syzkaller login: [ 91.943169][ T788] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:9441' (ED25519) to the list of known hosts.
2025/12/08 17:21:09 parsed 1 programs
[ 99.621801][ T5330] cgroup: Unknown subsys name 'net'
[ 99.689745][ T5330] cgroup: Unknown subsys name 'cpuset'
[ 99.695341][ T5330] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 101.378608][ T5330] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 102.234589][ T5330] ODEBUG: Out of memory. ODEBUG disabled
[ 107.352540][ T5349] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 110.006908][ T4679] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 110.010833][ T4679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 110.013932][ T4679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 110.017470][ T4679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 110.028999][ T4679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 112.077898][ T4679] Bluetooth: hci0: command tx timeout
[ 112.282848][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.313059][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.506458][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 112.509786][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 112.695102][ T5378] chnl_net:caif_netlink_parms(): no params data found
[ 112.949477][ T5378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.953421][ T5378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.966913][ T5378] bridge_slave_0: entered allmulticast mode
[ 112.978273][ T5378] bridge_slave_0: entered promiscuous mode
[ 112.998482][ T5378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.001923][ T5378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.012670][ T5378] bridge_slave_1: entered allmulticast mode
[ 113.027003][ T5378] bridge_slave_1: entered promiscuous mode
[ 113.111671][ T5378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.130154][ T5378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.219593][ T5378] team0: Port device team_slave_0 added
[ 113.238775][ T5378] team0: Port device team_slave_1 added
[ 113.327187][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.330351][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.368577][ T5378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.386485][ T5378] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.397172][ T5378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 113.439203][ T5378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 113.558207][ T5378] hsr_slave_0: entered promiscuous mode
[ 113.577138][ T5378] hsr_slave_1: entered promiscuous mode
[ 113.909544][ T5378] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 113.929677][ T5378] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 113.939392][ T5378] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 113.951744][ T5378] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 114.082353][ T5378] 8021q: adding VLAN 0 to HW filter on device bond0
[ 114.110121][ T5378] 8021q: adding VLAN 0 to HW filter on device team0
[ 114.118907][ T936] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.122253][ T936] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 114.134285][ T936] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.137688][ T936] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 114.156636][ T4679] Bluetooth: hci0: command tx timeout
[ 114.477920][ T5378] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.539348][ T5378] veth0_vlan: entered promiscuous mode
[ 114.559657][ T5378] veth1_vlan: entered promiscuous mode
[ 114.617662][ T5378] veth0_macvtap: entered promiscuous mode
[ 114.641827][ T5378] veth1_macvtap: entered promiscuous mode
[ 114.688240][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.707319][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.732253][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.760987][ T936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.765678][ T936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.800607][ T936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/12/08 17:21:27 executed programs: 0
