Warning: Permanently added '[localhost]:29917' (ED25519) to the list of known hosts. 2024/11/08 08:04:28 ignoring optional flag "sandboxArg"="0" 2024/11/08 08:04:28 ignoring optional flag "type"="qemu" 2024/11/08 08:04:28 parsed 1 programs [ 109.577822][ T5619] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.259852][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.262991][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.293335][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.296944][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.417009][ T5684] chnl_net:caif_netlink_parms(): no params data found [ 114.451294][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.455067][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.457969][ T5684] bridge_slave_0: entered allmulticast mode [ 114.461155][ T5684] bridge_slave_0: entered promiscuous mode [ 114.465810][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.468899][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.471715][ T5684] bridge_slave_1: entered allmulticast mode [ 114.476040][ T5684] bridge_slave_1: entered promiscuous mode [ 114.490402][ T5684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.496680][ T5684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.512116][ T5684] team0: Port device team_slave_0 added [ 114.516681][ T5684] team0: Port device team_slave_1 added [ 114.528582][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.531308][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.543132][ T5684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.548828][ T5684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.551523][ T5684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.562246][ T5684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.583470][ T5684] hsr_slave_0: entered promiscuous mode [ 114.588695][ T5684] hsr_slave_1: entered promiscuous mode [ 115.080308][ T5684] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.096350][ T5684] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.101659][ T5684] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.113950][ T5684] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.153272][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.156058][ T5684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.158848][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.161813][ T5684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.250487][ T5684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.268227][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.275292][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.290599][ T5684] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.308392][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.311110][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.328619][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.331370][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.551269][ T5684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.623242][ T5684] veth0_vlan: entered promiscuous mode [ 115.640817][ T5684] veth1_vlan: entered promiscuous mode [ 115.677056][ T5684] veth0_macvtap: entered promiscuous mode [ 115.691273][ T5684] veth1_macvtap: entered promiscuous mode [ 115.719764][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.736422][ T5684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.740994][ T5684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.753619][ T5684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.760353][ T5684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.774630][ T5684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.965993][ T4676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.970018][ T4676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.973230][ T4676] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.978061][ T4676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.981253][ T4676] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.984592][ T4676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.046955][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.107149][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.193021][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.317238][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/11/08 08:04:40 executed programs: 0 [ 117.250911][ T5387] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.255254][ T5387] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.258462][ T5387] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.262787][ T5387] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.269537][ T5387] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.272523][ T5387] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.479626][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 117.573140][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.584260][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.587175][ T5765] bridge_slave_0: entered allmulticast mode [ 117.596848][ T5765] bridge_slave_0: entered promiscuous mode [ 117.605440][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.608592][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.611499][ T5765] bridge_slave_1: entered allmulticast mode [ 117.625855][ T5765] bridge_slave_1: entered promiscuous mode [ 117.659650][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.667018][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.700070][ T5765] team0: Port device team_slave_0 added [ 117.717180][ T5765] team0: Port device team_slave_1 added [ 117.743517][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.750600][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.775481][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.785998][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.788708][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.814334][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.866647][ T5765] hsr_slave_0: entered promiscuous mode [ 117.869989][ T5765] hsr_slave_1: entered promiscuous mode [ 117.872599][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.886585][ T5765] Cannot create hsr debugfs directory [ 118.706542][ T11] bridge_slave_1: left allmulticast mode [ 118.708739][ T11] bridge_slave_1: left promiscuous mode [ 118.711056][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.729907][ T11] bridge_slave_0: left allmulticast mode [ 118.732120][ T11] bridge_slave_0: left promiscuous mode [ 118.739493][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.257747][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.266256][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.278183][ T11] bond0 (unregistering): Released all slaves [ 119.305658][ T5387] Bluetooth: hci0: command tx timeout [ 119.380369][ T11] hsr_slave_0: left promiscuous mode [ 119.384802][ T11] hsr_slave_1: left promiscuous mode [ 119.397127][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.400015][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.405226][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.408162][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.429608][ T11] veth1_macvtap: left promiscuous mode [ 119.431844][ T11] veth0_macvtap: left promiscuous mode [ 119.444516][ T11] veth1_vlan: left promiscuous mode [ 119.446622][ T11] veth0_vlan: left promiscuous mode [ 119.979227][ T11] team0 (unregistering): Port device team_slave_1 removed [ 120.015476][ T11] team0 (unregistering): Port device team_slave_0 removed [ 120.464926][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.478801][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.506255][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.518891][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.862858][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.935061][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.976312][ T3730] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.979189][ T3730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.982993][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.985922][ T3730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.243020][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.279708][ T5765] veth0_vlan: entered promiscuous mode [ 121.289486][ T5765] veth1_vlan: entered promiscuous mode [ 121.312398][ T5765] veth0_macvtap: entered promiscuous mode [ 121.319039][ T5765] veth1_macvtap: entered promiscuous mode [ 121.329783][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.337663][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.342186][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.347693][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.351055][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.355299][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.385124][ T5387] Bluetooth: hci0: command tx timeout [ 121.409849][ T3730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.412970][ T3730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.436938][ T3730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.440157][ T3730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.668633][ T5860] loop0: detected capacity change from 0 to 32768 [ 121.727212][ T5860] JBD2: Ignoring recovery information on journal [ 121.755426][ T5860] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 121.762898][ T5860] ================================================================== [ 121.766040][ T5860] BUG: KASAN: slab-out-of-bounds in ocfs2_search_dirblock+0x26b/0x830 [ 121.769321][ T5860] Read of size 1 at addr ffff88804d501982 by task syz.0.15/5860 [ 121.773033][ T5860] [ 121.773994][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz.0.15 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0 [ 121.778102][ T5860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.782491][ T5860] Call Trace: [ 121.783831][ T5860] [ 121.785015][ T5860] dump_stack_lvl+0x241/0x360 [ 121.786910][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.788885][ T5860] ? __pfx__printk+0x10/0x10 [ 121.790690][ T5860] ? _printk+0xd5/0x120 [ 121.792310][ T5860] ? __virt_addr_valid+0x183/0x530 [ 121.794442][ T5860] ? __virt_addr_valid+0x183/0x530 [ 121.796397][ T5860] print_report+0x169/0x550 [ 121.798171][ T5860] ? __virt_addr_valid+0x183/0x530 [ 121.800180][ T5860] ? __virt_addr_valid+0x183/0x530 [ 121.802130][ T5860] ? __virt_addr_valid+0x45f/0x530 [ 121.804102][ T5860] ? __phys_addr+0xba/0x170 [ 121.805838][ T5860] ? ocfs2_search_dirblock+0x26b/0x830 [ 121.807921][ T5860] kasan_report+0x143/0x180 [ 121.809653][ T5860] ? ocfs2_search_dirblock+0x26b/0x830 [ 121.811810][ T5860] ocfs2_search_dirblock+0x26b/0x830 [ 121.813725][ T5860] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 121.815793][ T5860] ? __pfx_ocfs2_search_dirblock+0x10/0x10 [ 121.818020][ T5860] ? validate_chain+0x11e/0x5920 [ 121.819891][ T5860] ocfs2_find_entry+0x1169/0x2780 [ 121.821728][ T5860] ? mark_lock+0x9a/0x360 [ 121.823300][ T5860] ? __lock_acquire+0x1384/0x2050 [ 121.825247][ T5860] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 121.827291][ T5860] ? __pfx_lock_acquire+0x10/0x10 [ 121.829199][ T5860] ? ocfs2_inode_lock_full_nested+0x17b/0x1c30 [ 121.831577][ T5860] ? __pfx_lock_release+0x10/0x10 [ 121.833483][ T5860] ? do_raw_spin_lock+0x14f/0x370 [ 121.835415][ T5860] ? do_raw_spin_unlock+0x58/0x8b0 [ 121.837351][ T5860] ? _raw_spin_unlock+0x28/0x50 [ 121.839168][ T5860] ? ocfs2_inode_lock_full_nested+0xb29/0x1c30 [ 121.841492][ T5860] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 121.843909][ T5860] ocfs2_find_files_on_disk+0xff/0x360 [ 121.845916][ T5860] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 121.847984][ T5860] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 121.850220][ T5860] ocfs2_lookup+0x292/0xa60 [ 121.851978][ T5860] ? __pfx_ocfs2_lookup+0x10/0x10 [ 121.854082][ T5860] ? from_kgid+0x1a7/0x730 [ 121.855834][ T5860] ? make_vfsgid+0x51/0xa0 [ 121.857542][ T5860] ? HAS_UNMAPPED_ID+0xf9/0x150 [ 121.859458][ T5860] ? inode_permission+0xff/0x460 [ 121.861278][ T5860] ? __pfx_ocfs2_permission+0x10/0x10 [ 121.863324][ T5860] ? bpf_lsm_inode_create+0x9/0x10 [ 121.865321][ T5860] ? security_inode_create+0xbe/0x340 [ 121.867429][ T5860] ? __pfx_ocfs2_lookup+0x10/0x10 [ 121.869309][ T5860] path_openat+0x11a7/0x3590 [ 121.871131][ T5860] ? __pfx_path_openat+0x10/0x10 [ 121.872965][ T5860] do_filp_open+0x235/0x490 [ 121.874720][ T5860] ? __pfx_do_filp_open+0x10/0x10 [ 121.876659][ T5860] ? _raw_spin_unlock+0x28/0x50 [ 121.878540][ T5860] ? alloc_fd+0x5a1/0x640 [ 121.880180][ T5860] do_sys_openat2+0x13e/0x1d0 [ 121.881955][ T5860] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.883925][ T5860] __x64_sys_openat+0x247/0x2a0 [ 121.885720][ T5860] ? __pfx___x64_sys_openat+0x10/0x10 [ 121.887657][ T5860] ? do_syscall_64+0x100/0x230 [ 121.889279][ T5860] ? do_syscall_64+0xb6/0x230 [ 121.891084][ T5860] do_syscall_64+0xf3/0x230 [ 121.892829][ T5860] ? clear_bhb_loop+0x35/0x90 [ 121.894620][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.896856][ T5860] RIP: 0033:0x7f229cf799b9 [ 121.898516][ T5860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.905709][ T5860] RSP: 002b:00007f229ddd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.908868][ T5860] RAX: ffffffffffffffda RBX: 00007f229d115f80 RCX: 00007f229cf799b9 [ 121.911875][ T5860] RDX: 0000000000105042 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 121.914961][ T5860] RBP: 00007f229cfe78d8 R08: 0000000000000000 R09: 0000000000000000 [ 121.917939][ T5860] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 121.921128][ T5860] R13: 0000000000000000 R14: 00007f229d115f80 R15: 00007ffffa673fd8 [ 121.924102][ T5860] [ 121.925254][ T5860] [ 121.926153][ T5860] Allocated by task 5765: [ 121.927760][ T5860] kasan_save_track+0x3f/0x80 [ 121.929512][ T5860] __kasan_kmalloc+0x98/0xb0 [ 121.931279][ T5860] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 121.933657][ T5860] kmemdup_noprof+0x2a/0x60 [ 121.935412][ T5860] __addrconf_sysctl_register+0xb1/0x3a0 [ 121.937520][ T5860] addrconf_sysctl_register+0x167/0x1c0 [ 121.939572][ T5860] ipv6_add_dev+0xcf6/0x1220 [ 121.941324][ T5860] addrconf_notify+0x6a7/0x1020 [ 121.943188][ T5860] notifier_call_chain+0x19f/0x3e0 [ 121.945128][ T5860] register_netdevice+0x167f/0x1b00 [ 121.946994][ T5860] veth_newlink+0x62b/0xce0 [ 121.948698][ T5860] rtnl_newlink+0x1591/0x20a0 [ 121.950461][ T5860] rtnetlink_rcv_msg+0x73f/0xcf0 [ 121.952389][ T5860] netlink_rcv_skb+0x1e3/0x430 [ 121.954225][ T5860] netlink_unicast+0x7f6/0x990 [ 121.956022][ T5860] netlink_sendmsg+0x8e4/0xcb0 [ 121.957869][ T5860] __sock_sendmsg+0x221/0x270 [ 121.959883][ T5860] __sys_sendto+0x39b/0x4f0 [ 121.961571][ T5860] __x64_sys_sendto+0xde/0x100 [ 121.963424][ T5860] do_syscall_64+0xf3/0x230 [ 121.965172][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.967433][ T5860] [ 121.968333][ T5860] The buggy address belongs to the object at ffff88804d500000 [ 121.968333][ T5860] which belongs to the cache kmalloc-cg-4k of size 4096 [ 121.973563][ T5860] The buggy address is located 3058 bytes to the right of [ 121.973563][ T5860] allocated 3472-byte region [ffff88804d500000, ffff88804d500d90) [ 121.979025][ T5860] [ 121.979871][ T5860] The buggy address belongs to the physical page: [ 121.982133][ T5860] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4d500 [ 121.985652][ T5860] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 121.988713][ T5860] memcg:ffff8880338d4741 [ 121.990267][ T5860] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 121.993128][ T5860] page_type: f5(slab) [ 121.994612][ T5860] raw: 04fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 121.997567][ T5860] raw: 0000000000000000 0000000000040004 00000001f5000000 ffff8880338d4741 [ 122.000650][ T5860] head: 04fff00000000040 ffff88801ac4f500 dead000000000122 0000000000000000 [ 122.003801][ T5860] head: 0000000000000000 0000000000040004 00000001f5000000 ffff8880338d4741 [ 122.006997][ T5860] head: 04fff00000000003 ffffea0001354001 ffffffffffffffff 0000000000000000 [ 122.010209][ T5860] head: 0000000700000008 0000000000000000 00000000ffffffff 0000000000000000 [ 122.013395][ T5860] page dumped because: kasan: bad access detected [ 122.015828][ T5860] page_owner tracks the page as allocated [ 122.017824][ T5860] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5765, tgid 5765 (syz-executor), ts 117687397619, free_ts 116874982847 [ 122.025793][ T5860] post_alloc_hook+0x1f3/0x230 [ 122.027598][ T5860] get_page_from_freelist+0x303f/0x3190 [ 122.029598][ T5860] __alloc_pages_noprof+0x292/0x710 [ 122.031573][ T5860] alloc_pages_mpol_noprof+0x3e8/0x680 [ 122.034046][ T5860] alloc_slab_page+0x6a/0x140 [ 122.035976][ T5860] allocate_slab+0x5a/0x2f0 [ 122.037647][ T5860] ___slab_alloc+0xcd1/0x14b0 [ 122.039522][ T5860] __slab_alloc+0x58/0xa0 [ 122.041164][ T5860] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 122.043610][ T5860] kmemdup_noprof+0x2a/0x60 [ 122.045324][ T5860] __addrconf_sysctl_register+0xb1/0x3a0 [ 122.047473][ T5860] addrconf_sysctl_register+0x167/0x1c0 [ 122.049545][ T5860] ipv6_add_dev+0xcf6/0x1220 [ 122.051422][ T5860] addrconf_notify+0x6a7/0x1020 [ 122.053245][ T5860] notifier_call_chain+0x19f/0x3e0 [ 122.055188][ T5860] register_netdevice+0x167f/0x1b00 [ 122.057157][ T5860] page last free pid 5740 tgid 5740 stack trace: [ 122.059566][ T5860] free_unref_page+0xcfb/0xf20 [ 122.061355][ T5860] vfree+0x186/0x2e0 [ 122.062865][ T5860] kcov_close+0x28/0x50 [ 122.064414][ T5860] __fput+0x23f/0x880 [ 122.066002][ T5860] task_work_run+0x24f/0x310 [ 122.067615][ T5860] do_exit+0xa2f/0x28e0 [ 122.069158][ T5860] do_group_exit+0x207/0x2c0 [ 122.070922][ T5860] get_signal+0x16a3/0x1740 [ 122.072582][ T5860] arch_do_signal_or_restart+0x96/0x860 [ 122.074585][ T5860] syscall_exit_to_user_mode+0xc9/0x370 [ 122.076396][ T5860] do_syscall_64+0x100/0x230 [ 122.078138][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.080267][ T5860] [ 122.081090][ T5860] Memory state around the buggy address: [ 122.083185][ T5860] ffff88804d501880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.086232][ T5860] ffff88804d501900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.089396][ T5860] >ffff88804d501980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.092255][ T5860] ^ [ 122.093760][ T5860] ffff88804d501a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.096779][ T5860] ffff88804d501a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.099730][ T5860] ================================================================== [ 122.122525][ T5860] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.125335][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz.0.15 Not tainted 6.12.0-rc6-syzkaller-00169-g906bd684e4b1 #0 [ 122.129319][ T5860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 122.133255][ T5860] Call Trace: [ 122.134526][ T5860] [ 122.135670][ T5860] dump_stack_lvl+0x241/0x360 [ 122.137493][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.139506][ T5860] ? __pfx__printk+0x10/0x10 [ 122.141374][ T5860] ? preempt_schedule+0xe1/0xf0 [ 122.143164][ T5860] ? vscnprintf+0x5d/0x90 [ 122.144768][ T5860] panic+0x349/0x880 [ 122.146266][ T5860] ? check_panic_on_warn+0x21/0xb0 [ 122.148170][ T5860] ? __pfx_panic+0x10/0x10 [ 122.149882][ T5860] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 122.152174][ T5860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 122.154446][ T5860] ? print_report+0x502/0x550 [ 122.156214][ T5860] check_panic_on_warn+0x86/0xb0 [ 122.158069][ T5860] ? ocfs2_search_dirblock+0x26b/0x830 [ 122.160147][ T5860] end_report+0x77/0x160 [ 122.161773][ T5860] kasan_report+0x154/0x180 [ 122.163449][ T5860] ? ocfs2_search_dirblock+0x26b/0x830 [ 122.165498][ T5860] ocfs2_search_dirblock+0x26b/0x830 [ 122.167510][ T5860] ? ocfs2_read_inode_block+0x14c/0x1e0 [ 122.169558][ T5860] ? __pfx_ocfs2_search_dirblock+0x10/0x10 [ 122.171637][ T5860] ? validate_chain+0x11e/0x5920 [ 122.173526][ T5860] ocfs2_find_entry+0x1169/0x2780 [ 122.175507][ T5860] ? mark_lock+0x9a/0x360 [ 122.177106][ T5860] ? __lock_acquire+0x1384/0x2050 [ 122.178922][ T5860] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 122.180840][ T5860] ? __pfx_lock_acquire+0x10/0x10 [ 122.182761][ T5860] ? ocfs2_inode_lock_full_nested+0x17b/0x1c30 [ 122.185089][ T5860] ? __pfx_lock_release+0x10/0x10 [ 122.186942][ T5860] ? do_raw_spin_lock+0x14f/0x370 [ 122.188860][ T5860] ? do_raw_spin_unlock+0x58/0x8b0 [ 122.190864][ T5860] ? _raw_spin_unlock+0x28/0x50 [ 122.192695][ T5860] ? ocfs2_inode_lock_full_nested+0xb29/0x1c30 [ 122.194965][ T5860] ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10 [ 122.197379][ T5860] ocfs2_find_files_on_disk+0xff/0x360 [ 122.199448][ T5860] ocfs2_lookup_ino_from_name+0xb1/0x1e0 [ 122.201610][ T5860] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10 [ 122.203937][ T5860] ocfs2_lookup+0x292/0xa60 [ 122.205481][ T5860] ? __pfx_ocfs2_lookup+0x10/0x10 [ 122.207334][ T5860] ? from_kgid+0x1a7/0x730 [ 122.208895][ T5860] ? make_vfsgid+0x51/0xa0 [ 122.210558][ T5860] ? HAS_UNMAPPED_ID+0xf9/0x150 [ 122.212274][ T5860] ? inode_permission+0xff/0x460 [ 122.214175][ T5860] ? __pfx_ocfs2_permission+0x10/0x10 [ 122.216173][ T5860] ? bpf_lsm_inode_create+0x9/0x10 [ 122.218189][ T5860] ? security_inode_create+0xbe/0x340 [ 122.220251][ T5860] ? __pfx_ocfs2_lookup+0x10/0x10 [ 122.222073][ T5860] path_openat+0x11a7/0x3590 [ 122.223819][ T5860] ? __pfx_path_openat+0x10/0x10 [ 122.225568][ T5860] do_filp_open+0x235/0x490 [ 122.227257][ T5860] ? __pfx_do_filp_open+0x10/0x10 [ 122.229134][ T5860] ? _raw_spin_unlock+0x28/0x50 [ 122.231003][ T5860] ? alloc_fd+0x5a1/0x640 [ 122.232580][ T5860] do_sys_openat2+0x13e/0x1d0 [ 122.234550][ T5860] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.236662][ T5860] __x64_sys_openat+0x247/0x2a0 [ 122.238532][ T5860] ? __pfx___x64_sys_openat+0x10/0x10 [ 122.240556][ T5860] ? do_syscall_64+0x100/0x230 [ 122.242311][ T5860] ? do_syscall_64+0xb6/0x230 [ 122.244135][ T5860] do_syscall_64+0xf3/0x230 [ 122.245879][ T5860] ? clear_bhb_loop+0x35/0x90 [ 122.247420][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.249640][ T5860] RIP: 0033:0x7f229cf799b9 [ 122.251294][ T5860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.258297][ T5860] RSP: 002b:00007f229ddd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.261428][ T5860] RAX: ffffffffffffffda RBX: 00007f229d115f80 RCX: 00007f229cf799b9 [ 122.264425][ T5860] RDX: 0000000000105042 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 122.267320][ T5860] RBP: 00007f229cfe78d8 R08: 0000000000000000 R09: 0000000000000000 [ 122.270234][ T5860] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000 [ 122.273174][ T5860] R13: 0000000000000000 R14: 00007f229d115f80 R15: 00007ffffa673fd8 [ 122.276099][ T5860] [ 122.277556][ T5860] Kernel Offset: disabled [ 122.279204][ T5860] Rebooting in 86400 seconds..