Warning: Permanently added '[localhost]:20917' (ED25519) to the list of known hosts. 2026/01/09 09:27:06 parsed 1 programs syzkaller login: [ 88.741895][ T5327] cgroup: Unknown subsys name 'net' [ 88.827007][ T5327] cgroup: Unknown subsys name 'cpuset' [ 88.833069][ T5327] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.568434][ T5327] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.320114][ T5343] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.889276][ T4684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.892967][ T4684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.899352][ T4684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.903922][ T4684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.907464][ T4684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.040509][ T9] cfg80211: failed to load regulatory.db [ 97.373901][ T3743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.377242][ T3743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.434664][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.438322][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.950742][ T5390] chnl_net:caif_netlink_parms(): no params data found [ 100.040577][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.054112][ T5390] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.057094][ T5390] bridge_slave_0: entered allmulticast mode [ 100.060728][ T5390] bridge_slave_0: entered promiscuous mode [ 100.076388][ T5390] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.079515][ T5390] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.082424][ T5390] bridge_slave_1: entered allmulticast mode [ 100.095167][ T5390] bridge_slave_1: entered promiscuous mode [ 100.140974][ T5390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.157975][ T5390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.198658][ T5390] team0: Port device team_slave_0 added [ 100.214982][ T5390] team0: Port device team_slave_1 added [ 100.256291][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.259343][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.284853][ T5390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.304952][ T5390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.307914][ T5390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.334111][ T5390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.404987][ T5390] hsr_slave_0: entered promiscuous mode [ 100.413929][ T5390] hsr_slave_1: entered promiscuous mode [ 100.802952][ T5390] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.813736][ T5390] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.819706][ T5390] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.827873][ T5390] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.909936][ T5390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.930139][ T5390] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.939804][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.943299][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.959276][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.962573][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.299176][ T5390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.374573][ T5390] veth0_vlan: entered promiscuous mode [ 101.385109][ T5390] veth1_vlan: entered promiscuous mode [ 101.425047][ T5390] veth0_macvtap: entered promiscuous mode [ 101.438037][ T5390] veth1_macvtap: entered promiscuous mode [ 101.474970][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.488715][ T5390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.528804][ T3356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.532632][ T3356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.556867][ T3356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.560699][ T3356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.796617][ T3743] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.915221][ T3743] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.026346][ T3743] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.095759][ T3743] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.143778][ T3743] bridge_slave_1: left allmulticast mode [ 104.146517][ T3743] bridge_slave_1: left promiscuous mode [ 104.149913][ T3743] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.195077][ T3743] bridge_slave_0: left allmulticast mode [ 104.197771][ T3743] bridge_slave_0: left promiscuous mode [ 104.211529][ T3743] bridge0: port 1(bridge_slave_0) entered disabled state 2026/01/09 09:27:24 executed programs: 0 [ 104.592956][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.605374][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.608858][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.612835][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.616815][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.777208][ T3743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.784994][ T3743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.789984][ T3743] bond0 (unregistering): Released all slaves [ 104.902383][ T3743] hsr_slave_0: left promiscuous mode [ 104.908714][ T3743] hsr_slave_1: left promiscuous mode [ 104.917579][ T3743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.921053][ T3743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.936850][ T3743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.940294][ T3743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.970370][ T3743] veth1_macvtap: left promiscuous mode [ 104.973102][ T3743] veth0_macvtap: left promiscuous mode [ 104.984364][ T3743] veth1_vlan: left promiscuous mode [ 104.986664][ T3743] veth0_vlan: left promiscuous mode [ 105.449068][ T3743] team0 (unregistering): Port device team_slave_1 removed [ 105.474227][ T3743] team0 (unregistering): Port device team_slave_0 removed [ 106.003298][ T5447] chnl_net:caif_netlink_parms(): no params data found [ 106.458368][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.461611][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.471077][ T5447] bridge_slave_0: entered allmulticast mode [ 106.475296][ T5447] bridge_slave_0: entered promiscuous mode [ 106.500125][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.503750][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.507035][ T5447] bridge_slave_1: entered allmulticast mode [ 106.526825][ T5447] bridge_slave_1: entered promiscuous mode [ 106.629568][ T5447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.643277][ T5447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.684885][ T46] Bluetooth: hci0: command tx timeout [ 106.714790][ T5447] team0: Port device team_slave_0 added [ 106.730937][ T5447] team0: Port device team_slave_1 added [ 106.813804][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.817169][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.844206][ T5447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.878736][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.881913][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.914143][ T5447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.986203][ T5447] hsr_slave_0: entered promiscuous mode [ 106.989448][ T5447] hsr_slave_1: entered promiscuous mode [ 107.527608][ T5447] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.546607][ T5447] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.553317][ T5447] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.577870][ T5447] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.700930][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.731873][ T5447] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.748542][ T3743] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.751730][ T3743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.775409][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.778735][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.848845][ T5447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.120979][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.199081][ T5447] veth0_vlan: entered promiscuous mode [ 108.233868][ T5447] veth1_vlan: entered promiscuous mode [ 108.271309][ T5447] veth0_macvtap: entered promiscuous mode [ 108.287647][ T5447] veth1_macvtap: entered promiscuous mode [ 108.319612][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.337874][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.366273][ T4257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.370378][ T4257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.384501][ T4257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.388276][ T4257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.484366][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.488136][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.544427][ T4257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.547865][ T4257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.683100][ T5509] loop0: detected capacity change from 0 to 2048 [ 108.764404][ T46] Bluetooth: hci0: command tx timeout [ 108.772267][ T5509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.823994][ T5509] loop0: detected capacity change from 2048 to 2045 [ 108.886348][ T5447] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.990002][ T5513] loop0: detected capacity change from 0 to 2048 [ 109.042153][ T5513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.094526][ T5513] loop0: detected capacity change from 2048 to 2045 [ 109.108880][ T5513] ================================================================== [ 109.112693][ T5513] BUG: KASAN: use-after-free in ext4_read_inline_data+0x1d0/0x2c0 [ 109.116348][ T5513] Read of size 68 at addr ffff888055db8810 