[ 38.221727][ T2854] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.233322][ T2854] veth1_macvtap: left promiscuous mode
[ 38.239668][ T2854] veth0_macvtap: left promiscuous mode
[ 38.245275][ T2854] veth1_vlan: left promiscuous mode
[ 38.250561][ T2854] veth0_vlan: left promiscuous mode
[ 38.322450][ T2854] team0 (unregistering): Port device team_slave_1 removed
[ 38.336306][ T2854] team0 (unregistering): Port device team_slave_0 removed
[ 38.346105][ T2854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 38.357171][ T2854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 38.387819][ T2854] bond0 (unregistering): Released all slaves
Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts.
2023/06/24 03:03:46 ignoring optional flag "sandboxArg"="0"
2023/06/24 03:03:46 parsed 1 programs
2023/06/24 03:03:46 executed programs: 0
[ 50.526537][ T4397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 50.534846][ T4397] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 50.542524][ T4397] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 50.551340][ T4397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 50.559302][ T4397] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 50.566484][ T4397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 50.647990][ T5299] chnl_net:caif_netlink_parms(): no params data found
[ 50.680441][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state
[ 50.687721][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.694774][ T5299] bridge_slave_0: entered allmulticast mode
[ 50.701310][ T5299] bridge_slave_0: entered promiscuous mode
[ 50.708447][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state
[ 50.716083][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.723207][ T5299] bridge_slave_1: entered allmulticast mode
[ 50.729720][ T5299] bridge_slave_1: entered promiscuous mode
[ 50.746782][ T5299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 50.758491][ T5299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 50.779348][ T5299] team0: Port device team_slave_0 added
[ 50.786835][ T5299] team0: Port device team_slave_1 added
[ 50.803049][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 50.810806][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 50.837433][ T5299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 50.849216][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 50.856314][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 50.882218][ T5299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 50.908710][ T5299] hsr_slave_0: entered promiscuous mode
[ 50.914761][ T5299] hsr_slave_1: entered promiscuous mode
[ 51.267896][ T5299] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 51.277315][ T5299] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 51.285933][ T5299] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 51.294185][ T5299] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 51.311102][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state
[ 51.318179][ T5299] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 51.325490][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state
[ 51.332620][ T5299] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 51.364905][ T5299] 8021q: adding VLAN 0 to HW filter on device bond0
[ 51.377229][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 51.387385][ T4729] bridge0: port 1(bridge_slave_0) entered disabled state
[ 51.394822][ T4729] bridge0: port 2(bridge_slave_1) entered disabled state
[ 51.403528][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 51.414599][ T5299] 8021q: adding VLAN 0 to HW filter on device team0
[ 51.424459][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 51.433244][ T4729] bridge0: port 1(bridge_slave_0) entered blocking state
[ 51.440339][ T4729] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 51.457968][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 51.466951][ T54] bridge0: port 2(bridge_slave_1) entered blocking state
[ 51.474007][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 51.482206][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 51.497295][ T5299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 51.509582][ T5299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 51.521956][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 51.531052][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 51.540194][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 51.548553][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 51.559324][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 51.627036][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 51.634391][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 51.647578][ T5299] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 51.662400][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 51.672048][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 51.687252][ T5299] veth0_vlan: entered promiscuous mode
