Warning: Permanently added '[localhost]:21948' (ED25519) to the list of known hosts.
2025/10/22 09:48:16 parsed 1 programs
syzkaller login: [ 84.196335][ T5313] cgroup: Unknown subsys name 'net'
[ 84.268041][ T5313] cgroup: Unknown subsys name 'cpuset'
[ 84.273547][ T5313] cgroup: Unknown subsys name 'rlimit'
[ 86.064164][ T5313] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.542418][ T5328] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 91.864142][ T55] cfg80211: failed to load regulatory.db
[ 92.077194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.080752][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.144014][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.147643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.788370][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 92.793237][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 92.797042][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 92.800883][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 92.806306][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.579895][ T5362] chnl_net:caif_netlink_parms(): no params data found
[ 94.683573][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.687618][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.690908][ T5362] bridge_slave_0: entered allmulticast mode
[ 94.695541][ T5362] bridge_slave_0: entered promiscuous mode
[ 94.701828][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.704928][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.708117][ T5362] bridge_slave_1: entered allmulticast mode
[ 94.713189][ T5362] bridge_slave_1: entered promiscuous mode
[ 94.735970][ T5362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.742470][ T5362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.765101][ T5362] team0: Port device team_slave_0 added
[ 94.769698][ T5362] team0: Port device team_slave_1 added
[ 94.790166][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.793785][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.805235][ T5362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.812185][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.816563][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.828860][ T5362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.861555][ T5362] hsr_slave_0: entered promiscuous mode
[ 94.864956][ T5362] hsr_slave_1: entered promiscuous mode
[ 95.002113][ T5362] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 95.011852][ T5362] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 95.019007][ T5362] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 95.027407][ T5362] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 95.053925][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.057056][ T5362] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.060887][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.064089][ T5362] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.129865][ T5362] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.145484][ T38] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.149530][ T38] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.160031][ T5362] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.169632][ T38] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.172932][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.183700][ T38] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.186829][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.400707][ T5362] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.437778][ T5362] veth0_vlan: entered promiscuous mode
[ 95.446648][ T5362] veth1_vlan: entered promiscuous mode
[ 95.473808][ T5362] veth0_macvtap: entered promiscuous mode
[ 95.479868][ T5362] veth1_macvtap: entered promiscuous mode
[ 95.496296][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.507393][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.518318][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.535757][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.539592][ T1038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.556951][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.741543][ T38] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.833909][ T38] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.926806][ T38] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.015551][ T38] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.476106][ T38] bridge_slave_1: left allmulticast mode
