Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts.
2025/10/05 16:59:22 parsed 1 programs
syzkaller login: [ 86.834183][ T5817] cgroup: Unknown subsys name 'net'
[ 87.075202][ T5817] cgroup: Unknown subsys name 'cpuset'
[ 87.130759][ T5817] cgroup: Unknown subsys name 'rlimit'
[ 87.324248][ T9] cfg80211: failed to load regulatory.db
[ 88.833137][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.405583][ T5842] chnl_net:caif_netlink_parms(): no params data found
[ 92.782701][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.784096][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.784249][ T5842] bridge_slave_0: entered allmulticast mode
[ 92.785798][ T5842] bridge_slave_0: entered promiscuous mode
[ 92.791737][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.791886][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.792060][ T5842] bridge_slave_1: entered allmulticast mode
[ 92.794516][ T5842] bridge_slave_1: entered promiscuous mode
[ 93.084452][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.087311][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.333281][ T5842] team0: Port device team_slave_0 added
[ 93.464060][ T5842] team0: Port device team_slave_1 added
[ 93.684244][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.684262][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.684281][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.687806][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.687821][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.687846][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.901217][ T5842] hsr_slave_0: entered promiscuous mode
[ 93.903311][ T5842] hsr_slave_1: entered promiscuous mode
[ 94.262569][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.287092][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.326027][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.461296][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.579513][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.599672][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.615985][ T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.616775][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.626593][ T58] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.627908][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.842716][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.893796][ T5842] veth0_vlan: entered promiscuous mode
[ 94.899797][ T5842] veth1_vlan: entered promiscuous mode
[ 94.932257][ T5842] veth0_macvtap: entered promiscuous mode
[ 94.935626][ T5842] veth1_macvtap: entered promiscuous mode
[ 94.952648][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.964457][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.986432][ T1170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.987716][ T1170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.987758][ T1170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.987790][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.764911][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.002440][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.226005][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.497958][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.941777][ T2218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.941810][ T2218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.989161][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 97.989183][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.428436][ T58] bridge_slave_1: left allmulticast mode
[ 98.428513][ T58] bridge_slave_1: left promiscuous mode
[ 98.429739][ T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.523352][ T58] bridge_slave_0: left allmulticast mode
[ 98.523374][ T58] bridge_slave_0: left promiscuous mode
[ 98.523599][ T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.250995][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.310881][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.332372][ T58] bond0 (unregistering): Released all slaves
[ 100.730727][ T58] hsr_slave_0: left promiscuous mode
