Warning: Permanently added '[localhost]:36993' (ED25519) to the list of known hosts. 2025/07/27 08:15:41 ignoring optional flag "sandboxArg"="0" 2025/07/27 08:15:43 parsed 1 programs [ 135.711500][ T5645] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 138.018778][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.021911][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.683182][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.688155][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.692717][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.697829][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.701848][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.908272][ T5691] chnl_net:caif_netlink_parms(): no params data found [ 141.971987][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.976300][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.979557][ T5691] bridge_slave_0: entered allmulticast mode [ 141.983473][ T5691] bridge_slave_0: entered promiscuous mode [ 141.989360][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.992652][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.996887][ T5691] bridge_slave_1: entered allmulticast mode [ 142.001049][ T5691] bridge_slave_1: entered promiscuous mode [ 142.026053][ T5691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.032939][ T5691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.059184][ T5691] team0: Port device team_slave_0 added [ 142.064284][ T5691] team0: Port device team_slave_1 added [ 142.087034][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.090334][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.105754][ T5691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.112370][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.116641][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.129082][ T5691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.167857][ T5691] hsr_slave_0: entered promiscuous mode [ 142.171249][ T5691] hsr_slave_1: entered promiscuous mode [ 142.811566][ T5691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 142.828595][ T5691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 142.847592][ T5691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 142.859682][ T5691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 142.919698][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.923633][ T5691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.927741][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.931186][ T5691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.968631][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.972505][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.102838][ T5691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.143386][ T5691] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.178714][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.182061][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.188918][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.192173][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.563601][ T5691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.646784][ T5691] veth0_vlan: entered promiscuous mode [ 143.671988][ T5691] veth1_vlan: entered promiscuous mode [ 143.726623][ T5691] veth0_macvtap: entered promiscuous mode [ 143.739101][ T5691] veth1_macvtap: entered promiscuous mode [ 143.800351][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.820199][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.841168][ T5691] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.851144][ T5691] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.865835][ T5691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.869818][ T5691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.134738][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.226482][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.292789][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.378402][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.341723][ T55] bridge_slave_1: left allmulticast mode [ 146.344390][ T55] bridge_slave_1: left promiscuous mode [ 146.355377][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.376090][ T55] bridge_slave_0: left allmulticast mode [ 146.379141][ T55] bridge_slave_0: left promiscuous mode [ 146.381872][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.897607][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.903687][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.909336][ T55] bond0 (unregistering): Released all slaves [ 147.009512][ T55] hsr_slave_0: left promiscuous mode [ 147.015770][ T55] hsr_slave_1: left promiscuous mode [ 147.018876][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.023154][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.036630][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.043480][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.071888][ T55] veth1_macvtap: left promiscuous mode [ 147.074443][ T55] veth0_macvtap: left promiscuous mode [ 147.087941][ T55] veth1_vlan: left promiscuous mode [ 147.090657][ T55] veth0_vlan: left promiscuous mode [ 147.722339][ T55] team0 (unregistering): Port device team_slave_1 removed [ 147.776796][ T55] team0 (unregistering): Port device team_slave_0 removed [ 148.949069][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.952671][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.026691][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.035722][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/27 08:16:02 executed programs: 0 [ 150.444973][ T4690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.451053][ T4690] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.457279][ T4690] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.462378][ T4690] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.466811][ T4690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.820875][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 150.959518][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.965374][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.968791][ T5839] bridge_slave_0: entered allmulticast mode [ 150.985920][ T5839] bridge_slave_0: entered promiscuous mode [ 150.998247][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.001792][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.016816][ T5839] bridge_slave_1: entered allmulticast mode [ 151.021573][ T5839] bridge_slave_1: entered promiscuous mode [ 151.079342][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.104723][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.164221][ T5839] team0: Port device team_slave_0 added [ 151.179054][ T5839] team0: Port device team_slave_1 added [ 151.228851][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.232278][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.263826][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.278649][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.282056][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.317241][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.394915][ T5839] hsr_slave_0: entered promiscuous mode [ 151.413373][ T5839] hsr_slave_1: entered promiscuous mode [ 151.928111][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.955570][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.961535][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.979007][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.147841][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.178028][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.198421][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.201844][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.240280][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.244649][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.496072][ T4690] Bluetooth: hci0: command tx timeout [ 152.630622][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.719496][ T5839] veth0_vlan: entered promiscuous mode [ 152.739309][ T5839] veth1_vlan: entered promiscuous mode [ 152.786923][ T5839] veth0_macvtap: entered promiscuous mode [ 152.801006][ T5839] veth1_macvtap: entered promiscuous mode [ 152.830593][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.851873][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.874602][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.880306][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.884390][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.889359][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.972254][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.987872][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.020997][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.024692][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.291597][ T5892] loop0: detected capacity change from 0 to 32768 [ 153.342629][ T5892] ================================================================== [ 153.346325][ T5892] BUG: KASAN: slab-out-of-bounds in diWrite+0x1209/0x1f40 [ 153.349641][ T5892] Write of size 32 at addr ffff88803f7200c0 by task syz.0.16/5892 [ 153.354439][ T5892] [ 153.355588][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz.0.16 Not tainted 6.16.0-rc7-syzkaller-gec2df4364666 #0 PREEMPT(full) [ 153.355603][ T5892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.355610][ T5892] Call Trace: [ 153.355618][ T5892] [ 153.355624][ T5892] dump_stack_lvl+0x189/0x250 [ 153.355641][ T5892] ? __virt_addr_valid+0x1c8/0x5c0 [ 153.355654][ T5892] ? rcu_is_watching+0x15/0xb0 [ 153.355666][ T5892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.355678][ T5892] ? rcu_is_watching+0x15/0xb0 [ 153.355688][ T5892] ? lock_release+0x4b/0x3e0 [ 153.355699][ T5892] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 153.355764][ T5892] ? __virt_addr_valid+0x1c8/0x5c0 [ 153.355776][ T5892] ? __virt_addr_valid+0x4a5/0x5c0 [ 153.355789][ T5892] print_report+0xca/0x240 [ 153.355799][ T5892] ? diWrite+0x1209/0x1f40 [ 153.355811][ T5892] kasan_report+0x118/0x150 [ 153.355824][ T5892] ? diWrite+0x1209/0x1f40 [ 153.355837][ T5892] kasan_check_range+0x2b0/0x2c0 [ 153.355849][ T5892] ? diWrite+0x1209/0x1f40 [ 153.355860][ T5892] __asan_memcpy+0x40/0x70 [ 153.355870][ T5892] diWrite+0x1209/0x1f40 [ 153.355884][ T5892] txCommit+0x852/0x5430 [ 153.355898][ T5892] ? txLock+0xaf3/0x1cb0 [ 153.355910][ T5892] ? __pfx_txCommit+0x10/0x10 [ 153.355924][ T5892] ? rcu_is_watching+0x15/0xb0 [ 153.355982][ T5892] ? __mark_inode_dirty+0x3ab/0xdf0 [ 153.355998][ T5892] add_missing_indices+0x8ce/0xce0 [ 153.356016][ T5892] ? __pfx_add_missing_indices+0x10/0x10 [ 153.356032][ T5892] ? alloc_pages_noprof+0xbe/0x190 [ 153.356046][ T5892] jfs_readdir+0x1d8f/0x3ae0 [ 153.356066][ T5892] ? __pfx_jfs_readdir+0x10/0x10 [ 153.356084][ T5892] ? down_write+0x162/0x1f0 [ 153.356095][ T5892] ? __pfx_down_write+0x10/0x10 [ 153.356108][ T5892] ? __pfx_jfs_readdir+0x10/0x10 [ 153.356121][ T5892] wrap_directory_iterator+0x96/0xe0 [ 153.356133][ T5892] iterate_dir+0x5af/0x770 [ 153.356143][ T5892] __se_sys_getdents64+0xe4/0x260 [ 153.356154][ T5892] ? __pfx___se_sys_getdents64+0x10/0x10 [ 153.356165][ T5892] ? __pfx_filldir64+0x10/0x10 [ 153.356175][ T5892] ? rcu_is_watching+0x15/0xb0 [ 153.356186][ T5892] ? do_syscall_64+0xbe/0x3b0 [ 153.356209][ T5892] do_syscall_64+0xfa/0x3b0 [ 153.356219][ T5892] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.356228][ T5892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.356238][ T5892] ? clear_bhb_loop+0x60/0xb0 [ 153.356249][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.356259][ T5892] RIP: 0033:0x7f2c1af8e969 [ 153.356270][ T5892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.356279][ T5892] RSP: 002b:00007f2c1a1fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 153.356291][ T5892] RAX: ffffffffffffffda RBX: 00007f2c1b1b5fa0 RCX: 00007f2c1af8e969 [ 153.356299][ T5892] RDX: 0000000000001000 RSI: 00002000000038c0 RDI: 0000000000000005 [ 153.356306][ T5892] RBP: 00007f2c1b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 153.356312][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.356318][ T5892] R13: 0000000000000000 R14: 00007f2c1b1b5fa0 R15: 00007ffcbd4bc478 [ 153.356328][ T5892] [ 153.356332][ T5892] [ 153.500962][ T5892] Allocated by task 5349: [ 153.503054][ T5892] kasan_save_track+0x3e/0x80 [ 153.505394][ T5892] __kasan_kmalloc+0x93/0xb0 [ 153.507738][ T5892] __kmalloc_noprof+0x27a/0x4f0 [ 153.510050][ T5892] tomoyo_get_name+0x20c/0x590 [ 153.512316][ T5892] tomoyo_assign_domain+0x272/0x700 [ 153.514633][ T5892] tomoyo_find_next_domain+0xda5/0x1aa0 [ 153.517101][ T5892] tomoyo_bprm_check_security+0x11c/0x180 [ 153.519712][ T5892] security_bprm_check+0x89/0x270 [ 153.521989][ T5892] bprm_execve+0x8ee/0x1450 [ 153.524081][ T5892] do_execveat_common+0x510/0x6a0 [ 153.526431][ T5892] __x64_sys_execve+0x94/0xb0 [ 153.528657][ T5892] do_syscall_64+0xfa/0x3b0 [ 153.530677][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.533305][ T5892] [ 153.534387][ T5892] The buggy address belongs to the object at ffff88803f720000 [ 153.534387][ T5892] which belongs to the cache kmalloc-256 of size 256 [ 153.540960][ T5892] The buggy address is located 192 bytes inside of [ 153.540960][ T5892] allocated 211-byte region [ffff88803f720000, ffff88803f7200d3) [ 153.547231][ T5892] [ 153.548348][ T5892] The buggy address belongs to the physical page: [ 153.551162][ T5892] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3f720 [ 153.555018][ T5892] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 153.558242][ T5892] page_type: f5(slab) [ 153.560041][ T5892] raw: 04fff00000000000 ffff88801a441b40 ffffea00013930c0 dead000000000002 [ 153.563865][ T5892] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 153.567901][ T5892] page dumped because: kasan: bad access detected [ 153.571104][ T5892] page_owner tracks the page as allocated [ 153.574071][ T5892] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 28211790496, free_ts 28189745428 [ 153.582698][ T5892] post_alloc_hook+0x240/0x2a0 [ 153.584946][ T5892] get_page_from_freelist+0x21e4/0x22c0 [ 153.587544][ T5892] __alloc_frozen_pages_noprof+0x181/0x370 [ 153.590226][ T5892] alloc_pages_mpol+0x232/0x4a0 [ 153.592459][ T5892] allocate_slab+0x8a/0x3b0 [ 153.594512][ T5892] ___slab_alloc+0xbfc/0x1480 [ 153.596746][ T5892] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 153.600262][ T5892] krealloc_noprof+0x124/0x340 [ 153.603267][ T5892] add_sysfs_param+0xc9/0xa20 [ 153.605900][ T5892] kernel_add_sysfs_param+0xb4/0x130 [ 153.608300][ T5892] param_sysfs_builtin+0x1de/0x290 [ 153.610555][ T5892] param_sysfs_builtin_init+0x32/0x40 [ 153.613041][ T5892] do_one_initcall+0x233/0x820 [ 153.615264][ T5892] do_initcall_level+0x137/0x1f0 [ 153.617464][ T5892] do_initcalls+0x69/0xd0 [ 153.619397][ T5892] kernel_init_freeable+0x3d9/0x570 [ 153.621875][ T5892] page last free pid 10 tgid 10 stack trace: [ 153.624736][ T5892] __free_frozen_pages+0xc71/0xe70 [ 153.627212][ T5892] vfree+0x25a/0x400 [ 153.629011][ T5892] delayed_vfree_work+0x55/0x80 [ 153.631292][ T5892] process_scheduled_works+0xae1/0x17b0 [ 153.633779][ T5892] worker_thread+0x8a0/0xda0 [ 153.635918][ T5892] kthread+0x711/0x8a0 [ 153.637766][ T5892] ret_from_fork+0x3fc/0x770 [ 153.639973][ T5892] ret_from_fork_asm+0x1a/0x30 [ 153.642177][ T5892] [ 153.643283][ T5892] Memory state around the buggy address: [ 153.645928][ T5892] ffff88803f71ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.649561][ T5892] ffff88803f720000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.653135][ T5892] >ffff88803f720080: 00 00 00 00 00 00 00 00 00 00 03 fc fc fc fc fc [ 153.656804][ T5892] ^ [ 153.659809][ T5892] ffff88803f720100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.663577][ T5892] ffff88803f720180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.667171][ T5892] ================================================================== [ 153.834678][ T5892] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.838128][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz.0.16 Not tainted 6.16.0-rc7-syzkaller-gec2df4364666 #0 PREEMPT(full) [ 153.843045][ T5892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.847790][ T5892] Call Trace: [ 153.849343][ T5892] [ 153.850909][ T5892] dump_stack_lvl+0x99/0x250 [ 153.853219][ T5892] ? __asan_memcpy+0x40/0x70 [ 153.855554][ T5892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.858300][ T5892] ? __pfx__printk+0x10/0x10 [ 153.860533][ T5892] panic+0x2db/0x790 [ 153.862308][ T5892] ? __pfx_preempt_schedule+0x10/0x10 [ 153.864693][ T5892] ? __pfx_panic+0x10/0x10 [ 153.866711][ T5892] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 153.869518][ T5892] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.872411][ T5892] ? diWrite+0x1209/0x1f40 [ 153.874518][ T5892] check_panic_on_warn+0x89/0xb0 [ 153.877030][ T5892] ? diWrite+0x1209/0x1f40 [ 153.879224][ T5892] end_report+0x78/0x160 [ 153.881287][ T5892] kasan_report+0x129/0x150 [ 153.883513][ T5892] ? diWrite+0x1209/0x1f40 [ 153.885605][ T5892] kasan_check_range+0x2b0/0x2c0 [ 153.887835][ T5892] ? diWrite+0x1209/0x1f40 [ 153.889845][ T5892] __asan_memcpy+0x40/0x70 [ 153.892152][ T5892] diWrite+0x1209/0x1f40 [ 153.894445][ T5892] txCommit+0x852/0x5430 [ 153.897039][ T5892] ? txLock+0xaf3/0x1cb0 [ 153.900009][ T5892] ? __pfx_txCommit+0x10/0x10 [ 153.902819][ T5892] ? rcu_is_watching+0x15/0xb0 [ 153.905028][ T5892] ? __mark_inode_dirty+0x3ab/0xdf0 [ 153.907391][ T5892] add_missing_indices+0x8ce/0xce0 [ 153.909707][ T5892] ? __pfx_add_missing_indices+0x10/0x10 [ 153.912461][ T5892] ? alloc_pages_noprof+0xbe/0x190 [ 153.915612][ T5892] jfs_readdir+0x1d8f/0x3ae0 [ 153.918264][ T5892] ? __pfx_jfs_readdir+0x10/0x10 [ 153.920572][ T5892] ? down_write+0x162/0x1f0 [ 153.922580][ T5892] ? __pfx_down_write+0x10/0x10 [ 153.924839][ T5892] ? __pfx_jfs_readdir+0x10/0x10 [ 153.927125][ T5892] wrap_directory_iterator+0x96/0xe0 [ 153.929495][ T5892] iterate_dir+0x5af/0x770 [ 153.931578][ T5892] __se_sys_getdents64+0xe4/0x260 [ 153.933926][ T5892] ? __pfx___se_sys_getdents64+0x10/0x10 [ 153.936597][ T5892] ? __pfx_filldir64+0x10/0x10 [ 153.938784][ T5892] ? rcu_is_watching+0x15/0xb0 [ 153.940962][ T5892] ? do_syscall_64+0xbe/0x3b0 [ 153.943013][ T5892] do_syscall_64+0xfa/0x3b0 [ 153.945072][ T5892] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.947863][ T5892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.951432][ T5892] ? clear_bhb_loop+0x60/0xb0 [ 153.953717][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.956100][ T5892] RIP: 0033:0x7f2c1af8e969 [ 153.958052][ T5892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.966741][ T5892] RSP: 002b:00007f2c1a1fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 153.970730][ T5892] RAX: ffffffffffffffda RBX: 00007f2c1b1b5fa0 RCX: 00007f2c1af8e969 [ 153.974265][ T5892] RDX: 0000000000001000 RSI: 00002000000038c0 RDI: 0000000000000005 [ 153.977991][ T5892] RBP: 00007f2c1b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 153.981660][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.985619][ T5892] R13: 0000000000000000 R14: 00007f2c1b1b5fa0 R15: 00007ffcbd4bc478 [ 153.989159][ T5892] [ 153.990942][ T5892] Kernel Offset: disabled [ 153.992938][ T5892] Rebooting in 86400 seconds..