[ 115.192489][ T46] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 115.199600][ T46] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 115.202748][ T46] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 115.206164][ T46] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 115.209456][ T46] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 115.289761][ T5394] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 115.293230][ T5394] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 115.296020][ T5394] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 115.299882][ T5394] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 115.304734][ T5394] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 115.380826][ T4679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 115.384797][ T4679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 115.388212][ T4679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 115.417800][ T4679] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 115.423779][ T5462] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 115.431428][ T4679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 115.434261][ T4679] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 115.439605][ T5462] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 115.442771][ T4679] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 115.453456][ T4679] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 115.687224][ T5462] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 115.724632][ T5462] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 115.727955][ T5462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 115.731571][ T46] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 115.736093][ T5462] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 115.739670][ T5462] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 115.759795][ T46] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 115.763659][ T46] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 115.776475][ T46] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 115.779794][ T46] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 117.249634][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.336160][ T5450] chnl_net:caif_netlink_parms(): no params data found
[ 117.366449][ T5462] Bluetooth: hci3: command tx timeout
[ 117.369075][ T46] Bluetooth: hci1: command tx timeout
[ 117.517902][ T5462] Bluetooth: hci2: command tx timeout
[ 117.521066][ T46] Bluetooth: hci4: command tx timeout
[ 117.725987][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.729352][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.732532][ T5450] bridge_slave_0: entered allmulticast mode
[ 117.739975][ T5450] bridge_slave_0: entered promiscuous mode
[ 117.750993][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.754239][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.760302][ T5450] bridge_slave_1: entered allmulticast mode
[ 117.763995][ T5450] bridge_slave_1: entered promiscuous mode
[ 117.823058][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.934195][ T5450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 117.982252][ T5450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 118.048958][ T5454] chnl_net:caif_netlink_parms(): no params data found
[ 118.076559][ T5462] Bluetooth: hci5: command tx timeout
[ 118.079506][ T46] Bluetooth: hci6: command tx timeout
[ 118.179922][ T5450] team0: Port device team_slave_0 added
[ 118.203322][ T5450] team0: Port device team_slave_1 added
[ 118.248050][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.421556][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.424625][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.438456][ T5450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 118.451320][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.508540][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.513861][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.517290][ T5454] bridge_slave_0: entered allmulticast mode
[ 118.535517][ T5454] bridge_slave_0: entered promiscuous mode
[ 118.545535][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 118.549839][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.576754][ T5450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.599612][ T5458] chnl_net:caif_netlink_parms(): no params data found
[ 118.618799][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.622003][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.625228][ T5454] bridge_slave_1: entered allmulticast mode
[ 118.639489][ T5454] bridge_slave_1: entered promiscuous mode
[ 118.745231][ T5451] chnl_net:caif_netlink_parms(): no params data found
[ 118.828729][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 118.876043][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.071519][ T5450] hsr_slave_0: entered promiscuous mode
[ 119.074649][ T5450] hsr_slave_1: entered promiscuous mode
[ 119.089257][ T5450] debugfs: 'hsr0' already exists in 'hsr'
[ 119.091726][ T5450] Cannot create hsr debugfs directory
[ 119.144362][ T5467] chnl_net:caif_netlink_parms(): no params data found
[ 119.255328][ T5454] team0: Port device team_slave_0 added
[ 119.338850][ T5470] chnl_net:caif_netlink_parms(): no params data found
[ 119.418828][ T5454] team0: Port device team_slave_1 added
[ 119.421278][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.424871][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.437347][ T5462] Bluetooth: hci3: command tx timeout
[ 119.440794][ T46] Bluetooth: hci1: command tx timeout