[ 100.766148][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.768553][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.774937][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.776170][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.777175][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.806449][ T58] hsr_slave_1: left promiscuous mode
[ 100.807692][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.807757][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.852478][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.852505][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.960415][ T58] veth1_macvtap: left promiscuous mode
[ 100.960724][ T58] veth0_macvtap: left promiscuous mode
[ 100.961544][ T58] veth1_vlan: left promiscuous mode
[ 100.961961][ T58] veth0_vlan: left promiscuous mode
[ 102.844084][ T62] Bluetooth: hci0: command tx timeout
[ 102.931246][ T58] team0 (unregistering): Port device team_slave_1 removed
[ 103.120818][ T58] team0 (unregistering): Port device team_slave_0 removed
[ 104.920271][ T62] Bluetooth: hci0: command tx timeout
2025/10/05 16:59:46 executed programs: 0
[ 108.482157][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 108.484555][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 108.485381][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 108.488316][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 108.488996][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 109.540725][ T5995] chnl_net:caif_netlink_parms(): no params data found
[ 110.093154][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.093361][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.093537][ T5995] bridge_slave_0: entered allmulticast mode
[ 110.096149][ T5995] bridge_slave_0: entered promiscuous mode
[ 110.099536][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.099730][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.099894][ T5995] bridge_slave_1: entered allmulticast mode
[ 110.104148][ T5995] bridge_slave_1: entered promiscuous mode
[ 110.317150][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.323743][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.484232][ T5995] team0: Port device team_slave_0 added
[ 110.486592][ T5995] team0: Port device team_slave_1 added
[ 110.530388][ T5130] Bluetooth: hci0: command tx timeout
[ 110.752524][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.752539][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.752557][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.754894][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.754907][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 110.754924][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 111.277828][ T5995] hsr_slave_0: entered promiscuous mode
[ 111.278596][ T5995] hsr_slave_1: entered promiscuous mode
[ 112.601607][ T5130] Bluetooth: hci0: command tx timeout
[ 112.953290][ T5995] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 112.984631][ T5995] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.025508][ T5995] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.064738][ T5995] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.248848][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.284689][ T5995] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.295320][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.295527][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.313393][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.313613][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.634128][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 113.711284][ T5995] veth0_vlan: entered promiscuous mode
[ 113.728376][ T5995] veth1_vlan: entered promiscuous mode
[ 113.779422][ T5995] veth0_macvtap: entered promiscuous mode
[ 113.795824][ T5995] veth1_macvtap: entered promiscuous mode
