Warning: Permanently added '[localhost]:53663' (ED25519) to the list of known hosts.
2025/02/09 08:19:30 ignoring optional flag "sandboxArg"="0"
2025/02/09 08:19:30 ignoring optional flag "type"="qemu"
2025/02/09 08:19:30 parsed 1 programs
[ 123.986508][ T5648] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 128.078507][ T5408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 128.083276][ T5408] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 128.088597][ T5408] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 128.104052][ T5408] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 128.107819][ T5408] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 128.112191][ T5408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 128.603280][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.608406][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.650045][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.653392][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 130.225170][ T5723] chnl_net:caif_netlink_parms(): no params data found
[ 130.272249][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state
[ 130.275269][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state
[ 130.278221][ T5723] bridge_slave_0: entered allmulticast mode
[ 130.281441][ T5723] bridge_slave_0: entered promiscuous mode
[ 130.286921][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state
[ 130.290133][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state
[ 130.293104][ T5723] bridge_slave_1: entered allmulticast mode
[ 130.297711][ T5723] bridge_slave_1: entered promiscuous mode
[ 130.316838][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 130.322092][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 130.341161][ T5723] team0: Port device team_slave_0 added
[ 130.346968][ T5723] team0: Port device team_slave_1 added
[ 130.362824][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 130.367619][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 130.380064][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 130.387283][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 130.389866][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 130.400765][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 130.426604][ T5723] hsr_slave_0: entered promiscuous mode
[ 130.430288][ T5723] hsr_slave_1: entered promiscuous mode
[ 131.035591][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 131.052711][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 131.075212][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 131.081184][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 131.122555][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state
[ 131.125450][ T5723] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 131.128382][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state
[ 131.131335][ T5723] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 131.218546][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state
[ 131.223236][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state
[ 131.258260][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0
[ 131.305777][ T5723] 8021q: adding VLAN 0 to HW filter on device team0
[ 131.318758][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 131.321487][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 131.346062][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 131.348929][ T3088] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 131.391016][ T5723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 131.405223][ T5723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 131.635271][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 131.702678][ T5723] veth0_vlan: entered promiscuous mode
[ 131.724817][ T5723] veth1_vlan: entered promiscuous mode
[ 131.775734][ T5723] veth0_macvtap: entered promiscuous mode
[ 131.784287][ T5723] veth1_macvtap: entered promiscuous mode
