Warning: Permanently added '[localhost]:63378' (ED25519) to the list of known hosts.
2025/08/06 09:28:31 ignoring optional flag "sandboxArg"="0"
2025/08/06 09:28:33 parsed 1 programs
syzkaller login: [ 87.594038][ T5347] cgroup: Unknown subsys name 'net'
[ 87.665218][ T5347] cgroup: Unknown subsys name 'cpuset'
[ 87.671836][ T5347] cgroup: Unknown subsys name 'rlimit'
[ 89.363940][ T5347] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.910453][ T54] cfg80211: failed to load regulatory.db
[ 93.555601][ T5363] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 93.717736][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.722866][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.726483][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.730741][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.734609][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.071542][ T5403] chnl_net:caif_netlink_parms(): no params data found
[ 96.137446][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.142055][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.145390][ T5403] bridge_slave_0: entered allmulticast mode
[ 96.150229][ T5403] bridge_slave_0: entered promiscuous mode
[ 96.157849][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.162930][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.166236][ T5403] bridge_slave_1: entered allmulticast mode
[ 96.170723][ T5403] bridge_slave_1: entered promiscuous mode
[ 96.198161][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.205715][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.225555][ T5403] team0: Port device team_slave_0 added
[ 96.229729][ T5403] team0: Port device team_slave_1 added
[ 96.253636][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.256721][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.268363][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.276235][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.281385][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.292530][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.326847][ T5403] hsr_slave_0: entered promiscuous mode
[ 96.330631][ T5403] hsr_slave_1: entered promiscuous mode
[ 96.504704][ T5403] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.514640][ T5403] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.521802][ T5403] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.532214][ T5403] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.566793][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.570560][ T5403] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.574585][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.577767][ T5403] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.638263][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.656953][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.663735][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.678169][ T5403] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.688168][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.692667][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.724158][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.727879][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.915829][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.956524][ T5403] veth0_vlan: entered promiscuous mode
[ 96.965448][ T5403] veth1_vlan: entered promiscuous mode
[ 96.994073][ T5403] veth0_macvtap: entered promiscuous mode
[ 97.004843][ T5403] veth1_macvtap: entered promiscuous mode
[ 97.022446][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.033250][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.046361][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.053934][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.057862][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.071765][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.213916][ T1088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.270986][ T1088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.331387][ T1088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.392017][ T1088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.134292][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.137638][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.175863][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.180918][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.805764][ T1088] bridge_slave_1: left allmulticast mode
[ 99.813139][ T1088] bridge_slave_1: left promiscuous mode
[ 99.816564][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
2025/08/06 09:28:47 executed programs: 0
[ 99.912632][ T1088] bridge_slave_0: left allmulticast mode
[ 99.915693][ T1088] bridge_slave_0: left promiscuous mode
