Warning: Permanently added '10.128.10.47' (ED25519) to the list of known hosts. 2025/04/10 20:25:20 ignoring optional flag "sandboxArg"="0" 2025/04/10 20:25:21 parsed 1 programs [ 117.697308][ T6009] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 120.923539][ T6031] chnl_net:caif_netlink_parms(): no params data found [ 120.989159][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.996283][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.003731][ T6031] bridge_slave_0: entered allmulticast mode [ 121.010847][ T6031] bridge_slave_0: entered promiscuous mode [ 121.020397][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.027547][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.034852][ T6031] bridge_slave_1: entered allmulticast mode [ 121.042876][ T6031] bridge_slave_1: entered promiscuous mode [ 121.074171][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.085724][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.125644][ T6031] team0: Port device team_slave_0 added [ 121.133916][ T6031] team0: Port device team_slave_1 added [ 121.161599][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.168719][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.195268][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.207946][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.215120][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.241120][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.281960][ T6031] hsr_slave_0: entered promiscuous mode [ 121.288816][ T6031] hsr_slave_1: entered promiscuous mode [ 121.389487][ T6031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.461100][ T6031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.538239][ T6031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.610213][ T6031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.728624][ T6031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.741047][ T6031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.750677][ T6031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.760489][ T6031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.786494][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.793747][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.801856][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.809489][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.860866][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.876703][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.885543][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.903805][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.915715][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.922870][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.937759][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.944953][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.090468][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.134900][ T6031] veth0_vlan: entered promiscuous mode [ 122.145908][ T6031] veth1_vlan: entered promiscuous mode [ 122.170269][ T6031] veth0_macvtap: entered promiscuous mode [ 122.181256][ T6031] veth1_macvtap: entered promiscuous mode [ 122.196030][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.207364][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.220612][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.233953][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.244715][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.256502][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.270273][ T6031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.280086][ T6031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.289465][ T6031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.298167][ T6031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.511074][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.519584][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.546205][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.554755][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.283307][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.291871][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.300273][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.308863][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.316497][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/04/10 20:25:32 executed programs: 0 [ 124.823578][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.834777][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.847158][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.856198][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.863984][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.073161][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 125.137681][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.145222][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.152859][ T6112] bridge_slave_0: entered allmulticast mode [ 125.160835][ T6112] bridge_slave_0: entered promiscuous mode [ 