[ 113.822757][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 113.843286][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 113.866184][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.868513][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.887733][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 113.902670][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.103702][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.103722][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 114.159301][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 114.159321][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/10/05 16:59:52 executed programs: 2
[ 114.329279][ T6088] loop0: detected capacity change from 0 to 256
[ 114.339184][ T6088] exfat: Deprecated parameter 'utf8'
[ 114.387970][ T6088] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[ 114.416507][ T37] audit: type=1800 audit(1759683[ 114.416507][ T37] audit: type=1800 audit(1759683592.810:2): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=1048665 res=0 errno=0
[ 114.421226][ T6088] ==================================================================
[ 114.421239][ T6088] BUG: KASAN: stack-out-of-bounds in exfat_nls_to_utf16+0xac8/0xc10
[ 114.421272][ T6088] Read of size 1 at addr ffffc90003f87710 by task syz.0.17/6088
[ 114.421287][ T6088]
[ 114.421304][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.421326][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 114.421343][ T6088] Call Trace:
[ 114.421351][ T6088]
[ 114.421361][ T6088] dump_stack_lvl+0x189/0x250
[ 114.421387][ T6088] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.421416][ T6088] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.421441][ T6088] ? __pfx__printk+0x10/0x10
[ 114.421462][ T6088] ? __virt_addr_valid+0xdc/0x5c0
[ 114.421479][ T6088] ? __virt_addr_valid+0xdc/0x5c0
[ 114.421497][ T6088] print_report+0xca/0x240
[ 114.421519][ T6088] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.421538][ T6088] kasan_report+0x118/0x150
[ 114.421561][ T6088] ? __lock_acquire+0xab9/0xd20
[ 114.421586][ T6088] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.421609][ T6088] exfat_nls_to_utf16+0xac8/0xc10
[ 114.421633][ T6088] ? __pfx_exfat_nls_to_utf16+0x10/0x10
[ 114.421673][ T6088] ? process_measurement+0x162f/0x1a40
[ 114.421691][ T6088] ? ima_file_check+0xd7/0x120
[ 114.421705][ T6088] ? security_file_post_open+0xbb/0x290
[ 114.421722][ T6088] ? path_openat+0x2f32/0x3840
[ 114.421741][ T6088] ? do_filp_open+0x1fa/0x410
[ 114.421758][ T6088] ? do_sys_openat2+0x121/0x1c0
[ 114.421774][ T6088] ? __x64_sys_open+0x11e/0x150
[ 114.421791][ T6088] ? do_syscall_64+0xfa/0x3b0
[ 114.421824][ T6088] ? __lock_acquire+0xab9/0xd20
[ 114.421853][ T6088] ? __might_fault+0xb0/0x130
[ 114.421885][ T6088] exfat_ioctl+0x818/0x1100
[ 114.421906][ T6088] ? __lock_acquire+0xab9/0xd20
[ 114.421930][ T6088] ? __pfx_exfat_ioctl+0x10/0x10
[ 114.421962][ T6088] ? is_bpf_text_address+0x26/0x2b0
[ 114.422001][ T6088] ? kfree+0x197/0x950
[ 114.422020][ T6088] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 114.422044][ T6088] ? security_file_ioctl+0xcb/0x2d0
[ 114.422067][ T6088] ? __se_sys_ioctl+0x47/0x170
[ 114.422084][ T6088] ? do_syscall_64+0xfa/0x3b0
[ 114.422106][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.422132][ T6088] ? file_ioctl+0x233/0x780
[ 114.422151][ T6088] ? __pfx_file_ioctl+0x10/0x10
[ 114.422175][ T6088] ? kasan_quarantine_put+0xdd/0x220
[ 114.422195][ T6088] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.422220][ T6088] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 114.422244][ T6088] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 114.422269][ T6088] ? do_vfs_ioctl+0xb36/0x1440
[ 114.422289][ T6088] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 114.422308][ T6088] ? __pfx_smack_log+0x10/0x10
[ 114.422328][ T6088] ? smk_access+0x14c/0x4e0
[ 114.422349][ T6088] ? smk_tskacc+0x2fc/0x370
[ 114.422371][ T6088] ? smack_file_ioctl+0x24d/0x340
[ 114.422400][ T6088] ? __pfx_smack_file_ioctl+0x10/0x10
[ 114.422428][ T6088] ? __pfx___se_sys_futex+0x10/0x10
[ 114.422451][ T6088] ? bpf_lsm_file_ioctl+0x9/0x20
[ 114.422468][ T6088] ? __pfx_exfat_ioctl+0x10/0x10
[ 114.422488][ T6088] __se_sys_ioctl+0xff/0x170
[ 114.422508][ T6088] do_syscall_64+0xfa/0x3b0
