Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts.
2025/04/26 09:56:04 ignoring optional flag "sandboxArg"="0"
2025/04/26 09:56:06 parsed 1 programs
[ 132.191605][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.198371][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 136.605161][ T6277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 139.618953][ T5136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 139.627307][ T5136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 139.640051][ T5136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 139.649092][ T5136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 139.656814][ T5136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 142.219721][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 142.232737][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 142.340650][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 142.348732][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 143.235741][ T6354] chnl_net:caif_netlink_parms(): no params data found
[ 143.327556][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state
[ 143.334802][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state
[ 143.342277][ T6354] bridge_slave_0: entered allmulticast mode
[ 143.350320][ T6354] bridge_slave_0: entered promiscuous mode
[ 143.359928][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state
[ 143.367170][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state
[ 143.374569][ T6354] bridge_slave_1: entered allmulticast mode
[ 143.382875][ T6354] bridge_slave_1: entered promiscuous mode
[ 143.425695][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 143.438911][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 143.481013][ T6354] team0: Port device team_slave_0 added
[ 143.489344][ T6354] team0: Port device team_slave_1 added
[ 143.522972][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 143.530114][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 143.556449][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 143.569483][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 143.576613][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 143.602772][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 143.654565][ T6354] hsr_slave_0: entered promiscuous mode
[ 143.661851][ T6354] hsr_slave_1: entered promiscuous mode
[ 144.342954][ T6354] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 144.354381][ T6354] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 144.366002][ T6354] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 144.382696][ T6354] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 144.495002][ T6354] 8021q: adding VLAN 0 to HW filter on device bond0
[ 144.525566][ T6354] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.541555][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.548806][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.572915][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.580117][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.833994][ T6354] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 144.902661][ T6354] veth0_vlan: entered promiscuous mode
[ 144.921521][ T6354] veth1_vlan: entered promiscuous mode
[ 144.967055][ T6354] veth0_macvtap: entered promiscuous mode
[ 144.981160][ T6354] veth1_macvtap: entered promiscuous mode
[ 145.007219][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 145.024745][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 145.044372][ T6354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.056153][ T6354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.065612][ T6354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.076978][ T6354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.285421][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 145.402722][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 145.539326][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 145.658017][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/04/26 09:56:21 executed programs: 0
[ 146.576386][ T5136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 146.585360][ T5136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 146.593836][ T5136] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 146.602445][ T5136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 146.612719][ T5136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 146.882432][ T6458] chnl_net:caif_netlink_parms(): no params data found
[ 147.032174][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 147.039532][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 147.046740][ T6458] bridge_slave_0: entered allmulticast mode
[ 147.060802][ T6458] bridge_slave_0: entered promiscuous mode
[ 147.072450][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 147.079830][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 147.087053][ T6458] bridge_slave_1: entered allmulticast mode