by task syz.0.18/5513 [ 109.120606][ T5513] [ 109.121648][ T5513] CPU: 0 UID: 0 PID: 5513 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 109.121685][ T5513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.121692][ T5513] Call Trace: [ 109.121700][ T5513] [ 109.121707][ T5513] dump_stack_lvl+0xe8/0x150 [ 109.121726][ T5513] print_report+0xca/0x240 [ 109.121738][ T5513] ? ext4_read_inline_data+0x1d0/0x2c0 [ 109.121751][ T5513] kasan_report+0x118/0x150 [ 109.121758][ T5513] ? ext4_read_inline_data+0x1d0/0x2c0 [ 109.121772][ T5513] kasan_check_range+0x2b0/0x2c0 [ 109.121781][ T5513] ? ext4_read_inline_data+0x1d0/0x2c0 [ 109.121794][ T5513] __asan_memcpy+0x29/0x70 [ 109.121806][ T5513] ext4_read_inline_data+0x1d0/0x2c0 [ 109.121821][ T5513] ext4_read_inline_dir+0x2b3/0xb80 [ 109.121836][ T5513] ? __pfx_ext4_read_inline_dir+0x10/0x10 [ 109.121850][ T5513] ? aa_file_perm+0x139/0x1530 [ 109.121864][ T5513] ext4_readdir+0x3e8/0x3e90 [ 109.121875][ T5513] ? aa_file_perm+0x139/0x1530 [ 109.121885][ T5513] ? look_up_lock_class+0x57/0x110 [ 109.121945][ T5513] ? __lock_acquire+0x6b6/0x2cf0 [ 109.121958][ T5513] ? trace_contention_end+0x39/0x100 [ 109.121969][ T5513] ? __mutex_lock+0x335/0x1350 [ 109.121978][ T5513] ? __pfx_aa_file_perm+0x10/0x10 [ 109.121988][ T5513] ? __pfx_ext4_readdir+0x10/0x10 [ 109.122000][ T5513] ? iterate_dir+0x292/0x570 [ 109.122018][ T5513] ? iterate_dir+0x292/0x570 [ 109.122030][ T5513] ? down_read_killable+0x1bc/0x350 [ 109.122042][ T5513] iterate_dir+0x399/0x570 [ 109.122056][ T5513] __se_sys_getdents64+0xe4/0x260 [ 109.122068][ T5513] ? __pfx___se_sys_getdents64+0x10/0x10 [ 109.122081][ T5513] ? __pfx_filldir64+0x10/0x10 [ 109.122094][ T5513] ? rcu_is_watching+0x15/0xb0 [ 109.122109][ T5513] do_syscall_64+0xec/0xf80 [ 109.122118][ T5513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.122128][ T5513] ? trace_irq_disable+0x37/0x100 [ 109.122140][ T5513] ? clear_bhb_loop+0x60/0xb0 [ 109.122151][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.122160][ T5513] RIP: 0033:0x7f740bb8f7c9 [ 109.122172][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.122180][ T5513] RSP: 002b:00007ffcdd6d6a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 109.122192][ T5513] RAX: ffffffffffffffda RBX: 00007f740bde5fa0 RCX: 00007f740bb8f7c9 [ 109.122200][ T5513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 109.122206][ T5513] RBP: 00007f740bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.122211][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.122217][ T5513] R13: 00007f740bde5fa0 R14: 00007f740bde5fa0 R15: 0000000000000003 [ 109.122229][ T5513] [ 109.122233][ T5513] [ 109.238215][ T5513] The buggy address belongs to the physical page: [ 109.240988][ T5513] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x44a8 pfn:0x55db8 [ 109.244941][ T5513] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 109.248120][ T5513] page_type: f0(buddy) [ 109.249968][ T5513] raw: 04fff00000000000 ffff88805ffd6e48 ffff88805ffd6e48 0000000000000000 [ 109.253747][ T5513] raw: 00000000000044a8 0000000000000003 00000000f0000000 0000000000000000 [ 109.257932][ T5513] page dumped because: kasan: bad access detected [ 109.261240][ T5513] page_owner tracks the page as freed [ 109.263634][ T5513] page last allocated via order 0, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5327, tgid 5327 (syz-executor), ts 89833038158, free_ts 102757627745 [ 109.272232][ T5513] post_alloc_hook+0x234/0x290 [ 109.274058][ T5513] get_page_from_freelist+0x24e0/0x2580 [ 109.276079][ T5513] __alloc_frozen_pages_noprof+0x181/0x370 [ 109.278345][ T5513] alloc_pages_mpol+0x232/0x4a0 [ 109.280319][ T5513] alloc_pages_noprof+0xa9/0x190 [ 109.282345][ T5513] folio_alloc_noprof+0x1e/0x30 [ 109.284422][ T5513] filemap_alloc_folio_noprof+0x107/0x470 [ 109.286934][ T5513] page_cache_ra_unbounded+0x34f/0x990 [ 109.289357][ T5513] filemap_get_pages+0x7ff/0x1dc0 [ 109.292047][ T5513] filemap_read+0x3f6/0x11a0 [ 109.294539][ T5513] __kernel_read+0x4cf/0x960 [ 109.296987][ T5513] integrity_kernel_read+0x89/0xd0 [ 109.299685][ T5513] ima_calc_file_hash+0x85e/0x16f0 [ 109.302147][ T5513] ima_collect_measurement+0x428/0x8f0 [ 109.304402][ T5513] process_measurement+0x111e/0x1a70 [ 109.306531][ T5513] ima_file_check+0xd9/0x130 [ 109.308433][ T5513] page last free pid 79 tgid 79 stack trace: [ 109.310658][ T5513] free_unref_folios+0xdb3/0x14f0 [ 109.312689][ T5513] shrink_folio_list+0x289b/0x4f90 [ 109.314767][ T5513] evict_folios+0x473e/0x57f0 [ 109.316798][ T5513] try_to_shrink_lruvec+0x8a3/0xb50 [ 109.318979][ T5513] shrink_one+0x25c/0x720 [ 109.320805][ T5513] shrink_node+0x2f7d/0x35b0 [ 109.322783][ T5513] kswapd+0x145a/0x2820 [ 109.324519][ T5513] kthread+0x711/0x8a0 [ 109.326326][ T5513] ret_from_fork+0x510/0xa50 [ 109.328354][ T5513] ret_from_fork_asm+0x1a/0x30 [ 109.330573][ T5513] [ 