Warning: Permanently added '10.128.10.0' (ED25519) to the list of known hosts.
2025/12/11 00:19:48 parsed 1 programs
[ 93.303060][ T4617] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 95.018636][ T1500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.027060][ T1500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.037935][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 95.051552][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.060328][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.069736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 96.378407][ T151] ODEBUG: Out of memory. ODEBUG disabled
[ 96.617371][ T4677] chnl_net:caif_netlink_parms(): no params data found
[ 96.702148][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.709470][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.717063][ T4677] device bridge_slave_0 entered promiscuous mode
[ 96.725347][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.732616][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.740638][ T4677] device bridge_slave_1 entered promiscuous mode
[ 96.759246][ T4677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.770138][ T4677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.789774][ T4677] team0: Port device team_slave_0 added
[ 96.796755][ T4677] team0: Port device team_slave_1 added
[ 96.812703][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.819900][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.846116][ T4677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.872288][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.879443][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.906399][ T4677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.947144][ T4677] device hsr_slave_0 entered promiscuous mode
[ 96.954035][ T4677] device hsr_slave_1 entered promiscuous mode
[ 97.427321][ T4677] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.437876][ T4677] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.448230][ T4677] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.459094][ T4677] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.551373][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.564525][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 97.574407][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 97.585968][ T4677] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.602481][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 97.612768][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 97.622776][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.629901][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.658459][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 97.666770][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 97.676998][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 97.687817][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.695036][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.706137][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 97.722376][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 97.731587][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 97.741285][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 97.759848][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 97.767996][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 97.778341][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 97.790893][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 97.801028][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 97.810168][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 97.820342][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 97.833206][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 98.022443][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 98.030921][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 98.043691][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 98.075570][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 98.089575][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 98.130792][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 98.149346][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 98.170389][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 98.178220][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 98.201749][ T4677] device veth0_vlan entered promiscuous mode
[ 98.213923][ T4677] device veth1_vlan entered promiscuous mode
[ 98.233971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 98.249568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 98.260935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 98.279630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 98.295929][ T4677] device veth0_macvtap entered promiscuous mode
[ 98.312361][ T4677] device veth1_macvtap entered promiscuous mode
[ 98.341981][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 98.357597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 98.374252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 98.383253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 98.392318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 98.404325][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 98.420131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 98.436299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 98.448087][ T4677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.463010][ T4677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.472330][ T4677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 98.488872][ T4677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/12/11 00:19:57 executed programs: 0
[ 99.650265][ T4800] chnl_net:caif_netlink_parms(): no params data found