[ 131.813246][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 131.830494][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 131.855963][ T5723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.859407][ T5723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.862757][ T5723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 131.874141][ T5723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 132.196623][ T1036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 132.280665][ T1036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 132.352287][ T1036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 132.448193][ T1036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/02/09 08:19:44 executed programs: 0
[ 133.247520][ T4664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 133.258273][ T4664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 133.262090][ T4664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 133.266417][ T4664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 133.270890][ T4664] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 133.276208][ T4664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 133.587186][ T5796] chnl_net:caif_netlink_parms(): no params data found
[ 133.682388][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state
[ 133.704228][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state
[ 133.707350][ T5796] bridge_slave_0: entered allmulticast mode
[ 133.711318][ T5796] bridge_slave_0: entered promiscuous mode
[ 133.727981][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state
[ 133.730904][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state
[ 133.744651][ T5796] bridge_slave_1: entered allmulticast mode
[ 133.748043][ T5796] bridge_slave_1: entered promiscuous mode
[ 133.797273][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 133.814899][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 133.856591][ T5796] team0: Port device team_slave_0 added
[ 133.874845][ T5796] team0: Port device team_slave_1 added
[ 133.911987][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 133.916167][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 133.929845][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 133.946941][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 133.949786][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 133.975481][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 134.026234][ T5796] hsr_slave_0: entered promiscuous mode
[ 134.035697][ T5796] hsr_slave_1: entered promiscuous mode
[ 134.038713][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 134.042717][ T5796] Cannot create hsr debugfs directory
[ 134.285652][ T1036] bridge_slave_1: left allmulticast mode
[ 134.288232][ T1036] bridge_slave_1: left promiscuous mode
[ 134.290647][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.305652][ T1036] bridge_slave_0: left allmulticast mode
[ 134.309170][ T1036] bridge_slave_0: left promiscuous mode
[ 134.311598][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state
[ 134.877274][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 134.882374][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 134.889898][ T1036] bond0 (unregistering): Released all slaves
[ 134.949795][ T1036] hsr_slave_0: left promiscuous mode
[ 134.963424][ T1036] hsr_slave_1: left promiscuous mode
[ 134.976688][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 134.979729][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 134.986871][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 134.990046][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 135.000148][ T1036] veth1_macvtap: left promiscuous mode
[ 135.002456][ T1036] veth0_macvtap: left promiscuous mode
[ 135.006115][ T1036] veth1_vlan: left promiscuous mode
[ 135.008438][ T1036] veth0_vlan: left promiscuous mode
[ 135.327257][ T1036] team0 (unregistering): Port device team_slave_1 removed
[ 135.352208][ T1036] team0 (unregistering): Port device team_slave_0 removed
[ 135.364217][ T4664] Bluetooth: hci0: command tx timeout
