[ 138.080101][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[ 138.083207][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
Warning: Permanently added '[localhost]:59580' (ED25519) to the list of known hosts.
2025/06/13 19:15:00 ignoring optional flag "sandboxArg"="0"
2025/06/13 19:15:02 parsed 1 programs
[ 149.157005][ T5663] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 156.103858][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 156.111167][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 156.145274][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 156.150600][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 158.043595][ T5731] chnl_net:caif_netlink_parms(): no params data found
[ 158.110969][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state
[ 158.114338][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state
[ 158.119217][ T5731] bridge_slave_0: entered allmulticast mode
[ 158.122939][ T5731] bridge_slave_0: entered promiscuous mode
[ 158.129666][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state
[ 158.132988][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state
[ 158.137305][ T5731] bridge_slave_1: entered allmulticast mode
[ 158.141379][ T5731] bridge_slave_1: entered promiscuous mode
[ 158.169391][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 158.187282][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 158.232787][ T5731] team0: Port device team_slave_0 added
[ 158.248976][ T5731] team0: Port device team_slave_1 added
[ 158.292097][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 158.295305][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 158.336079][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 158.343060][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 158.356061][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 158.376784][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 158.452489][ T5731] hsr_slave_0: entered promiscuous mode
[ 158.466232][ T5731] hsr_slave_1: entered promiscuous mode
[ 159.521185][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 159.539743][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 159.561169][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 159.568867][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 159.733420][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0
[ 159.778933][ T5731] 8021q: adding VLAN 0 to HW filter on device team0
[ 159.805598][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 159.809014][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 159.814059][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 159.818065][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 160.250363][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 160.342691][ T5731] veth0_vlan: entered promiscuous mode
[ 160.362296][ T5731] veth1_vlan: entered promiscuous mode
[ 160.418457][ T5731] veth0_macvtap: entered promiscuous mode
[ 160.437458][ T5731] veth1_macvtap: entered promiscuous mode
[ 160.488604][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 160.527543][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 160.538497][ T5731] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.542760][ T5731] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.566901][ T5731] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.571719][ T5731] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 160.907589][ T5391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 160.913391][ T5391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 160.926065][ T5391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 160.933614][ T5391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 160.938726][ T5391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 160.960619][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 161.077411][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 162.017619][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/06/13 19:15:21 executed programs: 0
