[ 76.414388][ T1075] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.101' (ED25519) to the list of known hosts. 2024/10/20 19:15:31 ignoring optional flag "sandboxArg"="0" 2024/10/20 19:15:32 parsed 1 programs [ 83.502180][ T3946] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.711629][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.727761][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.734438][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.736802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.750330][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.761463][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.809540][ T3996] chnl_net:caif_netlink_parms(): no params data found [ 85.866437][ T3996] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.874699][ T3996] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.883029][ T3996] device bridge_slave_0 entered promiscuous mode [ 85.891470][ T3996] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.899712][ T3996] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.907987][ T3996] device bridge_slave_1 entered promiscuous mode [ 85.938700][ T3996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.950470][ T3996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.980921][ T3996] team0: Port device team_slave_0 added [ 85.989373][ T3996] team0: Port device team_slave_1 added [ 86.010008][ T3996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.017078][ T3996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.043553][ T3996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.058069][ T3996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.065445][ T3996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.091709][ T3996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.125156][ T3996] device hsr_slave_0 entered promiscuous mode [ 86.131755][ T3996] device hsr_slave_1 entered promiscuous mode [ 86.780367][ T3996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.790018][ T3996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.801001][ T3996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.810869][ T3996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.905206][ T3996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.919933][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.928975][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.940530][ T3996] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.974328][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.984172][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.993612][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.000685][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.012516][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.024689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.034220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.043178][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.050256][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.093829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.103863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.115418][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.126202][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.163724][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.172079][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.181287][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.189870][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.198343][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.209427][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.217977][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.246479][ T3996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.361299][ T3996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.371342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.379720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.429560][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.439319][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.461997][ T3996] device veth0_vlan entered promiscuous mode [ 