109.331795][ T5513] Memory state around the buggy address: [ 109.334210][ T5513] ffff888055db8700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.337595][ T5513] ffff888055db8780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.341164][ T5513] >ffff888055db8800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.344776][ T5513] ^ [ 109.346809][ T5513] ffff888055db8880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.349782][ T5513] ffff888055db8900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.353084][ T5513] ================================================================== [ 109.399843][ T5513] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.403060][ T5513] CPU: 0 UID: 0 PID: 5513 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 109.407588][ T5513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.412459][ T5513] Call Trace: [ 109.414059][ T5513] [ 109.415426][ T5513] vpanic+0x1e0/0x670 [ 109.417411][ T5513] panic+0xb9/0xc0 [ 109.419287][ T5513] ? __pfx_panic+0x10/0x10 [ 109.421291][ T5513] ? preempt_schedule_common+0x83/0xd0 [ 109.423510][ T5513] ? ext4_read_inline_data+0x1d0/0x2c0 [ 109.425820][ T5513] check_panic_on_warn+0x89/0xb0 [ 109.428017][ T5513] ? ext4_read_inline_data+0x1d0/0x2c0 [ 109.431053][ T5513] end_report+0x6f/0x140 [ 109.433951][ T5513] kasan_report+0x129/0x150 [ 109.436371][ T5513] ? ext4_read_inline_data+0x1d0/0x2c0 [ 109.438790][ T5513] kasan_check_range+0x2b0/0x2c0 [ 109.440960][ T5513] ? ext4_read_inline_data+0x1d0/0x2c0 [ 109.443558][ T5513] __asan_memcpy+0x29/0x70 [ 109.445354][ T5513] ext4_read_inline_data+0x1d0/0x2c0 [ 109.447547][ T5513] ext4_read_inline_dir+0x2b3/0xb80 [ 109.449653][ T5513] ? __pfx_ext4_read_inline_dir+0x10/0x10 [ 109.452074][ T5513] ? aa_file_perm+0x139/0x1530 [ 109.454242][ T5513] ext4_readdir+0x3e8/0x3e90 [ 109.456378][ T5513] ? aa_file_perm+0x139/0x1530 [ 109.458819][ T5513] ? look_up_lock_class+0x57/0x110 [ 109.461247][ T5513] ? __lock_acquire+0x6b6/0x2cf0 [ 109.463589][ T5513] ? trace_contention_end+0x39/0x100 [ 109.465965][ T5513] ? __mutex_lock+0x335/0x1350 [ 109.468083][ T5513] ? __pfx_aa_file_perm+0x10/0x10 [ 109.470314][ T5513] ? __pfx_ext4_readdir+0x10/0x10 [ 109.472707][ T5513] ? iterate_dir+0x292/0x570 [ 109.475026][ T5513] ? iterate_dir+0x292/0x570 [ 109.477325][ T5513] ? down_read_killable+0x1bc/0x350 [ 109.479777][ T5513] iterate_dir+0x399/0x570 [ 109.481737][ T5513] __se_sys_getdents64+0xe4/0x260 [ 109.483841][ T5513] ? __pfx___se_sys_getdents64+0x10/0x10 [ 109.486131][ T5513] ? __pfx_filldir64+0x10/0x10 [ 109.488208][ T5513] ? rcu_is_watching+0x15/0xb0 [ 109.490359][ T5513] do_syscall_64+0xec/0xf80 [ 109.492322][ T5513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.495006][ T5513] ? trace_irq_disable+0x37/0x100 [ 109.497156][ T5513] ? clear_bhb_loop+0x60/0xb0 [ 109.499240][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.501653][ T5513] RIP: 0033:0x7f740bb8f7c9 [ 109.503665][ T5513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.512027][ T5513] RSP: 002b:00007ffcdd6d6a68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 109.515845][ T5513] RAX: ffffffffffffffda RBX: 00007f740bde5fa0 RCX: 00007f740bb8f7c9 [ 109.519329][ T5513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 109.523392][ T5513] RBP: 00007f740bc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.527065][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.530618][ T5513] R13: 00007f740bde5fa0 R14: 00007f740bde5fa0 R15: 0000000000000003 [ 109.534132][ T5513] [ 109.535794][ T5513] Kernel Offset: disabled [ 109.537575][ T5513] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:27:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=0000000000000065 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002b072b0 R8 =ffff888033cc8237 R9 =1ffff11006799046 R10=dffffc0000000000 R11=ffffffff851bb760 R12=dffffc0000000000 R13=ffffffff99900a03 R14=ffffffff99c156c0 R15=0000000000000000 RIP=ffffffff851bb7dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555589b5500 ffffffff 00c00000 GS =0000 ffff88808d414000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdf20d4f84 CR3=0000000052dec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000003f Opmask02=0000000001bddfff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056260906b330 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056260907de30 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76ac1f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f76ac152c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697377685f313132 303863616d2f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a302e 30312d3533712d63 707276633a317463 3a554d45516e7663 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 423731302c313731 302c453631302c35 3631302c34363130 2c333431302c3234 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000