Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. 2025/11/30 18:52:02 parsed 1 programs [ 73.657426][ T5829] cgroup: Unknown subsys name 'net' [ 73.831532][ T5829] cgroup: Unknown subsys name 'cpuset' [ 73.840152][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.268592][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.874458][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.883569][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.891206][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.899520][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.907555][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.997167][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.558952][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.576361][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.606940][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.614861][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.449906][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 80.521213][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.528623][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.536027][ T5899] bridge_slave_0: entered allmulticast mode [ 80.543414][ T5899] bridge_slave_0: entered promiscuous mode [ 80.552560][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.560312][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.568147][ T5899] bridge_slave_1: entered allmulticast mode [ 80.578293][ T5899] bridge_slave_1: entered promiscuous mode [ 80.611807][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.623241][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.658085][ T5899] team0: Port device team_slave_0 added [ 80.665684][ T5899] team0: Port device team_slave_1 added [ 80.690957][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.697930][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.724369][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.737431][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.745565][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.771736][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.811733][ T5899] hsr_slave_0: entered promiscuous mode [ 80.818058][ T5899] hsr_slave_1: entered promiscuous mode [ 80.954676][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.966848][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.977660][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.987799][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.059588][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.083040][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.096262][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.103473][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.118574][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.125678][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.282718][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.327466][ T5899] veth0_vlan: entered promiscuous mode [ 81.338699][ T5899] veth1_vlan: entered promiscuous mode [ 81.365301][ T5899] veth0_macvtap: entered promiscuous mode [ 81.374801][ T5899] veth1_macvtap: entered promiscuous mode [ 81.393832][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.407744][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.422908][ T3495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.432400][ T3495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.442905][ T3495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.451986][ T3495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.572138][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.687977][ T1139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.811355][ T1139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.911097][ T1139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/30 18:52:13 executed programs: 0 [ 82.682929][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.692045][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.701050][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.709118][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.716530][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.858332][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 82.933990][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.941646][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.949439][ T5940] bridge_slave_0: entered allmulticast mode [ 82.956397][ T5940] bridge_slave_0: entered promiscuous mode [ 82.965321][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.972657][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.980009][ T5940] bridge_slave_1: entered allmulticast mode [ 82.986971][ T5940] bridge_slave_1: entered promiscuous mode [ 83.019736][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.031736][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.066297][ T5940] team0: Port device team_slave_0 added [ 83.076086][ T5940] team0: Port device team_slave_1 added [ 83.102408][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.109380][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.135717][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.149589][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.156544][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.182609][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.221987][ T5940] hsr_slave_0: entered promiscuous mode [ 83.228277][ T5940] hsr_slave_1: entered promiscuous mode [ 83.234911][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 83.240893][ T5940] Cannot create hsr debugfs directory [ 84.112192][ T1139] bridge_slave_1: left allmulticast mode [ 84.117891][ T1139] bridge_slave_1: left promiscuous mode [ 84.125069][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.135951][ T1139] bridge_slave_0: left allmulticast mode [ 84.142732][ T1139] bridge_slave_0: left promiscuous mode [ 84.148586][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.359244][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.371040][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.381746][ T1139] bond0 (unregistering): Released all slaves [ 84.505865][ T1139] hsr_slave_0: left promiscuous mode [ 84.516975][ T1139] hsr_slave_1: left promiscuous mode [ 84.523492][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.531444][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.542880][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.550552][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.570418][ T1139] veth1_macvtap: left promiscuous mode [ 84.576095][ T1139] veth0_macvtap: left promiscuous mode [ 84.582804][ T1139] veth1_vlan: left promiscuous mode [ 84.588202][ T1139] veth0_vlan: left promiscuous mode [ 84.739658][ T51] Bluetooth: hci0: command tx timeout [ 84.973753][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 84.995314][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 85.417455][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.430077][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.442556][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.454543][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.763199][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.803018][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.816807][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.824012][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.842946][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.850129][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.056569][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.097102][ T5940] veth0_vlan: entered promiscuous mode [ 86.108262][ T5940] veth1_vlan: entered promiscuous mode [ 86.135630][ T5940] veth0_macvtap: entered promiscuous mode [ 86.145390][ T5940] veth1_macvtap: entered promiscuous mode [ 86.162346][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.176322][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.189823][ T1139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.199809][ T1139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.210086][ T1139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.219669][ T1139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.276820][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.285398][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.315054][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.323334][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.508685][ T5987] loop0: detected capacity change from 0 to 32768 [ 86.535585][ T5987] ================================================================== [ 86.543680][ T5987] BUG: KASAN: slab-out-of-bounds in diWrite+0x1209/0x1f40 [ 86.550800][ T5987] Write of size 32 at addr ffff88802a4610c0 by task syz.0.17/5987 [ 86.558607][ T5987] [ 86.560949][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 86.560971][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.560987][ T5987] Call Trace: [ 86.560995][ T5987] [ 86.561002][ T5987] dump_stack_lvl+0x189/0x250 [ 86.561025][ T5987] ? __virt_addr_valid+0x1c8/0x5c0 [ 86.561046][ T5987] ? rcu_is_watching+0x15/0xb0 [ 86.561066][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.561084][ T5987] ? rcu_is_watching+0x15/0xb0 [ 86.561103][ T5987] ? lock_release+0x4b/0x3b0 [ 86.561119][ T5987] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 86.561138][ T5987] ? __virt_addr_valid+0x1c8/0x5c0 [ 86.561159][ T5987] ? __virt_addr_valid+0x4a5/0x5c0 [ 86.561180][ T5987] print_report+0xca/0x240 [ 86.561196][ T5987] ? diWrite+0x1209/0x1f40 [ 86.561212][ T5987] kasan_report+0x118/0x150 [ 86.561232][ T5987] ? diWrite+0x1209/0x1f40 [ 86.561251][ T5987] kasan_check_range+0x2b0/0x2c0 [ 86.561271][ T5987] ? diWrite+0x1209/0x1f40 [ 86.561287][ T5987] __asan_memcpy+0x40/0x70 [ 86.561311][ T5987] diWrite+0x1209/0x1f40 [ 86.561334][ T5987] txCommit+0x852/0x5430 [ 86.561357][ T5987] ? txLock+0xaf3/0x1cb0 [ 86.561375][ T5987] ? __pfx_txCommit+0x10/0x10 [ 86.561394][ T5987] ? rcu_is_watching+0x15/0xb0 [ 86.561413][ T5987] ? __mark_inode_dirty+0x45c/0x1330 [ 86.561431][ T5987] add_missing_indices+0x8ce/0xce0 [ 86.561458][ T5987] ? __pfx_add_missing_indices+0x10/0x10 [ 86.561480][ T5987] ? alloc_pages_noprof+0xbe/0x190 [ 86.561502][ T5987] jfs_readdir+0x1d8f/0x3ae0 [ 86.561541][ T5987] ? __pfx_jfs_readdir+0x10/0x10 [ 86.561571][ T5987] ? down_write+0x162/0x1f0 [ 86.561591][ T5987] ? __pfx_down_write+0x10/0x10 [ 86.561610][ T5987] ? wrap_directory_iterator+0x52/0xe0 [ 86.561627][ T5987] ? __pfx_jfs_readdir+0x10/0x10 [ 86.561648][ T5987] wrap_directory_iterator+0x96/0xe0 [ 86.561666][ T5987] iterate_dir+0x399/0x570 [ 86.561684][ T5987] __se_sys_getdents64+0xe4/0x260 [ 86.561702][ T5987] ? __pfx___se_sys_getdents64+0x10/0x10 [ 86.561719][ T5987] ? __pfx_filldir64+0x10/0x10 [ 86.561738][ T5987] ? do_syscall_64+0xbe/0xf80 [ 86.561758][ T5987] do_syscall_64+0xfa/0xf80 [ 86.561775][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.561792][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 86.561810][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.561826][ T5987] RIP: 0033:0x7f1bafd8f749 [ 86.561846][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.561861][ T5987] RSP: 002b:00007ffe5ff53978 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 86.561880][ T5987] RAX: ffffffffffffffda RBX: 00007f1baffe5fa0 RCX: 00007f1bafd8f749 [ 86.561894][ T5987] RDX: 0000000000000099 RSI: 0000200000000280 RDI: 0000000000000005 [ 86.561905][ T5987] RBP: 00007f1bafe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.561916][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.561927][ T5987] R13: 00007f1baffe5fa0 R14: 00007f1baffe5fa0 R15: 0000000000000003 [ 86.561946][ T5987] [ 86.561953][ T5987] [ 86.661047][ T10] cfg80211: failed to load regulatory.db [ 86.662904][ T5987] Allocated by task 5940: [ 86.818469][ T51] Bluetooth: hci0: command tx timeout [ 86.825858][ T5987] kasan_save_track+0x3e/0x80 [ 86.882800][ T5987] __kasan_slab_alloc+0x6c/0x80 [ 86.887633][ T5987] kmem_cache_alloc_noprof+0x37d/0x710 [ 86.893067][ T5987] __kernfs_new_node+0xdc/0x880 [ 86.897892][ T5987] kernfs_new_node+0x102/0x210 [ 86.902631][ T5987] kernfs_create_link+0xa7/0x200 [ 86.907554][ T5987] sysfs_do_create_link_sd+0x83/0x110 [ 86.912924][ T5987] device_add_class_symlinks+0x1cf/0x240 [ 86.918532][ T5987] device_add+0x475/0xb80 [ 86.922835][ T5987] netdev_register_kobject+0x178/0x310 [ 86.928272][ T5987] register_netdevice+0x1246/0x1a70 [ 86.933449][ T5987] veth_newlink+0x5d4/0xa60 [ 86.937927][ T5987] rtnl_newlink_create+0x310/0xb00 [ 86.943011][ T5987] rtnl_newlink+0x16e7/0x1c90 [ 86.947665][ T5987] rtnetlink_rcv_msg+0x7cf/0xb70 [ 86.952577][ T5987] netlink_rcv_skb+0x208/0x470 [ 86.957315][ T5987] netlink_unicast+0x82f/0x9e0 [ 86.962073][ T5987] netlink_sendmsg+0x805/0xb30 [ 86.966816][ T5987] sock_sendmsg_nosec+0x18f/0x1d0 [ 86.971818][ T5987] __sys_sendto+0x3ce/0x540 [ 86.976310][ T5987] __x64_sys_sendto+0xde/0x100 [ 86.981051][ T5987] do_syscall_64+0xfa/0xf80 [ 86.985535][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.991418][ T5987] [ 86.993721][ T5987] The buggy address belongs to the object at ffff88802a461000 [ 86.993721][ T5987] which belongs to the cache kernfs_node_cache of size 176 [ 87.008267][ T5987] The buggy address is located 16 bytes to the right of [ 87.008267][ T5987] allocated 176-byte region [ffff88802a461000, ffff88802a4610b0) [ 87.022814][ T5987] [ 87.025120][ T5987] The buggy address belongs to the physical page: [ 87.031516][ T5987] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a461 [ 87.040262][ T5987] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 87.047366][ T5987] page_type: f5(slab) [ 87.051333][ T5987] raw: 00fff00000000000 ffff888140479dc0 dead000000000122 0000000000000000 [ 87.059901][ T5987] raw: 0000000000000000 0000000000110011 00000000f5000000 0000000000000000 [ 87.068476][ T5987] page dumped because: kasan: bad access detected [ 87.074878][ T5987] page_owner tracks the page as allocated [ 87.080565][ T5987] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5940, tgid 5940 (syz-executor), ts 83011578491, free_ts 82518495543 [ 87.099814][ T5987] post_alloc_hook+0x234/0x290 [ 87.104563][ T5987] get_page_from_freelist+0x2365/0x2440 [ 87.110082][ T5987] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.115861][ T5987] alloc_pages_mpol+0x232/0x4a0 [ 87.120690][ T5987] allocate_slab+0x86/0x3b0 [ 87.125170][ T5987] ___slab_alloc+0xf2b/0x1960 [ 87.129823][ T5987] __slab_alloc+0x65/0x100 [ 87.134214][ T5987] kmem_cache_alloc_noprof+0x40f/0x710 [ 87.139661][ T5987] __kernfs_new_node+0xdc/0x880 [ 87.144510][ T5987] kernfs_new_node+0x102/0x210 [ 87.149252][ T5987] kernfs_create_link+0xa7/0x200 [ 87.154257][ T5987] sysfs_do_create_link_sd+0x83/0x110 [ 87.159710][ T5987] device_add_class_symlinks+0x1cf/0x240 [ 87.165317][ T5987] device_add+0x475/0xb80 [ 87.169619][ T5987] netdev_register_kobject+0x178/0x310 [ 87.175061][ T5987] register_netdevice+0x1246/0x1a70 [ 87.180246][ T5987] page last free pid 5834 tgid 5821 stack trace: [ 87.186549][ T5987] __free_frozen_pages+0xbc8/0xd30 [ 87.191644][ T5987] rcu_core+0xd70/0x1870 [ 87.195863][ T5987] handle_softirqs+0x27d/0x850 [ 87.200599][ T5987] __irq_exit_rcu+0xca/0x1f0 [ 87.205162][ T5987] irq_exit_rcu+0x9/0x30 [ 87.209377][ T5987] sysvec_apic_timer_interrupt+0x57/0xc0 [ 87.214989][ T5987] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.220949][ T5987] [ 87.223274][ T5987] Memory state around the buggy address: [ 87.228880][ T5987] ffff88802a460f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.237004][ T5987] ffff88802a461000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.245037][ T5987] >ffff88802a461080: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 [ 87.253068][ T5987] ^ [ 87.259193][ T5987] ffff88802a461100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 87.267225][ T5987] ffff88802a461180: 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 [ 87.275260][ T5987] ================================================================== [ 87.297860][ T5987] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.305166][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 87.314253][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.324285][ T5987] Call Trace: [ 87.327545][ T5987] [ 87.330467][ T5987] dump_stack_lvl+0x99/0x250 [ 87.335054][ T5987] ? __asan_memcpy+0x40/0x70 [ 87.339644][ T5987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.344823][ T5987] ? __pfx__printk+0x10/0x10 [ 87.349414][ T5987] vpanic+0x237/0x6d0 [ 87.353505][ T5987] ? __pfx_vpanic+0x10/0x10 [ 87.358024][ T5987] ? preempt_schedule+0xae/0xc0 [ 87.362862][ T5987] ? __pfx_preempt_schedule+0x10/0x10 [ 87.368233][ T5987] panic+0xb9/0xc0 [ 87.371938][ T5987] ? __pfx_panic+0x10/0x10 [ 87.376336][ T5987] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 87.382214][ T5987] ? is_module_address+0x17/0xf0 [ 87.387138][ T5987] ? diWrite+0x1209/0x1f40 [ 87.391531][ T5987] check_panic_on_warn+0x89/0xb0 [ 87.396461][ T5987] ? diWrite+0x1209/0x1f40 [ 87.400867][ T5987] end_report+0x6f/0x140 [ 87.405128][ T5987] kasan_report+0x129/0x150 [ 87.409615][ T5987] ? diWrite+0x1209/0x1f40 [ 87.414010][ T5987] kasan_check_range+0x2b0/0x2c0 [ 87.418925][ T5987] ? diWrite+0x1209/0x1f40 [ 87.423331][ T5987] __asan_memcpy+0x40/0x70 [ 87.427729][ T5987] diWrite+0x1209/0x1f40 [ 87.431962][ T5987] txCommit+0x852/0x5430 [ 87.436199][ T5987] ? txLock+0xaf3/0x1cb0 [ 87.440434][ T5987] ? __pfx_txCommit+0x10/0x10 [ 87.445097][ T5987] ? rcu_is_watching+0x15/0xb0 [ 87.449848][ T5987] ? __mark_inode_dirty+0x45c/0x1330 [ 87.455136][ T5987] add_missing_indices+0x8ce/0xce0 [ 87.460238][ T5987] ? __pfx_add_missing_indices+0x10/0x10 [ 87.465860][ T5987] ? alloc_pages_noprof+0xbe/0x190 [ 87.471040][ T5987] jfs_readdir+0x1d8f/0x3ae0 [ 87.475622][ T5987] ? __pfx_jfs_readdir+0x10/0x10 [ 87.480545][ T5987] ? down_write+0x162/0x1f0 [ 87.485030][ T5987] ? __pfx_down_write+0x10/0x10 [ 87.489858][ T5987] ? wrap_directory_iterator+0x52/0xe0 [ 87.495293][ T5987] ? __pfx_jfs_readdir+0x10/0x10 [ 87.500242][ T5987] wrap_directory_iterator+0x96/0xe0 [ 87.505524][ T5987] iterate_dir+0x399/0x570 [ 87.509919][ T5987] __se_sys_getdents64+0xe4/0x260 [ 87.514921][ T5987] ? __pfx___se_sys_getdents64+0x10/0x10 [ 87.520540][ T5987] ? __pfx_filldir64+0x10/0x10 [ 87.525290][ T5987] ? do_syscall_64+0xbe/0xf80 [ 87.529948][ T5987] do_syscall_64+0xfa/0xf80 [ 87.534434][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.540480][ T5987] ? clear_bhb_loop+0x60/0xb0 [ 87.545139][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.551016][ T5987] RIP: 0033:0x7f1bafd8f749 [ 87.555432][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.575019][ T5987] RSP: 002b:00007ffe5ff53978 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 87.583424][ T5987] RAX: ffffffffffffffda RBX: 00007f1baffe5fa0 RCX: 00007f1bafd8f749 [ 87.591373][ T5987] RDX: 0000000000000099 RSI: 0000200000000280 RDI: 0000000000000005 [ 87.599328][ T5987] RBP: 00007f1bafe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 87.607290][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.615240][ T5987] R13: 00007f1baffe5fa0 R14: 00007f1baffe5fa0 R15: 0000000000000003 [ 87.623200][ T5987] [ 87.626580][ T5987] Kernel Offset: disabled [ 87.630888][ T5987] Rebooting in 86400 seconds..