[ 99.755440][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.763780][ T4800] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.773285][ T4800] device bridge_slave_0 entered promiscuous mode
[ 99.784310][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.801413][ T4800] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.810875][ T4800] device bridge_slave_1 entered promiscuous mode
[ 99.848650][ T4800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.862524][ T4800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.898750][ T151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.915354][ T4800] team0: Port device team_slave_0 added
[ 99.924171][ T4800] team0: Port device team_slave_1 added
[ 99.946391][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.954363][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.981121][ T4800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.993787][ T4800] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.001230][ T4800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.030764][ T4800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.079611][ T4800] device hsr_slave_0 entered promiscuous mode
[ 100.086461][ T4800] device hsr_slave_1 entered promiscuous mode
[ 100.093301][ T4800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 100.101360][ T4800] Cannot create hsr debugfs directory
[ 101.473086][ T23] Bluetooth: hci0: command 0x0409 tx timeout
[ 103.103245][ T151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.549144][ T4267] Bluetooth: hci0: command 0x041b tx timeout
[ 103.583140][ T151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.624377][ T151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 104.383997][ T4800] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 104.392756][ T4800] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 104.403812][ T4800] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 104.420237][ T4800] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 104.464500][ T4800] 8021q: adding VLAN 0 to HW filter on device bond0
[ 104.484505][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 104.492699][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 104.502904][ T4800] 8021q: adding VLAN 0 to HW filter on device team0
[ 104.517771][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 104.526711][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 104.535170][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.542387][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 104.550231][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 104.560803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 104.569736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 104.578138][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 104.585254][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 104.595952][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 104.608425][ T151] device hsr_slave_0 left promiscuous mode
[ 104.614744][ T151] device hsr_slave_1 left promiscuous mode
[ 104.621638][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 104.629324][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 104.636882][ T151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 104.644765][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 104.652411][ T151] device bridge_slave_1 left promiscuous mode
[ 104.658712][ T151] bridge0: port 2(bridge_slave_1) entered disabled state
[ 104.667988][ T151] device bridge_slave_0 left promiscuous mode
[ 104.674843][ T151] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.685694][ T151] device veth1_macvtap left promiscuous mode
[ 104.691969][ T151] device veth0_macvtap left promiscuous mode
[ 104.698081][ T151] device veth1_vlan left promiscuous mode
[ 104.704543][ T151] device veth0_vlan left promiscuous mode
[ 104.807234][ T151] team0 (unregistering): Port device team_slave_1 removed
[ 104.821977][ T151] team0 (unregistering): Port device team_slave_0 removed
[ 104.832905][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 104.845942][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 104.887629][ T151] bond0 (unregistering): Released all slaves
[ 104.961163][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 104.970037][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 104.978745][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 104.987338][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 104.997168][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 105.005881][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 105.014552][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 105.023038][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 105.034977][ T4800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 105.046792][ T4800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 105.055514][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 105.074145][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 105.156586][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 105.164767][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 105.178313][ T4800] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.206354][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 105.215148][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 105.226691][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 105.235302][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 105.244400][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 105.252254][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 105.265782][ T4800] device veth0_vlan entered promiscuous mode
[ 105.275712][ T4800] device veth1_vlan entered promiscuous mode
[ 105.292055][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 105.300335][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 105.308375][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 105.317581][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 105.328726][ T4800] device veth0_macvtap entered promiscuous mode
