[ 83.680102][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.690534][ T4227] device veth1_macvtap left promiscuous mode
[ 83.696890][ T4227] device veth0_macvtap left promiscuous mode
[ 83.702930][ T4227] device veth1_vlan left promiscuous mode
[ 83.709225][ T4227] device veth0_vlan left promiscuous mode
[ 83.878764][ T4227] team0 (unregistering): Port device team_slave_1 removed
[ 83.890544][ T4227] team0 (unregistering): Port device team_slave_0 removed
[ 83.901464][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 83.914118][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.958947][ T4227] bond0 (unregistering): Released all slaves
Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts.
2026/07/31 03:08:26 parsed 1 programs
[ 94.600965][ T4489] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 96.381672][ T4529] chnl_net:caif_netlink_parms(): no params data found
[ 96.440440][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.449095][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.457754][ T4529] device bridge_slave_0 entered promiscuous mode
[ 96.466911][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.474114][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.483829][ T4529] device bridge_slave_1 entered promiscuous mode
[ 96.538353][ T4529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.558256][ T4529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.606484][ T4529] team0: Port device team_slave_0 added
[ 96.621225][ T4529] team0: Port device team_slave_1 added
[ 96.666232][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.673471][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.701041][ T4529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.713888][ T4529] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.722658][ T4529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.755626][ T4529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.810048][ T4529] device hsr_slave_0 entered promiscuous mode
[ 96.825572][ T4529] device hsr_slave_1 entered promiscuous mode
[ 97.448925][ T4529] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.458812][ T4529] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.485576][ T4529] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.498208][ T4529] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.616547][ T4529] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.630299][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 97.642203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 97.660099][ T4529] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.676127][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 97.695375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 97.715339][ T155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.722465][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.746426][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 97.772019][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 97.786773][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 97.806624][ T155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.813753][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.849209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 97.872120][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 97.898878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 97.917292][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 97.935920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 97.965797][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 97.976852][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 97.992847][ T4529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 98.004285][ T4529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 98.019834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 98.029768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 98.040113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 98.064312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 98.089389][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 98.248992][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 98.264229][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 98.280137][ T4529] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.302020][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 98.312817][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 98.333536][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 98.342311][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 98.354734][ T4529] device veth0_vlan entered promiscuous mode
[ 98.362236][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 98.370754][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 98.384093][ T4529] device veth1_vlan entered promiscuous mode
[ 98.413822][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 98.424295][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 98.436401][ T4529] device veth0_macvtap entered promiscuous mode
[ 98.447879][ T4529] device veth1_macvtap entered promiscuous mode
[ 98.464266][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.472749][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 98.482908][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 98.493994][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 98.515855][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 98.528609][ T4529] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.538664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 98.548523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 98.561173][ T4529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.571157][ T4529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.580002][ T4529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.589271][ T4529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.847615][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.865140][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.875152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 100.902098][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.916553][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.925196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 101.248653][ T4227] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/07/31 03:08:37 executed programs: 0
[ 101.840682][ T4766] chnl_net:caif_netlink_parms(): no params data found
[ 101.904284][ T4766] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.911702][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.921872][ T4766] device bridge_slave_0 entered promiscuous mode
[ 101.937120][ T4766] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.944613][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.953322][ T4766] device bridge_slave_1 entered promiscuous mode
[ 101.983469][ T4766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.999207][ T4766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.036563][ T4766] team0: Port device team_slave_0 added
