Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. 2026/02/19 10:31:46 parsed 1 programs [ 87.808343][ T4605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 89.531793][ T4632] chnl_net:caif_netlink_parms(): no params data found [ 89.568572][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.576116][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.583750][ T4632] device bridge_slave_0 entered promiscuous mode [ 89.592189][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.599473][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.607319][ T4632] device bridge_slave_1 entered promiscuous mode [ 89.630826][ T4632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.641830][ T4632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.667258][ T4632] team0: Port device team_slave_0 added [ 89.674411][ T4632] team0: Port device team_slave_1 added [ 89.692103][ T4632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.700466][ T4632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.728288][ T4632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.741747][ T4632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.750153][ T4632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.777905][ T4632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.814728][ T4632] device hsr_slave_0 entered promiscuous mode [ 89.822716][ T4632] device hsr_slave_1 entered promiscuous mode [ 90.355977][ T4632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.365412][ T4632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.388262][ T4632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.399356][ T4632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.488040][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.495254][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.502668][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.509858][ T4632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.586433][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.596843][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.663953][ T4632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.694125][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.702665][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.727108][ T4632] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.741413][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.750929][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.759822][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.767101][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.786485][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.795506][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.804526][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.811734][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.823984][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.833616][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.855215][ T4632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.866900][ T4632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.879718][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.891124][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.900487][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.911339][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.920543][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.929461][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.938660][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.947409][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.961461][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.979628][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.111149][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.120692][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.140968][ T4632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.178876][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.189204][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.209521][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.218751][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.230605][ T4632] device veth0_vlan entered promiscuous mode [ 91.241759][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.249990][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.260242][ T4632] device veth1_vlan entered promiscuous mode [ 91.285060][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.295681][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.304717][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.316091][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.326886][ T4632] device veth0_macvtap entered promiscuous mode [ 91.342775][ T4632] device veth1_macvtap entered promiscuous mode [ 91.373454][ T4632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.382391][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.391398][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.402185][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.411586][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.429702][ T4632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.458264][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.468104][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.481217][ T4632] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.491246][ T4632] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.500279][ T4632] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.509407][ T4632] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.215514][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.232734][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.267703][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.290628][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.305849][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.313825][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.122986][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/19 10:31:56 executed programs: 0 [ 94.597485][ T4847] chnl_net:caif_netlink_parms(): no params data found [ 94.656183][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.663609][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.671807][ T4847] device bridge_slave_0 entered promiscuous mode [ 94.681044][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.688278][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.696578][ T4847] device bridge_slave_1 entered promiscuous mode [ 94.722520][ T4847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.734349][ T4847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.762933][ T4847] team0: Port device team_slave_0 added [ 94.774028][ T4847] team0: Port device team_slave_1 added [ 94.796748][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.803855][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.830339][ T4847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.842578][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.849598][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.876173][ T4847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.913167][ T4847] device hsr_slave_0 entered promiscuous mode [ 94.920447][ T4847] device hsr_slave_1 entered promiscuous mode [ 94.927335][ T4847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.935166][ T4847] Cannot create hsr debugfs directory [ 96.485918][ T4704] Bluetooth: hci0: command 0x0409 tx timeout [ 96.681330][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.742154][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.803333][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.571090][ T4847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.580439][ T4847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.590562][ T4847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.614497][ T4847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.679028][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.690992][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.699567][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.709231][ T4847] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.720208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.729069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.738201][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.745394][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.753363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.776221][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.785198][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.794055][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.801372][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.809890][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.818471][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.829978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.838948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.870649][ T4847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.881945][ T4847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.893601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.902526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.911242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.920261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.929050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.938086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.946766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.955428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.055370][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.063302][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.074524][ T4847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.107387][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.117301][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.148962][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.157632][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.166280][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.174200][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.184931][ T4847] device veth0_vlan entered promiscuous mode [ 98.204437][ T4847] device veth1_vlan entered promiscuous mode [ 98.223291][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.231679][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.241000][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.250087][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.261365][ T4847] device veth0_macvtap entered promiscuous mode [ 98.274594][ T4847] device veth1_macvtap entered promiscuous mode [ 