Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. 2025/01/31 10:47:37 ignoring optional flag "sandboxArg"="0" 2025/01/31 10:47:38 parsed 1 programs [ 103.319983][ T6296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.571571][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.581153][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.589653][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.597758][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.606471][ T5135] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.614580][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.190649][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.202712][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.225714][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.234439][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.002366][ T6354] chnl_net:caif_netlink_parms(): no params data found [ 107.046103][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.053623][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.061509][ T6354] bridge_slave_0: entered allmulticast mode [ 107.068458][ T6354] bridge_slave_0: entered promiscuous mode [ 107.076718][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.084036][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.091275][ T6354] bridge_slave_1: entered allmulticast mode [ 107.098187][ T6354] bridge_slave_1: entered promiscuous mode [ 107.132898][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.143738][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.165932][ T6354] team0: Port device team_slave_0 added [ 107.176133][ T6354] team0: Port device team_slave_1 added [ 107.207256][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.214311][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.240905][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.256835][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.263964][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.290035][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.322393][ T6354] hsr_slave_0: entered promiscuous mode [ 107.328433][ T6354] hsr_slave_1: entered promiscuous mode [ 107.824068][ T6354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.835121][ T6354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.845202][ T6354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.856067][ T6354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.942190][ T6354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.965841][ T6354] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.979545][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.986706][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.012328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.019499][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.197013][ T6354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.240922][ T6354] veth0_vlan: entered promiscuous mode [ 108.255470][ T6354] veth1_vlan: entered promiscuous mode [ 108.294539][ T6354] veth0_macvtap: entered promiscuous mode [ 108.305322][ T6354] veth1_macvtap: entered promiscuous mode [ 108.323700][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.337396][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.353098][ T6354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.364063][ T6354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.373521][ T6354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.384794][ T6354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.555997][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.600625][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.653645][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.760637][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/01/31 10:47:48 executed programs: 0 [ 109.655505][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.665243][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.674029][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.682045][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.691326][ T5865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.699141][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.866921][ T6487] chnl_net:caif_netlink_parms(): no params data found [ 