Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. 2025/10/01 21:07:41 parsed 1 programs [ 94.631315][ T4842] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 96.244220][ T4865] chnl_net:caif_netlink_parms(): no params data found [ 96.283263][ T4865] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.290452][ T4865] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.298294][ T4865] device bridge_slave_0 entered promiscuous mode [ 96.306662][ T4865] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.313792][ T4865] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.322006][ T4865] device bridge_slave_1 entered promiscuous mode [ 96.342155][ T4865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.353435][ T4865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.382404][ T4865] team0: Port device team_slave_0 added [ 96.390382][ T4865] team0: Port device team_slave_1 added [ 96.412816][ T4865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.419973][ T4865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.446420][ T4865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.459065][ T4865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.466297][ T4865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.494555][ T4865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.534635][ T4865] device hsr_slave_0 entered promiscuous mode [ 96.541592][ T4865] device hsr_slave_1 entered promiscuous mode [ 97.019130][ T4865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.054501][ T4865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.064279][ T4865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.086920][ T4865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.133156][ T4865] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.140286][ T4865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.147809][ T4865] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.154920][ T4865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.203303][ T4865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.219569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.237871][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.245598][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.261783][ T4865] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.279257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.311634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.320349][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.327457][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.351672][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.376527][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.384983][ T702] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.392079][ T702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.406903][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.415743][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.428892][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.439676][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.459722][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.467917][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.478853][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.492957][ T4865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.504458][ T4865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.527406][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.547256][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.566649][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.586519][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.606558][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.764155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.772384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.793071][ T4865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.812344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.821622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.841256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.849876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.859203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.867258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.885102][ T4865] device veth0_vlan entered promiscuous mode [ 97.899208][ T4865] device veth1_vlan entered promiscuous mode [ 97.921888][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.930654][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.940429][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.949289][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.960592][ T4865] device veth0_macvtap entered promiscuous mode [ 97.979035][ T4865] device veth1_macvtap entered promiscuous mode [ 97.997776][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.005396][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.013872][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.022210][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.032452][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.044437][ T4865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.053659][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.062472][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.075091][ T4865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.084672][ T4865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.094645][ T4865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.104553][ T4865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.467492][ T1233] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.609749][ T702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.622869][ T702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.638769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.650438][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.659730][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.670710][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/10/01 21:07:51 executed programs: 0 [ 101.297522][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 101.351015][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.358350][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.366687][ T5081] device bridge_slave_0 entered promiscuous mode [ 