[ 99.919113][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.932015][ T4705] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.936516][ T4705] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.941345][ T4705] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.945055][ T4705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.949083][ T4705] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.672028][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.680490][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.685238][ T1088] bond0 (unregistering): Released all slaves
[ 100.800056][ T1088] hsr_slave_0: left promiscuous mode
[ 100.807734][ T1088] hsr_slave_1: left promiscuous mode
[ 100.816721][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.822564][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.826726][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.830773][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.845006][ T1088] veth1_macvtap: left promiscuous mode
[ 100.847738][ T1088] veth0_macvtap: left promiscuous mode
[ 100.851173][ T1088] veth1_vlan: left promiscuous mode
[ 100.853724][ T1088] veth0_vlan: left promiscuous mode
[ 101.170763][ T1088] team0 (unregistering): Port device team_slave_1 removed
[ 101.197467][ T1088] team0 (unregistering): Port device team_slave_0 removed
[ 101.989742][ T4705] Bluetooth: hci0: command tx timeout
[ 102.127584][ T5458] chnl_net:caif_netlink_parms(): no params data found
[ 102.500921][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.503983][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.507115][ T5458] bridge_slave_0: entered allmulticast mode
[ 102.538583][ T5458] bridge_slave_0: entered promiscuous mode
[ 102.550659][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.553723][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.556879][ T5458] bridge_slave_1: entered allmulticast mode
[ 102.579319][ T5458] bridge_slave_1: entered promiscuous mode
[ 102.701445][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.708565][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.788517][ T5458] team0: Port device team_slave_0 added
[ 102.810518][ T5458] team0: Port device team_slave_1 added
[ 102.900633][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.904035][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.928424][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.953953][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.956719][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.970914][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.051080][ T5458] hsr_slave_0: entered promiscuous mode
[ 103.054466][ T5458] hsr_slave_1: entered promiscuous mode
[ 103.653642][ T5458] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.671799][ T5458] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.689307][ T5458] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.695208][ T5458] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.853344][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.891785][ T5458] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.904298][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.907605][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.939532][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.943110][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.068734][ T4705] Bluetooth: hci0: command tx timeout
[ 104.330182][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.403114][ T5458] veth0_vlan: entered promiscuous mode
[ 104.422351][ T5458] veth1_vlan: entered promiscuous mode
[ 104.474433][ T5458] veth0_macvtap: entered promiscuous mode
[ 104.491852][ T5458] veth1_macvtap: entered promiscuous mode
[ 104.518129][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.561083][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.580364][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.590315][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.594223][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.598225][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.742129][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.746579][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.810112][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.814111][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/08/06 09:28:52 executed programs: 2
[ 105.305621][ T5523] loop0: detected capacity change from 0 to 32768
[ 105.631090][ T5523] ==================================================================
[ 105.634562][ T5523] BUG: KASAN: slab-use-after-free in jfs_readdir+0x118c/0x3ae0
[ 105.638063][ T5523] Read of size 8 at addr ffff888059fc0030 by task syz.0.17/5523
[ 105.642283][ T5523]
[ 105.643323][ T5523] CPU: 0 UID: 0 PID: 5523 Comm: syz.0.17 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full)
[ 105.643335][ T5523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 105.643340][ T5523] Call Trace:
[ 105.643346][ T5523]
[ 105.643351][ T5523] dump_stack_lvl+0x189/0x250
[ 105.643363][ T5523] ? __kasan_check_byte+0x12/0x40
[ 105.643372][ T5523] ? __pfx_dump_stack_lvl+0x10/0x10