[ 102.044775][ T4766] team0: Port device team_slave_1 added
[ 102.068542][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.075727][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.102175][ T4766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.114704][ T4766] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.123169][ T4766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.149596][ T4766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.184081][ T4766] device hsr_slave_0 entered promiscuous mode
[ 102.192837][ T4766] device hsr_slave_1 entered promiscuous mode
[ 102.200186][ T4766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 102.210285][ T4766] Cannot create hsr debugfs directory
[ 103.765665][ T4289] Bluetooth: hci0: command 0x0409 tx timeout
[ 104.179865][ T4227] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.220345][ T4227] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.280003][ T4227] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.133126][ T4766] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 105.142805][ T4766] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 105.152691][ T4766] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 105.177460][ T4766] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 105.237819][ T4766] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.250196][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 105.258513][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 105.269903][ T4766] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.285446][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 105.294386][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 105.303628][ T145] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.310817][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.320534][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 105.343268][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 105.352209][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 105.361647][ T145] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.368786][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.379309][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 105.408985][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 105.426110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 105.437421][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 105.447728][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 105.456908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 105.467994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 105.500592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 105.509724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 105.520910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 105.530263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 105.543665][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 105.644329][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 105.653280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 105.665231][ T4766] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.688472][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 105.697521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 105.717349][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 105.725908][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 105.739280][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 105.748898][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 105.758002][ T4766] device veth0_vlan entered promiscuous mode
[ 105.779658][ T4766] device veth1_vlan entered promiscuous mode
[ 105.795986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 105.804212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 105.812619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 105.821307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 105.832616][ T4766] device veth0_macvtap entered promiscuous mode
[ 105.850579][ T4274] Bluetooth: hci0: command 0x041b tx timeout
[ 105.853636][ T4766] device veth1_macvtap entered promiscuous mode
[ 105.869251][ T4227] device hsr_slave_0 left promiscuous mode
[ 105.876293][ T4227] device hsr_slave_1 left promiscuous mode
[ 105.882646][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 105.890419][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 105.898828][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 105.906600][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 105.914504][ T4227] device bridge_slave_1 left promiscuous mode
[ 105.921173][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.929777][ T4227] device bridge_slave_0 left promiscuous mode
[ 105.936066][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.949927][ T4227] device veth1_macvtap left promiscuous mode
[ 105.956134][ T4227] device veth0_macvtap left promiscuous mode
[ 105.962197][ T4227] device veth1_vlan left promiscuous mode
[ 105.968505][ T4227] device veth0_vlan left promiscuous mode
[ 106.090504][ T4227] team0 (unregistering): Port device team_slave_1 removed
[ 106.103502][ T4227] team0 (unregistering): Port device team_slave_0 removed
[ 106.114562][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 106.128791][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 106.178361][ T4227] bond0 (unregistering): Released all slaves
[ 106.255375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 106.263854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 106.279068][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.287945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 106.297161][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 106.308934][ T4766] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.317139][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 106.327068][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 106.339190][ T4766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.348982][ T4766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.358645][ T4766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.367967][ T4766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.432783][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.443334][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.451376][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 106.477584][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.486063][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.494277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 106.693007][ T4946] loop0: detected capacity change from 0 to 32768
[ 106.709434][ T4946] =======================================================
[ 106.709434][ T4946] WARNING: The mand mount option has been deprecated and
[ 106.709434][ T4946] and is ignored by this kernel. Remove the mand
[ 106.709434][ T4946] option from the mount to silence this warning.