87.472674][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.480926][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.495568][ T3996] device veth1_vlan entered promiscuous mode [ 87.504463][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.514310][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.522959][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.563457][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.571769][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.581351][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.593849][ T3996] device veth0_macvtap entered promiscuous mode [ 87.620942][ T3996] device veth1_macvtap entered promiscuous mode [ 87.639837][ T3996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.647601][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.657689][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.667683][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.678522][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.690760][ T3996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.700626][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.710316][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.735442][ T3996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.745516][ T3996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.754661][ T3996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.763666][ T3996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/10/20 19:15:40 executed programs: 0 [ 88.872849][ T4135] chnl_net:caif_netlink_parms(): no params data found [ 88.961403][ T4135] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.984865][ T4135] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.993543][ T4135] device bridge_slave_0 entered promiscuous mode [ 89.003468][ T4135] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.022167][ T4135] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.030349][ T4135] device bridge_slave_1 entered promiscuous mode [ 89.075083][ T4135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.086513][ T4135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.136619][ T4135] team0: Port device team_slave_0 added [ 89.153715][ T4135] team0: Port device team_slave_1 added [ 89.194062][ T4135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.201024][ T4135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.230946][ T4135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.245085][ T4135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.252043][ T4135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.278302][ T4135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.358767][ T4135] device hsr_slave_0 entered promiscuous mode [ 89.385135][ T4135] device hsr_slave_1 entered promiscuous mode [ 89.391833][ T4135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.412167][ T4135] Cannot create hsr debugfs directory [ 89.585030][ T4135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.722388][ T3599] Bluetooth: hci0: command 0x0409 tx timeout [ 92.802358][ T3661] Bluetooth: hci0: command 0x041b tx timeout [ 93.036528][ T4135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.106583][ T4135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.195122][ T4135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.302016][ T4135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.312254][ T4135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.321650][ T4135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.337716][ T4135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.380463][ T4135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.396202][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.406536][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.416415][ T4135] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.433365][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.443001][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.451405][ T898] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.458626][ T898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.466684][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.477565][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.486722][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.495803][ T898] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.503040][ T898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.527203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.538433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.555553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.565004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.574213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.584195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.593616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.602694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.610900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.620246][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.629354][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.652594][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.718971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.726717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.738551][ T4135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.764743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.773634][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.789675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.798281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.808218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.817691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.826736][ T4135] device veth0_vlan entered promiscuous mode [ 93.838975][ T144] device hsr_slave_0 left promiscuous mode [ 93.845306][ T144] device hsr_slave_1 left promiscuous mode [ 93.851577][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.859301][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.867609][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.875359][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.883552][ T144] device bridge_slave_1 left promiscuous mode [ 93.889714][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.898231][ T144] device bridge_slave_0 left promiscuous mode [ 93.905017][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.916773][ T144] device veth1_macvtap left promiscuous mode [ 93.923621][ T144] device veth0_macvtap left promiscuous mode [ 93.929665][ T144] device veth1_vlan left promiscuous mode [ 93.935711][ T144] device veth0_vlan left promiscuous mode [ 94.049769][ T144] team0 (unregistering): Port device team_slave_1 removed [ 94.061840][ T144] team0 (unregistering): Port device team_slave_0 removed [ 94.074325][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.089438][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.136624][ T144] bond0 (unregistering): Released all slaves [ 94.189086][ T4135] device veth1_vlan entered promiscuous mode [ 94.206201][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.214330][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.223682][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.232947][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.244187][ T4135] device veth0_macvtap entered promiscuous mode [ 94.254892][ T4135] device veth1_macvtap entered promiscuous mode [ 94.270922][ T4135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.279185][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.287939][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.296296][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.305501][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.316904][ T4135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.326004][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.335124][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.346354][ T4135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.355874][ T4135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.364917][ T4135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.374231][ T4135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.429023][ T898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.444257][ T898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.466064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2024/10/20 19:15:46 executed programs: 2 [ 