[ 119.444481][ T5458] bridge_slave_0: entered allmulticast mode
[ 119.466489][ T5458] bridge_slave_0: entered promiscuous mode
[ 119.597205][ T46] Bluetooth: hci2: command tx timeout
[ 119.599466][ T5462] Bluetooth: hci4: command tx timeout
[ 119.667895][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.671256][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.674368][ T5458] bridge_slave_1: entered allmulticast mode
[ 119.689212][ T5458] bridge_slave_1: entered promiscuous mode
[ 119.742445][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.745470][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.766746][ T5451] bridge_slave_0: entered allmulticast mode
[ 119.770293][ T5451] bridge_slave_0: entered promiscuous mode
[ 119.819960][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 119.823018][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.844017][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 119.921016][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.924251][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.937373][ T5451] bridge_slave_1: entered allmulticast mode
[ 119.941224][ T5451] bridge_slave_1: entered promiscuous mode
[ 119.948477][ T43] bridge_slave_1: left allmulticast mode
[ 119.952033][ T43] bridge_slave_1: left promiscuous mode
[ 119.954699][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.970361][ T43] bridge_slave_0: left allmulticast mode
[ 119.972833][ T43] bridge_slave_0: left promiscuous mode
[ 119.976096][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.156706][ T46] Bluetooth: hci5: command tx timeout
[ 120.159180][ T5462] Bluetooth: hci6: command tx timeout
[ 120.328325][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 120.334008][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.339773][ T43] bond0 (unregistering): Released all slaves
[ 120.373108][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 120.375831][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.388775][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 120.505684][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.617814][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.657714][ T5451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.679673][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.686727][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.689992][ T5467] bridge_slave_0: entered allmulticast mode
[ 120.702101][ T5467] bridge_slave_0: entered promiscuous mode
[ 120.723140][ T5451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.771647][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.775599][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.780298][ T5467] bridge_slave_1: entered allmulticast mode
[ 120.784111][ T5467] bridge_slave_1: entered promiscuous mode
[ 120.789739][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.793017][ T5470] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.801200][ T5470] bridge_slave_0: entered allmulticast mode
[ 120.805417][ T5470] bridge_slave_0: entered promiscuous mode
[ 120.847494][ T5454] hsr_slave_0: entered promiscuous mode
[ 120.851845][ T5454] hsr_slave_1: entered promiscuous mode
[ 120.854999][ T5454] debugfs: 'hsr0' already exists in 'hsr'
[ 120.858309][ T5454] Cannot create hsr debugfs directory
[ 120.862493][ T5458] team0: Port device team_slave_0 added
[ 120.891315][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.901818][ T5470] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.904671][ T5470] bridge_slave_1: entered allmulticast mode
[ 120.909391][ T5470] bridge_slave_1: entered promiscuous mode
[ 120.925490][ T5458] team0: Port device team_slave_1 added
[ 120.966572][ T5451] team0: Port device team_slave_0 added
[ 120.987231][ T5467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 121.008607][ T5451] team0: Port device team_slave_1 added
[ 121.029221][ T5467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 121.044358][ T5470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 121.075447][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 121.078918][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.090132][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 121.112398][ T5470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 121.137022][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 121.139933][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.166651][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 121.259577][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 121.262768][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.296523][ T5451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 121.319965][ T5467] team0: Port device team_slave_0 added
[ 121.324013][ T5470] team0: Port device team_slave_0 added