[ 51.696761][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 51.706051][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 51.714355][ T5299] veth1_vlan: entered promiscuous mode
[ 51.728038][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 51.736549][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 51.744133][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 51.760386][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 51.769059][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 51.778249][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 51.788303][ T5299] veth0_macvtap: entered promiscuous mode
[ 51.798709][ T5299] veth1_macvtap: entered promiscuous mode
[ 51.811199][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 51.818569][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 51.827901][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 51.836233][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 51.844605][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 51.855400][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 51.863870][ T5299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.874923][ T5299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.884074][ T5299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.893070][ T5299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 51.904279][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 51.914095][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 51.953830][ T2854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.965151][ T2854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 51.973634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 51.973712][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.990879][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 52.000037][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 52.181561][ T5430] loop0: detected capacity change from 0 to 32768
[ 52.203205][ T5430] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 52.203205][ T5430]
[ 52.596223][ T4397] Bluetooth: hci0: command 0x0409 tx timeout
[ 52.684318][ T5491] loop0: detected capacity change from 0 to 32768
[ 52.715561][ T5491] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 52.715561][ T5491]
[ 53.478204][ T5590] loop0: detected capacity change from 0 to 32768
[ 53.493156][ T5590] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 53.493156][ T5590]
[ 53.710158][ T5611] loop0: detected capacity change from 0 to 32768
[ 53.724321][ T5611] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 53.724321][ T5611]
[ 54.152370][ T5674] loop0: detected capacity change from 0 to 32768
[ 54.164441][ T5674] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 54.164441][ T5674]
[ 54.281710][ T5676] loop0: detected capacity change from 0 to 32768
[ 54.294822][ T5676] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 54.294822][ T5676]
[ 54.415417][ T5678] loop0: detected capacity change from 0 to 32768
[ 54.426185][ T5678] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 54.426185][ T5678]
[ 54.543132][ T5680] loop0: detected capacity change from 0 to 32768
[ 54.553074][ T5680] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 54.553074][ T5680]
[ 54.673777][ T5682] loop0: detected capacity change from 0 to 32768
[ 54.685248][ T4397] Bluetooth: hci0: command 0x041b tx timeout
[ 54.689405][ T5682] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 54.689405][ T5682]
[ 55.081153][ T5684] loop0: detected capacity change from 0 to 32768
[ 55.093404][ T5684] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 55.093404][ T5684]
2023/06/24 03:03:51 executed programs: 11
[ 55.496516][ T5686] loop0: detected capacity change from 0 to 32768
[ 55.506284][ T5686] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 55.506284][ T5686]
[ 55.622926][ T5688] loop0: detected capacity change from 0 to 32768
[ 55.635486][ T5688] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 55.635486][ T5688]
[ 56.019967][ T5690] loop0: detected capacity change from 0 to 32768
[ 56.031389][ T5690] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 56.031389][ T5690]
[ 56.424096][ T5692] loop0: detected capacity change from 0 to 32768
[ 56.438231][ T5692] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 56.438231][ T5692]
[ 56.554975][ T5694] loop0: detected capacity change from 0 to 32768
[ 56.564623][ T5694] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 56.564623][ T5694]
[ 56.685040][ T5696] loop0: detected capacity change from 0 to 32768