94.478165][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.487794][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.497192][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.760311][ T4380] loop0: detected capacity change from 0 to 32768 [ 94.799595][ T4380] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 66 has bad blkno in extent list at depth 65533 (index 52) [ 94.824456][ T4380] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 94.834523][ T4380] OCFS2: File system is now read-only. [ 94.840335][ T4380] (syz.0.15,4380,0):ocfs2_find_leaf:1933 ERROR: status = -30 [ 94.848342][ T4380] (syz.0.15,4380,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 94.856795][ T4380] (syz.0.15,4380,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 94.865564][ T4380] (syz.0.15,4380,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 94.874162][ T4380] (syz.0.15,4380,0):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 94.883546][ T3599] Bluetooth: hci0: command 0x040f tx timeout [ 94.889758][ T4380] (syz.0.15,4380,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 94.898188][ T4380] (syz.0.15,4380,0):ocfs2_init_global_system_inodes:462 ERROR: status = -30 [ 94.908033][ T4380] (syz.0.15,4380,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 94.908064][ T4380] (syz.0.15,4380,0):ocfs2_init_global_system_inodes:473 ERROR: status = -30 [ 94.929495][ T4380] (syz.0.15,4380,0):ocfs2_initialize_super:2278 ERROR: status = -30 [ 94.937694][ T4380] (syz.0.15,4380,0):ocfs2_fill_super:1177 ERROR: status = -30 [ 95.391854][ T4382] loop0: detected capacity change from 0 to 32768 [ 95.525853][ T4382] ================================================================== [ 95.534099][ T4382] BUG: KASAN: use-after-free in __ocfs2_find_path+0x1ff/0x7e0 [ 95.541605][ T4382] Read of size 4 at addr ffff888060f26000 by task syz.0.16/4382 [ 95.549425][ T4382] [ 95.551766][ T4382] CPU: 0 PID: 4382 Comm: syz.0.16 Not tainted 5.15.168-syzkaller #0 [ 95.559740][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.569811][ T4382] Call Trace: [ 95.573100][ T4382] [ 95.576051][ T4382] dump_stack_lvl+0x1e3/0x2d0 [ 95.580778][ T4382] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 95.586437][ T4382] ? _printk+0xd1/0x120 [ 95.590814][ T4382] ? __wake_up_klogd+0xcc/0x100 [ 95.595685][ T4382] ? panic+0x860/0x860 [ 95.599829][ T4382] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 95.605280][ T4382] print_address_description+0x63/0x3b0 [ 95.610843][ T4382] ? __ocfs2_find_path+0x1ff/0x7e0 [ 95.615939][ T4382] kasan_report+0x16b/0x1c0 [ 95.620427][ T4382] ? __ocfs2_find_path+0x1ff/0x7e0 [ 95.625521][ T4382] __ocfs2_find_path+0x1ff/0x7e0 [ 95.630444][ T4382] ? ocfs2_find_leaf+0x220/0x220 [ 95.635370][ T4382] ? ocfs2_find_path+0x130/0x130 [ 95.640302][ T4382] ? rcu_is_watching+0x11/0xa0 [ 95.645153][ T4382] ocfs2_find_leaf+0xcb/0x220 [ 95.649828][ T4382] ? find_path_ins+0x1f0/0x1f0 [ 95.654581][ T4382] ? ocfs2_refresh_inode+0x960/0x960 [ 95.659891][ T4382] ocfs2_get_clusters_nocache+0x1a9/0xbe0 [ 95.665712][ T4382] ? ocfs2_get_clusters+0xbc0/0xbc0 [ 95.670917][ T4382] ? ocfs2_read_inode_block+0x148/0x1d0 [ 95.676455][ T4382] ? ocfs2_read_inode_block_full+0x1e0/0x1e0 [ 95.682434][ T4382] ? do_raw_spin_unlock+0x137/0x8b0 [ 95.687637][ T4382] ocfs2_get_clusters+0x5b5/0xbc0 [ 95.692798][ T4382] ? ocfs2_xattr_get_clusters+0x9c0/0x9c0 [ 95.698540][ T4382] ocfs2_extent_map_get_blocks+0x248/0x7d0 [ 95.704382][ T4382] ? ocfs2_relative_extent_offsets+0x240/0x240 [ 95.710625][ T4382] ? down_read+0x1b3/0x2e0 [ 95.715031][ T4382] ocfs2_read_virt_blocks+0x2ea/0xa10 [ 95.720421][ T4382] ? ocfs2_validate_dx_leaf+0x210/0x210 [ 95.725988][ T4382] ? ocfs2_seek_data_hole_offset+0xd10/0xd10 [ 95.731965][ T4382] ocfs2_find_entry+0x437/0x26d0 [ 95.736911][ T4382] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 95.743074][ T4382] ? lockdep_init_map_type+0x9d/0x8d0 [ 95.748524][ T4382] ? is_dynamic_key+0x1f0/0x1f0 [ 95.753375][ T4382] ? __lock_acquire+0x1295/0x1ff0 [ 95.758391][ T4382] ? format_decode+0xd1d/0x1f10 [ 95.763353][ T4382] ? vsnprintf+0x1c70/0x1c70 [ 95.767934][ T4382] ? __mutex_trylock_common+0x17e/0x2e0 [ 95.773551][ T4382] ? __might_sleep+0xc0/0xc0 [ 95.778119][ T4382] ? string+0x26a/0x2b0 [ 95.782262][ T4382] ? widen_string+0x3a/0x310 [ 95.786837][ T4382] ? string+0x26a/0x2b0 [ 95.790971][ T4382] ? vsnprintf+0x1b93/0x1c70 [ 95.795722][ T4382] ocfs2_find_files_on_disk+0xea/0x310 [ 95.801168][ T4382] ocfs2_lookup_ino_from_name+0xad/0x1e0 [ 95.806791][ T4382] ? ocfs2_find_files_on_disk+0x310/0x310 [ 95.812508][ T4382] ? ____kasan_kmalloc+0xd1/0xf0 [ 95.817617][ T4382] ? ____kasan_kmalloc+0xba/0xf0 [ 95.822542][ T4382] ocfs2_get_system_file_inode+0x314/0x7b0 [ 95.828425][ T4382] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.834569][ T4382] ? ocfs2_fast_symlink_readpage+0x420/0x420 [ 95.840552][ T4382] ocfs2_init_global_system_inodes+0x328/0x720 [ 95.846756][ T4382] ? trace_ocfs2_initialize_super+0x1f0/0x1f0 [ 95.852909][ T4382] ? kmem_cache_alloc_trace+0x143/0x290 [ 95.858551][ T4382] ? ocfs2_new_dlm_debug+0x93/0x1f0 [ 95.863828][ T4382] ? ocfs2_new_dlm_debug+0xb1/0x1f0 [ 95.869018][ T4382] ? ocfs2_put_dlm_debug+0x80/0x80 [ 95.874111][ T4382] ? rcu_is_watching+0x11/0xa0 [ 95.878954][ T4382] ? trace_ocfs2_initialize_super+0x98/0x1f0 [ 95.884944][ T4382] ocfs2_fill_super+0x479e/0x58a0 [ 95.890047][ T4382] ? ocfs2_mount+0x40/0x40 [ 95.894480][ T4382] ? validate_chain+0x112/0x5930 [ 95.899407][ T4382] ? unwind_next_frame+0x1437/0x1fa0 [ 95.904679][ T4382] ? deref_stack_reg+0xbe/0x110 [ 95.909533][ T4382] ? reacquire_held_locks+0x660/0x660 [ 95.914986][ T4382] ? stack_trace_save+0x1c0/0x1c0 [ 95.920010][ T4382] ? is_bpf_text_address+0x24f/0x260 [ 95.925381][ T4382] ? validate_chain+0x112/0x5930 [ 95.930303][ T4382] ? validate_chain+0x112/0x5930 [ 95.935249][ T4382] ? mark_lock+0x98/0x340 [ 95.939581][ T4382] ? mark_lock+0x98/0x340 [ 95.943899][ T4382] ? __lock_acquire+0x1295/0x1ff0 [ 95.948915][ T4382] ? string+0x26a/0x2b0 [ 95.953061][ T4382] ? widen_string+0x3a/0x310 [ 95.957662][ T4382] ? string+0x26a/0x2b0 [ 95.961804][ T4382] ? bdev_name+0x297/0x3a0 [ 95.966277][ T4382] ? pointer+0x6a5/0xc40 [ 95.970536][ T4382] ? print_unlock_imbalance_bug+0x2b0/0x2b0 [ 95.976422][ T4382] ? string+0x2b0/0x2b0 [ 95.980586][ T4382] ? vsnprintf+0x1c70/0x1c70 [ 95.985188][ T4382] ? ptr_to_hashval+0x60/0x60 [ 95.989864][ T4382] ? snprintf+0xd6/0x120 [ 95.994099][ T4382] ? vscnprintf+0x80/0x80 [ 95.998417][ T4382] ? set_blocksize+0x1ec/0x370 [ 96.003189][ T4382] mount_bdev+0x2c9/0x3f0 [ 96.007732][ T4382] ? ocfs2_mount+0x40/0x40 [ 96.012164][ T4382] legacy_get_tree+0xeb/0x180 [ 96.016958][ T4382] ? trace_raw_output_ocfs2_buffer_cached_end+0xe0/0xe0 [ 96.023892][ T4382] vfs_get_tree+0x88/0x270 [ 96.028382][ T4382] do_new_mount+0x2ba/0xb40 [ 96.032882][ T4382] ? do_move_mount_old+0x160/0x160 [ 96.038002][ T4382] ? user_path_at_empty+0x12b/0x180 [ 96.043194][ T4382] __se_sys_mount+0x2d5/0x3c0 [ 96.047861][ T4382] ? __x64_sys_mount+0xc0/0xc0 [ 96.052612][ T4382] ? syscall_enter_from_user_mode+0x2e/0x240 [ 96.058854][ T4382] ? lockdep_hardirqs_on+0x94/0x130 [ 96.064038][ T4382] ? __x64_sys_mount+0x1c/0xc0 [ 96.069058][ T4382] do_syscall_64+0x3b/0xb0 [ 96.073472][ T4382] ? clear_bhb_loop+0x15/0x70 [ 96.078151][ T4382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.084034][ T4382] RIP: 0033:0x7febb6da279a [ 96.088445][ T4382] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.108029][ T4382] RSP: 002b:00007febb6020e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.116430][ T4382] RAX: ffffffffffffffda RBX: 00007febb6020ef0 RCX: 00007febb6da279a [ 96.124411][ T4382] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007febb6020eb0 [ 96.132553][ T4382] RBP: 0000000020004440 R08: 00007febb6020ef0 R09: 0000000001000000 [ 96.140543][ T4382] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 96.148498][ T4382] R13: 00007febb6020eb0 R14: 000000000000444a R15: 00000000200005c0 [ 96.156484][ T4382] [ 96.159500][ T4382] [ 96.161817][ T4382] The buggy address belongs to the page: [ 96.167565][ T4382] page:ffffea000183c980 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x60f26 [ 96.177716][ T4382] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 96.184836][ T4382] raw: 00fff00000000000 ffffea000183c9c8 ffff8880b9040960 0000000000000000 [ 96.193418][ T4382] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 