Warning: Permanently added '[localhost]:4857' (ED25519) to the list of known hosts. 2025/05/17 15:40:47 ignoring optional flag "sandboxArg"="0" 2025/05/17 15:40:49 parsed 1 programs [ 126.901589][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.217198][ T5654] chnl_net:caif_netlink_parms(): no params data found [ 132.276522][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.280983][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.284098][ T5654] bridge_slave_0: entered allmulticast mode [ 132.287946][ T5654] bridge_slave_0: entered promiscuous mode [ 132.293164][ T5654] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.296415][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.300588][ T5654] bridge_slave_1: entered allmulticast mode [ 132.304475][ T5654] bridge_slave_1: entered promiscuous mode [ 132.328966][ T5654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.337298][ T5654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.362403][ T5654] team0: Port device team_slave_0 added [ 132.367786][ T5654] team0: Port device team_slave_1 added [ 132.388437][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.392695][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.405423][ T5654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.412233][ T5654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.415339][ T5654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.428305][ T5654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.463056][ T5654] hsr_slave_0: entered promiscuous mode [ 132.466292][ T5654] hsr_slave_1: entered promiscuous mode [ 133.086566][ T5654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.102399][ T5654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.122047][ T5654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.132030][ T5654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 133.254767][ T5654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.284984][ T5654] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.298662][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.301752][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.337767][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.341086][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.396166][ T5654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.690695][ T5654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.755704][ T5654] veth0_vlan: entered promiscuous mode [ 133.773859][ T5654] veth1_vlan: entered promiscuous mode [ 133.830869][ T5654] veth0_macvtap: entered promiscuous mode [ 133.843507][ T5654] veth1_macvtap: entered promiscuous mode [ 133.901677][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.912339][ T5654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.930557][ T5654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.934307][ T5654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.938256][ T5654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.957686][ T5654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.191334][ T1036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.277710][ T1036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.370882][ T1036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.470865][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.474138][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.541330][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.551868][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.281249][ T1036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.502521][ T4661] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.506268][ T4661] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.510380][ T4661] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.514460][ T4661] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.517771][ T4661] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.899393][ T1036] bridge_slave_1: left allmulticast mode [ 136.902655][ T1036] bridge_slave_1: left promiscuous mode [ 136.905543][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.944493][ T1036] bridge_slave_0: left allmulticast mode [ 136.947088][ T1036] bridge_slave_0: left promiscuous mode [ 136.966409][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.536431][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.552499][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.562173][ T1036] bond0 (unregistering): Released all slaves [ 137.667179][ T1036] hsr_slave_0: left promiscuous mode [ 137.676153][ T1036] hsr_slave_1: left promiscuous mode [ 