Warning: Permanently added '[localhost]:62490' (ED25519) to the list of known hosts.
2026/10/26 06:33:09 parsed 1 programs
2026/10/26 06:33:09 serving rpc on tcp://35399
syzkaller login: qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1a9000)
[ 90.857749][ T1027] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 90.857769][ T1027] ata1: failed to read log page 10h (errno=-5)
[ 90.857792][ T1027] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[ 90.857813][ T1027] ata1.00: irq_stat 0x41000000
[ 90.857826][ T1027] ata1.00: failed command: WRITE FPDMA QUEUED
[ 90.857834][ T1027] ata1.00: cmd 61/48:70:ee:73:04/0d:00:00:00:00/40 tag 14 ncq dma 1740800 ou
[ 90.857834][ T1027] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 90.857866][ T1027] ata1.00: status: { DRDY }
[ 90.857876][ T1027] ata1.00: failed command: WRITE FPDMA QUEUED
[ 90.857882][ T1027] ata1.00: cmd 61/00:78:36:81:04/20:00:00:00:00/40 tag 15 ncq dma 4194304 ou
[ 90.857882][ T1027] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 90.857912][ T1027] ata1.00: status: { DRDY }
[ 90.860637][ T1027] ata1.00: configured for UDMA/100
[ 90.862596][ T1027] ata1: EH complete
[ 91.921044][ T9] cfg80211: failed to load regulatory.db
[ 91.982110][ T5310] cgroup: Unknown subsys name 'net'
[ 92.050057][ T5310] cgroup: Unknown subsys name 'cpuset'
[ 92.056417][ T5310] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 93.588445][ T5310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x11f000)
[ 95.956552][ T1027] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[ 95.956571][ T1027] ata1: failed to read log page 10h (errno=-5)
[ 95.956592][ T1027] ata1.00: NCQ disabled due to excessive errors
[ 95.956600][ T1027] ata1.00: exception Emask 0x1 SAct 0x40000000 SErr 0x0 action 0x0
[ 95.956623][ T1027] ata1.00: irq_stat 0x41000008
[ 95.956641][ T1027] ata1.00: failed command: WRITE FPDMA QUEUED
[ 95.956649][ T1027] ata1.00: cmd 61/f8:f0:36:1c:05/08:00:00:00:00/40 tag 30 ncq dma 1175552 ou
[ 95.956649][ T1027] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[ 95.956679][ T1027] ata1.00: status: { DRDY }
[ 95.956686][ T1027] ata1.00: error: { ABRT }
[ 95.959320][ T1027] ata1.00: configured for UDMA/100
[ 95.962470][ T1027] ata1: EH complete
[ 99.638778][ T5329] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 101.080444][ T5350] br_netfilter no longer supported in user namespaces
[ 102.009943][ T5364] rxe_eth0 speed is unknown, defaulting to 1000
[ 102.018129][ T5364] rxe_eth0 speed is unknown, defaulting to 1000
[ 102.023328][ T5364] rxe_eth0 speed is unknown, defaulting to 1000
[ 102.373737][ T9] rxe_eth0 speed is unknown, defaulting to 1000
[ 102.379207][ T5364] infiniband rxe0: set active
[ 102.379223][ T5364] infiniband rxe0: added rxe_eth0
[ 102.430646][ T5364] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 102.430673][ T5364] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 102.430693][ T5364] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 102.532920][ T5364] RDS/IB: rxe0: added
[ 102.540577][ T5364] smc: adding ib device rxe0 with port count 1
[ 102.540615][ T5364] smc: ib device rxe0 port 1 has no pnetid
[ 102.541851][ T9] rxe_eth0 speed is unknown, defaulting to 1000
[ 102.627426][ T5364] rxe_eth0 speed is unknown, defaulting to 1000
[ 102.700941][ T9] rxe_eth0 speed is unknown, defaulting to 1000
[ 102.720119][ T9] rxe_eth0 speed is unknown, defaulting to 1000
[ 102.823447][ T1974] rxe_eth0 speed is unknown, defaulting to 1000
[ 103.387777][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.389435][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.389721][ T5364] bridge_slave_0: entered allmulticast mode
[ 103.391629][ T5364] bridge_slave_0: entered promiscuous mode
[ 103.409332][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.409379][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.409559][ T5364] bridge_slave_1: entered allmulticast mode
[ 103.410913][ T5364] bridge_slave_1: entered promiscuous mode
[ 103.478227][ T5364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 103.483455][ T5364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.558053][ T5364] team0: Port device team_slave_0 added
[ 103.563473][ T5364] team0: Port device team_slave_1 added
[ 103.620810][ T5364] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.620824][ T5364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.620916][ T5364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.648653][ T5364] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.648667][ T5364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.648682][ T5364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.755575][ T5364] hsr_slave_0: entered promiscuous mode
[ 103.756273][ T5364] hsr_slave_1: entered promiscuous mode