[ 56.694412][ T5696] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 56.694412][ T5696]
[ 56.755428][ T4397] Bluetooth: hci0: command 0x040f tx timeout
[ 57.081938][ T5698] loop0: detected capacity change from 0 to 32768
[ 57.092288][ T5698] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 57.092288][ T5698]
[ 57.482471][ T5700] loop0: detected capacity change from 0 to 32768
[ 57.494686][ T5700] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 57.494686][ T5700]
[ 57.883104][ T5702] loop0: detected capacity change from 0 to 32768
[ 57.892959][ T5702] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 57.892959][ T5702]
[ 58.015562][ T5704] loop0: detected capacity change from 0 to 32768
[ 58.025543][ T5704] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 58.025543][ T5704]
[ 58.148157][ T5706] loop0: detected capacity change from 0 to 32768
[ 58.157477][ T5706] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 58.157477][ T5706]
[ 58.539552][ T5708] loop0: detected capacity change from 0 to 32768
[ 58.551616][ T5708] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 58.551616][ T5708]
[ 58.845546][ T4397] Bluetooth: hci0: command 0x0419 tx timeout
[ 58.954511][ T5710] loop0: detected capacity change from 0 to 32768
[ 58.967877][ T5710] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 58.967877][ T5710]
[ 59.361367][ T5712] loop0: detected capacity change from 0 to 32768
[ 59.374897][ T5712] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 59.374897][ T5712]
[ 59.493750][ T5714] loop0: detected capacity change from 0 to 32768
[ 59.503153][ T5714] ==================================================================
[ 59.511200][ T5714] BUG: KASAN: slab-out-of-bounds in jfs_readdir+0x2a98/0x3610
[ 59.518635][ T5714] Read of size 1 at addr ffff88806fdf7f75 by task syz-executor.0/5714
[ 59.526751][ T5714]
[ 59.529044][ T5714] CPU: 1 PID: 5714 Comm: syz-executor.0 Not tainted 6.4.0-rc7-syzkaller #0
[ 59.537602][ T5714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 59.547638][ T5714] Call Trace:
[ 59.550892][ T5714]
[ 59.553821][ T5714] dump_stack_lvl+0x64/0xb0
[ 59.558335][ T5714] print_address_description.constprop.0+0x2c/0x3c0
[ 59.564893][ T5714] ? jfs_readdir+0x2a98/0x3610
[ 59.569625][ T5714] kasan_report+0x11c/0x130
[ 59.574094][ T5714] ? jfs_readdir+0x2a98/0x3610
[ 59.578823][ T5714] jfs_readdir+0x2a98/0x3610
[ 59.583378][ T5714] ? dtDelete+0x2b40/0x2b40
[ 59.587843][ T5714] ? lock_sync+0x190/0x190
[ 59.592221][ T5714] ? __traceiter_contention_end+0x70/0xa0
[ 59.597991][ T5714] ? down_write_killable+0x15b/0x250
[ 59.603237][ T5714] ? down_write_killable_nested+0x250/0x250
[ 59.609115][ T5714] ? apparmor_file_permission+0x152/0x460
[ 59.614799][ T5714] ? fsnotify_perm.part.0+0x11c/0x500
[ 59.620136][ T5714] iterate_dir+0x1aa/0x6c0
[ 59.624522][ T5714] __x64_sys_getdents64+0x128/0x240
[ 59.629684][ T5714] ? __ia32_sys_getdents+0x240/0x240
[ 59.634929][ T5714] ? fillonedir+0x320/0x320
[ 59.639401][ T5714] ? syscall_enter_from_user_mode+0x26/0x80
[ 59.645273][ T5714] do_syscall_64+0x39/0xb0
[ 59.649656][ T5714] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.655605][ T5714] RIP: 0033:0x7f57cce8c0f9
[ 59.659987][ T5714] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 59.679560][ T5714] RSP: 002b:00007f57cdbe3168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 59.687938][ T5714] RAX: ffffffffffffffda RBX: 00007f57ccfabf80 RCX: 00007f57cce8c0f9
[ 59.696073][ T5714] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004
[ 59.704008][ T5714] RBP: 00007f57ccee7b39 R08: 0000000000000000 R09: 0000000000000000
[ 59.711948][ T5714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 59.719889][ T5714] R13: 00007fffa8bf8edf R14: 00007f57cdbe3300 R15: 0000000000022000
[ 59.727830][ T5714]
[ 59.730817][ T5714]
[ 59.733111][ T5714] The buggy address belongs to the object at ffff88806fdf6e00
[ 59.733111][ T5714] which belongs to the cache ext4_inode_cache of size 2432
[ 59.747653][ T5714] The buggy address is located 2037 bytes to the right of
[ 59.747653][ T5714] allocated 2432-byte region [ffff88806fdf6e00, ffff88806fdf7780)
[ 59.762449][ T5714]
[ 59.764740][ T5714] The buggy address belongs to the physical page:
[ 59.771115][ T5714] page:ffffea0001bf7c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6fdf0
[ 59.781227][ T5714] head:ffffea0001bf7c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 59.790118][ T5714] memcg:ffff88807a82cb01
[ 59.794321][ T5714] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 59.802261][ T5714] page_type: 0xffffffff()
[ 59.806558][ T5714] raw: 00fff00000010200 ffff888017db0500 dead000000000122 0000000000000000
[ 59.815104][ T5714] raw: 0000000000000000 00000000800c000c 00000001ffffffff ffff88807a82cb01