101.375312][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.383203][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.391510][ T5081] device bridge_slave_1 entered promiscuous mode [ 101.417149][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.428640][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.457308][ T5081] team0: Port device team_slave_0 added [ 101.465236][ T5081] team0: Port device team_slave_1 added [ 101.489607][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.496875][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.526270][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.539269][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.546384][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.572483][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.609253][ T5081] device hsr_slave_0 entered promiscuous mode [ 101.616669][ T5081] device hsr_slave_1 entered promiscuous mode [ 101.623372][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.632585][ T5081] Cannot create hsr debugfs directory [ 102.642100][ T1233] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.691531][ T1233] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.733942][ T1233] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.216962][ T5220] Bluetooth: hci0: command 0x0409 tx timeout [ 103.654432][ T5081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.664831][ T5081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.709442][ T5081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.719475][ T5081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.833935][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.852944][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.862564][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.897435][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.910719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.921438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.931112][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.938317][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.949004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.978553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.987877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.996585][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.004013][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.014310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.034611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.043673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.053217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.062612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.072594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.081346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.108315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.116898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.130530][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.142810][ T5081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.152064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.161092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.261511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.269084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.282103][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.295470][ T1233] device hsr_slave_0 left promiscuous mode [ 104.302399][ T1233] device hsr_slave_1 left promiscuous mode [ 104.308874][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.317065][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.324612][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.332257][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.340077][ T1233] device bridge_slave_1 left promiscuous mode [ 104.346823][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.355244][ T1233] device bridge_slave_0 left promiscuous mode [ 104.361738][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.372185][ T1233] device veth1_macvtap left promiscuous mode [ 104.378421][ T1233] device veth0_macvtap left promiscuous mode [ 104.384519][ T1233] device veth1_vlan left promiscuous mode [ 104.390614][ T1233] device veth0_vlan left promiscuous mode [ 104.515086][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 104.528097][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 104.541572][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.555292][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.608862][ T1233] bond0 (unregistering): Released all slaves [ 104.668335][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.677290][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.696245][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.704473][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.713918][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.722308][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.733022][ T5081] device veth0_vlan entered promiscuous mode [ 104.744923][ T5081] device veth1_vlan entered promiscuous mode [ 104.766094][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.774739][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.783625][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.792260][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.802529][ T5081] device veth0_macvtap entered promiscuous mode [ 104.812471][ T5081] device veth1_macvtap entered promiscuous mode [ 104.829112][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.840731][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.849551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.857932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.866220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.874711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.884201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.893350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.904223][ T5081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.913270][ T5081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.922230][ T5081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.931180][ T5081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.996804][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.004812][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.014297][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.019449][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.022719][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.038955][ T4497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.278076][ T5294] loop0: detected capacity change from 0 to 32768 [ 105.306964][ T5220] Bluetooth: hci0: command 0x041b tx timeout [ 105.347376][ T5294] ======================================================= [ 105.347376][ T5294] WARNING: The mand mount option has been deprecated and [ 105.347376][ T5294] and is ignored by this kernel. Remove the mand [ 105.347376][ T5294] option from the mount to silence this warning. [ 105.347376][ T5294] ======================================================= [ 105.440849][ T5294] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 105.466896][ T5294] (syz.0.17,5294,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 105.523160][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 105.885538][ T5298] loop0: detected capacity change from 0 to 32768 [ 105.982974][ T5298] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 106.010424][ T5298] (syz.0.18,5298,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 106.050918][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 106.363243][ T5302] loop0: detected capacity change from 0 to 32768 [ 106.400812][ T5302] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. 2025/10/01 21:07:56 executed programs: 5 [ 106.418805][ T5302] (syz.0.19,5302,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 106.443758][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 106.680962][ T5306] loop0: detected capacity change from 0 to 32768 [ 106.709202][ T5306] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 106.720903][ T5306] (syz.0.20,5306,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=64032, inode=0, rec_len=19527, name_len=73 [ 106.744886][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 106.984813][ T5310] loop0: detected capacity change from 0 to 32768 [ 107.062647][ T5310] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 107.077576][ T5310] (syz.0.21,5310,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 107.110534][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 107.344500][ T5314] loop0: detected capacity change from 0 to 32768 [ 107.387270][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 107.407690][ T5314] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 107.443816][ T5314] (syz.0.22,5314,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 107.477029][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 107.801775][ T5318] loop0: detected capacity change from 0 to 32768 [ 107.846788][ T5318] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 107.881161][ T5318] (syz.0.23,5318,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 107.910890][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 108.253927][ T5322] loop0: detected capacity change from 0 to 32768 [ 108.326747][ T5322] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 108.339876][ T5322] (syz.0.24,5322,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 108.362893][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 108.593327][ T5326] loop0: detected capacity change from 0 to 32768 [ 108.654564][ T5326] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 108.666269][ T5326] (syz.0.25,5326,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 108.689405][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 108.880677][ T5330] loop0: detected capacity change from 0 to 32768 [ 108.978409][ T5330] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 108.991049][ T5330] (syz.0.26,5330,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 109.013749][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 109.201540][ T5334] loop0: detected capacity change from 0 to 32768 [ 109.266237][ T5334] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 109.278159][ T5334] (syz.0.27,5334,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0 [ 109.300771][ T5081] ocfs2: Unmounting device (7,0) on (node local) [ 109.456182][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 109.525368][ T5338] loop0: detected capacity change from 0 to 32768 [ 109.583461][ T5338] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 109.594722][ T5338] ================================================================== [ 109.603016][ T5338] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x1566/0x1900 [ 109.611022][ T5338] Read of size 2 at addr ffff88806a2a2cf0 by task syz.0.28/5338 [ 109.618751][ T5338] [ 109.621088][ T5338] CPU: 1 PID: 5338 Comm: syz.0.28 Not tainted syzkaller #0 [ 109.628291][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.638362][ T5338] Call Trace: [ 109.641652][ T5338] [ 109.644585][ T5338] dump_stack_lvl+0x168/0x230 [ 109.649281][ T5338] ? show_regs_print_info+0x20/0x20 [ 109.654495][ T5338] ? load_image+0x3b0/0x3b0 [ 109.659032][ T5338] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 109.664420][ T5338] ? __lock_acquire+0x13ad/0x7c60 [ 109.669438][ T5338] print_address_description+0x60/0x2d0 [ 109.674995][ T5338] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 109.680638][ T5338] kasan_report+0xdf/0x130 [ 109.685055][ T5338] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 109.690689][ T5338] ocfs2_dir_foreach_blk+0x1566/0x1900 [ 109.696149][ T5338] ? _raw_spin_unlock+0x24/0x40 [ 109.701014][ T5338] ? ocfs2_dir_foreach+0xf0/0xf0 [ 109.705954][ T5338] ? ocfs2_inode_lock_atime+0x22f/0x4e0 [ 109.711494][ T5338] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0 [ 109.717380][ T5338] ocfs2_readdir+0x21a/0x460 [ 109.721954][ T5338] ? clear_nonspinnable+0x60/0x60 [ 109.727160][ T5338] ? ocfs2_dir_foreach_blk+0x1900/0x1900 [ 109.732796][ T5338] ? common_file_perm+0x171/0x1c0 [ 109.737814][ T5338] iterate_dir+0x218/0x560 [ 109.742250][ T5338] __se_sys_getdents+0xe5/0x250 [ 109.747286][ T5338] ? __x64_sys_getdents+0x80/0x80 [ 109.752529][ T5338] ? fillonedir+0x4c0/0x4c0 [ 109.757031][ T5338] ? vtime_user_exit+0x2dc/0x400 [ 109.761976][ T5338] ? lockdep_hardirqs_on+0x94/0x140 [ 109.767264][ T5338] do_syscall_64+0x4c/0xa0 [ 109.771886][ T5338] ? clear_bhb_loop+0x30/0x80 [ 109.776553][ T5338] ? clear_bhb_loop+0x30/0x80 [ 109.781229][ T5338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.787122][ T5338] RIP: 0033:0x7f1daaae7ba9 [ 109.791539][ T5338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.811298][ T5338] RSP: 002b:00007f1daa157038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 109.819789][ T5338] RAX: ffffffffffffffda RBX: 00007f1daad2efa0 RCX: 00007f1daaae7ba9 [ 109.827757][ T5338] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 109.835756][ T5338] RBP: 00007f1daab6ae19 R08: 0000000000000000 R09: 0000000000000000 [ 109.843714][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.851685][ T5338] R13: 00007f1daad2f038 R14: 00007f1daad2efa0 R15: 00007ffe37837c58 [ 109.859663][ T5338] [ 109.862696][ T5338] [ 109.864999][ T5338] The buggy address belongs to the page: [ 109.870817][ T5338] page:ffffea0001a8a880 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6a2a2 [ 109.880977][ T5338] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 109.888078][ T5338] raw: 00fff00000000000 ffffea0001a8a8c8 ffffea0001a5ffc8 0000000000000000 [ 109.896639][ T5338] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 109.905197][ T5338] page dumped because: kasan: bad access detected [ 109.911603][ T5338] page_owner tracks the page as freed [ 109.916959][ T5338] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5330, ts 108863920578, free_ts 109123680805 [ 109.931798][ T5338] get_page_from_freelist+0x1b77/0x1c60 [ 109.937339][ T5338] __alloc_pages+0x1e1/0x470 [ 109.942100][ T5338] alloc_pages_vma+0x393/0x7c0 [ 109.946861][ T5338] shmem_alloc_and_acct_page+0x427/0xb70 [ 109.952511][ T5338] shmem_getpage_gfp+0x14f4/0x2d40 [ 109.957608][ T5338] shmem_write_begin+0xcd/0x1a0 [ 109.962483][ T5338] generic_perform_write+0x2aa/0x530 [ 109.967757][ T5338] __generic_file_write_iter+0x25f/0x4e0 [ 109.973374][ T5338] generic_file_write_iter+0xa6/0x1b0 [ 109.978728][ T5338] vfs_write+0x712/0xd00 [ 109.982956][ T5338] ksys_write+0x14d/0x250 [ 109.987264][ T5338] do_syscall_64+0x4c/0xa0 [ 109.991664][ T5338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.997546][ T5338] page last free stack trace: [ 110.002211][ T5338] free_unref_page_prepare+0x637/0x6c0 [ 110.007665][ T5338] free_unref_page_list+0x122/0x7e0 [ 110.012843][ T5338] release_pages+0x184b/0x1bb0 [ 110.017600][ T5338] __pagevec_release+0x6d/0xe0 [ 110.022341][ T5338] shmem_undo_range+0x5cb/0x1880 [ 110.027286][ T5338] shmem_evict_inode+0x20d/0xa00 [ 110.032212][ T5338] evict+0x485/0x870 [ 110.036097][ T5338] __dentry_kill+0x431/0x650 [ 110.040751][ T5338] dentry_kill+0xb8/0x290 [ 110.045053][ T5338] dput+0xd8/0x1a0 [ 110.048752][ T5338] __fput+0x5ee/0x930 [ 110.052713][ T5338] task_work_run+0x125/0x1a0 [ 110.057290][ T5338] exit_to_user_mode_loop+0x10f/0x130 [ 110.062669][ T5338] exit_to_user_mode_prepare+0xee/0x180 [ 110.068310][ T5338] syscall_exit_to_user_mode+0x16/0x40 [ 110.073759][ T5338] do_syscall_64+0x58/0xa0 [ 110.078162][ T5338] [ 110.080579][ T5338] Memory state around the buggy address: [ 110.086305][ T5338] ffff88806a2a2b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 110.094459][ T5338] ffff88806a2a2c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 110.102593][ T5338] >ffff88806a2a2c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 110.110667][ T5338] ^ [ 110.118370][ T5338] ffff88806a2a2d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 110.126515][ T5338] ffff88806a2a2d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 110.134672][ T5338] ================================================================== [ 110.142713][ T5338] Disabling lock debugging due to kernel taint [ 110.153339][ T5338] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 110.160559][ T5338] CPU: 1 PID: 5338 Comm: syz.0.28 Tainted: G B syzkaller #0 [ 110.169209][ T5338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.179332][ T5338] Call Trace: [ 110.182620][ T5338] [ 110.185628][ T5338] dump_stack_lvl+0x168/0x230 [ 110.190295][ T5338] ? show_regs_print_info+0x20/0x20 [ 110.195510][ T5338] ? load_image+0x3b0/0x3b0 [ 110.200010][ T5338] panic+0x2c9/0x7f0 [ 110.203892][ T5338] ? bpf_jit_dump+0xd0/0xd0 [ 110.208386][ T5338] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 110.214286][ T5338] ? _raw_spin_unlock+0x40/0x40 [ 110.219120][ T5338] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 110.224746][ T5338] check_panic_on_warn+0x80/0xa0 [ 110.229669][ T5338] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 110.235287][ T5338] end_report+0x6d/0xf0 [ 110.239432][ T5338] kasan_report+0x102/0x130 [ 110.243930][ T5338] ? ocfs2_dir_foreach_blk+0x1566/0x1900 [ 110.249538][ T5338] ocfs2_dir_foreach_blk+0x1566/0x1900 [ 110.254991][ T5338] ? _raw_spin_unlock+0x24/0x40 [ 110.259825][ T5338] ? ocfs2_dir_foreach+0xf0/0xf0 [ 110.264743][ T5338] ? ocfs2_inode_lock_atime+0x22f/0x4e0 [ 110.270274][ T5338] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0 [ 110.276170][ T5338] ocfs2_readdir+0x21a/0x460 [ 110.280738][ T5338] ? clear_nonspinnable+0x60/0x60 [ 110.285760][ T5338] ? ocfs2_dir_foreach_blk+0x1900/0x1900 [ 110.291383][ T5338] ? common_file_perm+0x171/0x1c0 [ 110.296431][ T5338] iterate_dir+0x218/0x560 [ 110.300863][ T5338] __se_sys_getdents+0xe5/0x250 [ 110.305724][ T5338] ? __x64_sys_getdents+0x80/0x80 [ 110.310751][ T5338] ? fillonedir+0x4c0/0x4c0 [ 110.315241][ T5338] ? vtime_user_exit+0x2dc/0x400 [ 110.320170][ T5338] ? lockdep_hardirqs_on+0x94/0x140 [ 110.325383][ T5338] do_syscall_64+0x4c/0xa0 [ 110.329889][ T5338] ? clear_bhb_loop+0x30/0x80 [ 110.334551][ T5338] ? clear_bhb_loop+0x30/0x80 [ 110.339206][ T5338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.345079][ T5338] RIP: 0033:0x7f1daaae7ba9 [ 110.349494][ T5338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.369081][ T5338] RSP: 002b:00007f1daa157038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 110.377482][ T5338] RAX: ffffffffffffffda RBX: 00007f1daad2efa0 RCX: 00007f1daaae7ba9 [ 110.385536][ T5338] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 110.393510][ T5338] RBP: 00007f1daab6ae19 R08: 0000000000000000 R09: 0000000000000000 [ 110.401486][ T5338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.409445][ T5338] R13: 00007f1daad2f038 R14: 00007f1daad2efa0 R15: 00007ffe37837c58 [ 110.417400][ T5338] [ 110.420676][ T5338] Kernel Offset: disabled [ 110.424994][ T5338] Rebooting in 86400 seconds..