[ 147.097301][ T6458] bridge_slave_1: entered promiscuous mode
[ 147.147244][ T6458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 147.164985][ T6458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 147.216937][ T6458] team0: Port device team_slave_0 added
[ 147.226803][ T6458] team0: Port device team_slave_1 added
[ 147.273371][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 147.281566][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 147.308452][ T6458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 147.322458][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 147.329816][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 147.356619][ T6458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 147.434700][ T6458] hsr_slave_0: entered promiscuous mode
[ 147.441926][ T6458] hsr_slave_1: entered promiscuous mode
[ 147.448648][ T6458] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 147.456211][ T6458] Cannot create hsr debugfs directory
[ 147.964811][ T13] bridge_slave_1: left allmulticast mode
[ 147.979043][ T13] bridge_slave_1: left promiscuous mode
[ 147.984820][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 148.010550][ T13] bridge_slave_0: left allmulticast mode
[ 148.016237][ T13] bridge_slave_0: left promiscuous mode
[ 148.047780][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 148.439260][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 148.451876][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 148.464689][ T13] bond0 (unregistering): Released all slaves
[ 148.583980][ T13] hsr_slave_0: left promiscuous mode
[ 148.590744][ T13] hsr_slave_1: left promiscuous mode
[ 148.596804][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 148.604662][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 148.613437][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 148.622882][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 148.646670][ T13] veth1_macvtap: left promiscuous mode
[ 148.652346][ T13] veth0_macvtap: left promiscuous mode
[ 148.660212][ T13] veth1_vlan: left promiscuous mode
[ 148.665562][ T13] veth0_vlan: left promiscuous mode
[ 148.681125][ T5136] Bluetooth: hci0: command tx timeout
[ 149.110455][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 149.144799][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 149.647235][ T6458] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 149.660600][ T6458] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 149.672598][ T6458] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 149.686556][ T6458] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 149.926605][ T6458] 8021q: adding VLAN 0 to HW filter on device bond0
[ 149.976080][ T6458] 8021q: adding VLAN 0 to HW filter on device team0
[ 150.013962][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 150.021168][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 150.035370][ T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.042564][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 150.327275][ T6458] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 150.395115][ T6458] veth0_vlan: entered promiscuous mode
[ 150.409217][ T6458] veth1_vlan: entered promiscuous mode
[ 150.451044][ T6458] veth0_macvtap: entered promiscuous mode
[ 150.461741][ T6458] veth1_macvtap: entered promiscuous mode
[ 150.482989][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 150.496351][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 150.514769][ T6458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 150.524400][ T6458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 150.533705][ T6458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 150.542948][ T6458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 150.642077][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 150.655987][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 150.700318][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 150.709973][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 150.747666][ T5136] Bluetooth: hci0: command tx timeout
[ 151.103077][ T6576] loop0: detected capacity change from 0 to 32768
[ 151.112172][ T6576] =======================================================
[ 151.112172][ T6576] WARNING: The mand mount option has been deprecated and
[ 151.112172][ T6576] and is ignored by this kernel. Remove the mand
[ 151.112172][ T6576] option from the mount to silence this warning.
[ 151.112172][ T6576] =======================================================
[ 151.202869][ T6576] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 151.222448][ T6576] (syz.0.16,6576,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=26105, inode=0, rec_len=0, name_len=0
[ 151.268208][ T6458] ocfs2: Unmounting device (7,0) on (node local)
[ 151.802337][ T6598] loop0: detected capacity change from 0 to 32768
[ 151.853559][ T6598] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 151.867278][ T6598] (syz.0.17,6598,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=26105, inode=0, rec_len=0, name_len=0