[ 121.341154][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 121.344212][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 121.376633][ T5451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 121.383459][ T5467] team0: Port device team_slave_1 added
[ 121.400651][ T5470] team0: Port device team_slave_1 added
[ 121.517270][ T46] Bluetooth: hci1: command tx timeout
[ 121.519475][ T5462] Bluetooth: hci3: command tx timeout
[ 121.591378][ T43] hsr_slave_0: left promiscuous mode
[ 121.594367][ T43] hsr_slave_1: left promiscuous mode
[ 121.599456][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 121.602832][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 121.607908][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 121.610956][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 121.624947][ T43] veth1_macvtap: left promiscuous mode
[ 121.628161][ T43] veth0_macvtap: left promiscuous mode
[ 121.630678][ T43] veth1_vlan: left promiscuous mode
[ 121.633053][ T43] veth0_vlan: left promiscuous mode
[ 121.679115][ T46] Bluetooth: hci2: command tx timeout
[ 121.681542][ T5462] Bluetooth: hci4: command tx timeout
[ 121.955683][ T43] team0 (unregistering): Port device team_slave_1 removed
[ 121.979915][ T43] team0 (unregistering): Port device team_slave_0 removed
[ 122.236431][ T46] Bluetooth: hci5: command tx timeout
[ 122.238834][ T5462] Bluetooth: hci6: command tx timeout
[ 122.264790][ T5451] hsr_slave_0: entered promiscuous mode
[ 122.272076][ T5451] hsr_slave_1: entered promiscuous mode
[ 122.276027][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 122.280230][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 122.293188][ T5467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 122.298953][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 122.301791][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 122.313962][ T5470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 122.339339][ T5458] hsr_slave_0: entered promiscuous mode
[ 122.342486][ T5458] hsr_slave_1: entered promiscuous mode
[ 122.345424][ T5458] debugfs: 'hsr0' already exists in 'hsr'
[ 122.348855][ T5458] Cannot create hsr debugfs directory
[ 122.353410][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 122.356578][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 122.379219][ T5467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 122.387953][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 122.390950][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 122.405415][ T5470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 122.464139][ T5450] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 122.494078][ T5450] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 122.547884][ T5450] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 122.675781][ T5450] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 122.704055][ T5470] hsr_slave_0: entered promiscuous mode
[ 122.718854][ T5470] hsr_slave_1: entered promiscuous mode
[ 122.726805][ T5470] debugfs: 'hsr0' already exists in 'hsr'
[ 122.729354][ T5470] Cannot create hsr debugfs directory
[ 122.753877][ T5467] hsr_slave_0: entered promiscuous mode
[ 122.767201][ T5467] hsr_slave_1: entered promiscuous mode
[ 122.770053][ T5467] debugfs: 'hsr0' already exists in 'hsr'
[ 122.772363][ T5467] Cannot create hsr debugfs directory
[ 123.218524][ T5454] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 123.270683][ T5454] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 123.328383][ T5454] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 123.339900][ T5454] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 123.552378][ T5458] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 123.581438][ T5458] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 123.595479][ T5458] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 123.598758][ T46] Bluetooth: hci1: command tx timeout
[ 123.600937][ T5462] Bluetooth: hci3: command tx timeout
[ 123.641188][ T5458] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 123.758761][ T46] Bluetooth: hci2: command tx timeout
[ 123.761040][ T5462] Bluetooth: hci4: command tx timeout
[ 123.833827][ T5450] 8021q: adding VLAN 0 to HW filter on device bond0
[ 123.923976][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0
[ 123.978174][ T5450] 8021q: adding VLAN 0 to HW filter on device team0
[ 123.991801][ T3808] bridge0: port 1(bridge_slave_0) entered blocking state
[ 123.994782][ T3808] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.042941][ T5454] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.060835][ T3808] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.064023][ T3808] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.129792][ T3808] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.133833][ T3808] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.187905][ T79] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.191044][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.302097][ T5470] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 124.316628][ T46] Bluetooth: hci5: command tx timeout
