Warning: Permanently added '[localhost]:61805' (ED25519) to the list of known hosts. 2024/09/17 06:24:18 ignoring optional flag "sandboxArg"="0" 2024/09/17 06:24:18 parsed 1 programs [ 132.058689][ T5406] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 136.527918][ T4531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.532090][ T4531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.535371][ T4531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.539665][ T4531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.543113][ T4531] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.546460][ T4531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.054536][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.064544][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.091516][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.094416][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.858502][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.861204][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.203673][ T5456] chnl_net:caif_netlink_parms(): no params data found [ 138.250286][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.253156][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.257013][ T5456] bridge_slave_0: entered allmulticast mode [ 138.260171][ T5456] bridge_slave_0: entered promiscuous mode [ 138.264481][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.268847][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.271599][ T5456] bridge_slave_1: entered allmulticast mode [ 138.274766][ T5456] bridge_slave_1: entered promiscuous mode [ 138.293829][ T5456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.299347][ T5456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.317288][ T5456] team0: Port device team_slave_0 added [ 138.321423][ T5456] team0: Port device team_slave_1 added [ 138.337340][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.339844][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.350342][ T5456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.356259][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.359010][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.370501][ T5456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.396423][ T5456] hsr_slave_0: entered promiscuous mode [ 138.399546][ T5456] hsr_slave_1: entered promiscuous mode [ 138.935216][ T5456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.957597][ T5456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.964268][ T5456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.977586][ T5456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.021029][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.024021][ T5456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.028075][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.030930][ T5456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.138303][ T740] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.141998][ T740] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.180697][ T5456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.213534][ T5456] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.243448][ T740] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.246921][ T740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.268413][ T740] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.271367][ T740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.611808][ T5456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.681024][ T5456] veth0_vlan: entered promiscuous mode [ 139.701335][ T5456] veth1_vlan: entered promiscuous mode [ 139.757878][ T5456] veth0_macvtap: entered promiscuous mode [ 139.764011][ T5456] veth1_macvtap: entered promiscuous mode [ 139.804083][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.831227][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.848112][ T5456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.851610][ T5456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.855022][ T5456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.871838][ T5456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.229415][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.388773][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.477451][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/09/17 06:24:33 executed programs: 0 [ 142.135613][ T5165] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.140106][ T5165] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.143437][ T5165] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.148913][ T5165] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.152121][ T5165] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 142.155113][ T5165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.567320][ T5539] chnl_net:caif_netlink_parms(): no params data found [ 142.699051][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.810389][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.813164][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.816840][ T5539] bridge_slave_0: entered allmulticast mode [ 142.837359][ T5539] bridge_slave_0: entered promiscuous mode [ 142.844774][ T5539] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.856019][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.858920][ T5539] bridge_slave_1: entered allmulticast mode [ 142.868196][ T5539] bridge_slave_1: entered promiscuous mode [ 142.950738][ T5539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.979507][ T5539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.047570][ T5539] team0: Port device team_slave_0 added [ 143.052829][ T5539] team0: Port device team_slave_1 added [ 143.125229][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.130929][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.165975][ T5539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.187011][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.189844][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.247644][ T5539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.352435][ T5539] hsr_slave_0: entered promiscuous mode [ 143.376541][ T5539] hsr_slave_1: entered promiscuous mode [ 143.388910][ T5539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.392273][ T5539] Cannot create hsr debugfs directory [ 144.177180][ T5165] Bluetooth: hci0: command tx timeout [ 144.777424][ T11] bridge_slave_1: left allmulticast mode [ 144.779762][ T11] bridge_slave_1: left promiscuous mode [ 144.782044][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.799862][ T11] bridge_slave_0: left allmulticast mode [ 144.802124][ T11] bridge_slave_0: left promiscuous mode [ 144.804251][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.307464][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.312646][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.329407][ T11] bond0 (unregistering): Released all slaves [ 145.419248][ T11] hsr_slave_0: left promiscuous mode [ 145.456378][ T11] hsr_slave_1: left promiscuous mode [ 145.486035][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.488844][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.494001][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.507209][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.524639][ T11] veth1_macvtap: left promiscuous mode [ 145.546018][ T11] veth0_macvtap: left promiscuous mode [ 145.548214][ T11] veth1_vlan: left promiscuous mode [ 145.550249][ T11] veth0_vlan: left promiscuous mode [ 146.260797][ T5165] Bluetooth: hci0: command tx timeout [ 146.391417][ T11] team0 (unregistering): Port device team_slave_1 removed [ 146.457709][ T11] team0 (unregistering): Port device team_slave_0 removed [ 147.380547][ T5539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.414212][ T5539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.440347][ T5539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.453153][ T5539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.048612][ T5539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.108469][ T5539] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.149073][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.151755][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.155667][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.158496][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.336838][ T5165] Bluetooth: hci0: command tx timeout [ 148.572326][ T5539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.681549][ T5539] veth0_vlan: entered promiscuous mode [ 148.695663][ T5539] veth1_vlan: entered promiscuous mode [ 148.761266][ T5539] veth0_macvtap: entered promiscuous mode [ 148.788654][ T5539] veth1_macvtap: entered promiscuous mode [ 148.820435][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.851345][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.860006][ T5539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.863377][ T5539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.898759][ T5539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.902073][ T5539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.053713][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.067002][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.118010][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.121070][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/09/17 06:24:40 executed programs: 2 [ 149.270739][ T5631] loop0: detected capacity change from 0 to 128 [ 149.320355][ T5631] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 149.436205][ T5631] loop0: detected capacity change from 128 to 0 [ 149.447136][ T5631] syz.0.15: attempt to access beyond end of device [ 149.447136][ T5631] loop0: rw=0, sector=117, nr_sectors = 1 limit=0 [ 149.453415][ T5631] syz.0.15: attempt to access beyond end of device [ 149.453415][ T5631] loop0: rw=0, sector=117, nr_sectors = 1 limit=0 [ 149.504189][ T5631] ================================================================== [ 