[ 106.709434][ T4946] =======================================================
[ 106.818038][ T4946] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 106.838544][ T4946] ==================================================================
[ 106.846852][ T4946] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 106.855107][ T4946] Read of size 2 at addr ffff88806d49dcf0 by task syz.0.17/4946
[ 106.862776][ T4946]
[ 106.865107][ T4946] CPU: 1 PID: 4946 Comm: syz.0.17 Not tainted syzkaller #0
[ 106.872576][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 106.882856][ T4946] Call Trace:
[ 106.886158][ T4946]
[ 106.889089][ T4946] dump_stack_lvl+0x188/0x250
[ 106.893804][ T4946] ? show_regs_print_info+0x20/0x20
[ 106.899146][ T4946] ? load_image+0x410/0x410
[ 106.903667][ T4946] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 106.909155][ T4946] print_address_description+0x60/0x2d0
[ 106.914725][ T4946] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 106.920398][ T4946] kasan_report+0xdf/0x130
[ 106.924835][ T4946] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 106.930680][ T4946] ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 106.936169][ T4946] ? ocfs2_dir_foreach+0xf0/0xf0
[ 106.941204][ T4946] ? ocfs2_inode_lock_atime+0x24b/0x530
[ 106.946938][ T4946] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0
[ 106.952893][ T4946] ocfs2_readdir+0x221/0x470
[ 106.957623][ T4946] ? ocfs2_dir_foreach_blk+0x1a10/0x1a10
[ 106.963578][ T4946] ? end_current_label_crit_section+0x14b/0x170
[ 106.969861][ T4946] ? common_file_perm+0x171/0x1c0
[ 106.974906][ T4946] ? iterate_dir+0x133/0x550
[ 106.979508][ T4946] iterate_dir+0x213/0x550
[ 106.983935][ T4946] __se_sys_getdents+0xf2/0x260
[ 106.988804][ T4946] ? __x64_sys_getdents+0x80/0x80
[ 106.993831][ T4946] ? fillonedir+0x4c0/0x4c0
[ 106.998444][ T4946] ? lockdep_hardirqs_on+0x94/0x140
[ 107.003790][ T4946] do_syscall_64+0x4c/0xa0
[ 107.008213][ T4946] ? clear_bhb_loop+0x30/0x80
[ 107.012935][ T4946] ? clear_bhb_loop+0x30/0x80
[ 107.017707][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.023712][ T4946] RIP: 0033:0x7f97b119a379
[ 107.028221][ T4946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.048372][ T4946] RSP: 002b:00007f97b07fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 107.056892][ T4946] RAX: ffffffffffffffda RBX: 00007f97b13f5fa0 RCX: 00007f97b119a379
[ 107.064984][ T4946] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 107.073068][ T4946] RBP: 00007f97b122dd68 R08: 0000000000000000 R09: 0000000000000000
[ 107.081235][ T4946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.089390][ T4946] R13: 00007f97b13f6038 R14: 00007f97b13f5fa0 R15: 00007ffd7e142ff8
[ 107.097392][ T4946]
[ 107.100434][ T4946]
[ 107.102766][ T4946] The buggy address belongs to the page:
[ 107.108411][ T4946] page:ffffea0001b52740 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6d49d
[ 107.118567][ T4946] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 107.125704][ T4946] raw: 00fff00000000000 ffffea0001b52788 ffffea0001b52708 0000000000000000
[ 107.134669][ T4946] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 107.143266][ T4946] page dumped because: kasan: bad access detected
[ 107.149687][ T4946] page_owner tracks the page as freed
[ 107.155228][ T4946] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4489, ts 92920901909, free_ts 95739106753
[ 107.170862][ T4946] get_page_from_freelist+0x24f6/0x2670
[ 107.176797][ T4946] __alloc_pages+0x1ee/0x480
[ 107.181604][ T4946] alloc_pages_vma+0x2bc/0x790
[ 107.186823][ T4946] handle_mm_fault+0x23be/0x4440
[ 107.191790][ T4946] do_user_addr_fault+0x494/0xc90
[ 107.196831][ T4946] exc_page_fault+0x60/0x100
[ 107.201434][ T4946] asm_exc_page_fault+0x22/0x30
[ 107.206291][ T4946] page last free stack trace:
[ 107.211359][ T4946] free_unref_page_prepare+0x637/0x6c0