[ 104.158425][ T5364] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.177946][ T5364] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 104.179428][ T5364] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.194702][ T5364] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 104.196463][ T5364] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.210880][ T5364] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 104.213212][ T5364] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.227643][ T5364] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 104.420196][ T5364] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.468073][ T5364] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.492651][ T58] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.492775][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.512167][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.512210][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.228576][ T5364] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.310488][ T5364] veth0_vlan: entered promiscuous mode
[ 105.328876][ T5364] veth1_vlan: entered promiscuous mode
[ 105.397095][ T5364] veth0_macvtap: entered promiscuous mode
[ 105.410945][ T5364] veth1_macvtap: entered promiscuous mode
[ 105.446576][ T5364] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.463976][ T5364] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.568744][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.568777][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.568796][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.605772][ T1058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.983912][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.014156][ T5413] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 106.022036][ T5413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 106.022572][ T5413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 106.023453][ T5413] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 106.023817][ T5413] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 106.079857][ T5412] rxe_eth0 speed is unknown, defaulting to 1000
[ 106.447660][ T5421] rxe_eth0 speed is unknown, defaulting to 1000
[ 106.810027][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.877401][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.877419][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.938024][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.938041][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.533334][ T5428] rxe_eth0 speed is unknown, defaulting to 1000
[ 107.622036][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.885453][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.302843][ T58] bridge_slave_1: left allmulticast mode
[ 108.305256][ T58] bridge_slave_1: left promiscuous mode
[ 108.305999][ T58] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.314005][ T58] bridge_slave_0: left allmulticast mode
[ 108.314027][ T58] bridge_slave_0: left promiscuous mode
[ 108.314136][ T58] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.826949][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 108.845119][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 108.849883][ T58] bond0 (unregistering): Released all slaves
[ 109.560913][ T58] hsr_slave_0: left promiscuous mode
[ 109.567855][ T58] hsr_slave_1: left promiscuous mode
[ 109.571615][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 109.571655][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 109.583711][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 109.583728][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 109.668436][ T58] veth1_macvtap: left promiscuous mode
[ 109.672140][ T58] veth0_macvtap: left promiscuous mode
[ 109.682748][ T58] veth1_vlan: left promiscuous mode
[ 109.682931][ T58] veth0_vlan: left promiscuous mode
[ 110.750486][ T58] team0 (unregistering): Port device team_slave_1 removed
[ 110.766841][ T58] team0 (unregistering): Port device team_slave_0 removed
[ 110.886234][ T5011] 8021q: adding VLAN 0 to HW filter on device eth2
[ 110.975862][ T5442] rxe_eth0 speed is unknown, defaulting to 1000
[ 111.689110][ T5011] 8021q: adding VLAN 0 to HW filter on device eth3
[ 112.827968][ T5011] 8021q: adding VLAN 0 to HW filter on device eth4
[ 113.207856][ T5463] rxe_eth0 speed is unknown, defaulting to 1000
[ 113.923721][ T5011] 8021q: adding VLAN 0 to HW filter on device eth5
[ 114.819940][ T5479] rxe_eth0 speed is unknown, defaulting to 1000
[ 115.681317][ T5487] rxe_eth0 speed is unknown, defaulting to 1000
[ 116.547996][ T5497] rxe_eth0 speed is unknown, defaulting to 1000
[ 116.801042][ T9] rxe_eth0 speed is unknown, defaulting to 1000
[ 117.327616][ T5510] rxe_eth0 speed is unknown, defaulting to 1000
2026/10/26 06:33:38 executed programs: 0
[ 118.266078][ T4666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 118.269208][ T4666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 118.270485][ T4666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 118.272298][ T4666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 118.273482][ T4666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 118.850381][ T5516] rxe_eth0 speed is unknown, defaulting to 1000
