Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 40.087242][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.089295][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.091892][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.107764][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.109813][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.112343][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program [ 40.286391][ T4295] loop0: detected capacity change from 0 to 32768 [ 40.309561][ T4295] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 40.315895][ T4295] ================================================================== [ 40.318262][ T4295] BUG: KASAN: use-after-free in ocfs2_claim_suballoc_bits+0x88c/0x1bfc [ 40.320380][ T4295] Read of size 4 at addr ffff0000e4437000 by task syz-executor261/4295 [ 40.322444][ T4295] [ 40.323011][ T4295] CPU: 0 PID: 4295 Comm: syz-executor261 Not tainted 6.1.140-syzkaller #0 [ 40.325191][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.327768][ T4295] Call trace: [ 40.328598][ T4295] dump_backtrace+0x1c8/0x1f4 [ 40.329801][ T4295] show_stack+0x2c/0x3c [ 40.330868][ T4295] __dump_stack+0x30/0x40 [ 40.331988][ T4295] dump_stack_lvl+0xf8/0x160 [ 40.333172][ T4295] print_address_description+0x88/0x220 [ 40.334592][ T4295] print_report+0x50/0x68 [ 40.335703][ T4295] kasan_report+0xa8/0x100 [ 40.336843][ T4295] __asan_report_load4_noabort+0x2c/0x38 [ 40.338292][ T4295] ocfs2_claim_suballoc_bits+0x88c/0x1bfc [ 40.339765][ T4295] ocfs2_claim_new_inode+0x2e8/0x700 [ 40.341234][ T4295] ocfs2_mknod_locked+0xfc/0x228 [ 40.342717][ T4295] ocfs2_mknod+0xe64/0x1f18 [ 40.343911][ T4295] ocfs2_mkdir+0x19c/0x4f0 [ 40.345138][ T4295] vfs_mkdir+0x314/0x4d4 [ 40.346255][ T4295] do_mkdirat+0x1b4/0x3e0 [ 40.347375][ T4295] __arm64_sys_mkdirat+0x90/0xa8 [ 40.348658][ T4295] invoke_syscall+0x98/0x2bc [ 40.349856][ T4295] el0_svc_common+0x138/0x258 [ 40.351126][ T4295] do_el0_svc+0x58/0x13c [ 40.352290][ T4295] el0_svc+0x58/0x138 [ 40.353328][ T4295] el0t_64_sync_handler+0x84/0xf0 [ 40.354633][ T4295] el0t_64_sync+0x18c/0x190 [ 40.355827][ T4295] [ 40.356439][ T4295] The buggy address belongs to the physical page: [ 40.358185][ T4295] page:00000000d0078541 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x124437 [ 40.360831][ T4295] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 40.362725][ T4295] raw: 05ffc00000000000 fffffc000386ad08 ffff00019f730e20 0000000000000000 [ 40.364987][ T4295] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 40.367412][ T4295] page dumped because: kasan: bad access detected [ 40.369078][ T4295] [ 40.369669][ T4295] Memory state around the buggy address: [ 40.371144][ T4295] ffff0000e4436f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.373243][ T4295] ffff0000e4436f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.375350][ T4295] >ffff0000e4437000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.377435][ T4295] ^ [ 40.378486][ T4295] ffff0000e4437080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.380607][ T4295] ffff0000e4437100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 40.382638][ T4295] ================================================================== [ 40.386437][ T4295] Disabling lock debugging due to kernel taint [ 40.388415][ T4295] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 40.392870][ T4295] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 40.395749][ T4295] OCFS2: File system is now read-only. [ 40.397137][ T4295] (syz-executor261,4295,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 40.399207][ T4295] (syz-executor261,4295,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 40.401277][ T4295] (syz-executor261,4295,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 40.404024][ T4295] (syz-executor261,4295,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 40.406301][ T4295] (syz-executor261,4295,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 40.408421][ T4295] (syz-executor261,4295,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 40.410620][ T4295] (syz-executor261,4295,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 40.412733][ T4295] (syz-executor261,4295,0):ocfs2_mknod:385 ERROR: status = -30 [ 40.415134][ T4295] (syz-executor261,4295,0):ocfs2_mknod:502 ERROR: status = -30 [ 40.417187][ T4295] (syz-executor261,4295,0):ocfs2_mkdir:659 ERROR: status = -30 [ 40.426159][ T4295] ocfs2: Unmounting device (7,0) on (node local)