149.507408][ T5631] BUG: KASAN: slab-out-of-bounds in udf_get_filelongad+0x167/0x1b0 [ 149.510615][ T5631] Read of size 4 at addr ffff888011bc2f30 by task syz.0.15/5631 [ 149.514304][ T5631] [ 149.515208][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: syz.0.15 Not tainted 6.11.0-syzkaller-ga430d95c5efa-dirty #0 [ 149.518865][ T5631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.522754][ T5631] Call Trace: [ 149.524050][ T5631] [ 149.525139][ T5631] dump_stack_lvl+0x241/0x360 [ 149.527043][ T5631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.528851][ T5631] ? __pfx__printk+0x10/0x10 [ 149.530512][ T5631] ? _printk+0xd5/0x120 [ 149.532064][ T5631] ? __virt_addr_valid+0x183/0x530 [ 149.533956][ T5631] ? __virt_addr_valid+0x183/0x530 [ 149.535869][ T5631] print_report+0x169/0x550 [ 149.537561][ T5631] ? __virt_addr_valid+0x183/0x530 [ 149.539402][ T5631] ? __virt_addr_valid+0x183/0x530 [ 149.541171][ T5631] ? __virt_addr_valid+0x45f/0x530 [ 149.542986][ T5631] ? __phys_addr+0xba/0x170 [ 149.544664][ T5631] ? udf_get_filelongad+0x167/0x1b0 [ 149.546550][ T5631] kasan_report+0x143/0x180 [ 149.548201][ T5631] ? udf_get_filelongad+0x167/0x1b0 [ 149.550069][ T5631] udf_get_filelongad+0x167/0x1b0 [ 149.551741][ T5631] udf_current_aext+0x435/0x9e0 [ 149.553435][ T5631] udf_next_aext+0x8c/0x4a0 [ 149.555164][ T5631] udf_setsize+0xa8a/0x1280 [ 149.556826][ T5631] ? __pfx_udf_setsize+0x10/0x10 [ 149.558642][ T5631] ? __pfx_down_write+0x10/0x10 [ 149.560505][ T5631] ? current_time+0x203/0x2b0 [ 149.562331][ T5631] udf_setattr+0x3c7/0x5d0 [ 149.564084][ T5631] ? __pfx_udf_setattr+0x10/0x10 [ 149.566081][ T5631] notify_change+0xbca/0xe90 [ 149.567997][ T5631] do_ftruncate+0x462/0x580 [ 149.569831][ T5631] ? __pfx_do_ftruncate+0x10/0x10 [ 149.571523][ T5631] ? __fget_files+0x29/0x470 [ 149.573113][ T5631] __x64_sys_ftruncate+0x95/0xf0 [ 149.574882][ T5631] do_syscall_64+0xf3/0x230 [ 149.576638][ T5631] ? clear_bhb_loop+0x35/0x90 [ 149.578451][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.580219][ T5631] RIP: 0033:0x7f5479379eb9 [ 149.581857][ T5631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.589317][ T5631] RSP: 002b:00007f547a0e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 149.592467][ T5631] RAX: ffffffffffffffda RBX: 00007f5479515f80 RCX: 00007f5479379eb9 [ 149.595450][ T5631] RDX: 0000000000000000 RSI: 0000008002007ffb RDI: 0000000000000005 [ 149.598359][ T5631] RBP: 00007f54793e793e R08: 0000000000000000 R09: 0000000000000000 [ 149.601347][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.604359][ T5631] R13: 0000000000000000 R14: 00007f5479515f80 R15: 00007fff70ff2d48 [ 149.607367][ T5631] [ 149.608505][ T5631] [ 149.609402][ T5631] Allocated by task 5632: [ 149.610982][ T5631] kasan_save_track+0x3f/0x80 [ 149.612698][ T5631] __kasan_kmalloc+0x98/0xb0 [ 149.614421][ T5631] __kmalloc_cache_noprof+0x19c/0x2c0 [ 149.616488][ T5631] alloc_bprm+0x2d6/0xe20 [ 149.617864][ T5631] do_execveat_common+0x18c/0x6f0 [ 149.619794][ T5631] __x64_sys_execve+0x92/0xb0 [ 149.621642][ T5631] do_syscall_64+0xf3/0x230 [ 149.623362][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.625528][ T5631] [ 149.626453][ T5631] Freed by task 5632: [ 149.628074][ T5631] kasan_save_track+0x3f/0x80 [ 149.629835][ T5631] kasan_save_free_info+0x40/0x50 [ 149.631753][ T5631] poison_slab_object+0xe0/0x150 [ 149.633537][ T5631] __kasan_slab_free+0x37/0x60 [ 149.635295][ T5631] kfree+0x149/0x360 [ 149.636768][ T5631] do_execveat_common+0x388/0x6f0 [ 149.638614][ T5631] __x64_sys_execve+0x92/0xb0 [ 149.640498][ T5631] do_syscall_64+0xf3/0x230 [ 149.642422][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.644611][ T5631] [ 149.645606][ T5631] The buggy address belongs to the object at ffff888011bc2c00 [ 149.645606][ T5631] which belongs to the cache kmalloc-512 of size 512 [ 149.650610][ T5631] The buggy address is located 304 bytes to the right of [ 149.650610][ T5631] allocated 512-byte region [ffff888011bc2c00, ffff888011bc2e00) [ 149.656165][ T5631] [ 149.657045][ T5631] The buggy address belongs to the physical page: [ 149.659329][ T5631] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11bc2 [ 149.662566][ T5631] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 149.665834][ T5631] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 149.668731][ T5631] page_type: 0xfdffffff(slab) [ 149.670527][ T5631] raw: 00fff00000000040 ffff88801ac41c80 dead000000000100 dead000000000122 [ 149.673603][ T5631] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 149.676818][ T5631] head: 00fff00000000040 ffff88801ac41c80 dead000000000100 dead000000000122 [ 149.679848][ T5631] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 149.683071][ T5631] head: 00fff00000000001 ffffea000046f081 ffffffffffffffff 0000000000000000 [ 149.686325][ T5631] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 149.689462][ T5631] page dumped because: kasan: bad access detected [ 149.691767][ T5631] page_owner tracks the page as