[ 98.478857][ T38] bridge_slave_1: left promiscuous mode
[ 98.517947][ T38] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.653165][ T38] bridge_slave_0: left allmulticast mode
[ 98.655820][ T38] bridge_slave_0: left promiscuous mode
[ 98.658437][ T38] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.177484][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 99.184640][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 99.189413][ T38] bond0 (unregistering): Released all slaves
[ 99.293920][ T38] hsr_slave_0: left promiscuous mode
[ 99.302935][ T38] hsr_slave_1: left promiscuous mode
[ 99.305699][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 99.308942][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 99.323805][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 99.328010][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 99.363952][ T38] veth1_macvtap: left promiscuous mode
[ 99.366611][ T38] veth0_macvtap: left promiscuous mode
[ 99.369071][ T38] veth1_vlan: left promiscuous mode
[ 99.372999][ T38] veth0_vlan: left promiscuous mode
[ 99.768131][ T38] team0 (unregistering): Port device team_slave_1 removed
[ 99.787115][ T38] team0 (unregistering): Port device team_slave_0 removed
2025/10/22 09:48:36 executed programs: 0
[ 102.598432][ T4670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 102.604382][ T4670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 102.608593][ T4670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 102.613876][ T4670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 102.618648][ T4670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.790781][ T5455] chnl_net:caif_netlink_parms(): no params data found
[ 102.848838][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.851996][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.854956][ T5455] bridge_slave_0: entered allmulticast mode
[ 102.858611][ T5455] bridge_slave_0: entered promiscuous mode
[ 102.863498][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.866541][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.869685][ T5455] bridge_slave_1: entered allmulticast mode
[ 102.873753][ T5455] bridge_slave_1: entered promiscuous mode
[ 102.893224][ T5455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.899539][ T5455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.919368][ T5455] team0: Port device team_slave_0 added
[ 102.924818][ T5455] team0: Port device team_slave_1 added
[ 102.944574][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.947494][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.959303][ T5455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.965783][ T5455] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.968717][ T5455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.980476][ T5455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.013732][ T5455] hsr_slave_0: entered promiscuous mode
[ 103.016857][ T5455] hsr_slave_1: entered promiscuous mode
[ 103.425128][ T5455] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.440908][ T5455] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.454749][ T5455] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.474118][ T5455] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.516289][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.519353][ T5455] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.522688][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.525750][ T5455] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.639233][ T5455] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.674055][ T1044] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.681763][ T1044] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.692923][ T5455] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.734917][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.739415][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.753319][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.757467][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.818849][ T5455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 104.095803][ T5455] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.163677][ T5455] veth0_vlan: entered promiscuous mode