[ 124.318938][ T5462] Bluetooth: hci6: command tx timeout
[ 124.418599][ T5470] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 124.434075][ T5470] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 124.495459][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.507879][ T5470] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 124.627601][ T5467] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 124.660818][ T5467] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 124.743110][ T5467] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 124.766094][ T5467] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 124.878440][ T5458] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.933049][ T5451] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 124.973265][ T79] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.976524][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 125.003743][ T5451] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 125.043178][ T5451] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 125.089564][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.092798][ T3306] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 125.114616][ T5450] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 125.126565][ T5451] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 125.349926][ T5458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 125.483058][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 125.491409][ T5470] 8021q: adding VLAN 0 to HW filter on device bond0
[ 125.605262][ T5450] veth0_vlan: entered promiscuous mode
[ 125.660453][ T5470] 8021q: adding VLAN 0 to HW filter on device team0
[ 125.749448][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 125.753227][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 125.805880][ T5450] veth1_vlan: entered promiscuous mode
[ 125.849688][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.853010][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 125.999902][ T5467] 8021q: adding VLAN 0 to HW filter on device bond0
[ 126.099076][ T5454] veth0_vlan: entered promiscuous mode
[ 126.145535][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 126.175165][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0
[ 126.215534][ T5454] veth1_vlan: entered promiscuous mode
[ 126.234288][ T5467] 8021q: adding VLAN 0 to HW filter on device team0
[ 126.268335][ T5450] veth0_macvtap: entered promiscuous mode
[ 126.302684][ T5451] 8021q: adding VLAN 0 to HW filter on device team0
[ 126.339830][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.343171][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 126.406065][ T5450] veth1_macvtap: entered promiscuous mode
[ 126.429202][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.432345][ T3306] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 126.470384][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.473493][ T3306] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 126.502215][ T5458] veth0_vlan: entered promiscuous mode
[ 126.533400][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.536169][ T3306] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 126.586594][ T5454] veth0_macvtap: entered promiscuous mode
[ 126.608876][ T5458] veth1_vlan: entered promiscuous mode
[ 126.662599][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 126.665988][ T5454] veth1_macvtap: entered promiscuous mode
[ 126.728461][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 126.765059][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.793358][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.811131][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 126.817074][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.839822][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.861873][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 126.907449][ T5458] veth0_macvtap: entered promiscuous mode
[ 126.937165][ T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.947880][ T5458] veth1_macvtap: entered promiscuous mode
