Warning: Permanently added '[localhost]:59219' (ED25519) to the list of known hosts.
2024/11/08 08:31:47 ignoring optional flag "sandboxArg"="0"
2024/11/08 08:31:47 ignoring optional flag "type"="qemu"
2024/11/08 08:31:48 parsed 1 programs
[ 117.051406][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 119.728583][ T4670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 119.734151][ T4670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 119.737958][ T4670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 119.741508][ T4670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 119.744533][ T4670] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 119.748531][ T4670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 120.585527][ T5628] chnl_net:caif_netlink_parms(): no params data found
[ 120.622431][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.625878][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.629775][ T5628] bridge_slave_0: entered allmulticast mode
[ 120.632607][ T5628] bridge_slave_0: entered promiscuous mode
[ 120.637386][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.640125][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.642738][ T5628] bridge_slave_1: entered allmulticast mode
[ 120.645583][ T5628] bridge_slave_1: entered promiscuous mode
[ 120.661267][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.666260][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.685076][ T5628] team0: Port device team_slave_0 added
[ 120.689772][ T5628] team0: Port device team_slave_1 added
[ 120.701180][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 120.703845][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 120.715408][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 120.721006][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 120.723502][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 120.734564][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 120.756149][ T5628] hsr_slave_0: entered promiscuous mode
[ 120.759176][ T5628] hsr_slave_1: entered promiscuous mode
[ 121.272258][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 121.280735][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 121.295725][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 121.310465][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 121.335550][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.338861][ T5628] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 121.341617][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.344305][ T5628] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 121.432558][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[ 121.458997][ T68] bridge0: port 1(bridge_slave_0) entered disabled state
[ 121.462764][ T68] bridge0: port 2(bridge_slave_1) entered disabled state
[ 121.482313][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[ 121.500675][ T68] bridge0: port 1(bridge_slave_0) entered blocking state
[ 121.504067][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 121.517661][ T68] bridge0: port 2(bridge_slave_1) entered blocking state
[ 121.520460][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 121.545086][ T5628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 121.568373][ T5628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 121.767636][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 121.822602][ T5628] veth0_vlan: entered promiscuous mode
[ 121.842389][ T5628] veth1_vlan: entered promiscuous mode
[ 121.878418][ T5628] veth0_macvtap: entered promiscuous mode
[ 121.900940][ T5628] veth1_macvtap: entered promiscuous mode
[ 121.922224][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 121.938346][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 121.948125][ T5628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.951528][ T5628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.955004][ T5628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.975367][ T5628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 122.189119][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 122.249267][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 122.335597][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 122.441863][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 124.727310][ T12] bridge_slave_1: left allmulticast mode
[ 124.729535][ T12] bridge_slave_1: left promiscuous mode
[ 124.731813][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 124.789880][ T12] bridge_slave_0: left allmulticast mode