[ 136.022956][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 136.137328][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 136.147471][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 136.170983][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 136.362907][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[ 136.406579][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[ 136.430849][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state
[ 136.434601][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 136.455945][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state
[ 136.458658][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 136.500073][ T5796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 136.520476][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 136.766071][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 136.827529][ T5796] veth0_vlan: entered promiscuous mode
[ 136.845026][ T5796] veth1_vlan: entered promiscuous mode
[ 136.893443][ T5796] veth0_macvtap: entered promiscuous mode
[ 136.907963][ T5796] veth1_macvtap: entered promiscuous mode
[ 136.930484][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 136.949188][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 136.967562][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.972082][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.984218][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 136.987585][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 137.115885][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 137.119652][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 137.171166][ T3088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 137.179384][ T3088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 137.444993][ T4664] Bluetooth: hci0: command tx timeout
[ 137.759406][ T5860] loop0: detected capacity change from 0 to 32768
[ 137.777282][ T5860] =======================================================
[ 137.777282][ T5860] WARNING: The mand mount option has been deprecated and
[ 137.777282][ T5860] and is ignored by this kernel. Remove the mand
[ 137.777282][ T5860] option from the mount to silence this warning.
[ 137.777282][ T5860] =======================================================
[ 137.912221][ T5860] JBD2: Ignoring recovery information on journal
[ 137.976772][ T5860] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 138.042576][ T24] audit: type=1804 audit(1739089189.355:2): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15" name="/newroot/0/file1/bus" dev="loop0" ino=17058 res=1 errno=0
[ 138.068151][ T5860] ==================================================================
[ 138.071419][ T5860] BUG: KASAN: slab-use-after-free in ocfs2_claim_suballoc_bits+0x10d3/0x2560
[ 138.075643][ T5860] Read of size 4 at addr ffff888032b85000 by task syz.0.15/5860
[ 138.080656][ T5860]
[ 138.081933][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz.0.15 Not tainted 6.14.0-rc1-syzkaller-g9946eaf552b1 #0
[ 138.081950][ T5860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 138.081957][ T5860] Call Trace:
[ 138.081964][ T5860]
[ 138.081970][ T5860] dump_stack_lvl+0x241/0x360
[ 138.081987][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10
[ 138.081997][ T5860] ? __pfx__printk+0x10/0x10
[ 138.082012][ T5860] ? _printk+0xd5/0x120
[ 138.082032][ T5860] ? __virt_addr_valid+0x183/0x530
[ 138.082048][ T5860] ? __virt_addr_valid+0x183/0x530
[ 138.082062][ T5860] print_report+0x169/0x550
[ 138.082078][ T5860] ? __virt_addr_valid+0x183/0x530
[ 138.082091][ T5860] ? __virt_addr_valid+0x183/0x530
[ 138.082105][ T5860] ? __virt_addr_valid+0x45f/0x530
[ 138.082118][ T5860] ? __phys_addr+0xba/0x170
[ 138.082132][ T5860] ? ocfs2_claim_suballoc_bits+0x10d3/0x2560
[ 138.082145][ T5860] kasan_report+0x143/0x180
[ 138.082159][ T5860] ? ocfs2_claim_suballoc_bits+0x10d3/0x2560
[ 138.082172][ T5860] ocfs2_claim_suballoc_bits+0x10d3/0x2560
[ 138.082187][ T5860] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10
[ 138.082199][ T5860] ? __mutex_unlock_slowpath+0x227/0x800
[ 138.082263][ T5860] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 138.082276][ T5860] ? jbd2_write_access_granted+0x71/0x310
[ 138.082294][ T5860] ? jbd2_write_access_granted+0x2f8/0x310
