[ 86.589637][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:4088' (ED25519) to the list of known hosts. 2025/01/03 08:39:32 ignoring optional flag "sandboxArg"="0" 2025/01/03 08:39:33 parsed 1 programs [ 94.557649][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.643093][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.651845][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.666855][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.670280][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.996379][ T5639] chnl_net:caif_netlink_parms(): no params data found [ 98.023576][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.026473][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.029184][ T5639] bridge_slave_0: entered allmulticast mode [ 98.031904][ T5639] bridge_slave_0: entered promiscuous mode [ 98.041100][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.043912][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.047856][ T5639] bridge_slave_1: entered allmulticast mode [ 98.050675][ T5639] bridge_slave_1: entered promiscuous mode [ 98.066260][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.073156][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.087594][ T5639] team0: Port device team_slave_0 added [ 98.091938][ T5639] team0: Port device team_slave_1 added [ 98.101578][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.104872][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.116514][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.121260][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.123832][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.133711][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.149626][ T5639] hsr_slave_0: entered promiscuous mode [ 98.152062][ T5639] hsr_slave_1: entered promiscuous mode [ 98.368778][ T5639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.377052][ T5639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.386765][ T5639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.397471][ T5639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.413252][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.416140][ T5639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.419124][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.421891][ T5639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.492638][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.509931][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.699871][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.732744][ T5639] veth0_vlan: entered promiscuous mode [ 98.761777][ T5639] veth1_vlan: entered promiscuous mode [ 98.792100][ T5639] veth0_macvtap: entered promiscuous mode [ 98.802510][ T5639] veth1_macvtap: entered promiscuous mode [ 98.829800][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.847343][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.858061][ T5639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.861516][ T5639] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.864808][ T5639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.883273][ T5639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.000699][ T73] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.018184][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.021094][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.023939][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.028993][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.031940][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.034728][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.039886][ T73] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.087377][ T73] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.131070][ T73] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/01/03 08:39:42 executed programs: 0 [ 99.964019][ T5360] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.967731][ T5360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.970648][ T5360] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.974304][ T5360] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.979327][ T5360] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.982199][ T5360] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.143098][ T5728] chnl_net:caif_netlink_parms(): no params data found [ 100.207984][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.210882][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.213710][ T5728] bridge_slave_0: entered allmulticast mode [ 100.225943][ T5728] bridge_slave_0: entered promiscuous mode [ 100.229409][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.232225][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.235005][ T5728] bridge_slave_1: entered allmulticast mode [ 100.255437][ T5728] bridge_slave_1: entered promiscuous mode [ 100.287979][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.292930][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.320878][ T5728] team0: Port device team_slave_0 added [ 100.336648][ T5728] team0: Port device team_slave_1 added [ 100.358749][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.361432][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.385535][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.405650][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.408313][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.435965][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.479115][ T5728] hsr_slave_0: entered promiscuous mode [ 100.481702][ T5728] hsr_slave_1: entered promiscuous mode [ 100.486415][ T5728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.495955][ T5728] Cannot create hsr debugfs directory [ 101.790667][ T73] bridge_slave_1: left allmulticast mode [ 101.792907][ T73] bridge_slave_1: left promiscuous mode [ 101.805799][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.811437][ T73] bridge_slave_0: left allmulticast mode [ 101.813651][ T73] bridge_slave_0: left promiscuous mode [ 101.826421][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.922198][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.937315][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.941773][ T73] bond0 (unregistering): Released all slaves [ 102.000478][ T73] hsr_slave_0: left promiscuous mode [ 102.005671][ T73] hsr_slave_1: left promiscuous mode [ 102.009971][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.012648][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.018065][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.021065][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.025434][ T5360] Bluetooth: hci0: command tx timeout [ 102.028100][ T73] veth1_macvtap: left promiscuous mode [ 102.030259][ T73] veth0_macvtap: left promiscuous mode [ 102.032776][ T73] veth1_vlan: left promiscuous mode [ 102.034836][ T73] veth0_vlan: left promiscuous mode [ 102.113032][ T73] team0 (unregistering): Port device team_slave_1 removed [ 102.121404][ T73] team0 (unregistering): Port device team_slave_0 removed [ 102.388076][ T5728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.413303][ T5728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.422186][ T5728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.439496][ T5728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.529828][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.546342][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.576295][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.579464][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.583172][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.586137][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.615953][ T5728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.740787][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.788861][ T5728] veth0_vlan: entered promiscuous mode [ 102.806177][ T5728] veth1_vlan: entered promiscuous mode [ 102.823386][ T5728] veth0_macvtap: entered promiscuous mode [ 102.835938][ T5728] veth1_macvtap: entered promiscuous mode [ 102.850201][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.854258][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.876432][ T5728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.879795][ T5728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.883186][ T5728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.905256][ T5728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.946652][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.949708][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.966805][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.969833][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.107244][ T5852] loop0: detected capacity change from 0 to 32768 [ 103.116026][ T5852] ================================================================== [ 103.119240][ T5852] BUG: KASAN: use-after-free in __ocfs2_find_path+0x203/0x7e0 [ 103.122096][ T5852] Read of size 4 at addr ffff88801fc9b000 by task syz.0.15/5852 [ 103.126033][ T5852] [ 103.127125][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz.0.15 Not tainted 6.13.0-rc5-syzkaller-g0bc21e701a6f #0 [ 103.130771][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.134789][ T5852] Call Trace: [ 103.136105][ T5852] [ 103.137237][ T5852] dump_stack_lvl+0x241/0x360 [ 103.139052][ T5852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.141062][ T5852] ? __pfx__printk+0x10/0x10 [ 103.142850][ T5852] ? _printk+0xd5/0x120 [ 103.144427][ T5852] ? __virt_addr_valid+0x183/0x530 [ 103.146510][ T5852] ? __virt_addr_valid+0x183/0x530 [ 103.148493][ T5852] print_report+0x169/0x550 [ 103.150283][ T5852] ? __virt_addr_valid+0x183/0x530 [ 103.152376][ T5852] ? __virt_addr_valid+0x183/0x530 [ 103.154570][ T5852] ? __virt_addr_valid+0x45f/0x530 [ 103.156578][ T5852] ? __phys_addr+0xba/0x170 [ 103.158327][ T5852] ? __ocfs2_find_path+0x203/0x7e0 [ 103.160345][ T5852] kasan_report+0x143/0x180 [ 103.162120][ T5852] ? __ocfs2_find_path+0x203/0x7e0 [ 103.164114][ T5852] __ocfs2_find_path+0x203/0x7e0 [ 103.166043][ T5852] ? __pfx_find_leaf_ins+0x10/0x10 [ 103.167992][ T5852] ? __pfx___ocfs2_find_path+0x10/0x10 [ 103.170089][ T5852] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 103.172521][ T5852] ocfs2_find_leaf+0xcf/0x230 [ 103.174398][ T5852] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 103.176417][ T5852] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 103.178680][ T5852] ocfs2_get_clusters_nocache+0x1ad/0xbf0 [ 103.180789][ T5852] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 103.183358][ T5852] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 103.185410][ T5852] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 103.187661][ T5852] ? do_raw_spin_unlock+0x58/0x8b0 [ 103.189703][ T5852] ? lock_release+0xbf/0xa30 [ 103.191481][ T5852] ocfs2_get_clusters+0x5bd/0xbd0 [ 103.193398][ T5852] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 103.195421][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.197263][ T5852] ? lock_acquire+0xe3/0x550 [ 103.198985][ T5852] ? __pfx_lock_acquire+0x10/0x10 [ 103.200805][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.202637][ T5852] ? __switch_to+0xe93/0x1c30 [ 103.204453][ T5852] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 103.206603][ T5852] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 103.208920][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.210736][ T5852] ? lock_release+0xbf/0xa30 [ 103.212460][ T5852] ocfs2_read_virt_blocks+0x313/0xb10 [ 103.214449][ T5852] ? do_raw_spin_unlock+0x58/0x8b0 [ 103.216372][ T5852] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 103.218803][ T5852] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 103.220972][ T5852] ? __pfx_number+0x10/0x10 [ 103.222768][ T5852] ? string+0x26a/0x2b0 [ 103.224818][ T5852] ? widen_string+0x3a/0x310 [ 103.227010][ T5852] ocfs2_find_entry+0x43b/0x2730 [ 103.228855][ T5852] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 103.230720][ T5852] ? __asan_memset+0x23/0x50 [ 103.232427][ T5852] ? lockdep_init_map_type+0xa1/0x910 [ 103.234470][ T5852] ? schedule+0x90/0x320 [ 103.236072][ T5852] ? do_raw_spin_unlock+0x58/0x8b0 [ 103.238060][ T5852] ? set_normalized_timespec64+0x119/0x1e0 [ 103.240402][ T5852] ? ocfs2_lock_res_init_common+0x32a/0x430 [ 103.242683][ T5852] ? format_decode+0xc5f/0x1bb0 [ 103.244412][ T5852] ? __pfx_format_decode+0x10/0x10 [ 103.246362][ T5852] ? __mutex_trylock_common+0x183/0x2e0 [ 103.248297][ T5852] ? __pfx___might_resched+0x10/0x10 [ 103.250282][ T5852] ? string+0x26a/0x2b0 [ 103.251672][ T5852] ? widen_string+0x3a/0x310 [ 103.253432][ T5852] ? string+0x26a/0x2b0 [ 103.255033][ T5852] ? vsnprintf+0x1ccd/0x1da0 [ 103.256776][ T5852] ocfs2_find_files_on_disk+0xff/0x360 [ 103.258909][ T5852] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 103.261129][ T5852] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 103.263343][ T5852] ? kasan_save_track+0x51/0x80 [ 103.265101][ T5852] ? kasan_save_track+0x3f/0x80 [ 103.266967][ T5852] ? __kasan_kmalloc+0x98/0xb0 [ 103.268697][ T5852] ? ocfs2_new_dlm_debug+0x97/0x200 [ 103.270750][ T5852] ocfs2_get_system_file_inode+0x305/0x7b0 [ 103.272906][ T5852] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 103.275873][ T5852] ocfs2_init_global_system_inodes+0x32c/0x730 [ 103.278884][ T5852] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 103.282137][ T5852] ? __kmalloc_cache_noprof+0x243/0x390 [ 103.284814][ T5852] ? ocfs2_new_dlm_debug+0x97/0x200 [ 103.287287][ T5852] ? ocfs2_new_dlm_debug+0xb5/0x200 [ 103.289870][ T5852] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 103.292554][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.294711][ T5852] ? trace_ocfs2_initialize_super+0x9e/0x230 [ 103.296954][ T5852] ocfs2_fill_super+0x2f5b/0x5760 [ 103.298934][ T5852] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 103.301487][ T5852] ? stack_trace_save+0x118/0x1d0 [ 103.304087][ T5852] ? unwind_next_frame+0x18e6/0x22d0 [ 103.306323][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.308055][ T5852] ? lock_release+0xbf/0xa30 [ 103.309664][ T5852] ? do_raw_spin_lock+0x14f/0x370 [ 103.311491][ T5852] ? __pfx_lock_release+0x10/0x10 [ 103.313372][ T5852] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.315805][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.317688][ T5852] ? lock_acquire+0xe3/0x550 [ 103.319466][ T5852] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 103.322058][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.323900][ T5852] ? lock_release+0xbf/0xa30 [ 103.325676][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.327611][ T5852] ? lock_acquire+0xe3/0x550 [ 103.329558][ T5852] ? string+0x26a/0x2b0 [ 103.331482][ T5852] ? widen_string+0x3a/0x310 [ 103.333244][ T5852] ? string+0x26a/0x2b0 [ 103.334856][ T5852] ? bdev_name+0x2b1/0x3c0 [ 103.336892][ T5852] ? pointer+0x703/0x1210 [ 103.338552][ T5852] ? __pfx_pointer+0x10/0x10 [ 103.340292][ T5852] ? __pfx_format_decode+0x10/0x10 [ 103.342259][ T5852] ? __mutex_unlock_slowpath+0x21e/0x790 [ 103.344426][ T5852] ? vsnprintf+0x1ccd/0x1da0 [ 103.346227][ T5852] ? snprintf+0xda/0x120 [ 103.347875][ T5852] ? __pfx_lock_release+0x10/0x10 [ 103.349889][ T5852] ? do_raw_spin_lock+0x14f/0x370 [ 103.351767][ T5852] ? __pfx_snprintf+0x10/0x10 [ 103.353551][ T5852] ? set_blocksize+0x1fc/0x360 [ 103.355407][ T5852] ? sb_set_blocksize+0x98/0xf0 [ 103.357287][ T5852] ? setup_bdev_super+0x4e6/0x5d0 [ 103.359288][ T5852] mount_bdev+0x20a/0x2d0 [ 103.360768][ T5852] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 103.362846][ T5852] ? __pfx_mount_bdev+0x10/0x10 [ 103.364778][ T5852] ? vfs_parse_fs_string+0x190/0x230 [ 103.366712][ T5852] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 103.368903][ T5852] legacy_get_tree+0xee/0x190 [ 103.370706][ T5852] ? __pfx_ocfs2_mount+0x10/0x10 [ 103.372541][ T5852] vfs_get_tree+0x90/0x2b0 [ 103.374246][ T5852] do_new_mount+0x2be/0xb40 [ 103.375953][ T5852] ? __pfx_do_new_mount+0x10/0x10 [ 103.377903][ T5852] __se_sys_mount+0x2d6/0x3c0 [ 103.379815][ T5852] ? __pfx___se_sys_mount+0x10/0x10 [ 103.381921][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.383808][ T5852] ? __x64_sys_mount+0x20/0xc0 [ 103.385705][ T5852] do_syscall_64+0xf3/0x230 [ 103.387450][ T5852] ? clear_bhb_loop+0x35/0x90 [ 103.389207][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.391290][ T5852] RIP: 0033:0x7f7434f8167a [ 103.392877][ T5852] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.399757][ T5852] RSP: 002b:00007f7435e68e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.402826][ T5852] RAX: ffffffffffffffda RBX: 00007f7435e68f10 RCX: 00007f7434f8167a [ 103.405604][ T5852] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007f7435e68ed0 [ 103.408616][ T5852] RBP: 0000000020004440 R08: 00007f7435e68f10 R09: 0000000001000000 [ 103.411703][ T5852] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 103.414818][ T5852] R13: 00007f7435e68ed0 R14: 000000000000444a R15: 00000000200005c0 [ 103.417840][ T5852] [ 103.418991][ T5852] [ 103.419847][ T5852] The buggy address belongs to the physical page: [ 103.422135][ T5852] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1a2 pfn:0x1fc9b [ 103.425485][ T5852] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.428150][ T5852] raw: 00fff00000000000 ffffea0000469148 ffffea0000468b08 0000000000000000 [ 103.431427][ T5852] raw: 00000000000001a2 0000000000000000 00000000ffffffff 0000000000000000 [ 103.434541][ T5852] page dumped because: kasan: bad access detected [ 103.436950][ T5852] page_owner tracks the page as freed [ 103.439041][ T5852] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5850, tgid 5850 (rm), ts 102903642435, free_ts 102922156869 [ 103.445548][ T5852] post_alloc_hook+0x1f3/0x230 [ 103.447415][ T5852] get_page_from_freelist+0x365c/0x37a0 [ 103.449558][ T5852] __alloc_pages_noprof+0x292/0x710 [ 103.451544][ T5852] alloc_pages_mpol_noprof+0x3e8/0x680 [ 103.453579][ T5852] vma_alloc_folio_noprof+0x12e/0x230 [ 103.455566][ T5852] folio_prealloc+0x2e/0x170 [ 103.457304][ T5852] handle_pte_fault+0xc65/0x5ed0 [ 103.459216][ T5852] handle_mm_fault+0x1106/0x1bb0 [ 103.461058][ T5852] exc_page_fault+0x459/0x8b0 [ 103.462879][ T5852] asm_exc_page_fault+0x26/0x30 [ 103.464792][ T5852] page last free pid 5850 tgid 5850 stack trace: [ 103.467194][ T5852] free_unref_folios+0xe39/0x18b0 [ 103.469178][ T5852] folios_put_refs+0x76c/0x860 [ 103.470981][ T5852] free_pages_and_swap_cache+0x2ea/0x690 [ 103.473164][ T5852] tlb_flush_mmu+0x3a3/0x680 [ 103.474981][ T5852] tlb_finish_mmu+0xd4/0x200 [ 103.476761][ T5852] exit_mmap+0x496/0xc20 [ 103.478419][ T5852] __mmput+0x115/0x3c0 [ 103.480038][ T5852] exit_mm+0x220/0x310 [ 103.481649][ T5852] do_exit+0x9ad/0x28e0 [ 103.483314][ T5852] do_group_exit+0x207/0x2c0 [ 103.485157][ T5852] __x64_sys_exit_group+0x3f/0x40 [ 103.487095][ T5852] x64_sys_call+0x26a8/0x26b0 [ 103.488845][ T5852] do_syscall_64+0xf3/0x230 [ 103.490582][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.492885][ T5852] [ 103.493837][ T5852] Memory state around the buggy address: [ 103.495900][ T5852] ffff88801fc9af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.498894][ T5852] ffff88801fc9af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.502068][ T5852] >ffff88801fc9b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.505134][ T5852] ^ [ 103.506658][ T5852] ffff88801fc9b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.509650][ T5852] ffff88801fc9b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.512630][ T5852] ================================================================== [ 103.543983][ T5852] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.546776][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz.0.15 Not tainted 6.13.0-rc5-syzkaller-g0bc21e701a6f #0 [ 103.550642][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.554600][ T5852] Call Trace: [ 103.555820][ T5852] [ 103.556964][ T5852] dump_stack_lvl+0x241/0x360 [ 103.558774][ T5852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.560710][ T5852] ? __pfx__printk+0x10/0x10 [ 103.562611][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.564416][ T5852] ? preempt_schedule+0xe1/0xf0 [ 103.566331][ T5852] ? vscnprintf+0x5d/0x90 [ 103.568020][ T5852] panic+0x349/0x880 [ 103.569511][ T5852] ? check_panic_on_warn+0x21/0xb0 [ 103.571434][ T5852] ? __pfx_panic+0x10/0x10 [ 103.572964][ T5852] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 103.575323][ T5852] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 103.577668][ T5852] ? print_report+0x502/0x550 [ 103.579452][ T5852] check_panic_on_warn+0x86/0xb0 [ 103.581261][ T5852] ? __ocfs2_find_path+0x203/0x7e0 [ 103.583166][ T5852] end_report+0x77/0x160 [ 103.584771][ T5852] kasan_report+0x154/0x180 [ 103.586392][ T5852] ? __ocfs2_find_path+0x203/0x7e0 [ 103.588329][ T5852] __ocfs2_find_path+0x203/0x7e0 [ 103.590223][ T5852] ? __pfx_find_leaf_ins+0x10/0x10 [ 103.592088][ T5852] ? __pfx___ocfs2_find_path+0x10/0x10 [ 103.594216][ T5852] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 103.596466][ T5852] ocfs2_find_leaf+0xcf/0x230 [ 103.598254][ T5852] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 103.600280][ T5852] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 103.602408][ T5852] ocfs2_get_clusters_nocache+0x1ad/0xbf0 [ 103.604581][ T5852] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 103.606866][ T5852] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 103.609045][ T5852] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 103.611312][ T5852] ? do_raw_spin_unlock+0x58/0x8b0 [ 103.613228][ T5852] ? lock_release+0xbf/0xa30 [ 103.614952][ T5852] ocfs2_get_clusters+0x5bd/0xbd0 [ 103.616786][ T5852] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 103.618899][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.620744][ T5852] ? lock_acquire+0xe3/0x550 [ 103.622606][ T5852] ? __pfx_lock_acquire+0x10/0x10 [ 103.624559][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.626514][ T5852] ? __switch_to+0xe93/0x1c30 [ 103.628278][ T5852] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 103.630584][ T5852] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 103.632864][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.634726][ T5852] ? lock_release+0xbf/0xa30 [ 103.636511][ T5852] ocfs2_read_virt_blocks+0x313/0xb10 [ 103.638615][ T5852] ? do_raw_spin_unlock+0x58/0x8b0 [ 103.640589][ T5852] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 103.642896][ T5852] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 103.645119][ T5852] ? __pfx_number+0x10/0x10 [ 103.647134][ T5852] ? string+0x26a/0x2b0 [ 103.648731][ T5852] ? widen_string+0x3a/0x310 [ 103.650507][ T5852] ocfs2_find_entry+0x43b/0x2730 [ 103.652387][ T5852] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 103.654429][ T5852] ? __asan_memset+0x23/0x50 [ 103.656294][ T5852] ? lockdep_init_map_type+0xa1/0x910 [ 103.658411][ T5852] ? schedule+0x90/0x320 [ 103.660070][ T5852] ? do_raw_spin_unlock+0x58/0x8b0 [ 103.662105][ T5852] ? set_normalized_timespec64+0x119/0x1e0 [ 103.664367][ T5852] ? ocfs2_lock_res_init_common+0x32a/0x430 [ 103.666603][ T5852] ? format_decode+0xc5f/0x1bb0 [ 103.668460][ T5852] ? __pfx_format_decode+0x10/0x10 [ 103.670463][ T5852] ? __mutex_trylock_common+0x183/0x2e0 [ 103.672579][ T5852] ? __pfx___might_resched+0x10/0x10 [ 103.674610][ T5852] ? string+0x26a/0x2b0 [ 103.676231][ T5852] ? widen_string+0x3a/0x310 [ 103.678005][ T5852] ? string+0x26a/0x2b0 [ 103.679669][ T5852] ? vsnprintf+0x1ccd/0x1da0 [ 103.681494][ T5852] ocfs2_find_files_on_disk+0xff/0x360 [ 103.683373][ T5852] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 103.685567][ T5852] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 103.687939][ T5852] ? kasan_save_track+0x51/0x80 [ 103.689836][ T5852] ? kasan_save_track+0x3f/0x80 [ 103.691673][ T5852] ? __kasan_kmalloc+0x98/0xb0 [ 103.693507][ T5852] ? ocfs2_new_dlm_debug+0x97/0x200 [ 