Warning: Permanently added '[localhost]:61534' (ED25519) to the list of known hosts.
2025/08/30 11:23:44 ignoring optional flag "type"="qemu"
2025/08/30 11:23:45 parsed 1 programs
[ 130.992933][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 134.028436][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 134.034690][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 134.066729][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 134.070807][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 135.015941][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 135.021624][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 135.025355][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 135.030028][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 135.033828][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 136.888252][ T5663] chnl_net:caif_netlink_parms(): no params data found
[ 136.954618][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 136.958138][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 136.961744][ T5663] bridge_slave_0: entered allmulticast mode
[ 136.965768][ T5663] bridge_slave_0: entered promiscuous mode
[ 136.972207][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 136.975785][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 136.978997][ T5663] bridge_slave_1: entered allmulticast mode
[ 136.983545][ T5663] bridge_slave_1: entered promiscuous mode
[ 137.007044][ T5663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 137.014423][ T5663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 137.038554][ T5663] team0: Port device team_slave_0 added
[ 137.044449][ T5663] team0: Port device team_slave_1 added
[ 137.064982][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 137.068007][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 137.080676][ T5663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 137.086789][ T5663] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 137.090191][ T5663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 137.104394][ T5663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 137.140554][ T5663] hsr_slave_0: entered promiscuous mode
[ 137.143729][ T5663] hsr_slave_1: entered promiscuous mode
[ 137.619124][ T5663] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 137.632480][ T5663] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 137.650067][ T5663] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 137.661608][ T5663] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 137.720860][ T5663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 137.724769][ T5663] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 137.728118][ T5663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 137.731672][ T5663] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 137.855671][ T5663] 8021q: adding VLAN 0 to HW filter on device bond0
[ 137.871907][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state
[ 137.876090][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state
[ 137.912271][ T5663] 8021q: adding VLAN 0 to HW filter on device team0
[ 137.939285][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state
[ 137.942530][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 137.962191][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state
[ 137.965707][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 138.102846][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[ 138.105821][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[ 138.365674][ T5663] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 138.437976][ T5663] veth0_vlan: entered promiscuous mode
[ 138.462790][ T5663] veth1_vlan: entered promiscuous mode
[ 138.512371][ T5663] veth0_macvtap: entered promiscuous mode
[ 138.532115][ T5663] veth1_macvtap: entered promiscuous mode
[ 138.570779][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 138.591017][ T5663] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 138.614550][ T1037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.631522][ T1037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.635398][ T1037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.639265][ T1037] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.872553][ T1037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 138.991443][ T1037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 139.123481][ T1037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 140.028604][ T1037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/08/30 11:23:59 executed programs: 0