[ 138.082308][ T5860] ? jbd2_write_access_granted+0x71/0x310
[ 138.082323][ T5860] ocfs2_claim_metadata+0x16d/0x580
[ 138.082333][ T5860] ? jbd2__journal_start+0x3b8/0x5d0
[ 138.082347][ T5860] ? __pfx_ocfs2_claim_metadata+0x10/0x10
[ 138.082363][ T5860] ? __lock_acquire+0x1397/0x2100
[ 138.082378][ T5860] ? __pfx_ocfs2_start_trans+0x10/0x10
[ 138.082390][ T5860] ? ocfs2_metadata_cache_get_super+0x43/0x80
[ 138.082406][ T5860] ? ocfs2_inode_cache_get_super+0xd/0x40
[ 138.082417][ T5860] ocfs2_create_refcount_tree+0x699/0x15f0
[ 138.082431][ T5860] ? __pfx_ocfs2_create_refcount_tree+0x10/0x10
[ 138.082446][ T5860] ? __pfx_lock_release+0x10/0x10
[ 138.082460][ T5860] ? xas_find+0x213/0x960
[ 138.082474][ T5860] ? find_get_entries+0x1b9/0x900
[ 138.082485][ T5860] ? find_get_entries+0x7c9/0x900
[ 138.082496][ T5860] ? find_get_entries+0x1b9/0x900
[ 138.082508][ T5860] ? __pfx_find_get_entries+0x10/0x10
[ 138.082520][ T5860] ocfs2_reflink_remap_blocks+0x2f6/0x1f30
[ 138.082535][ T5860] ? __pfx_ocfs2_reflink_remap_blocks+0x10/0x10
[ 138.082546][ T5860] ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 138.082571][ T5860] ? down_write+0x18c/0x220
[ 138.082585][ T5860] ? __pfx_down_write+0x10/0x10
[ 138.082599][ T5860] ? generic_remap_file_range_prep+0x3e/0x60
[ 138.082614][ T5860] ocfs2_remap_file_range+0x5fa/0x8d0
[ 138.082631][ T5860] ? __pfx_ocfs2_remap_file_range+0x10/0x10
[ 138.082646][ T5860] ? rcu_read_lock_any_held+0xb7/0x160
[ 138.082657][ T5860] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 138.082669][ T5860] ? __pfx_ocfs2_remap_file_range+0x10/0x10
[ 138.082683][ T5860] vfs_copy_file_range+0xc07/0x14f0
[ 138.082698][ T5860] ? __pfx_vfs_copy_file_range+0x10/0x10
[ 138.082707][ T5860] ? __fget_files+0x395/0x410
[ 138.082718][ T5860] ? __might_fault+0xaa/0x120
[ 138.082733][ T5860] __se_sys_copy_file_range+0x3fa/0x600
[ 138.082745][ T5860] ? __pfx___se_sys_copy_file_range+0x10/0x10
[ 138.082755][ T5860] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 138.082768][ T5860] ? do_syscall_64+0x100/0x230
[ 138.082782][ T5860] ? __x64_sys_copy_file_range+0x21/0xf0
[ 138.082793][ T5860] do_syscall_64+0xf3/0x230
[ 138.082806][ T5860] ? clear_bhb_loop+0x35/0x90
[ 138.082822][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.082836][ T5860] RIP: 0033:0x7f1f32d79e79
[ 138.082847][ T5860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 138.082856][ T5860] RSP: 002b:00007f1f33bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[ 138.082869][ T5860] RAX: ffffffffffffffda RBX: 00007f1f32f15f80 RCX: 00007f1f32d79e79
[ 138.082877][ T5860] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006
[ 138.082883][ T5860] RBP: 00007f1f32de7916 R08: 0000000000000006 R09: 0000000000000000
[ 138.082889][ T5860] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[ 138.082895][ T5860] R13: 0000000000000000 R14: 00007f1f32f15f80 R15: 00007ffc082b7fa8
[ 138.082904][ T5860]
[ 138.082908][ T5860]
[ 138.265036][ T5860] Allocated by task 5868:
[ 138.267054][ T5860] kasan_save_track+0x3f/0x80
[ 138.269002][ T5860] __kasan_slab_alloc+0x66/0x80
[ 138.271297][ T5860] kmem_cache_alloc_noprof+0x1d9/0x380
[ 138.274495][ T5860] vm_area_alloc+0x24/0x1d0
[ 138.276637][ T5860] mmap_region+0x1ae6/0x2f80
[ 138.278465][ T5860] do_mmap+0xecc/0x13a0
[ 138.280094][ T5860] vm_mmap_pgoff+0x214/0x430
[ 138.281646][ T5860] elf_load+0x25a/0x700
[ 138.283289][ T5860] load_elf_interp+0x440/0xac0
[ 138.285624][ T5860] load_elf_binary+0x1a87/0x2820
[ 138.287628][ T5860] bprm_execve+0x979/0x1430
[ 138.289180][ T5860] do_execveat_common+0x57f/0x710
[ 138.291252][ T5860] __x64_sys_execve+0x92/0xb0
[ 138.293285][ T5860] do_syscall_64+0xf3/0x230
[ 138.295432][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.297779][ T5860]
[ 138.298733][ T5860] Freed by task 5868:
[ 138.300299][ T5860] kasan_save_track+0x3f/0x80
[ 138.302150][ T5860] kasan_save_free_info+0x40/0x50
[ 138.304891][ T5860] __kasan_slab_free+0x59/0x70
[ 138.307838][ T5860] kmem_cache_free+0x195/0x410
[ 138.310033][ T5860] exit_mmap+0x6b9/0xd40
[ 138.311954][ T5860] __mmput+0x115/0x420