[ 162.680849][ T4672] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 162.689828][ T4672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 162.694499][ T4672] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 162.700160][ T4672] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 162.703729][ T4672] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 162.927721][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 163.080520][ T5807] chnl_net:caif_netlink_parms(): no params data found
[ 163.382161][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state
[ 163.395781][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state
[ 163.399417][ T5807] bridge_slave_0: entered allmulticast mode
[ 163.403552][ T5807] bridge_slave_0: entered promiscuous mode
[ 163.417565][ T31] bridge_slave_1: left allmulticast mode
[ 163.420545][ T31] bridge_slave_1: left promiscuous mode
[ 163.423801][ T31] bridge0: port 2(bridge_slave_1) entered disabled state
[ 163.444767][ T31] bridge_slave_0: left allmulticast mode
[ 163.457708][ T31] bridge_slave_0: left promiscuous mode
[ 163.461313][ T31] bridge0: port 1(bridge_slave_0) entered disabled state
[ 163.817817][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 163.823533][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 163.831518][ T31] bond0 (unregistering): Released all slaves
[ 163.848159][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state
[ 163.851607][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state
[ 163.855247][ T5807] bridge_slave_1: entered allmulticast mode
[ 163.861365][ T5807] bridge_slave_1: entered promiscuous mode
[ 163.942456][ T31] hsr_slave_0: left promiscuous mode
[ 163.955918][ T31] hsr_slave_1: left promiscuous mode
[ 163.958903][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 163.962413][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 163.980960][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 163.984832][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 164.013635][ T31] veth1_macvtap: left promiscuous mode
[ 164.025651][ T31] veth0_macvtap: left promiscuous mode
[ 164.028539][ T31] veth1_vlan: left promiscuous mode
[ 164.031303][ T31] veth0_vlan: left promiscuous mode
[ 164.710997][ T31] team0 (unregistering): Port device team_slave_1 removed
[ 164.764625][ T31] team0 (unregistering): Port device team_slave_0 removed
[ 164.797020][ T4672] Bluetooth: hci0: command tx timeout
[ 165.311677][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 165.332709][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 165.424351][ T5807] team0: Port device team_slave_0 added
[ 165.444294][ T5807] team0: Port device team_slave_1 added
[ 165.528324][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 165.532112][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 165.566272][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 165.597219][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 165.601088][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 165.626985][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 165.882221][ T5807] hsr_slave_0: entered promiscuous mode
[ 165.906423][ T5807] hsr_slave_1: entered promiscuous mode
[ 166.471698][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 166.498576][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 166.507393][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 166.535194][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 166.719158][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0
[ 166.757011][ T5807] 8021q: adding VLAN 0 to HW filter on device team0
[ 166.782435][ T31] bridge0: port 1(bridge_slave_0) entered blocking state
[ 166.785712][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 166.811991][ T31] bridge0: port 2(bridge_slave_1) entered blocking state
[ 166.815181][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 166.882144][ T4672] Bluetooth: hci0: command tx timeout
[ 167.188890][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 167.269029][ T5807] veth0_vlan: entered promiscuous mode
[ 167.299238][ T5807] veth1_vlan: entered promiscuous mode
[ 167.368549][ T5807] veth0_macvtap: entered promiscuous mode
[ 167.379050][ T5807] veth1_macvtap: entered promiscuous mode
