.723135][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 100.723151][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.725815][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.725825][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 100.725837][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.936926][ T5900] hsr_slave_0: entered promiscuous mode
[ 100.938926][ T5900] hsr_slave_1: entered promiscuous mode
[ 101.313047][ T5900] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.347509][ T5900] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.364546][ T5900] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.403223][ T5900] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.533056][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.608386][ T5900] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.623253][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.624171][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.627674][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.627757][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.845528][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.886055][ T5900] veth0_vlan: entered promiscuous mode
[ 101.909819][ T5900] veth1_vlan: entered promiscuous mode
[ 101.945078][ T5900] veth0_macvtap: entered promiscuous mode
[ 101.948478][ T5900] veth1_macvtap: entered promiscuous mode
[ 101.968630][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.981046][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.002618][ T1449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.005246][ T1449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.005292][ T1449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.005323][ T1449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.825545][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.041996][ T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.243412][ T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/10/05 21:51:38 executed programs: 0
[ 103.524309][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.526753][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.527464][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.528533][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.529203][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 103.757847][ T5927] chnl_net:caif_netlink_parms(): no params data found
[ 104.052269][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.052430][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.052561][ T5927] bridge_slave_0: entered allmulticast mode
[ 104.054075][ T5927] bridge_slave_0: entered promiscuous mode
[ 104.057201][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.057334][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.057643][ T5927] bridge_slave_1: entered allmulticast mode
[ 104.059253][ T5927] bridge_slave_1: entered promiscuous mode
[ 104.387401][ T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.434880][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.450408][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.645176][ T5927] team0: Port device team_slave_0 added
[ 104.663763][ T5927] team0: Port device team_slave_1 added
[ 105.025491][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.025506][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 105.025519][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 105.027136][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 105.027148][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 105.027168][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.216363][ T5927] hsr_slave_0: entered promiscuous mode
[ 105.217196][ T5927] hsr_slave_1: entered promiscuous mode
[ 105.217899][ T5927] debugfs: 'hsr0' already exists in 'hsr'
[ 105.217976][ T5927] Cannot create hsr debugfs directory
[ 105.552137][ T61] Bluetooth: hci0: command tx timeout
[ 105.694751][ T44] bridge_slave_1: left allmulticast mode
[ 105.694930][ T44] bridge_slave_1: left promiscuous mode
[ 105.696232][ T44] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.791390][ T44] bridge_slave_0: left allmulticast mode
[ 105.791413][ T44] bridge_slave_0: left promiscuous mode
[ 105.791653][ T44] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.440573][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 107.551979][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 107.572213][ T44] bond0 (unregistering): Released all slaves
[ 107.639476][ T61] Bluetooth: hci0: command tx timeout
[ 107.920126][ T44] hsr_slave_0: left promiscuous mode
[ 107.960152][ T44] hsr_slave_1: left promiscuous mode
[ 107.961264][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 107.961349][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 108.011349][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 108.011375][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 108.102237][ T44] veth1_macvtap: left promiscuous mode