[ 107.217007][ T4946] free_unref_page_list+0x119/0x830
[ 107.222207][ T4946] release_pages+0x185f/0x1bd0
[ 107.226995][ T4946] tlb_finish_mmu+0x1b4/0x370
[ 107.231731][ T4946] unmap_region+0x344/0x3b0
[ 107.236251][ T4946] __do_munmap+0xa29/0xe10
[ 107.240690][ T4946] __vm_munmap+0x13f/0x240
[ 107.245160][ T4946] __x64_sys_munmap+0x67/0x70
[ 107.249876][ T4946] do_syscall_64+0x4c/0xa0
[ 107.254327][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.260414][ T4946]
[ 107.262824][ T4946] Memory state around the buggy address:
[ 107.268625][ T4946] ffff88806d49db80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.276686][ T4946] ffff88806d49dc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.284960][ T4946] >ffff88806d49dc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.293032][ T4946] ^
[ 107.300772][ T4946] ffff88806d49dd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.308874][ T4946] ffff88806d49dd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.317031][ T4946] ==================================================================
[ 107.325200][ T4946] Disabling lock debugging due to kernel taint
[ 107.335707][ T4946] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.343048][ T4946] CPU: 0 PID: 4946 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 107.351658][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 107.361739][ T4946] Call Trace:
[ 107.365028][ T4946]
[ 107.367972][ T4946] dump_stack_lvl+0x188/0x250
[ 107.372683][ T4946] ? show_regs_print_info+0x20/0x20
[ 107.377893][ T4946] ? load_image+0x410/0x410
[ 107.382422][ T4946] panic+0x2f8/0x850
[ 107.386360][ T4946] ? bpf_jit_dump+0xd0/0xd0
[ 107.390961][ T4946] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 107.396948][ T4946] ? _raw_spin_unlock+0x40/0x40
[ 107.401895][ T4946] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 107.407542][ T4946] check_panic_on_warn+0x80/0xa0
[ 107.412489][ T4946] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 107.418152][ T4946] end_report+0x6d/0xf0
[ 107.422316][ T4946] kasan_report+0x102/0x130
[ 107.426837][ T4946] ? ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 107.432483][ T4946] ocfs2_dir_foreach_blk+0x163b/0x1a10
[ 107.438030][ T4946] ? ocfs2_dir_foreach+0xf0/0xf0
[ 107.442971][ T4946] ? ocfs2_inode_lock_atime+0x24b/0x530
[ 107.448505][ T4946] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0
[ 107.454481][ T4946] ocfs2_readdir+0x221/0x470
[ 107.459055][ T4946] ? ocfs2_dir_foreach_blk+0x1a10/0x1a10
[ 107.464843][ T4946] ? end_current_label_crit_section+0x14b/0x170
[ 107.471191][ T4946] ? common_file_perm+0x171/0x1c0
[ 107.476529][ T4946] ? iterate_dir+0x133/0x550
[ 107.481136][ T4946] iterate_dir+0x213/0x550
[ 107.485558][ T4946] __se_sys_getdents+0xf2/0x260
[ 107.490412][ T4946] ? __x64_sys_getdents+0x80/0x80
[ 107.495436][ T4946] ? fillonedir+0x4c0/0x4c0
[ 107.500016][ T4946] ? lockdep_hardirqs_on+0x94/0x140
[ 107.505226][ T4946] do_syscall_64+0x4c/0xa0
[ 107.509731][ T4946] ? clear_bhb_loop+0x30/0x80
[ 107.514448][ T4946] ? clear_bhb_loop+0x30/0x80
[ 107.519134][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.525124][ T4946] RIP: 0033:0x7f97b119a379
[ 107.529627][ T4946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 107.549239][ T4946] RSP: 002b:00007f97b07fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 107.557775][ T4946] RAX: ffffffffffffffda RBX: 00007f97b13f5fa0 RCX: 00007f97b119a379
[ 107.565752][ T4946] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 107.573731][ T4946] RBP: 00007f97b122dd68 R08: 0000000000000000 R09: 0000000000000000
[ 107.581785][ T4946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.589768][ T4946] R13: 00007f97b13f6038 R14: 00007f97b13f5fa0 R15: 00007ffd7e142ff8
[ 107.597849][ T4946]
[ 107.601188][ T4946] Kernel Offset: disabled
[ 107.605510][ T4946] Rebooting in 86400 seconds..