Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. 2025/09/17 14:53:39 parsed 1 programs [ 71.790040][ T4189] cgroup: Unknown subsys name 'net' [ 71.916588][ T4189] cgroup: Unknown subsys name 'rlimit' [ 73.653345][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.376629][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.398953][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.409929][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.423507][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.433182][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.442995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.052626][ T4271] chnl_net:caif_netlink_parms(): no params data found [ 78.104710][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.113247][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.122207][ T4271] device bridge_slave_0 entered promiscuous mode [ 78.132392][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.141227][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.150559][ T4271] device bridge_slave_1 entered promiscuous mode [ 78.174198][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.185398][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.213453][ T4271] team0: Port device team_slave_0 added [ 78.222689][ T4271] team0: Port device team_slave_1 added [ 78.246990][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.256742][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.289384][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.306017][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.313977][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.341973][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.398913][ T4271] device hsr_slave_0 entered promiscuous mode [ 78.410465][ T4271] device hsr_slave_1 entered promiscuous mode [ 78.568043][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.580425][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.593751][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.629355][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.656490][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.667245][ T4271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.679065][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.691246][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.759373][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.809985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.821951][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.835250][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.851013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 78.866993][ T4271] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.906799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.919257][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.926677][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.942456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.956011][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.966064][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.003051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.016282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.026479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.035793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.050228][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.061757][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.092075][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.102539][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.115352][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.124470][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.135459][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.260382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.269717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.297221][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.316687][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.327567][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.379794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.391163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.405981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.416325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.429633][ T4271] device veth0_vlan entered promiscuous mode [ 79.446589][ T4271] device veth1_vlan entered promiscuous mode [ 79.474677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.490196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.500310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.512376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.525168][ T4271] device veth0_macvtap entered promiscuous mode [ 79.539073][ T4271] device veth1_macvtap entered promiscuous mode [ 79.561959][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.571549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.580404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.591277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.602133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.617450][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.631647][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.644125][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.655563][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.667189][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.680001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.690459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.810171][ T4271] syz-executor (4271) used greatest stack depth: 21088 bytes left 2025/09/17 14:53:50 executed programs: 0 [ 80.843804][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 80.915463][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.923436][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.937061][ T4301] device bridge_slave_0 entered promiscuous mode [ 