[ 108.102470][ T44] veth0_macvtap: left promiscuous mode
[ 108.103421][ T44] veth1_vlan: left promiscuous mode
[ 108.103770][ T44] veth0_vlan: left promiscuous mode
[ 109.710109][ T61] Bluetooth: hci0: command tx timeout
[ 110.080686][ T44] team0 (unregistering): Port device team_slave_1 removed
[ 110.270967][ T44] team0 (unregistering): Port device team_slave_0 removed
[ 111.790132][ T61] Bluetooth: hci0: command tx timeout
[ 112.929838][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 112.966875][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.010295][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.056696][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.236505][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.255363][ T5927] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.261592][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.261783][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.274296][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.275378][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.647136][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 113.718339][ T5927] veth0_vlan: entered promiscuous mode
[ 113.729265][ T5927] veth1_vlan: entered promiscuous mode
[ 113.768238][ T5927] veth0_macvtap: entered promiscuous mode
[ 113.779248][ T5927] veth1_macvtap: entered promiscuous mode
[ 113.798572][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.807819][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.822233][ T1419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.823873][ T1419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.823918][ T1419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.823951][ T1419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.007779][ T3634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.007801][ T3634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.054998][ T1419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.055018][ T1419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/10/05 21:51:49 executed programs: 2
[ 114.176175][ T5975] loop0: detected capacity change from 0 to 256
[ 114.187510][ T5975] exfat: Deprecated parameter 'utf8'
[ 114.238858][ T5975] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[ 114.258008][ T37] audit: type=1800 audit(1759701109.391:2): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=1048665 res=0 errno=0
[ 114.258328][ T5975] ==================================================================
[ 114.258339][ T5975] BUG: KASAN: stack-out-of-bounds in exfat_nls_to_utf16+0xac8/0xc10
[ 114.258372][ T5975] Read of size 1 at addr ff[ 114.258372][ T5975] Read of size 1 at addr ffffc90003c37710 by task syz.0.17/5975
[ 114.258388][ T5975]
[ 114.258405][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.258426][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 114.258444][ T5975] Call Trace:
[ 114.258452][ T5975]
[ 114.258463][ T5975] dump_stack_lvl+0x189/0x250
[ 114.258496][ T5975] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.258517][ T5975] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.258540][ T5975] ? __pfx__printk+0x10/0x10
[ 114.258561][ T5975] ? __virt_addr_valid+0xdc/0x5c0
[ 114.258583][ T5975] ? __virt_addr_valid+0xdc/0x5c0
[ 114.258601][ T5975] print_report+0xca/0x240
[ 114.258623][ T5975] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.258642][ T5975] kasan_report+0x118/0x150
[ 114.258666][ T5975] ? __lock_acquire+0xab9/0xd20
[ 114.258690][ T5975] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.258713][ T5975] exfat_nls_to_utf16+0xac8/0xc10
[ 114.258736][ T5975] ? __pfx_exfat_nls_to_utf16+0x10/0x10
[ 114.258774][ T5975] ? process_measurement+0x162f/0x1a40
[ 114.258791][ T5975] ? ima_file_check+0xd7/0x120
[ 114.258805][ T5975] ? security_file_post_open+0xbb/0x290
[ 114.258822][ T5975] ? path_openat+0x2f32/0x3840
[ 114.258841][ T5975] ? do_filp_open+0x1fa/0x410
[ 114.258858][ T5975] ? do_sys_openat2+0x121/0x1c0
[ 114.258875][ T5975] ? __x64_sys_open+0x11e/0x150
[ 114.258891][ T5975] ? do_syscall_64+0xfa/0x3b0
[ 114.258925][ T5975] ? __lock_acquire+0xab9/0xd20
[ 114.258951][ T5975] ? __might_fault+0xb0/0x130
[ 114.258983][ T5975] exfat_ioctl+0x818/0x1100
[ 114.259004][ T5975] ? __lock_acquire+0xab9/0xd20
[ 114.259030][ T5975] ? __pfx_exfat_ioctl+0x10/0x10
[ 114.259058][ T5975] ? is_bpf_text_address+0x26/0x2b0
[ 114.259096][ T5975] ? kfree+0x197/0x950
[ 114.259115][ T5975] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 114.259137][ T5975] ? security_file_ioctl+0xcb/0x2d0
[ 114.259160][ T5975] ? __se_sys_ioctl+0x47/0x170
[ 114.259177][ T5975] ? do_syscall_64+0xfa/0x3b0