[ 105.339054][ T4800] device veth1_macvtap entered promiscuous mode
[ 105.356231][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.364942][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 105.373935][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 105.382703][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 105.392087][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 105.405338][ T4800] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.413618][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 105.422513][ T1500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 105.434581][ T4800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.444106][ T4800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.453701][ T4800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.462799][ T4800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.524263][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.539244][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.551322][ T1500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.559000][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2025/12/11 00:20:03 executed programs: 2
[ 105.570127][ T1500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.582389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 105.630029][ T4680] Bluetooth: hci0: command 0x040f tx timeout
[ 105.854904][ T5092] loop0: detected capacity change from 0 to 32768
[ 105.872097][ T5092] =======================================================
[ 105.872097][ T5092] WARNING: The mand mount option has been deprecated and
[ 105.872097][ T5092] and is ignored by this kernel. Remove the mand
[ 105.872097][ T5092] option from the mount to silence this warning.
[ 105.872097][ T5092] =======================================================
[ 105.940322][ T5092] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 105.983982][ T5092] (syz.0.17,5092,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=64032, inode=2, rec_len=51800, name_len=70
[ 106.019946][ T4800] ocfs2: Unmounting device (7,0) on (node local)
[ 106.421264][ T5096] loop0: detected capacity change from 0 to 32768
[ 106.483379][ T5096] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 106.494798][ T5096] (syz.0.18,5096,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0
[ 106.520749][ T4800] ocfs2: Unmounting device (7,0) on (node local)
[ 106.718442][ T5100] loop0: detected capacity change from 0 to 32768
[ 106.827685][ T5100] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 106.841893][ T5100] (syz.0.19,5100,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=64032, inode=0, rec_len=2640, name_len=56
[ 106.865466][ T4800] ocfs2: Unmounting device (7,0) on (node local)
[ 107.051734][ T5104] loop0: detected capacity change from 0 to 32768
[ 107.087121][ T5104] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 107.099884][ T5104] (syz.0.20,5104,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=64032, inode=0, rec_len=0, name_len=0
[ 107.125235][ T4800] ocfs2: Unmounting device (7,0) on (node local)
[ 107.313160][ T5108] loop0: detected capacity change from 0 to 32768
[ 107.386445][ T5108] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[ 107.398040][ T5108] ==================================================================
[ 107.406345][ T5108] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x1566/0x1900
[ 107.414352][ T5108] Read of size 2 at addr ffff8880594e9cf0 by task syz.0.21/5108
[ 107.422007][ T5108]
[ 107.424351][ T5108] CPU: 1 PID: 5108 Comm: syz.0.21 Not tainted syzkaller #0
[ 107.431646][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 107.441719][ T5108] Call Trace:
[ 107.445019][ T5108]
[ 107.447963][ T5108] dump_stack_lvl+0x168/0x230
[ 107.452658][ T5108] ? show_regs_print_info+0x20/0x20
[ 107.457871][ T5108] ? load_image+0x3b0/0x3b0
[ 107.462386][ T5108] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 107.467750][ T5108] ? __lock_acquire+0x13ad/0x7c60
[ 107.472778][ T5108] print_address_description+0x60/0x2d0
[ 107.478329][ T5108] ? ocfs2_dir_foreach_blk+0x1566/0x1900
[ 107.483960][ T5108] kasan_report+0xdf/0x130
[ 107.488370][ T5108] ? ocfs2_dir_foreach_blk+0x1566/0x1900
[ 107.494078][ T5108] ocfs2_dir_foreach_blk+0x1566/0x1900
[ 107.499534][ T5108] ? _raw_spin_unlock+0x24/0x40
[ 107.504468][ T5108] ? ocfs2_dir_foreach+0xf0/0xf0
[ 107.509393][ T5108] ? ocfs2_inode_lock_atime+0x22f/0x4e0
[ 107.514951][ T5108] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0
[ 107.521014][ T5108] ocfs2_readdir+0x21a/0x460
[ 107.525592][ T5108] ? clear_nonspinnable+0x60/0x60
[ 107.530609][ T5108] ? ocfs2_dir_foreach_blk+0x1900/0x1900
[ 107.536221][ T5108] ? common_file_perm+0x171/0x1c0
[ 107.541238][ T5108] iterate_dir+0x218/0x560
[ 107.545643][ T5108] __se_sys_getdents+0xe5/0x250
[ 107.550478][ T5108] ? __x64_sys_getdents+0x80/0x80
[ 107.555516][ T5108] ? fillonedir+0x4c0/0x4c0
[ 107.560003][ T5108] ? vtime_user_exit+0x2dc/0x400
[ 107.564936][ T5108] ? lockdep_hardirqs_on+0x94/0x140
[ 107.570377][ T5108] do_syscall_64+0x4c/0xa0
[ 107.574777][ T5108] ? clear_bhb_loop+0x30/0x80
[ 107.579435][ T5108] ? clear_bhb_loop+0x30/0x80
[ 107.584101][ T5108] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.589986][ T5108] RIP: 0033:0x7f64f837eba9
[ 107.594522][ T5108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 107.614728][ T5108] RSP: 002b:00007f64f79ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 107.623141][ T5108] RAX: ffffffffffffffda RBX: 00007f64f85c5fa0 RCX: 00007f64f837eba9
[ 107.631221][ T5108] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 107.639183][ T5108] RBP: 00007f64f8401e19 R08: 0000000000000000 R09: 0000000000000000
