Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. 2025/07/05 23:27:02 ignoring optional flag "sandboxArg"="0" 2025/07/05 23:27:03 parsed 1 programs [ 70.009305][ T5794] cgroup: Unknown subsys name 'net' [ 70.183911][ T5794] cgroup: Unknown subsys name 'rlimit' [ 71.590872][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.679182][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.685743][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.495781][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.505071][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.513107][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.524731][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.532839][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.540439][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.529645][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 75.600596][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.610752][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.620245][ T5863] bridge_slave_0: entered allmulticast mode [ 75.628029][ T5863] bridge_slave_0: entered promiscuous mode [ 75.654155][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.661618][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.668880][ T5863] bridge_slave_1: entered allmulticast mode [ 75.675599][ T5863] bridge_slave_1: entered promiscuous mode [ 75.715253][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.728155][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.773880][ T5863] team0: Port device team_slave_0 added [ 75.781425][ T5863] team0: Port device team_slave_1 added [ 75.823518][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.830815][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.860476][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.885898][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.892868][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.920171][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.965475][ T5863] hsr_slave_0: entered promiscuous mode [ 75.972337][ T5863] hsr_slave_1: entered promiscuous mode [ 76.126980][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.141112][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.158383][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.169987][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.260207][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.292149][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.310806][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.318202][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.333867][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.341060][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.504489][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.542281][ T5863] veth0_vlan: entered promiscuous mode [ 76.553525][ T5863] veth1_vlan: entered promiscuous mode [ 76.585053][ T5863] veth0_macvtap: entered promiscuous mode [ 76.599300][ T5863] veth1_macvtap: entered promiscuous mode [ 76.614675][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.632473][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.650238][ T5863] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.659886][ T5863] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.668885][ T5863] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.677823][ T5863] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.886129][ T3538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.041622][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.055514][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.095494][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.108239][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/05 23:27:12 executed programs: 0 [ 77.991424][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.000538][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.009846][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.018015][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.026968][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.034425][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.169761][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 78.221078][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.229106][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.237123][ T5901] bridge_slave_0: entered allmulticast mode [ 78.243852][ T5901] bridge_slave_0: entered promiscuous mode [ 78.253333][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.262927][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.270875][ T5901] bridge_slave_1: entered allmulticast mode [ 78.279035][ T5901] bridge_slave_1: entered promiscuous mode [ 78.308142][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.320045][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.349784][ T5901] team0: Port device team_slave_0 added [ 78.357537][ T5901] team0: Port device team_slave_1 added [ 78.380760][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.388778][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.415287][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.428629][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.435626][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.462309][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.498011][ T5901] hsr_slave_0: entered promiscuous mode [ 78.504488][ T5901] hsr_slave_1: entered promiscuous mode [ 78.511201][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.519163][ T5901] Cannot create hsr debugfs directory [ 79.358205][ T3538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.078103][ T5105] Bluetooth: hci0: command tx timeout [ 81.866060][ T3538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.919208][ T967] cfg80211: failed to load regulatory.db [ 81.949806][ T3538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.156797][ T5105] Bluetooth: hci0: command tx timeout [ 82.808327][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.824202][ T3538] hsr_slave_0: left promiscuous mode [ 82.830527][ T3538] hsr_slave_1: left promiscuous mode [ 82.836899][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.844344][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.853758][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.861741][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.870167][ T3538] bridge_slave_1: left allmulticast mode [ 82.875805][ T3538] bridge_slave_1: left promiscuous mode [ 82.882670][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.894081][ T3538] bridge_slave_0: left allmulticast mode [ 82.899812][ T3538] bridge_slave_0: left promiscuous mode [ 82.905517][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.925690][ T3538] veth1_macvtap: left promiscuous mode [ 82.931799][ T3538] veth0_macvtap: left promiscuous mode [ 82.937549][ T3538] veth1_vlan: left promiscuous mode [ 82.943011][ T3538] veth0_vlan: left promiscuous mode [ 83.282333][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 83.311694][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 83.339971][ T3538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.372650][ T3538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.654136][ T3538] bond0 (unregistering): Released all slaves [ 83.738195][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.748058][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.760038][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.851772][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.878057][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.894144][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.901413][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.914948][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.922729][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.123017][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.176626][ T5901] veth0_vlan: entered promiscuous mode [ 84.189183][ T5901] veth1_vlan: entered promiscuous mode [ 84.215572][ T5901] veth0_macvtap: entered promiscuous mode [ 84.224324][ T5901] veth1_macvtap: entered promiscuous mode [ 84.236258][ T5105] Bluetooth: hci0: command tx timeout [ 84.241139][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.255350][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.280342][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.289561][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.300957][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.309740][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.384676][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.395727][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.434083][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.443999][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.500218][ T5950] syz.0.16[5950]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.715321][ T5950] loop0: detected capacity change from 0 to 32768 [ 84.743407][ T5950] [ 84.743407][ T5950] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.743407][ T5950] [ 84.778267][ T5950] read_mapping_page failed! [ 84.792100][ T5950] ERROR: (device loop0): txCommit: [ 84.792100][ T5950] [ 84.816716][ T5950] read_mapping_page failed! [ 84.821418][ T5950] ERROR: (device loop0): txCommit: [ 84.821418][ T5950] [ 84.832422][ T5950] ================================================================== [ 84.840509][ T5950] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xe8b/0x13e0 [ 84.848053][ T5950] Read of size 4 at addr ffff888060c1370c by task syz.0.16/5950 [ 84.855670][ T5950] [ 84.858000][ T5950] CPU: 0 PID: 5950 