137.690056][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.693282][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.710164][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.713221][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.735223][ T1036] veth1_macvtap: left promiscuous mode [ 137.737714][ T1036] veth0_macvtap: left promiscuous mode [ 137.750554][ T1036] veth1_vlan: left promiscuous mode [ 137.752958][ T1036] veth0_vlan: left promiscuous mode [ 137.862259][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.865826][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.041805][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 138.062724][ T1036] team0 (unregistering): Port device team_slave_0 removed 2025/05/17 15:41:06 executed programs: 0 [ 140.385705][ T5394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.390870][ T5394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.394299][ T5394] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.397898][ T5394] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.402089][ T5394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.768397][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 140.902488][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.905755][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.908936][ T5806] bridge_slave_0: entered allmulticast mode [ 140.920495][ T5806] bridge_slave_0: entered promiscuous mode [ 140.932292][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.935460][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.938690][ T5806] bridge_slave_1: entered allmulticast mode [ 140.960230][ T5806] bridge_slave_1: entered promiscuous mode [ 141.012746][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.018900][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.082346][ T5806] team0: Port device team_slave_0 added [ 141.090641][ T5806] team0: Port device team_slave_1 added [ 141.128684][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.141160][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.170505][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.182321][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.185273][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.220089][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.290862][ T5806] hsr_slave_0: entered promiscuous mode [ 141.294213][ T5806] hsr_slave_1: entered promiscuous mode [ 141.722655][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.734653][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.751501][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.757441][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.900345][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.942833][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.962353][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.965254][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.990979][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.994102][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.053735][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.326953][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.405686][ T5806] veth0_vlan: entered promiscuous mode [ 142.419345][ T5394] Bluetooth: hci0: command tx timeout [ 142.426878][ T5806] veth1_vlan: entered promiscuous mode [ 142.481251][ T5806] veth0_macvtap: entered promiscuous mode [ 142.491927][ T5806] veth1_macvtap: entered promiscuous mode [ 142.533923][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.556047][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.574243][ T5806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.578083][ T5806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.587235][ T5806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.599952][ T5806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.722082][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.725529][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.778493][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.782250][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.102445][ T5855] loop0: detected capacity change from 0 to 32768 [ 143.107263][ T5855] ======================================================= [ 143.107263][ T5855] WARNING: The mand mount option has been deprecated and [ 143.107263][ T5855] and is ignored by this kernel. Remove the mand [ 143.107263][ T5855] option from the mount to silence this warning. [ 143.107263][ T5855] ======================================================= [ 143.164208][ T5855] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 143.190501][ T5855] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 143.212407][ T5855] ================================================================== [ 143.215871][ T5855] BUG: KASAN: slab-out-of-bounds in ocfs2_claim_suballoc_bits+0x877/0x2450 [ 143.219710][ T5855] Read of size 4 at addr ffff888043758610 by task syz.0.16/5855 [ 143.223935][ T5855] [ 143.225068][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz.0.16 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 143.225082][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.225088][ T5855] Call Trace: [ 143.225095][ T5855] [ 143.225101][ T5855] dump_stack_lvl+0x189/0x250 [ 143.225123][ T5855] ? __virt_addr_valid+0x18c/0x540 [ 143.225138][ T5855] ? rcu_is_watching+0x15/0xb0 [ 143.225147][ T5855] ? __kasan_check_byte+0x12/0x40 [ 143.225163][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.225177][ T5855] ? rcu_is_watching+0x15/0xb0 [ 143.225186][ T5855] ? lock_release+0x4b/0x3e0 [ 143.225206][ T5855] ? __virt_addr_valid+0x18c/0x540 [ 143.225220][ T5855] ? __virt_addr_valid+0x469/0x540 [ 143.225233][ T5855] print_report+0xb4/0x290 [ 143.225246][ T5855] ? ocfs2_claim_suballoc_bits+0x877/0x2450 [ 143.225262][ T5855] kasan_report+0x118/0x150 [ 143.225275][ T5855] ? ocfs2_claim_suballoc_bits+0x877/0x2450 [ 143.225291][ T5855] ocfs2_claim_suballoc_bits+0x877/0x2450 [ 143.225314][ T5855] ? check_noncircular+0xe0/0x160 [ 143.225334][ T5855] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 143.225352][ T5855] ? lockdep_unlock+0x89/0x120 [ 143.225366][ T5855] ? validate_chain+0x897/0x2140 [ 143.225382][ T5855] ? __lock_acquire+0xaac/0xd20 [ 143.225398][ T5855] ocfs2_claim_new_inode+0x332/0x7a0 [ 143.225414][ T5855] ? __pfx_ocfs2_claim_new_inode+0x10/0x10 [ 143.225430][ T5855] ? _raw_spin_lock_irq+0xae/0xf0 [ 143.227368][ T5855] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 143.227382][ T5855] ocfs2_mknod_locked+0x100/0x250 [ 143.227400][ T5855] ? __pfx_ocfs2_mknod_locked+0x10/0x10 [ 143.227412][ T5855] ? dquot_alloc_inode+0x216/0xa50 [ 143.227429][ T5855] ? ocfs2_block_signals+0x94/0xe0 [ 143.227442][ T5855] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 143.227454][ T5855] ? ocfs2_init_security_get+0x9f/0x1a0 [ 143.227465][ T5855] ocfs2_mknod+0x10c7/0x2050 [ 143.227482][ T5855] ? __pfx_ocfs2_mknod+0x10/0x10 [ 143.227494][ T5855] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 143.227504][ T5855] ? __lock_acquire+0xaac/0xd20 [ 143.227523][ T5855] ? do_raw_spin_unlock+0x4d/0x240 [ 143.227536][ T5855] ? look_up_lock_class+0x74/0x170 [ 143.227549][ T5855] ? register_lock_class+0x51/0x320 [ 143.227563][ T5855] ? __lock_acquire+0xaac/0xd20 [ 143.227574][ T5855] ? __lock_acquire+0xaac/0xd20 [ 143.227584][ T5855] ? do_raw_spin_lock+0x121/0x290 [ 143.227595][ T5855] ? do_raw_spin_unlock+0x4d/0x240 [ 143.227607][ T5855] ? rcu_is_watching+0x15/0xb0 [ 143.227618][ T5855] ? ocfs2_lookup+0x4a0/0x990 [ 143.227631][ T5855] ocfs2_create+0x1a5/0x440 [ 143.227644][ T5855] ? __pfx_ocfs2_lookup+0x10/0x10 [ 143.227657][ T5855] ? from_kgid+0x1b0/0x650 [ 143.227670][ T5855] ? __pfx_ocfs2_create+0x10/0x10 [ 143.227682][ T5855] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 143.227699][ T5855] ? inode_permission+0xf8/0x490 [ 143.227713][ T5855] ? bpf_lsm_inode_create+0x9/0x20 [ 143.227725][ T5855] ? __pfx_ocfs2_create+0x10/0x10 [ 143.227737][ T5855] path_openat+0x14f4/0x3830 [ 143.227748][ T5855] ? arch_stack_walk+0xfc/0x150 [ 143.227767][ T5855] ? __pfx_path_openat+0x10/0x10 [ 143.227777][ T5855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.227793][ T5855] do_filp_open+0x1fa/0x410 [ 143.227803][ T5855] ? __pfx_do_filp_open+0x10/0x10 [ 143.227819][ T5855] ? _raw_spin_unlock+0x28/0x50 [ 143.227831][ T5855] ? alloc_fd+0x64c/0x6c0 [ 143.227845][ T5855] do_sys_openat2+0x121/0x1c0 [ 143.227856][ T5855] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.227867][ T5855] ? rcu_is_watching+0x15/0xb0 [ 143.227877][ T5855] __x64_sys_openat+0x138/0x170 [ 143.227888][ T5855] do_syscall_64+0xf6/0x210 [ 143.227903][ T5855] ? clear_bhb_loop+0x60/0xb0 [ 143.227915][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.227926][ T5855] RIP: 0033:0x7f773858d169 [ 143.227938][ T5855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.227947][ T5855] RSP: 002b:00007f77393b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.227961][ T5855] RAX: ffffffffffffffda RBX: 00007f77387a5fa0 RCX: 00007f773858d169 [ 143.227969][ T5855] RDX: 0000000000105042 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 143.227976][ T5855] RBP: 00007f773860e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.227983][ T5855] R10: 00000000000001db R11: 0000000000000246 R12: 0000000000000000 [ 143.227989][ T5855] R13: 0000000000000000 R14: 00007f77387a5fa0 