[ 167.417007][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 167.442946][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 167.460426][ T5807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 167.464740][ T5807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 167.486804][ T5807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 167.491424][ T5807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 167.649808][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 167.653480][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 167.728112][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 167.741430][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/06/13 19:15:26 executed programs: 2
[ 168.337616][ T5883] loop0: detected capacity change from 0 to 32768
[ 168.376215][ T5883] =======================================================
[ 168.376215][ T5883] WARNING: The mand mount option has been deprecated and
[ 168.376215][ T5883] and is ignored by this kernel. Remove the mand
[ 168.376215][ T5883] option from the mount to silence this warning.
[ 168.376215][ T5883] =======================================================
[ 168.547660][ T5883] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 168.589343][ T5807] ==================================================================
[ 168.593014][ T5807] BUG: KASAN: slab-out-of-bounds in __ocfs2_flush_truncate_log+0x7c7/0x10e0
[ 168.597682][ T5807] Read of size 4 at addr ffff88804f9c92c0 by task syz-executor/5807
[ 168.602783][ T5807]
[ 168.603910][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-g02adc1490e6d #0 PREEMPT(full)
[ 168.603928][ T5807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 168.603951][ T5807] Call Trace:
[ 168.603959][ T5807]
[ 168.603967][ T5807] dump_stack_lvl+0x189/0x250
[ 168.603990][ T5807] ? __virt_addr_valid+0x1c8/0x5c0
[ 168.604002][ T5807] ? rcu_is_watching+0x15/0xb0
[ 168.604020][ T5807] ? __kasan_check_byte+0x12/0x40
[ 168.604032][ T5807] ? __pfx_dump_stack_lvl+0x10/0x10
[ 168.604053][ T5807] ? rcu_is_watching+0x15/0xb0
[ 168.604070][ T5807] ? lock_release+0x4b/0x3e0
[ 168.604088][ T5807] ? __virt_addr_valid+0x1c8/0x5c0
[ 168.604099][ T5807] ? __virt_addr_valid+0x4a5/0x5c0
[ 168.604111][ T5807] print_report+0xd2/0x2b0
[ 168.604126][ T5807] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0
[ 168.604141][ T5807] kasan_report+0x118/0x150
[ 168.604153][ T5807] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0
[ 168.604170][ T5807] __ocfs2_flush_truncate_log+0x7c7/0x10e0
[ 168.604189][ T5807] ? __pfx___ocfs2_flush_truncate_log+0x10/0x10
[ 168.604204][ T5807] ? ocfs2_flush_truncate_log+0x47/0x70
[ 168.604219][ T5807] ? __lock_acquire+0xab9/0xd20
[ 168.604236][ T5807] ? down_write+0x162/0x1f0
[ 168.604293][ T5807] ? __pfx_down_write+0x10/0x10
[ 168.604308][ T5807] ocfs2_flush_truncate_log+0x4f/0x70
[ 168.604323][ T5807] ocfs2_sync_fs+0x116/0x310
[ 168.604335][ T5807] ? __pfx_ocfs2_sync_fs+0x10/0x10
[ 168.604345][ T5807] ? __pfx___writeback_inodes_sb_nr+0x10/0x10
[ 168.604363][ T5807] ? __dentry_kill+0x53d/0x660
[ 168.604376][ T5807] ? get_nr_dirty_inodes+0x1c4/0x210
[ 168.604390][ T5807] sync_filesystem+0x1cc/0x230
[ 168.604404][ T5807] generic_shutdown_super+0x6f/0x2c0
[ 168.604421][ T5807] kill_block_super+0x44/0x90
[ 168.604433][ T5807] deactivate_locked_super+0xb9/0x130
[ 168.604449][ T5807] cleanup_mnt+0x425/0x4c0
[ 168.604465][ T5807] ? lockdep_hardirqs_on+0x9c/0x150
[ 168.604484][ T5807] task_work_run+0x1d1/0x260
[ 168.604499][ T5807] ? __pfx_task_work_run+0x10/0x10
[ 168.604511][ T5807] ? __x64_sys_umount+0x122/0x160
[ 168.604523][ T5807] ? exit_to_user_mode_loop+0x40/0x110
[ 168.604540][ T5807] exit_to_user_mode_loop+0xec/0x110
[ 168.604555][ T5807] do_syscall_64+0x2bd/0x3b0
[ 168.604566][ T5807] ? lockdep_hardirqs_on+0x9c/0x150
[ 168.604581][ T5807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 168.604593][ T5807] ? clear_bhb_loop+0x60/0xb0
[ 168.604605][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 168.604617][ T5807] RIP: 0033:0x7f5b9478fc97
[ 168.604629][ T5807] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 168.604639][ T5807] RSP: 002b:00007ffefa55b418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 168.604653][ T5807] RAX: 0000000000000000 RBX: 00007f5b9481089d RCX: 00007f5b9478fc97