2025/04/26 09:56:27 executed programs: 4
[ 151.902570][ T6458] ocfs2: Unmounting device (7,0) on (node local)
[ 152.449607][ T6620] loop0: detected capacity change from 0 to 32768
[ 152.493937][ T6620] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 152.516039][ T6620] ==================================================================
[ 152.524147][ T6620] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x1149/0x18a0
[ 152.532152][ T6620] Read of size 2 at addr ffff88805b26c8c9 by task syz.0.18/6620
[ 152.539791][ T6620]
[ 152.542109][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.0.18 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full)
[ 152.542134][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 152.542147][ T6620] Call Trace:
[ 152.542157][ T6620]
[ 152.542166][ T6620] dump_stack_lvl+0x189/0x250
[ 152.542201][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542227][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542251][ T6620] ? __kasan_check_byte+0x12/0x40
[ 152.542277][ T6620] ? __pfx_dump_stack_lvl+0x10/0x10
[ 152.542311][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542335][ T6620] ? rcu_is_watching+0x15/0xb0
[ 152.542367][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542391][ T6620] ? lock_release+0x4b/0x3e0
[ 152.542424][ T6620] ? __virt_addr_valid+0x18c/0x540
[ 152.542452][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542476][ T6620] ? __virt_addr_valid+0x469/0x540
[ 152.542504][ T6620] print_report+0xb4/0x290
[ 152.542531][ T6620] ? ocfs2_dir_foreach_blk+0x1149/0x18a0
[ 152.542567][ T6620] kasan_report+0x118/0x150
[ 152.542592][ T6620] ? ocfs2_read_inode_block+0x11d/0x190
[ 152.542622][ T6620] ? ocfs2_dir_foreach_blk+0x1149/0x18a0
[ 152.542659][ T6620] ocfs2_dir_foreach_blk+0x1149/0x18a0
[ 152.542695][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542722][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542746][ T6620] ? _raw_spin_unlock+0x28/0x50
[ 152.542779][ T6620] ? __pfx_ocfs2_dir_foreach_blk+0x10/0x10
[ 152.542812][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542835][ T6620] ? ocfs2_inode_lock_atime+0x232/0x4e0
[ 152.542862][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542887][ T6620] ? __pfx_ocfs2_inode_lock_atime+0x10/0x10
[ 152.542917][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.542946][ T6620] ocfs2_readdir+0x254/0x4c0
[ 152.542978][ T6620] ? __pfx_ocfs2_readdir+0x10/0x10
[ 152.543008][ T6620] ? down_write+0x162/0x1f0
[ 152.543032][ T6620] ? __pfx_down_write+0x10/0x10
[ 152.543059][ T6620] ? __pfx_ocfs2_readdir+0x10/0x10
[ 152.543091][ T6620] wrap_directory_iterator+0x96/0xe0
[ 152.543115][ T6620] iterate_dir+0x5af/0x770
[ 152.543139][ T6620] __se_sys_getdents+0xe4/0x250
[ 152.543162][ T6620] ? __pfx___se_sys_getdents+0x10/0x10
[ 152.543183][ T6620] ? __pfx_filldir+0x10/0x10
[ 152.543209][ T6620] ? do_syscall_64+0xba/0x210
[ 152.543233][ T6620] do_syscall_64+0xf6/0x210
[ 152.543256][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 152.543279][ T6620] ? exc_page_fault+0x91/0x110
[ 152.543306][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 152.543327][ T6620] RIP: 0033:0x7f0de318cda9
[ 152.543345][ T6620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 152.543362][ T6620] RSP: 002b:00007f0de402d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 152.543383][ T6620] RAX: ffffffffffffffda RBX: 00007f0de33a5fa0 RCX: 00007f0de318cda9
[ 152.543399][ T6620] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 152.543412][ T6620] RBP: 00007f0de320e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 152.543425][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 152.543437][ T6620] R13: 0000000000000000 R14: 00007f0de33a5fa0 R15: 00007ffe8a6733c8
[ 152.543460][ T6620]
[ 152.543467][ T6620]
[ 152.867175][ T6620] The buggy address belongs to the physical page:
[ 152.873590][ T6620] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x5557e2ebb pfn:0x5b26c
[ 152.883050][ T6620] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 152.890262][ T6620] raw: 00fff00000000000 ffffea00016c9ac8 ffffea00016c9b48 0000000000000000
[ 152.898958][ T6620] raw: 00000005557e2ebb 0000000000000000 00000000ffffffff 0000000000000000
[ 152.907532][ T6620] page dumped because: kasan: bad access detected
[ 152.913939][ T6620] page_owner tracks the page as freed
[ 152.919325][ T6620] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 6630, tgid 6630 (sed), ts 152493263556, free_ts 152500789178
[ 152.937501][ T6620] post_alloc_hook+0x1d8/0x230
[ 152.942292][ T6620] get_page_from_freelist+0x21ce/0x22b0
[ 152.948055][ T6620] __alloc_frozen_pages_noprof+0x181/0x370
[ 152.953976][ T6620] alloc_pages_mpol+0x232/0x4a0
[ 152.958831][ T6620] vma_alloc_folio_noprof+0xe4/0x200
[ 152.964237][ T6620] folio_prealloc+0x30/0x180
[ 152.968958][ T6620] __handle_mm_fault+0x2b28/0x5380
[ 152.974073][ T6620] handle_mm_fault+0x3f6/0x8c0