R15: 00007ffd1a67d348 [ 143.228001][ T5855] [ 143.228005][ T5855] [ 143.417722][ T5855] Allocated by task 4723: [ 143.419742][ T5855] kasan_save_track+0x3e/0x80 [ 143.421823][ T5855] __kasan_slab_alloc+0x6c/0x80 [ 143.424025][ T5855] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 143.426653][ T5855] shmem_alloc_inode+0x28/0x40 [ 143.428832][ T5855] alloc_inode+0x67/0x1b0 [ 143.430827][ T5855] new_inode+0x22/0x170 [ 143.432670][ T5855] shmem_get_inode+0x346/0xe90 [ 143.434832][ T5855] shmem_symlink+0xa2/0x4c0 [ 143.436833][ T5855] vfs_symlink+0x143/0x2f0 [ 143.438801][ T5855] do_symlinkat+0x1b1/0x3f0 [ 143.440802][ T5855] __x64_sys_symlink+0x7a/0x90 [ 143.443141][ T5855] do_syscall_64+0xf6/0x210 [ 143.445547][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.448001][ T5855] [ 143.449079][ T5855] The buggy address belongs to the object at ffff888043758000 [ 143.449079][ T5855] which belongs to the cache shmem_inode_cache of size 1544 [ 143.455427][ T5855] The buggy address is located 8 bytes to the right of [ 143.455427][ T5855] allocated 1544-byte region [ffff888043758000, ffff888043758608) [ 143.461462][ T5855] [ 143.462570][ T5855] The buggy address belongs to the physical page: [ 143.465369][ T5855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43758 [ 143.469206][ T5855] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 143.472840][ T5855] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 143.476130][ T5855] page_type: f5(slab) [ 143.477894][ T5855] raw: 04fff00000000040 ffff88801baa1140 dead000000000122 0000000000000000 [ 143.481593][ T5855] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 143.485482][ T5855] head: 04fff00000000040 ffff88801baa1140 dead000000000122 0000000000000000 [ 143.489348][ T5855] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000 [ 143.493142][ T5855] head: 04fff00000000003 ffffea00010dd601 00000000ffffffff 00000000ffffffff [ 143.496898][ T5855] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 143.500705][ T5855] page dumped because: kasan: bad access detected [ 143.503557][ T5855] page_owner tracks the page as allocated [ 143.505956][ T5855] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4723, tgid 4723 (udevd), ts 52455328900, free_ts 52454575664 [ 143.514931][ T5855] post_alloc_hook+0x1d8/0x230 [ 143.517283][ T5855] get_page_from_freelist+0x21ce/0x22b0 [ 143.520048][ T5855] __alloc_frozen_pages_noprof+0x181/0x370 [ 143.522672][ T5855] alloc_pages_mpol+0x232/0x4a0 [ 143.524858][ T5855] allocate_slab+0x8a/0x3b0 [ 143.526930][ T5855] ___slab_alloc+0xbfc/0x1480 [ 143.529049][ T5855] kmem_cache_alloc_lru_noprof+0x288/0x3d0 [ 143.531689][ T5855] shmem_alloc_inode+0x28/0x40 [ 143.533874][ T5855] alloc_inode+0x67/0x1b0 [ 143.535816][ T5855] new_inode+0x22/0x170 [ 143.537591][ T5855] shmem_get_inode+0x346/0xe90 [ 143.539692][ T5855] shmem_symlink+0xa2/0x4c0 [ 143.541662][ T5855] vfs_symlink+0x143/0x2f0 [ 143.543597][ T5855] do_symlinkat+0x1b1/0x3f0 [ 143.545733][ T5855] __x64_sys_symlink+0x7a/0x90 [ 143.548357][ T5855] do_syscall_64+0xf6/0x210 [ 143.550816][ T5855] page last free pid 4723 tgid 4723 stack trace: [ 143.554102][ T5855] __free_frozen_pages+0xb0e/0xcd0 [ 143.556628][ T5855] __put_partials+0x161/0x1c0 [ 143.558642][ T5855] put_cpu_partial+0x17c/0x250 [ 143.560670][ T5855] __slab_free+0x2f7/0x400 [ 143.562637][ T5855] qlist_free_all+0x9a/0x140 [ 143.564635][ T5855] kasan_quarantine_reduce+0x148/0x160 [ 143.566911][ T5855] __kasan_slab_alloc+0x22/0x80 [ 143.568978][ T5855] __kmalloc_cache_noprof+0x1be/0x3d0 [ 143.571289][ T5855] kernfs_fop_open+0x397/0xca0 [ 143.573345][ T5855] do_dentry_open+0xdf0/0x1970 [ 143.575434][ T5855] vfs_open+0x3b/0x340 [ 143.577205][ T5855] path_openat+0x2ee5/0x3830 [ 143.579997][ T5855] do_filp_open+0x1fa/0x410 [ 143.582488][ T5855] do_sys_openat2+0x121/0x1c0 [ 143.584593][ T5855] __x64_sys_openat+0x138/0x170 [ 143.586666][ T5855] do_syscall_64+0xf6/0x210 [ 143.588634][ T5855] [ 143.589713][ T5855] Memory state around the buggy address: [ 143.592060][ T5855] ffff888043758500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 143.595496][ T5855] ffff888043758580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 143.598945][ T5855] >ffff888043758600: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 143.602318][ T5855] ^ [ 143.604320][ T5855] ffff888043758680: fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 143.607771][ T5855] ffff888043758700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 143.611408][ T5855] ================================================================== [ 143.650543][ T5855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 