Warning: Permanently added '[localhost]:56307' (ED25519) to the list of known hosts. 2025/01/17 09:26:20 ignoring optional flag "sandboxArg"="0" 2025/01/17 09:26:21 parsed 1 programs [ 111.959786][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 115.157484][ T4666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.161310][ T4666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.168762][ T4666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.172084][ T4666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.175510][ T4666] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.178417][ T4666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.977614][ T5656] chnl_net:caif_netlink_parms(): no params data found [ 118.018082][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.020949][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.026006][ T5656] bridge_slave_0: entered allmulticast mode [ 118.029093][ T5656] bridge_slave_0: entered promiscuous mode [ 118.034071][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.036799][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.039665][ T5656] bridge_slave_1: entered allmulticast mode [ 118.042668][ T5656] bridge_slave_1: entered promiscuous mode [ 118.058024][ T5656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.067056][ T5656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.082685][ T5656] team0: Port device team_slave_0 added [ 118.087400][ T5656] team0: Port device team_slave_1 added [ 118.100570][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.104285][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.114432][ T5656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.119664][ T5656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.122063][ T5656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.132451][ T5656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.155506][ T5656] hsr_slave_0: entered promiscuous mode [ 118.158303][ T5656] hsr_slave_1: entered promiscuous mode [ 118.647515][ T5656] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.657582][ T5656] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.674064][ T5656] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.687636][ T5656] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.711987][ T5656] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.714925][ T5656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.718489][ T5656] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.721255][ T5656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.817537][ T5656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.836789][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.840211][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.868176][ T5656] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.874307][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.877178][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.886922][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.889725][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.136341][ T5656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.184795][ T5656] veth0_vlan: entered promiscuous mode [ 119.217120][ T5656] veth1_vlan: entered promiscuous mode [ 119.254283][ T5656] veth0_macvtap: entered promiscuous mode [ 119.264891][ T5656] veth1_macvtap: entered promiscuous mode [ 119.287645][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.306073][ T5656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.318182][ T5656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.321767][ T5656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.334280][ T5656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.337613][ T5656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.565912][ T1133] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.636339][ T1133] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.704165][ T1133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.771565][ T1133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.792674][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.807553][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.824586][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.828176][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/01/17 09:26:33 executed programs: 0 [ 120.101208][ T4666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.105872][ T4666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.109651][ T4666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.112897][ T4666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.117522][ T4666] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.121369][ T4666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.359649][ T5713] chnl_net:caif_netlink_parms(): no params data found [ 120.448013][ T5713] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.454639][ T5713] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.457654][ T5713] bridge_slave_0: entered allmulticast mode [ 120.474538][ T5713] bridge_slave_0: entered promiscuous mode [ 120.485506][ T5713] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.488286][ T5713] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.491020][ T5713] bridge_slave_1: entered allmulticast mode [ 120.505114][ T5713] bridge_slave_1: entered promiscuous mode [ 120.547114][ T5713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.552180][ T5713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.615206][ T5713] team0: Port device team_slave_0 added [ 120.619295][ T5713] team0: Port device team_slave_1 added [ 120.669136][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.671996][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.693408][ T5713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.714634][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.717335][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.735408][ T5713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.788396][ T5713] hsr_slave_0: entered promiscuous mode [ 120.796605][ T5713] hsr_slave_1: entered promiscuous mode [ 120.799162][ T5713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.802073][ T5713] Cannot create hsr debugfs directory [ 122.069381][ T1133] bridge_slave_1: left allmulticast mode [ 122.071708][ T1133] bridge_slave_1: left promiscuous mode [ 122.084563][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.098945][ T1133] bridge_slave_0: left allmulticast mode [ 122.101523][ T1133] bridge_slave_0: left promiscuous mode [ 122.115363][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.162962][ T4666] Bluetooth: hci0: command tx timeout [ 122.465154][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.470065][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.475933][ T1133] bond0 (unregistering): Released all slaves [ 122.529483][ T1133] hsr_slave_0: left promiscuous mode [ 122.538482][ T1133] hsr_slave_1: left promiscuous mode [ 122.544392][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.547420][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.563098][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.583587][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.591505][ T1133] veth1_macvtap: left promiscuous mode [ 122.604077][ T1133] veth0_macvtap: left promiscuous mode [ 122.606406][ T1133] veth1_vlan: left promiscuous mode [ 122.608491][ T1133] veth0_vlan: left promiscuous mode [ 123.116118][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 123.156892][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 123.671358][ T5713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.687624][ T5713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.701196][ T5713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.719020][ T5713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.976407][ T5713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.051460][ T5713] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.079723][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.082584][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.139604][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.143897][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.172706][ T5713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.190685][ T5713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.239202][ T4666] Bluetooth: hci0: command tx timeout [ 124.419045][ T5713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.442993][ T5713] veth0_vlan: entered promiscuous mode [ 124.450788][ T5713] veth1_vlan: entered promiscuous mode [ 124.471143][ T5713] veth0_macvtap: entered promiscuous mode [ 124.477597][ T5713] veth1_macvtap: entered promiscuous mode [ 124.490107][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.499246][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.505482][ T5713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.508958][ T5713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.512347][ T5713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.516900][ T5713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.569324][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.572389][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.596701][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.600068][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.835364][ T5820] loop0: detected capacity change from 0 to 32768 [ 124.853682][ T5820] grow_buffers: requested out-of-range block 52144751872609100 for device loop0 [ 124.857474][ T5820] (syz.0.15,5820,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 124.872094][ T5820] (syz.0.15,5820,0):__ocfs2_find_path:1844 ERROR: status = -12 [ 124.883914][ T5820] (syz.0.15,5820,0):ocfs2_find_leaf:1940 ERROR: status = -12 [ 124.887067][ T5820] (syz.0.15,5820,0):ocfs2_get_clusters_nocache:421 ERROR: status = -12 [ 124.890307][ T5820] (syz.0.15,5820,0):ocfs2_get_clusters:624 ERROR: status = -12 [ 124.893213][ T5820] (syz.0.15,5820,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -12 [ 124.901527][ T5820] (syz.0.15,5820,0):ocfs2_read_virt_blocks:987 ERROR: status = -12 [ 124.905974][ T5820] (syz.0.15,5820,0):ocfs2_read_dir_block:511 ERROR: status = -12 [ 124.909402][ T5820] (syz.0.15,5820,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 124.913163][ T5820] (syz.0.15,5820,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 124.913184][ T5820] (syz.0.15,5820,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 124.922984][ T5820] (syz.0.15,5820,0):ocfs2_initialize_super:2250 ERROR: status = -22 [ 124.927555][ T5820] (syz.0.15,5820,0):ocfs2_fill_super:1178 ERROR: status = -22 2025/01/17 09:26:38 executed programs: 3 [ 125.222872][ T5822] loop0: detected capacity change from 0 to 32768 [ 125.237334][ T5822] ================================================================== [ 125.240430][ T5822] BUG: KASAN: use-after-free in __ocfs2_find_path+0x203/0x7e0 [ 125.243445][ T5822] Read of size 4 at addr ffff88805591b000 by task syz.0.16/5822 [ 125.247603][ T5822] [ 125.248568][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz.0.16 Not tainted 6.13.0-rc7-syzkaller-g9bffa1ad25b8 #0 [ 125.252371][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.256605][ T5822] Call Trace: [ 125.257933][ T5822] [ 125.259092][ T5822] dump_stack_lvl+0x241/0x360 [ 125.260924][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.262962][ T5822] ? __pfx__printk+0x10/0x10 [ 125.264778][ T5822] ? _printk+0xd5/0x120 [ 125.266438][ T5822] ? __virt_addr_valid+0x183/0x530 [ 125.268485][ T5822] ? __virt_addr_valid+0x183/0x530 [ 125.270470][ T5822] print_report+0x169/0x550 [ 125.272223][ T5822] ? __virt_addr_valid+0x183/0x530 [ 125.274235][ T5822] ? __virt_addr_valid+0x183/0x530 [ 125.276201][ T5822] ? __virt_addr_valid+0x45f/0x530 [ 125.278251][ T5822] ? __phys_addr+0xba/0x170 [ 125.280008][ T5822] ? __ocfs2_find_path+0x203/0x7e0 [ 125.282050][ T5822] kasan_report+0x143/0x180 [ 125.283860][ T5822] ? __ocfs2_find_path+0x203/0x7e0 [ 125.285943][ T5822] __ocfs2_find_path+0x203/0x7e0 [ 125.287942][ T5822] ? __pfx_find_leaf_ins+0x10/0x10 [ 125.289937][ T5822] ? __pfx___ocfs2_find_path+0x10/0x10 [ 125.292031][ T5822] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 125.294449][ T5822] ocfs2_find_leaf+0xcf/0x230 [ 125.296474][ T5822] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 125.298538][ T5822] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 125.300954][ T5822] ocfs2_get_clusters_nocache+0x1ad/0xbf0 [ 125.303103][ T5822] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 125.305545][ T5822] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 125.307680][ T5822] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 125.309958][ T5822] ? do_raw_spin_unlock+0x58/0x8b0 [ 125.311894][ T5822] ocfs2_get_clusters+0x5bd/0xbd0 [ 125.313874][ T5822] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 125.316014][ T5822] ? mark_lock+0x9a/0x360 [ 125.317761][ T5822] ? __pfx_lock_acquire+0x10/0x10 [ 125.319668][ T5822] ? validate_chain+0x11e/0x5920 [ 125.321531][ T5822] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 125.323807][ T5822] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 125.326338][ T5822] ocfs2_read_virt_blocks+0x313/0xb10 [ 125.329006][ T5822] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 125.331461][ T5822] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 125.333800][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.335790][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.337824][ T5822] ocfs2_find_entry+0x43b/0x2730 [ 125.339751][ T5822] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 125.341838][ T5822] ? __asan_memset+0x23/0x50 [ 125.343578][ T5822] ? __lock_acquire+0x1397/0x2100 [ 125.345529][ T5822] ? format_decode+0xc5f/0x1bb0 [ 125.347494][ T5822] ? __pfx_format_decode+0x10/0x10 [ 125.349471][ T5822] ? __mutex_trylock_common+0x183/0x2e0 [ 125.351582][ T5822] ? __pfx___might_resched+0x10/0x10 [ 125.353619][ T5822] ? string+0x26a/0x2b0 [ 125.355208][ T5822] ? widen_string+0x3a/0x310 [ 125.357046][ T5822] ? string+0x26a/0x2b0 [ 125.358647][ T5822] ? vsnprintf+0x1ccd/0x1da0 [ 125.360430][ T5822] ocfs2_find_files_on_disk+0xff/0x360 [ 125.362527][ T5822] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 125.364676][ T5822] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 125.367244][ T5822] ? kasan_save_track+0x51/0x80 [ 125.369094][ T5822] ? kasan_save_track+0x3f/0x80 [ 125.370949][ T5822] ? __kasan_kmalloc+0x98/0xb0 [ 125.372781][ T5822] ? ocfs2_new_dlm_debug+0x97/0x200 [ 125.374730][ T5822] ocfs2_get_system_file_inode+0x305/0x7b0 [ 125.377218][ T5822] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 125.379693][ T5822] ocfs2_init_global_system_inodes+0x32c/0x730 [ 125.382033][ T5822] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 125.384794][ T5822] ? __kmalloc_cache_noprof+0x243/0x390 [ 125.386944][ T5822] ? ocfs2_new_dlm_debug+0x97/0x200 [ 125.389564][ T5822] ? ocfs2_new_dlm_debug+0xb5/0x200 [ 125.391943][ T5822] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 125.394636][ T5822] ? rcu_is_watching+0x15/0xb0 [ 125.396973][ T5822] ? trace_ocfs2_initialize_super+0x9e/0x230 [ 125.399697][ T5822] ocfs2_fill_super+0x2f5b/0x5760 [ 125.401588][ T5822] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 125.403627][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.405623][ T5822] ? unwind_next_frame+0x18e6/0x22d0 [ 125.407670][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.409665][ T5822] ? preempt_count_add+0x93/0x190 [ 125.411556][ T5822] ? mark_lock+0x9a/0x360 [ 125.413182][ T5822] ? __lock_acquire+0x1397/0x2100 [ 125.415096][ T5822] ? validate_chain+0x11e/0x5920 [ 125.416992][ T5822] ? mark_lock+0x9a/0x360 [ 125.418642][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.420662][ T5822] ? string+0x26a/0x2b0 [ 125.422228][ T5822] ? widen_string+0x3a/0x310 [ 125.423988][ T5822] ? string+0x26a/0x2b0 [ 125.425583][ T5822] ? bdev_name+0x2b1/0x3c0 [ 125.427329][ T5822] ? pointer+0x703/0x1210 [ 125.428970][ T5822] ? __pfx_pointer+0x10/0x10 [ 125.430730][ T5822] ? __pfx_format_decode+0x10/0x10 [ 125.432695][ T5822] ? __lock_acquire+0x1397/0x2100 [ 125.434698][ T5822] ? vsnprintf+0x1ccd/0x1da0 [ 125.436407][ T5822] ? snprintf+0xda/0x120 [ 125.438101][ T5822] ? __pfx_lock_release+0x10/0x10 [ 125.440028][ T5822] ? do_raw_spin_lock+0x14f/0x370 [ 125.441928][ T5822] ? __pfx_snprintf+0x10/0x10 [ 125.443753][ T5822] ? set_blocksize+0x1fc/0x360 [ 125.445573][ T5822] ? sb_set_blocksize+0x98/0xf0 [ 125.447510][ T5822] ? setup_bdev_super+0x4e6/0x5d0 [ 125.449401][ T5822] mount_bdev+0x20a/0x2d0 [ 125.451071][ T5822] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 125.453146][ T5822] ? __pfx_mount_bdev+0x10/0x10 [ 125.455002][ T5822] ? vfs_parse_fs_string+0x190/0x230 [ 125.457056][ T5822] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 125.459730][ T5822] legacy_get_tree+0xee/0x190 [ 125.461684][ T5822] ? __pfx_ocfs2_mount+0x10/0x10 [ 125.463554][ T5822] vfs_get_tree+0x90/0x2b0 [ 125.465291][ T5822] do_new_mount+0x2be/0xb40 [ 125.467071][ T5822] ? __pfx_do_new_mount+0x10/0x10 [ 125.469066][ T5822] __se_sys_mount+0x2d6/0x3c0 [ 125.470855][ T5822] ? __pfx___se_sys_mount+0x10/0x10 [ 125.472854][ T5822] ? exc_page_fault+0x590/0x8b0 [ 125.474713][ T5822] ? __x64_sys_mount+0x20/0xc0 [ 125.476533][ T5822] do_syscall_64+0xf3/0x230 [ 125.478309][ T5822] ? clear_bhb_loop+0x35/0x90 [ 125.480070][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.482381][ T5822] RIP: 0033:0x7ff7769816ba [ 125.484119][ T5822] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.491696][ T5822] RSP: 002b:00007ff777837e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.494916][ T5822] RAX: ffffffffffffffda RBX: 00007ff777837f10 RCX: 00007ff7769816ba [ 125.497958][ T5822] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007ff777837ed0 [ 125.501039][ T5822] RBP: 0000000020004440 R08: 00007ff777837f10 R09: 0000000001000000 [ 125.504229][ T5822] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 125.507225][ T5822] R13: 00007ff777837ed0 R14: 000000000000444a R15: 0000000020000280 [ 125.510250][ T5822] [ 125.511417][ T5822] [ 125.512321][ T5822] The buggy address belongs to the physical page: [ 125.514781][ T5822] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7ff76d62c pfn:0x5591b [ 125.518470][ T5822] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 125.521276][ T5822] raw: 04fff00000000000 ffffea0001564708 ffff88801fc44b30 0000000000000000 [ 125.524551][ T5822] raw: 00000007ff76d62c 0000000000000000 00000000ffffffff 0000000000000000 [ 125.527747][ T5822] page dumped because: kasan: bad access detected [ 125.530297][ T5822] page_owner tracks the page as freed [ 125.532326][ T5822] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5822, tgid 5821 (syz.0.16), ts 125055109401, free_ts 125222458943 [ 125.539329][ T5822] post_alloc_hook+0x1f3/0x230 [ 125.541179][ T5822] get_page_from_freelist+0x365c/0x37a0 [ 125.543261][ T5822] __alloc_pages_noprof+0x292/0x710 [ 125.545242][ T5822] alloc_pages_mpol_noprof+0x3e1/0x780 [ 125.547283][ T5822] vma_alloc_folio_noprof+0x12e/0x230 [ 125.549287][ T5822] folio_prealloc+0x2e/0x170 [ 125.551046][ T5822] handle_pte_fault+0x2c98/0x5ed0 [ 125.552972][ T5822] handle_mm_fault+0x1106/0x1bb0 [ 125.554854][ T5822] exc_page_fault+0x459/0x8b0 [ 125.556701][ T5822] asm_exc_page_fault+0x26/0x30 [ 125.558640][ T5822] page last free pid 5822 tgid 5821 stack trace: [ 125.561010][ T5822] free_unref_folios+0xe39/0x18b0 [ 125.562893][ T5822] folios_put_refs+0x76c/0x860 [ 125.564709][ T5822] free_pages_and_swap_cache+0x5c8/0x690 [ 125.566844][ T5822] tlb_flush_mmu+0x3a3/0x680 [ 125.568744][ T5822] tlb_finish_mmu+0xd4/0x200 [ 125.570532][ T5822] vms_clear_ptes+0x437/0x530 [ 125.572341][ T5822] vms_complete_munmap_vmas+0x210/0x8f0 [ 125.574459][ T5822] do_vmi_align_munmap+0x5ef/0x6f0 [ 125.576443][ T5822] do_vmi_munmap+0x24e/0x2d0 [ 125.578327][ T5822] __vm_munmap+0x24c/0x480 [ 125.580063][ T5822] __x64_sys_munmap+0x60/0x70 [ 125.581843][ T5822] do_syscall_64+0xf3/0x230 [ 