[ 119.221250][ T5516] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.221389][ T5516] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.221474][ T5516] bridge_slave_0: entered allmulticast mode
[ 119.222861][ T5516] bridge_slave_0: entered promiscuous mode
[ 119.243020][ T5516] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.243131][ T5516] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.243230][ T5516] bridge_slave_1: entered allmulticast mode
[ 119.254974][ T5516] bridge_slave_1: entered promiscuous mode
[ 119.285454][ T5516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 119.288030][ T5516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.339545][ T5516] team0: Port device team_slave_0 added
[ 119.344179][ T5516] team0: Port device team_slave_1 added
[ 119.392179][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 119.392194][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.392209][ T5516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 119.393705][ T5516] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 119.393714][ T5516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.393729][ T5516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 119.475983][ T5516] hsr_slave_0: entered promiscuous mode
[ 119.476792][ T5516] hsr_slave_1: entered promiscuous mode
[ 120.181828][ T5516] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 120.193069][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 120.198712][ T5516] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 120.207991][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 120.209816][ T5516] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 120.226725][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 120.228357][ T5516] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 120.241999][ T5516] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 120.317164][ T5413] Bluetooth: hci0: command tx timeout
[ 120.417588][ T5516] 8021q: adding VLAN 0 to HW filter on device bond0
[ 120.450505][ T5516] 8021q: adding VLAN 0 to HW filter on device team0
[ 120.467359][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.467438][ T1061] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 120.488349][ T44] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.488415][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 121.293227][ T5516] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 121.366498][ T5516] veth0_vlan: entered promiscuous mode
[ 121.383962][ T5516] veth1_vlan: entered promiscuous mode
[ 121.447885][ T5516] veth0_macvtap: entered promiscuous mode
[ 121.453449][ T5516] veth1_macvtap: entered promiscuous mode
[ 121.492205][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 121.519880][ T5516] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 121.555369][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.556198][ T1061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.585159][ T1061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.585190][ T1061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.723199][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.723216][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.842012][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.842025][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 122.394636][ T5413] Bluetooth: hci0: command tx timeout
[ 122.535544][ T5581] loop0: detected capacity change from 0 to 32768
[ 122.550705][ T5581] =======================================================
[ 122.550705][ T5581] WARNING: The mand mount option has been deprecated and
[ 122.550705][ T5581] and is ignored by this kernel. Remove the mand
[ 122.550705][ T5581] option from the mount to silence this warning.
[ 122.550705][ T5581] =======================================================
[ 122.842103][ T5581] loop0: detected capacity change from 32768 to 32704
[ 122.858565][ T5581] ------------[ cut here ]------------
[ 122.858584][ T5581] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:2344:2
[ 122.858606][ T5581] index 134217728 is out of range for type 's64[128]' (aka 'long long[128]')
[ 122.858625][ T5581] CPU: 0 UID: 0 PID: 5581 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 122.858634][ T5581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 122.858646][ T5581] Call Trace:
[ 122.858657][ T5581]
[ 122.858671][ T5581] dump_stack_lvl+0xe8/0x150
[ 122.858768][ T5581] ubsan_epilogue+0xa/0x30
[ 122.858777][ T5581] __ubsan_handle_out_of_bounds+0xe8/0xf0
[ 122.858840][ T5581] dbAllocBits+0x9b4/0xa00
[ 122.858860][ T5581] dbAllocDmapLev+0x1b2/0x3b0
[ 122.858870][ T5581] dbAllocCtl+0x145/0x990
[ 122.858879][ T5581] ? rcu_is_watching+0x16/0xb0
[ 122.858930][ T5581] dbAllocAG+0x1f4/0xf80
[ 122.858939][ T5581] ? __kmalloc_noprof+0x387/0x710
[ 122.858951][ T5581] dbDiscardAG+0x2d6/0x8f0
[ 122.858964][ T5581] jfs_ioc_trim+0x436/0x680
[ 122.858978][ T5581] jfs_ioctl+0x28e/0x3b0
[ 122.858987][ T5581] ? __pfx_jfs_ioctl+0x10/0x10
[ 122.858997][ T5581] ? bpf_lsm_file_ioctl+0x9/0x20