98.297467][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.309889][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.321607][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.331165][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.339365][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.347431][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.358277][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.367916][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.380464][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.391369][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.402813][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.412075][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.422964][ T4847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.432061][ T4847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.441161][ T4847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.450484][ T4847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.466054][ T144] device hsr_slave_0 left promiscuous mode [ 98.472373][ T144] device hsr_slave_1 left promiscuous mode [ 98.479463][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.487547][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.495471][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.503105][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.511085][ T144] device bridge_slave_1 left promiscuous mode [ 98.517485][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.526798][ T144] device bridge_slave_0 left promiscuous mode [ 98.532983][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.544036][ T144] device veth1_macvtap left promiscuous mode [ 98.550202][ T144] device veth0_macvtap left promiscuous mode [ 98.556339][ T144] device veth1_vlan left promiscuous mode [ 98.562112][ T144] device veth0_vlan left promiscuous mode [ 98.576349][ T4190] Bluetooth: hci0: command 0x041b tx timeout [ 98.692154][ T144] team0 (unregistering): Port device team_slave_1 removed [ 98.704263][ T144] team0 (unregistering): Port device team_slave_0 removed [ 98.715993][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.729114][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.779342][ T144] bond0 (unregistering): Released all slaves [ 98.859670][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.868121][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.878342][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.913961][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.922201][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.930259][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.119110][ T5084] loop0: detected capacity change from 0 to 32768 [ 99.129971][ T5084] ======================================================= [ 99.129971][ T5084] WARNING: The mand mount option has been deprecated and [ 99.129971][ T5084] and is ignored by this kernel. Remove the mand [ 99.129971][ T5084] option from the mount to silence this warning. [ 99.129971][ T5084] ======================================================= [ 99.205631][ T5084] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 99.235451][ T5084] ================================================================== [ 99.244109][ T5084] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x1613/0x19d0 [ 99.252390][ T5084] Read of size 2 at addr ffff88805abebcf0 by task syz.0.17/5084 [ 99.260118][ T5084] [ 99.262575][ T5084] CPU: 1 PID: 5084 Comm: syz.0.17 Not tainted syzkaller #0 [ 99.269963][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.280128][ T5084] Call Trace: [ 99.283407][ T5084] [ 99.286339][ T5084] dump_stack_lvl+0x188/0x250 [ 99.291185][ T5084] ? show_regs_print_info+0x20/0x20 [ 99.296512][ T5084] ? load_image+0x400/0x400 [ 99.301018][ T5084] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 99.306593][ T5084] ? __lock_acquire+0x28ac/0x7d10 [ 99.311626][ T5084] print_address_description+0x60/0x2d0 [ 99.317172][ T5084] ? ocfs2_dir_foreach_blk+0x1613/0x19d0 [ 99.322801][ T5084] kasan_report+0xdf/0x130 [ 99.327220][ T5084] ? ocfs2_dir_foreach_blk+0x1613/0x19d0 [ 99.332857][ T5084] ocfs2_dir_foreach_blk+0x1613/0x19d0 [ 99.338419][ T5084] ? ocfs2_dir_foreach+0xf0/0xf0 [ 99.343350][ T5084] ? ocfs2_inode_lock_atime+0x24b/0x530 [ 99.348900][ T5084] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0 [ 99.354899][ T5084] ocfs2_readdir+0x221/0x470 [ 99.359495][ T5084] ? clear_nonspinnable+0x60/0x60 [ 99.364603][ T5084] ? ocfs2_dir_foreach_blk+0x19d0/0x19d0 [ 99.370258][ T5084] ? common_file_perm+0x171/0x1c0 [ 99.375303][ T5084] iterate_dir+0x218/0x560 [ 99.379741][ T5084] __se_sys_getdents+0xf2/0x260 [ 99.384595][ T5084] ? __x64_sys_getdents+0x80/0x80 [ 99.389634][ T5084] ? fillonedir+0x4e0/0x4e0 [ 99.394154][ T5084] ? vtime_user_exit+0x2c8/0x3e0 [ 99.399194][ T5084] ? lockdep_hardirqs_on+0x94/0x140 [ 99.404580][ T5084] do_syscall_64+0x4c/0xa0 [ 99.409256][ T5084] ? clear_bhb_loop+0x30/0x80 [ 99.413933][ T5084] ? clear_bhb_loop+0x30/0x80 [ 99.418609][ T5084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.424619][ T5084] RIP: 0033:0x7f88843ea379 [ 99.429031][ T5084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.448643][ T5084] RSP: 002b:00007f8883a4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 99.457243][ T5084] RAX: ffffffffffffffda RBX: 00007f8884645fa0 RCX: 00007f88843ea379 [ 99.465233][ T5084] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 99.473212][ T5084] RBP: 00007f888447dd68 R08: 0000000000000000 R09: 0000000000000000 [ 99.481537][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.489684][ T5084] R13: 00007f8884646038 R14: 00007f8884645fa0 R15: 00007ffd8293a238 [ 99.497684][ T5084] [ 99.500699][ T5084] [ 99.503019][ T5084] The buggy address belongs to the page: [ 99.508753][ T5084] page:ffffea00016afac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5abeb [ 99.519220][ T5084] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 99.526589][ T5084] raw: 00fff00000000000 ffffea00016afa88 ffffea00016afb08 0000000000000000 [ 99.535291][ T5084] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 99.544065][ T5084] page dumped because: kasan: bad access detected [ 99.550488][ T5084] page_owner tracks the page as freed [ 99.555864][ T5084] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4651, ts 99145071134, free_ts 99170008805 [ 99.571506][ T5084] get_page_from_freelist+0x1bbd/0x1ca0 [ 99.577069][ T5084] __alloc_pages+0x1ee/0x480 [ 99.581657][ T5084] alloc_pages_vma+0x393/0x7c0 [ 99.586420][ T5084] handle_mm_fault+0x23be/0x4410 [ 99.591365][ T5084] do_user_addr_fault+0x489/0xc80 [ 99.596493][ T5084] exc_page_fault+0x60/0x100 [ 99.601078][ T5084] asm_exc_page_fault+0x22/0x30 [ 99.606012][ T5084] copy_user_enhanced_fast_string+0xe/0x40 [ 99.611823][ T5084] copy_page_to_iter+0x49e/0x910 [ 99.616774][ T5084] filemap_read+0x1e2d/0x2540 [ 99.621463][ T5084] blkdev_read_iter+0x11d/0x150 [ 99.626415][ T5084] vfs_read+0x759/0xd60 [ 99.630595][ T5084] ksys_read+0x152/0x260 [ 99.634839][ T5084] do_syscall_64+0x4c/0xa0 [ 99.639259][ T5084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.645163][ T5084] page last free stack trace: [ 99.649924][ T5084] free_unref_page_prepare+0x637/0x6c0 [ 99.655477][ T5084] free_unref_page_list+0x119/0x820 [ 99.660679][ T5084] release_pages+0x186c/0x1be0 [ 99.665553][ T5084] tlb_finish_mmu+0x176/0x300 [ 99.670321][ T5084] unmap_region+0x344/0x3b0 [ 99.674937][ T5084] __do_munmap+0x9f8/0xdf0 [ 99.679464][ T5084] __vm_munmap+0x140/0x240 [ 99.683888][ T5084] __x64_sys_munmap+0x67/0x70 [ 99.688568][ T5084] do_syscall_64+0x4c/0xa0 [ 99.693166][ T5084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.699271][ T5084] [ 99.701584][ T5084] Memory state around the buggy address: [ 99.707210][ T5084] ffff88805abebb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 99.715269][ T5084] ffff88805abebc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 99.723420][ T5084] >ffff88805abebc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 99.731483][ T5084] ^ [ 99.739201][ T5084] ffff88805abebd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 99.747263][ T5084] ffff88805abebd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 99.755410][ T5084] ================================================================== [ 99.763478][ T5084] Disabling lock debugging due to kernel taint [ 99.776692][ T5084] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 99.783930][ T5084] CPU: 1 PID: 5084 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 99.792613][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.802670][ T5084] Call Trace: [ 99.805961][ T5084] [ 99.808975][ T5084] dump_stack_lvl+0x188/0x250 [ 99.813664][ T5084] ? show_regs_print_info+0x20/0x20 [ 99.818876][ T5084] ? load_image+0x400/0x400 [ 99.823394][ T5084] panic+0x2e5/0x810 [ 99.827317][ T5084] ? bpf_jit_dump+0xd0/0xd0 [ 99.831908][ T5084] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 99.837889][ T5084] ? _raw_spin_unlock+0x40/0x40 [ 99.842809][ T5084] ? ocfs2_dir_foreach_blk+0x1613/0x19d0 [ 99.848454][ T5084] check_panic_on_warn+0x80/0xa0 [ 99.853520][ T5084] ? ocfs2_dir_foreach_blk+0x1613/0x19d0 [ 99.859233][ T5084] end_report+0x6d/0xf0 [ 99.863372][ T5084] kasan_report+0x102/0x130 [ 99.867858][ T5084] ? ocfs2_dir_foreach_blk+0x1613/0x19d0 [ 99.873557][ T5084] ocfs2_dir_foreach_blk+0x1613/0x19d0 [ 99.879086][ T5084] ? ocfs2_dir_foreach+0xf0/0xf0 [ 99.884152][ T5084] ? ocfs2_inode_lock_atime+0x24b/0x530 [ 99.889780][ T5084] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0 [ 99.895656][ T5084] ocfs2_readdir+0x221/0x470 [ 99.900312][ T5084] ? clear_nonspinnable+0x60/0x60 [ 99.905336][ T5084] ? ocfs2_dir_foreach_blk+0x19d0/0x19d0 [ 99.910949][ T5084] ? common_file_perm+0x171/0x1c0 [ 99.916073][ T5084] iterate_dir+0x218/0x560 [ 99.920552][ T5084] __se_sys_getdents+0xf2/0x260 [ 99.925379][ T5084] ? __x64_sys_getdents+0x80/0x80 [ 99.930392][ T5084] ? fillonedir+0x4e0/0x4e0 [ 99.934880][ T5084] ? vtime_user_exit+0x2c8/0x3e0 [ 99.939978][ T5084] ? lockdep_hardirqs_on+0x94/0x140 [ 99.945160][ T5084] do_syscall_64+0x4c/0xa0 [ 99.949557][ T5084] ? clear_bhb_loop+0x30/0x80 [ 99.954211][ T5084] ? clear_bhb_loop+0x30/0x80 [ 99.958866][ T5084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.964739][ T5084] RIP: 0033:0x7f88843ea379 [ 99.969132][ T5084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.988751][ T5084] RSP: 002b:00007f8883a4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 99.997149][ T5084] RAX: ffffffffffffffda RBX: 00007f8884645fa0 RCX: 00007f88843ea379 [ 100.005115][ T5084] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 100.013080][ T5084] RBP: 00007f888447dd68 R08: 0000000000000000 R09: 0000000000000000 [ 100.021033][ T5084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.029236][ T5084] R13: 00007f8884646038 R14: 00007f8884645fa0 R15: 00007ffd8293a238 [ 100.037207][ T5084] [ 100.040624][ T5084] Kernel Offset: disabled [ 100.045026][ T5084] Rebooting in 86400 seconds..