[ 105.643379][ T5523] ? lock_release+0x4b/0x3e0
[ 105.643392][ T5523] ? __virt_addr_valid+0x4a5/0x5c0
[ 105.643404][ T5523] print_report+0xca/0x240
[ 105.643414][ T5523] ? jfs_readdir+0x118c/0x3ae0
[ 105.643423][ T5523] kasan_report+0x118/0x150
[ 105.643435][ T5523] ? jfs_readdir+0x118c/0x3ae0
[ 105.643445][ T5523] jfs_readdir+0x118c/0x3ae0
[ 105.643462][ T5523] ? __pfx_jfs_readdir+0x10/0x10
[ 105.643475][ T5523] ? down_write+0x162/0x1f0
[ 105.643538][ T5523] ? __pfx_down_write+0x10/0x10
[ 105.643555][ T5523] ? wrap_directory_iterator+0x52/0xe0
[ 105.643566][ T5523] ? __pfx_jfs_readdir+0x10/0x10
[ 105.643574][ T5523] wrap_directory_iterator+0x93/0xe0
[ 105.643584][ T5523] iterate_dir+0x396/0x570
[ 105.643593][ T5523] __se_sys_getdents+0xe4/0x250
[ 105.643602][ T5523] ? __pfx___se_sys_getdents+0x10/0x10
[ 105.643611][ T5523] ? __pfx_filldir+0x10/0x10
[ 105.643623][ T5523] ? do_syscall_64+0xbe/0x3b0
[ 105.643635][ T5523] do_syscall_64+0xfa/0x3b0
[ 105.643646][ T5523] ? lockdep_hardirqs_on+0x9c/0x150
[ 105.643656][ T5523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.643666][ T5523] ? clear_bhb_loop+0x60/0xb0
[ 105.643674][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.643683][ T5523] RIP: 0033:0x7f107178ebe9
[ 105.643694][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.643703][ T5523] RSP: 002b:00007ffcb96ced48 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 105.643715][ T5523] RAX: ffffffffffffffda RBX: 00007f10719b5fa0 RCX: 00007f107178ebe9
[ 105.643723][ T5523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 105.643729][ T5523] RBP: 00007f1071811e19 R08: 0000000000000000 R09: 0000000000000000
[ 105.643735][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.643741][ T5523] R13: 00007f10719b5fa0 R14: 00007f10719b5fa0 R15: 0000000000000003
[ 105.643752][ T5523]
[ 105.643755][ T5523]
[ 105.746981][ T5523] Allocated by task 5523:
[ 105.748870][ T5523] kasan_save_track+0x3e/0x80
[ 105.750901][ T5523] __kasan_slab_alloc+0x6c/0x80
[ 105.753075][ T5523] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 105.755606][ T5523] mempool_alloc_noprof+0x1a7/0x510
[ 105.758115][ T5523] __get_metapage+0x509/0xde0
[ 105.760245][ T5523] dtSplitRoot+0x202/0x16c0
[ 105.762217][ T5523] dtInsert+0xef8/0x5f40
[ 105.764270][ T5523] jfs_mkdir+0x6ec/0xa70
[ 105.766161][ T5523] vfs_mkdir+0x303/0x510
[ 105.768023][ T5523] do_mkdirat+0x247/0x590
[ 105.769892][ T5523] __x64_sys_mkdirat+0x87/0xa0
[ 105.772057][ T5523] do_syscall_64+0xfa/0x3b0
[ 105.774129][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.776659][ T5523]
[ 105.777893][ T5523] Freed by task 5523:
[ 105.779806][ T5523] kasan_save_track+0x3e/0x80
[ 105.781945][ T5523] kasan_save_free_info+0x46/0x50
[ 105.784177][ T5523] __kasan_slab_free+0x5b/0x80
[ 105.786271][ T5523] kmem_cache_free+0x18f/0x400
[ 105.788466][ T5523] release_metapage+0x859/0xac0
[ 105.790585][ T5523] jfs_readdir+0xecb/0x3ae0
[ 105.792613][ T5523] wrap_directory_iterator+0x93/0xe0
[ 105.795066][ T5523] iterate_dir+0x396/0x570
[ 105.797314][ T5523] __se_sys_getdents+0xe4/0x250
[ 105.799582][ T5523] do_syscall_64+0xfa/0x3b0
[ 105.801635][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.804232][ T5523]
[ 105.805225][ T5523] The buggy address belongs to the object at ffff888059fc0000
[ 105.805225][ T5523] which belongs to the cache jfs_mp of size 184
[ 105.810469][ T5523] The buggy address is located 48 bytes inside of
[ 105.810469][ T5523] freed 184-byte region [ffff888059fc0000, ffff888059fc00b8)
[ 105.816243][ T5523]
[ 105.817475][ T5523] The buggy address belongs to the physical page:
[ 105.820511][ T5523] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59fc0
[ 105.824365][ T5523] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 105.827551][ T5523] page_type: f5(slab)
[ 105.829333][ T5523] raw: 04fff00000000000 ffff8880324a7b40 dead000000000122 0000000000000000
[ 105.833085][ T5523] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[ 105.836989][ T5523] page dumped because: kasan: bad access detected
[ 105.840224][ T5523] page_owner tracks the page as allocated
[ 105.843020][ T5523] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5523, tgid 5523 (syz.0.17), ts 105386213369, free_ts 105323343838
[ 105.851209][ T5523] post_alloc_hook+0x240/0x2a0
[ 105.853352][ T5523] get_page_from_freelist+0x21e4/0x22c0
[ 105.855986][ T5523] __alloc_frozen_pages_noprof+0x181/0x370
[ 105.858747][ T5523] alloc_pages_mpol+0x232/0x4a0
[ 105.861231][ T5523] allocate_slab+0x8a/0x370
[ 105.863249][ T5523] ___slab_alloc+0xbeb/0x1410
[ 105.865298][ T5523] kmem_cache_alloc_noprof+0x283/0x3c0
[ 105.867703][ T5523] mempool_alloc_noprof+0x1a7/0x510
[ 105.870164][ T5523] __get_metapage+0x509/0xde0
[ 105.872737][ T5523] dtSplitRoot+0x202/0x16c0
[ 105.875426][ T5523] dtInsert+0xef8/0x5f40
[ 105.877356][ T5523] jfs_mkdir+0x6ec/0xa70
[ 105.879193][ T5523] vfs_mkdir+0x303/0x510
[ 105.880931][ T5523] do_mkdirat+0x247/0x590