[ 114.422530][ T6088] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.422551][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.422568][ T6088] ? clear_bhb_loop+0x60/0xb0
[ 114.422588][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.422605][ T6088] RIP: 0033:0x7fcba37deec9
[ 114.422625][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.422640][ T6088] RSP: 002b:00007ffe5ad96ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 114.422660][ T6088] RAX: ffffffffffffffda RBX: 00007fcba3a35fa0 RCX: 00007fcba37deec9
[ 114.422673][ T6088] RDX: 00002000000007c0 RSI: 0000000041009432 RDI: 0000000000000004
[ 114.422686][ T6088] RBP: 00007fcba3861f91 R08: 0000000000000000 R09: 0000000000000000
[ 114.422697][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 114.422709][ T6088] R13: 00007fcba3a35fa0 R14: 00007fcba3a35fa0 R15: 0000000000000003
[ 114.422728][ T6088]
[ 114.422735][ T6088]
[ 114.422738][ T6088] The buggy address belongs to stack of task syz.0.17/6088
[ 114.422748][ T6088] and is located at offset 304 in frame:
[ 114.422756][ T6088] exfat_ioctl+0x0/0x1100
[ 114.422775][ T6088]
[ 114.422779][ T6088] This frame has 7 objects:
[ 114.422788][ T6088] [32, 36) 'lossy.i'
[ 114.422797][ T6088] [48, 304) 'label.i50'
[ 114.422807][ T6088] [368, 888) 'uniname.i51'
[ 114.422817][ T6088] [1024, 1280) 'label.i'
[ 114.422828][ T6088] [1344, 1864) 'uniname.i'
[ 114.422837][ T6088] [2000, 2024) 'range.i'
[ 114.422847][ T6088] [2064, 2144) 'ia.i'
[ 114.422856][ T6088]
[ 114.422861][ T6088] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90003f80000 allocated at copy_process+0x545/0x3ae0
[ 114.422900][ T6088] The buggy address belongs to the physical page:
[ 114.422916][ T6088] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x327af
[ 114.422932][ T6088] memcg:ffff8880326fb702
[ 114.422939][ T6088] flags: 0x80000000000000(node=0|zone=1)
[ 114.422963][ T6088] raw: 0080000000000000 0000000000000000 dead000000000122 0000000000000000
[ 114.422979][ T6088] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff8880326fb702
[ 114.422988][ T6088] page dumped because: kasan: bad access detected
[ 114.423000][ T6088] page_owner tracks the page as allocated
[ 114.423007][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5995, tgid 5995 (syz-executor), ts 114279718695, free_ts 114273998833
[ 114.423036][ T6088] post_alloc_hook+0x240/0x2a0
[ 114.423058][ T6088] get_page_from_freelist+0x28c0/0x2960
[ 114.423073][ T6088] __alloc_frozen_pages_noprof+0x181/0x370
[ 114.423088][ T6088] alloc_pages_mpol+0xd1/0x380
[ 114.423110][ T6088] alloc_pages_noprof+0xcf/0x1e0
[ 114.423131][ T6088] __vmalloc_node_range_noprof+0x96c/0x12d0
[ 114.423153][ T6088] __vmalloc_node_noprof+0xc2/0x110
[ 114.423173][ T6088] dup_task_struct+0x3d4/0x830
[ 114.423193][ T6088] copy_process+0x545/0x3ae0
[ 114.423212][ T6088] kernel_clone+0x224/0x7c0
[ 114.423233][ T6088] __x64_sys_clone+0x18b/0x1e0
[ 114.423255][ T6088] do_syscall_64+0xfa/0x3b0
[ 114.423275][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.423291][ T6088] page last free pid 28 tgid 28 stack trace:
[ 114.423301][ T6088] __free_frozen_pages+0xfb6/0x1140
[ 114.423321][ T6088] tlb_remove_table_rcu+0x85/0x100
[ 114.423337][ T6088] rcu_cpu_kthread+0xbf3/0x1b50
[ 114.423351][ T6088] smpboot_thread_fn+0x542/0xa60
[ 114.423372][ T6088] kthread+0x711/0x8a0
[ 114.423387][ T6088] ret_from_fork+0x436/0x7d0
[ 114.423411][ T6088] ret_from_fork_asm+0x1a/0x30
[ 114.423427][ T6088]
[ 114.423431][ T6088] Memory state around the buggy address:
[ 114.423440][ T6088] ffffc90003f87600: 04 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.423452][ T6088] ffffc90003f87680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.423463][ T6088] >ffffc90003f87700: 00 00 f2 f2 f2 f2 f2 f2 f2 f2 00 00 00 00 00 00
[ 114.423472][ T6088] ^
[ 114.423481][ T6088] ffffc90003f87780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.423493][ T6088] ffffc90003f87800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 114.423502][ T6088] ==================================================================
