Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts.
2023/05/06 03:03:40 ignoring optional flag "sandboxArg"="0"
2023/05/06 03:03:40 parsed 1 programs
2023/05/06 03:03:40 executed programs: 0
[   48.707456][ T4991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   48.714796][ T4991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   48.722328][ T4991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   48.730136][ T4991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   48.737728][ T4991] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   48.744816][ T4991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   48.793254][ T5336] chnl_net:caif_netlink_parms(): no params data found
[   48.817134][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.824193][ T5336] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.831512][ T5336] bridge_slave_0: entered allmulticast mode
[   48.838294][ T5336] bridge_slave_0: entered promiscuous mode
[   48.844890][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.852035][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.859121][ T5336] bridge_slave_1: entered allmulticast mode
[   48.865306][ T5336] bridge_slave_1: entered promiscuous mode
[   48.878459][ T5336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.888410][ T5336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.904014][ T5336] team0: Port device team_slave_0 added
[   48.910637][ T5336] team0: Port device team_slave_1 added
[   48.922066][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.929122][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.955001][ T5336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.966424][ T5336] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.973365][ T5336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.999319][ T5336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   49.019831][ T5336] hsr_slave_0: entered promiscuous mode
[   49.025796][ T5336] hsr_slave_1: entered promiscuous mode
[   49.636223][ T5336] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   49.644590][ T5336] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   49.653092][ T5336] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   49.661498][ T5336] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   49.678804][ T5336] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.686004][ T5336] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.693279][ T5336] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.700671][ T5336] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.733227][ T5336] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.743931][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.752764][  T751] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.761256][  T751] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.769702][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   49.781065][ T5336] 8021q: adding VLAN 0 to HW filter on device team0
[   49.795540][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   49.803946][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.812792][  T751] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.819865][  T751] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.828667][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   49.837179][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.845397][  T751] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.852471][  T751] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.860543][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   49.869003][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   49.883301][ T5336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   49.899432][ T5336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.911453][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   49.921994][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.930570][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.939910][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   49.948325][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   49.957248][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.965858][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   49.973982][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.984324][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   49.991935][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   50.057448][ T5336] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.064983][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   50.074168][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   50.090163][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   50.099850][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   50.113279][ T5336] veth0_vlan: entered promiscuous mode