103.695444][ T5852] ocfs2_get_system_file_inode+0x305/0x7b0 [ 103.697688][ T5852] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 103.700149][ T5852] ocfs2_init_global_system_inodes+0x32c/0x730 [ 103.702480][ T5852] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 103.705009][ T5852] ? __kmalloc_cache_noprof+0x243/0x390 [ 103.707204][ T5852] ? ocfs2_new_dlm_debug+0x97/0x200 [ 103.709187][ T5852] ? ocfs2_new_dlm_debug+0xb5/0x200 [ 103.711225][ T5852] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 103.713469][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.715373][ T5852] ? trace_ocfs2_initialize_super+0x9e/0x230 [ 103.717643][ T5852] ocfs2_fill_super+0x2f5b/0x5760 [ 103.719585][ T5852] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 103.721635][ T5852] ? stack_trace_save+0x118/0x1d0 [ 103.723469][ T5852] ? unwind_next_frame+0x18e6/0x22d0 [ 103.725439][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.727212][ T5852] ? lock_release+0xbf/0xa30 [ 103.729050][ T5852] ? do_raw_spin_lock+0x14f/0x370 [ 103.731042][ T5852] ? __pfx_lock_release+0x10/0x10 [ 103.733121][ T5852] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.735645][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.737651][ T5852] ? lock_acquire+0xe3/0x550 [ 103.739704][ T5852] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 103.742116][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.743990][ T5852] ? lock_release+0xbf/0xa30 [ 103.745801][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.747658][ T5852] ? lock_acquire+0xe3/0x550 [ 103.749517][ T5852] ? string+0x26a/0x2b0 [ 103.751158][ T5852] ? widen_string+0x3a/0x310 [ 103.753042][ T5852] ? string+0x26a/0x2b0 [ 103.754673][ T5852] ? bdev_name+0x2b1/0x3c0 [ 103.756347][ T5852] ? pointer+0x703/0x1210 [ 103.758006][ T5852] ? __pfx_pointer+0x10/0x10 [ 103.759883][ T5852] ? __pfx_format_decode+0x10/0x10 [ 103.761928][ T5852] ? __mutex_unlock_slowpath+0x21e/0x790 [ 103.764008][ T5852] ? vsnprintf+0x1ccd/0x1da0 [ 103.765987][ T5852] ? snprintf+0xda/0x120 [ 103.767661][ T5852] ? __pfx_lock_release+0x10/0x10 [ 103.769688][ T5852] ? do_raw_spin_lock+0x14f/0x370 [ 103.771592][ T5852] ? __pfx_snprintf+0x10/0x10 [ 103.773312][ T5852] ? set_blocksize+0x1fc/0x360 [ 103.775097][ T5852] ? sb_set_blocksize+0x98/0xf0 [ 103.776898][ T5852] ? setup_bdev_super+0x4e6/0x5d0 [ 103.778732][ T5852] mount_bdev+0x20a/0x2d0 [ 103.780228][ T5852] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 103.782227][ T5852] ? __pfx_mount_bdev+0x10/0x10 [ 103.784079][ T5852] ? vfs_parse_fs_string+0x190/0x230 [ 103.786113][ T5852] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 103.788213][ T5852] legacy_get_tree+0xee/0x190 [ 103.790055][ T5852] ? __pfx_ocfs2_mount+0x10/0x10 [ 103.791816][ T5852] vfs_get_tree+0x90/0x2b0 [ 103.793509][ T5852] do_new_mount+0x2be/0xb40 [ 103.795244][ T5852] ? __pfx_do_new_mount+0x10/0x10 [ 103.797161][ T5852] __se_sys_mount+0x2d6/0x3c0 [ 103.799062][ T5852] ? __pfx___se_sys_mount+0x10/0x10 [ 103.801048][ T5852] ? rcu_is_watching+0x15/0xb0 [ 103.802880][ T5852] ? __x64_sys_mount+0x20/0xc0 [ 103.804669][ T5852] do_syscall_64+0xf3/0x230 [ 103.806408][ T5852] ? clear_bhb_loop+0x35/0x90 [ 103.808165][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.810478][ T5852] RIP: 0033:0x7f7434f8167a [ 103.812205][ T5852] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.819431][ T5852] RSP: 002b:00007f7435e68e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.822497][ T5852] RAX: ffffffffffffffda RBX: 00007f7435e68f10 RCX: 00007f7434f8167a [ 103.825511][ T5852] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007f7435e68ed0 [ 103.828406][ T5852] RBP: 0000000020004440 R08: 00007f7435e68f10 R09: 0000000001000000 [ 103.831477][ T5852] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 103.834593][ T5852] R13: 00007f7435e68ed0 R14: 000000000000444a R15: 00000000200005c0 [ 103.837438][ T5852] [ 103.838875][ T5852] Kernel Offset: disabled [ 103.840559][ T5852] Rebooting in 86400 seconds..