[ 126.997870][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.003703][ T5470] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.010695][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.014557][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.093637][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.153415][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.297930][ T936] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.319965][ T936] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.351411][ T936] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.355110][ T936] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.398935][ T3779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.402218][ T3779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.486455][ T3779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.489953][ T3779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.601540][ T5467] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.651947][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.655363][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.681732][ T5451] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.688531][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.691818][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.784594][ T3779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.812132][ T3779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.965746][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.992039][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/08 17:21:40 executed programs: 12
[ 128.222740][ T5451] veth0_vlan: entered promiscuous mode
[ 128.298408][ T5451] veth1_vlan: entered promiscuous mode
[ 128.302284][ T5470] veth0_vlan: entered promiscuous mode
[ 128.389026][ T5470] veth1_vlan: entered promiscuous mode
[ 128.585342][ T5451] veth0_macvtap: entered promiscuous mode
[ 128.612028][ T5451] veth1_macvtap: entered promiscuous mode
[ 128.649206][ T5470] veth0_macvtap: entered promiscuous mode
[ 128.694644][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 128.726734][ T5470] veth1_macvtap: entered promiscuous mode
[ 128.789552][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 128.860937][ T3779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.897534][ T3779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.914753][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 128.931510][ T5673] loop0: detected capacity change from 0 to 32768
[ 128.944036][ T3779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.977858][ T5470] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 128.998477][ T5467] veth0_vlan: entered promiscuous mode
[ 129.018704][ T3779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.062640][ T5467] veth1_vlan: entered promiscuous mode
[ 129.090260][ T5673] JBD2: Ignoring recovery information on journal
[ 129.105472][ T4645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.170741][ T4645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.185072][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.210363][ T5673] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 129.253642][ T4645] (kworker/u4:26,4645,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[ 129.272258][ T4645] (kworker/u4:26,4645,0):ocfs2_read_locked_inode:599 ERROR: status = -12
[ 129.277768][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 129.294662][ T4645] (kworker/u4:26,4645,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #24: rec_len is smaller than minimal - offset=54960, inode=0, rec_len=0, name_len=0
[ 129.332685][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 129.336094][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 129.408503][ T5450] ocfs2: Unmounting device (7,0) on (node local)
[ 129.561002][ T5467] veth0_macvtap: entered promiscuous mode
[ 129.629476][ T5467] veth1_macvtap: entered promiscuous mode
[ 129.640887][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 129.644160][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 129.903772][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 129.922940][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 129.933842][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.037447][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 130.150226][ T79] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.154166][ T79] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.167904][ T936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.173046][ T936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.223337][ T79] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.260671][ T79] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 130.662378][ T3808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.665679][ T3808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.857737][ T3808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 130.879412][ T3808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.902485][ T5684] loop0: detected capacity change from 0 to 32768
[ 131.063822][ T5684] JBD2: Ignoring recovery information on journal
[ 131.239351][ T5684] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 131.308697][ T43] (kworker/u4:3,43,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[ 131.313384][ T43] (kworker/u4:3,43,0):ocfs2_read_locked_inode:599 ERROR: status = -12
[ 131.382341][ T43] ==================================================================