allocated [ 149.693869][ T5631] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5451, tgid 5451 (syz-executor), ts 137841735172, free_ts 137580793357 [ 149.702109][ T5631] post_alloc_hook+0x1f3/0x230 [ 149.703921][ T5631] get_page_from_freelist+0x2e4c/0x2f10 [ 149.705984][ T5631] __alloc_pages_noprof+0x256/0x6c0 [ 149.707907][ T5631] alloc_slab_page+0x5f/0x120 [ 149.709606][ T5631] allocate_slab+0x5a/0x2f0 [ 149.711205][ T5631] ___slab_alloc+0xcd1/0x14b0 [ 149.712866][ T5631] __slab_alloc+0x58/0xa0 [ 149.714492][ T5631] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 149.716437][ T5631] __ipv6_dev_mc_inc+0x429/0xaa0 [ 149.718291][ T5631] ipv6_add_dev+0xe12/0x1220 [ 149.720087][ T5631] addrconf_notify+0x6a7/0x1020 [ 149.721970][ T5631] notifier_call_chain+0x19f/0x3e0 [ 149.723954][ T5631] register_netdevice+0x167f/0x1b00 [ 149.725965][ T5631] register_netdev+0x3b/0x50 [ 149.727848][ T5631] vti6_init_net+0x233/0x2f0 [ 149.729644][ T5631] ops_init+0x31e/0x590 [ 149.731273][ T5631] page last free pid 5448 tgid 5448 stack trace: [ 149.733532][ T5631] free_unref_page+0xd22/0xea0 [ 149.735323][ T5631] __put_partials+0xeb/0x130 [ 149.736766][ T5631] put_cpu_partial+0x17c/0x250 [ 149.738567][ T5631] __slab_free+0x2ea/0x3d0 [ 149.740158][ T5631] qlist_free_all+0x9e/0x140 [ 149.741906][ T5631] kasan_quarantine_reduce+0x14f/0x170 [ 149.744046][ T5631] __kasan_slab_alloc+0x23/0x80 [ 149.745910][ T5631] kmem_cache_alloc_noprof+0x135/0x2a0 [ 149.748001][ T5631] __pmd_alloc+0x110/0x630 [ 149.749797][ T5631] handle_mm_fault+0xf76/0x1bb0 [ 149.751713][ T5631] exc_page_fault+0x459/0x8c0 [ 149.753477][ T5631] asm_exc_page_fault+0x26/0x30 [ 149.755363][ T5631] [ 149.756308][ T5631] Memory state around the buggy address: [ 149.758515][ T5631] ffff888011bc2e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.761647][ T5631] ffff888011bc2e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.764703][ T5631] >ffff888011bc2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.767992][ T5631] ^ [ 149.770244][ T5631] ffff888011bc2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.773305][ T5631] ffff888011bc3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 149.776387][ T5631] ================================================================== [ 150.105436][ T5631] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 150.108275][ T5631] CPU: 0 UID: 0 PID: 5631 Comm: syz.0.15 Not tainted 6.11.0-syzkaller-ga430d95c5efa-dirty #0 [ 150.111839][ T5631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.115677][ T5631] Call Trace: [ 150.116899][ T5631] [ 150.117992][ T5631] dump_stack_lvl+0x241/0x360 [ 150.119747][ T5631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.121702][ T5631] ? __pfx__printk+0x10/0x10 [ 150.123624][ T5631] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 150.125775][ T5631] ? vscnprintf+0x5d/0x90 [ 150.127315][ T5631] panic+0x349/0x860 [ 150.128706][ T5631] ? check_panic_on_warn+0x21/0xb0 [ 150.130539][ T5631] ? __pfx_panic+0x10/0x10 [ 150.132248][ T5631] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 150.134412][ T5631] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 150.136653][ T5631] check_panic_on_warn+0x86/0xb0 [ 150.138484][ T5631] ? udf_get_filelongad+0x167/0x1b0 [ 150.140395][ T5631] end_report+0x77/0x160 [ 150.141946][ T5631] kasan_report+0x154/0x180 [ 150.143643][ T5631] ? udf_get_filelongad+0x167/0x1b0 [ 150.145547][ T5631] udf_get_filelongad+0x167/0x1b0 [ 150.147427][ T5631] udf_current_aext+0x435/0x9e0 [ 150.149275][ T5631] udf_next_aext+0x8c/0x4a0 [ 150.150978][ T5631] udf_setsize+0xa8a/0x1280 [ 150.152678][ T5631] ? __pfx_udf_setsize+0x10/0x10 [ 150.154568][ T5631] ? __pfx_down_write+0x10/0x10 [ 150.156458][ T5631] ? current_time+0x203/0x2b0 [ 150.158227][ T5631] udf_setattr+0x3c7/0x5d0 [ 150.159894][ T5631] ? __pfx_udf_setattr+0x10/0x10 [ 150.161726][ T5631] notify_change+0xbca/0xe90 [ 150.163450][ T5631] do_ftruncate+0x462/0x580 [ 150.165136][ T5631] ? __pfx_do_ftruncate+0x10/0x10 [ 150.166853][ T5631] ? __fget_files+0x29/0x470 [ 150.168428][ T5631] __x64_sys_ftruncate+0x95/0xf0 [ 150.170027][ T5631] do_syscall_64+0xf3/0x230 [ 150.171655][ T5631] ? clear_bhb_loop+0x35/0x90 [ 150.173485][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.175719][ T5631] RIP: 0033:0x7f5479379eb9 [ 150.177398][ T5631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.184457][ T5631] RSP: 002b:00007f547a0e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 150.187651][ T5631] RAX: ffffffffffffffda RBX: 00007f5479515f80 RCX: 00007f5479379eb9 [ 150.190577][ T5631] RDX: 0000000000000000 RSI: 0000008002007ffb RDI: 0000000000000005 [ 150.193505][ T5631] RBP: 00007f54793e793e R08: 0000000000000000 R09: 0000000000000000 [ 150.196433][ T5631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.199271][ T5631] R13: 0000000000000000 R14: 00007f5479515f80 R15: 00007fff70ff2d48 [ 150.202211][ T5631] [ 150.203619][ T5631] Kernel Offset: disabled [ 150.205171][ T5631] Rebooting in 86400 seconds..