[   50.121071][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   50.129642][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   50.139803][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   50.148049][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   50.158423][ T5336] veth1_vlan: entered promiscuous mode
[   50.173649][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   50.182547][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   50.191135][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   50.199612][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.210089][ T5336] veth0_macvtap: entered promiscuous mode
[   50.219307][ T5336] veth1_macvtap: entered promiscuous mode
[   50.230508][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.239327][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   50.247633][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   50.255321][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   50.264908][ T4999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.275010][ T5336] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.284205][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.293135][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   50.303149][ T5336] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.312400][ T5336] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.321169][ T5336] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.329973][ T5336] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.371366][ T2857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.382479][ T2857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.387611][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.393007][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.406407][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.415075][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   50.578931][ T5461] loop0: detected capacity change from 0 to 32768
[   50.592853][ T5461] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   50.592853][ T5461] 
[   50.828906][ T5483] loop0: detected capacity change from 0 to 32768
[   50.838075][ T4991] Bluetooth: hci0: command 0x0409 tx timeout
[   50.851011][ T5483] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   50.851011][ T5483] 
[   51.093843][ T5508] loop0: detected capacity change from 0 to 32768
[   51.104005][ T5508] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   51.104005][ T5508] 
[   51.317007][ T5526] loop0: detected capacity change from 0 to 32768
[   51.337273][ T5526] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   51.337273][ T5526] 
[   51.864633][ T5594] loop0: detected capacity change from 0 to 32768
[   51.875690][ T5594] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   51.875690][ T5594] 
[   52.047370][ T5610] loop0: detected capacity change from 0 to 32768
[   52.057524][ T5610] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   52.057524][ T5610] 
[   52.532649][ T5667] loop0: detected capacity change from 0 to 32768
[   52.551178][ T5667] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   52.551178][ T5667] 
[   52.790903][ T5686] loop0: detected capacity change from 0 to 32768
[   52.805090][ T5686] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   52.805090][ T5686] 
[   52.905697][ T4991] Bluetooth: hci0: command 0x041b tx timeout
[   53.231776][ T5705] loop0: detected capacity change from 0 to 32768
[   53.242043][ T5705] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   53.242043][ T5705] 
[   53.653210][ T5708] loop0: detected capacity change from 0 to 32768
[   53.662570][ T5708] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   53.662570][ T5708] 
2023/05/06 03:03:46 executed programs: 11
[   54.057654][ T5710] loop0: detected capacity change from 0 to 32768
[   54.071931][ T5710] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[   54.071931][ T5710] 
[   54.207478][ T5712] loop0: detected capacity change from 0 to 32768
[   54.220044][ T5712] ==================================================================
[   54.228089][ T5712] BUG: KASAN: slab-use-after-free in jfs_readdir+0x2a98/0x3610
[   54.235594][ T5712] Read of size 1 at addr ffff88806fc69b35 by task syz-executor.0/5712
[   54.243699][ T5712] 
[   54.245988][ T5712] CPU: 0 PID: 5712 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0
[   54.254185][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[   54.264202][ T5712] Call Trace:
[   54.267449][ T5712]  <TASK>
[   54.270349][ T5712]  dump_stack_lvl+0x64/0xb0
[   54.274827][ T5712]  print_address_description.constprop.0+0x2c/0x3c0
[   54.281380][ T5712]  ? jfs_readdir+0x2a98/0x3610
[   54.286115][ T5712]  kasan_report+0x11c/0x130
[   54.290585][ T5712]  ? jfs_readdir+0x2a98/0x3610