[ 131.385956][ T43] BUG: KASAN: use-after-free in ocfs2_check_dir_entry+0x3a0/0x480
[ 131.389555][ T43] Read of size 2 at addr ffff88804818b780 by task kworker/u4:3/43
[ 131.393829][ T43]
[ 131.394917][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full)
[ 131.394931][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 131.394940][ T43] Workqueue: ocfs2_wq ocfs2_complete_recovery
[ 131.394956][ T43] Call Trace:
[ 131.394962][ T43]
[ 131.394966][ T43] dump_stack_lvl+0x189/0x250
[ 131.395032][ T43] ? __kasan_check_byte+0x12/0x40
[ 131.395098][ T43] ? __pfx_dump_stack_lvl+0x10/0x10
[ 131.395109][ T43] ? lock_release+0x4b/0x3b0
[ 131.395135][ T43] ? __virt_addr_valid+0x4a5/0x5c0
[ 131.395149][ T43] print_report+0xca/0x240
[ 131.395159][ T43] ? ocfs2_check_dir_entry+0x3a0/0x480
[ 131.395171][ T43] kasan_report+0x118/0x150
[ 131.395182][ T43] ? ocfs2_check_dir_entry+0x3a0/0x480
[ 131.395195][ T43] ocfs2_check_dir_entry+0x3a0/0x480
[ 131.395208][ T43] ? __pfx_ocfs2_check_dir_entry+0x10/0x10
[ 131.395219][ T43] ? __pfx_ocfs2_read_inode_block+0x10/0x10
[ 131.395230][ T43] ? ocfs2_orphan_filldir+0x189/0x500
[ 131.395244][ T43] ocfs2_dir_foreach_blk+0xfff/0x1420
[ 131.395261][ T43] ? __pfx_ocfs2_dir_foreach_blk+0x10/0x10
[ 131.395274][ T43] ? inode_query_iversion+0x11a/0x170
[ 131.395286][ T43] ? __pfx_inode_query_iversion+0x10/0x10
[ 131.395296][ T43] ? down_write+0x162/0x1f0
[ 131.395431][ T43] ? __pfx_down_write+0x10/0x10
[ 131.395446][ T43] ocfs2_dir_foreach+0x42/0x70
[ 131.395458][ T43] ocfs2_complete_recovery+0xc37/0x20b0
[ 131.395469][ T43] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 131.395484][ T43] ? __pfx_ocfs2_complete_recovery+0x10/0x10
[ 131.395495][ T43] ? stack_trace_save+0x9c/0xe0
[ 131.395509][ T43] ? __pfx_ocfs2_orphan_filldir+0x10/0x10
[ 131.395523][ T43] ? check_path+0x21/0x40
[ 131.395536][ T43] ? lockdep_unlock+0x89/0x120
[ 131.395544][ T43] ? __lock_acquire+0x146f/0x2cf0
[ 131.395558][ T43] ? finish_task_switch+0x23d/0x940
[ 131.395576][ T43] ? process_scheduled_works+0x9ef/0x1770
[ 131.395588][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 131.395600][ T43] ? process_scheduled_works+0x9ef/0x1770
[ 131.395609][ T43] ? process_scheduled_works+0x9ef/0x1770
[ 131.395617][ T43] process_scheduled_works+0xad1/0x1770
[ 131.395628][ T43] ? __pfx_process_scheduled_works+0x10/0x10
[ 131.395636][ T43] worker_thread+0x8a0/0xda0
[ 131.395651][ T43] kthread+0x711/0x8a0
[ 131.395661][ T43] ? __pfx_worker_thread+0x10/0x10
[ 131.395667][ T43] ? __pfx_kthread+0x10/0x10
[ 131.395676][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 131.395683][ T43] ? lockdep_hardirqs_on+0x98/0x140
[ 131.395691][ T43] ? __pfx_kthread+0x10/0x10
[ 131.395699][ T43] ret_from_fork+0x599/0xb30
[ 131.395707][ T43] ? __pfx_ret_from_fork+0x10/0x10
[ 131.395715][ T43] ? __pfx_kthread+0x10/0x10
[ 131.395723][ T43] ret_from_fork_asm+0x1a/0x30
[ 131.395739][ T43]
[ 131.395742][ T43]
[ 131.511979][ T43] The buggy address belongs to the physical page:
[ 131.514744][ T43] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x3e6 pfn:0x4818b
[ 131.518540][ T43] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 131.521947][ T43] raw: 04fff00000000000 dead000000000100 dead000000000122 0000000000000000
[ 131.525629][ T43] raw: 00000000000003e6 0000000000000000 00000000ffffffff 0000000000000000
[ 131.529426][ T43] page dumped because: kasan: bad access detected
[ 131.532126][ T43] page_owner tracks the page as freed
[ 131.534514][ T43] page last allocated via order 0, migratetype Movable, gfp_mask 0x141cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE|__GFP_COMP), pid 5303, tgid 5303 (sftp-server), ts 88227355815, free_ts 110905575400
[ 131.542484][ T43] post_alloc_hook+0x234/0x290
[ 131.544522][ T43] compaction_alloc+0x3089/0x3490
[ 131.546702][ T43] migrate_pages_batch+0x801/0x35e0
[ 131.548898][ T43] migrate_pages+0x1b9a/0x28e0
[ 131.550929][ T43] compact_zone+0x25ba/0x4760
[ 131.553049][ T43] kcompactd+0x953/0x1250
[ 131.555094][ T43] kthread+0x711/0x8a0
[ 131.556773][ T43] ret_from_fork+0x599/0xb30
[ 131.558846][ T43] ret_from_fork_asm+0x1a/0x30
[ 131.561001][ T43] page last free pid 30 tgid 30 stack trace:
[ 131.563583][ T43] __free_frozen_pages+0xbc8/0xd30
[ 131.565743][ T43] __folio_put+0x21b/0x2c0
[ 131.567687][ T43] migrate_pages_batch+0x22a3/0x35e0
[ 131.570506][ T43] migrate_pages+0x1b9a/0x28e0
[ 131.572932][ T43] compact_zone+0x25ba/0x4760
[ 131.575049][ T43] kcompactd+0x953/0x1250
[ 131.576953][ T43] kthread+0x711/0x8a0
[ 131.578635][ T43] ret_from_fork+0x599/0xb30
[ 131.580457][ T43] ret_from_fork_asm+0x1a/0x30
[ 131.582556][ T43]
[ 131.583635][ T43] Memory state around the buggy address:
[ 131.586104][ T43] ffff88804818b680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.589540][ T43] ffff88804818b700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.592975][ T43] >ffff88804818b780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.596381][ T43] ^
[ 131.598130][ T43] ffff88804818b800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.601544][ T43] ffff88804818b880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 131.604997][ T43] ==================================================================
[ 133.106332][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 133.109266][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u4:3 Not tainted syzkaller #0 PREEMPT(full)
[ 133.112966][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 133.117259][ T43] Workqueue: ocfs2_wq ocfs2_complete_recovery
[ 133.119690][ T43] Call Trace:
[ 133.121172][ T43]
[ 133.122344][ T43] dump_stack_lvl+0x99/0x250
[ 133.124294][ T43] ? __asan_memcpy+0x40/0x70
[ 133.126283][ T43] ? __pfx_dump_stack_lvl+0x10/0x10
[ 133.128486][ T43] ? __pfx__printk+0x10/0x10
[ 133.130471][ T43] vpanic+0x237/0x6d0
[ 133.132133][ T43] ? __pfx_vpanic+0x10/0x10
[ 133.134120][ T43] ? preempt_schedule+0xae/0xc0
[ 133.136246][ T43] ? __pfx_preempt_schedule+0x10/0x10
[ 133.138654][ T43] panic+0xb9/0xc0
[ 133.140267][ T43] ? __pfx_panic+0x10/0x10
[ 133.142198][ T43] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 133.144720][ T43] ? ocfs2_check_dir_entry+0x3a0/0x480
[ 133.147109][ T43] check_panic_on_warn+0x89/0xb0
[ 133.149248][ T43] ? ocfs2_check_dir_entry+0x3a0/0x480
[ 133.151543][ T43] end_report+0x6f/0x140
[ 133.153366][ T43] kasan_report+0x129/0x150
[ 133.155297][ T43] ? ocfs2_check_dir_entry+0x3a0/0x480
[ 133.157707][ T43] ocfs2_check_dir_entry+0x3a0/0x480
[ 133.160116][ T43] ? __pfx_ocfs2_check_dir_entry+0x10/0x10
[ 133.162725][ T43] ? __pfx_ocfs2_read_inode_block+0x10/0x10
[ 133.165305][ T43] ? ocfs2_orphan_filldir+0x189/0x500
[ 133.167465][ T43] ocfs2_dir_foreach_blk+0xfff/0x1420
[ 133.169668][ T43] ? __pfx_ocfs2_dir_foreach_blk+0x10/0x10
[ 133.172079][ T43] ? inode_query_iversion+0x11a/0x170
[ 133.174350][ T43] ? __pfx_inode_query_iversion+0x10/0x10
[ 133.176799][ T43] ? down_write+0x162/0x1f0
[ 133.178732][ T43] ? __pfx_down_write+0x10/0x10
[ 133.180870][ T43] ocfs2_dir_foreach+0x42/0x70
[ 133.183323][ T43] ocfs2_complete_recovery+0xc37/0x20b0
[ 133.185711][ T43] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 133.188256][ T43] ? __pfx_ocfs2_complete_recovery+0x10/0x10
[ 133.190854][ T43] ? stack_trace_save+0x9c/0xe0
[ 133.192982][ T43] ? __pfx_ocfs2_orphan_filldir+0x10/0x10
[ 133.195277][ T43] ? check_path+0x21/0x40
[ 133.197208][ T43] ? lockdep_unlock+0x89/0x120
[ 133.199260][ T43] ? __lock_acquire+0x146f/0x2cf0
[ 133.201376][ T43] ? finish_task_switch+0x23d/0x940
[ 133.203675][ T43] ? process_scheduled_works+0x9ef/0x1770
[ 133.206094][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 133.208385][ T43] ? process_scheduled_works+0x9ef/0x1770
[ 133.210844][ T43] ? process_scheduled_works+0x9ef/0x1770
[ 133.213351][ T43] process_scheduled_works+0xad1/0x1770
[ 133.215702][ T43] ? __pfx_process_scheduled_works+0x10/0x10
[ 133.218262][ T43] worker_thread+0x8a0/0xda0
[ 133.220308][ T43] kthread+0x711/0x8a0
[ 133.222078][ T43] ? __pfx_worker_thread+0x10/0x10
[ 133.224222][ T43] ? __pfx_kthread+0x10/0x10
[ 133.226268][ T43] ? _raw_spin_unlock_irq+0x23/0x50
[ 133.228417][ T43] ? lockdep_hardirqs_on+0x98/0x140
[ 133.230435][ T43] ? __pfx_kthread+0x10/0x10
[ 133.232395][ T43] ret_from_fork+0x599/0xb30
[ 133.234328][ T43] ? __pfx_ret_from_fork+0x10/0x10
[ 133.236563][ T43] ? __pfx_kthread+0x10/0x10
[ 133.238507][ T43] ret_from_fork_asm+0x1a/0x30
[ 133.240193][ T43]
[ 133.241817][ T43] Kernel Offset: disabled
[ 133.243564][ T43] Rebooting in 86400 seconds..
VM DIAGNOSIS:
17:21:44 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000a06cf0
R8 =ffff888030fa8237 R9 =1ffff110061f5046 R10=dffffc0000000000 R11=ffffffff851c3830
R12=dffffc0000000000 R13=ffffffff99adba08 R14=ffffffff99df0580 R15=0000000000000000
RIP=ffffffff851c38ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d239000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fca3fdd3000 CR3=000000005243d000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4edb3280 00007ffe4edb3260
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4edb33c0 00007ffe4edb3240
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4edb3280
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4edb33c0
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4edb33c0 00007ffe4edb3240
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4edb3280 00007ffe4edb3260
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca488150f1
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca488151cf
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d43d6e4f2810b685 43b44036df97abb6 b94d724eeff00701 e71b6c3bdbec9c78
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000