[ 124.792287][ T12] bridge_slave_0: left promiscuous mode
[ 124.794573][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 125.348437][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 125.353383][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 125.358805][ T12] bond0 (unregistering): Released all slaves
[ 125.431272][ T12] hsr_slave_0: left promiscuous mode
[ 125.447404][ T12] hsr_slave_1: left promiscuous mode
[ 125.449975][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 125.452856][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 125.460293][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 125.463160][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 125.491306][ T12] veth1_macvtap: left promiscuous mode
[ 125.494359][ T12] veth0_macvtap: left promiscuous mode
[ 125.496547][ T12] veth1_vlan: left promiscuous mode
[ 125.514631][ T12] veth0_vlan: left promiscuous mode
[ 126.019527][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 126.058520][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 126.358549][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.361652][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.431485][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 126.439983][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2024/11/08 08:32:04 executed programs: 0
[ 126.593261][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 126.598641][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 126.601986][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 126.605127][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 126.608637][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 126.611546][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 127.263555][ T5791] chnl_net:caif_netlink_parms(): no params data found
[ 127.520363][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.539680][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[ 127.542548][ T5791] bridge_slave_0: entered allmulticast mode
[ 127.567990][ T5791] bridge_slave_0: entered promiscuous mode
[ 127.582253][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.596829][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[ 127.599681][ T5791] bridge_slave_1: entered allmulticast mode
[ 127.616371][ T5791] bridge_slave_1: entered promiscuous mode
[ 127.679917][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 127.684942][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 127.749892][ T5791] team0: Port device team_slave_0 added
[ 127.753924][ T5791] team0: Port device team_slave_1 added
[ 127.797379][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 127.800082][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 127.828122][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 127.857911][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 127.860421][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 127.886150][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 127.930598][ T5791] hsr_slave_0: entered promiscuous mode
[ 127.933317][ T5791] hsr_slave_1: entered promiscuous mode
[ 128.251164][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 128.271140][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 128.277575][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 128.290673][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 128.319724][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.322468][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 128.325175][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.327944][ T5791] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 128.400809][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[ 128.418775][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state
[ 128.422273][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state
[ 128.451095][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[ 128.469672][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state
[ 128.472975][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 128.500691][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 128.504214][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 128.530250][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 128.532949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 128.668439][ T4670] Bluetooth: hci0: command tx timeout
[ 128.691196][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 128.715252][ T5791] veth0_vlan: entered promiscuous mode