[   54.295312][ T5712]  jfs_readdir+0x2a98/0x3610
[   54.299863][ T5712]  ? dtDelete+0x2b40/0x2b40
[   54.304326][ T5712]  ? lock_sync+0x190/0x190
[   54.308700][ T5712]  ? perf_trace_contention_begin+0x1d0/0x3a0
[   54.314641][ T5712]  ? down_write_killable+0x15b/0x250
[   54.319888][ T5712]  ? down_write_killable_nested+0x250/0x250
[   54.325744][ T5712]  ? apparmor_file_permission+0x152/0x460
[   54.331427][ T5712]  ? fsnotify_perm.part.0+0x11c/0x500
[   54.336757][ T5712]  iterate_dir+0x1aa/0x6c0
[   54.341133][ T5712]  __x64_sys_getdents64+0x128/0x240
[   54.346289][ T5712]  ? __ia32_sys_getdents+0x240/0x240
[   54.351544][ T5712]  ? fillonedir+0x320/0x320
[   54.356002][ T5712]  ? syscall_enter_from_user_mode+0x26/0x80
[   54.361853][ T5712]  do_syscall_64+0x39/0xb0
[   54.366229][ T5712]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.372081][ T5712] RIP: 0033:0x7effed48c0f9
[   54.376545][ T5712] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   54.396113][ T5712] RSP: 002b:00007effee1cf168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[   54.404483][ T5712] RAX: ffffffffffffffda RBX: 00007effed5abf80 RCX: 00007effed48c0f9
[   54.412414][ T5712] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004
[   54.420346][ T5712] RBP: 00007effed4e7b39 R08: 0000000000000000 R09: 0000000000000000
[   54.428281][ T5712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   54.436212][ T5712] R13: 00007ffe8bd458cf R14: 00007effee1cf300 R15: 0000000000022000
[   54.444149][ T5712]  </TASK>
[   54.447133][ T5712] 
[   54.449432][ T5712] Allocated by task 5708:
[   54.453717][ T5712]  kasan_save_stack+0x22/0x40
[   54.458373][ T5712]  kasan_set_track+0x25/0x30
[   54.462924][ T5712]  __kasan_slab_alloc+0x7f/0x90
[   54.467819][ T5712]  kmem_cache_alloc_lru+0x20a/0x600
[   54.472994][ T5712]  jfs_alloc_inode+0x1e/0x50
[   54.477549][ T5712]  alloc_inode+0x56/0x1e0
[   54.481839][ T5712]  iget_locked+0x151/0x5f0
[   54.486231][ T5712]  jfs_iget+0x11/0x420
[   54.490259][ T5712]  jfs_fill_super+0x631/0xbe0
[   54.494899][ T5712]  mount_bdev+0x2d5/0x3c0
[   54.499189][ T5712]  legacy_get_tree+0xfe/0x1f0
[   54.503821][ T5712]  vfs_get_tree+0x83/0x320
[   54.508197][ T5712]  path_mount+0x836/0x1a30
[   54.512572][ T5712]  __x64_sys_mount+0x1f9/0x270
[   54.517382][ T5712]  do_syscall_64+0x39/0xb0
[   54.521757][ T5712]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.527614][ T5712] 
[   54.529901][ T5712] Freed by task 0:
[   54.533578][ T5712]  kasan_save_stack+0x22/0x40
[   54.538217][ T5712]  kasan_set_track+0x25/0x30
[   54.542766][ T5712]  kasan_save_free_info+0x2e/0x40
[   54.547753][ T5712]  ____kasan_slab_free+0x160/0x1c0
[   54.552841][ T5712]  slab_free_freelist_hook+0x8b/0x1c0
[   54.558172][ T5712]  kmem_cache_free+0xe9/0x480
[   54.562810][ T5712]  rcu_core+0x806/0x1ad0
[   54.567008][ T5712]  __do_softirq+0x1d4/0x905
[   54.571471][ T5712] 
[   54.573758][ T5712] Last potentially related work creation:
[   54.579436][ T5712]  kasan_save_stack+0x22/0x40
[   54.584072][ T5712]  __kasan_record_aux_stack+0xbc/0xd0
[   54.589402][ T5712]  __call_rcu_common.constprop.0+0x99/0x7e0
[   54.595250][ T5712]  dispose_list+0xf0/0x1b0
[   54.599642][ T5712]  evict_inodes+0x2b3/0x3b0
[   54.604105][ T5712]  generic_shutdown_super+0xa3/0x420
[   54.609350][ T5712]  kill_block_super+0x9a/0xe0
[   54.613982][ T5712]  deactivate_locked_super+0x7f/0x130
[   54.619316][ T5712]  cleanup_mnt+0x253/0x360
[   54.623693][ T5712]  task_work_run+0x12f/0x220
[   54.628243][ T5712]  exit_to_user_mode_prepare+0x210/0x240
[   54.633834][ T5712]  syscall_exit_to_user_mode+0x1d/0x50
[   54.639252][ T5712]  do_syscall_64+0x46/0xb0
[   54.643631][ T5712]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   54.649487][ T5712] 
[   54.651777][ T5712] The buggy address belongs to the object at ffff88806fc69280
[   54.651777][ T5712]  which belongs to the cache jfs_ip of size 2240
[   54.665450][ T5712] The buggy address is located 2229 bytes inside of
[   54.665450][ T5712]  freed 2240-byte region [ffff88806fc69280, ffff88806fc69b40)
[   54.679385][ T5712] 
[   54.681680][ T5712] The buggy address belongs to the physical page:
[   54.688053][ T5712] page:ffffea0001bf1a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6fc68
[   54.698157][ T5712] head:ffffea0001bf1a00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   54.707048][ T5712] memcg:ffff8880709ddd01
[   54.711248][ T5712] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   54.719186][ T5712] page_type: 0xffffffff()
[   54.723474][ T5712] raw: 00fff00000010200 ffff888017e40780 dead000000000122 0000000000000000
[   54.732021][ T5712] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff8880709ddd01
[   54.740562][ T5712] page dumped because: kasan: bad access detected