[ 140.461612][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 140.465835][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 140.470453][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 140.482680][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 140.487767][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 140.829175][ T5739] chnl_net:caif_netlink_parms(): no params data found
[ 141.008864][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state
[ 141.023078][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state
[ 141.026433][ T5739] bridge_slave_0: entered allmulticast mode
[ 141.041397][ T5739] bridge_slave_0: entered promiscuous mode
[ 141.048908][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state
[ 141.064213][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state
[ 141.067435][ T5739] bridge_slave_1: entered allmulticast mode
[ 141.078119][ T5739] bridge_slave_1: entered promiscuous mode
[ 141.140823][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 141.152734][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 141.264825][ T5739] team0: Port device team_slave_0 added
[ 141.280787][ T5739] team0: Port device team_slave_1 added
[ 141.403665][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 141.406716][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 141.425272][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 141.432412][ T1037] bridge_slave_1: left allmulticast mode
[ 141.435072][ T1037] bridge_slave_1: left promiscuous mode
[ 141.438351][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state
[ 141.452451][ T1037] bridge_slave_0: left allmulticast mode
[ 141.455143][ T1037] bridge_slave_0: left promiscuous mode
[ 141.457815][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state
[ 141.708869][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 141.714667][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 141.721734][ T1037] bond0 (unregistering): Released all slaves
[ 141.731836][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 141.735076][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 141.749975][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 141.826279][ T1037] hsr_slave_0: left promiscuous mode
[ 141.847008][ T1037] hsr_slave_1: left promiscuous mode
[ 141.851227][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 141.854561][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 141.870177][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 141.873784][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 141.905390][ T1037] veth1_macvtap: left promiscuous mode
[ 141.907939][ T1037] veth0_macvtap: left promiscuous mode
[ 141.923754][ T1037] veth1_vlan: left promiscuous mode
[ 141.926241][ T1037] veth0_vlan: left promiscuous mode
[ 142.548888][ T1037] team0 (unregistering): Port device team_slave_1 removed
[ 142.580489][ T4703] Bluetooth: hci0: command tx timeout
[ 142.592947][ T1037] team0 (unregistering): Port device team_slave_0 removed
[ 143.016793][ T5739] hsr_slave_0: entered promiscuous mode
[ 143.027348][ T5739] hsr_slave_1: entered promiscuous mode
[ 144.082366][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 144.111036][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 144.123454][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 144.151891][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 144.362997][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0
[ 144.397631][ T5739] 8021q: adding VLAN 0 to HW filter on device team0
[ 144.472267][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state
[ 144.475506][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 144.480467][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state
[ 144.483801][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 144.660666][ T4703] Bluetooth: hci0: command tx timeout
[ 144.962232][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 145.165937][ T5739] veth0_vlan: entered promiscuous mode
[ 145.185967][ T5739] veth1_vlan: entered promiscuous mode
[ 145.211844][ T5739] veth0_macvtap: entered promiscuous mode
[ 145.217742][ T5739] veth1_macvtap: entered promiscuous mode
[ 145.239072][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 145.249146][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 145.260688][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.269195][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.282521][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.286646][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 145.345057][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 145.349308][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 145.386812][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 145.392994][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/08/30 11:24:04 executed programs: 2