[ 152.979012][ T6620] do_user_addr_fault+0xa81/0x1390
[ 152.984142][ T6620] exc_page_fault+0x68/0x110
[ 152.988786][ T6620] asm_exc_page_fault+0x26/0x30
[ 152.993641][ T6620] page last free pid 6629 tgid 6629 stack trace:
[ 153.000054][ T6620] free_unref_folios+0xb81/0x14a0
[ 153.005087][ T6620] folios_put_refs+0x559/0x640
[ 153.009849][ T6620] folio_batch_move_lru+0x319/0x3a0
[ 153.015044][ T6620] __folio_batch_add_and_move+0x5ad/0xd20
[ 153.020775][ T6620] do_wp_page+0x1ba5/0x5760
[ 153.025275][ T6620] __handle_mm_fault+0x1028/0x5380
[ 153.030409][ T6620] handle_mm_fault+0x3f6/0x8c0
[ 153.035191][ T6620] do_user_addr_fault+0xa81/0x1390
[ 153.040322][ T6620] exc_page_fault+0x68/0x110
[ 153.044910][ T6620] asm_exc_page_fault+0x26/0x30
[ 153.049767][ T6620]
[ 153.052081][ T6620] Memory state around the buggy address:
[ 153.057748][ T6620] ffff88805b26c780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 153.065804][ T6620] ffff88805b26c800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 153.073862][ T6620] >ffff88805b26c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 153.081949][ T6620] ^
[ 153.088462][ T6620] ffff88805b26c900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 153.096527][ T6620] ffff88805b26c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 153.104584][ T6620] ==================================================================
[ 153.116261][ T5136] Bluetooth: hci0: command tx timeout
[ 153.125846][ T6620] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 153.133170][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.0.18 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full)
[ 153.145064][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 153.155122][ T6620] Call Trace:
[ 153.158404][ T6620]
[ 153.161343][ T6620] dump_stack_lvl+0x99/0x250
[ 153.165946][ T6620] ? __asan_memcpy+0x40/0x70
[ 153.170581][ T6620] ? __pfx_dump_stack_lvl+0x10/0x10
[ 153.175791][ T6620] ? __pfx__printk+0x10/0x10
[ 153.180385][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.186024][ T6620] panic+0x2db/0x790
[ 153.189932][ T6620] ? __pfx_panic+0x10/0x10
[ 153.194357][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.200087][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.205880][ T6620] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 153.211814][ T6620] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 153.218157][ T6620] ? print_memory_metadata+0x314/0x400
[ 153.223644][ T6620] ? ocfs2_dir_foreach_blk+0x1149/0x18a0
[ 153.229290][ T6620] check_panic_on_warn+0x89/0xb0
[ 153.234271][ T6620] ? ocfs2_dir_foreach_blk+0x1149/0x18a0
[ 153.240002][ T6620] end_report+0x78/0x160
[ 153.244277][ T6620] kasan_report+0x129/0x150
[ 153.248809][ T6620] ? ocfs2_read_inode_block+0x11d/0x190
[ 153.254369][ T6620] ? ocfs2_dir_foreach_blk+0x1149/0x18a0
[ 153.260020][ T6620] ocfs2_dir_foreach_blk+0x1149/0x18a0
[ 153.265499][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.271162][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.276799][ T6620] ? _raw_spin_unlock+0x28/0x50
[ 153.281751][ T6620] ? __pfx_ocfs2_dir_foreach_blk+0x10/0x10
[ 153.287579][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.293325][ T6620] ? ocfs2_inode_lock_atime+0x232/0x4e0
[ 153.299225][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.304868][ T6620] ? __pfx_ocfs2_inode_lock_atime+0x10/0x10
[ 153.310811][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.316451][ T6620] ocfs2_readdir+0x254/0x4c0
[ 153.321056][ T6620] ? __pfx_ocfs2_readdir+0x10/0x10
[ 153.326203][ T6620] ? down_write+0x162/0x1f0
[ 153.330733][ T6620] ? __pfx_down_write+0x10/0x10
[ 153.335590][ T6620] ? __pfx_ocfs2_readdir+0x10/0x10
[ 153.340710][ T6620] wrap_directory_iterator+0x96/0xe0
[ 153.346080][ T6620] iterate_dir+0x5af/0x770
[ 153.350545][ T6620] __se_sys_getdents+0xe4/0x250
[ 153.355411][ T6620] ? __pfx___se_sys_getdents+0x10/0x10
[ 153.360871][ T6620] ? __pfx_filldir+0x10/0x10
[ 153.365471][ T6620] ? do_syscall_64+0xba/0x210
[ 153.370163][ T6620] do_syscall_64+0xf6/0x210
[ 153.374710][ T6620] ? srso_alias_return_thunk+0x5/0xfbef5
[ 153.380438][ T6620] ? exc_page_fault+0x91/0x110
[ 153.385202][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 153.391089][ T6620] RIP: 0033:0x7f0de318cda9
[ 153.395522][ T6620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 153.415316][ T6620] RSP: 002b:00007f0de402d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 153.423831][ T6620] RAX: ffffffffffffffda RBX: 00007f0de33a5fa0 RCX: 00007f0de318cda9
[ 153.431902][ T6620] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 153.439970][ T6620] RBP: 00007f0de320e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 153.447935][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 153.455997][ T6620] R13: 0000000000000000 R14: 00007f0de33a5fa0 R15: 00007ffe8a6733c8
[ 153.464013][ T6620]
[ 153.467458][ T6620] Kernel Offset: disabled
[ 153.471896][ T6620] Rebooting in 86400 seconds..