[ 107.647146][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 107.655224][ T5108] R13: 00007f64f85c6038 R14: 00007f64f85c5fa0 R15: 00007ffd159e6548
[ 107.663384][ T5108]
[ 107.666396][ T5108]
[ 107.668728][ T5108] The buggy address belongs to the page:
[ 107.674368][ T5108] page:ffffea0001653a40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x594e9
[ 107.684604][ T5108] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 107.691941][ T5108] raw: 00fff00000000000 ffffea0001653a88 ffffea0001653a08 0000000000000000
[ 107.700521][ T5108] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 107.709176][ T4680] Bluetooth: hci0: command 0x0419 tx timeout
[ 107.709316][ T5108] page dumped because: kasan: bad access detected
[ 107.721799][ T5108] page_owner tracks the page as freed
[ 107.727163][ T5108] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5104, ts 106954456789, free_ts 107188299049
[ 107.741917][ T5108] get_page_from_freelist+0x1b77/0x1c60
[ 107.747466][ T5108] __alloc_pages+0x1e1/0x470
[ 107.752047][ T5108] alloc_pages_vma+0x393/0x7c0
[ 107.756901][ T5108] shmem_alloc_and_acct_page+0x427/0xb70
[ 107.762693][ T5108] shmem_getpage_gfp+0x14f4/0x2d40
[ 107.767790][ T5108] shmem_write_begin+0xcd/0x1a0
[ 107.772636][ T5108] generic_perform_write+0x2aa/0x530
[ 107.777997][ T5108] __generic_file_write_iter+0x25f/0x4e0
[ 107.783641][ T5108] generic_file_write_iter+0xa6/0x1b0
[ 107.789107][ T5108] vfs_write+0x712/0xd00
[ 107.793443][ T5108] ksys_write+0x14d/0x250
[ 107.797928][ T5108] do_syscall_64+0x4c/0xa0
[ 107.802411][ T5108] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 107.808294][ T5108] page last free stack trace:
[ 107.812947][ T5108] free_unref_page_prepare+0x637/0x6c0
[ 107.818660][ T5108] free_unref_page_list+0x122/0x7e0
[ 107.824161][ T5108] release_pages+0x184b/0x1bb0
[ 107.828921][ T5108] __pagevec_release+0x6d/0xe0
[ 107.834027][ T5108] shmem_undo_range+0x5cb/0x1880
[ 107.838954][ T5108] shmem_evict_inode+0x20d/0xa00
[ 107.843879][ T5108] evict+0x485/0x870
[ 107.847772][ T5108] __dentry_kill+0x431/0x650
[ 107.852864][ T5108] dentry_kill+0xb8/0x290
[ 107.857406][ T5108] dput+0xd8/0x1a0
[ 107.861143][ T5108] __fput+0x5ee/0x930
[ 107.865115][ T5108] task_work_run+0x125/0x1a0
[ 107.869705][ T5108] exit_to_user_mode_loop+0x10f/0x130
[ 107.875241][ T5108] exit_to_user_mode_prepare+0xee/0x180
[ 107.880777][ T5108] syscall_exit_to_user_mode+0x16/0x40
[ 107.886263][ T5108] do_syscall_64+0x58/0xa0
[ 107.890877][ T5108]
[ 107.893212][ T5108] Memory state around the buggy address:
[ 107.898833][ T5108] ffff8880594e9b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.906897][ T5108] ffff8880594e9c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.914943][ T5108] >ffff8880594e9c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.923081][ T5108] ^
[ 107.930788][ T5108] ffff8880594e9d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.938921][ T5108] ffff8880594e9d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.947281][ T5108] ==================================================================
[ 107.955329][ T5108] Disabling lock debugging due to kernel taint
[ 107.964219][ T5108] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.971472][ T5108] CPU: 1 PID: 5108 Comm: syz.0.21 Tainted: G B syzkaller #0
[ 107.980052][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 107.990213][ T5108] Call Trace:
[ 107.993490][ T5108]
[ 107.996399][ T5108] dump_stack_lvl+0x168/0x230
[ 108.001246][ T5108] ? show_regs_print_info+0x20/0x20
[ 108.006533][ T5108] ? load_image+0x3b0/0x3b0
[ 108.011190][ T5108] panic+0x2c9/0x7f0
[ 108.015070][ T5108] ? bpf_jit_dump+0xd0/0xd0
[ 108.019554][ T5108] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 108.025433][ T5108] ? _raw_spin_unlock+0x40/0x40
[ 108.030261][ T5108] ? ocfs2_dir_foreach_blk+0x1566/0x1900
[ 108.035867][ T5108] check_panic_on_warn+0x80/0xa0
[ 108.040780][ T5108] ? ocfs2_dir_foreach_blk+0x1566/0x1900
[ 108.046387][ T5108] end_report+0x6d/0xf0
[ 108.050518][ T5108] kasan_report+0x102/0x130
[ 108.055035][ T5108] ? ocfs2_dir_foreach_blk+0x1566/0x1900
[ 108.060659][ T5108] ocfs2_dir_foreach_blk+0x1566/0x1900
[ 108.066111][ T5108] ? _raw_spin_unlock+0x24/0x40
[ 108.070958][ T5108] ? ocfs2_dir_foreach+0xf0/0xf0
[ 108.075877][ T5108] ? ocfs2_inode_lock_atime+0x22f/0x4e0
[ 108.081403][ T5108] ? ocfs2_inode_lock_with_page+0x1b0/0x1b0
[ 108.087318][ T5108] ocfs2_readdir+0x21a/0x460
[ 108.091887][ T5108] ? clear_nonspinnable+0x60/0x60
[ 108.096899][ T5108] ? ocfs2_dir_foreach_blk+0x1900/0x1900
[ 108.102507][ T5108] ? common_file_perm+0x171/0x1c0
[ 108.107526][ T5108] iterate_dir+0x218/0x560
[ 108.114077][ T5108] __se_sys_getdents+0xe5/0x250
[ 108.118923][ T5108] ? __x64_sys_getdents+0x80/0x80
[ 108.123941][ T5108] ? fillonedir+0x4c0/0x4c0
[ 108.128424][ T5108] ? vtime_user_exit+0x2dc/0x400
[ 108.133344][ T5108] ? lockdep_hardirqs_on+0x94/0x140
[ 108.138523][ T5108] do_syscall_64+0x4c/0xa0
[ 108.142916][ T5108] ? clear_bhb_loop+0x30/0x80
[ 108.147590][ T5108] ? clear_bhb_loop+0x30/0x80
[ 108.152257][ T5108] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 108.158135][ T5108] RIP: 0033:0x7f64f837eba9
[ 108.162533][ T5108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 108.182301][ T5108] RSP: 002b:00007f64f79ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[ 108.190786][ T5108] RAX: ffffffffffffffda RBX: 00007f64f85c5fa0 RCX: 00007f64f837eba9
[ 108.198743][ T5108] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004
[ 108.206706][ T5108] RBP: 00007f64f8401e19 R08: 0000000000000000 R09: 0000000000000000
[ 108.215099][ T5108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 108.223061][ T5108] R13: 00007f64f85c6038 R14: 00007f64f85c5fa0 R15: 00007ffd159e6548
[ 108.231048][ T5108]
[ 108.234626][ T5108] Kernel Offset: disabled
[ 108.239300][ T5108] Rebooting in 86400 seconds..