80.951436][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.962408][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.973653][ T4301] device bridge_slave_1 entered promiscuous mode [ 81.002161][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.020028][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.056623][ T4301] team0: Port device team_slave_0 added [ 81.066999][ T4301] team0: Port device team_slave_1 added [ 81.099707][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.107134][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.137599][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.151305][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.159181][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.188128][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.223440][ T4301] device hsr_slave_0 entered promiscuous mode [ 81.232274][ T4301] device hsr_slave_1 entered promiscuous mode [ 81.240392][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.250448][ T4301] Cannot create hsr debugfs directory [ 81.340094][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.680044][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 83.705707][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.164479][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.246724][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.758882][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 85.076786][ T4301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.088109][ T4301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.097599][ T4301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.108450][ T4301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.196605][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.223740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.232750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.245237][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.255928][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.264962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.275815][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.284061][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.292723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.319014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.331939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.342415][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.353207][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.373341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.391654][ T155] device hsr_slave_0 left promiscuous mode [ 85.400555][ T155] device hsr_slave_1 left promiscuous mode [ 85.409223][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.417825][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.428175][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.436970][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.445956][ T155] device bridge_slave_1 left promiscuous mode [ 85.454674][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.472582][ T155] device bridge_slave_0 left promiscuous mode [ 85.480709][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.502101][ T155] device veth1_macvtap left promiscuous mode [ 85.511089][ T155] device veth0_macvtap left promiscuous mode [ 85.517611][ T155] device veth1_vlan left promiscuous mode [ 85.526617][ T155] device veth0_vlan left promiscuous mode [ 85.705788][ T155] team0 (unregistering): Port device team_slave_1 removed [ 85.725415][ T155] team0 (unregistering): Port device team_slave_0 removed [ 85.739869][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.757272][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.815855][ T155] bond0 (unregistering): Released all slaves [ 85.887644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.904231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.914442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.924348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.939438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.949717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.965833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.977150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.987286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.997836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.009982][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.125241][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.134951][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.156235][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.180320][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.190013][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.218183][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.227597][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.236532][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.245267][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.256986][ T4301] device veth0_vlan entered promiscuous mode [ 86.270025][ T4301] device veth1_vlan entered promiscuous mode [ 86.292560][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.303579][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.317243][ T4301] device veth0_macvtap entered promiscuous mode [ 86.331282][ T4301] device veth1_macvtap entered promiscuous mode [ 86.351368][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.362217][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.372531][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.382733][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.395099][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.409909][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.419774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.431891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.451683][ T4301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.464935][ T4301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.474980][ T4301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.485762][ T4301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.560927][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.576342][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.600494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/09/17 14:53:56 executed programs: 2 [ 86.613805][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.624155][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.641152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.838776][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 86.851290][ T1111] cfg80211: failed to load regulatory.db [ 86.974033][ T4353] loop0: detected capacity change from 0 to 32768 [ 87.020192][ T4353] ======================================================= [ 87.020192][ T4353] WARNING: The mand mount option has been deprecated and [ 87.020192][ T4353] and is ignored by this kernel. Remove the mand [ 87.020192][ T4353] option from the mount to silence this warning. [ 87.020192][ T4353] ======================================================= [ 87.159763][ T4353] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 87.175531][ T4353] (syz.0.17,4353,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 87.223052][ T4301] ocfs2: Unmounting device (7,0) on (node local) [ 87.611051][ T4356] loop0: detected capacity change from 0 to 32768 [ 87.671817][ T4356] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 87.694340][ T4356] (syz.0.18,4356,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=64032, inode=4702111234474983745, rec_len=16705, name_len=65 [ 87.768645][ T4301] ocfs2: Unmounting device (7,0) on (node local) [ 88.247354][ T4359] loop0: detected capacity change from 0 to 32768 [ 88.332097][ T4359] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 88.347608][ T4359] (syz.0.19,4359,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 88.377524][ T4301] ocfs2: Unmounting device (7,0) on (node local) [ 88.635678][ T4362] loop0: detected capacity change from 0 to 32768 [ 88.760444][ T4362] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 88.772973][ T4362] (syz.0.20,4362,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 88.800877][ T4301] ocfs2: Unmounting device (7,0) on (node local) [ 88.919773][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 89.046513][ T4365] loop0: detected capacity change from 0 to 32768 [ 89.115093][ T4365] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 89.128716][ T4365] (syz.0.21,4365,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 89.160424][ T4301] ocfs2: Unmounting device (7,0) on (node local) [ 89.394773][ T4368] loop0: detected capacity change from 0 to 32768 [ 89.479044][ T4368] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 89.493928][ T4368] (syz.0.22,4368,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=64032, inode=8174439530702664049, rec_len=29041, name_len=113 [ 89.524415][ T4301] ocfs2: Unmounting device (7,0) on (node local) [ 89.758260][ T4371] loop0: detected capacity change from 0 to 32768 [ 89.815529][ T4371] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 89.830872][ T4371] (syz.0.23,4371,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 89.857897][ T4301] ocfs2: Unmounting device (7,0) on (node local) [ 90.154768][ T4374] loop0: detected capacity change from 0 to 32768 [ 90.243092][ T4374] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 90.254366][ T4374] (syz.0.24,4374,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 90.278749][ T4301] ocfs2: Unmounting device (7,0) on (node local) [ 90.512709][ T4377] loop0: detected capacity change from 0 to 32768 [ 90.560598][ T4377] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 90.573153][ T4377] ================================================================== [ 90.582126][ T4377] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x1566/0x1900 [ 90.590522][ T4377] Read of size 2 at addr ffff88805b839cf0 by task syz.0.25/4377 [ 90.598194][ T4377] [ 90.601321][ T4377] CPU: 0 PID: 4377 Comm: syz.0.25 Not tainted syzkaller #0 [ 90.608915][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 90.619487][ T4377] Call Trace: [ 90.622976][ T4377] [ 90.626122][ T4377] dump_stack_lvl+0x168/0x230 [ 90.631183][ T4377] ? show_regs_print_info+0x20/0x20 [ 90.636585][ T4377] ? load_image+0x3b0/0x3b0 [ 90.641333][ T4377] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 90.646826][ T4377] ? __lock_acquire+0x13ad/0x7c60 [ 90.651876][ T4377] print_address_description+0x60/0x2d0 [ 90.657634][ T4377] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 90.663288][ T4377] kasan_report+0xdf/0x130 [ 90.667834][ T4377] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 90.673712][ T4377] ocfs2_dir_foreach_blk+0x1566/0x1900 [ 90.679610][ T4377] ? _raw_spin_unlock+0x24/0x40 [ 90.684475][ T4377] ? ocfs2_dir_foreach+0xf0/0xf0 [ 90.689916][ T4377] ? ocfs2_inode_lock_atime+0x22f/0x4e0 [ 90.695803][ T4377] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0 [ 90.701730][ T4377] ocfs2_readdir+0x21a/0x460 [ 90.706534][ T4377] ? clear_nonspinnable+0x60/0x60 [ 90.711771][ T4377] ? ocfs2_dir_foreach_blk+0x1900/0x1900 [ 90.717871][ T4377] ? common_file_perm+0x171/0x1c0 [ 90.723576][ T4377] iterate_dir+0x218/0x560 [ 90.728291][ T4377] __se_sys_getdents+0xe5/0x250 [ 90.733187][ T4377] ? __x64_sys_getdents+0x80/0x80 [ 90.738317][ T4377] ? fillonedir+0x4c0/0x4c0 [ 90.742979][ T4377] ? vtime_user_exit+0x2dc/0x400 [ 90.748063][ T4377] ? lockdep_hardirqs_on+0x94/0x140 [ 90.753481][ T4377] do_syscall_64+0x4c/0xa0 [ 90.758264][ T4377] ? clear_bhb_loop+0x30/0x80 [ 90.763124][ T4377] ? clear_bhb_loop+0x30/0x80 [ 90.768016][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.773963][ T4377] RIP: 0033:0x7f3987f6dba9 [ 90.778506][ T4377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.798493][ T4377] RSP: 002b:00007ffd93ce7a78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 90.807270][ T4377] RAX: ffffffffffffffda RBX: 00007f39881b4fa0 RCX: 00007f3987f6dba9 [ 90.815351][ T4377] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 90.823712][ T4377] RBP: 00007f3987ff0e19 R08: 0000000000000000 R09: 0000000000000000 [ 90.833169][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.841264][ T4377] R13: 00007f39881b4fa0 R14: 00007f39881b4fa0 R15: 0000000000000003 [ 90.850009][ T4377] [ 90.853363][ T4377] [ 90.855786][ T4377] The buggy address belongs to the page: [ 90.861526][ T4377] page:ffffea00016e0e40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5b839 [ 90.872937][ T4377] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 90.880692][ T4377] raw: 00fff00000000000 ffffea00016e0e88 ffffea00016e0688 0000000000000000 [ 90.890058][ T4377] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 90.899320][ T4377] page dumped because: kasan: bad access detected [ 90.906323][ T4377] page_owner tracks the page as freed [ 90.912472][ T4377] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4374, ts 90152769677, free_ts 90470709678 [ 90.928158][ T4377] get_page_from_freelist+0x1b77/0x1c60 [ 90.933948][ T4377] __alloc_pages+0x1e1/0x470 [ 90.939185][ T4377] alloc_pages_vma+0x393/0x7c0 [ 90.944784][ T4377] shmem_alloc_and_acct_page+0x427/0xb70 [ 90.950540][ T4377] shmem_getpage_gfp+0x14f4/0x2d40 [ 90.955879][ T4377] shmem_write_begin+0xcd/0x1a0 [ 90.961175][ T4377] generic_perform_write+0x2aa/0x530 [ 90.966983][ T4377] __generic_file_write_iter+0x25f/0x4e0 [ 90.972759][ T4377] generic_file_write_iter+0xa6/0x1b0 [ 90.978146][ T4377] vfs_write+0x712/0xd00 [ 90.982934][ T4377] ksys_write+0x14d/0x250 [ 90.987485][ T4377] do_syscall_64+0x4c/0xa0 [ 90.993155][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.999685][ T4377] page last free stack trace: [ 91.004620][ T4377] free_unref_page_prepare+0x637/0x6c0 [ 91.010631][ T4377] free_unref_page_list+0x122/0x7e0 [ 91.016450][ T4377] release_pages+0x184b/0x1bb0 [ 91.021515][ T4377] __pagevec_release+0x6d/0xe0 [ 91.026489][ T4377] shmem_undo_range+0x5cb/0x1880 [ 91.032958][ T4377] shmem_evict_inode+0x20d/0xa00 [ 91.038440][ T4377] evict+0x485/0x870 [ 91.042757][ T4377] __dentry_kill+0x431/0x650 [ 91.047526][ T4377] dentry_kill+0xb8/0x290 [ 91.052844][ T4377] dput+0xd8/0x1a0 [ 91.058065][ T4377] __fput+0x5ee/0x930 [ 91.062864][ T4377] task_work_run+0x125/0x1a0 [ 91.068112][ T4377] exit_to_user_mode_loop+0x10f/0x130 [ 91.074375][ T4377] exit_to_user_mode_prepare+0xee/0x180 [ 91.080505][ T4377] syscall_exit_to_user_mode+0x16/0x40 [ 91.087331][ T4377] do_syscall_64+0x58/0xa0 [ 91.092650][ T4377] [ 91.095257][ T4377] Memory state around the buggy address: [ 91.102437][ T4377] ffff88805b839b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.110907][ T4377] ffff88805b839c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.120993][ T4377] >ffff88805b839c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.129480][ T4377] ^ [ 91.140712][ T4377] ffff88805b839d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.150372][ T4377] ffff88805b839d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.158719][ T4377] ================================================================== [ 91.167137][ T4377] Disabling lock debugging due to kernel taint [ 91.178462][ T4377] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.185913][ T4377] CPU: 0 PID: 4377 Comm: syz.0.25 Tainted: G B syzkaller #0 [ 91.195008][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.205950][ T4377] Call Trace: [ 91.209365][ T4377] [ 91.212417][ T4377] dump_stack_lvl+0x168/0x230 [ 91.217312][ T4377] ? show_regs_print_info+0x20/0x20 [ 91.222777][ T4377] ? load_image+0x3b0/0x3b0 [ 91.227406][ T4377] panic+0x2c9/0x7f0 [ 91.231558][ T4377] ? bpf_jit_dump+0xd0/0xd0 [ 91.236248][ T4377] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 91.242331][ T4377] ? _raw_spin_unlock+0x40/0x40 [ 91.247344][ T4377] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 91.253260][ T4377] check_panic_on_warn+0x80/0xa0 [ 91.258300][ T4377] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 91.265058][ T4377] end_report+0x6d/0xf0 [ 91.269859][ T4377] kasan_report+0x102/0x130 [ 91.274762][ T4377] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 91.281253][ T4377] ocfs2_dir_foreach_blk+0x1566/0x1900 [ 91.286845][ T4377] ? _raw_spin_unlock+0x24/0x40 [ 91.292066][ T4377] ? ocfs2_dir_foreach+0xf0/0xf0 [ 91.297190][ T4377] ? ocfs2_inode_lock_atime+0x22f/0x4e0 [ 91.302847][ T4377] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0 [ 91.308763][ T4377] ocfs2_readdir+0x21a/0x460 [ 91.313448][ T4377] ? clear_nonspinnable+0x60/0x60 [ 91.318570][ T4377] ? ocfs2_dir_foreach_blk+0x1900/0x1900 [ 91.324574][ T4377] ? common_file_perm+0x171/0x1c0 [ 91.329703][ T4377] iterate_dir+0x218/0x560 [ 91.334491][ T4377] __se_sys_getdents+0xe5/0x250 [ 91.340152][ T4377] ? __x64_sys_getdents+0x80/0x80 [ 91.345596][ T4377] ? fillonedir+0x4c0/0x4c0 [ 91.350288][ T4377] ? vtime_user_exit+0x2dc/0x400 [ 91.356035][ T4377] ? lockdep_hardirqs_on+0x94/0x140 [ 91.361596][ T4377] do_syscall_64+0x4c/0xa0 [ 91.366027][ T4377] ? clear_bhb_loop+0x30/0x80 [ 91.370898][ T4377] ? clear_bhb_loop+0x30/0x80 [ 91.375663][ T4377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.381578][ T4377] RIP: 0033:0x7f3987f6dba9 [ 91.386117][ T4377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.406849][ T4377] RSP: 002b:00007ffd93ce7a78 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 91.415795][ T4377] RAX: ffffffffffffffda RBX: 00007f39881b4fa0 RCX: 00007f3987f6dba9 [ 91.424918][ T4377] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 91.433412][ T4377] RBP: 00007f3987ff0e19 R08: 0000000000000000 R09: 0000000000000000 [ 91.441631][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.450056][ T4377] R13: 00007f39881b4fa0 R14: 00007f39881b4fa0 R15: 0000000000000003 [ 91.458417][ T4377] [ 91.461752][ T4377] Kernel Offset: disabled [ 91.466228][ T4377] Rebooting in 86400 seconds..