[ 87.256616][ T1111] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts.
2026/07/14 17:47:01 parsed 1 programs
[ 96.141559][ T4498] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 98.390558][ T4603] chnl_net:caif_netlink_parms(): no params data found
[ 98.433841][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.441609][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.450010][ T4603] device bridge_slave_0 entered promiscuous mode
[ 98.459344][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.466603][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.475480][ T4603] device bridge_slave_1 entered promiscuous mode
[ 98.497174][ T4603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.508748][ T4603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.532763][ T4603] team0: Port device team_slave_0 added
[ 98.543080][ T4603] team0: Port device team_slave_1 added
[ 98.560506][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.567704][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.595890][ T4603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.611087][ T4603] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.618653][ T4603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.645054][ T4603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.673255][ T4603] device hsr_slave_0 entered promiscuous mode
[ 98.681061][ T4603] device hsr_slave_1 entered promiscuous mode
[ 99.232074][ T4603] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 99.259468][ T4603] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 99.287479][ T4603] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 99.299274][ T4603] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 99.362401][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.369675][ T4603] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.377235][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.384534][ T4603] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.417612][ T240] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.428844][ T240] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.492764][ T4603] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.520250][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 99.531392][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 99.544315][ T4603] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.558861][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 99.569989][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 99.581480][ T240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.589391][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.612936][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 99.623448][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 99.632621][ T240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.640221][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.652386][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 99.675872][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 99.693421][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 99.708399][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 99.725799][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 99.737400][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 99.753034][ T4603] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 99.766420][ T4603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 99.780951][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 99.790359][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 99.799975][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 99.816841][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 99.832161][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 99.848772][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 100.029967][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 100.045069][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 100.058833][ T4603] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.109235][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 100.135687][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 100.160808][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 100.172315][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 100.193350][ T4603] device veth0_vlan entered promiscuous mode
[ 100.205862][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 100.218377][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 100.238838][ T4603] device veth1_vlan entered promiscuous mode
[ 100.291409][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 100.305835][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 100.335899][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 100.356927][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 100.378610][ T4603] device veth0_macvtap entered promiscuous mode
[ 100.399560][ T4603] device veth1_macvtap entered promiscuous mode
[ 100.426199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 100.437798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 100.453492][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.467270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 100.480029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 100.494063][ T4603] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.513703][ T4603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.524197][ T4603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.535920][ T4603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.548637][ T4603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.572049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 100.583820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 100.777081][ T4603] syz-executor (4603) used greatest stack depth: 20944 bytes left
