Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. 2025/09/17 17:45:04 parsed 1 programs [ 70.646379][ T4190] cgroup: Unknown subsys name 'net' [ 70.820136][ T4190] cgroup: Unknown subsys name 'rlimit' [ 71.636554][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.646241][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.453192][ T4190] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.470380][ T4226] chnl_net:caif_netlink_parms(): no params data found [ 75.540984][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.550224][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.559200][ T4226] device bridge_slave_0 entered promiscuous mode [ 75.571216][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.579410][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.589421][ T4226] device bridge_slave_1 entered promiscuous mode [ 75.624995][ T4226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.637899][ T4226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.673202][ T4226] team0: Port device team_slave_0 added [ 75.681336][ T4226] team0: Port device team_slave_1 added [ 75.711298][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.718607][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.746428][ T4226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.760212][ T4226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.768575][ T4226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.796030][ T4226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.847475][ T4226] device hsr_slave_0 entered promiscuous mode [ 75.855202][ T4226] device hsr_slave_1 entered promiscuous mode [ 76.002086][ T4226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.013641][ T4226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.026381][ T4226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.038830][ T4226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.069449][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.077145][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.086809][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.094423][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.180535][ T4226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.219889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.248545][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.269734][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.286192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 76.316670][ T4226] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.330923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.339849][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.348032][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.364022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.374296][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.381922][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.395827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.408043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.422013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.432852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.444276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.453937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.462845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.476734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.486844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.499328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.509114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.520223][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.636829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.645979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.681015][ T4226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.701597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.711621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.733733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.742650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.768788][ T4226] device veth0_vlan entered promiscuous mode [ 76.776956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.785059][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.797818][ T4226] device veth1_vlan entered promiscuous mode [ 76.834464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.843811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.853293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.862020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.875395][ T4226] device veth0_macvtap entered promiscuous mode [ 76.899237][ T4226] device veth1_macvtap entered promiscuous mode [ 76.919222][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.927364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.936918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.946900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.957162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.970135][ T4226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.979237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.988649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.018831][ T4226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.029532][ T4226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.039524][ T4226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.048843][ T4226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.167592][ T4226] syz-executor (4226) used greatest stack depth: 20776 bytes left [ 78.286294][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.301926][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.312648][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.330464][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.340218][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.355374][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/09/17 17:45:15 executed programs: 0 [ 78.956611][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.149128][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 79.200168][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.208141][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.216801][ T4295] device bridge_slave_0 entered promiscuous mode [ 79.225904][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.234372][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.243345][ T4295] device bridge_slave_1 entered promiscuous mode [ 79.268675][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.280690][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.306452][ T4295] team0: Port device team_slave_0 added [ 79.314931][ T4295] team0: Port device team_slave_1 added [ 79.338658][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.346462][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.379917][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.394591][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.402709][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.431098][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.466190][ T4295] device hsr_slave_0 entered promiscuous mode [ 79.473933][ T4295] device hsr_slave_1 entered promiscuous mode [ 79.480864][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.489679][ T4295] Cannot create hsr debugfs directory [ 81.072476][ T4249] Bluetooth: hci0: command 0x0409 tx timeout [ 82.151324][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.229685][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.281281][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.151987][ T4248] Bluetooth: hci0: command 0x041b tx timeout [ 83.213130][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.223213][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.234631][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.246114][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.311237][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.341651][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.350082][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.363747][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.400932][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.411220][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.420341][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.429606][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.439180][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.451575][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.461895][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.471098][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.478665][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.491470][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.529558][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.544222][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.554513][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.565486][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.576257][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.588506][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.617559][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.627508][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.642352][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.653123][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.664976][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.812674][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.820427][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.836180][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.867288][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.876879][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.903416][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.917665][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.927471][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.937505][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.953522][ T9] device hsr_slave_0 left promiscuous mode [ 83.960316][ T9] device hsr_slave_1 left promiscuous mode [ 83.968595][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.976645][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.985522][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.993136][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.001241][ T9] device bridge_slave_1 left promiscuous mode [ 84.008783][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.023747][ T9] device bridge_slave_0 left promiscuous mode [ 84.030227][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.049985][ T9] device veth1_macvtap left promiscuous mode [ 84.056908][ T9] device veth0_macvtap left promiscuous mode [ 84.063349][ T9] device veth1_vlan left promiscuous mode [ 84.069638][ T9] device veth0_vlan left promiscuous mode [ 84.245928][ T9] team0 (unregistering): Port device team_slave_1 removed [ 84.259597][ T9] team0 (unregistering): Port device team_slave_0 removed [ 84.276643][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.290297][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.358107][ T9] bond0 (unregistering): Released all slaves [ 84.447889][ T4295] device veth0_vlan entered promiscuous mode [ 84.463975][ T4295] device veth1_vlan entered promiscuous mode [ 84.485897][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.495553][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.509065][ T4295] device veth0_macvtap entered promiscuous mode [ 84.520612][ T4295] device veth1_macvtap entered promiscuous mode [ 84.545858][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.553648][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.563499][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.572586][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.581384][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.597462][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.605244][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.615345][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.627551][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.637253][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.646371][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.655955][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.721522][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.757611][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/17 17:45:21 executed programs: 2 [ 84.773225][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.773820][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.781599][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.798509][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.099872][ T4359] loop0: detected capacity change from 0 to 32768 [ 85.120370][ T4359] ======================================================= [ 85.120370][ T4359] WARNING: The mand mount option has been deprecated and [ 85.120370][ T4359] and is ignored by this kernel. Remove the mand [ 85.120370][ T4359] option from the mount to silence this warning. [ 85.120370][ T4359] ======================================================= [ 