125.583568][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.585786][ T5822] [ 125.586701][ T5822] Memory state around the buggy address: [ 125.588794][ T5822] ffff88805591af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 125.591737][ T5822] ffff88805591af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 125.594731][ T5822] >ffff88805591b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 125.597787][ T5822] ^ [ 125.599409][ T5822] ffff88805591b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 125.602372][ T5822] ffff88805591b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 125.605392][ T5822] ================================================================== [ 125.656990][ T5822] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.659810][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz.0.16 Not tainted 6.13.0-rc7-syzkaller-g9bffa1ad25b8 #0 [ 125.663555][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.667726][ T5822] Call Trace: [ 125.669015][ T5822] [ 125.670219][ T5822] dump_stack_lvl+0x241/0x360 [ 125.672015][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.674012][ T5822] ? __pfx__printk+0x10/0x10 [ 125.675735][ T5822] ? preempt_schedule+0xe1/0xf0 [ 125.677723][ T5822] ? vscnprintf+0x5d/0x90 [ 125.679350][ T5822] panic+0x349/0x880 [ 125.680865][ T5822] ? check_panic_on_warn+0x21/0xb0 [ 125.682782][ T5822] ? __pfx_panic+0x10/0x10 [ 125.684482][ T5822] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 125.686734][ T5822] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 125.689214][ T5822] ? print_report+0x502/0x550 [ 125.691016][ T5822] check_panic_on_warn+0x86/0xb0 [ 125.692954][ T5822] ? __ocfs2_find_path+0x203/0x7e0 [ 125.694825][ T5822] end_report+0x77/0x160 [ 125.696472][ T5822] kasan_report+0x154/0x180 [ 125.698385][ T5822] ? __ocfs2_find_path+0x203/0x7e0 [ 125.700383][ T5822] __ocfs2_find_path+0x203/0x7e0 [ 125.702336][ T5822] ? __pfx_find_leaf_ins+0x10/0x10 [ 125.704285][ T5822] ? __pfx___ocfs2_find_path+0x10/0x10 [ 125.706407][ T5822] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 125.708808][ T5822] ocfs2_find_leaf+0xcf/0x230 [ 125.710600][ T5822] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 125.712633][ T5822] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 125.715022][ T5822] ocfs2_get_clusters_nocache+0x1ad/0xbf0 [ 125.717343][ T5822] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 125.719935][ T5822] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 125.722095][ T5822] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 125.724370][ T5822] ? do_raw_spin_unlock+0x58/0x8b0 [ 125.726388][ T5822] ocfs2_get_clusters+0x5bd/0xbd0 [ 125.728321][ T5822] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 125.730397][ T5822] ? mark_lock+0x9a/0x360 [ 125.732272][ T5822] ? __pfx_lock_acquire+0x10/0x10 [ 125.734282][ T5822] ? validate_chain+0x11e/0x5920 [ 125.736295][ T5822] ocfs2_extent_map_get_blocks+0x24c/0x7d0 [ 125.738740][ T5822] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 125.741334][ T5822] ocfs2_read_virt_blocks+0x313/0xb10 [ 125.743359][ T5822] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 125.745655][ T5822] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 125.748006][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.750052][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.751992][ T5822] ocfs2_find_entry+0x43b/0x2730 [ 125.753892][ T5822] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 125.755911][ T5822] ? __asan_memset+0x23/0x50 [ 125.757758][ T5822] ? __lock_acquire+0x1397/0x2100 [ 125.759721][ T5822] ? format_decode+0xc5f/0x1bb0 [ 125.761605][ T5822] ? __pfx_format_decode+0x10/0x10 [ 125.763554][ T5822] ? __mutex_trylock_common+0x183/0x2e0 [ 125.765652][ T5822] ? __pfx___might_resched+0x10/0x10 [ 125.767682][ T5822] ? string+0x26a/0x2b0 [ 125.769293][ T5822] ? widen_string+0x3a/0x310 [ 125.770995][ T5822] ? string+0x26a/0x2b0 [ 125.772585][ T5822] ? vsnprintf+0x1ccd/0x1da0 [ 125.774354][ T5822] ocfs2_find_files_on_disk+0xff/0x360 [ 125.776434][ T5822] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 125.778617][ T5822] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 125.780969][ T5822] ? kasan_save_track+0x51/0x80 [ 125.782796][ T5822] ? kasan_save_track+0x3f/0x80 [ 125.784621][ T5822] ? __kasan_kmalloc+0x98/0xb0 [ 125.786422][ T5822] ? ocfs2_new_dlm_debug+0x97/0x200 [ 125.788485][ T5822] ocfs2_get_system_file_inode+0x305/0x7b0 [ 125.790702][ T5822] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 125.793153][ T5822] ocfs2_init_global_system_inodes+0x32c/0x730 [ 125.795527][ T5822] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 125.798155][ T5822] ? __kmalloc_cache_noprof+0x243/0x390 [ 125.800281][ T5822] ? ocfs2_new_dlm_debug+0x97/0x200 [ 125.802317][ T5822] ? ocfs2_new_dlm_debug+0xb5/0x200 [ 125.804202][ T5822] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 125.806174][ T5822] ? rcu_is_watching+0x15/0xb0 [ 125.807936][ T5822] ? trace_ocfs2_initialize_super+0x9e/0x230 [ 125.810077][ T5822] ocfs2_fill_super+0x2f5b/0x5760 [ 125.811864][ T5822] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 125.813871][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.815775][ T5822] ? unwind_next_frame+0x18e6/0x22d0 [ 125.817876][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.819847][ T5822] ? preempt_count_add+0x93/0x190 [ 125.821879][ T5822] ? mark_lock+0x9a/0x360 [ 125.823622][ T5822] ? __lock_acquire+0x1397/0x2100 [ 125.825573][ T5822] ? validate_chain+0x11e/0x5920 [ 125.827459][ T5822] ? mark_lock+0x9a/0x360 [ 125.829195][ T5822] ? __pfx_validate_chain+0x10/0x10 [ 125.831167][ T5822] ? string+0x26a/0x2b0 [ 125.832780][ T5822] ? widen_string+0x3a/0x310 [ 125.834551][ T5822] ? string+0x26a/0x2b0 [ 125.836130][ T5822] ? bdev_name+0x2b1/0x3c0 [ 125.837899][ T5822] ? pointer+0x703/0x1210 [ 125.839572][ T5822] ? __pfx_pointer+0x10/0x10 [ 125.841367][ T5822] ? __pfx_format_decode+0x10/0x10 [ 125.843336][ T5822] ? __lock_acquire+0x1397/0x2100 [ 125.845321][ T5822] ? vsnprintf+0x1ccd/0x1da0 [ 125.847237][ T5822] ? snprintf+0xda/0x120 [ 125.848886][ T5822] ? __pfx_lock_release+0x10/0x10 [ 125.850791][ T5822] ? do_raw_spin_lock+0x14f/0x370 [ 125.853185][ T5822] ? __pfx_snprintf+0x10/0x10 [ 125.855420][ T5822] ? set_blocksize+0x1fc/0x360 [ 125.857758][ T5822] ? sb_set_blocksize+0x98/0xf0 [ 125.859768][ T5822] ? setup_bdev_super+0x4e6/0x5d0 [ 125.861740][ T5822] mount_bdev+0x20a/0x2d0 [ 125.863423][ T5822] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 125.865506][ T5822] ? __pfx_mount_bdev+0x10/0x10 [ 125.867497][ T5822] ? vfs_parse_fs_string+0x190/0x230 [ 125.869563][ T5822] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 125.871710][ T5822] legacy_get_tree+0xee/0x190 [ 125.873507][ T5822] ? __pfx_ocfs2_mount+0x10/0x10 [ 125.875398][ T5822] vfs_get_tree+0x90/0x2b0 [ 125.877225][ T5822] do_new_mount+0x2be/0xb40 [ 125.879030][ T5822] ? __pfx_do_new_mount+0x10/0x10 [ 125.881044][ T5822] __se_sys_mount+0x2d6/0x3c0 [ 125.882886][ T5822] ? __pfx___se_sys_mount+0x10/0x10 [ 125.884913][ T5822] ? exc_page_fault+0x590/0x8b0 [ 125.886818][ T5822] ? __x64_sys_mount+0x20/0xc0 [ 125.888499][ T5822] do_syscall_64+0xf3/0x230 [ 125.890301][ T5822] ? clear_bhb_loop+0x35/0x90 [ 125.892110][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.894411][ T5822] RIP: 0033:0x7ff7769816ba [ 125.896209][ T5822] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.903161][ T5822] RSP: 002b:00007ff777837e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.906384][ T5822] RAX: ffffffffffffffda RBX: 00007ff777837f10 RCX: 00007ff7769816ba [ 125.909544][ T5822] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007ff777837ed0 [ 125.912575][ T5822] RBP: 0000000020004440 R08: 00007ff777837f10 R09: 0000000001000000 [ 125.915583][ T5822] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 125.918638][ T5822] R13: 00007ff777837ed0 R14: 000000000000444a R15: 0000000020000280 [ 125.921710][ T5822] [ 125.923144][ T5822] Kernel Offset: disabled [ 125.924796][ T5822] Rebooting in 86400 seconds..