125.168708][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.175860][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.183398][ T6112] bridge_slave_1: entered allmulticast mode [ 125.190925][ T6112] bridge_slave_1: entered promiscuous mode [ 125.224227][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.236164][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.270422][ T6112] team0: Port device team_slave_0 added [ 125.278394][ T6112] team0: Port device team_slave_1 added [ 125.306300][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.313758][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.340390][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.354368][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.362658][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.389197][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.452200][ T6112] hsr_slave_0: entered promiscuous mode [ 125.459401][ T6112] hsr_slave_1: entered promiscuous mode [ 125.465789][ T6112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.473858][ T6112] Cannot create hsr debugfs directory [ 125.650487][ T6112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.939677][ T6112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.989386][ T6112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.041260][ T6112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.155875][ T6112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.170479][ T6112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.181162][ T6112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.191312][ T6112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.262105][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.282651][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.297322][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.304568][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.321159][ T975] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.328312][ T975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.476305][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.520293][ T6112] veth0_vlan: entered promiscuous mode [ 126.533066][ T6112] veth1_vlan: entered promiscuous mode [ 126.561547][ T6112] veth0_macvtap: entered promiscuous mode [ 126.572156][ T6112] veth1_macvtap: entered promiscuous mode [ 126.586870][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.597876][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.607832][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.623333][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.636816][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.650368][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.661196][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.671211][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.682320][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.694167][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.707010][ T6112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.715867][ T6112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.725208][ T6112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.734127][ T6112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.795965][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.811482][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.837231][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.846616][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.929545][ T55] Bluetooth: hci0: command tx timeout [ 127.106978][ T6127] loop0: detected capacity change from 0 to 32768 [ 127.129970][ T6127] ================================================================== [ 127.138058][ T6127] BUG: KASAN: slab-out-of-bounds in diWrite+0x1160/0x1e70 [ 127.145371][ T6127] Write of size 32 at addr ffff8880302f80c0 by task syz.0.15/6127 [ 127.153202][ T6127] [ 127.155561][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.0.15 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 127.155574][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.155583][ T6127] Call Trace: [ 127.155589][ T6127] [ 127.155593][ T6127] dump_stack_lvl+0x241/0x360 [ 127.155610][ T6127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.155622][ T6127] ? rcu_is_watching+0x15/0xb0 [ 127.155632][ T6127] ? __virt_addr_valid+0x183/0x530 [ 127.155644][ T6127] ? lock_release+0x4e/0x3e0 [ 127.155653][ T6127] ? __virt_addr_valid+0x183/0x530 [ 127.155664][ T6127] ? __virt_addr_valid+0x183/0x530 [ 127.155675][ T6127] print_report+0x16e/0x5b0 [ 127.155689][ T6127] ? __virt_addr_valid+0x183/0x530 [ 127.155699][ T6127] ? __virt_addr_valid+0x183/0x530 [ 127.155709][ T6127] ? __virt_addr_valid+0x45f/0x530 [ 127.155719][ T6127] ? __phys_addr+0xba/0x170 [ 127.155729][ T6127] ? diWrite+0x1160/0x1e70 [ 127.155741][ T6127] kasan_report+0x143/0x180 [ 127.155749][ T6127] ? diWrite+0x1160/0x1e70 [ 127.155761][ T6127] kasan_check_range+0x28f/0x2a0 [ 127.155769][ T6127] ? diWrite+0x1160/0x1e70 [ 127.155780][ T6127] __asan_memcpy+0x40/0x70 [ 127.155791][ T6127] diWrite+0x1160/0x1e70 [ 127.155804][ T6127] txCommit+0xa22/0x6c40 [ 127.155817][ T6127] ? add_index+0x364/0x1660 [ 127.155828][ T6127] ? __pfx_add_index+0x10/0x10 [ 127.155839][ T6127] ? __pfx_txCommit+0x10/0x10 [ 127.155851][ T6127] ? rcu_is_watching+0x15/0xb0 [ 127.155861][ T6127] ? __mark_inode_dirty+0x3db/0xe90 [ 127.155874][ T6127] add_missing_indices+0x8f3/0xc50 [ 127.155882][ T6127] ? __pfx_filldir64+0x10/0x10 [ 127.155897][ T6127] ? __pfx_add_missing_indices+0x10/0x10 [ 127.155905][ T6127] ? set_page_refcounted+0xa1/0x1e0 [ 127.155915][ T6127] ? alloc_pages_noprof+0x136/0x190 [ 127.155924][ T6127] jfs_readdir+0x2155/0x4010 [ 127.155938][ T6127] ? __pfx_jfs_readdir+0x10/0x10 [ 127.155946][ T6127] ? __lock_acquire+0xad5/0xd80 [ 127.155959][ T6127] ? down_write+0x18d/0x220 [ 127.155971][ T6127] ? __pfx_down_write+0x10/0x10 [ 127.155983][ T6127] ? wrap_directory_iterator+0x52/0xd0 [ 127.155996][ T6127] ? __pfx_jfs_readdir+0x10/0x10 [ 127.156003][ T6127] wrap_directory_iterator+0x91/0xd0 [ 127.156016][ T6127] iterate_dir+0x5a9/0x760 [ 127.156029][ T6127] __se_sys_getdents64+0x1e4/0x4c0 [ 127.156044][ T6127] ? __pfx___se_sys_getdents64+0x10/0x10 [ 127.156056][ T6127] ? __pfx_filldir64+0x10/0x10 [ 127.156070][ T6127] ? do_syscall_64+0xb6/0x230 [ 127.156082][ T6127] do_syscall_64+0xf3/0x230 [ 127.156102][ T6127] ? clear_bhb_loop+0x45/0xa0 [ 127.156112][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.156123][ T6127] RIP: 0033:0x7f707fb7e819 [ 127.156137][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.156145][ T6127] RSP: 002b:00007f7080941038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 127.156156][ T6127] RAX: ffffffffffffffda RBX: 00007f707fd35fa0 RCX: 00007f707fb7e819 [ 127.156163][ T6127] RDX: 0000000000001000 RSI: 00000000200038c0 RDI: 0000000000000005 [ 127.156169][ T6127] RBP: 00007f707fbf175e R08: 0000000000000000 R09: 0000000000000000 [ 127.156175][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.156180][ T6127] R13: 0000000000000000 R14: 00007f707fd35fa0 R15: 00007ffd05d65708 [ 127.156190][ T6127] [ 127.156193][ T6127] [ 127.486164][ T6127] Allocated by task 5987: [ 127.490490][ T6127] kasan_save_track+0x3f/0x80 [ 127.495182][ T6127] __kasan_kmalloc+0x9d/0xb0 [ 127.499780][ T6127] __kmalloc_noprof+0x28e/0x4d0 [ 127.504654][ T6127] tomoyo_encode+0x26f/0x540 [ 127.509231][ T6127] tomoyo_realpath_from_path+0x59e/0x5e0 [ 127.514873][ T6127] tomoyo_check_open_permission+0x25a/0x4f0 [ 127.520784][ T6127] security_file_open+0xac/0x250 [ 127.525743][ T6127] do_dentry_open+0x320/0x1960 [ 127.530562][ T6127] vfs_open+0x3b/0x370 [ 127.534618][ T6127] path_openat+0x2caf/0x35d0 [ 127.539208][ T6127] do_filp_open+0x284/0x4e0 [ 127.543761][ T6127] do_sys_openat2+0x12b/0x1d0 [ 127.548446][ T6127] __x64_sys_openat+0x249/0x2a0 [ 127.553324][ T6127] do_syscall_64+0xf3/0x230 [ 127.557848][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.563825][ T6127] [ 127.566155][ T6127] Freed by task 5987: [ 127.570128][ T6127] kasan_save_track+0x3f/0x80 [ 127.574802][ T6127] kasan_save_free_info+0x40/0x50 [ 127.579834][ T6127] __kasan_slab_free+0x59/0x70 [ 127.584608][ T6127] kfree+0x198/0x430 [ 127.588491][ T6127] tomoyo_check_open_permission+0x361/0x4f0 [ 127.594375][ T6127] security_file_open+0xac/0x250 [ 127.599344][ T6127] do_dentry_open+0x320/0x1960 [ 127.604115][ T6127] vfs_open+0x3b/0x370 [ 127.608263][ T6127] path_openat+0x2caf/0x35d0 [ 127.612847][ T6127] do_filp_open+0x284/0x4e0 [ 127.617360][ T6127] do_sys_openat2+0x12b/0x1d0 [ 127.622047][ T6127] __x64_sys_openat+0x249/0x2a0 [ 127.626922][ T6127] do_syscall_64+0xf3/0x230 [ 127.631422][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.637327][ T6127] [ 127.639740][ T6127] The buggy address belongs to the object at ffff8880302f8080 [ 127.639740][ T6127] which belongs to the cache kmalloc-64 of size 64 [ 127.653633][ T6127] The buggy address is located 0 bytes to the right of [ 127.653633][ T6127] allocated 64-byte region [ffff8880302f8080, ffff8880302f80c0) [ 127.668068][ T6127] [ 127.670386][ T6127] The buggy address belongs to the physical page: [ 127.676782][ T6127] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x302f8 [ 127.685544][ T6127] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 127.693014][ T6127] page_type: f5(slab) [ 127.697167][ T6127] raw: 00fff00000000000 ffff88801b0418c0 ffffea0000a3da40 dead000000000007 [ 127.705750][ T6127] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 127.714331][ T6127] page dumped because: kasan: bad access detected [ 127.720757][ T6127] page_owner tracks the page as allocated [ 127.726543][ T6127] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 68, tgid 68 (kworker/u8:4), ts 19087651871, free_ts 19086684305 [ 127.745560][ T6127] post_alloc_hook+0x1f4/0x240 [ 127.750334][ T6127] get_page_from_freelist+0x351d/0x36b0 [ 127.755866][ T6127] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 127.761666][ T6127] alloc_pages_mpol+0x339/0x690 [ 127.766492][ T6127] allocate_slab+0x8f/0x3a0 [ 127.771004][ T6127] ___slab_alloc+0xc3b/0x1500 [ 127.775801][ T6127] __slab_alloc+0x58/0xa0 [ 127.780116][ T6127] __kmalloc_cache_node_noprof+0x29f/0x3c0 [ 127.786092][ T6127] __get_vm_area_node+0x132/0x2d0 [ 127.791102][ T6127] __vmalloc_node_range_noprof+0x349/0x1390 [ 127.796991][ T6127] __vmalloc_node_noprof+0x80/0xa0 [ 127.802087][ T6127] dup_task_struct+0x3f7/0x870 [ 127.806849][ T6127] copy_process+0x5dc/0x3d10 [ 127.811437][ T6127] kernel_clone+0x227/0x880 [ 127.815953][ T6127] user_mode_thread+0x148/0x1c0 [ 127.820810][ T6127] call_usermodehelper_exec_work+0x5c/0x230 [ 127.826684][ T6127] page last free pid 10 tgid 10 stack trace: [ 127.832650][ T6127] __free_frozen_pages+0xddf/0x10a0 [ 127.837854][ T6127] vfree+0x1c3/0x360 [ 127.841755][ T6127] delayed_vfree_work+0x56/0x80 [ 127.846777][ T6127] process_scheduled_works+0xac3/0x18e0 [ 127.852342][ T6127] worker_thread+0x870/0xd50 [ 127.856936][ T6127] kthread+0x7b7/0x940 [ 127.860996][ T6127] ret_from_fork+0x4b/0x80 [ 127.865400][ T6127] ret_from_fork_asm+0x1a/0x30 [ 127.870164][ T6127] [ 127.872484][ T6127] Memory state around the buggy address: [ 127.878111][ T6127] ffff8880302f7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 127.886168][ T6127] ffff8880302f8000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 127.894238][ T6127] >ffff8880302f8080: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 127.902390][ T6127] ^ [ 127.908572][ T6127] ffff8880302f8100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 127.916720][ T6127] ffff8880302f8180: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 127.924782][ T6127] ================================================================== [ 127.941252][ T6127] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.948497][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.0.15 Not tainted 6.15.0-rc1-syzkaller-00139-gab59a8605604 #0 PREEMPT(full) [ 127.960573][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.970817][ T6127] Call Trace: [ 127.974101][ T6127] [ 127.977040][ T6127] dump_stack_lvl+0x241/0x360 [ 127.981723][ T6127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.986915][ T6127] ? __pfx__printk+0x10/0x10 [ 127.991525][ T6127] ? vscnprintf+0x5d/0x90 [ 127.995907][ T6127] panic+0x349/0x880 [ 127.999797][ T6127] ? check_panic_on_warn+0x21/0xb0 [ 128.004893][ T6127] ? __pfx_panic+0x10/0x10 [ 128.009312][ T6127] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 128.015328][ T6127] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.021651][ T6127] ? print_report+0x519/0x5b0 [ 128.026321][ T6127] check_panic_on_warn+0x86/0xb0 [ 128.031252][ T6127] ? diWrite+0x1160/0x1e70 [ 128.035679][ T6127] end_report+0x77/0x160 [ 128.039931][ T6127] kasan_report+0x154/0x180 [ 128.044446][ T6127] ? diWrite+0x1160/0x1e70 [ 128.048871][ T6127] kasan_check_range+0x28f/0x2a0 [ 128.053897][ T6127] ? diWrite+0x1160/0x1e70 [ 128.058307][ T6127] __asan_memcpy+0x40/0x70 [ 128.062722][ T6127] diWrite+0x1160/0x1e70 [ 128.067078][ T6127] txCommit+0xa22/0x6c40 [ 128.071403][ T6127] ? add_index+0x364/0x1660 [ 128.075898][ T6127] ? __pfx_add_index+0x10/0x10 [ 128.080659][ T6127] ? __pfx_txCommit+0x10/0x10 [ 128.085342][ T6127] ? rcu_is_watching+0x15/0xb0 [ 128.090093][ T6127] ? __mark_inode_dirty+0x3db/0xe90 [ 128.095281][ T6127] add_missing_indices+0x8f3/0xc50 [ 128.100391][ T6127] ? __pfx_filldir64+0x10/0x10 [ 128.105150][ T6127] ? __pfx_add_missing_indices+0x10/0x10 [ 128.110779][ T6127] ? set_page_refcounted+0xa1/0x1e0 [ 128.115971][ T6127] ? alloc_pages_noprof+0x136/0x190 [ 128.121159][ T6127] jfs_readdir+0x2155/0x4010 [ 128.125768][ T6127] ? __pfx_jfs_readdir+0x10/0x10 [ 128.130695][ T6127] ? __lock_acquire+0xad5/0xd80 [ 128.135539][ T6127] ? down_write+0x18d/0x220 [ 128.140033][ T6127] ? __pfx_down_write+0x10/0x10 [ 128.144880][ T6127] ? wrap_directory_iterator+0x52/0xd0 [ 128.150345][ T6127] ? __pfx_jfs_readdir+0x10/0x10 [ 128.155272][ T6127] wrap_directory_iterator+0x91/0xd0 [ 128.160638][ T6127] iterate_dir+0x5a9/0x760 [ 128.165062][ T6127] __se_sys_getdents64+0x1e4/0x4c0 [ 128.170170][ T6127] ? __pfx___se_sys_getdents64+0x10/0x10 [ 128.175882][ T6127] ? __pfx_filldir64+0x10/0x10 [ 128.180640][ T6127] ? do_syscall_64+0xb6/0x230 [ 128.185335][ T6127] do_syscall_64+0xf3/0x230 [ 128.189828][ T6127] ? clear_bhb_loop+0x45/0xa0 [ 128.194663][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.200543][ T6127] RIP: 0033:0x7f707fb7e819 [ 128.204948][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.224815][ T6127] RSP: 002b:00007f7080941038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 128.233254][ T6127] RAX: ffffffffffffffda RBX: 00007f707fd35fa0 RCX: 00007f707fb7e819 [ 128.241220][ T6127] RDX: 0000000000001000 RSI: 00000000200038c0 RDI: 0000000000000005 [ 128.249181][ T6127] RBP: 00007f707fbf175e R08: 0000000000000000 R09: 0000000000000000 [ 128.257146][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.265103][ T6127] R13: 0000000000000000 R14: 00007f707fd35fa0 R15: 00007ffd05d65708 [ 128.273185][ T6127] [ 128.276569][ T6127] Kernel Offset: disabled [ 128.280895][ T6127] Rebooting in 86400 seconds..