Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. 2025/02/09 06:09:14 ignoring optional flag "sandboxArg"="0" 2025/02/09 06:09:15 parsed 1 programs [ 68.368757][ T5822] cgroup: Unknown subsys name 'net' [ 68.479382][ T5822] cgroup: Unknown subsys name 'cpuset' [ 68.487375][ T5822] cgroup: Unknown subsys name 'rlimit' [ 69.818434][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.720587][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.727079][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.380898][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.854588][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.863584][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.872543][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.880572][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.888366][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.895689][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.175922][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.184150][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.211484][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.219512][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.464572][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 73.541775][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.549812][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.557152][ T5858] bridge_slave_0: entered allmulticast mode [ 73.564314][ T5858] bridge_slave_0: entered promiscuous mode [ 73.579104][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.587066][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.594401][ T5858] bridge_slave_1: entered allmulticast mode [ 73.601278][ T5858] bridge_slave_1: entered promiscuous mode [ 73.626429][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.637855][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.662606][ T5858] team0: Port device team_slave_0 added [ 73.671678][ T5858] team0: Port device team_slave_1 added [ 73.694856][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.702011][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.728336][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.741449][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.748497][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.774970][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.807338][ T5858] hsr_slave_0: entered promiscuous mode [ 73.813490][ T5858] hsr_slave_1: entered promiscuous mode [ 73.903553][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.914108][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.923873][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.932639][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.955025][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.962238][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.970336][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.977453][ T5858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.025692][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.044115][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.053147][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.068677][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.081046][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.088213][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.101107][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.108280][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.231115][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.262747][ T5858] veth0_vlan: entered promiscuous mode [ 74.272193][ T5858] veth1_vlan: entered promiscuous mode [ 74.294645][ T5858] veth0_macvtap: entered promiscuous mode [ 74.303652][ T5858] veth1_macvtap: entered promiscuous mode [ 74.318956][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.333227][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.345468][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.355108][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.364646][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.373671][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.502322][ T1088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.572184][ T1088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.646812][ T1088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.724920][ T1088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/02/09 06:09:25 executed programs: 0 [ 76.190092][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.198924][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.209644][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.217753][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.226200][ T5135] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.233682][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.331091][ T5926] chnl_net:caif_netlink_parms(): no params data found [ 76.377146][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.384945][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.392520][ T5926] bridge_slave_0: entered allmulticast mode [ 76.399869][ T5926] bridge_slave_0: entered promiscuous mode [ 76.408679][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.415902][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.423245][ T5926] bridge_slave_1: entered allmulticast mode [ 76.429912][ T5926] bridge_slave_1: entered promiscuous mode [ 76.454564][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.465638][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.490471][ T5926] team0: Port device team_slave_0 added [ 76.498841][ T5926] team0: Port device team_slave_1 added [ 76.518663][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.525638][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.552017][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.563999][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.571141][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.597301][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.631950][ T5926] hsr_slave_0: entered promiscuous mode [ 76.638216][ T5926] hsr_slave_1: entered promiscuous mode [ 76.644164][ T5926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.652024][ T5926] Cannot create hsr debugfs directory [ 77.928068][ T1088] bridge_slave_1: left allmulticast mode [ 77.933949][ T1088] bridge_slave_1: left promiscuous mode [ 77.942260][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.955197][ T1088] bridge_slave_0: left allmulticast mode [ 77.962629][ T1088] bridge_slave_0: left promiscuous mode [ 77.968439][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.283171][ T5844] Bluetooth: hci0: command tx timeout [ 78.314580][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.325532][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.336885][ T1088] bond0 (unregistering): Released all slaves [ 78.450064][ T1088] hsr_slave_0: left promiscuous mode [ 78.460259][ T1088] hsr_slave_1: left promiscuous mode [ 78.469244][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.477011][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.485335][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.495585][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.515459][ T1088] veth1_macvtap: left promiscuous mode [ 78.521603][ T1088] veth0_macvtap: left promiscuous mode [ 78.533302][ T1088] veth1_vlan: left promiscuous mode [ 78.539027][ T1088] veth0_vlan: left promiscuous mode [ 78.884849][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 78.914691][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 79.405428][ T5926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.420273][ T5926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.429906][ T5926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.440229][ T5926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.735662][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.758516][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.772878][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.780027][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.795143][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.802292][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.178464][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.259046][ T5926] veth0_vlan: entered promiscuous mode [ 80.271680][ T5926] veth1_vlan: entered promiscuous mode [ 80.294825][ T5926] veth0_macvtap: entered promiscuous mode [ 80.303349][ T5926] veth1_macvtap: entered promiscuous mode [ 80.317969][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.331280][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.341685][ T5926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.350476][ T5926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.359929][ T5926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.369161][ T5844] Bluetooth: hci0: command tx timeout [ 80.374761][ T5926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.424206][ T275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.432516][ T275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.452456][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.460488][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.682089][ T5996] loop0: detected capacity change from 0 to 32768 [ 80.714053][ T5996] ================================================================== [ 80.722161][ T5996] BUG: KASAN: slab-out-of-bounds in jfs_readdir+0x1b6e/0x3c50 [ 80.729652][ T5996] Read of size 1 at addr ffff88807a31980d by task syz.0.16/5996 [ 80.737284][ T5996] [ 80.739610][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.0.16 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 80.739622][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 80.739631][ T5996] Call Trace: [ 80.739635][ T5996] [ 80.739639][ T5996] dump_stack_lvl+0x241/0x360 [ 80.739663][ T5996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.739677][ T5996] ? __pfx__printk+0x10/0x10 [ 80.739690][ T5996] ? _printk+0xd5/0x120 [ 80.739701][ T5996] ? __virt_addr_valid+0x183/0x530 [ 80.739714][ T5996] ? __virt_addr_valid+0x183/0x530 [ 80.739735][ T5996] print_report+0x169/0x550 [ 80.739746][ T5996] ? __virt_addr_valid+0x183/0x530 [ 80.739757][ T5996] ? __virt_addr_valid+0x183/0x530 [ 80.739768][ T5996] ? __virt_addr_valid+0x45f/0x530 [ 80.739779][ T5996] ? __phys_addr+0xba/0x170 [ 80.739790][ T5996] ? jfs_readdir+0x1b6e/0x3c50 [ 80.739801][ T5996] kasan_report+0x143/0x180 [ 80.739811][ T5996] ? jfs_readdir+0x1b6e/0x3c50 [ 80.739821][ T5996] jfs_readdir+0x1b6e/0x3c50 [ 80.739836][ T5996] ? __pfx_jfs_readdir+0x10/0x10 [ 80.739845][ T5996] ? __pfx_lock_acquire+0x10/0x10 [ 80.739860][ T5996] ? down_write+0x18c/0x220 [ 80.739873][ T5996] ? __pfx_down_write+0x10/0x10 [ 80.739885][ T5996] ? do_sys_openat2+0x17a/0x1d0 [ 80.739898][ T5996] ? __pfx_jfs_readdir+0x10/0x10 [ 80.739907][ T5996] wrap_directory_iterator+0x91/0xd0 [ 80.739916][ T5996] iterate_dir+0x5a9/0x760 [ 80.739926][ T5996] __se_sys_getdents64+0x1e2/0x4b0 [ 80.739937][ T5996] ? __pfx___se_sys_getdents64+0x10/0x10 [ 80.739946][ T5996] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.739956][ T5996] ? __pfx_filldir64+0x10/0x10 [ 80.739965][ T5996] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.739976][ T5996] ? do_syscall_64+0x100/0x230 [ 80.739989][ T5996] ? do_syscall_64+0xb6/0x230 [ 80.740001][ T5996] do_syscall_64+0xf3/0x230 [ 80.740012][ T5996] ? clear_bhb_loop+0x35/0x90 [ 80.740025][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.740038][ T5996] RIP: 0033:0x7f513ff8cde9 [ 80.740050][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.740057][ T5996] RSP: 002b:00007f5140dae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 80.740068][ T5996] RAX: ffffffffffffffda RBX: 00007f51401a5fa0 RCX: 00007f513ff8cde9 [ 80.740074][ T5996] RDX: 0000000000001000 RSI: 0000400000000f80 RDI: 0000000000000005 [ 80.740080][ T5996] RBP: 00007f514000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.740086][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.740091][ T5996] R13: 0000000000000000 R14: 00007f51401a5fa0 R15: 00007ffeeb4283d8 [ 80.740100][ T5996] [ 80.740103][ T5996] [ 81.006415][ T5996] The buggy address belongs to the object at ffff88807a319270 [ 81.006415][ T5996] which belongs to the cache jfs_ip of size 2232 [ 81.020103][ T5996] The buggy address is located 1437 bytes inside of [ 81.020103][ T5996] allocated 2232-byte region [ffff88807a319270, ffff88807a319b28) [ 81.034405][ T5996] [ 81.036723][ T5996] The buggy address belongs to the physical page: [ 81.043118][ T5996] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a318 [ 81.051860][ T5996] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.060334][ T5996] memcg:ffff88802a3f7901 [ 81.064554][ T5996] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 81.072086][ T5996] page_type: f5(slab) [ 81.076045][ T5996] raw: 00fff00000000040 ffff8881432c9640 dead000000000122 0000000000000000 [ 81.084622][ T5996] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff88802a3f7901 [ 81.093187][ T5996] head: 00fff00000000040 ffff8881432c9640 dead000000000122 0000000000000000 [ 81.101837][ T5996] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff88802a3f7901 [ 81.110493][ T5996] head: 00fff00000000003 ffffea0001e8c601 ffffffffffffffff 0000000000000000 [ 81.119149][ T5996] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 81.127807][ T5996] page dumped because: kasan: bad access detected [ 81.134220][ T5996] page_owner tracks the page as allocated [ 81.139925][ T5996] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5996, tgid 5995 (syz.0.16), ts 80691591592, free_ts 17332409651 [ 81.161876][ T5996] post_alloc_hook+0x1f4/0x240 [ 81.166633][ T5996] get_page_from_freelist+0x3651/0x37a0 [ 81.172156][ T5996] __alloc_frozen_pages_noprof+0x292/0x710 [ 81.177941][ T5996] alloc_pages_mpol+0x311/0x660 [ 81.182774][ T5996] allocate_slab+0x8f/0x3a0 [ 81.187255][ T5996] ___slab_alloc+0xc27/0x14a0 [ 81.191910][ T5996] __slab_alloc+0x58/0xa0 [ 81.196229][ T5996] kmem_cache_alloc_lru_noprof+0x26c/0x390 [ 81.202020][ T5996] jfs_alloc_inode+0x28/0x70 [ 81.206588][ T5996] alloc_inode+0x65/0x1a0 [ 81.210901][ T5996] new_inode+0x22/0x1d0 [ 81.215050][ T5996] jfs_fill_super+0x570/0xd90 [ 81.219726][ T5996] get_tree_bdev_flags+0x48c/0x5c0 [ 81.224844][ T5996] vfs_get_tree+0x90/0x2b0 [ 81.229254][ T5996] do_new_mount+0x2be/0xb40 [ 81.233742][ T5996] __se_sys_mount+0x2d6/0x3c0 [ 81.238420][ T5996] page last free pid 1 tgid 1 stack trace: [ 81.244224][ T5996] free_frozen_pages+0xe04/0x10e0 [ 81.249248][ T5996] free_contig_range+0x14c/0x430 [ 81.254175][ T5996] destroy_args+0x94/0x4b0 [ 81.258599][ T5996] debug_vm_pgtable+0x4be/0x550 [ 81.263431][ T5996] do_one_initcall+0x248/0x870 [ 81.268175][ T5996] do_initcall_level+0x157/0x210 [ 81.273093][ T5996] do_initcalls+0x3f/0x80 [ 81.277404][ T5996] kernel_init_freeable+0x435/0x5d0 [ 81.282584][ T5996] kernel_init+0x1d/0x2b0 [ 81.286894][ T5996] ret_from_fork+0x4b/0x80 [ 81.291292][ T5996] ret_from_fork_asm+0x1a/0x30 [ 81.296051][ T5996] [ 81.298365][ T5996] Memory state around the buggy address: [ 81.303990][ T5996] ffff88807a319700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.312048][ T5996] ffff88807a319780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.320105][ T5996] >ffff88807a319800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.328152][ T5996] ^ [ 81.332458][ T5996] ffff88807a319880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.340503][ T5996] ffff88807a319900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.348547][ T5996] ================================================================== [ 81.366941][ T5996] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.374172][ T5996] CPU: 1 UID: 0 PID: 5996 Comm: syz.0.16 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 81.384682][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.394729][ T5996] Call Trace: [ 81.398031][ T5996] [ 81.400971][ T5996] dump_stack_lvl+0x241/0x360 [ 81.405661][ T5996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.410855][ T5996] ? __pfx__printk+0x10/0x10 [ 81.415445][ T5996] ? preempt_schedule+0xe1/0xf0 [ 81.420293][ T5996] ? vscnprintf+0x5d/0x90 [ 81.424610][ T5996] panic+0x349/0x880 [ 81.428506][ T5996] ? check_panic_on_warn+0x21/0xb0 [ 81.433634][ T5996] ? __pfx_panic+0x10/0x10 [ 81.438058][ T5996] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 81.444043][ T5996] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.450357][ T5996] ? print_report+0x502/0x550 [ 81.455022][ T5996] check_panic_on_warn+0x86/0xb0 [ 81.459965][ T5996] ? jfs_readdir+0x1b6e/0x3c50 [ 81.464714][ T5996] end_report+0x77/0x160 [ 81.468951][ T5996] kasan_report+0x154/0x180 [ 81.473443][ T5996] ? jfs_readdir+0x1b6e/0x3c50 [ 81.478200][ T5996] jfs_readdir+0x1b6e/0x3c50 [ 81.482783][ T5996] ? __pfx_jfs_readdir+0x10/0x10 [ 81.487703][ T5996] ? __pfx_lock_acquire+0x10/0x10 [ 81.492716][ T5996] ? down_write+0x18c/0x220 [ 81.497202][ T5996] ? __pfx_down_write+0x10/0x10 [ 81.502040][ T5996] ? do_sys_openat2+0x17a/0x1d0 [ 81.506874][ T5996] ? __pfx_jfs_readdir+0x10/0x10 [ 81.511792][ T5996] wrap_directory_iterator+0x91/0xd0 [ 81.517059][ T5996] iterate_dir+0x5a9/0x760 [ 81.521457][ T5996] __se_sys_getdents64+0x1e2/0x4b0 [ 81.526553][ T5996] ? __pfx___se_sys_getdents64+0x10/0x10 [ 81.532179][ T5996] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.538141][ T5996] ? __pfx_filldir64+0x10/0x10 [ 81.542885][ T5996] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.549195][ T5996] ? do_syscall_64+0x100/0x230 [ 81.553944][ T5996] ? do_syscall_64+0xb6/0x230 [ 81.558601][ T5996] do_syscall_64+0xf3/0x230 [ 81.563095][ T5996] ? clear_bhb_loop+0x35/0x90 [ 81.567757][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.573651][ T5996] RIP: 0033:0x7f513ff8cde9 [ 81.578060][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.597674][ T5996] RSP: 002b:00007f5140dae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 81.606075][ T5996] RAX: ffffffffffffffda RBX: 00007f51401a5fa0 RCX: 00007f513ff8cde9 [ 81.614033][ T5996] RDX: 0000000000001000 RSI: 0000400000000f80 RDI: 0000000000000005 [ 81.621986][ T5996] RBP: 00007f514000e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.629944][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.637920][ T5996] R13: 0000000000000000 R14: 00007f51401a5fa0 R15: 00007ffeeb4283d8 [ 81.645884][ T5996] [ 81.649178][ T5996] Kernel Offset: disabled [ 81.653491][ T5996] Rebooting in 86400 seconds..