[ 145.613436][ T5806] loop0: detected capacity change from 0 to 32768
[ 145.629912][ T5806] =======================================================
[ 145.629912][ T5806] WARNING: The mand mount option has been deprecated and
[ 145.629912][ T5806] and is ignored by this kernel. Remove the mand
[ 145.629912][ T5806] option from the mount to silence this warning.
[ 145.629912][ T5806] =======================================================
[ 145.698378][ T5806] JBD2: Ignoring recovery information on journal
[ 145.762236][ T5806] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 145.810826][ T25] audit: type=1804 audit(1756553044.736:2): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15" name="/newroot/0/file1/bus" dev="loop0" ino=17058 res=1 errno=0
[ 145.833176][ T5806] grow_buffers: requested out-of-range block 13835058055382958891 for device loop0
[ 145.837422][ T5806] (syz.0.15,5806,0):ocfs2_read_blocks:239 ERROR: status = -12
[ 145.850389][ T5806] (syz.0.15,5806,0):ocfs2_search_chain:1817 ERROR: status = -12
[ 145.853909][ T5806] (syz.0.15,5806,0):ocfs2_search_chain:1940 ERROR: status = -12
[ 145.870841][ T5806] (syz.0.15,5806,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12
[ 145.874752][ T5806] (syz.0.15,5806,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12
[ 145.878472][ T5806] (syz.0.15,5806,0):ocfs2_claim_metadata:2088 ERROR: status = -12
[ 145.885037][ T5806] (syz.0.15,5806,0):ocfs2_claim_metadata:2101 ERROR: status = -12
[ 145.888556][ T5806] (syz.0.15,5806,0):ocfs2_create_refcount_tree:595 ERROR: status = -12
[ 145.892616][ T5806] (syz.0.15,5806,0):ocfs2_reflink_remap_blocks:4648 ERROR: status = -12
[ 145.897073][ T5806] (syz.0.15,5806,0):ocfs2_remap_file_range:2747 ERROR: status = -12
[ 145.925641][ T5739] ocfs2: Unmounting device (7,0) on (node local)
[ 146.228727][ T5810] loop0: detected capacity change from 0 to 32768
[ 146.263464][ T5810] JBD2: Ignoring recovery information on journal
[ 146.318115][ T5810] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 146.347020][ T25] audit: type=1804 audit(1756553045.266:3): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.16" name="/newroot/1/file1/bus" dev="loop0" ino=17058 res=1 errno=0
[ 146.360088][ T5810] ==================================================================
[ 146.363684][ T5810] BUG: KASAN: use-after-free in ocfs2_claim_suballoc_bits+0x8b2/0x2450
[ 146.367506][ T5810] Read of size 4 at addr ffff888043e6b000 by task syz.0.16/5810
[ 146.371879][ T5810]
[ 146.373102][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full)
[ 146.373116][ T5810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 146.373124][ T5810] Call Trace:
[ 146.373132][ T5810]
[ 146.373138][ T5810] dump_stack_lvl+0x189/0x250
[ 146.373156][ T5810] ? __kasan_check_byte+0x12/0x40
[ 146.373172][ T5810] ? __pfx_dump_stack_lvl+0x10/0x10
[ 146.373186][ T5810] ? lock_release+0x4b/0x3e0
[ 146.373203][ T5810] ? __virt_addr_valid+0x4a5/0x5c0
[ 146.373217][ T5810] print_report+0xca/0x240
[ 146.373238][ T5810] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450
[ 146.373251][ T5810] kasan_report+0x118/0x150
[ 146.373265][ T5810] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450
[ 146.373277][ T5810] ocfs2_claim_suballoc_bits+0x8b2/0x2450
[ 146.373292][ T5810] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10
[ 146.373302][ T5810] ? __ocfs2_journal_access+0x621/0x820
[ 146.373314][ T5810] ? __mutex_unlock_slowpath+0x1a1/0x740
[ 146.373383][ T5810] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 146.373401][ T5810] ? jbd2_write_access_granted+0x69/0x310
[ 146.373414][ T5810] ? jbd2_write_access_granted+0x69/0x310
[ 146.373431][ T5810] ocfs2_claim_metadata+0x178/0x4c0
[ 146.373443][ T5810] ? __pfx_ocfs2_claim_metadata+0x10/0x10
[ 146.373454][ T5810] ? __pfx_ocfs2_start_trans+0x10/0x10
[ 146.373465][ T5810] ? ocfs2_metadata_cache_get_super+0x43/0x80
[ 146.373481][ T5810] ? ocfs2_inode_cache_get_super+0xd/0x40
[ 146.373490][ T5810] ocfs2_create_refcount_tree+0x54f/0x1250
[ 146.373505][ T5810] ? __pfx_ocfs2_create_refcount_tree+0x10/0x10
[ 146.373520][ T5810] ? find_get_entries+0x688/0x7f0
[ 146.373535][ T5810] ? find_get_entries+0xfe/0x7f0
[ 146.373550][ T5810] ? __pfx_find_get_entries+0x10/0x10
[ 146.373566][ T5810] ? __filemap_get_folio+0x9a6/0xaf0
[ 146.373579][ T5810] ? seqcount_lockdep_reader_access+0x123/0x1c0
[ 146.373593][ T5810] ocfs2_reflink_remap_blocks+0x2ea/0x1930
