Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. 2025/08/03 19:49:50 ignoring optional flag "sandboxArg"="0" 2025/08/03 19:49:51 parsed 1 programs [ 90.930782][ T5795] cgroup: Unknown subsys name 'net' [ 91.070859][ T5795] cgroup: Unknown subsys name 'rlimit' [ 92.334460][ T1186] cfg80211: failed to load regulatory.db [ 92.871728][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.795914][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.811960][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.852305][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.860197][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.945278][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.963361][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.972159][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.980489][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.988604][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.996175][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.574128][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 98.700916][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.708761][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.716210][ T5867] bridge_slave_0: entered allmulticast mode [ 98.724134][ T5867] bridge_slave_0: entered promiscuous mode [ 98.733825][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.741043][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.748424][ T5867] bridge_slave_1: entered allmulticast mode [ 98.755531][ T5867] bridge_slave_1: entered promiscuous mode [ 98.805159][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.816787][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.868609][ T5867] team0: Port device team_slave_0 added [ 98.877090][ T5867] team0: Port device team_slave_1 added [ 98.925748][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.933192][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.959242][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.973416][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.980420][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.006642][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.062609][ T5867] hsr_slave_0: entered promiscuous mode [ 99.070456][ T5867] hsr_slave_1: entered promiscuous mode [ 99.293026][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.305930][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.317000][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.344128][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.469332][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.499511][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.522864][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.530495][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.543392][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.550602][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.776000][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.822238][ T5867] veth0_vlan: entered promiscuous mode [ 99.836059][ T5867] veth1_vlan: entered promiscuous mode [ 99.866294][ T5867] veth0_macvtap: entered promiscuous mode [ 99.876678][ T5867] veth1_macvtap: entered promiscuous mode [ 99.897022][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.913605][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.927284][ T5867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.937197][ T5867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.946467][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.955439][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.125179][ T1123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/03 19:50:03 executed programs: 0 [ 100.658606][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.670090][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.679389][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.689904][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.698815][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.706461][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.885807][ T5897] chnl_net:caif_netlink_parms(): no params data found [ 100.964052][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.971333][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.979658][ T5897] bridge_slave_0: entered allmulticast mode [ 100.986755][ T5897] bridge_slave_0: entered promiscuous mode [ 100.996506][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.003836][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.011017][ T5897] bridge_slave_1: entered allmulticast mode [ 101.018452][ T5897] bridge_slave_1: entered promiscuous mode [ 101.061891][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.074241][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.112169][ T5897] team0: Port device team_slave_0 added [ 101.120616][ T5897] team0: Port device team_slave_1 added [ 101.154991][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.162693][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.189160][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.203122][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.210141][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.236612][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.286371][ T5897] hsr_slave_0: entered promiscuous mode [ 101.293849][ T5897] hsr_slave_1: entered promiscuous mode [ 101.300312][ T5897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.308925][ T5897] Cannot create hsr debugfs directory [ 102.733023][ T5101] Bluetooth: hci0: command tx timeout [ 102.776765][ T1123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.812402][ T5101] Bluetooth: hci0: command tx timeout [ 105.004802][ T1123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.077551][ T1123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.997911][ T5897] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.010566][ T5897] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.026016][ T5897] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.048626][ T1123] hsr_slave_0: left promiscuous mode [ 106.057478][ T1123] hsr_slave_1: left promiscuous mode [ 106.065057][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.076048][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.085166][ T1123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.093550][ T1123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.104097][ T1123] bridge_slave_1: left allmulticast mode [ 106.109799][ T1123] bridge_slave_1: left promiscuous mode [ 106.117170][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.134746][ T1123] bridge_slave_0: left allmulticast mode [ 106.140462][ T1123] bridge_slave_0: left promiscuous mode [ 106.149093][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.183896][ T1123] veth1_macvtap: left promiscuous mode [ 106.189898][ T1123] veth0_macvtap: left promiscuous mode [ 106.197250][ T1123] veth1_vlan: left promiscuous mode [ 106.203181][ T1123] veth0_vlan: left promiscuous mode [ 106.638091][ T1123] team0 (unregistering): Port device team_slave_1 removed [ 106.671279][ T1123] team0 (unregistering): Port device team_slave_0 removed [ 106.707968][ T1123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.747194][ T1123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.895016][ T5101] Bluetooth: hci0: command tx timeout [ 107.087232][ T1123] bond0 (unregistering): Released all slaves [ 107.164405][ T5897] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.270066][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.306747][ T5897] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.319847][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.327165][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.343620][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.350798][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.585717][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.628457][ T5897] veth0_vlan: entered promiscuous mode [ 107.649088][ T5897] veth1_vlan: entered promiscuous mode [ 107.703432][ T5897] veth0_macvtap: entered promiscuous mode [ 107.714487][ T5897] veth1_macvtap: entered promiscuous mode [ 107.732790][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.755808][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.768057][ T5897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.777706][ T5897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.786702][ T5897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.795757][ T5897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.870217][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.885174][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.919973][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.927970][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/03 19:50:11 executed programs: 2 [ 108.006917][ T5948] syz.0.17[5948]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 108.254178][ T5948] loop0: detected capacity change from 0 to 32768 [ 108.263333][ T5948] ======================================================= [ 108.263333][ T5948] WARNING: The mand mount option has been deprecated and [ 108.263333][ T5948] and is ignored by this kernel. Remove the mand [ 108.263333][ T5948] option from the mount to silence this warning. [ 108.263333][ T5948] ======================================================= [ 108.347010][ T5948] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.388749][ T5948] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 108.407119][ T5948] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 108.427926][ T5948] OCFS2: File system is now read-only. [ 108.434387][ T5948] (syz.0.17,5948,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 108.446231][ T5948] (syz.0.17,5948,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 108.454714][ T5948] (syz.0.17,5948,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 108.464300][ T5948] (syz.0.17,5948,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 108.476785][ T5948] (syz.0.17,5948,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 108.484905][ T5948] (syz.0.17,5948,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 108.493085][ T5948] (syz.0.17,5948,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 108.500763][ T5948] (syz.0.17,5948,0):ocfs2_mknod:385 ERROR: status = -30 [ 108.509137][ T5948] (syz.0.17,5948,0):ocfs2_mknod:502 ERROR: status = -30 [ 108.516481][ T5948] (syz.0.17,5948,0):ocfs2_create:676 ERROR: status = -30 [ 