[ 168.604663][ T5807] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefa55b4d0
[ 168.604671][ T5807] RBP: 00007ffefa55b4d0 R08: 0000000000000000 R09: 0000000000000000
[ 168.604679][ T5807] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefa55c560
[ 168.604688][ T5807] R13: 00007f5b9481089d R14: 00000000000291bd R15: 00007ffefa55c5a0
[ 168.604701][ T5807]
[ 168.604706][ T5807]
[ 168.751578][ T5807] Allocated by task 5807:
[ 168.753474][ T5807] kasan_save_track+0x3e/0x80
[ 168.755413][ T5807] __kasan_slab_alloc+0x6c/0x80
[ 168.757564][ T5807] kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 168.760283][ T5807] __kernfs_new_node+0xd7/0x7e0
[ 168.762744][ T5807] kernfs_new_node+0x102/0x210
[ 168.765036][ T5807] __kernfs_create_file+0x4b/0x2e0
[ 168.767403][ T5807] sysfs_add_file_mode_ns+0x238/0x300
[ 168.769602][ T5807] internal_create_group+0x66d/0x1110
[ 168.772002][ T5807] sysfs_create_groups+0x59/0x120
[ 168.774368][ T5807] device_add_attrs+0x1c4/0x5a0
[ 168.777636][ T5807] device_add+0x496/0xb50
[ 168.780117][ T5807] netdev_register_kobject+0x156/0x2f0
[ 168.782483][ T5807] register_netdevice+0x126c/0x1ae0
[ 168.784710][ T5807] veth_newlink+0x42f/0xa50
[ 168.786626][ T5807] rtnl_newlink_create+0x30d/0xb00
[ 168.789113][ T5807] rtnl_newlink+0x16d6/0x1c70
[ 168.791559][ T5807] rtnetlink_rcv_msg+0x7cc/0xb70
[ 168.794139][ T5807] netlink_rcv_skb+0x208/0x470
[ 168.796497][ T5807] netlink_unicast+0x75b/0x8d0
[ 168.798719][ T5807] netlink_sendmsg+0x805/0xb30
[ 168.800859][ T5807] __sock_sendmsg+0x219/0x270
[ 168.802919][ T5807] __sys_sendto+0x3bd/0x520
[ 168.804938][ T5807] __x64_sys_sendto+0xde/0x100
[ 168.807274][ T5807] do_syscall_64+0xfa/0x3b0
[ 168.810006][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 168.812724][ T5807]
[ 168.814072][ T5807] The buggy address belongs to the object at ffff88804f9c91e0
[ 168.814072][ T5807] which belongs to the cache kernfs_node_cache of size 176
[ 168.820714][ T5807] The buggy address is located 48 bytes to the right of
[ 168.820714][ T5807] allocated 176-byte region [ffff88804f9c91e0, ffff88804f9c9290)
[ 168.827570][ T5807]
[ 168.828708][ T5807] The buggy address belongs to the physical page:
[ 168.831678][ T5807] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f9c9
[ 168.835676][ T5807] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 168.839345][ T5807] page_type: f5(slab)
[ 168.841433][ T5807] raw: 04fff00000000000 ffff888030412dc0 dead000000000122 0000000000000000
[ 168.845036][ T5807] raw: 0000000000000000 0000000000110011 00000000f5000000 0000000000000000
[ 168.848764][ T5807] page dumped because: kasan: bad access detected
[ 168.851580][ T5807] page_owner tracks the page as allocated
[ 168.854566][ T5807] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5807, tgid 5807 (syz-executor), ts 165470263912, free_ts 165466185829
[ 168.863849][ T5807] post_alloc_hook+0x240/0x2a0
[ 168.865936][ T5807] get_page_from_freelist+0x21e4/0x22c0
[ 168.868351][ T5807] __alloc_frozen_pages_noprof+0x181/0x370
[ 168.871156][ T5807] alloc_pages_mpol+0x232/0x4a0
[ 168.873808][ T5807] allocate_slab+0x8a/0x3b0
[ 168.875996][ T5807] ___slab_alloc+0xbfc/0x1480
[ 168.878053][ T5807] kmem_cache_alloc_noprof+0x283/0x3c0
[ 168.880459][ T5807] __kernfs_new_node+0xd7/0x7e0
[ 168.882635][ T5807] kernfs_new_node+0x102/0x210
[ 168.884915][ T5807] __kernfs_create_file+0x4b/0x2e0
[ 168.887840][ T5807] sysfs_add_file_mode_ns+0x238/0x300
[ 168.890760][ T5807] internal_create_group+0x66d/0x1110
[ 168.893118][ T5807] sysfs_create_groups+0x59/0x120
[ 168.895316][ T5807] device_add_attrs+0x1c4/0x5a0
[ 168.897568][ T5807] device_add+0x496/0xb50
[ 168.899488][ T5807] netdev_register_kobject+0x156/0x2f0
[ 168.902181][ T5807] page last free pid 10 tgid 10 stack trace:
[ 168.905263][ T5807] __free_frozen_pages+0xc71/0xe70
[ 168.907829][ T5807] vfree+0x25a/0x400
[ 168.909613][ T5807] delayed_vfree_work+0x55/0x80
[ 168.911766][ T5807] process_scheduled_works+0xae1/0x17b0
[ 168.914212][ T5807] worker_thread+0x8a0/0xda0
[ 168.916323][ T5807] kthread+0x70e/0x8a0
[ 168.918416][ T5807] ret_from_fork+0x3fc/0x770
[ 168.921159][ T5807] ret_from_fork_asm+0x1a/0x30
