Warning: Permanently added '[localhost]:32086' (ED25519) to the list of known hosts. 2025/08/30 10:53:00 ignoring optional flag "type"="qemu" 2025/08/30 10:53:00 parsed 1 programs [ 132.966961][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 136.228785][ T4702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.235237][ T4702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.239315][ T4702] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.245530][ T4702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.249293][ T4702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.316054][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.320095][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.354921][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.358683][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.067247][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.070247][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.218548][ T5645] chnl_net:caif_netlink_parms(): no params data found [ 139.286998][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.290477][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.294249][ T5645] bridge_slave_0: entered allmulticast mode [ 139.298022][ T5645] bridge_slave_0: entered promiscuous mode [ 139.305290][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.308806][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.312096][ T5645] bridge_slave_1: entered allmulticast mode [ 139.317072][ T5645] bridge_slave_1: entered promiscuous mode [ 139.342365][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.350152][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.376312][ T5645] team0: Port device team_slave_0 added [ 139.380809][ T5645] team0: Port device team_slave_1 added [ 139.403683][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.407022][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.419593][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.429721][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.433172][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.445854][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.483721][ T5645] hsr_slave_0: entered promiscuous mode [ 139.487064][ T5645] hsr_slave_1: entered promiscuous mode [ 139.987297][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.006564][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.024214][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.031159][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.207196][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.246055][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.260417][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.263795][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.298439][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.302322][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.687130][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.784442][ T5645] veth0_vlan: entered promiscuous mode [ 140.799233][ T5645] veth1_vlan: entered promiscuous mode [ 140.854791][ T5645] veth0_macvtap: entered promiscuous mode [ 140.870562][ T5645] veth1_macvtap: entered promiscuous mode [ 140.923123][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.934233][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.985685][ T1047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.994754][ T1047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.998815][ T1047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.027317][ T1047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.236652][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.350079][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.443303][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.494912][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/30 10:53:15 executed programs: 0 [ 142.920481][ T5392] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.925978][ T5392] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.929766][ T5392] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.934419][ T5392] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.938179][ T5392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.461366][ T5713] chnl_net:caif_netlink_parms(): no params data found [ 143.698719][ T5713] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.702170][ T5713] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.715114][ T5713] bridge_slave_0: entered allmulticast mode [ 143.733254][ T5713] bridge_slave_0: entered promiscuous mode [ 143.764414][ T5713] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.768110][ T5713] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.771755][ T5713] bridge_slave_1: entered allmulticast mode [ 143.790707][ T5713] bridge_slave_1: entered promiscuous mode [ 143.867070][ T43] bridge_slave_1: left allmulticast mode [ 143.869695][ T43] bridge_slave_1: left promiscuous mode [ 143.872253][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.894538][ T43] bridge_slave_0: left allmulticast mode [ 143.897060][ T43] bridge_slave_0: left promiscuous mode [ 143.899734][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.259905][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.266415][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.271661][ T43] bond0 (unregistering): Released all slaves [ 144.284669][ T5713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.312190][ T5713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.359499][ T43] hsr_slave_0: left promiscuous mode [ 144.364222][ T43] hsr_slave_1: left promiscuous mode [ 144.367328][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.370951][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.376313][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.379622][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.391020][ T43] veth1_macvtap: left promiscuous mode [ 144.394672][ T43] veth0_macvtap: left promiscuous mode [ 144.397289][ T43] veth1_vlan: left promiscuous mode [ 144.399856][ T43] veth0_vlan: left promiscuous mode [ 144.728787][ T43] team0 (unregistering): Port device team_slave_1 removed [ 144.752413][ T43] team0 (unregistering): Port device team_slave_0 removed [ 145.022877][ T4702] Bluetooth: hci0: command tx timeout [ 145.074260][ T5713] team0: Port device team_slave_0 added [ 145.078844][ T5713] team0: Port device team_slave_1 added [ 145.146464][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.149809][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.185060][ T5713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.211069][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.229557][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.262991][ T5713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.403896][ T5713] hsr_slave_0: entered promiscuous mode [ 145.414913][ T5713] hsr_slave_1: entered promiscuous mode [ 146.184825][ T5713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.208731][ T5713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.221390][ T5713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.233875][ T5713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.320680][ T5713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.338562][ T5713] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.348340][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.351638][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.369561][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.373150][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.565885][ T5713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.606477][ T5713] veth0_vlan: entered promiscuous mode [ 146.618177][ T5713] veth1_vlan: entered promiscuous mode [ 146.649459][ T5713] veth0_macvtap: entered promiscuous mode [ 146.658317][ T5713] veth1_macvtap: entered promiscuous mode [ 146.674301][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.685834][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.701407][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.709788][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.719430][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.730224][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.827184][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.830595][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.895795][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.900901][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.103388][ T4702] Bluetooth: hci0: command tx timeout [ 147.227194][ T5759] loop0: detected capacity change from 0 to 32768 [ 147.237197][ T5759] ======================================================= [ 147.237197][ T5759] WARNING: The mand mount option has been deprecated and [ 147.237197][ T5759] and is ignored by this kernel. Remove the mand [ 147.237197][ T5759] option from the mount to silence this warning. [ 147.237197][ T5759] ======================================================= [ 147.326275][ T5759] JBD2: Ignoring recovery information on journal [ 147.392253][ T5759] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 147.412814][ T25] audit: type=1804 audit(1756551199.903:2): pid=5759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15" name="/newroot/0/file1/bus" dev="loop0" ino=17058 res=1 errno=0 [ 147.433518][ T5759] ================================================================== [ 147.437044][ T5759] BUG: KASAN: use-after-free in ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 147.440923][ T5759] Read of size 4 at addr ffff88804b84a000 by task syz.0.15/5759 [ 147.445406][ T5759] [ 147.446677][ T5759] CPU: 0 UID: 0 PID: 5759 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) [ 147.446694][ T5759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.446702][ T5759] Call Trace: [ 147.446711][ T5759] [ 147.446717][ T5759] dump_stack_lvl+0x189/0x250 [ 147.446737][ T5759] ? __kasan_check_byte+0x12/0x40 [ 147.446753][ T5759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.446767][ T5759] ? lock_release+0x4b/0x3e0 [ 147.446784][ T5759] ? __virt_addr_valid+0x4a5/0x5c0 [ 147.446800][ T5759] print_report+0xca/0x240 [ 147.446812][ T5759] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 147.446825][ T5759] kasan_report+0x118/0x150 [ 147.446840][ T5759] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 147.446854][ T5759] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 147.446872][ T5759] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 147.446883][ T5759] ? __ocfs2_journal_access+0x621/0x820 [ 147.446896][ T5759] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 