[ 146.373606][ T5810] ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 146.373617][ T5810] ? __pfx_ocfs2_reflink_remap_blocks+0x10/0x10
[ 146.373632][ T5810] ? __lock_acquire+0xab9/0xd20
[ 146.373651][ T5810] ? down_write+0x162/0x1f0
[ 146.373660][ T5810] ? __pfx_down_write+0x10/0x10
[ 146.373670][ T5810] ? generic_remap_file_range_prep+0x3e/0x60
[ 146.373683][ T5810] ocfs2_remap_file_range+0x4b7/0x730
[ 146.373697][ T5810] ? __lock_acquire+0xab9/0xd20
[ 146.373711][ T5810] ? __pfx_ocfs2_remap_file_range+0x10/0x10
[ 146.373725][ T5810] ? rcu_read_lock_any_held+0xb3/0x120
[ 146.373738][ T5810] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 146.373750][ T5810] ? __pfx_ocfs2_remap_file_range+0x10/0x10
[ 146.373764][ T5810] vfs_copy_file_range+0xd53/0x1310
[ 146.373782][ T5810] ? __pfx_vfs_copy_file_range+0x10/0x10
[ 146.373798][ T5810] __se_sys_copy_file_range+0x2fb/0x470
[ 146.373814][ T5810] ? __pfx___se_sys_copy_file_range+0x10/0x10
[ 146.373828][ T5810] ? rcu_is_watching+0x15/0xb0
[ 146.373839][ T5810] ? __x64_sys_copy_file_range+0x21/0xf0
[ 146.373853][ T5810] do_syscall_64+0xfa/0x3b0
[ 146.373868][ T5810] ? lockdep_hardirqs_on+0x9c/0x150
[ 146.373881][ T5810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.373891][ T5810] ? clear_bhb_loop+0x60/0xb0
[ 146.373903][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.373914][ T5810] RIP: 0033:0x7efc81179e79
[ 146.373926][ T5810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 146.373934][ T5810] RSP: 002b:00007efc8200b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[ 146.373947][ T5810] RAX: ffffffffffffffda RBX: 00007efc81315f80 RCX: 00007efc81179e79
[ 146.373955][ T5810] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006
[ 146.373961][ T5810] RBP: 00007efc811e7916 R08: 0000000000000006 R09: 0000000000000000
[ 146.373967][ T5810] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[ 146.373973][ T5810] R13: 0000000000000000 R14: 00007efc81315f80 R15: 00007ffe5a94ba58
[ 146.373983][ T5810]
[ 146.373987][ T5810]
[ 146.532144][ T5810] The buggy address belongs to the physical page:
[ 146.535021][ T5810] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7fabc5796 pfn:0x43e6b
[ 146.539157][ T5810] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 146.542256][ T5810] raw: 04fff00000000000 ffffea0001078088 ffffea00010f99c8 0000000000000000
[ 146.545966][ T5810] raw: 00000007fabc5796 0000000000000000 00000000ffffffff 0000000000000000
[ 146.549674][ T5810] page dumped because: kasan: bad access detected
[ 146.552459][ T5810] page_owner tracks the page as freed
[ 146.554852][ T5810] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 5616, tgid 5616 (udevd), ts 146247508993, free_ts 146334257932
[ 146.562767][ T5810] post_alloc_hook+0x240/0x2a0
[ 146.564808][ T5810] get_page_from_freelist+0x21e4/0x22c0
[ 146.567201][ T5810] __alloc_frozen_pages_noprof+0x181/0x370
[ 146.569748][ T5810] alloc_pages_mpol+0x232/0x4a0
[ 146.571890][ T5810] vma_alloc_folio_noprof+0xe4/0x200
[ 146.574309][ T5810] folio_prealloc+0x30/0x180
[ 146.576345][ T5810] __handle_mm_fault+0x2ab9/0x5440
[ 146.578570][ T5810] handle_mm_fault+0x40a/0x8e0
[ 146.580680][ T5810] do_user_addr_fault+0x764/0x1390
[ 146.583032][ T5810] exc_page_fault+0x76/0xf0
[ 146.585009][ T5810] asm_exc_page_fault+0x26/0x30
[ 146.587178][ T5810] page last free pid 5616 tgid 5616 stack trace:
[ 146.589936][ T5810] free_unref_folios+0xdbd/0x1520
[ 146.592194][ T5810] folios_put_refs+0x559/0x640
[ 146.594338][ T5810] free_pages_and_swap_cache+0x4be/0x520
[ 146.596755][ T5810] tlb_flush_mmu+0x3a0/0x680
[ 146.598844][ T5810] tlb_finish_mmu+0xc3/0x1d0
[ 146.600882][ T5810] vms_clear_ptes+0x42c/0x540
[ 146.603077][ T5810] vms_complete_munmap_vmas+0x206/0x8a0
[ 146.605611][ T5810] do_vmi_align_munmap+0x358/0x420
[ 146.607873][ T5810] do_vmi_munmap+0x253/0x2e0
[ 146.609991][ T5810] __vm_munmap+0x23b/0x3d0
[ 146.611944][ T5810] __x64_sys_munmap+0x60/0x70
[ 146.614048][ T5810] do_syscall_64+0xfa/0x3b0
[ 146.616093][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.618715][ T5810]
[ 146.619800][ T5810] Memory state around the buggy address:
[ 146.622241][ T5810] ffff888043e6af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 146.625686][ T5810] ffff888043e6af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 146.628992][ T5810] >ffff888043e6b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 146.632368][ T5810] ^
[ 146.634199][ T5810] ffff888043e6b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 146.637691][ T5810] ffff888043e6b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 146.641154][ T5810] ==================================================================