[ 128.723492][ T5791] veth1_vlan: entered promiscuous mode
[ 128.742918][ T5791] veth0_macvtap: entered promiscuous mode
[ 128.749695][ T5791] veth1_macvtap: entered promiscuous mode
[ 128.759685][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 128.769565][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 128.775844][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.780058][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.783515][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.788824][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.844525][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.852893][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.874983][ T4031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.878625][ T4031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 129.115282][ T5841] loop0: detected capacity change from 0 to 32768
[ 129.166545][ T5841] JBD2: Ignoring recovery information on journal
[ 129.199339][ T5841] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 129.217808][ T24] audit: type=1800 audit(1731054727.302:2): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15" name="file1" dev="loop0" ino=16946 res=0 errno=0
[ 129.249674][ T5791] ocfs2: Unmounting device (7,0) on (node local)
[ 129.534090][ T5845] loop0: detected capacity change from 0 to 32768
[ 129.560099][ T5845] JBD2: Ignoring recovery information on journal
[ 129.590696][ T5845] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 129.600781][ T24] audit: type=1800 audit(1731054727.692:3): pid=5845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16" name="file1" dev="loop0" ino=16946 res=0 errno=0
[ 129.619499][ T5791] ocfs2: Unmounting device (7,0) on (node local)
[ 129.888150][ T5849] loop0: detected capacity change from 0 to 32768
[ 129.920043][ T5849] JBD2: Ignoring recovery information on journal
[ 129.952209][ T5849] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 129.961791][ T24] audit: type=1800 audit(1731054728.052:4): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=16946 res=0 errno=0
[ 129.979610][ T5791] ocfs2: Unmounting device (7,0) on (node local)
[ 130.263113][ T5853] loop0: detected capacity change from 0 to 32768
[ 130.283648][ T5853] JBD2: Ignoring recovery information on journal
[ 130.320813][ T5853] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 130.326458][ T5853] ==================================================================
[ 130.329568][ T5853] BUG: KASAN: use-after-free in ocfs2_search_dirblock+0x26b/0x830
[ 130.332553][ T5853] Read of size 1 at addr ffff8880130d5982 by task syz.0.18/5853
[ 130.336461][ T5853]
[ 130.337419][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz.0.18 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0
[ 130.341379][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 130.345421][ T5853] Call Trace:
[ 130.346712][ T5853]
[ 130.347845][ T5853] dump_stack_lvl+0x241/0x360
[ 130.349764][ T5853] ? __pfx_dump_stack_lvl+0x10/0x10
[ 130.351776][ T5853] ? __pfx__printk+0x10/0x10
[ 130.353556][ T5853] ? _printk+0xd5/0x120
[ 130.355169][ T5853] ? __virt_addr_valid+0x183/0x530
[ 130.357136][ T5853] ? __virt_addr_valid+0x183/0x530
[ 130.359119][ T5853] print_report+0x169/0x550
[ 130.360895][ T5853] ? __virt_addr_valid+0x183/0x530
[ 130.362843][ T5853] ? __virt_addr_valid+0x183/0x530
[ 130.364836][ T5853] ? __virt_addr_valid+0x45f/0x530
[ 130.366819][ T5853] ? __phys_addr+0xba/0x170
[ 130.368544][ T5853] ? ocfs2_search_dirblock+0x26b/0x830
[ 130.370641][ T5853] kasan_report+0x143/0x180
[ 130.372382][ T5853] ? ocfs2_search_dirblock+0x26b/0x830
[ 130.374419][ T5853] ocfs2_search_dirblock+0x26b/0x830
[ 130.376456][ T5853] ? ocfs2_read_inode_block+0x14c/0x1e0
[ 130.378570][ T5853] ? __pfx_ocfs2_search_dirblock+0x10/0x10
[ 130.380753][ T5853] ? validate_chain+0x11e/0x5920
[ 130.382684][ T5853] ocfs2_find_entry+0x1169/0x2780
[ 130.384588][ T5853] ? mark_lock+0x9a/0x360
[ 130.386268][ T5853] ? __lock_acquire+0x1384/0x2050
[ 130.388178][ T5853] ? __pfx_ocfs2_find_entry+0x10/0x10
[ 130.390269][ T5853] ? __pfx_lock_acquire+0x10/0x10
[ 130.392223][ T5853] ? ocfs2_inode_lock_full_nested+0x17b/0x1c30
[ 130.394562][ T5853] ? __pfx_lock_release+0x10/0x10
[ 130.396520][ T5853] ? do_raw_spin_lock+0x14f/0x370
[ 130.398510][ T5853] ? do_raw_spin_unlock+0x58/0x8b0
[ 130.400534][ T5853] ? _raw_spin_unlock+0x28/0x50
[ 130.402479][ T5853] ? ocfs2_inode_lock_full_nested+0xb29/0x1c30
[ 130.404821][ T5853] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10