[ 104.183264][ T5455] veth1_vlan: entered promiscuous mode
[ 104.228043][ T5455] veth0_macvtap: entered promiscuous mode
[ 104.244029][ T5455] veth1_macvtap: entered promiscuous mode
[ 104.274420][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.293996][ T5455] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.325063][ T1044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.329419][ T1044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.338519][ T1044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.358465][ T1044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.438400][ T1048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.443097][ T1048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.494108][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.497580][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.668121][ T4670] Bluetooth: hci0: command tx timeout
[ 105.005689][ T5497] loop0: detected capacity change from 0 to 32768
[ 105.072385][ T5497] ==================================================================
[ 105.076013][ T5497] BUG: KASAN: slab-out-of-bounds in dtReadFirst+0x502/0x930
[ 105.079479][ T5497] Read of size 4 at addr ffff888040d9bfd8 by task syz.0.17/5497
[ 105.083719][ T5497]
[ 105.084816][ T5497] CPU: 0 UID: 0 PID: 5497 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 105.084830][ T5497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 105.084837][ T5497] Call Trace:
[ 105.084844][ T5497]
[ 105.084851][ T5497] dump_stack_lvl+0x189/0x250
[ 105.084869][ T5497] ? __virt_addr_valid+0x1c8/0x5c0
[ 105.084883][ T5497] ? rcu_is_watching+0x15/0xb0
[ 105.084895][ T5497] ? __pfx_dump_stack_lvl+0x10/0x10
[ 105.084907][ T5497] ? rcu_is_watching+0x15/0xb0
[ 105.084918][ T5497] ? lock_release+0x4b/0x3e0
[ 105.084927][ T5497] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 105.084974][ T5497] ? __virt_addr_valid+0x1c8/0x5c0
[ 105.084982][ T5497] ? __virt_addr_valid+0x4a5/0x5c0
[ 105.084991][ T5497] print_report+0xca/0x240
[ 105.085001][ T5497] ? dtReadFirst+0x502/0x930
[ 105.085008][ T5497] kasan_report+0x118/0x150
[ 105.085017][ T5497] ? dtReadFirst+0x502/0x930
[ 105.085025][ T5497] dtReadFirst+0x502/0x930
[ 105.085033][ T5497] jfs_readdir+0x709/0x3ae0
[ 105.085040][ T5497] ? lockdep_unlock+0x89/0x120
[ 105.085049][ T5497] ? validate_chain+0x897/0x2140
[ 105.085060][ T5497] ? __pfx_jfs_readdir+0x10/0x10
[ 105.085076][ T5497] ? down_write+0x162/0x1f0
[ 105.085088][ T5497] ? __pfx_down_write+0x10/0x10
[ 105.085100][ T5497] ? wrap_directory_iterator+0x52/0xe0
[ 105.085109][ T5497] ? __pfx_jfs_readdir+0x10/0x10
[ 105.085116][ T5497] wrap_directory_iterator+0x96/0xe0
[ 105.085127][ T5497] iterate_dir+0x399/0x570
[ 105.085138][ T5497] __se_sys_getdents64+0xe4/0x260
[ 105.085149][ T5497] ? __pfx___se_sys_getdents64+0x10/0x10
[ 105.085160][ T5497] ? __pfx_filldir64+0x10/0x10
[ 105.085172][ T5497] ? do_syscall_64+0xbe/0xfa0
[ 105.085182][ T5497] do_syscall_64+0xfa/0xfa0
[ 105.085192][ T5497] ? lockdep_hardirqs_on+0x9c/0x150
[ 105.085204][ T5497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.085214][ T5497] ? clear_bhb_loop+0x60/0xb0
[ 105.085225][ T5497] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.085235][ T5497] RIP: 0033:0x7f47c278efc9
[ 105.085246][ T5497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.085256][ T5497] RSP: 002b:00007ffea66b13e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 105.085269][ T5497] RAX: ffffffffffffffda RBX: 00007f47c29e5fa0 RCX: 00007f47c278efc9
[ 105.085276][ T5497] RDX: 0000000000000099 RSI: 0000200000000400 RDI: 0000000000000005
[ 105.085283][ T5497] RBP: 00007f47c2811f91 R08: 0000000000000000 R09: 0000000000000000
[ 105.085289][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.085295][ T5497] R13: 00007f47c29e5fa0 R14: 00007f47c29e5fa0 R15: 0000000000000003
[ 105.085305][ T5497]
[ 105.085308][ T5497]
[ 105.203134][ T5497] Allocated by task 5497:
[ 105.205085][ T5497] kasan_save_track+0x3e/0x80
[ 105.207230][ T5497] __kasan_slab_alloc+0x6c/0x80
[ 105.209347][ T5497] kmem_cache_alloc_lru_noprof+0x35d/0x6d0