[ 105.882850][ T5523] __x64_sys_mkdirat+0x87/0xa0
[ 105.885123][ T5523] do_syscall_64+0xfa/0x3b0
[ 105.887328][ T5523] page last free pid 5476 tgid 5476 stack trace:
[ 105.890183][ T5523] __free_frozen_pages+0xbc4/0xd30
[ 105.892585][ T5523] __slab_free+0x303/0x3c0
[ 105.894779][ T5523] qlist_free_all+0x97/0x140
[ 105.896881][ T5523] kasan_quarantine_reduce+0x148/0x160
[ 105.899298][ T5523] __kasan_slab_alloc+0x22/0x80
[ 105.901554][ T5523] __kmalloc_noprof+0x224/0x4f0
[ 105.903584][ T5523] tomoyo_realpath_from_path+0xe3/0x5d0
[ 105.906207][ T5523] tomoyo_path_perm+0x213/0x4b0
[ 105.908561][ T5523] security_inode_getattr+0x12f/0x330
[ 105.910995][ T5523] __x64_sys_newfstat+0xfc/0x200
[ 105.913163][ T5523] do_syscall_64+0xfa/0x3b0
[ 105.915207][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.917857][ T5523]
[ 105.918950][ T5523] Memory state around the buggy address:
[ 105.921461][ T5523] ffff888059fbff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.924995][ T5523] ffff888059fbff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.928702][ T5523] >ffff888059fc0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 105.932029][ T5523] ^
[ 105.934368][ T5523] ffff888059fc0080: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc 00
[ 105.937846][ T5523] ffff888059fc0100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 105.941334][ T5523] ==================================================================
[ 105.973956][ T5523] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 105.977392][ T5523] CPU: 0 UID: 0 PID: 5523 Comm: syz.0.17 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full)
[ 105.982972][ T5523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 105.988754][ T5523] Call Trace:
[ 105.990487][ T5523]
[ 105.992002][ T5523] dump_stack_lvl+0x99/0x250
[ 105.994062][ T5523] ? __asan_memcpy+0x40/0x70
[ 105.996100][ T5523] ? __pfx_dump_stack_lvl+0x10/0x10
[ 105.998394][ T5523] ? __pfx__printk+0x10/0x10
[ 106.000430][ T5523] vpanic+0x281/0x750
[ 106.002278][ T5523] ? preempt_schedule+0xae/0xc0
[ 106.004374][ T5523] ? __pfx_vpanic+0x10/0x10
[ 106.006400][ T5523] ? preempt_schedule_common+0x83/0xd0
[ 106.008873][ T5523] ? preempt_schedule+0xae/0xc0
[ 106.010997][ T5523] ? __pfx_preempt_schedule+0x10/0x10
[ 106.013288][ T5523] panic+0xb9/0xc0
[ 106.015062][ T5523] ? __pfx_panic+0x10/0x10
[ 106.017072][ T5523] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 106.019728][ T5523] ? jfs_readdir+0x118c/0x3ae0
[ 106.021945][ T5523] check_panic_on_warn+0x89/0xb0
[ 106.024233][ T5523] ? jfs_readdir+0x118c/0x3ae0
[ 106.026393][ T5523] end_report+0x78/0x160
[ 106.028285][ T5523] kasan_report+0x129/0x150
[ 106.030218][ T5523] ? jfs_readdir+0x118c/0x3ae0
[ 106.032291][ T5523] jfs_readdir+0x118c/0x3ae0
[ 106.034381][ T5523] ? __pfx_jfs_readdir+0x10/0x10
[ 106.036516][ T5523] ? down_write+0x162/0x1f0
[ 106.038597][ T5523] ? __pfx_down_write+0x10/0x10
[ 106.040651][ T5523] ? wrap_directory_iterator+0x52/0xe0
[ 106.043007][ T5523] ? __pfx_jfs_readdir+0x10/0x10
[ 106.045150][ T5523] wrap_directory_iterator+0x93/0xe0
[ 106.047381][ T5523] iterate_dir+0x396/0x570
[ 106.049558][ T5523] __se_sys_getdents+0xe4/0x250
[ 106.051808][ T5523] ? __pfx___se_sys_getdents+0x10/0x10
[ 106.054312][ T5523] ? __pfx_filldir+0x10/0x10
[ 106.056363][ T5523] ? do_syscall_64+0xbe/0x3b0
[ 106.058459][ T5523] do_syscall_64+0xfa/0x3b0
[ 106.060429][ T5523] ? lockdep_hardirqs_on+0x9c/0x150
[ 106.062768][ T5523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.065474][ T5523] ? clear_bhb_loop+0x60/0xb0
[ 106.067895][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.070411][ T5523] RIP: 0033:0x7f107178ebe9
[ 106.072328][ T5523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 106.080219][ T5523] RSP: 002b:00007ffcb96ced48 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 106.083802][ T5523] RAX: ffffffffffffffda RBX: 00007f10719b5fa0 RCX: 00007f107178ebe9
[ 106.087308][ T5523] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 106.090726][ T5523] RBP: 00007f1071811e19 R08: 0000000000000000 R09: 0000000000000000
[ 106.094143][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 106.097761][ T5523] R13: 00007f10719b5fa0 R14: 00007f10719b5fa0 R15: 0000000000000003
[ 106.101293][ T5523]
[ 106.103000][ T5523] Kernel Offset: disabled
[ 106.105013][ T5523] Rebooting in 86400 seconds..
VM DIAGNOSIS:
09:28:53 Registers:
info registers vcpu 0
CPU#0
RAX=1ffffffff33be560 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df2b70 RSP=ffffc90002c5f2f0
R8 =ffff888033970237 R9 =1ffff1100672e046 R10=dffffc0000000000 R11=ffffffff854fffd0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df28e0 R15=0000000000000000
RIP=ffffffff85500047 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556f76d500 ffffffff 00c00000
GS =0000 ffff88808d218000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30d20220 CR3=00000000573d7000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000