[ 130.407270][ T5853] ocfs2_find_files_on_disk+0xff/0x360
[ 130.409345][ T5853] ocfs2_lookup_ino_from_name+0xb1/0x1e0
[ 130.411499][ T5853] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10
[ 130.413868][ T5853] ocfs2_lookup+0x292/0xa60
[ 130.415608][ T5853] ? __pfx_ocfs2_lookup+0x10/0x10
[ 130.417509][ T5853] ? from_kgid+0x1a7/0x730
[ 130.419232][ T5853] ? make_vfsgid+0x51/0xa0
[ 130.420941][ T5853] ? HAS_UNMAPPED_ID+0xf9/0x150
[ 130.422847][ T5853] ? inode_permission+0xff/0x460
[ 130.424652][ T5853] ? __pfx_ocfs2_permission+0x10/0x10
[ 130.426702][ T5853] ? bpf_lsm_inode_create+0x9/0x10
[ 130.428626][ T5853] ? security_inode_create+0xbe/0x340
[ 130.430742][ T5853] ? __pfx_ocfs2_lookup+0x10/0x10
[ 130.432705][ T5853] path_openat+0x11a7/0x3590
[ 130.434498][ T5853] ? __pfx_path_openat+0x10/0x10
[ 130.436422][ T5853] do_filp_open+0x235/0x490
[ 130.438362][ T5853] ? __pfx_do_filp_open+0x10/0x10
[ 130.440251][ T5853] ? _raw_spin_unlock+0x28/0x50
[ 130.442119][ T5853] ? alloc_fd+0x5a1/0x640
[ 130.443716][ T5853] do_sys_openat2+0x13e/0x1d0
[ 130.445463][ T5853] ? __pfx_do_sys_openat2+0x10/0x10
[ 130.447412][ T5853] __x64_sys_openat+0x247/0x2a0
[ 130.449266][ T5853] ? __pfx___x64_sys_openat+0x10/0x10
[ 130.451393][ T5853] ? do_syscall_64+0x100/0x230
[ 130.453390][ T5853] ? do_syscall_64+0xb6/0x230
[ 130.455262][ T5853] do_syscall_64+0xf3/0x230
[ 130.456995][ T5853] ? clear_bhb_loop+0x35/0x90
[ 130.458786][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.461151][ T5853] RIP: 0033:0x7fa3611799b9
[ 130.462831][ T5853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 130.470132][ T5853] RSP: 002b:00007fa361fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 130.473279][ T5853] RAX: ffffffffffffffda RBX: 00007fa361315f80 RCX: 00007fa3611799b9
[ 130.476343][ T5853] RDX: 0000000000105042 RSI: 0000000020000080 RDI: ffffffffffffff9c
[ 130.479301][ T5853] RBP: 00007fa3611e78d8 R08: 0000000000000000 R09: 0000000000000000
[ 130.482270][ T5853] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000
[ 130.485337][ T5853] R13: 0000000000000000 R14: 00007fa361315f80 R15: 00007ffdf659e7e8
[ 130.488245][ T5853]
[ 130.489429][ T5853]
[ 130.490366][ T5853] The buggy address belongs to the physical page:
[ 130.492723][ T5853] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7f4c0dd39 pfn:0x130d5
[ 130.496306][ T5853] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 130.498942][ T5853] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[ 130.502093][ T5853] raw: 00000007f4c0dd39 0000000000000000 00000000ffffffff 0000000000000000
[ 130.505177][ T5853] page dumped because: kasan: bad access detected
[ 130.507525][ T5853] page_owner tracks the page as freed
[ 130.509491][ T5853] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5596, tgid 5596 (syz-executor), ts 114285396711, free_ts 119554545808
[ 130.516123][ T5853] post_alloc_hook+0x1f3/0x230
[ 130.517957][ T5853] get_page_from_freelist+0x303f/0x3190
[ 130.520120][ T5853] __alloc_pages_noprof+0x292/0x710
[ 130.522195][ T5853] alloc_pages_mpol_noprof+0x3e8/0x680
[ 130.524334][ T5853] vma_alloc_folio_noprof+0x12e/0x230
[ 130.526474][ T5853] folio_prealloc+0x31/0x170
[ 130.528224][ T5853] handle_pte_fault+0x24dd/0x6820
[ 130.530116][ T5853] handle_mm_fault+0x1106/0x1bb0
[ 130.532014][ T5853] exc_page_fault+0x459/0x8c0
[ 130.533740][ T5853] asm_exc_page_fault+0x26/0x30
[ 130.535344][ T5853] page last free pid 5596 tgid 5596 stack trace:
[ 130.537699][ T5853] free_unref_folios+0xf12/0x18d0
[ 130.539611][ T5853] folios_put_refs+0x76c/0x860
[ 130.541430][ T5853] free_pages_and_swap_cache+0x2ea/0x690
[ 130.543499][ T5853] tlb_flush_mmu+0x3a3/0x680
[ 130.545325][ T5853] tlb_finish_mmu+0xd4/0x200
[ 130.547112][ T5853] vms_clear_ptes+0x437/0x530
[ 130.548935][ T5853] vms_complete_munmap_vmas+0x208/0x910
[ 130.551008][ T5853] do_vmi_align_munmap+0x613/0x730
[ 130.552866][ T5853] do_vmi_munmap+0x24e/0x2d0
[ 130.554668][ T5853] __vm_munmap+0x24c/0x480
[ 130.556634][ T5853] __x64_sys_munmap+0x60/0x70
[ 130.558555][ T5853] do_syscall_64+0xf3/0x230
[ 130.560251][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.562457][ T5853]
[ 130.563360][ T5853] Memory state around the buggy address:
[ 130.565509][ T5853] ffff8880130d5880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 130.568351][ T5853] ffff8880130d5900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 130.571277][ T5853] >ffff8880130d5980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 130.574210][ T5853] ^