[ 138.313562][ T5860] exit_mm+0x220/0x310
[ 138.315279][ T5860] do_exit+0x9ad/0x28e0
[ 138.316993][ T5860] do_group_exit+0x207/0x2c0
[ 138.318786][ T5860] __x64_sys_exit_group+0x3f/0x40
[ 138.320800][ T5860] x64_sys_call+0x26a8/0x26b0
[ 138.322957][ T5860] do_syscall_64+0xf3/0x230
[ 138.325212][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.328351][ T5860]
[ 138.329380][ T5860] The buggy address belongs to the object at ffff888032b85000
[ 138.329380][ T5860] which belongs to the cache vm_area_struct of size 184
[ 138.334867][ T5860] The buggy address is located 0 bytes inside of
[ 138.334867][ T5860] freed 184-byte region [ffff888032b85000, ffff888032b850b8)
[ 138.340276][ T5860]
[ 138.341261][ T5860] The buggy address belongs to the physical page:
[ 138.343804][ T5860] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32b85
[ 138.347491][ T5860] memcg:ffff88803cd69401
[ 138.349314][ T5860] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 138.352436][ T5860] page_type: f5(slab)
[ 138.354038][ T5860] raw: 04fff00000000000 ffff88801be86b40 ffffea0001015f80 000000000000000b
[ 138.357722][ T5860] raw: 0000000000000000 0000000000100010 00000000f5000000 ffff88803cd69401
[ 138.361162][ T5860] page dumped because: kasan: bad access detected
[ 138.364108][ T5860] page_owner tracks the page as allocated
[ 138.366618][ T5860] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5839, tgid 5839 (dhcpcd-run-hook), ts 136651693003, free_ts 136649565988
[ 138.374105][ T5860] post_alloc_hook+0x1f4/0x240
[ 138.376057][ T5860] get_page_from_freelist+0x365c/0x37a0
[ 138.378189][ T5860] __alloc_frozen_pages_noprof+0x292/0x710
[ 138.380536][ T5860] alloc_pages_mpol+0x311/0x660
[ 138.382593][ T5860] allocate_slab+0x8f/0x3a0
[ 138.384805][ T5860] ___slab_alloc+0xc27/0x14a0
[ 138.387275][ T5860] __slab_alloc+0x58/0xa0
[ 138.389352][ T5860] kmem_cache_alloc_noprof+0x268/0x380
[ 138.392037][ T5860] vm_area_dup+0x27/0x290
[ 138.394131][ T5860] copy_mm+0xcd6/0x2160
[ 138.395998][ T5860] copy_process+0x1845/0x3d50
[ 138.398061][ T5860] kernel_clone+0x226/0x8e0
[ 138.399863][ T5860] __x64_sys_clone+0x258/0x2a0
[ 138.401973][ T5860] do_syscall_64+0xf3/0x230
[ 138.403849][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.407223][ T5860] page last free pid 5844 tgid 5844 stack trace:
[ 138.410715][ T5860] free_frozen_pages+0xe0d/0x10e0
[ 138.412861][ T5860] tlb_finish_mmu+0x11f/0x200
[ 138.414753][ T5860] exit_mmap+0x52a/0xd40
[ 138.416540][ T5860] __mmput+0x115/0x420
[ 138.418266][ T5860] exit_mm+0x220/0x310
[ 138.419945][ T5860] do_exit+0x9ad/0x28e0
[ 138.421547][ T5860] do_group_exit+0x207/0x2c0
[ 138.423644][ T5860] __x64_sys_exit_group+0x3f/0x40
[ 138.426526][ T5860] x64_sys_call+0x26a8/0x26b0
[ 138.428848][ T5860] do_syscall_64+0xf3/0x230
[ 138.430965][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.433631][ T5860]
[ 138.434641][ T5860] Memory state around the buggy address:
[ 138.436835][ T5860] ffff888032b84f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 138.439854][ T5860] ffff888032b84f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 138.443006][ T5860] >ffff888032b85000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 138.446437][ T5860] ^
[ 138.448546][ T5860] ffff888032b85080: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa
[ 138.452729][ T5860] ffff888032b85100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 138.456523][ T5860] ==================================================================
[ 138.491604][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[ 138.495395][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[ 138.625486][ T5860] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 138.628326][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz.0.15 Not tainted 6.14.0-rc1-syzkaller-g9946eaf552b1 #0
[ 138.632030][ T5860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 138.636146][ T5860] Call Trace:
[ 138.637309][ T5860]
[ 138.638583][ T5860] dump_stack_lvl+0x241/0x360
[ 138.640678][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10
[ 138.642906][ T5860] ? __pfx__printk+0x10/0x10