[ 114.423512][ T6088] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 114.423524][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 114.423544][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 114.423554][ T6088] Call Trace:
[ 114.423560][ T6088]
[ 114.423567][ T6088] dump_stack_lvl+0x99/0x250
[ 114.423591][ T6088] ? __asan_memcpy+0x40/0x70
[ 114.423610][ T6088] ? __pfx_dump_stack_lvl+0x10/0x10
[ 114.423634][ T6088] ? __pfx__printk+0x10/0x10
[ 114.423657][ T6088] vpanic+0x237/0x6d0
[ 114.423673][ T6088] ? __pfx_vpanic+0x10/0x10
[ 114.423693][ T6088] panic+0xb9/0xc0
[ 114.423708][ T6088] ? __pfx_panic+0x10/0x10
[ 114.423722][ T6088] ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 114.423746][ T6088] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 114.423771][ T6088] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.423790][ T6088] check_panic_on_warn+0x89/0xb0
[ 114.423808][ T6088] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.423827][ T6088] end_report+0x78/0x160
[ 114.423850][ T6088] kasan_report+0x129/0x150
[ 114.423872][ T6088] ? __lock_acquire+0xab9/0xd20
[ 114.423897][ T6088] ? exfat_nls_to_utf16+0xac8/0xc10
[ 114.423919][ T6088] exfat_nls_to_utf16+0xac8/0xc10
[ 114.423943][ T6088] ? __pfx_exfat_nls_to_utf16+0x10/0x10
[ 114.423984][ T6088] ? process_measurement+0x162f/0x1a40
[ 114.424000][ T6088] ? ima_file_check+0xd7/0x120
[ 114.424015][ T6088] ? security_file_post_open+0xbb/0x290
[ 114.424031][ T6088] ? path_openat+0x2f32/0x3840
[ 114.424047][ T6088] ? do_filp_open+0x1fa/0x410
[ 114.424066][ T6088] ? do_sys_openat2+0x121/0x1c0
[ 114.424082][ T6088] ? __x64_sys_open+0x11e/0x150
[ 114.424099][ T6088] ? do_syscall_64+0xfa/0x3b0
[ 114.424131][ T6088] ? __lock_acquire+0xab9/0xd20
[ 114.424159][ T6088] ? __might_fault+0xb0/0x130
[ 114.424191][ T6088] exfat_ioctl+0x818/0x1100
[ 114.424212][ T6088] ? __lock_acquire+0xab9/0xd20
[ 114.424237][ T6088] ? __pfx_exfat_ioctl+0x10/0x10
[ 114.424268][ T6088] ? is_bpf_text_address+0x26/0x2b0
[ 114.424306][ T6088] ? kfree+0x197/0x950
[ 114.424325][ T6088] ? tomoyo_path_number_perm+0x47a/0x5a0
[ 114.424348][ T6088] ? security_file_ioctl+0xcb/0x2d0
[ 114.424372][ T6088] ? __se_sys_ioctl+0x47/0x170
[ 114.424389][ T6088] ? do_syscall_64+0xfa/0x3b0
[ 114.424415][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.424441][ T6088] ? file_ioctl+0x233/0x780
[ 114.424461][ T6088] ? __pfx_file_ioctl+0x10/0x10
[ 114.424484][ T6088] ? kasan_quarantine_put+0xdd/0x220
[ 114.424505][ T6088] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.424529][ T6088] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 114.424554][ T6088] ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 114.424579][ T6088] ? do_vfs_ioctl+0xb36/0x1440
[ 114.424599][ T6088] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 114.424618][ T6088] ? __pfx_smack_log+0x10/0x10
[ 114.424637][ T6088] ? smk_access+0x14c/0x4e0
[ 114.424659][ T6088] ? smk_tskacc+0x2fc/0x370
[ 114.424681][ T6088] ? smack_file_ioctl+0x24d/0x340
[ 114.424704][ T6088] ? __pfx_smack_file_ioctl+0x10/0x10
[ 114.424732][ T6088] ? __pfx___se_sys_futex+0x10/0x10
[ 114.424756][ T6088] ? bpf_lsm_file_ioctl+0x9/0x20
[ 114.424773][ T6088] ? __pfx_exfat_ioctl+0x10/0x10
[ 114.424793][ T6088] __se_sys_ioctl+0xff/0x170
[ 114.424812][ T6088] do_syscall_64+0xfa/0x3b0
[ 114.424833][ T6088] ? lockdep_hardirqs_on+0x9c/0x150
[ 114.424854][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.424871][ T6088] ? clear_bhb_loop+0x60/0xb0
[ 114.424891][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.424908][ T6088] RIP: 0033:0x7fcba37deec9
[ 114.424921][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 114.424936][ T6088] RSP: 002b:00007ffe5ad96ad8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 114.424954][ T6088] RAX: ffffffffffffffda RBX: 00007fcba3a35fa0 RCX: 00007fcba37deec9
[ 114.424968][ T6088] RDX: 00002000000007c0 RSI: 0000000041009432 RDI: 0000000000000004
[ 114.424980][ T6088] RBP: 00007fcba3861f91 R08: 0000000000000000 R09: 0000000000000000
[ 114.424991][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 114.425002][ T6088] R13: 00007fcba3a35fa0 R14: 00007fcba3a35fa0 R15: 0000000000000003
[ 114.425021][ T6088]
[ 114.425303][ T6088] Kernel Offset: disabled