109.956010][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.964943][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.974427][ T6487] bridge_slave_0: entered allmulticast mode [ 109.983020][ T6487] bridge_slave_0: entered promiscuous mode [ 109.993295][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.002142][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.011219][ T6487] bridge_slave_1: entered allmulticast mode [ 110.018318][ T6487] bridge_slave_1: entered promiscuous mode [ 110.054981][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.070137][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.108289][ T6487] team0: Port device team_slave_0 added [ 110.117132][ T6487] team0: Port device team_slave_1 added [ 110.140802][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.147779][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.175138][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.191152][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.198133][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.224404][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.275076][ T6487] hsr_slave_0: entered promiscuous mode [ 110.282001][ T6487] hsr_slave_1: entered promiscuous mode [ 110.288222][ T6487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.299591][ T6487] Cannot create hsr debugfs directory [ 111.778709][ T5135] Bluetooth: hci0: command tx timeout [ 111.843133][ T35] bridge_slave_1: left allmulticast mode [ 111.858140][ T35] bridge_slave_1: left promiscuous mode [ 111.865582][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.877336][ T35] bridge_slave_0: left allmulticast mode [ 111.883457][ T35] bridge_slave_0: left promiscuous mode [ 111.889500][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.214567][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.225241][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.236094][ T35] bond0 (unregistering): Released all slaves [ 112.374677][ T35] hsr_slave_0: left promiscuous mode [ 112.382006][ T35] hsr_slave_1: left promiscuous mode [ 112.387982][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.395502][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.406539][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.418123][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.439581][ T35] veth1_macvtap: left promiscuous mode [ 112.445157][ T35] veth0_macvtap: left promiscuous mode [ 112.451846][ T35] veth1_vlan: left promiscuous mode [ 112.457197][ T35] veth0_vlan: left promiscuous mode [ 112.905601][ T35] team0 (unregistering): Port device team_slave_1 removed [ 112.955945][ T35] team0 (unregistering): Port device team_slave_0 removed [ 113.547622][ T6487] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.575557][ T6487] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.587152][ T6487] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.600854][ T6487] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.704760][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.722646][ T6487] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.735674][ T4794] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.742902][ T4794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.858691][ T5135] Bluetooth: hci0: command tx timeout [ 113.898811][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.905944][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.239118][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.291731][ T6487] veth0_vlan: entered promiscuous mode [ 114.304333][ T6487] veth1_vlan: entered promiscuous mode [ 114.330021][ T6487] veth0_macvtap: entered promiscuous mode [ 114.344923][ T6487] veth1_macvtap: entered promiscuous mode [ 114.366400][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.382703][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.394525][ T6487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.406117][ T6487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.415574][ T6487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.426584][ T6487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.498328][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.513562][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.540832][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.550977][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/01/31 