[ 122.859007][ T5581] ? __pfx_jfs_ioctl+0x10/0x10
[ 122.859015][ T5581] __se_sys_ioctl+0xfc/0x170
[ 122.859040][ T5581] do_syscall_64+0x166/0x520
[ 122.859087][ T5581] ? trace_irq_disable+0x3b/0x140
[ 122.859101][ T5581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.859109][ T5581] ? clear_bhb_loop+0x70/0xc0
[ 122.859118][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.859125][ T5581] RIP: 0033:0x7fa0ca99f559
[ 122.859134][ T5581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.859141][ T5581] RSP: 002b:00007ffe3ca2b368 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 122.859156][ T5581] RAX: ffffffffffffffda RBX: 00007fa0cac25fa0 RCX: 00007fa0ca99f559
[ 122.859161][ T5581] RDX: 0000200000000080 RSI: 00000000c0185879 RDI: 0000000000000005
[ 122.859166][ T5581] RBP: 00007fa0caa36b20 R08: 0000000000000000 R09: 0000000000000000
[ 122.859171][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 122.859175][ T5581] R13: 00007fa0cac25fac R14: 00007fa0cac25fa0 R15: 00007fa0cac25fa0
[ 122.859188][ T5581]
[ 122.982497][ T5581] ---[ end trace ]---
[ 122.988350][ T5581] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 122.993257][ T5581] CPU: 0 UID: 0 PID: 5581 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 122.997282][ T5581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 123.001662][ T5581] Call Trace:
[ 123.003097][ T5581]
[ 123.004357][ T5581] vpanic+0x56d/0xa60
[ 123.006047][ T5581] ? __pfx_vpanic+0x10/0x10
[ 123.007893][ T5581] panic+0xc5/0xd0
[ 123.009453][ T5581] ? __pfx_panic+0x10/0x10
[ 123.011335][ T5581] ? __pfx__printk+0x10/0x10
[ 123.013290][ T5581] check_panic_on_warn+0x89/0xb0
[ 123.015361][ T5581] __ubsan_handle_out_of_bounds+0xe8/0xf0
[ 123.017642][ T5581] dbAllocBits+0x9b4/0xa00
[ 123.019664][ T5581] dbAllocDmapLev+0x1b2/0x3b0
[ 123.021731][ T5581] dbAllocCtl+0x145/0x990
[ 123.023523][ T5581] ? rcu_is_watching+0x16/0xb0
[ 123.025615][ T5581] dbAllocAG+0x1f4/0xf80
[ 123.027453][ T5581] ? __kmalloc_noprof+0x387/0x710
[ 123.029530][ T5581] dbDiscardAG+0x2d6/0x8f0
[ 123.031447][ T5581] jfs_ioc_trim+0x436/0x680
[ 123.033437][ T5581] jfs_ioctl+0x28e/0x3b0
[ 123.035308][ T5581] ? __pfx_jfs_ioctl+0x10/0x10
[ 123.037354][ T5581] ? bpf_lsm_file_ioctl+0x9/0x20
[ 123.039491][ T5581] ? __pfx_jfs_ioctl+0x10/0x10
[ 123.041578][ T5581] __se_sys_ioctl+0xfc/0x170
[ 123.043535][ T5581] do_syscall_64+0x166/0x520
[ 123.045636][ T5581] ? trace_irq_disable+0x3b/0x140
[ 123.048092][ T5581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.050667][ T5581] ? clear_bhb_loop+0x70/0xc0
[ 123.052528][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.054831][ T5581] RIP: 0033:0x7fa0ca99f559
[ 123.056607][ T5581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 123.064167][ T5581] RSP: 002b:00007ffe3ca2b368 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 123.067555][ T5581] RAX: ffffffffffffffda RBX: 00007fa0cac25fa0 RCX: 00007fa0ca99f559
[ 123.070877][ T5581] RDX: 0000200000000080 RSI: 00000000c0185879 RDI: 0000000000000005
[ 123.074074][ T5581] RBP: 00007fa0caa36b20 R08: 0000000000000000 R09: 0000000000000000
[ 123.077235][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 123.080716][ T5581] R13: 00007fa0cac25fac R14: 00007fa0cac25fa0 R15: 00007fa0cac25fa0
[ 123.084123][ T5581]
[ 123.085897][ T5581] Kernel Offset: disabled
[ 123.087820][ T5581] Rebooting in 86400 seconds..
VM DIAGNOSIS:
06:33:43 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000337900
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8580b350
R12=dffffc0000000000 R13=000000000000006f R14=ffffffff9bfe3280 R15=0000000000000000
RIP=ffffffff8580b3cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808ac2a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000055a67dcb2138 CR3=0000000059484000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40a100ed61d0017b
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a43991d0a43991d 0a43991d0a43991d
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a42af63fa42af63f a42af63fa42af63f
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f98adbe424ff66da 48585c294433f09d
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c3a105fe896663b d7670ea5f9a802fa
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 62d1613bf966cfb4 77cc0191607de592
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 85677f0551809b8f 87642b16a7bc5e30
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d19c31e1be0862bd 19e5e488504c57ad
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fb151cbacd413e02 dab1bbfe6a24d41c
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 43e0cb627bf8777e 94dfcbd696fb626f
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c623adeba8098279 a572aece52b104b1
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 959f194e959f194e 959f194e959f194e
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d4c593d6d4c59 3d6d4c593d6d4c59
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8d6ac5138d6ac513 8d6ac5138d6ac513
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000