[ 130.575596][ T5853] ffff8880130d5a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 130.578615][ T5853] ffff8880130d5a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 130.581993][ T5853] ==================================================================
[ 130.604401][ T5853] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 130.607179][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz.0.18 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0
[ 130.611180][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 130.615265][ T5853] Call Trace:
[ 130.616625][ T5853]
[ 130.617929][ T5853] dump_stack_lvl+0x241/0x360
[ 130.619873][ T5853] ? __pfx_dump_stack_lvl+0x10/0x10
[ 130.621776][ T5853] ? __pfx__printk+0x10/0x10
[ 130.623385][ T5853] ? preempt_schedule+0xe1/0xf0
[ 130.625345][ T5853] ? vscnprintf+0x5d/0x90
[ 130.627014][ T5853] panic+0x349/0x880
[ 130.628513][ T5853] ? check_panic_on_warn+0x21/0xb0
[ 130.630499][ T5853] ? __pfx_panic+0x10/0x10
[ 130.632209][ T5853] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 130.634477][ T5853] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 130.636901][ T5853] ? print_report+0x502/0x550
[ 130.638718][ T5853] check_panic_on_warn+0x86/0xb0
[ 130.640598][ T5853] ? ocfs2_search_dirblock+0x26b/0x830
[ 130.642703][ T5853] end_report+0x77/0x160
[ 130.644254][ T5853] kasan_report+0x154/0x180
[ 130.646025][ T5853] ? ocfs2_search_dirblock+0x26b/0x830
[ 130.648286][ T5853] ocfs2_search_dirblock+0x26b/0x830
[ 130.650382][ T5853] ? ocfs2_read_inode_block+0x14c/0x1e0
[ 130.652429][ T5853] ? __pfx_ocfs2_search_dirblock+0x10/0x10
[ 130.654718][ T5853] ? validate_chain+0x11e/0x5920
[ 130.656597][ T5853] ocfs2_find_entry+0x1169/0x2780
[ 130.658518][ T5853] ? mark_lock+0x9a/0x360
[ 130.660178][ T5853] ? __lock_acquire+0x1384/0x2050
[ 130.662236][ T5853] ? __pfx_ocfs2_find_entry+0x10/0x10
[ 130.664304][ T5853] ? __pfx_lock_acquire+0x10/0x10
[ 130.666230][ T5853] ? ocfs2_inode_lock_full_nested+0x17b/0x1c30
[ 130.668586][ T5853] ? __pfx_lock_release+0x10/0x10
[ 130.670530][ T5853] ? do_raw_spin_lock+0x14f/0x370
[ 130.672518][ T5853] ? do_raw_spin_unlock+0x58/0x8b0
[ 130.674525][ T5853] ? _raw_spin_unlock+0x28/0x50
[ 130.676426][ T5853] ? ocfs2_inode_lock_full_nested+0xb29/0x1c30
[ 130.678817][ T5853] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10
[ 130.681227][ T5853] ocfs2_find_files_on_disk+0xff/0x360
[ 130.683384][ T5853] ocfs2_lookup_ino_from_name+0xb1/0x1e0
[ 130.685693][ T5853] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10
[ 130.688361][ T5853] ocfs2_lookup+0x292/0xa60
[ 130.690071][ T5853] ? __pfx_ocfs2_lookup+0x10/0x10
[ 130.692086][ T5853] ? from_kgid+0x1a7/0x730
[ 130.693789][ T5853] ? make_vfsgid+0x51/0xa0
[ 130.695394][ T5853] ? HAS_UNMAPPED_ID+0xf9/0x150
[ 130.697259][ T5853] ? inode_permission+0xff/0x460
[ 130.699221][ T5853] ? __pfx_ocfs2_permission+0x10/0x10
[ 130.701126][ T5853] ? bpf_lsm_inode_create+0x9/0x10
[ 130.703028][ T5853] ? security_inode_create+0xbe/0x340
[ 130.705050][ T5853] ? __pfx_ocfs2_lookup+0x10/0x10
[ 130.706948][ T5853] path_openat+0x11a7/0x3590
[ 130.708678][ T5853] ? __pfx_path_openat+0x10/0x10
[ 130.710520][ T5853] do_filp_open+0x235/0x490
[ 130.712239][ T5853] ? __pfx_do_filp_open+0x10/0x10
[ 130.714191][ T5853] ? _raw_spin_unlock+0x28/0x50
[ 130.716018][ T5853] ? alloc_fd+0x5a1/0x640
[ 130.717445][ T5853] do_sys_openat2+0x13e/0x1d0
[ 130.719240][ T5853] ? __pfx_do_sys_openat2+0x10/0x10
[ 130.721428][ T5853] __x64_sys_openat+0x247/0x2a0
[ 130.723306][ T5853] ? __pfx___x64_sys_openat+0x10/0x10
[ 130.725332][ T5853] ? do_syscall_64+0x100/0x230
[ 130.727136][ T5853] ? do_syscall_64+0xb6/0x230
[ 130.728927][ T5853] do_syscall_64+0xf3/0x230
[ 130.730675][ T5853] ? clear_bhb_loop+0x35/0x90
[ 130.732424][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.734635][ T5853] RIP: 0033:0x7fa3611799b9
[ 130.736326][ T5853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 130.743467][ T5853] RSP: 002b:00007fa361fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 130.746684][ T5853] RAX: ffffffffffffffda RBX: 00007fa361315f80 RCX: 00007fa3611799b9
[ 130.749743][ T5853] RDX: 0000000000105042 RSI: 0000000020000080 RDI: ffffffffffffff9c
[ 130.752727][ T5853] RBP: 00007fa3611e78d8 R08: 0000000000000000 R09: 0000000000000000
[ 130.755693][ T5853] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000
[ 130.758671][ T5853] R13: 0000000000000000 R14: 00007fa361315f80 R15: 00007ffdf659e7e8
[ 130.761785][ T5853]
[ 130.763191][ T5853] Kernel Offset: disabled
[ 130.764806][ T5853] Rebooting in 86400 seconds..