85.214281][ T4359] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 85.241914][ T4249] Bluetooth: hci0: command 0x040f tx timeout [ 85.255639][ T4359] (syz.0.17,4359,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 85.302508][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 85.683763][ T4362] loop0: detected capacity change from 0 to 32768 [ 85.727464][ T4362] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 85.753530][ T4362] (syz.0.18,4362,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 85.803582][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 86.250173][ T4365] loop0: detected capacity change from 0 to 32768 [ 86.338982][ T4365] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 86.365948][ T4365] (syz.0.19,4365,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 86.391154][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 86.661407][ T4368] loop0: detected capacity change from 0 to 32768 [ 86.726605][ T4368] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 86.743331][ T4368] (syz.0.20,4368,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 86.770939][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 86.994821][ T1107] cfg80211: failed to load regulatory.db [ 87.037379][ T4371] loop0: detected capacity change from 0 to 32768 [ 87.141584][ T4371] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 87.183403][ T4371] (syz.0.21,4371,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=64032, inode=8174439530702664049, rec_len=29041, name_len=113 [ 87.276569][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 87.357788][ T4250] Bluetooth: hci0: command 0x0419 tx timeout [ 87.801668][ T4374] loop0: detected capacity change from 0 to 32768 [ 87.875995][ T4374] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 87.911459][ T4374] (syz.0.22,4374,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 88.005700][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 88.462072][ T4377] loop0: detected capacity change from 0 to 32768 [ 88.517456][ T4377] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 88.529332][ T4377] (syz.0.23,4377,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 88.555928][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 88.793316][ T4380] loop0: detected capacity change from 0 to 32768 [ 88.853728][ T4380] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 88.868243][ T4380] (syz.0.24,4380,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 88.894010][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 89.244293][ T4383] loop0: detected capacity change from 0 to 32768 [ 89.278566][ T4383] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 89.294252][ T4383] (syz.0.25,4383,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=64032, inode=94380779693936, rec_len=8976, name_len=217 [ 89.320554][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 89.683927][ T4386] loop0: detected capacity change from 0 to 32768 [ 89.739163][ T4386] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 89.752239][ T4386] (syz.0.26,4386,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 89.777109][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 89.997577][ T4389] loop0: detected capacity change from 0 to 32768 [ 90.069022][ T4389] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 90.081269][ T4389] (syz.0.27,4389,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=64032, inode=4702111234474983745, rec_len=16705, name_len=65 [ 90.106534][ T4295] ocfs2: Unmounting device (7,0) on (node local) 2025/09/17 17:45:26 executed programs: 13 [ 90.336677][ T4392] loop0: detected capacity change from 0 to 32768 [ 90.455090][ T4392] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 90.466992][ T4392] (syz.0.28,4392,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 90.492326][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 90.713431][ T4395] loop0: detected capacity change from 0 to 32768 [ 90.776832][ T4395] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 90.789324][ T4395] (syz.0.29,4395,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 90.814102][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 91.038832][ T4398] loop0: detected capacity change from 0 to 32768 [ 91.100645][ T4398] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 91.111683][ T4398] (syz.0.30,4398,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 91.135664][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 91.356330][ T4401] loop0: detected capacity change from 0 to 32768 [ 91.420368][ T4401] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 91.432785][ T4401] (syz.0.31,4401,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 91.456044][ T4295] ocfs2: Unmounting device (7,0) on (node local) [ 91.674950][ T4404] loop0: detected capacity change from 0 to 32768 [ 91.731918][ T4404] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 91.743387][ T4404] ================================================================== [ 91.752006][ T4404] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x1566/0x1900 [ 91.760401][ T4404] Read of size 2 at addr ffff88805a5adcf0 by task syz.0.32/4404 [ 91.768066][ T4404] [ 91.770452][ T4404] CPU: 0 PID: 4404 Comm: syz.0.32 Not tainted syzkaller #0 [ 91.777723][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.787841][ T4404] Call Trace: [ 91.791261][ T4404] [ 91.794251][ T4404] dump_stack_lvl+0x168/0x230 [ 91.799023][ T4404] ? show_regs_print_info+0x20/0x20 [ 91.804376][ T4404] ? load_image+0x3b0/0x3b0 [ 91.809093][ T4404] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 91.814519][ T4404] ? __lock_acquire+0x13ad/0x7c60 [ 91.819636][ T4404] print_address_description+0x60/0x2d0 [ 91.825237][ T4404] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 91.830916][ T4404] kasan_report+0xdf/0x130 [ 91.835347][ T4404] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 91.841003][ T4404] ocfs2_dir_foreach_blk+0x1566/0x1900 [ 91.846487][ T4404] ? _raw_spin_unlock+0x24/0x40 [ 91.851555][ T4404] ? ocfs2_dir_foreach+0xf0/0xf0 [ 91.856543][ T4404] ? ocfs2_inode_lock_atime+0x22f/0x4e0 [ 91.862102][ T4404] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0 [ 91.868014][ T4404] ocfs2_readdir+0x21a/0x460 [ 91.872632][ T4404] ? clear_nonspinnable+0x60/0x60 [ 91.877676][ T4404] ? ocfs2_dir_foreach_blk+0x1900/0x1900 [ 91.883314][ T4404] ? common_file_perm+0x171/0x1c0 [ 91.888457][ T4404] iterate_dir+0x218/0x560 [ 91.892993][ T4404] __se_sys_getdents+0xe5/0x250 [ 91.897853][ T4404] ? __x64_sys_getdents+0x80/0x80 [ 91.902896][ T4404] ? fillonedir+0x4c0/0x4c0 [ 91.907421][ T4404] ? vtime_user_exit+0x2dc/0x400 [ 91.912397][ T4404] ? lockdep_hardirqs_on+0x94/0x140 [ 91.917972][ T4404] do_syscall_64+0x4c/0xa0 [ 91.922476][ T4404] ? clear_bhb_loop+0x30/0x80 [ 91.927170][ T4404] ? clear_bhb_loop+0x30/0x80 [ 91.932040][ T4404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.938139][ T4404] RIP: 0033:0x7f28d65efba9 [ 91.942712][ T4404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.962689][ T4404] RSP: 002b:00007ffcf0c74cf8 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 91.971426][ T4404] RAX: ffffffffffffffda RBX: 00007f28d6836fa0 RCX: 00007f28d65efba9 [ 91.979439][ T4404] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 91.987627][ T4404] RBP: 00007f28d6672e19 R08: 0000000000000000 R09: 0000000000000000 [ 91.995729][ T4404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.004157][ T4404] R13: 00007f28d6836fa0 R14: 00007f28d6836fa0 R15: 0000000000000003 [ 92.012682][ T4404] [ 92.016227][ T4404] [ 92.018732][ T4404] The buggy address belongs to the page: [ 92.024563][ T4404] page:ffffea0001696b40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5a5ad [ 92.035421][ T4404] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 92.042555][ T4404] raw: 00fff00000000000 ffffea0001696b88 ffffea0001696b08 0000000000000000 [ 92.051458][ T4404] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 92.060306][ T4404] page dumped because: kasan: bad access detected [ 92.067119][ T4404] page_owner tracks the page as freed [ 92.072502][ T4404] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4389, ts 89870589030, free_ts 90195377784 [ 92.087538][ T4404] get_page_from_freelist+0x1b77/0x1c60 [ 92.093104][ T4404] __alloc_pages+0x1e1/0x470 [ 92.097735][ T4404] alloc_pages_vma+0x393/0x7c0 [ 92.102526][ T4404] shmem_alloc_and_acct_page+0x427/0xb70 [ 92.108209][ T4404] shmem_getpage_gfp+0x14f4/0x2d40 [ 92.113369][ T4404] shmem_write_begin+0xcd/0x1a0 [ 92.118320][ T4404] generic_perform_write+0x2aa/0x530 [ 92.123703][ T4404] __generic_file_write_iter+0x25f/0x4e0 [ 92.129490][ T4404] generic_file_write_iter+0xa6/0x1b0 [ 92.135009][ T4404] vfs_write+0x712/0xd00 [ 92.139365][ T4404] ksys_write+0x14d/0x250 [ 92.143719][ T4404] do_syscall_64+0x4c/0xa0 [ 92.148139][ T4404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.154260][ T4404] page last free stack trace: [ 92.158937][ T4404] free_unref_page_prepare+0x637/0x6c0 [ 92.164714][ T4404] free_unref_page_list+0x122/0x7e0 [ 92.170462][ T4404] release_pages+0x184b/0x1bb0 [ 92.175522][ T4404] __pagevec_release+0x6d/0xe0 [ 92.180384][ T4404] shmem_undo_range+0x5cb/0x1880 [ 92.185341][ T4404] shmem_evict_inode+0x20d/0xa00 [ 92.190286][ T4404] evict+0x485/0x870 [ 92.194193][ T4404] __dentry_kill+0x431/0x650 [ 92.198940][ T4404] dentry_kill+0xb8/0x290 [ 92.203310][ T4404] dput+0xd8/0x1a0 [ 92.207062][ T4404] __fput+0x5ee/0x930 [ 92.211059][ T4404] task_work_run+0x125/0x1a0 [ 92.215681][ T4404] exit_to_user_mode_loop+0x10f/0x130 [ 92.221199][ T4404] exit_to_user_mode_prepare+0xee/0x180 [ 92.226799][ T4404] syscall_exit_to_user_mode+0x16/0x40 [ 92.232552][ T4404] do_syscall_64+0x58/0xa0 [ 92.236978][ T4404] [ 92.239408][ T4404] Memory state around the buggy address: [ 92.245129][ T4404] ffff88805a5adb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 92.253330][ T4404] ffff88805a5adc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 92.261703][ T4404] >ffff88805a5adc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 92.270791][ T4404] ^ [ 92.278928][ T4404] ffff88805a5add00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 92.287109][ T4404] ffff88805a5add80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 92.295261][ T4404] ================================================================== [ 92.303339][ T4404] Disabling lock debugging due to kernel taint [ 92.313570][ T4404] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 92.321006][ T4404] CPU: 0 PID: 4404 Comm: syz.0.32 Tainted: G B syzkaller #0 [ 92.329902][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 92.340081][ T4404] Call Trace: [ 92.343633][ T4404] [ 92.346687][ T4404] dump_stack_lvl+0x168/0x230 [ 92.351480][ T4404] ? show_regs_print_info+0x20/0x20 [ 92.356697][ T4404] ? load_image+0x3b0/0x3b0 [ 92.361485][ T4404] panic+0x2c9/0x7f0 [ 92.365484][ T4404] ? bpf_jit_dump+0xd0/0xd0 [ 92.370322][ T4404] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 92.376341][ T4404] ? _raw_spin_unlock+0x40/0x40 [ 92.381217][ T4404] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 92.387124][ T4404] check_panic_on_warn+0x80/0xa0 [ 92.392107][ T4404] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 92.397897][ T4404] end_report+0x6d/0xf0 [ 92.402363][ T4404] kasan_report+0x102/0x130 [ 92.406882][ T4404] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 92.412613][ T4404] ocfs2_dir_foreach_blk+0x1566/0x1900 [ 92.418328][ T4404] ? _raw_spin_unlock+0x24/0x40 [ 92.423200][ T4404] ? ocfs2_dir_foreach+0xf0/0xf0 [ 92.428338][ T4404] ? ocfs2_inode_lock_atime+0x22f/0x4e0 [ 92.434120][ T4404] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0 [ 92.440123][ T4404] ocfs2_readdir+0x21a/0x460 [ 92.444829][ T4404] ? clear_nonspinnable+0x60/0x60 [ 92.450253][ T4404] ? ocfs2_dir_foreach_blk+0x1900/0x1900 [ 92.455906][ T4404] ? common_file_perm+0x171/0x1c0 [ 92.460955][ T4404] iterate_dir+0x218/0x560 [ 92.465391][ T4404] __se_sys_getdents+0xe5/0x250 [ 92.470252][ T4404] ? __x64_sys_getdents+0x80/0x80 [ 92.475289][ T4404] ? fillonedir+0x4c0/0x4c0 [ 92.479800][ T4404] ? vtime_user_exit+0x2dc/0x400 [ 92.484753][ T4404] ? lockdep_hardirqs_on+0x94/0x140 [ 92.490299][ T4404] do_syscall_64+0x4c/0xa0 [ 92.494726][ T4404] ? clear_bhb_loop+0x30/0x80 [ 92.499406][ T4404] ? clear_bhb_loop+0x30/0x80 [ 92.504136][ T4404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.510136][ T4404] RIP: 0033:0x7f28d65efba9 [ 92.514849][ T4404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.534848][ T4404] RSP: 002b:00007ffcf0c74cf8 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 92.543282][ T4404] RAX: ffffffffffffffda RBX: 00007f28d6836fa0 RCX: 00007f28d65efba9 [ 92.551491][ T4404] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 92.559571][ T4404] RBP: 00007f28d6672e19 R08: 0000000000000000 R09: 0000000000000000 [ 92.567705][ T4404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.575852][ T4404] R13: 00007f28d6836fa0 R14: 00007f28d6836fa0 R15: 0000000000000003 [ 92.583846][ T4404] [ 92.587741][ T4404] Kernel Offset: disabled [ 92.592396][ T4404] Rebooting in 86400 seconds..