[ 102.046513][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.079120][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.105695][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 102.114396][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.137340][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.145787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 103.152925][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/14 17:47:12 executed programs: 0
[ 104.289360][ T4831] chnl_net:caif_netlink_parms(): no params data found
[ 104.351116][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.358880][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.367798][ T4831] device bridge_slave_0 entered promiscuous mode
[ 104.376494][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.384152][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.393884][ T4831] device bridge_slave_1 entered promiscuous mode
[ 104.426105][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.440191][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.470252][ T4831] team0: Port device team_slave_0 added
[ 104.479192][ T4831] team0: Port device team_slave_1 added
[ 104.505345][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.512518][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.539466][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.552375][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.559720][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 104.586808][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.625987][ T4831] device hsr_slave_0 entered promiscuous mode
[ 104.633011][ T4831] device hsr_slave_1 entered promiscuous mode
[ 104.642256][ T4831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 104.653169][ T4831] Cannot create hsr debugfs directory
[ 105.673917][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.723097][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.764426][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.215229][ T4262] Bluetooth: hci0: command 0x0409 tx timeout
[ 106.682486][ T4831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.702085][ T4831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.746338][ T4831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.760332][ T4831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 106.862454][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.900032][ T4831] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.909618][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 106.917969][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 106.940583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 106.952170][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 106.961710][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.969373][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.977971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 106.986981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 106.998265][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.005725][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.014453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 107.026673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 107.035269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 107.069407][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 107.079807][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 107.091316][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 107.100341][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 107.109539][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 107.137819][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 107.147450][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 107.160845][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 107.171131][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 107.185980][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 107.310814][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 107.322099][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 107.348860][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.365887][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 107.374694][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 107.394580][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 107.404324][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 107.416123][ T4831] device veth0_vlan entered promiscuous mode
[ 107.422881][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 107.431609][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 107.450499][ T4831] device veth1_vlan entered promiscuous mode
[ 107.463046][ T9] device hsr_slave_0 left promiscuous mode
[ 107.470181][ T9] device hsr_slave_1 left promiscuous mode
[ 107.478411][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 107.486287][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 107.494207][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 107.502388][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 107.510573][ T9] device bridge_slave_1 left promiscuous mode
[ 107.517126][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.526089][ T9] device bridge_slave_0 left promiscuous mode
[ 107.532350][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.544179][ T9] device veth1_macvtap left promiscuous mode
[ 107.550487][ T9] device veth0_macvtap left promiscuous mode
[ 107.557747][ T9] device veth1_vlan left promiscuous mode