96.201979][ T4382] page dumped because: kasan: bad access detected [ 96.208553][ T4382] page_owner tracks the page as freed [ 96.213904][ T4382] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4382, ts 95157367668, free_ts 95391203384 [ 96.229600][ T4382] get_page_from_freelist+0x322a/0x33c0 [ 96.235231][ T4382] __alloc_pages+0x272/0x700 [ 96.239985][ T4382] alloc_pages_vma+0x39a/0x800 [ 96.244995][ T4382] handle_mm_fault+0x2f49/0x5960 [ 96.249931][ T4382] exc_page_fault+0x271/0x700 [ 96.254586][ T4382] asm_exc_page_fault+0x22/0x30 [ 96.259423][ T4382] page last free stack trace: [ 96.264103][ T4382] free_unref_page_prepare+0xc34/0xcf0 [ 96.269730][ T4382] free_unref_page_list+0x1f7/0x8e0 [ 96.275359][ T4382] release_pages+0x1bb9/0x1f40 [ 96.280112][ T4382] tlb_finish_mmu+0x177/0x320 [ 96.284770][ T4382] unmap_region+0x304/0x350 [ 96.289307][ T4382] __do_munmap+0x12db/0x1740 [ 96.293978][ T4382] __vm_munmap+0x134/0x230 [ 96.298401][ T4382] __x64_sys_munmap+0x67/0x70 [ 96.303101][ T4382] do_syscall_64+0x3b/0xb0 [ 96.307591][ T4382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.313465][ T4382] [ 96.315808][ T4382] Memory state around the buggy address: [ 96.321415][ T4382] ffff888060f25f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.329459][ T4382] ffff888060f25f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.337510][ T4382] >ffff888060f26000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 96.345554][ T4382] ^ [ 96.349742][ T4382] ffff888060f26080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 96.357874][ T4382] ffff888060f26100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 96.365918][ T4382] ================================================================== [ 96.374066][ T4382] Disabling lock debugging due to kernel taint [ 96.387027][ T4382] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.394361][ T4382] CPU: 0 PID: 4382 Comm: syz.0.16 Tainted: G B 5.15.168-syzkaller #0 [ 96.403807][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.414148][ T4382] Call Trace: [ 96.417609][ T4382] [ 96.420542][ T4382] dump_stack_lvl+0x1e3/0x2d0 [ 96.425213][ T4382] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 96.430923][ T4382] ? panic+0x860/0x860 [ 96.434977][ T4382] ? rcu_is_watching+0x11/0xa0 [ 96.439743][ T4382] ? preempt_schedule_common+0xa6/0xd0 [ 96.445192][ T4382] panic+0x318/0x860 [ 96.449099][ T4382] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 96.455427][ T4382] ? check_panic_on_warn+0x1d/0xa0 [ 96.460529][ T4382] ? fb_is_primary_device+0xd0/0xd0 [ 96.465817][ T4382] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 96.471881][ T4382] ? _raw_spin_unlock+0x40/0x40 [ 96.476985][ T4382] check_panic_on_warn+0x7e/0xa0 [ 96.482115][ T4382] ? __ocfs2_find_path+0x1ff/0x7e0 [ 96.487225][ T4382] end_report+0x6d/0xf0 [ 96.491455][ T4382] kasan_report+0x18e/0x1c0 [ 96.495961][ T4382] ? __ocfs2_find_path+0x1ff/0x7e0 [ 96.501055][ T4382] __ocfs2_find_path+0x1ff/0x7e0 [ 96.505971][ T4382] ? ocfs2_find_leaf+0x220/0x220 [ 96.510914][ T4382] ? ocfs2_find_path+0x130/0x130 [ 96.515934][ T4382] ? rcu_is_watching+0x11/0xa0 [ 96.520680][ T4382] ocfs2_find_leaf+0xcb/0x220 [ 96.525334][ T4382] ? find_path_ins+0x1f0/0x1f0 [ 96.530075][ T4382] ? ocfs2_refresh_inode+0x960/0x960 [ 96.535346][ T4382] ocfs2_get_clusters_nocache+0x1a9/0xbe0 [ 96.541238][ T4382] ? ocfs2_get_clusters+0xbc0/0xbc0 [ 96.546427][ T4382] ? ocfs2_read_inode_block+0x148/0x1d0 [ 96.552061][ T4382] ? ocfs2_read_inode_block_full+0x1e0/0x1e0 [ 96.558024][ T4382] ? do_raw_spin_unlock+0x137/0x8b0 [ 96.563211][ T4382] ocfs2_get_clusters+0x5b5/0xbc0 [ 96.568242][ T4382] ? ocfs2_xattr_get_clusters+0x9c0/0x9c0 [ 96.573966][ T4382] ocfs2_extent_map_get_blocks+0x248/0x7d0 [ 96.579768][ T4382] ? ocfs2_relative_extent_offsets+0x240/0x240 [ 96.585911][ T4382] ? down_read+0x1b3/0x2e0 [ 96.590312][ T4382] ocfs2_read_virt_blocks+0x2ea/0xa10 [ 96.595667][ T4382] ? ocfs2_validate_dx_leaf+0x210/0x210 [ 96.601286][ T4382] ? ocfs2_seek_data_hole_offset+0xd10/0xd10 [ 96.607260][ T4382] ocfs2_find_entry+0x437/0x26d0 [ 96.612195][ T4382] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 96.618257][ T4382] ? lockdep_init_map_type+0x9d/0x8d0 [ 