[ 114.259198][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.259221][ T5975] ? file_ioctl+0x233/0x780
[ 114.259239][ T5975] ? __pfx_file_ioctl+0x10/0x10
[ 114.259260][ T5975] ? kasan_quarantine_put+0xdd/0x220
[ 114.259281][ T5975] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.259303][ T5975] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 114.259325][ T5975] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 114.259348][ T5975] ? do_vfs_ioctl+0xb36/0x1440
[ 114.259368][ T5975] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 114.259385][ T5975] ? __pfx_smack_log+0x10/0x10
[ 114.259402][ T5975] ? smk_access+0x14c/0x4e0
[ 114.259425][ T5975] ? smk_tskacc+0x2fc/0x370
[ 114.259446][ T5975] ? smack_file_ioctl+0x24d/0x340
[ 114.259470][ T5975] ? __pfx_smack_file_ioctl+0x10/0x10
[ 114.259505][ T5975] ? __pfx___se_sys_futex+0x10/0x10
[ 114.259529][ T5975] ? bpf_lsm_file_ioctl+0x9/0x20
[ 114.259547][ T5975] ? __pfx_exfat_ioctl+0x10/0x10
[ 114.259568][ T5975] __se_sys_ioctl+0xff/0x170
[ 114.259588][ T5975] do_syscall_64+0xfa/0x3b0
[ 114.259610][ T5975] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.259631][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.259648][ T5975] ? clear_bhb_loop+0x60/0xb0
[ 114.259669][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.259685][ T5975] RIP: 0033:0x7fed7375eec9
[ 114.259708][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.259724][ T5975] RSP: 002b:00007fff5eae5808 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 114.259745][ T5975] RAX: ffffffffffffffda RBX: 00007fed739b5fa0 RCX: 00007fed7375eec9
[ 114.259758][ T5975] RDX: 00002000000007c0 RSI: 0000000041009432 RDI: 0000000000000004
[ 114.259769][ T5975] RBP: 00007fed737e1f91 R08: 0000000000000000 R09: 0000000000000000
[ 114.259780][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 114.259791][ T5975] R13: 00007fed739b5fa0 R14: 00007fed739b5fa0 R15: 0000000000000003
[ 114.259810][ T5975]
[ 114.259817][ T5975]
[ 114.259822][ T5975] The buggy address belongs to stack of task syz.0.17/5975
[ 114.259831][ T5975] and is located at offset 304 in frame:
[ 114.259837][ T5975] exfat_ioctl+0x0/0x1100
[ 114.259855][ T5975]
[ 114.259859][ T5975] This frame has 7 objects:
[ 114.259868][ T5975] [32, 36) 'lossy.i'
[ 114.259878][ T5975] [48, 304) 'label.i50'
[ 114.259892][ T5975] [368, 888) 'uniname.i51'
[ 114.259901][ T5975] [1024, 1280) 'label.i'
[ 114.259910][ T5975] [1344, 1864) 'uniname.i'
[ 114.259918][ T5975] [2000, 2024) 'range.i'
[ 114.259927][ T5975] [2064, 2144) 'ia.i'
[ 114.259935][ T5975]
[ 114.259940][ T5975] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003c30000 allocated at copy_process+0x545/0x3ae0
[ 114.259977][ T5975] The buggy address belongs to the physical page:
[ 114.259994][ T5975] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888026a18f00 pfn:0x26a18
[ 114.260010][ T5975] memcg:ffff888022f68802
[ 114.260017][ T5975] flags: 0x80000000000000(node=0|zone=1)
[ 114.260041][ T5975] raw: 0080000000000000 0000000000000000 dead000000000122 0000000000000000
[ 114.260056][ T5975] raw: ffff888026a18f00 0000000000000000 00000001ffffffff ffff888022f68802
[ 114.260064][ T5975] page dumped because: kasan: bad access detected
[ 114.260077][ T5975] page_owner tracks the page as allocated
[ 114.260083][ T5975] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 3634, tgid 3634 (kworker/u8:13), ts 113475141729, free_ts 113296085908
[ 114.260113][ T5975] post_alloc_hook+0x240/0x2a0
[ 114.260135][ T5975] get_page_from_freelist+0x28c0/0x2960
[ 114.260149][ T5975] __alloc_frozen_pages_noprof+0x181/0x370
[ 114.260164][ T5975] alloc_pages_mpol+0xd1/0x380
[ 114.260186][ T5975] alloc_pages_noprof+0xcf/0x1e0
[ 114.260208][ T5975] __vmalloc_node_range_noprof+0x96c/0x12d0
[ 114.260231][ T5975] __vmalloc_node_noprof+0xc2/0x110
[ 114.260251][ T5975] dup_task_struct+0x3d4/0x830
[ 114.260272][ T5975] copy_process+0x545/0x3ae0
[ 114.260294][ T5975] kernel_clone+0x224/0x7c0
[ 114.260313][ T5975] user_mode_thread+0xdd/0x140
[ 114.260332][ T5975] call_usermodehelper_exec_work+0x9c/0x230
[ 114.260356][ T5975] process_scheduled_works+0xae1/0x17b0
[ 114.260376][ T5975] worker_thread+0x8a0/0xda0
[ 114.260395][ T5975] kthread+0x711/0x8a0
[ 114.260408][ T5975] ret_from_fork+0x436/0x7d0
[ 114.260427][ T5975] page last free pid 28 tgid 28 stack trace:
[ 114.260437][ T5975] __free_frozen_pages+0xfb6/0x1140
[ 114.260458][ T5975] rcu_cpu_kthread+0xbf3/0x1b50
[ 114.260472][ T5975] smpboot_thread_fn+0x542/0xa60
[ 114.260497][ T5975] kthread+0x711/0x8a0
[ 114.260510][ T5975] ret_from_fork+0x436/0x7d0
[ 114.260528][ T5975] ret_from_fork_asm+0x1a/0x30
[ 114.260544][ T5975]
[ 114.260549][ T5975] Memory state around the buggy address:
[ 114.260558][ T5975] ffffc90003c37600: 04 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.260570][ T5975] ffffc90003c37680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.260582][ T5975] >ffffc90003c37700: 00 00 f2 f2 f2 f2 f2 f2 f2 f2 00 00 00 00 00 00
[ 114.260591][ T5975] ^
[ 114.260601][ T5975] ffffc90003c37780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.260612][ T5975] ffffc90003c37800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.260621][ T5975] ==================================================================
[ 114.301666][ T5975] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 114.301690][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.301712][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 114.301723][ T5975] Call Trace:
[ 114.301730][ T5975]
[ 114.301738][ T5975] dump_stack_lvl+0x99/0x250
[ 114.301767][ T5975] ? __asan_memcpy+0x40/0x70
[ 114.301789][ T5975] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.301813][ T5975] ? __pfx__printk+0x10/0x10
[ 114.301838][ T5975] vpanic+0x237/0x6d0
[ 114.301854][ T5975] ? __pfx_vpanic+0x10/0x10
[ 114.301868][ T5975] ? preempt_schedule+0xae/0xc0
[ 114.301889][ T5975] ? __pfx_preempt_schedule+0x10/0x10
[ 114.301912][ T5975] panic+0xb9/0xc0
[ 114.301927][ T5975] ? __pfx_panic+0x10/0x10
[ 114.301944][ T5975] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 114.301969][ T5975] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.301990][ T5975] check_panic_on_warn+0x89/0xb0
[ 114.302010][ T5975] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.302029][ T5975] end_report+0x78/0x160
[ 114.302052][ T5975] kasan_report+0x129/0x150
[ 114.302074][ T5975] ? __lock_acquire+0xab9/0xd20
[ 114.302099][ T5975] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.302122][ T5975] exfat_nls_to_utf16+0xac8/0xc10
[ 114.302172][ T5975] ? __pfx_exfat_nls_to_utf16+0x10/0x10
[ 114.302212][ T5975] ? process_measurement+0x162f/0x1a40
[ 114.302230][ T5975] ? ima_file_check+0xd7/0x120
[ 114.302245][ T5975] ? security_file_post_open+0xbb/0x290
[ 114.302261][ T5975] ? path_openat+0x2f32/0x3840
[ 114.302281][ T5975] ? do_filp_open+0x1fa/0x410
[ 114.302299][ T5975] ? do_sys_openat2+0x121/0x1c0
[ 114.302315][ T5975] ? __x64_sys_open+0x11e/0x150
[ 114.302331][ T5975] ? do_syscall_64+0xfa/0x3b0
[ 114.302365][ T5975] ? __lock_acquire+0xab9/0xd20
[ 114.302393][ T5975] ? __might_fault+0xb0/0x130
[ 114.302425][ T5975] exfat_ioctl+0x818/0x1100
[ 114.302446][ T5975] ? __lock_acquire+0xab9/0xd20
[ 114.302475][ T5975] ? __pfx_exfat_ioctl+0x10/0x10
[ 114.302506][ T5975] ? is_bpf_text_address+0x26/0x2b0
[ 114.302544][ T5975] ? kfree+0x197/0x950
[ 114.302564][ T5975] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 114.302588][ T5975] ? security_file_ioctl+0xcb/0x2d0
[ 114.302617][ T5975] ? __se_sys_ioctl+0x47/0x170
[ 114.302634][ T5975] ? do_syscall_64+0xfa/0x3b0
[ 114.302655][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.302682][ T5975] ? file_ioctl+0x233/0x780
[ 114.302702][ T5975] ? __pfx_file_ioctl+0x10/0x10
[ 114.302726][ T5975] ? kasan_quarantine_put+0xdd/0x220
[ 114.302746][ T5975] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.302771][ T5975] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 114.302796][ T5975] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 114.302821][ T5975] ? do_vfs_ioctl+0xb36/0x1440
[ 114.302841][ T5975] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 114.302860][ T5975] ? __pfx_smack_log+0x10/0x10
[ 114.302880][ T5975] ? smk_access+0x14c/0x4e0
[ 114.302902][ T5975] ? smk_tskacc+0x2fc/0x370
[ 114.302924][ T5975] ? smack_file_ioctl+0x24d/0x340
[ 114.302947][ T5975] ? __pfx_smack_file_ioctl+0x10/0x10
[ 114.302975][ T5975] ? __pfx___se_sys_futex+0x10/0x10
[ 114.302999][ T5975] ? bpf_lsm_file_ioctl+0x9/0x20
[ 114.303016][ T5975] ? __pfx_exfat_ioctl+0x10/0x10
[ 114.303036][ T5975] __se_sys_ioctl+0xff/0x170
[ 114.303057][ T5975] do_syscall_64+0xfa/0x3b0
[ 114.303079][ T5975] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.303099][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.303117][ T5975] ? clear_bhb_loop+0x60/0xb0
[ 114.303136][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.303161][ T5975] RIP: 0033:0x7fed7375eec9
[ 114.303178][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.303193][ T5975] RSP: 002b:00007fff5eae5808 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 114.303213][ T5975] RAX: ffffffffffffffda RBX: 00007fed739b5fa0 RCX: 00007fed7375eec9
[ 114.303226][ T5975] RDX: 00002000000007c0 RSI: 0000000041009432 RDI: 0000000000000004
[ 114.303238][ T5975] RBP: 00007fed737e1f91 R08: 0000000000000000 R09: 0000000000000000
[ 114.303250][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 114.303261][ T5975] R13: 00007fed739b5fa0 R14: 00007fed739b5fa0 R15: 0000000000000003
[ 114.303281][ T5975]
[ 114.303587][ T5975] Kernel Offset: disabled