[ 107.563670][ T9] device veth0_vlan left promiscuous mode
[ 107.704264][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 107.722260][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 107.736828][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 107.750093][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 107.803502][ T9] bond0 (unregistering): Released all slaves
[ 107.862056][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 107.870414][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 107.879235][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 107.888539][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 107.899971][ T4831] device veth0_macvtap entered promiscuous mode
[ 107.911605][ T4831] device veth1_macvtap entered promiscuous mode
[ 107.932601][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.949184][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 107.958460][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 107.967709][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 107.977720][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 107.989807][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.999840][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 108.010511][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 108.031881][ T4831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.041611][ T4831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.052895][ T4831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.062829][ T4831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.125860][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.142308][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.157872][ T240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 108.181258][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.190272][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.199871][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 108.295760][ T4274] Bluetooth: hci0: command 0x041b tx timeout
[ 108.490859][ T5002] loop0: detected capacity change from 0 to 32768
[ 108.511484][ T5002] =======================================================
[ 108.511484][ T5002] WARNING: The mand mount option has been deprecated and
[ 108.511484][ T5002] and is ignored by this kernel. Remove the mand
[ 108.511484][ T5002] option from the mount to silence this warning.
[ 108.511484][ T5002] =======================================================
[ 108.623432][ T5002] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 108.654958][ T5002] (syz.0.17,5002,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=30850004666992, rec_len=1, name_len=0
[ 108.689425][ T4831] ocfs2: Unmounting device (7,0) on (node local)
[ 109.087872][ T5006] loop0: detected capacity change from 0 to 32768
[ 109.197681][ T5006] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 109.226373][ T5006] (syz.0.18,5006,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=547, rec_len=0, name_len=0
2026/07/14 17:47:18 executed programs: 4
[ 109.283848][ T4831] ocfs2: Unmounting device (7,0) on (node local)
[ 109.637239][ T5010] loop0: detected capacity change from 0 to 32768
[ 109.784350][ T5010] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 109.809609][ T5010] ==================================================================
[ 109.818898][ T5010] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 109.827216][ T5010] Read of size 2 at addr ffff888059e01cf0 by task syz.0.19/5010
[ 109.834917][ T5010]
[ 109.837755][ T5010] CPU: 1 PID: 5010 Comm: syz.0.19 Not tainted syzkaller #0
[ 109.845374][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 109.855626][ T5010] Call Trace:
[ 109.858931][ T5010]
[ 109.861896][ T5010] dump_stack_lvl+0x188/0x250
[ 109.866979][ T5010] ? show_regs_print_info+0x20/0x20
[ 109.872229][ T5010] ? load_image+0x410/0x410
[ 109.876932][ T5010] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 109.882972][ T5010] print_address_description+0x60/0x2d0
[ 109.888541][ T5010] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 109.894436][ T5010] kasan_report+0xdf/0x130
[ 109.898971][ T5010] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 109.905593][ T5010] ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 109.911750][ T5010] ? ocfs2_dir_foreach+0xf0/0xf0
[ 109.917262][ T5010] ? ocfs2_inode_lock_atime+0x24b/0x530
[ 109.923405][ T5010] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0
[ 109.929728][ T5010] ocfs2_readdir+0x221/0x470
[ 109.934568][ T5010] ? ocfs2_dir_foreach_blk+0x1a10/0x1a10
[ 109.941160][ T5010] ? end_current_label_crit_section+0x14b/0x170
[ 109.948619][ T5010] ? common_file_perm+0x171/0x1c0
[ 109.954567][ T5010] ? iterate_dir+0x133/0x550
[ 109.959918][ T5010] iterate_dir+0x213/0x550
[ 109.964492][ T5010] __se_sys_getdents+0xf2/0x260
[ 109.970234][ T5010] ? __x64_sys_getdents+0x80/0x80
[ 109.976035][ T5010] ? fillonedir+0x4c0/0x4c0
[ 109.981008][ T5010] ? lockdep_hardirqs_on+0x94/0x140
[ 109.986645][ T5010] do_syscall_64+0x4c/0xa0
[ 109.992503][ T5010] ? clear_bhb_loop+0x30/0x80
[ 109.997345][ T5010] ? clear_bhb_loop+0x30/0x80
[ 110.002280][ T5010] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 110.008437][ T5010] RIP: 0033:0x7f2e1325b379
[ 110.013064][ T5010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 110.033944][ T5010] RSP: 002b:00007f2e128bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 110.042800][ T5010] RAX: ffffffffffffffda RBX: 00007f2e134b6fa0 RCX: 00007f2e1325b379
[ 110.052628][ T5010] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 110.061907][ T5010] RBP: 00007f2e132eed68 R08: 0000000000000000 R09: 0000000000000000