96.623929][ T4382] ? is_dynamic_key+0x1f0/0x1f0 [ 96.628945][ T4382] ? __lock_acquire+0x1295/0x1ff0 [ 96.633955][ T4382] ? format_decode+0xd1d/0x1f10 [ 96.638883][ T4382] ? vsnprintf+0x1c70/0x1c70 [ 96.643466][ T4382] ? __mutex_trylock_common+0x17e/0x2e0 [ 96.649015][ T4382] ? __might_sleep+0xc0/0xc0 [ 96.653590][ T4382] ? string+0x26a/0x2b0 [ 96.657751][ T4382] ? widen_string+0x3a/0x310 [ 96.662324][ T4382] ? string+0x26a/0x2b0 [ 96.666516][ T4382] ? vsnprintf+0x1b93/0x1c70 [ 96.671086][ T4382] ocfs2_find_files_on_disk+0xea/0x310 [ 96.676523][ T4382] ocfs2_lookup_ino_from_name+0xad/0x1e0 [ 96.682187][ T4382] ? ocfs2_find_files_on_disk+0x310/0x310 [ 96.687946][ T4382] ? ____kasan_kmalloc+0xd1/0xf0 [ 96.692871][ T4382] ? ____kasan_kmalloc+0xba/0xf0 [ 96.697794][ T4382] ocfs2_get_system_file_inode+0x314/0x7b0 [ 96.703591][ T4382] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.709648][ T4382] ? ocfs2_fast_symlink_readpage+0x420/0x420 [ 96.715628][ T4382] ocfs2_init_global_system_inodes+0x328/0x720 [ 96.722254][ T4382] ? trace_ocfs2_initialize_super+0x1f0/0x1f0 [ 96.728498][ T4382] ? kmem_cache_alloc_trace+0x143/0x290 [ 96.734274][ T4382] ? ocfs2_new_dlm_debug+0x93/0x1f0 [ 96.739460][ T4382] ? ocfs2_new_dlm_debug+0xb1/0x1f0 [ 96.744656][ T4382] ? ocfs2_put_dlm_debug+0x80/0x80 [ 96.749774][ T4382] ? rcu_is_watching+0x11/0xa0 [ 96.754608][ T4382] ? trace_ocfs2_initialize_super+0x98/0x1f0 [ 96.760574][ T4382] ocfs2_fill_super+0x479e/0x58a0 [ 96.765587][ T4382] ? ocfs2_mount+0x40/0x40 [ 96.770246][ T4382] ? validate_chain+0x112/0x5930 [ 96.775308][ T4382] ? unwind_next_frame+0x1437/0x1fa0 [ 96.780585][ T4382] ? deref_stack_reg+0xbe/0x110 [ 96.785419][ T4382] ? reacquire_held_locks+0x660/0x660 [ 96.790884][ T4382] ? stack_trace_save+0x1c0/0x1c0 [ 96.795993][ T4382] ? is_bpf_text_address+0x24f/0x260 [ 96.801264][ T4382] ? validate_chain+0x112/0x5930 [ 96.806189][ T4382] ? validate_chain+0x112/0x5930 [ 96.811336][ T4382] ? mark_lock+0x98/0x340 [ 96.815668][ T4382] ? mark_lock+0x98/0x340 [ 96.820002][ T4382] ? __lock_acquire+0x1295/0x1ff0 [ 96.825011][ T4382] ? string+0x26a/0x2b0 [ 96.829150][ T4382] ? widen_string+0x3a/0x310 [ 96.833804][ T4382] ? string+0x26a/0x2b0 [ 96.837940][ T4382] ? bdev_name+0x297/0x3a0 [ 96.842335][ T4382] ? pointer+0x6a5/0xc40 [ 96.846628][ T4382] ? print_unlock_imbalance_bug+0x2b0/0x2b0 [ 96.852635][ T4382] ? string+0x2b0/0x2b0 [ 96.856775][ T4382] ? vsnprintf+0x1c70/0x1c70 [ 96.861354][ T4382] ? ptr_to_hashval+0x60/0x60 [ 96.866017][ T4382] ? snprintf+0xd6/0x120 [ 96.870545][ T4382] ? vscnprintf+0x80/0x80 [ 96.874978][ T4382] ? set_blocksize+0x1ec/0x370 [ 96.879852][ T4382] mount_bdev+0x2c9/0x3f0 [ 96.884390][ T4382] ? ocfs2_mount+0x40/0x40 [ 96.888806][ T4382] legacy_get_tree+0xeb/0x180 [ 96.893774][ T4382] ? trace_raw_output_ocfs2_buffer_cached_end+0xe0/0xe0 [ 96.900704][ T4382] vfs_get_tree+0x88/0x270 [ 96.905110][ T4382] do_new_mount+0x2ba/0xb40 [ 96.909609][ T4382] ? do_move_mount_old+0x160/0x160 [ 96.914815][ T4382] ? user_path_at_empty+0x12b/0x180 [ 96.920004][ T4382] __se_sys_mount+0x2d5/0x3c0 [ 96.924850][ T4382] ? __x64_sys_mount+0xc0/0xc0 [ 96.929611][ T4382] ? syscall_enter_from_user_mode+0x2e/0x240 [ 96.935755][ T4382] ? lockdep_hardirqs_on+0x94/0x130 [ 96.940940][ T4382] ? __x64_sys_mount+0x1c/0xc0 [ 96.945789][ T4382] do_syscall_64+0x3b/0xb0 [ 96.950189][ T4382] ? clear_bhb_loop+0x15/0x70 [ 96.954850][ T4382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.960758][ T4382] RIP: 0033:0x7febb6da279a [ 96.965172][ T4382] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.984763][ T4382] RSP: 002b:00007febb6020e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.993171][ T4382] RAX: ffffffffffffffda RBX: 00007febb6020ef0 RCX: 00007febb6da279a [ 97.001133][ T4382] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007febb6020eb0 [ 97.009089][ T4382] RBP: 0000000020004440 R08: 00007febb6020ef0 R09: 0000000001000000 [ 97.017070][ T4382] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780 [ 97.025165][ T4382] R13: 00007febb6020eb0 R14: 000000000000444a R15: 00000000200005c0 [ 97.033131][ T4382] [ 97.036429][ T4382] Kernel Offset: disabled [ 97.040775][ T4382] Rebooting in 86400 seconds..