[   54.746932][ T5712] page_owner tracks the page as allocated
[   54.752607][ T5712] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5708, tgid 5707 (syz-executor.0), ts 53660843807, free_ts 6042394681
[   54.776345][ T5712]  get_page_from_freelist+0xf41/0x2c00
[   54.781765][ T5712]  __alloc_pages+0x1cb/0x4a0
[   54.786328][ T5712]  allocate_slab+0x25f/0x390
[   54.790880][ T5712]  ___slab_alloc+0xa91/0x1400
[   54.795523][ T5712]  __slab_alloc.constprop.0+0x56/0xa0
[   54.800851][ T5712]  kmem_cache_alloc_lru+0x4a8/0x600
[   54.806005][ T5712]  jfs_alloc_inode+0x1e/0x50
[   54.810557][ T5712]  alloc_inode+0x56/0x1e0
[   54.814842][ T5712]  new_inode+0x1a/0x240
[   54.818955][ T5712]  diReadSpecial+0x4d/0x650
[   54.823441][ T5712]  jfs_mount+0x4c7/0x6e0
[   54.827647][ T5712]  jfs_fill_super+0x553/0xbe0
[   54.832282][ T5712]  mount_bdev+0x2d5/0x3c0
[   54.836568][ T5712]  legacy_get_tree+0xfe/0x1f0
[   54.841202][ T5712]  vfs_get_tree+0x83/0x320
[   54.845575][ T5712]  path_mount+0x836/0x1a30
[   54.849956][ T5712] page last free stack trace:
[   54.854678][ T5712]  free_unref_page_prepare+0x629/0xca0
[   54.860101][ T5712]  free_unref_page+0x33/0x370
[   54.864737][ T5712]  free_contig_range+0xb5/0x180
[   54.869545][ T5712]  destroy_args+0x50a/0x700
[   54.874009][ T5712]  debug_vm_pgtable+0x18fd/0x31a0
[   54.878990][ T5712]  do_one_initcall+0xc2/0x3c0
[   54.883628][ T5712]  kernel_init_freeable+0x541/0x950
[   54.888871][ T5712]  kernel_init+0x1a/0x1c0
[   54.893158][ T5712]  ret_from_fork+0x1f/0x30
[   54.897533][ T5712] 
[   54.899823][ T5712] Memory state around the buggy address:
[   54.905416][ T5712]  ffff88806fc69a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   54.913438][ T5712]  ffff88806fc69a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   54.921457][ T5712] >ffff88806fc69b00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[   54.929567][ T5712]                                      ^
[   54.935155][ T5712]  ffff88806fc69b80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[   54.943174][ T5712]  ffff88806fc69c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   54.951211][ T5712] ==================================================================
[   54.961092][ T5712] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   54.968262][ T5712] CPU: 0 PID: 5712 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0
[   54.976459][ T5712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[   54.986479][ T5712] Call Trace:
[   54.989727][ T5712]  <TASK>
[   54.992628][ T5712]  dump_stack_lvl+0x64/0xb0
[   54.997100][ T5712]  panic+0x24f/0x540
[   55.000961][ T5712]  ? panic_smp_self_stop+0x70/0x70
[   55.006033][ T5712]  ? lockdep_hardirqs_on+0x7d/0x100
[   55.011195][ T5712]  ? preempt_schedule_thunk+0x1a/0x20
[   55.016619][ T5712]  ? preempt_schedule_common+0x45/0xb0
[   55.022041][ T5712]  ? preempt_schedule_thunk+0x1a/0x20
[   55.027375][ T5712]  check_panic_on_warn+0x75/0x80
[   55.032272][ T5712]  end_report+0xe9/0x120
[   55.036477][ T5712]  ? jfs_readdir+0x2a98/0x3610
[   55.041202][ T5712]  kasan_report+0xf9/0x130
[   55.045582][ T5712]  ? jfs_readdir+0x2a98/0x3610
[   55.050306][ T5712]  jfs_readdir+0x2a98/0x3610
[   55.054947][ T5712]  ? dtDelete+0x2b40/0x2b40
[   55.059413][ T5712]  ? lock_sync+0x190/0x190
[   55.063789][ T5712]  ? perf_trace_contention_begin+0x1d0/0x3a0
[   55.069820][ T5712]  ? down_write_killable+0x15b/0x250
[   55.075069][ T5712]  ? down_write_killable_nested+0x250/0x250
[   55.080922][ T5712]  ? apparmor_file_permission+0x152/0x460
[   55.086689][ T5712]  ? fsnotify_perm.part.0+0x11c/0x500
[   55.092025][ T5712]  iterate_dir+0x1aa/0x6c0
[   55.096405][ T5712]  __x64_sys_getdents64+0x128/0x240
[   55.101564][ T5712]  ? __ia32_sys_getdents+0x240/0x240
[   55.106809][ T5712]  ? fillonedir+0x320/0x320
[   55.111274][ T5712]  ? syscall_enter_from_user_mode+0x26/0x80
[   55.117131][ T5712]  do_syscall_64+0x39/0xb0
[   55.121510][ T5712]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   55.127365][ T5712] RIP: 0033:0x7effed48c0f9
[   55.131741][ T5712] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   55.151308][ T5712] RSP: 002b:00007effee1cf168 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[   55.159681][ T5712] RAX: ffffffffffffffda RBX: 00007effed5abf80 RCX: 00007effed48c0f9
[   55.167619][ T5712] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004
[   55.175556][ T5712] RBP: 00007effed4e7b39 R08: 0000000000000000 R09: 0000000000000000
[   55.183513][ T5712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.191445][ T5712] R13: 00007ffe8bd458cf R14: 00007effee1cf300 R15: 0000000000022000
[   55.199385][ T5712]  </TASK>
[   55.203292][ T5712] Kernel Offset: disabled
[   55.207588][ T5712] Rebooting in 86400 seconds..