[ 138.645141][ T5860] ? preempt_schedule+0xe1/0xf0
[ 138.647322][ T5860] ? vscnprintf+0x5d/0x90
[ 138.649121][ T5860] panic+0x349/0x880
[ 138.650708][ T5860] ? check_panic_on_warn+0x21/0xb0
[ 138.652684][ T5860] ? __pfx_panic+0x10/0x10
[ 138.654469][ T5860] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 138.657007][ T5860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 138.659520][ T5860] ? print_report+0x502/0x550
[ 138.661577][ T5860] check_panic_on_warn+0x86/0xb0
[ 138.663900][ T5860] ? ocfs2_claim_suballoc_bits+0x10d3/0x2560
[ 138.666731][ T5860] end_report+0x77/0x160
[ 138.668730][ T5860] kasan_report+0x154/0x180
[ 138.670915][ T5860] ? ocfs2_claim_suballoc_bits+0x10d3/0x2560
[ 138.673257][ T5860] ocfs2_claim_suballoc_bits+0x10d3/0x2560
[ 138.675463][ T5860] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10
[ 138.677842][ T5860] ? __mutex_unlock_slowpath+0x227/0x800
[ 138.680081][ T5860] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 138.682360][ T5860] ? jbd2_write_access_granted+0x71/0x310
[ 138.684717][ T5860] ? jbd2_write_access_granted+0x2f8/0x310
[ 138.687201][ T5860] ? jbd2_write_access_granted+0x71/0x310
[ 138.689567][ T5860] ocfs2_claim_metadata+0x16d/0x580
[ 138.692060][ T5860] ? jbd2__journal_start+0x3b8/0x5d0
[ 138.694327][ T5860] ? __pfx_ocfs2_claim_metadata+0x10/0x10
[ 138.696412][ T5860] ? __lock_acquire+0x1397/0x2100
[ 138.698305][ T5860] ? __pfx_ocfs2_start_trans+0x10/0x10
[ 138.700362][ T5860] ? ocfs2_metadata_cache_get_super+0x43/0x80
[ 138.702839][ T5860] ? ocfs2_inode_cache_get_super+0xd/0x40
[ 138.705291][ T5860] ocfs2_create_refcount_tree+0x699/0x15f0
[ 138.708250][ T5860] ? __pfx_ocfs2_create_refcount_tree+0x10/0x10
[ 138.710949][ T5860] ? __pfx_lock_release+0x10/0x10
[ 138.713067][ T5860] ? xas_find+0x213/0x960
[ 138.714685][ T5860] ? find_get_entries+0x1b9/0x900
[ 138.716657][ T5860] ? find_get_entries+0x7c9/0x900
[ 138.718492][ T5860] ? find_get_entries+0x1b9/0x900
[ 138.720392][ T5860] ? __pfx_find_get_entries+0x10/0x10
[ 138.722413][ T5860] ocfs2_reflink_remap_blocks+0x2f6/0x1f30
[ 138.724736][ T5860] ? __pfx_ocfs2_reflink_remap_blocks+0x10/0x10
[ 138.728480][ T5860] ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 138.731601][ T5860] ? down_write+0x18c/0x220
[ 138.733421][ T5860] ? __pfx_down_write+0x10/0x10
[ 138.735598][ T5860] ? generic_remap_file_range_prep+0x3e/0x60
[ 138.738439][ T5860] ocfs2_remap_file_range+0x5fa/0x8d0
[ 138.740949][ T5860] ? __pfx_ocfs2_remap_file_range+0x10/0x10
[ 138.743982][ T5860] ? rcu_read_lock_any_held+0xb7/0x160
[ 138.746935][ T5860] ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 138.750409][ T5860] ? __pfx_ocfs2_remap_file_range+0x10/0x10
[ 138.753449][ T5860] vfs_copy_file_range+0xc07/0x14f0
[ 138.755818][ T5860] ? __pfx_vfs_copy_file_range+0x10/0x10
[ 138.757980][ T5860] ? __fget_files+0x395/0x410
[ 138.760022][ T5860] ? __might_fault+0xaa/0x120
[ 138.762097][ T5860] __se_sys_copy_file_range+0x3fa/0x600
[ 138.765546][ T5860] ? __pfx___se_sys_copy_file_range+0x10/0x10
[ 138.769401][ T5860] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 138.772363][ T5860] ? do_syscall_64+0x100/0x230
[ 138.774404][ T5860] ? __x64_sys_copy_file_range+0x21/0xf0
[ 138.777072][ T5860] do_syscall_64+0xf3/0x230
[ 138.779318][ T5860] ? clear_bhb_loop+0x35/0x90
[ 138.781517][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.784459][ T5860] RIP: 0033:0x7f1f32d79e79
[ 138.786737][ T5860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 138.796808][ T5860] RSP: 002b:00007f1f33bb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[ 138.800742][ T5860] RAX: ffffffffffffffda RBX: 00007f1f32f15f80 RCX: 00007f1f32d79e79
[ 138.804378][ T5860] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006
[ 138.807568][ T5860] RBP: 00007f1f32de7916 R08: 0000000000000006 R09: 0000000000000000
[ 138.810845][ T5860] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000
[ 138.814262][ T5860] R13: 0000000000000000 R14: 00007f1f32f15f80 R15: 00007ffc082b7fa8
[ 138.817371][ T5860]
[ 138.818901][ T5860] Kernel Offset: disabled
[ 138.820676][ T5860] Rebooting in 86400 seconds..