147.446983][ T5759] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.447000][ T5759] ? jbd2_write_access_granted+0x69/0x310 [ 147.447016][ T5759] ? jbd2_write_access_granted+0x69/0x310 [ 147.447031][ T5759] ocfs2_claim_metadata+0x178/0x4c0 [ 147.447044][ T5759] ? __pfx_ocfs2_claim_metadata+0x10/0x10 [ 147.447058][ T5759] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 147.447071][ T5759] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 147.447087][ T5759] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 147.447098][ T5759] ocfs2_create_refcount_tree+0x54f/0x1250 [ 147.447115][ T5759] ? __pfx_ocfs2_create_refcount_tree+0x10/0x10 [ 147.447130][ T5759] ? find_get_entries+0x688/0x7f0 [ 147.447147][ T5759] ? find_get_entries+0xfe/0x7f0 [ 147.447164][ T5759] ? __pfx_find_get_entries+0x10/0x10 [ 147.447182][ T5759] ? __filemap_get_folio+0x9a6/0xaf0 [ 147.447196][ T5759] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 147.447212][ T5759] ocfs2_reflink_remap_blocks+0x2ea/0x1930 [ 147.447229][ T5759] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 147.447242][ T5759] ? __pfx_ocfs2_reflink_remap_blocks+0x10/0x10 [ 147.447260][ T5759] ? __lock_acquire+0xab9/0xd20 [ 147.447281][ T5759] ? down_write+0x162/0x1f0 [ 147.447291][ T5759] ? __pfx_down_write+0x10/0x10 [ 147.447302][ T5759] ? generic_remap_file_range_prep+0x3e/0x60 [ 147.447316][ T5759] ocfs2_remap_file_range+0x4b7/0x730 [ 147.447332][ T5759] ? __lock_acquire+0xab9/0xd20 [ 147.447349][ T5759] ? __pfx_ocfs2_remap_file_range+0x10/0x10 [ 147.447365][ T5759] ? rcu_read_lock_any_held+0xb3/0x120 [ 147.447378][ T5759] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 147.447393][ T5759] ? __pfx_ocfs2_remap_file_range+0x10/0x10 [ 147.447408][ T5759] vfs_copy_file_range+0xd53/0x1310 [ 147.447430][ T5759] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 147.447447][ T5759] __se_sys_copy_file_range+0x2fb/0x470 [ 147.447464][ T5759] ? __pfx___se_sys_copy_file_range+0x10/0x10 [ 147.447480][ T5759] ? rcu_is_watching+0x15/0xb0 [ 147.447493][ T5759] ? __x64_sys_copy_file_range+0x21/0xf0 [ 147.447510][ T5759] do_syscall_64+0xfa/0x3b0 [ 147.447527][ T5759] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.447542][ T5759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.447554][ T5759] ? clear_bhb_loop+0x60/0xb0 [ 147.447567][ T5759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.447579][ T5759] RIP: 0033:0x7f196af79e79 [ 147.447600][ T5759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.447611][ T5759] RSP: 002b:00007f196bd79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 147.447626][ T5759] RAX: ffffffffffffffda RBX: 00007f196b115f80 RCX: 00007f196af79e79 [ 147.447634][ T5759] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 147.447640][ T5759] RBP: 00007f196afe7916 R08: 0000000000000006 R09: 0000000000000000 [ 147.447647][ T5759] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 147.447655][ T5759] R13: 0000000000000000 R14: 00007f196b115f80 R15: 00007ffca5e7e648 [ 147.447667][ T5759] [ 147.447672][ T5759] [ 147.630813][ T5759] The buggy address belongs to the physical page: [ 147.633666][ T5759] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804b84af00 pfn:0x4b84a [ 147.639124][ T5759] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 147.642497][ T5759] page_type: f0(buddy) [ 147.644403][ T5759] raw: 04fff00000000000 ffffea00015d5a88 ffffea0000ce7f08 0000000000000000 [ 147.648858][ T5759] raw: ffff88804b84af00 0000000000000001 00000000f0000000 0000000000000000 [ 147.652865][ T5759] page dumped because: kasan: bad access detected [ 147.655908][ T5759] page_owner tracks the page as freed [ 147.658498][ T5759] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 5048, tgid 5048 (dhcpcd), ts 117735930184, free_ts 144333690920 [ 147.666369][ T5759] post_alloc_hook+0x240/0x2a0 [ 147.668722][ T5759] get_page_from_freelist+0x21e4/0x22c0 [ 147.671516][ T5759] __alloc_frozen_pages_noprof+0x181/0x370 [ 147.674313][ T5759] alloc_pages_mpol+0x232/0x4a0 [ 147.676726][ T5759] alloc_pages_noprof+0xa9/0x190 [ 147.679168][ T5759] __pud_alloc+0x3a/0x260 [ 147.681168][ T5759] copy_page_range+0xcb0/0x1270 [ 147.683515][ T5759] dup_mmap+0xf57/0x1ac0 [ 147.685677][ T5759] copy_mm+0x13c/0x4b0 [ 147.687686][ T5759] copy_process+0x1706/0x3c00 [ 147.689883][ T5759] kernel_clone+0x21e/0x840 [ 147.692098][ T5759] __x64_sys_clone+0x18b/0x1e0 [ 147.694267][ T5759] do_syscall_64+0xfa/0x3b0 [ 147.696338][ T5759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.699246][ T5759] page last free pid 1047 tgid 1047 stack trace: [ 147.702422][ T5759] __free_frozen_pages+0xbc4/0xd30 [ 147.704779][ T5759] __tlb_remove_table+0x2d2/0x3b0 [ 147.707172][ T5759] tlb_remove_table_rcu+0x85/0x100 [ 147.709524][ T5759] rcu_core+0xcab/0x1770 [ 147.711519][ T5759] handle_softirqs+0x283/0x870 [ 147.713806][ T5759] do_softirq+0xec/0x180 [ 147.715898][ T5759] __local_bh_enable_ip+0x17d/0x1c0 [ 147.718920][ T5759] batadv_nc_purge_paths+0x318/0x3b0 [ 147.721625][ T5759] batadv_nc_worker+0x328/0x610 [ 147.723771][ T5759] process_scheduled_works+0xae1/0x17b0 [ 147.726184][ T5759] worker_thread+0x8a0/0xda0 [ 147.728269][ T5759] kthread+0x70e/0x8a0 [ 147.730168][ T5759] ret_from_fork+0x3fc/0x770 [ 147.732358][ T5759] ret_from_fork_asm+0x1a/0x30 [ 147.734547][ T5759] [ 