Comm: syz.0.16 Not tainted 6.6.95-syzkaller #0 [ 84.865807][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.875880][ T5950] Call Trace: [ 84.879158][ T5950] [ 84.882086][ T5950] dump_stack_lvl+0x16c/0x230 [ 84.886774][ T5950] ? read_lock_is_recursive+0x20/0x20 [ 84.892143][ T5950] ? show_regs_print_info+0x20/0x20 [ 84.897337][ T5950] ? load_image+0x3b0/0x3b0 [ 84.901831][ T5950] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 84.907193][ T5950] ? __virt_addr_valid+0x18c/0x540 [ 84.912304][ T5950] ? __virt_addr_valid+0x469/0x540 [ 84.917423][ T5950] print_report+0xac/0x230 [ 84.921834][ T5950] ? dtInsertEntry+0xe8b/0x13e0 [ 84.926678][ T5950] kasan_report+0x117/0x150 [ 84.931180][ T5950] ? dtInsertEntry+0xe8b/0x13e0 [ 84.936023][ T5950] dtInsertEntry+0xe8b/0x13e0 [ 84.940701][ T5950] ? release_metapage+0x703/0x870 [ 84.945737][ T5950] dtSplitPage+0x2a66/0x3b10 [ 84.950335][ T5950] dtInsert+0x108f/0x5f40 [ 84.954663][ T5950] ? kasan_quarantine_put+0xd8/0x220 [ 84.960224][ T5950] ? slab_free_freelist_hook+0x130/0x1b0 [ 84.965868][ T5950] ? UniStrupr+0x2e0/0x2e0 [ 84.970280][ T5950] ? dtSearch+0x1d20/0x21b0 [ 84.974784][ T5950] jfs_symlink+0x719/0xe50 [ 84.979205][ T5950] ? jfs_unlink+0xa60/0xa60 [ 84.983711][ T5950] ? make_vfsuid+0x51/0xb0 [ 84.988128][ T5950] ? inode_permission+0xf3/0x480 [ 84.993057][ T5950] ? bpf_lsm_inode_symlink+0x9/0x10 [ 84.998250][ T5950] ? security_inode_symlink+0xb6/0x100 [ 85.003709][ T5950] vfs_symlink+0x138/0x2b0 [ 85.008121][ T5950] do_symlinkat+0x1b2/0x3f0 [ 85.012706][ T5950] ? vfs_symlink+0x2b0/0x2b0 [ 85.017817][ T5950] ? getname_flags+0x20a/0x500 [ 85.022602][ T5950] __x64_sys_symlink+0x7e/0x90 [ 85.027377][ T5950] do_syscall_64+0x55/0xb0 [ 85.031834][ T5950] ? clear_bhb_loop+0x40/0x90 [ 85.036513][ T5950] ? clear_bhb_loop+0x40/0x90 [ 85.041191][ T5950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.047166][ T5950] RIP: 0033:0x7f828478e929 [ 85.051580][ T5950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.071188][ T5950] RSP: 002b:00007ffd84558a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 85.079601][ T5950] RAX: ffffffffffffffda RBX: 00007f82849b5fa0 RCX: 00007f828478e929 [ 85.087563][ T5950] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 85.095544][ T5950] RBP: 00007f8284810b39 R08: 0000000000000000 R09: 0000000000000000 [ 85.103517][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.111481][ T5950] R13: 00007f82849b5fa0 R14: 00007f82849b5fa0 R15: 0000000000000002 [ 85.119482][ T5950] [ 85.122584][ T5950] [ 85.124908][ T5950] Allocated by task 5950: [ 85.129232][ T5950] kasan_set_track+0x4e/0x70 [ 85.133820][ T5950] __kasan_slab_alloc+0x6c/0x80 [ 85.138660][ T5950] slab_post_alloc_hook+0x6e/0x4d0 [ 85.143769][ T5950] kmem_cache_alloc_lru+0x115/0x2e0 [ 85.148955][ T5950] jfs_alloc_inode+0x28/0x60 [ 85.153718][ T5950] iget_locked+0x1ad/0x840 [ 85.158134][ T5950] jfs_iget+0x24/0x3c0 [ 85.162204][ T5950] jfs_lookup+0x1c6/0x380 [ 85.166522][ T5950] __lookup_slow+0x281/0x3b0 [ 85.171100][ T5950] lookup_slow+0x53/0x70 [ 85.175326][ T5950] walk_component+0x2be/0x3f0 [ 85.180006][ T5950] path_lookupat+0x169/0x440 [ 85.184595][ T5950] filename_lookup+0x1f4/0x510 [ 85.189365][ T5950] user_path_at_empty+0x42/0x60 [ 85.194214][ T5950] __se_sys_chdir+0x95/0x290 [ 85.198796][ T5950] do_syscall_64+0x55/0xb0 [ 85.203200][ T5950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.209110][ T5950] [ 85.211426][ T5950] The buggy address belongs to the object at ffff888060c12e40 [ 85.211426][ T5950] which belongs to the cache jfs_ip of size 2240 [ 85.225220][ T5950] The buggy address is located 12 bytes to the right of [ 85.225220][ T5950] allocated 2240-byte region [ffff888060c12e40, ffff888060c13700) [ 85.239890][ T5950] [ 85.242208][ T5950] The buggy address belongs to the physical page: [ 85.249486][ T5950] page:ffffea0001830400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60c10 [ 85.259656][ T5950] head:ffffea0001830400 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.268595][ T5950] memcg:ffff888078d3cb01 [ 85.272844][ T5950] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 85.280842][ T5950] page_type: 0xffffffff() [ 85.285178][ T5950] raw: 00fff00000000840 ffff888142eb3b40 dead000000000122 0000000000000000 [ 85.293769][ T5950] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff888078d3cb01 [ 85.302438][ T5950] page dumped because: kasan: bad access detected [ 85.308854][ T5950] page_owner tracks the page as allocated [ 85.314576][ T5950] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5950, tgid 5950 (syz.0.16), ts 84736685196, free_ts 74014082038 [ 85.337974][ T5950] post_alloc_hook+0x1cd/0x210 [ 85.342909][ T5950] get_page_from_freelist+0x195c/0x19f0 [ 85.348444][ T5950] __alloc_pages+0x1e3/0x460 [ 85.353030][ T5950] alloc_slab_page+0x5d/0x170 [ 85.357692][ T5950] new_slab+0x87/0x2e0 [ 85.361746][ T5950] ___slab_alloc+0xc6d/0x12f0 [ 85.366411][ T5950] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 85.371606][ T5950] jfs_alloc_inode+0x28/0x60 [ 85.376195][ T5950] new_inode_pseudo+0x63/0x1d0 [ 85.381123][ T5950] new_inode+0x22/0x1b0 [ 85.385269][ T5950] diReadSpecial+0x52/0x6f0 [ 85.389759][ T5950] jfs_mount+0x73/0x860 [ 85.393907][ T5950] jfs_fill_super+0x4e2/0xac0 [ 85.398586][ T5950] mount_bdev+0x22b/0x2d0 [ 85.402923][ T5950] legacy_get_tree+0xea/0x180 [ 85.407607][ T5950] vfs_get_tree+0x8c/0x280 [ 85.412023][ T5950] page last free stack trace: [ 85.416694][ T5950] free_unref_page_prepare+0x7ce/0x8e0 [ 85.422385][ T5950] free_unref_page+0x32/0x2e0 [ 85.427064][ T5950] vfree+0x1a6/0x320 [ 85.430974][ T5950] kcov_close+0x2b/0x50 [ 85.435140][ T5950] __fput+0x234/0x970 [ 85.439118][ T5950] task_work_run+0x1ce/0x250 [ 85.443739][ T5950] do_exit+0x90b/0x23c0 [ 85.447984][ T5950] do_group_exit+0x21b/0x2d0 [ 85.452638][ T5950] get_signal+0x12fc/0x1400 [ 85.457145][ T5950] arch_do_signal_or_restart+0x96/0x780 [ 85.463138][ T5950] exit_to_user_mode_loop+0x70/0x110 [ 85.468446][ T5950] exit_to_user_mode_prepare+0xb1/0x140 [ 85.474004][ T5950] syscall_exit_to_user_mode+0x1a/0x50 [ 85.479561][ T5950] do_syscall_64+0x61/0xb0 [ 85.483983][ T5950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.489883][ T5950] [ 85.492196][ T5950] Memory state around the buggy address: [ 85.497827][ T5950] ffff888060c13600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.505886][ T5950] ffff888060c13680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.513950][ T5950] >ffff888060c13700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.522028][ T5950] ^ [ 85.526408][ T5950] ffff888060c13780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.534551][ T5950] ffff888060c13800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.542599][ T5950] ================================================================== [ 85.576859][ T5950] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.584369][ T5950] CPU: 0 PID: 5950 Comm: syz.0.16 Not tainted 6.6.95-syzkaller #0 [ 85.592303][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.602628][ T5950] Call Trace: [ 85.605915][ T5950] [ 85.608844][ T5950] dump_stack_lvl+0x16c/0x230 [ 85.613508][ T5950] ? show_regs_print_info+0x20/0x20 [ 85.618694][ T5950] ? load_image+0x3b0/0x3b0 [ 85.623216][ T5950] panic+0x2c0/0x710 [ 85.627104][ T5950] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 85.633262][ T5950] ? bpf_jit_dump+0xd0/0xd0 [ 85.637781][ T5950] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 85.643673][ T5950] ? _raw_spin_unlock+0x40/0x40 [ 85.648524][ T5950] ? dtInsertEntry+0xe8b/0x13e0 [ 85.653371][ T5950] check_panic_on_warn+0x84/0xa0 [ 85.658302][ T5950] ? dtInsertEntry+0xe8b/0x13e0 [ 85.663153][ T5950] end_report+0x6f/0x140 [ 85.667399][ T5950] kasan_report+0x128/0x150 [ 85.671895][ T5950] ? dtInsertEntry+0xe8b/0x13e0 [ 85.676744][ T5950] dtInsertEntry+0xe8b/0x13e0 [ 85.681434][ T5950] ? release_metapage+0x703/0x870 [ 85.686546][ T5950] dtSplitPage+0x2a66/0x3b10 [ 85.691340][ T5950] dtInsert+0x108f/0x5f40 [ 85.695953][ T5950] ? kasan_quarantine_put+0xd8/0x220 [ 85.701238][ T5950] ? slab_free_freelist_hook+0x130/0x1b0 [ 85.706870][ T5950] ? UniStrupr+0x2e0/0x2e0 [ 85.711291][ T5950] ? dtSearch+0x1d20/0x21b0 [ 85.715787][ T5950] jfs_symlink+0x719/0xe50 [ 85.720198][ T5950] ? jfs_unlink+0xa60/0xa60 [ 85.724794][ T5950] ? make_vfsuid+0x51/0xb0 [ 85.729210][ T5950] ? inode_permission+0xf3/0x480 [ 85.734144][ T5950] ? bpf_lsm_inode_symlink+0x9/0x10 [ 85.739333][ T5950] ? security_inode_symlink+0xb6/0x100 [ 85.744784][ T5950] vfs_symlink+0x138/0x2b0 [ 85.749214][ T5950] do_symlinkat+0x1b2/0x3f0 [ 85.753840][ T5950] ? vfs_symlink+0x2b0/0x2b0 [ 85.758430][ T5950] ? getname_flags+0x20a/0x500 [ 85.763180][ T5950] __x64_sys_symlink+0x7e/0x90 [ 85.767948][ T5950] do_syscall_64+0x55/0xb0 [ 85.772369][ T5950] ? clear_bhb_loop+0x40/0x90 [ 85.777040][ T5950] ? clear_bhb_loop+0x40/0x90 [ 85.781701][ T5950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.787594][ T5950] RIP: 0033:0x7f828478e929 [ 85.792007][ T5950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.811607][ T5950] RSP: 002b:00007ffd84558a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 85.820008][ T5950] RAX: ffffffffffffffda RBX: 00007f82849b5fa0 RCX: 00007f828478e929 [ 85.827967][ T5950] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 85.835949][ T5950] RBP: 00007f8284810b39 R08: 0000000000000000 R09: 0000000000000000 [ 85.844264][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.852318][ T5950] R13: 00007f82849b5fa0 R14: 00007f82849b5fa0 R15: 0000000000000002 [ 85.860281][ T5950] [ 85.863627][ T5950] Kernel Offset: disabled [ 85.867938][ T5950] Rebooting in 86400 seconds..