10:47:53 executed programs: 2 [ 114.959825][ T6718] loop0: detected capacity change from 0 to 32768 [ 114.978229][ T6718] ================================================================== [ 114.986341][ T6718] BUG: KASAN: use-after-free in __ocfs2_find_path+0x203/0x7e0 [ 114.994279][ T6718] Read of size 4 at addr ffff88805cf31000 by task syz.0.15/6718 [ 115.001965][ T6718] [ 115.004340][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.0.15 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 115.004361][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 115.004375][ T6718] Call Trace: [ 115.004382][ T6718] [ 115.004389][ T6718] dump_stack_lvl+0x241/0x360 [ 115.004418][ T6718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.004441][ T6718] ? __pfx__printk+0x10/0x10 [ 115.004463][ T6718] ? _printk+0xd5/0x120 [ 115.004483][ T6718] ? __virt_addr_valid+0x183/0x530 [ 115.004505][ T6718] ? __virt_addr_valid+0x183/0x530 [ 115.004526][ T6718] print_report+0x169/0x550 [ 115.004552][ T6718] ? __virt_addr_valid+0x183/0x530 [ 115.004571][ T6718] ? __virt_addr_valid+0x183/0x530 [ 115.004596][ T6718] ? __virt_addr_valid+0x45f/0x530 [ 115.004617][ T6718] ? __phys_addr+0xba/0x170 [ 115.004637][ T6718] ? __ocfs2_find_path+0x203/0x7e0 [ 115.004656][ T6718] kasan_report+0x143/0x180 [ 115.004675][ T6718] ? __ocfs2_find_path+0x203/0x7e0 [ 115.004696][ T6718] __ocfs2_find_path+0x203/0x7e0 [ 115.004715][ T6718] ? __pfx_find_leaf_ins+0x10/0x10 [ 115.004732][ T6718] ? __pfx___ocfs2_find_path+0x10/0x10 [ 115.004752][ T6718] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 115.004773][ T6718] ocfs2_find_leaf+0xcf/0x230 [ 115.004793][ T6718] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 115.004817][ T6718] ocfs2_get_clusters_nocache+0x1b6/0xca0 [ 115.004845][ T6718] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 115.004870][ T6718] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 115.004890][ T6718] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 115.004909][ T6718] ? do_raw_spin_unlock+0x13c/0x8b0 [ 115.004929][ T6718] ocfs2_get_clusters+0x5bd/0xbd0 [ 115.004954][ T6718] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 115.004977][ T6718] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 115.004995][ T6718] ? __pfx_lock_acquire+0x10/0x10 [ 115.005012][ T6718] ? unwind_get_return_address+0x4d/0x90 [ 115.005032][ T6718] ? arch_stack_walk+0xfd/0x150 [ 115.005056][ T6718] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 115.005081][ T6718] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 115.005105][ T6718] ? __pfx_check_noncircular+0x10/0x10 [ 115.005129][ T6718] ocfs2_read_virt_blocks+0x313/0xb10 [ 115.005154][ T6718] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 115.005180][ T6718] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 115.005212][ T6718] ocfs2_find_entry+0x433/0x2570 [ 115.005240][ T6718] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 115.005265][ T6718] ? mark_lock+0x2ae/0x360 [ 115.005286][ T6718] ? __lock_acquire+0x1397/0x2100 [ 115.005329][ T6718] ? format_decode+0x56c/0xca0 [ 115.005344][ T6718] ? string+0x270/0x2b0 [ 115.005358][ T6718] ? widen_string+0x3a/0x300 [ 115.005373][ T6718] ? string+0x270/0x2b0 [ 115.005387][ T6718] ? vsnprintf+0x1152/0x1220 [ 115.005409][ T6718] ocfs2_find_files_on_disk+0xff/0x360 [ 115.005432][ T6718] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 115.005455][ T6718] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 115.005480][ T6718] ? kasan_save_track+0x51/0x80 [ 115.005495][ T6718] ? kasan_save_track+0x3f/0x80 [ 115.005509][ T6718] ? __kasan_kmalloc+0x98/0xb0 [ 115.005525][ T6718] ? ocfs2_new_dlm_debug+0x97/0x200 [ 115.005546][ T6718] ocfs2_get_system_file_inode+0x305/0x7b0 [ 115.005566][ T6718] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 115.005599][ T6718] ocfs2_init_global_system_inodes+0x32c/0x730 [ 115.005619][ T6718] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 115.005636][ T6718] ? __kmalloc_cache_noprof+0x243/0x390 [ 115.005656][ T6718] ? ocfs2_new_dlm_debug+0x97/0x200 [ 115.005676][ T6718] ? ocfs2_new_dlm_debug+0xb5/0x200 [ 115.005694][ T6718] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 115.005714][ T6718] ? rcu_is_watching+0x15/0xb0 [ 115.005744][ T6718] ? trace_ocfs2_initialize_super+0x9e/0x230 [ 115.005761][ T6718] ocfs2_fill_super+0x4b69/0x7200 [ 115.005791][ T6718] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 115.005815][ T6718] ? __pfx_check_noncircular+0x10/0x10 [ 115.005838][ T6718] ? lockdep_unlock+0x16a/0x300 [ 115.005855][ T6718] ? __pfx_lockdep_unlock+0x10/0x10 [ 115.005876][ T6718] ? validate_chain+0x15c0/0x5920 [ 115.005907][ T6718] ? __pfx_validate_chain+0x10/0x10 [ 115.005929][ T6718] ? __pfx_validate_chain+0x10/0x10 [ 115.005961][ T6718] ? validate_chain+0x11e/0x5920 [ 115.005982][ T6718] ? mark_lock+0x9a/0x360 [ 115.006009][ T6718] ? __pfx_validate_chain+0x10/0x10 [ 115.006043][ T6718] ? string+0x270/0x2b0 [ 115.006057][ T6718] ? widen_string+0x3a/0x300 [ 115.006072][ T6718] ? string+0x270/0x2b0 [ 115.006087][ T6718] ? bdev_name+0x2a2/0x3b0 [ 115.006105][ T6718] ? pointer+0x764/0x1210 [ 115.006119][ T6718] ? bdev_open+0x882/0xc50 [ 115.006139][ T6718] ? __pfx_lock_release+0x10/0x10 [ 115.006157][ T6718] ? __pfx_pointer+0x10/0x10 [ 115.006171][ T6718] ? mark_lock+0x9a/0x360 [ 115.006191][ T6718] ? format_decode+0x56c/0xca0 [ 115.006208][ T6718] ? vsnprintf+0x1152/0x1220 [ 115.006232][ T6718] ? snprintf+0xda/0x120 [ 115.006247][ T6718] ? __pfx_lock_release+0x10/0x10 [ 115.006265][ T6718] ? do_raw_spin_lock+0x14f/0x370 [ 115.006282][ T6718] ? __pfx_snprintf+0x10/0x10 [ 115.006298][ T6718] ? set_blocksize+0x1fc/0x360 [ 115.006317][ T6718] ? sb_set_blocksize+0x98/0xf0 [ 115.006334][ T6718] ? setup_bdev_super+0x4e6/0x5d0 [ 115.006351][ T6718] get_tree_bdev_flags+0x48c/0x5c0 [ 115.006368][ T6718] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 115.006388][ T6718] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 115.006404][ T6718] ? cap_capable+0x139/0x450 [ 115.006422][ T6718] ? safesetid_security_capable+0xb2/0x1d0 [ 115.006445][ T6718] vfs_get_tree+0x90/0x2b0 [ 115.006462][ T6718] do_new_mount+0x2be/0xb40 [ 115.006482][ T6718] ? __pfx_do_new_mount+0x10/0x10 [ 115.006502][ T6718] __se_sys_mount+0x2d6/0x3c0 [ 115.006522][ T6718] ? __pfx___se_sys_mount+0x10/0x10 [ 115.006540][ T6718] ? exc_page_fault+0x590/0x8b0 [ 115.006558][ T6718] ? __x64_sys_mount+0x20/0xc0 [ 115.006576][ T6718] do_syscall_64+0xf3/0x230 [ 115.006602][ T6718] ? clear_bhb_loop+0x35/0x90 [ 115.006624][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.006644][ T6718] RIP: 0033:0x7f43b317feba [ 115.006671][ T6718] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.006683][ T6718] RSP: 002b:00007f43b3f96e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.006702][ T6718] RAX: ffffffffffffffda RBX: 00007f43b3f96ef0 RCX: 00007f43b317feba [ 115.006714][ T6718] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007f43b3f96eb0 [ 115.006725][ T6718] RBP: 0000000020004440 R08: 00007f43b3f96ef0 R09: 0000000001000000 [ 115.006736][ T6718] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 115.006747][ T6718] R13: 00007f43b3f96eb0 R14: 000000000000444a R15: 00000000200005c0 [ 115.006763][ T6718] [ 115.006769][ T6718] [ 115.656162][ T6718] The buggy address belongs to the physical page: [ 115.662574][ T6718] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cf31 [ 115.671407][ T6718] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 115.678510][ T6718] raw: 00fff00000000000 ffffea000173cc88 ffff8880b8744870 0000000000000000 [ 115.687090][ T6718] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 115.695655][ T6718] page dumped because: kasan: bad access detected [ 115.702059][ T6718] page_owner tracks the page as freed [ 115.707412][ T6718] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 1, tgid 1 (swapper/0), ts 16442244158, free_ts 17252036300 [ 115.722414][ T6718] post_alloc_hook+0x1f4/0x240 [ 115.727175][ T6718] split_free_pages+0xe1/0x2d0 [ 115.732017][ T6718] alloc_contig_range_noprof+0x10eb/0x1770 [ 115.737812][ T6718] alloc_contig_pages_noprof+0x4b3/0x5c0 [ 115.743431][ T6718] debug_vm_pgtable_alloc_huge_page+0xaf/0x100 [ 115.749589][ T6718] init_args+0x83b/0xb20 [ 115.753830][ T6718] debug_vm_pgtable+0xe0/0x550 [ 115.758584][ T6718] do_one_initcall+0x248/0x870 [ 115.763419][ T6718] do_initcall_level+0x157/0x210 [ 115.768426][ T6718] do_initcalls+0x3f/0x80 [ 115.772758][ T6718] kernel_init_freeable+0x435/0x5d0 [ 115.777953][ T6718] kernel_init+0x1d/0x2b0 [ 115.782274][ T6718] ret_from_fork+0x4b/0x80 [ 115.786679][ T6718] ret_from_fork_asm+0x1a/0x30 [ 115.791429][ T6718] page last free pid 1 tgid 1 stack trace: [ 115.797223][ T6718] free_frozen_pages+0xe04/0x10e0 [ 115.802240][ T6718] free_contig_range+0x14c/0x430 [ 115.807183][ T6718] destroy_args+0x94/0x4b0 [ 115.811593][ T6718] debug_vm_pgtable+0x4be/0x550 [ 115.816433][ T6718] do_one_initcall+0x248/0x870 [ 115.821184][ T6718] do_initcall_level+0x157/0x210 [ 115.826109][ T6718] do_initcalls+0x3f/0x80 [ 115.830439][ T6718] kernel_init_freeable+0x435/0x5d0 [ 115.835628][ T6718] kernel_init+0x1d/0x2b0 [ 115.839984][ T6718] ret_from_fork+0x4b/0x80 [ 115.844408][ T6718] ret_from_fork_asm+0x1a/0x30 [ 115.849157][ T6718] [ 115.851467][ T6718] Memory state around the buggy address: [ 115.857173][ T6718] ffff88805cf30f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.865408][ T6718] ffff88805cf30f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 115.873483][ T6718] >ffff88805cf31000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 115.881541][ T6718] ^ [ 115.885599][ T6718] ffff88805cf31080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 115.893643][ T6718] ffff88805cf31100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 115.901955][ T6718] ================================================================== [ 115.920649][ T6718] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.927889][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.0.15 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 115.938075][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 115.948239][ T6718] Call Trace: [ 115.951540][ T6718] [ 115.954487][ T6718] dump_stack_lvl+0x241/0x360 [ 115.959191][ T6718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.964414][ T6718] ? __pfx__printk+0x10/0x10 [ 115.969027][ T6718] ? preempt_schedule+0xe1/0xf0 [ 115.973901][ T6718] ? vscnprintf+0x5d/0x90 [ 115.978342][ T6718] panic+0x349/0x880 [ 115.982265][ T6718] ? check_panic_on_warn+0x21/0xb0 [ 115.987403][ T6718] ? __pfx_panic+0x10/0x10 [ 115.991847][ T6718] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 115.997861][ T6718] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 116.004304][ T6718] ? print_report+0x502/0x550 [ 116.009023][ T6718] check_panic_on_warn+0x86/0xb0 [ 116.013995][ T6718] ? __ocfs2_find_path+0x203/0x7e0 [ 116.019131][ T6718] end_report+0x77/0x160 [ 116.023397][ T6718] kasan_report+0x154/0x180 [ 116.027924][ T6718] ? __ocfs2_find_path+0x203/0x7e0 [ 116.033150][ T6718] __ocfs2_find_path+0x203/0x7e0 [ 116.038205][ T6718] ? __pfx_find_leaf_ins+0x10/0x10 [ 116.043351][ T6718] ? __pfx___ocfs2_find_path+0x10/0x10 [ 116.048842][ T6718] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 116.055113][ T6718] ocfs2_find_leaf+0xcf/0x230 [ 116.059815][ T6718] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 116.065129][ T6718] ocfs2_get_clusters_nocache+0x1b6/0xca0 [ 116.071230][ T6718] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 116.077599][ T6718] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 116.083169][ T6718] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 116.089092][ T6718] ? do_raw_spin_unlock+0x13c/0x8b0 [ 116.094316][ T6718] ocfs2_get_clusters+0x5bd/0xbd0 [ 116.099375][ T6718] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 116.104971][ T6718] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 116.111153][ T6718] ? __pfx_lock_acquire+0x10/0x10 [ 116.116207][ T6718] ? unwind_get_return_address+0x4d/0x90 [ 116.121875][ T6718] ? arch_stack_walk+0xfd/0x150 [ 116.126854][ T6718] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 116.132706][ T6718] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 116.139067][ T6718] ? __pfx_check_noncircular+0x10/0x10 [ 116.144563][ T6718] ocfs2_read_virt_blocks+0x313/0xb10 [ 116.149973][ T6718] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 116.156160][ T6718] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 116.162096][ T6718] ocfs2_find_entry+0x433/0x2570 [ 116.167073][ T6718] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 116.172477][ T6718] ? mark_lock+0x2ae/0x360 [ 116.176945][ T6718] ? __lock_acquire+0x1397/0x2100 [ 116.182009][ T6718] ? format_decode+0x56c/0xca0 [ 116.186801][ T6718] ? string+0x270/0x2b0 [ 116.190977][ T6718] ? widen_string+0x3a/0x300 [ 116.195593][ T6718] ? string+0x270/0x2b0 [ 116.199771][ T6718] ? vsnprintf+0x1152/0x1220 [ 116.204398][ T6718] ocfs2_find_files_on_disk+0xff/0x360 [ 116.210161][ T6718] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 116.215828][ T6718] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 116.222101][ T6718] ? kasan_save_track+0x51/0x80 [ 116.227148][ T6718] ? kasan_save_track+0x3f/0x80 [ 116.232039][ T6718] ? __kasan_kmalloc+0x98/0xb0 [ 116.236827][ T6718] ? ocfs2_new_dlm_debug+0x97/0x200 [ 116.242057][ T6718] ocfs2_get_system_file_inode+0x305/0x7b0 [ 116.247900][ T6718] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 116.254269][ T6718] ocfs2_init_global_system_inodes+0x32c/0x730 [ 116.260535][ T6718] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 116.267408][ T6718] ? __kmalloc_cache_noprof+0x243/0x390 [ 116.272981][ T6718] ? ocfs2_new_dlm_debug+0x97/0x200 [ 116.278215][ T6718] ? ocfs2_new_dlm_debug+0xb5/0x200 [ 116.283449][ T6718] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 116.289112][ T6718] ? rcu_is_watching+0x15/0xb0 [ 116.293908][ T6718] ? trace_ocfs2_initialize_super+0x9e/0x230 [ 116.299914][ T6718] ocfs2_fill_super+0x4b69/0x7200 [ 116.304976][ T6718] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 116.310383][ T6718] ? __pfx_check_noncircular+0x10/0x10 [ 116.315874][ T6718] ? lockdep_unlock+0x16a/0x300 [ 116.320751][ T6718] ? __pfx_lockdep_unlock+0x10/0x10 [ 116.325977][ T6718] ? validate_chain+0x15c0/0x5920 [ 116.331036][ T6718] ? __pfx_validate_chain+0x10/0x10 [ 116.336300][ T6718] ? __pfx_validate_chain+0x10/0x10 [ 116.341538][ T6718] ? validate_chain+0x11e/0x5920 [ 116.346508][ T6718] ? mark_lock+0x9a/0x360 [ 116.350883][ T6718] ? __pfx_validate_chain+0x10/0x10 [ 116.356113][ T6718] ? string+0x270/0x2b0 [ 116.360289][ T6718] ? widen_string+0x3a/0x300 [ 116.364900][ T6718] ? string+0x270/0x2b0 [ 116.369084][ T6718] ? bdev_name+0x2a2/0x3b0 [ 116.373522][ T6718] ? pointer+0x764/0x1210 [ 116.377884][ T6718] ? bdev_open+0x882/0xc50 [ 116.382333][ T6718] ? __pfx_lock_release+0x10/0x10 [ 116.387388][ T6718] ? __pfx_pointer+0x10/0x10 [ 116.392001][ T6718] ? mark_lock+0x9a/0x360 [ 116.396356][ T6718] ? format_decode+0x56c/0xca0 [ 116.401152][ T6718] ? vsnprintf+0x1152/0x1220 [ 116.405770][ T6718] ? snprintf+0xda/0x120 [ 116.410047][ T6718] ? __pfx_lock_release+0x10/0x10 [ 116.415095][ T6718] ? do_raw_spin_lock+0x14f/0x370 [ 116.420147][ T6718] ? __pfx_snprintf+0x10/0x10 [ 116.424841][ T6718] ? set_blocksize+0x1fc/0x360 [ 116.429635][ T6718] ? sb_set_blocksize+0x98/0xf0 [ 116.434516][ T6718] ? setup_bdev_super+0x4e6/0x5d0 [ 116.439568][ T6718] get_tree_bdev_flags+0x48c/0x5c0 [ 116.444708][ T6718] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 116.450118][ T6718] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 116.455775][ T6718] ? cap_capable+0x139/0x450 [ 116.460395][ T6718] ? safesetid_security_capable+0xb2/0x1d0 [ 116.466372][ T6718] vfs_get_tree+0x90/0x2b0 [ 116.470807][ T6718] do_new_mount+0x2be/0xb40 [ 116.475360][ T6718] ? __pfx_do_new_mount+0x10/0x10 [ 116.480416][ T6718] __se_sys_mount+0x2d6/0x3c0 [ 116.485176][ T6718] ? __pfx___se_sys_mount+0x10/0x10 [ 116.490392][ T6718] ? exc_page_fault+0x590/0x8b0 [ 116.495248][ T6718] ? __x64_sys_mount+0x20/0xc0 [ 116.500002][ T6718] do_syscall_64+0xf3/0x230 [ 116.504771][ T6718] ? clear_bhb_loop+0x35/0x90 [ 116.509438][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.515320][ T6718] RIP: 0033:0x7f43b317feba [ 116.519719][ T6718] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.539423][ T6718] RSP: 002b:00007f43b3f96e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.547834][ T6718] RAX: ffffffffffffffda RBX: 00007f43b3f96ef0 RCX: 00007f43b317feba [ 116.555808][ T6718] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007f43b3f96eb0 [ 116.563784][ T6718] RBP: 0000000020004440 R08: 00007f43b3f96ef0 R09: 0000000001000000 [ 116.571773][ T6718] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 116.579743][ T6718] R13: 00007f43b3f96eb0 R14: 000000000000444a R15: 00000000200005c0 [ 116.587721][ T6718] [ 116.591181][ T6718] Kernel Offset: disabled [ 116.595543][ T6718] Rebooting in 86400 seconds..