[ 168.923631][ T5807]
[ 168.924742][ T5807] Memory state around the buggy address:
[ 168.927200][ T5807] ffff88804f9c9180: 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 00
[ 168.930744][ T5807] ffff88804f9c9200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 168.934356][ T5807] >ffff88804f9c9280: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00
[ 168.939150][ T5807] ^
[ 168.941962][ T5807] ffff88804f9c9300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 168.945573][ T5807] ffff88804f9c9380: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[ 168.949088][ T5807] ==================================================================
[ 168.961145][ T4672] Bluetooth: hci0: command tx timeout
[ 169.158933][ T5807] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 169.162305][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-g02adc1490e6d #0 PREEMPT(full)
[ 169.167299][ T5807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 169.173934][ T5807] Call Trace:
[ 169.175967][ T5807]
[ 169.177649][ T5807] dump_stack_lvl+0x99/0x250
[ 169.179766][ T5807] ? __asan_memcpy+0x40/0x70
[ 169.181778][ T5807] ? __pfx_dump_stack_lvl+0x10/0x10
[ 169.184100][ T5807] ? __pfx__printk+0x10/0x10
[ 169.186171][ T5807] panic+0x2db/0x790
[ 169.187961][ T5807] ? __pfx_panic+0x10/0x10
[ 169.189897][ T5807] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 169.192522][ T5807] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 169.195341][ T5807] ? print_memory_metadata+0x314/0x400
[ 169.198062][ T5807] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0
[ 169.200702][ T5807] check_panic_on_warn+0x89/0xb0
[ 169.202871][ T5807] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0
[ 169.205521][ T5807] end_report+0x78/0x160
[ 169.207433][ T5807] kasan_report+0x129/0x150
[ 169.209779][ T5807] ? __ocfs2_flush_truncate_log+0x7c7/0x10e0
[ 169.213236][ T5807] __ocfs2_flush_truncate_log+0x7c7/0x10e0
[ 169.216661][ T5807] ? __pfx___ocfs2_flush_truncate_log+0x10/0x10
[ 169.220024][ T5807] ? ocfs2_flush_truncate_log+0x47/0x70
[ 169.222626][ T5807] ? __lock_acquire+0xab9/0xd20
[ 169.224783][ T5807] ? down_write+0x162/0x1f0
[ 169.227210][ T5807] ? __pfx_down_write+0x10/0x10
[ 169.229745][ T5807] ocfs2_flush_truncate_log+0x4f/0x70
[ 169.232527][ T5807] ocfs2_sync_fs+0x116/0x310
[ 169.234818][ T5807] ? __pfx_ocfs2_sync_fs+0x10/0x10
[ 169.237249][ T5807] ? __pfx___writeback_inodes_sb_nr+0x10/0x10
[ 169.239957][ T5807] ? __dentry_kill+0x53d/0x660
[ 169.242079][ T5807] ? get_nr_dirty_inodes+0x1c4/0x210
[ 169.244561][ T5807] sync_filesystem+0x1cc/0x230
[ 169.247107][ T5807] generic_shutdown_super+0x6f/0x2c0
[ 169.249795][ T5807] kill_block_super+0x44/0x90
[ 169.251896][ T5807] deactivate_locked_super+0xb9/0x130
[ 169.254217][ T5807] cleanup_mnt+0x425/0x4c0
[ 169.256208][ T5807] ? lockdep_hardirqs_on+0x9c/0x150
[ 169.258545][ T5807] task_work_run+0x1d1/0x260
[ 169.260736][ T5807] ? __pfx_task_work_run+0x10/0x10
[ 169.263737][ T5807] ? __x64_sys_umount+0x122/0x160
[ 169.266383][ T5807] ? exit_to_user_mode_loop+0x40/0x110
[ 169.269377][ T5807] exit_to_user_mode_loop+0xec/0x110
[ 169.271818][ T5807] do_syscall_64+0x2bd/0x3b0
[ 169.273813][ T5807] ? lockdep_hardirqs_on+0x9c/0x150
[ 169.276135][ T5807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 169.278937][ T5807] ? clear_bhb_loop+0x60/0xb0
[ 169.281483][ T5807] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 169.284995][ T5807] RIP: 0033:0x7f5b9478fc97
[ 169.287077][ T5807] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 169.295644][ T5807] RSP: 002b:00007ffefa55b418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 169.300020][ T5807] RAX: 0000000000000000 RBX: 00007f5b9481089d RCX: 00007f5b9478fc97
[ 169.303590][ T5807] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefa55b4d0
[ 169.307089][ T5807] RBP: 00007ffefa55b4d0 R08: 0000000000000000 R09: 0000000000000000
[ 169.310564][ T5807] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefa55c560
[ 169.315179][ T5807] R13: 00007f5b9481089d R14: 00000000000291bd R15: 00007ffefa55c5a0
[ 169.319642][ T5807]
[ 169.321328][ T5807] Kernel Offset: disabled
[ 169.323190][ T5807] Rebooting in 86400 seconds..