143.653633][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz.0.16 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 143.659020][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.663700][ T5855] Call Trace: [ 143.665255][ T5855] [ 143.666597][ T5855] dump_stack_lvl+0x99/0x250 [ 143.668661][ T5855] ? __asan_memcpy+0x40/0x70 [ 143.670817][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.672991][ T5855] ? __pfx__printk+0x10/0x10 [ 143.675019][ T5855] panic+0x2db/0x790 [ 143.676713][ T5855] ? __pfx_panic+0x10/0x10 [ 143.678888][ T5855] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 143.681414][ T5855] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 143.684188][ T5855] ? print_memory_metadata+0x314/0x400 [ 143.686887][ T5855] ? ocfs2_claim_suballoc_bits+0x877/0x2450 [ 143.689701][ T5855] check_panic_on_warn+0x89/0xb0 [ 143.691931][ T5855] ? ocfs2_claim_suballoc_bits+0x877/0x2450 [ 143.694565][ T5855] end_report+0x78/0x160 [ 143.696422][ T5855] kasan_report+0x129/0x150 [ 143.698611][ T5855] ? ocfs2_claim_suballoc_bits+0x877/0x2450 [ 143.701262][ T5855] ocfs2_claim_suballoc_bits+0x877/0x2450 [ 143.703702][ T5855] ? check_noncircular+0xe0/0x160 [ 143.705873][ T5855] ? __pfx_ocfs2_claim_suballoc_bits+0x10/0x10 [ 143.708632][ T5855] ? lockdep_unlock+0x89/0x120 [ 143.710831][ T5855] ? validate_chain+0x897/0x2140 [ 143.713045][ T5855] ? __lock_acquire+0xaac/0xd20 [ 143.715519][ T5855] ocfs2_claim_new_inode+0x332/0x7a0 [ 143.717766][ T5855] ? __pfx_ocfs2_claim_new_inode+0x10/0x10 [ 143.720381][ T5855] ? _raw_spin_lock_irq+0xae/0xf0 [ 143.722496][ T5855] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 143.725005][ T5855] ocfs2_mknod_locked+0x100/0x250 [ 143.727702][ T5855] ? __pfx_ocfs2_mknod_locked+0x10/0x10 [ 143.730173][ T5855] ? dquot_alloc_inode+0x216/0xa50 [ 143.732285][ T5855] ? ocfs2_block_signals+0x94/0xe0 [ 143.734460][ T5855] ? __pfx_ocfs2_block_signals+0x10/0x10 [ 143.736892][ T5855] ? ocfs2_init_security_get+0x9f/0x1a0 [ 143.739357][ T5855] ocfs2_mknod+0x10c7/0x2050 [ 143.741347][ T5855] ? __pfx_ocfs2_mknod+0x10/0x10 [ 143.743578][ T5855] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 143.745887][ T5855] ? __lock_acquire+0xaac/0xd20 [ 143.748018][ T5855] ? do_raw_spin_unlock+0x4d/0x240 [ 143.750295][ T5855] ? look_up_lock_class+0x74/0x170 [ 143.752579][ T5855] ? register_lock_class+0x51/0x320 [ 143.754829][ T5855] ? __lock_acquire+0xaac/0xd20 [ 143.756958][ T5855] ? __lock_acquire+0xaac/0xd20 [ 143.759087][ T5855] ? do_raw_spin_lock+0x121/0x290 [ 143.761285][ T5855] ? do_raw_spin_unlock+0x4d/0x240 [ 143.763493][ T5855] ? rcu_is_watching+0x15/0xb0 [ 143.765620][ T5855] ? ocfs2_lookup+0x4a0/0x990 [ 143.767793][ T5855] ocfs2_create+0x1a5/0x440 [ 143.769940][ T5855] ? __pfx_ocfs2_lookup+0x10/0x10 [ 143.772124][ T5855] ? from_kgid+0x1b0/0x650 [ 143.774038][ T5855] ? __pfx_ocfs2_create+0x10/0x10 [ 143.776262][ T5855] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 143.778513][ T5855] ? inode_permission+0xf8/0x490 [ 143.780704][ T5855] ? bpf_lsm_inode_create+0x9/0x20 [ 143.782956][ T5855] ? __pfx_ocfs2_create+0x10/0x10 [ 143.785126][ T5855] path_openat+0x14f4/0x3830 [ 143.787110][ T5855] ? arch_stack_walk+0xfc/0x150 [ 143.789284][ T5855] ? __pfx_path_openat+0x10/0x10 [ 143.791370][ T5855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.794023][ T5855] do_filp_open+0x1fa/0x410 [ 143.795936][ T5855] ? __pfx_do_filp_open+0x10/0x10 [ 143.798081][ T5855] ? _raw_spin_unlock+0x28/0x50 [ 143.800105][ T5855] ? alloc_fd+0x64c/0x6c0 [ 143.801893][ T5855] do_sys_openat2+0x121/0x1c0 [ 143.803815][ T5855] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.806067][ T5855] ? rcu_is_watching+0x15/0xb0 [ 143.808081][ T5855] __x64_sys_openat+0x138/0x170 [ 143.810176][ T5855] do_syscall_64+0xf6/0x210 [ 143.812470][ T5855] ? clear_bhb_loop+0x60/0xb0 [ 143.814629][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.817102][ T5855] RIP: 0033:0x7f773858d169 [ 143.819031][ T5855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.827057][ T5855] RSP: 002b:00007f77393b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.830517][ T5855] RAX: ffffffffffffffda RBX: 00007f77387a5fa0 RCX: 00007f773858d169 [ 143.833808][ T5855] RDX: 0000000000105042 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 143.837153][ T5855] RBP: 00007f773860e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.840487][ T5855] R10: 00000000000001db R11: 0000000000000246 R12: 0000000000000000 [ 143.843818][ T5855] R13: 0000000000000000 R14: 00007f77387a5fa0 R15: 00007ffd1a67d348 [ 143.847245][ T5855] [ 143.848834][ T5855] Kernel Offset: disabled [ 143.850579][ T5855] Rebooting in 86400 seconds..