108.539769][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 108.903626][ T5951] loop0: detected capacity change from 0 to 32768 [ 108.931463][ T5951] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.946512][ T5951] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 108.962785][ T5951] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 108.972831][ T5101] Bluetooth: hci0: command tx timeout [ 108.978321][ T5951] OCFS2: File system is now read-only. [ 108.984349][ T5951] (syz.0.18,5951,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 108.992390][ T5951] (syz.0.18,5951,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 109.000294][ T5951] (syz.0.18,5951,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 109.008697][ T5951] (syz.0.18,5951,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 109.017052][ T5951] (syz.0.18,5951,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 109.025079][ T5951] (syz.0.18,5951,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 109.033099][ T5951] (syz.0.18,5951,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 109.040694][ T5951] (syz.0.18,5951,0):ocfs2_mknod:385 ERROR: status = -30 [ 109.047946][ T5951] (syz.0.18,5951,0):ocfs2_mknod:502 ERROR: status = -30 [ 109.063558][ T5951] (syz.0.18,5951,0):ocfs2_create:676 ERROR: status = -30 [ 109.087188][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 109.389813][ T5954] loop0: detected capacity change from 0 to 32768 [ 109.412303][ T5954] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.425458][ T5954] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 109.442111][ T5954] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.453037][ T5954] OCFS2: File system is now read-only. [ 109.458624][ T5954] (syz.0.19,5954,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 109.467351][ T5954] (syz.0.19,5954,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 109.475115][ T5954] (syz.0.19,5954,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 109.483506][ T5954] (syz.0.19,5954,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 109.492115][ T5954] (syz.0.19,5954,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 109.500215][ T5954] (syz.0.19,5954,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 109.508283][ T5954] (syz.0.19,5954,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 109.515985][ T5954] (syz.0.19,5954,0):ocfs2_mknod:385 ERROR: status = -30 [ 109.523215][ T5954] (syz.0.19,5954,0):ocfs2_mknod:502 ERROR: status = -30 [ 109.530209][ T5954] (syz.0.19,5954,0):ocfs2_create:676 ERROR: status = -30 [ 109.550247][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 109.856369][ T5957] loop0: detected capacity change from 0 to 32768 [ 109.885530][ T5957] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.897461][ T5957] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 109.914750][ T5957] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.925391][ T5957] OCFS2: File system is now read-only. [ 109.930908][ T5957] (syz.0.20,5957,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 109.940465][ T5957] (syz.0.20,5957,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 109.949830][ T5957] (syz.0.20,5957,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 109.958753][ T5957] (syz.0.20,5957,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 109.967978][ T5957] (syz.0.20,5957,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 109.976339][ T5957] (syz.0.20,5957,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 109.984724][ T5957] (syz.0.20,5957,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 109.992784][ T5957] (syz.0.20,5957,1):ocfs2_mknod:385 ERROR: status = -30 [ 109.999960][ T5957] (syz.0.20,5957,1):ocfs2_mknod:502 ERROR: status = -30 [ 110.007773][ T5957] (syz.0.20,5957,1):ocfs2_create:676 ERROR: status = -30 [ 110.027144][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 110.318453][ T5960] loop0: detected capacity change from 0 to 32768 [ 110.342781][ T5960] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.357131][ T5960] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 110.373356][ T5960] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 110.383315][ T5960] OCFS2: File system is now read-only. [ 110.388830][ T5960] (syz.0.21,5960,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 110.397237][ T5960] (syz.0.21,5960,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 110.405029][ T5960] (syz.0.21,5960,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 110.413640][ T5960] (syz.0.21,5960,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 110.422002][ T5960] (syz.0.21,5960,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 110.429948][ T5960] (syz.0.21,5960,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 110.437967][ T5960] (syz.0.21,5960,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 110.445823][ T5960] (syz.0.21,5960,1):ocfs2_mknod:385 ERROR: status = -30 [ 110.454351][ T5960] (syz.0.21,5960,0):ocfs2_mknod:502 ERROR: status = -30 [ 110.461492][ T5960] (syz.0.21,5960,0):ocfs2_create:676 ERROR: status = -30 [ 110.477060][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 110.811074][ T5963] loop0: detected capacity change from 0 to 32768 [ 110.840209][ T5963] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.854029][ T5963] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 110.870436][ T5963] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 110.880476][ T5963] OCFS2: File system is now read-only. [ 110.886087][ T5963] (syz.0.22,5963,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 110.894722][ T5963] (syz.0.22,5963,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 110.902778][ T5963] (syz.0.22,5963,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 110.911092][ T5963] (syz.0.22,5963,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 110.919481][ T5963] (syz.0.22,5963,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 110.927829][ T5963] (syz.0.22,5963,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 110.937777][ T5963] (syz.0.22,5963,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 110.945982][ T5963] (syz.0.22,5963,1):ocfs2_mknod:385 ERROR: status = -30 [ 110.955648][ T5963] (syz.0.22,5963,1):ocfs2_mknod:502 ERROR: status = -30 [ 110.962960][ T5963] (syz.0.22,5963,1):ocfs2_create:676 ERROR: status = -30 [ 110.983370][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 111.281887][ T5966] loop0: detected capacity change from 0 to 32768 [ 111.309256][ T5966] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.324294][ T5966] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 111.341206][ T5966] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 111.352977][ T5966] OCFS2: File system is now read-only. [ 111.358516][ T5966] (syz.0.23,5966,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 111.367721][ T5966] (syz.0.23,5966,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 111.375762][ T5966] (syz.0.23,5966,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 111.384658][ T5966] (syz.0.23,5966,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 111.393369][ T5966] (syz.0.23,5966,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 111.401450][ T5966] (syz.0.23,5966,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 111.409479][ T5966] (syz.0.23,5966,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 111.417467][ T5966] (syz.0.23,5966,1):ocfs2_mknod:385 ERROR: status = -30 [ 111.424850][ T5966] (syz.0.23,5966,1):ocfs2_mknod:502 ERROR: status = -30 [ 111.432006][ T5966] (syz.0.23,5966,1):ocfs2_create:676 ERROR: status = -30 [ 111.451298][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 111.741815][ T5969] loop0: detected capacity change from 0 to 32768 [ 111.766831][ T5969] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.779511][ T5969] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 111.795379][ T5969] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 111.805354][ T5969] OCFS2: File system is now read-only. [ 111.810880][ T5969] (syz.0.24,5969,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 111.819534][ T5969] (syz.0.24,5969,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 111.827440][ T5969] (syz.0.24,5969,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 111.835863][ T5969] (syz.0.24,5969,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 111.844771][ T5969] (syz.0.24,5969,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 111.853459][ T5969] (syz.0.24,5969,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 111.861489][ T5969] (syz.0.24,5969,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 111.869164][ T5969] (syz.0.24,5969,1):ocfs2_mknod:385 ERROR: status = -30 [ 111.876533][ T5969] (syz.0.24,5969,1):ocfs2_mknod:502 ERROR: status = -30 [ 111.883694][ T5969] (syz.0.24,5969,1):ocfs2_create:676 ERROR: status = -30 [ 111.900289][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 112.237816][ T5972] loop0: detected capacity change from 0 to 32768 [ 112.276526][ T5972] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.290179][ T5972] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 112.306134][ T5972] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 112.317154][ T5972] OCFS2: File system is now read-only. [ 112.322845][ T5972] (syz.0.25,5972,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 112.330649][ T5972] (syz.0.25,5972,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 112.338668][ T5972] (syz.0.25,5972,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 112.347179][ T5972] (syz.0.25,5972,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 112.355606][ T5972] (syz.0.25,5972,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 112.364148][ T5972] (syz.0.25,5972,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 112.372287][ T5972] (syz.0.25,5972,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 112.379996][ T5972] (syz.0.25,5972,0):ocfs2_mknod:385 ERROR: status = -30 [ 112.387348][ T5972] (syz.0.25,5972,0):ocfs2_mknod:502 ERROR: status = -30 [ 112.394543][ T5972] (syz.0.25,5972,0):ocfs2_create:676 ERROR: status = -30 [ 112.413951][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 112.702269][ T5975] loop0: detected capacity change from 0 to 32768 [ 112.722817][ T5975] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.737182][ T5975] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 112.753281][ T5975] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 112.764175][ T5975] OCFS2: File system is now read-only. [ 112.770010][ T5975] (syz.0.26,5975,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 112.778237][ T5975] (syz.0.26,5975,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 112.786306][ T5975] (syz.0.26,5975,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 112.795262][ T5975] (syz.0.26,5975,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 112.803645][ T5975] (syz.0.26,5975,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 112.811589][ T5975] (syz.0.26,5975,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 112.820037][ T5975] (syz.0.26,5975,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 112.827723][ T5975] (syz.0.26,5975,0):ocfs2_mknod:385 ERROR: status = -30 [ 112.834868][ T5975] (syz.0.26,5975,0):ocfs2_mknod:502 ERROR: status = -30 [ 112.841891][ T5975] (syz.0.26,5975,0):ocfs2_create:676 ERROR: status = -30 [ 112.857498][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 113.188262][ T5978] loop0: detected capacity change from 0 to 32768 [ 113.217780][ T5978] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.229140][ T5978] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 113.245013][ T5978] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 113.255923][ T5978] OCFS2: File system is now read-only. [ 113.261539][ T5978] (syz.0.27,5978,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 113.269431][ T5978] (syz.0.27,5978,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 113.279947][ T5978] (syz.0.27,5978,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 113.288430][ T5978] (syz.0.27,5978,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 113.296942][ T5978] (syz.0.27,5978,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 113.305013][ T5978] (syz.0.27,5978,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 113.313226][ T5978] (syz.0.27,5978,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 113.320834][ T5978] (syz.0.27,5978,0):ocfs2_mknod:385 ERROR: status = -30 [ 113.328175][ T5978] (syz.0.27,5978,0):ocfs2_mknod:502 ERROR: status = -30 2025/08/03 19:50:16 executed programs: 13 [ 113.335353][ T5978] (syz.0.27,5978,0):ocfs2_create:676 ERROR: status = -30 [ 113.355114][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 113.647601][ T5981] loop0: detected capacity change from 0 to 32768 [ 113.686818][ T5981] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.702498][ T5981] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 113.718210][ T5981] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 113.728956][ T5981] OCFS2: File system is now read-only. [ 113.735980][ T5981] (syz.0.28,5981,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 113.744096][ T5981] (syz.0.28,5981,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 113.752248][ T5981] (syz.0.28,5981,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 113.760669][ T5981] (syz.0.28,5981,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 113.769489][ T5981] (syz.0.28,5981,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 113.777919][ T5981] (syz.0.28,5981,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 113.786262][ T5981] (syz.0.28,5981,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 113.794555][ T5981] (syz.0.28,5981,1):ocfs2_mknod:385 ERROR: status = -30 [ 113.802700][ T5981] (syz.0.28,5981,1):ocfs2_mknod:502 ERROR: status = -30 [ 113.809806][ T5981] (syz.0.28,5981,1):ocfs2_create:676 ERROR: status = -30 [ 113.827744][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 114.115964][ T5984] loop0: detected capacity change from 0 to 32768 [ 114.142435][ T5984] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.155564][ T5984] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 114.171484][ T5984] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 114.182974][ T5984] OCFS2: File system is now read-only. [ 114.188502][ T5984] (syz.0.29,5984,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 114.197592][ T5984] (syz.0.29,5984,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 114.207435][ T5984] (syz.0.29,5984,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 114.216279][ T5984] (syz.0.29,5984,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 114.226178][ T5984] (syz.0.29,5984,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 114.234784][ T5984] (syz.0.29,5984,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 114.245266][ T5984] (syz.0.29,5984,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 114.261275][ T5984] (syz.0.29,5984,0):ocfs2_mknod:385 ERROR: status = -30 [ 114.269892][ T5984] (syz.0.29,5984,0):ocfs2_mknod:502 ERROR: status = -30 [ 114.277327][ T5984] (syz.0.29,5984,0):ocfs2_create:676 ERROR: status = -30 [ 114.296257][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 114.629797][ T5987] loop0: detected capacity change from 0 to 32768 [ 114.650164][ T5987] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.663157][ T5987] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 114.678825][ T5987] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 114.689536][ T5987] OCFS2: File system is now read-only. [ 114.695149][ T5987] (syz.0.30,5987,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 114.702896][ T5987] (syz.0.30,5987,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 114.710585][ T5987] (syz.0.30,5987,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 114.719258][ T5987] (syz.0.30,5987,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 114.728029][ T5987] (syz.0.30,5987,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 114.736674][ T5987] (syz.0.30,5987,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 114.744958][ T5987] (syz.0.30,5987,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 114.752706][ T5987] (syz.0.30,5987,0):ocfs2_mknod:385 ERROR: status = -30 [ 114.759825][ T5987] (syz.0.30,5987,0):ocfs2_mknod:502 ERROR: status = -30 [ 114.766873][ T5987] (syz.0.30,5987,0):ocfs2_create:676 ERROR: status = -30 [ 114.783096][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 115.109436][ T5990] loop0: detected capacity change from 0 to 32768 [ 115.136625][ T5990] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.150713][ T5990] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 115.166708][ T5990] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 115.178912][ T5990] OCFS2: File system is now read-only. [ 115.184759][ T5990] (syz.0.31,5990,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 115.193079][ T5990] (syz.0.31,5990,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 115.200833][ T5990] (syz.0.31,5990,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 115.210061][ T5990] (syz.0.31,5990,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 115.218798][ T5990] (syz.0.31,5990,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 115.227266][ T5990] (syz.0.31,5990,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 115.236604][ T5990] (syz.0.31,5990,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 115.245142][ T5990] (syz.0.31,5990,0):ocfs2_mknod:385 ERROR: status = -30 [ 115.253762][ T5990] (syz.0.31,5990,0):ocfs2_mknod:502 ERROR: status = -30 [ 115.260768][ T5990] (syz.0.31,5990,0):ocfs2_create:676 ERROR: status = -30 [ 115.278778][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 115.570494][ T5993] loop0: detected capacity change from 0 to 32768 [ 115.601804][ T5993] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 115.614474][ T5993] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 115.631150][ T5993] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 115.642806][ T5993] OCFS2: File system is now read-only. [ 115.648332][ T5993] (syz.0.32,5993,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 115.656681][ T5993] (syz.0.32,5993,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 115.665633][ T5993] (syz.0.32,5993,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 115.674526][ T5993] (syz.0.32,5993,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 115.683163][ T5993] (syz.0.32,5993,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 115.691188][ T5993] (syz.0.32,5993,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 115.700749][ T5993] (syz.0.32,5993,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 115.711175][ T5993] (syz.0.32,5993,1):ocfs2_mknod:385 ERROR: status = -30 [ 115.718734][ T5993] (syz.0.32,5993,1):ocfs2_mknod:502 ERROR: status = -30 [ 115.727037][ T5993] (syz.0.32,5993,1):ocfs2_create:676 ERROR: status = -30 [ 115.746382][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 116.030897][ T5996] loop0: detected capacity change from 0 to 32768 [ 116.059453][ T5996] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.071959][ T5996] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature  [ 116.088064][ T5996] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 116.098428][ T5996] OCFS2: File system is now read-only. [ 116.104816][ T5996] (syz.0.33,5996,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 116.112851][ T5996] (syz.0.33,5996,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 116.120554][ T5996] (syz.0.33,5996,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 116.129409][ T5996] (syz.0.33,5996,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 116.138063][ T5996] (syz.0.33,5996,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 116.147925][ T5996] (syz.0.33,5996,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 116.156365][ T5996] (syz.0.33,5996,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 116.165473][ T5996] (syz.0.33,5996,1):ocfs2_mknod:385 ERROR: status = -30 [ 116.173502][ T5996] (syz.0.33,5996,1):ocfs2_mknod:502 ERROR: status = -30 [ 116.180568][ T5996] (syz.0.33,5996,1):ocfs2_create:676 ERROR: status = -30 [ 116.200069][ T5897] ocfs2: Unmounting device (7,0) on (node local) [ 116.496136][ T5999] loop0: detected capacity change from 0 to 32768 [ 116.533263][ T5999] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 116.545525][ T5999] ================================================================== [ 116.553642][ T5999] BUG: KASAN: use-after-free in ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 116.561958][ T5999] Read of size 4 at addr ffff888060a32000 by task syz.0.34/5999 [ 116.569621][ T5999] [ 116.571984][ T5999] CPU: 0 PID: 5999 Comm: syz.0.34 Not tainted 6.6.101-syzkaller #0 [ 116.579912][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.590005][ T5999] Call Trace: [ 116.593322][ T5999] [ 116.596290][ T5999] dump_stack_lvl+0x16c/0x230 [ 116.601026][ T5999] ? __lock_acquire+0x7c80/0x7c80 [ 116.606094][ T5999] ? show_regs_print_info+0x20/0x20 [ 116.611335][ T5999] ? load_image+0x3b0/0x3b0 [ 116.615901][ T5999] ? __virt_addr_valid+0x469/0x540 [ 116.621059][ T5999] print_report+0xac/0x220 [ 116.625514][ T5999] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 116.631459][ T5999] kasan_report+0x117/0x150 [ 116.636001][ T5999] ? mark_lock+0x94/0x320 [ 116.640368][ T5999] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 116.646313][ T5999] ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 116.652095][ T5999] ? ocfs2_claim_metadata+0x4a0/0x4a0 [ 116.657531][ T5999] ocfs2_claim_new_inode+0x32a/0x780 [ 116.662893][ T5999] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 116.669553][ T5999] ? mark_lock+0x94/0x320 [ 116.673918][ T5999] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 116.679999][ T5999] ? lock_chain_count+0x20/0x20 [ 116.684873][ T5999] ocfs2_mknod_locked+0x101/0x250 [ 116.689914][ T5999] ? trace_ocfs2_symlink_create+0x210/0x210 [ 116.695818][ T5999] ? dquot_alloc_inode+0x211/0xa40 [ 116.700961][ T5999] ? ocfs2_block_signals+0x95/0xd0 [ 116.706096][ T5999] ? ocfs2_free_mem_caches+0x50/0x50 [ 116.711407][ T5999] ? ocfs2_init_security_get+0x139/0x1a0 [ 116.717088][ T5999] ocfs2_mknod+0x107e/0x20f0 [ 116.721705][ T5999] ? ocfs2_mkdir+0x410/0x410 [ 116.726314][ T5999] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 116.732265][ T5999] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 116.738192][ T5999] ? ocfs2_inode_unlock+0xa5/0x140 [ 116.743318][ T5999] ? __lock_acquire+0x7c80/0x7c80 [ 116.748354][ T5999] ? __rwlock_init+0x150/0x150 [ 116.753136][ T5999] ? do_raw_spin_unlock+0x121/0x230 [ 116.758351][ T5999] ? rcu_is_watching+0x15/0xb0 [ 116.763132][ T5999] ? ocfs2_lookup+0x495/0x940 [ 116.767823][ T5999] ocfs2_create+0x196/0x410 [ 116.772346][ T5999] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 116.778601][ T5999] ? from_kgid+0x15d/0x680 [ 116.783033][ T5999] ? ocfs2_lookup+0x940/0x940 [ 116.787728][ T5999] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 116.792688][ T5999] ? inode_permission+0xf3/0x480 [ 116.797646][ T5999] ? bpf_lsm_inode_create+0x9/0x10 [ 116.802768][ T5999] ? security_inode_create+0xb7/0x100 [ 116.808155][ T5999] ? ocfs2_lookup+0x940/0x940 [ 116.812843][ T5999] path_openat+0x1277/0x3190 [ 116.817471][ T5999] ? do_filp_open+0x3d0/0x3d0 [ 116.822174][ T5999] do_filp_open+0x1c5/0x3d0 [ 116.826696][ T5999] ? vfs_tmpfile+0x490/0x490 [ 116.831316][ T5999] ? _raw_spin_unlock+0x28/0x40 [ 116.836187][ T5999] ? alloc_fd+0x58f/0x630 [ 116.840556][ T5999] do_sys_openat2+0x12c/0x1c0 [ 116.845251][ T5999] ? do_sys_open+0xe0/0xe0 [ 116.849678][ T5999] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 116.855671][ T5999] ? lock_chain_count+0x20/0x20 [ 116.860536][ T5999] __x64_sys_creat+0x90/0xb0 [ 116.865145][ T5999] do_syscall_64+0x55/0xb0 [ 116.869571][ T5999] ? clear_bhb_loop+0x40/0x90 [ 116.874259][ T5999] ? clear_bhb_loop+0x40/0x90 [ 116.878950][ T5999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.884871][ T5999] RIP: 0033:0x7f59c498eb69 [ 116.889311][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.908931][ T5999] RSP: 002b:00007fff7445f5f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 116.917445][ T5999] RAX: ffffffffffffffda RBX: 00007f59c4bb5fa0 RCX: 00007f59c498eb69 [ 116.925457][ T5999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000d80 [ 116.933441][ T5999] RBP: 00007f59c4a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 116.941421][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.949406][ T5999] R13: 00007f59c4bb5fa0 R14: 00007f59c4bb5fa0 R15: 0000000000000002 [ 116.957394][ T5999] [ 116.960423][ T5999] [ 116.962752][ T5999] The buggy address belongs to the physical page: [ 116.969175][ T5999] page:ffffea0001828c80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x60a32 [ 116.979338][ T5999] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 116.986457][ T5999] page_type: 0xffffffff() [ 116.990794][ T5999] raw: 00fff00000000000 ffffea0001828588 ffff8880b8e42360 0000000000000000 [ 116.999386][ T5999] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 117.007971][ T5999] page dumped because: kasan: bad access detected [ 117.014406][ T5999] page_owner tracks the page as freed [ 117.019809][ T5999] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5999, tgid 5999 (syz.0.34), ts 116236477085, free_ts 116494959321 [ 117.038332][ T5999] post_alloc_hook+0x1cd/0x210 [ 117.043120][ T5999] get_page_from_freelist+0x195c/0x19f0 [ 117.048685][ T5999] __alloc_pages+0x1e3/0x460 [ 117.053290][ T5999] __folio_alloc+0x10/0x20 [ 117.057722][ T5999] vma_alloc_folio+0x47a/0x8f0 [ 117.062518][ T5999] handle_mm_fault+0x1a38/0x4920 [ 117.067994][ T5999] do_user_addr_fault+0xad0/0x12e0 [ 117.073206][ T5999] exc_page_fault+0x67/0x110 [ 117.077814][ T5999] asm_exc_page_fault+0x26/0x30 [ 117.082691][ T5999] page last free stack trace: [ 117.087367][ T5999] free_unref_page_prepare+0x7ce/0x8e0 [ 117.092850][ T5999] free_unref_page_list+0xbe/0x860 [ 117.097984][ T5999] release_pages+0x1fa0/0x2220 [ 117.102796][ T5999] tlb_flush_mmu+0x368/0x4f0 [ 117.107403][ T5999] tlb_finish_mmu+0xc3/0x1d0 [ 117.112010][ T5999] unmap_region+0x2ed/0x340 [ 117.116550][ T5999] do_vmi_align_munmap+0xffe/0x1660 [ 117.121760][ T5999] do_vmi_munmap+0x252/0x2d0 [ 117.126364][ T5999] __vm_munmap+0x193/0x3c0 [ 117.130796][ T5999] __x64_sys_munmap+0x60/0x70 [ 117.135493][ T5999] do_syscall_64+0x55/0xb0 [ 117.139922][ T5999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.145838][ T5999] [ 117.148171][ T5999] Memory state around the buggy address: [ 117.153818][ T5999] ffff888060a31f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 117.161894][ T5999] ffff888060a31f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 117.169962][ T5999] >ffff888060a32000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 117.178037][ T5999] ^ [ 117.182112][ T5999] ffff888060a32080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 117.190177][ T5999] ffff888060a32100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 117.198243][ T5999] ================================================================== [ 117.211747][ T5999] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 117.218994][ T5999] CPU: 0 PID: 5999 Comm: syz.0.34 Not tainted 6.6.101-syzkaller #0 [ 117.226921][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.237002][ T5999] Call Trace: [ 117.240286][ T5999] [ 117.243219][ T5999] dump_stack_lvl+0x16c/0x230 [ 117.247909][ T5999] ? show_regs_print_info+0x20/0x20 [ 117.253116][ T5999] ? load_image+0x3b0/0x3b0 [ 117.257634][ T5999] panic+0x2c0/0x710 [ 117.261542][ T5999] ? bpf_jit_dump+0xd0/0xd0 [ 117.266057][ T5999] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 117.271964][ T5999] ? _raw_spin_unlock+0x40/0x40 [ 117.276835][ T5999] ? print_memory_metadata+0x314/0x400 [ 117.282328][ T5999] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 117.288264][ T5999] check_panic_on_warn+0x84/0xa0 [ 117.293211][ T5999] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 117.299112][ T5999] end_report+0x6f/0x140 [ 117.303363][ T5999] kasan_report+0x128/0x150 [ 117.307882][ T5999] ? mark_lock+0x94/0x320 [ 117.312248][ T5999] ? ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 117.318172][ T5999] ocfs2_claim_suballoc_bits+0xeb0/0x2230 [ 117.323942][ T5999] ? ocfs2_claim_metadata+0x4a0/0x4a0 [ 117.329346][ T5999] ocfs2_claim_new_inode+0x32a/0x780 [ 117.334669][ T5999] ? trace_ocfs2_claim_new_inode_at_loc+0x1c0/0x1c0 [ 117.341295][ T5999] ? mark_lock+0x94/0x320 [ 117.345635][ T5999] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 117.351714][ T5999] ? lock_chain_count+0x20/0x20 [ 117.356573][ T5999] ocfs2_mknod_locked+0x101/0x250 [ 117.361614][ T5999] ? trace_ocfs2_symlink_create+0x210/0x210 [ 117.367527][ T5999] ? dquot_alloc_inode+0x211/0xa40 [ 117.372678][ T5999] ? ocfs2_block_signals+0x95/0xd0 [ 117.377897][ T5999] ? ocfs2_free_mem_caches+0x50/0x50 [ 117.383208][ T5999] ? ocfs2_init_security_get+0x139/0x1a0 [ 117.388865][ T5999] ocfs2_mknod+0x107e/0x20f0 [ 117.393480][ T5999] ? ocfs2_mkdir+0x410/0x410 [ 117.398087][ T5999] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 117.404002][ T5999] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 117.409929][ T5999] ? ocfs2_inode_unlock+0xa5/0x140 [ 117.415054][ T5999] ? __lock_acquire+0x7c80/0x7c80 [ 117.420091][ T5999] ? __rwlock_init+0x150/0x150 [ 117.424896][ T5999] ? do_raw_spin_unlock+0x121/0x230 [ 117.430110][ T5999] ? rcu_is_watching+0x15/0xb0 [ 117.434898][ T5999] ? ocfs2_lookup+0x495/0x940 [ 117.439582][ T5999] ocfs2_create+0x196/0x410 [ 117.444122][ T5999] ? ocfs2_update_inode_fsync_trans+0x240/0x240 [ 117.450368][ T5999] ? from_kgid+0x15d/0x680 [ 117.454793][ T5999] ? ocfs2_lookup+0x940/0x940 [ 117.459504][ T5999] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 117.464477][ T5999] ? inode_permission+0xf3/0x480 [ 117.469423][ T5999] ? bpf_lsm_inode_create+0x9/0x10 [ 117.474572][ T5999] ? security_inode_create+0xb7/0x100 [ 117.479967][ T5999] ? ocfs2_lookup+0x940/0x940 [ 117.484653][ T5999] path_openat+0x1277/0x3190 [ 117.489265][ T5999] ? do_filp_open+0x3d0/0x3d0 [ 117.493960][ T5999] do_filp_open+0x1c5/0x3d0 [ 117.498494][ T5999] ? vfs_tmpfile+0x490/0x490 [ 117.503134][ T5999] ? _raw_spin_unlock+0x28/0x40 [ 117.508050][ T5999] ? alloc_fd+0x58f/0x630 [ 117.512423][ T5999] do_sys_openat2+0x12c/0x1c0 [ 117.517129][ T5999] ? do_sys_open+0xe0/0xe0 [ 117.521565][ T5999] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 117.527567][ T5999] ? lock_chain_count+0x20/0x20 [ 117.532450][ T5999] __x64_sys_creat+0x90/0xb0 [ 117.537059][ T5999] do_syscall_64+0x55/0xb0 [ 117.541515][ T5999] ? clear_bhb_loop+0x40/0x90 [ 117.546206][ T5999] ? clear_bhb_loop+0x40/0x90 [ 117.550898][ T5999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.556833][ T5999] RIP: 0033:0x7f59c498eb69 [ 117.561260][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.580890][ T5999] RSP: 002b:00007fff7445f5f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 117.589321][ T5999] RAX: ffffffffffffffda RBX: 00007f59c4bb5fa0 RCX: 00007f59c498eb69 [ 117.597309][ T5999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000d80 [ 117.605288][ T5999] RBP: 00007f59c4a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 117.613262][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.621267][ T5999] R13: 00007f59c4bb5fa0 R14: 00007f59c4bb5fa0 R15: 0000000000000002 [ 117.629281][ T5999] [ 117.632611][ T5999] Kernel Offset: disabled [ 117.636939][ T5999] Rebooting in 86400 seconds..