[ 146.678710][ T5810] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 146.681997][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full)
[ 146.685898][ T5810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 146.690504][ T5810] Call Trace:
[ 146.692052][ T5810]
[ 146.693629][ T5810] dump_stack_lvl+0x99/0x250
[ 146.695728][ T5810] ? __asan_memcpy+0x40/0x70
[ 146.697912][ T5810] ? __pfx_dump_stack_lvl+0x10/0x10
[ 146.700136][ T5810] ? __pfx__printk+0x10/0x10
[ 146.702163][ T5810] vpanic+0x281/0x750
[ 146.703712][ T5810] ? preempt_schedule+0xae/0xc0
[ 146.706033][ T5810] ? __pfx_vpanic+0x10/0x10
[ 146.707912][ T5810] ? preempt_schedule_common+0x83/0xd0
[ 146.710273][ T5810] ? preempt_schedule+0xae/0xc0
[ 146.712184][ T5810] ? __pfx_preempt_schedule+0x10/0x10
[ 146.714634][ T5810] panic+0xb9/0xc0
[ 146.716367][ T5810] ? __pfx_panic+0x10/0x10
[ 146.718374][ T5810] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 146.721129][ T5810] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450
[ 146.723721][ T5810] check_panic_on_warn+0x89/0xb0
[ 146.725947][ T5810] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450
[ 146.728583][ T5810] end_report+0x78/0x160
[ 146.730459][ T5810] kasan_report+0x129/0x150
[ 146.732467][ T5810] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450
[ 146.735079][ T5810] ocfs2_claim_suballoc_bits+0x8b2/0x2450
[ 146.737576][ T5810] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10
[ 146.740225][ T5810] ? __ocfs2_journal_access+0x621/0x820
[ 146.742672][ T5810] ? __mutex_unlock_slowpath+0x1a1/0x740
[ 146.745211][ T5810] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 146.747873][ T5810] ? jbd2_write_access_granted+0x69/0x310
[ 146.750461][ T5810] ? jbd2_write_access_granted+0x69/0x310
[ 146.752994][ T5810] ocfs2_claim_metadata+0x178/0x4c0
[ 146.755292][ T5810] ? __pfx_ocfs2_claim_metadata+0x10/0x10
[ 146.757838][ T5810] ? __pfx_ocfs2_start_trans+0x10/0x10
[ 146.760339][ T5810] ? ocfs2_metadata_cache_get_super+0x43/0x80
[ 146.763141][ T5810] ? ocfs2_inode_cache_get_super+0xd/0x40
[ 146.765692][ T5810] ocfs2_create_refcount_tree+0x54f/0x1250
[ 146.768151][ T5810] ? __pfx_ocfs2_create_refcount_tree+0x10/0x10
[ 146.770834][ T5810] ? find_get_entries+0x688/0x7f0
[ 146.773168][ T5810] ? find_get_entries+0xfe/0x7f0
[ 146.775095][ T5810] ? __pfx_find_get_entries+0x10/0x10
[ 146.777151][ T5810] ? __filemap_get_folio+0x9a6/0xaf0
[ 146.779282][ T5810] ? seqcount_lockdep_reader_access+0x123/0x1c0
[ 146.781683][ T5810] ocfs2_reflink_remap_blocks+0x2ea/0x1930
[ 146.783944][ T5810] ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 146.786377][ T5810] ? __pfx_ocfs2_reflink_remap_blocks+0x10/0x10
[ 146.788705][ T5810] ? __lock_acquire+0xab9/0xd20
[ 146.790708][ T5810] ? down_write+0x162/0x1f0
[ 146.792436][ T5810] ? __pfx_down_write+0x10/0x10
[ 146.794354][ T5810] ? generic_remap_file_range_prep+0x3e/0x60
[ 146.797003][ T5810] ocfs2_remap_file_range+0x4b7/0x730
[ 146.799166][ T5810] ? __lock_acquire+0xab9/0xd20
[ 146.801105][ T5810] ? __pfx_ocfs2_remap_file_range+0x10/0x10
[ 146.803604][ T5810] ? rcu_read_lock_any_held+0xb3/0x120
[ 146.806055][ T5810] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 146.808733][ T5810] ? __pfx_ocfs2_remap_file_range+0x10/0x10
[ 146.811371][ T5810] vfs_copy_file_range+0xd53/0x1310
[ 146.813720][ T5810] ? __pfx_vfs_copy_file_range+0x10/0x10
[ 146.816198][ T5810] __se_sys_copy_file_range+0x2fb/0x470
[ 146.818656][ T5810] ? __pfx___se_sys_copy_file_range+0x10/0x10
[ 146.821410][ T5810] ? rcu_is_watching+0x15/0xb0
[ 146.823522][ T5810] ? __x64_sys_copy_file_range+0x21/0xf0
[ 146.826082][ T5810] do_syscall_64+0xfa/0x3b0
[ 146.828101][ T5810] ? lockdep_hardirqs_on+0x9c/0x150
[ 146.830460][ T5810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.833142][ T5810] ? clear_bhb_loop+0x60/0xb0
[ 146.835210][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 146.837824][ T5810] RIP: 0033:0x7efc81179e79
[ 146.839804][ T5810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 146.848128][ T5810] RSP: 002b:00007efc8200b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[ 146.851695][ T5810] RAX: ffffffffffffffda RBX: 00007efc81315f80 RCX: 00007efc81179e79
[ 146.855174][ T5810] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006
[ 146.858643][ T5810] RBP: 00007efc811e7916 R08: 0000000000000006 R09: 0000000000000000
[ 146.862103][ T5810] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[ 146.865572][ T5810] R13: 0000000000000000 R14: 00007efc81315f80 R15: 00007ffe5a94ba58
[ 146.868931][ T5810]
[ 146.870661][ T5810] Kernel Offset: disabled
[ 146.872548][ T5810] Rebooting in 86400 seconds..