[ 105.211951][ T5497] jfs_alloc_inode+0x28/0x70
[ 105.214024][ T5497] alloc_inode+0x6a/0x1b0
[ 105.215966][ T5497] new_inode+0x22/0x170
[ 105.217852][ T5497] ialloc+0x4c/0x8f0
[ 105.219594][ T5497] jfs_create+0x18d/0xa80
[ 105.221512][ T5497] path_openat+0x14f4/0x3830
[ 105.223628][ T5497] do_filp_open+0x1fa/0x410
[ 105.225716][ T5497] do_sys_openat2+0x121/0x1c0
[ 105.227943][ T5497] __x64_sys_openat+0x138/0x170
[ 105.230173][ T5497] do_syscall_64+0xfa/0xfa0
[ 105.232241][ T5497] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.235023][ T5497]
[ 105.236198][ T5497] The buggy address belongs to the object at ffff888040d9b6f0
[ 105.236198][ T5497] which belongs to the cache jfs_ip of size 2216
[ 105.242209][ T5497] The buggy address is located 64 bytes to the right of
[ 105.242209][ T5497] allocated 2216-byte region [ffff888040d9b6f0, ffff888040d9bf98)
[ 105.248611][ T5497]
[ 105.249734][ T5497] The buggy address belongs to the physical page:
[ 105.252633][ T5497] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x40d98
[ 105.256553][ T5497] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 105.260364][ T5497] memcg:ffff888041b46601
[ 105.262266][ T5497] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 105.265670][ T5497] page_type: f5(slab)
[ 105.267474][ T5497] raw: 04fff00000000040 ffff8880324a1b40 dead000000000122 0000000000000000
[ 105.271292][ T5497] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff888041b46601
[ 105.275092][ T5497] head: 04fff00000000040 ffff8880324a1b40 dead000000000122 0000000000000000
[ 105.278946][ T5497] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff888041b46601
[ 105.282795][ T5497] head: 04fff00000000003 ffffea0001036601 00000000ffffffff 00000000ffffffff
[ 105.286828][ T5497] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 105.290643][ T5497] page dumped because: kasan: bad access detected
[ 105.293545][ T5497] page_owner tracks the page as allocated
[ 105.296073][ T5497] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5497, tgid 5497 (syz.0.17), ts 105017792097, free_ts 103925049865
[ 105.305804][ T5497] post_alloc_hook+0x240/0x2a0
[ 105.308048][ T5497] get_page_from_freelist+0x2365/0x2440
[ 105.310610][ T5497] __alloc_frozen_pages_noprof+0x181/0x370
[ 105.313264][ T5497] alloc_pages_mpol+0x232/0x4a0
[ 105.315482][ T5497] allocate_slab+0x96/0x3a0
[ 105.317613][ T5497] ___slab_alloc+0xe94/0x18a0
[ 105.319762][ T5497] __slab_alloc+0x65/0x100
[ 105.321795][ T5497] kmem_cache_alloc_lru_noprof+0x3ef/0x6d0
[ 105.324404][ T5497] jfs_alloc_inode+0x28/0x70
[ 105.326465][ T5497] alloc_inode+0x6a/0x1b0
[ 105.328454][ T5497] new_inode+0x22/0x170
[ 105.330313][ T5497] jfs_fill_super+0x569/0xd80
[ 105.332396][ T5497] get_tree_bdev_flags+0x40e/0x4d0
[ 105.334734][ T5497] vfs_get_tree+0x92/0x2b0
[ 105.336788][ T5497] do_new_mount+0x302/0xa10
[ 105.338852][ T5497] __se_sys_mount+0x313/0x410
[ 105.341013][ T5497] page last free pid 5484 tgid 5484 stack trace:
[ 105.343933][ T5497] __free_frozen_pages+0xbc4/0xd30
[ 105.346279][ T5497] __slab_free+0x2e7/0x390
[ 105.348369][ T5497] qlist_free_all+0x97/0x140
[ 105.350499][ T5497] kasan_quarantine_reduce+0x148/0x160
[ 105.352975][ T5497] __kasan_slab_alloc+0x22/0x80
[ 105.355156][ T5497] __kmalloc_noprof+0x3c3/0x7f0
[ 105.357386][ T5497] tomoyo_realpath_from_path+0xe3/0x5d0
[ 105.359979][ T5497] tomoyo_path_perm+0x213/0x4b0
[ 105.362155][ T5497] security_inode_getattr+0x12f/0x330
[ 105.364534][ T5497] __x64_sys_newfstat+0xfc/0x200
[ 105.366788][ T5497] do_syscall_64+0xfa/0xfa0
[ 105.368896][ T5497] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.371607][ T5497]
[ 105.372681][ T5497] Memory state around the buggy address:
[ 105.375186][ T5497] ffff888040d9be80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 105.378792][ T5497] ffff888040d9bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 105.382306][ T5497] >ffff888040d9bf80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.385882][ T5497] ^
[ 105.389036][ T5497] ffff888040d9c000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.392375][ T5497] ffff888040d9c080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 105.395719][ T5497] ==================================================================