[ 110.070894][ T5010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.079752][ T5010] R13: 00007f2e134b7038 R14: 00007f2e134b6fa0 R15: 00007ffc18e07348
[ 110.088818][ T5010]
[ 110.093227][ T5010]
[ 110.095987][ T5010] The buggy address belongs to the page:
[ 110.102727][ T5010] page:ffffea0001678040 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x59e01
[ 110.114659][ T5010] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 110.122592][ T5010] raw: 00fff00000000000 ffffea0001678008 ffffea0001677948 0000000000000000
[ 110.131953][ T5010] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 110.140996][ T5010] page dumped because: kasan: bad access detected
[ 110.148148][ T5010] page_owner tracks the page as freed
[ 110.153945][ T5010] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4534, ts 109298112308, free_ts 109353983447
[ 110.178401][ T5010] get_page_from_freelist+0x24f6/0x2670
[ 110.186747][ T5010] __alloc_pages+0x1ee/0x480
[ 110.192194][ T5010] alloc_pages_vma+0x2bc/0x790
[ 110.199321][ T5010] handle_mm_fault+0x23be/0x4440
[ 110.206685][ T5010] do_user_addr_fault+0x494/0xc90
[ 110.215665][ T5010] exc_page_fault+0x60/0x100
[ 110.221263][ T5010] asm_exc_page_fault+0x22/0x30
[ 110.227043][ T5010] copy_user_enhanced_fast_string+0xe/0x40
[ 110.234022][ T5010] copy_page_to_iter+0x4c9/0x930
[ 110.240479][ T5010] filemap_read+0x1e0a/0x2560
[ 110.245364][ T5010] blkdev_read_iter+0x11d/0x150
[ 110.250640][ T5010] vfs_read+0x75e/0xd50
[ 110.254819][ T5010] ksys_read+0x153/0x260
[ 110.259924][ T5010] do_syscall_64+0x4c/0xa0
[ 110.264630][ T5010] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 110.271085][ T5010] page last free stack trace:
[ 110.275939][ T5010] free_unref_page_prepare+0x637/0x6c0
[ 110.282950][ T5010] free_unref_page_list+0x119/0x830
[ 110.288421][ T5010] release_pages+0x185f/0x1bd0
[ 110.293583][ T5010] tlb_finish_mmu+0x1b4/0x370
[ 110.298360][ T5010] unmap_region+0x344/0x3b0
[ 110.302883][ T5010] __do_munmap+0xa29/0xe10
[ 110.307317][ T5010] __vm_munmap+0x13f/0x240
[ 110.312037][ T5010] __x64_sys_munmap+0x67/0x70
[ 110.317326][ T5010] do_syscall_64+0x4c/0xa0
[ 110.322136][ T5010] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 110.328608][ T5010]
[ 110.331394][ T5010] Memory state around the buggy address:
[ 110.338424][ T5010] ffff888059e01b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.347057][ T5010] ffff888059e01c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.355212][ T5010] >ffff888059e01c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.365196][ T5010] ^
[ 110.373439][ T5010] ffff888059e01d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.375062][ T4274] Bluetooth: hci0: command 0x040f tx timeout
[ 110.383255][ T5010] ffff888059e01d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 110.401109][ T5010] ==================================================================
[ 110.412190][ T5010] Disabling lock debugging due to kernel taint
[ 110.425719][ T5010] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 110.434079][ T5010] CPU: 0 PID: 5010 Comm: syz.0.19 Tainted: G B syzkaller #0
[ 110.445359][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 110.456991][ T5010] Call Trace:
[ 110.460742][ T5010]
[ 110.463797][ T5010] dump_stack_lvl+0x188/0x250
[ 110.469956][ T5010] ? show_regs_print_info+0x20/0x20
[ 110.476012][ T5010] ? load_image+0x410/0x410
[ 110.482053][ T5010] panic+0x2f8/0x850
[ 110.486143][ T5010] ? bpf_jit_dump+0xd0/0xd0
[ 110.491184][ T5010] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 110.497644][ T5010] ? _raw_spin_unlock+0x40/0x40
[ 110.502856][ T5010] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 110.509904][ T5010] check_panic_on_warn+0x80/0xa0
[ 110.517242][ T5010] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 110.524809][ T5010] end_report+0x6d/0xf0
[ 110.529446][ T5010] kasan_report+0x102/0x130
[ 110.537169][ T5010] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 110.545049][ T5010] ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 110.552101][ T5010] ? ocfs2_dir_foreach+0xf0/0xf0
[ 110.557940][ T5010] ? ocfs2_inode_lock_atime+0x24b/0x530
[ 110.563889][ T5010] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0
[ 110.570026][ T5010] ocfs2_readdir+0x221/0x470
[ 110.574712][ T5010] ? ocfs2_dir_foreach_blk+0x1a10/0x1a10
[ 110.581549][ T5010] ? end_current_label_crit_section+0x14b/0x170
[ 110.588989][ T5010] ? common_file_perm+0x171/0x1c0
[ 110.598611][ T5010] ? iterate_dir+0x133/0x550
[ 110.603740][ T5010] iterate_dir+0x213/0x550
[ 110.608259][ T5010] __se_sys_getdents+0xf2/0x260
[ 110.613408][ T5010] ? __x64_sys_getdents+0x80/0x80
[ 110.618689][ T5010] ? fillonedir+0x4c0/0x4c0
[ 110.623639][ T5010] ? lockdep_hardirqs_on+0x94/0x140
[ 110.628868][ T5010] do_syscall_64+0x4c/0xa0
[ 110.633457][ T5010] ? clear_bhb_loop+0x30/0x80
[ 110.638212][ T5010] ? clear_bhb_loop+0x30/0x80
[ 110.643289][ T5010] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 110.649552][ T5010] RIP: 0033:0x7f2e1325b379
[ 110.653964][ T5010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 110.676138][ T5010] RSP: 002b:00007f2e128bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 110.687685][ T5010] RAX: ffffffffffffffda RBX: 00007f2e134b6fa0 RCX: 00007f2e1325b379
[ 110.703699][ T5010] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 110.715928][ T5010] RBP: 00007f2e132eed68 R08: 0000000000000000 R09: 0000000000000000
[ 110.727102][ T5010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.744888][ T5010] R13: 00007f2e134b7038 R14: 00007f2e134b6fa0 R15: 00007ffc18e07348
[ 110.755320][ T5010]
[ 110.760152][ T5010] Kernel Offset: disabled
[ 110.767237][ T5010] Rebooting in 86400 seconds..