147.735639][ T5759] Memory state around the buggy address: [ 147.738235][ T5759] ffff88804b849f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 147.742372][ T5759] ffff88804b849f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 147.746112][ T5759] >ffff88804b84a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 147.749769][ T5759] ^ [ 147.751658][ T5759] ffff88804b84a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 147.755265][ T5759] ffff88804b84a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 147.759215][ T5759] ================================================================== [ 147.986164][ T5759] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.989750][ T5759] CPU: 0 UID: 0 PID: 5759 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(full) [ 147.993682][ T5759] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.998324][ T5759] Call Trace: [ 147.999834][ T5759] [ 148.001253][ T5759] dump_stack_lvl+0x99/0x250 [ 148.003317][ T5759] ? __asan_memcpy+0x40/0x70 [ 148.005428][ T5759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.007987][ T5759] ? __pfx__printk+0x10/0x10 [ 148.010339][ T5759] vpanic+0x281/0x750 [ 148.012299][ T5759] ? preempt_schedule+0xae/0xc0 [ 148.014560][ T5759] ? __pfx_vpanic+0x10/0x10 [ 148.016544][ T5759] ? preempt_schedule_common+0x83/0xd0 [ 148.018981][ T5759] ? preempt_schedule+0xae/0xc0 [ 148.021412][ T5759] ? __pfx_preempt_schedule+0x10/0x10 [ 148.024382][ T5759] panic+0xb9/0xc0 [ 148.026607][ T5759] ? __pfx_panic+0x10/0x10 [ 148.028872][ T5759] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 148.031538][ T5759] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 148.034146][ T5759] check_panic_on_warn+0x89/0xb0 [ 148.036333][ T5759] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 148.039064][ T5759] end_report+0x78/0x160 [ 148.040906][ T5759] kasan_report+0x129/0x150 [ 148.042929][ T5759] ? ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 148.045533][ T5759] ocfs2_claim_suballoc_bits+0x8b2/0x2450 [ 148.048109][ T5759] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 148.050947][ T5759] ? __ocfs2_journal_access+0x621/0x820 [ 148.053700][ T5759] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 148.056387][ T5759] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.059112][ T5759] ? jbd2_write_access_granted+0x69/0x310 [ 148.061609][ T5759] ? jbd2_write_access_granted+0x69/0x310 [ 148.064437][ T5759] ocfs2_claim_metadata+0x178/0x4c0 [ 148.067095][ T5759] ? __pfx_ocfs2_claim_metadata+0x10/0x10 [ 148.069936][ T5759] ? __pfx_ocfs2_start_trans+0x10/0x10 [ 148.072342][ T5759] ? ocfs2_metadata_cache_get_super+0x43/0x80 [ 148.075077][ T5759] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 148.077638][ T5759] ocfs2_create_refcount_tree+0x54f/0x1250 [ 148.080277][ T5759] ? __pfx_ocfs2_create_refcount_tree+0x10/0x10 [ 148.083031][ T5759] ? find_get_entries+0x688/0x7f0 [ 148.085406][ T5759] ? find_get_entries+0xfe/0x7f0 [ 148.087925][ T5759] ? __pfx_find_get_entries+0x10/0x10 [ 148.090624][ T5759] ? __filemap_get_folio+0x9a6/0xaf0 [ 148.093036][ T5759] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 148.095814][ T5759] ocfs2_reflink_remap_blocks+0x2ea/0x1930 [ 148.098447][ T5759] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 148.101240][ T5759] ? __pfx_ocfs2_reflink_remap_blocks+0x10/0x10 [ 148.104041][ T5759] ? __lock_acquire+0xab9/0xd20 [ 148.106306][ T5759] ? down_write+0x162/0x1f0 [ 148.108534][ T5759] ? __pfx_down_write+0x10/0x10 [ 148.110869][ T5759] ? generic_remap_file_range_prep+0x3e/0x60 [ 148.113562][ T5759] ocfs2_remap_file_range+0x4b7/0x730 [ 148.115926][ T5759] ? __lock_acquire+0xab9/0xd20 [ 148.118191][ T5759] ? __pfx_ocfs2_remap_file_range+0x10/0x10 [ 148.121294][ T5759] ? rcu_read_lock_any_held+0xb3/0x120 [ 148.124212][ T5759] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 148.127256][ T5759] ? __pfx_ocfs2_remap_file_range+0x10/0x10 [ 148.129933][ T5759] vfs_copy_file_range+0xd53/0x1310 [ 148.132285][ T5759] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 148.134778][ T5759] __se_sys_copy_file_range+0x2fb/0x470 [ 148.137255][ T5759] ? __pfx___se_sys_copy_file_range+0x10/0x10 [ 148.140001][ T5759] ? rcu_is_watching+0x15/0xb0 [ 148.142154][ T5759] ? __x64_sys_copy_file_range+0x21/0xf0 [ 148.144675][ T5759] do_syscall_64+0xfa/0x3b0 [ 148.146788][ T5759] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.149278][ T5759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.152225][ T5759] ? clear_bhb_loop+0x60/0xb0 [ 148.154404][ T5759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.156900][ T5759] RIP: 0033:0x7f196af79e79 [ 148.158749][ T5759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.167058][ T5759] RSP: 002b:00007f196bd79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 148.171375][ T5759] RAX: ffffffffffffffda RBX: 00007f196b115f80 RCX: 00007f196af79e79 [ 148.174873][ T5759] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 148.178241][ T5759] RBP: 00007f196afe7916 R08: 0000000000000006 R09: 0000000000000000 [ 148.181712][ T5759] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 148.185427][ T5759] R13: 0000000000000000 R14: 00007f196b115f80 R15: 00007ffca5e7e648 [ 148.189166][ T5759] [ 148.190857][ T5759] Kernel Offset: disabled [ 148.192795][ T5759] Rebooting in 86400 seconds..