[ 59.823649][ T5714] page dumped because: kasan: bad access detected
[ 59.830029][ T5714] page_owner tracks the page as allocated
[ 59.835713][ T5714] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5711, tgid 5711 (syz-executor.0), ts 59289044350, free_ts 32404604199
[ 59.859548][ T5714] get_page_from_freelist+0xf41/0x2c00
[ 59.864975][ T5714] __alloc_pages+0x1cb/0x4a0
[ 59.869530][ T5714] allocate_slab+0x25f/0x390
[ 59.874083][ T5714] ___slab_alloc+0xa91/0x1400
[ 59.878723][ T5714] __slab_alloc.constprop.0+0x56/0xa0
[ 59.884056][ T5714] kmem_cache_alloc_lru+0x4a8/0x600
[ 59.889220][ T5714] ext4_alloc_inode+0x20/0x640
[ 59.893948][ T5714] alloc_inode+0x56/0x1e0
[ 59.898543][ T5714] new_inode+0x1a/0x240
[ 59.902666][ T5714] __ext4_new_inode+0x2e4/0x44f0
[ 59.907572][ T5714] ext4_symlink+0x4c7/0x870
[ 59.912060][ T5714] vfs_symlink+0x3ee/0x630
[ 59.916480][ T5714] do_symlinkat+0x1ea/0x250
[ 59.921041][ T5714] __x64_sys_symlinkat+0x92/0xb0
[ 59.925947][ T5714] do_syscall_64+0x39/0xb0
[ 59.930336][ T5714] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.936201][ T5714] page last free stack trace:
[ 59.940930][ T5714] free_unref_page_prepare+0x629/0xca0
[ 59.946360][ T5714] free_unref_page+0x33/0x370
[ 59.951031][ T5714] release_pages+0x2ed/0x10e0
[ 59.955680][ T5714] tlb_batch_pages_flush+0x85/0x160
[ 59.960843][ T5714] tlb_finish_mmu+0x114/0x6c0
[ 59.965483][ T5714] exit_mmap+0x23d/0x750
[ 59.969702][ T5714] __mmput+0xf3/0x440
[ 59.973734][ T5714] do_exit+0x85d/0x24d0
[ 59.977858][ T5714] do_group_exit+0xb4/0x250
[ 59.982326][ T5714] __x64_sys_exit_group+0x39/0x40
[ 59.987325][ T5714] do_syscall_64+0x39/0xb0
[ 59.991706][ T5714] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 59.997566][ T5714]
[ 59.999861][ T5714] Memory state around the buggy address:
[ 60.005455][ T5714] ffff88806fdf7e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 60.013480][ T5714] ffff88806fdf7e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 60.021596][ T5714] >ffff88806fdf7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 60.029620][ T5714] ^
[ 60.037297][ T5714] ffff88806fdf7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 60.045324][ T5714] ffff88806fdf8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 60.053355][ T5714] ==================================================================
[ 60.062162][ T5714] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 60.069349][ T5714] CPU: 0 PID: 5714 Comm: syz-executor.0 Not tainted 6.4.0-rc7-syzkaller #0
[ 60.077999][ T5714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 60.088030][ T5714] Call Trace:
[ 60.091305][ T5714]
[ 60.094206][ T5714] dump_stack_lvl+0x64/0xb0
[ 60.098678][ T5714] panic+0x24f/0x540
[ 60.102543][ T5714] ? panic_smp_self_stop+0x70/0x70
[ 60.107704][ T5714] ? lockdep_hardirqs_on+0x7d/0x100
[ 60.112869][ T5714] ? preempt_schedule_thunk+0x1a/0x20
[ 60.118305][ T5714] ? preempt_schedule_common+0x45/0xb0
[ 60.123759][ T5714] ? preempt_schedule_thunk+0x1a/0x20
[ 60.129097][ T5714] check_panic_on_warn+0x75/0x80
[ 60.134013][ T5714] end_report+0xe9/0x120
[ 60.138227][ T5714] ? jfs_readdir+0x2a98/0x3610
[ 60.142957][ T5714] kasan_report+0xf9/0x130
[ 60.147342][ T5714] ? jfs_readdir+0x2a98/0x3610
[ 60.152082][ T5714] jfs_readdir+0x2a98/0x3610
[ 60.156672][ T5714] ? dtDelete+0x2b40/0x2b40
[ 60.161142][ T5714] ? lock_sync+0x190/0x190
[ 60.165559][ T5714] ? __traceiter_contention_end+0x70/0xa0
[ 60.171264][ T5714] ? down_write_killable+0x15b/0x250
[ 60.176517][ T5714] ? down_write_killable_nested+0x250/0x250
[ 60.182376][ T5714] ? apparmor_file_permission+0x152/0x460
[ 60.188080][ T5714] ? fsnotify_perm.part.0+0x11c/0x500
[ 60.193416][ T5714] iterate_dir+0x1aa/0x6c0
[ 60.197802][ T5714] __x64_sys_getdents64+0x128/0x240
[ 60.202968][ T5714] ? __ia32_sys_getdents+0x240/0x240
[ 60.208311][ T5714] ? fillonedir+0x320/0x320
[ 60.212797][ T5714] ? syscall_enter_from_user_mode+0x26/0x80
[ 60.218679][ T5714] do_syscall_64+0x39/0xb0
[ 60.223064][ T5714] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.228918][ T5714] RIP: 0033:0x7f57cce8c0f9
[ 60.233305][ T5714] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 60.252970][ T5714] RSP: 002b:00007f57cdbe3168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 60.261352][ T5714] RAX: ffffffffffffffda RBX: 00007f57ccfabf80 RCX: 00007f57cce8c0f9
[ 60.269295][ T5714] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004
[ 60.277255][ T5714] RBP: 00007f57ccee7b39 R08: 0000000000000000 R09: 0000000000000000
[ 60.285192][ T5714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 60.293147][ T5714] R13: 00007fffa8bf8edf R14: 00007f57cdbe3300 R15: 0000000000022000
[ 60.301088][ T5714]
[ 60.304882][ T5714] Kernel Offset: disabled
[ 60.309176][ T5714] Rebooting in 86400 seconds..