[ 105.625145][ T5497] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 105.628440][ T5497] CPU: 0 UID: 0 PID: 5497 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 105.632551][ T5497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 105.637381][ T5497] Call Trace:
[ 105.638925][ T5497]
[ 105.640351][ T5497] dump_stack_lvl+0x99/0x250
[ 105.642459][ T5497] ? __asan_memcpy+0x40/0x70
[ 105.644607][ T5497] ? __pfx_dump_stack_lvl+0x10/0x10
[ 105.646934][ T5497] ? __pfx__printk+0x10/0x10
[ 105.649036][ T5497] vpanic+0x237/0x6d0
[ 105.650836][ T5497] ? __pfx_vpanic+0x10/0x10
[ 105.652892][ T5497] ? preempt_schedule+0xae/0xc0
[ 105.655185][ T5497] ? __pfx_preempt_schedule+0x10/0x10
[ 105.657554][ T5497] panic+0xb9/0xc0
[ 105.659308][ T5497] ? __pfx_panic+0x10/0x10
[ 105.661248][ T5497] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 105.663795][ T5497] ? is_module_address+0x17/0xf0
[ 105.666013][ T5497] ? dtReadFirst+0x502/0x930
[ 105.668111][ T5497] check_panic_on_warn+0x89/0xb0
[ 105.670237][ T5497] ? dtReadFirst+0x502/0x930
[ 105.672332][ T5497] end_report+0x78/0x160
[ 105.674298][ T5497] kasan_report+0x129/0x150
[ 105.676388][ T5497] ? dtReadFirst+0x502/0x930
[ 105.678407][ T5497] dtReadFirst+0x502/0x930
[ 105.680466][ T5497] jfs_readdir+0x709/0x3ae0
[ 105.682416][ T5497] ? lockdep_unlock+0x89/0x120
[ 105.684336][ T5497] ? validate_chain+0x897/0x2140
[ 105.686768][ T5497] ? __pfx_jfs_readdir+0x10/0x10
[ 105.689401][ T5497] ? down_write+0x162/0x1f0
[ 105.691820][ T5497] ? __pfx_down_write+0x10/0x10
[ 105.694407][ T5497] ? wrap_directory_iterator+0x52/0xe0
[ 105.697264][ T5497] ? __pfx_jfs_readdir+0x10/0x10
[ 105.700016][ T5497] wrap_directory_iterator+0x96/0xe0
[ 105.702455][ T5497] iterate_dir+0x399/0x570
[ 105.704488][ T5497] __se_sys_getdents64+0xe4/0x260
[ 105.706708][ T5497] ? __pfx___se_sys_getdents64+0x10/0x10
[ 105.709236][ T5497] ? __pfx_filldir64+0x10/0x10
[ 105.711358][ T5497] ? do_syscall_64+0xbe/0xfa0
[ 105.713438][ T5497] do_syscall_64+0xfa/0xfa0
[ 105.715413][ T5497] ? lockdep_hardirqs_on+0x9c/0x150
[ 105.717692][ T5497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.720416][ T5497] ? clear_bhb_loop+0x60/0xb0
[ 105.722483][ T5497] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.725084][ T5497] RIP: 0033:0x7f47c278efc9
[ 105.727067][ T5497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.735397][ T5497] RSP: 002b:00007ffea66b13e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 105.738939][ T5497] RAX: ffffffffffffffda RBX: 00007f47c29e5fa0 RCX: 00007f47c278efc9
[ 105.742430][ T5497] RDX: 0000000000000099 RSI: 0000200000000400 RDI: 0000000000000005
[ 105.745888][ T5497] RBP: 00007f47c2811f91 R08: 0000000000000000 R09: 0000000000000000
[ 105.749405][ T5497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.752927][ T5497] R13: 00007f47c29e5fa0 R14: 00007f47c29e5fa0 R15: 0000000000000003
[ 105.756375][ T5497]
[ 105.758103][ T5497] Kernel Offset: disabled
[ 105.760043][ T5497] Rebooting in 86400 seconds..
VM DIAGNOSIS:
09:48:39 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002b0f2b0
R8 =ffff888033630237 R9 =1ffff110066c6046 R10=dffffc0000000000 R11=ffffffff85165550
R12=dffffc0000000000 R13=ffffffff997e18ff R14=ffffffff99af5300 R15=0000000000000000
RIP=ffffffff851655cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555fd10500 ffffffff 00c00000
GS =0000 ffff88808d733000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0ce7a02000 CR3=00000000446ea000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffffff Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0073657479625f6e 695f65676173752e
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea66b0a90 00007ffea66b0910
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea66b0950
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea66b0a90
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea66b0a90 00007ffea66b0910
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea66b0950 00007ffea66b0930
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47c281307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f47c281315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000073666a
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500060006
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000