[ 86.653691][ T8] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:31272' (ED25519) to the list of known hosts.
2025/01/03 09:06:14 ignoring optional flag "sandboxArg"="0"
2025/01/03 09:06:14 parsed 1 programs
[ 95.304651][ T5574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 98.324916][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.328006][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.352427][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.356016][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.836983][ T5626] chnl_net:caif_netlink_parms(): no params data found
[ 98.880257][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.884312][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.887017][ T5626] bridge_slave_0: entered allmulticast mode
[ 98.889619][ T5626] bridge_slave_0: entered promiscuous mode
[ 98.894151][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.896832][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.899386][ T5626] bridge_slave_1: entered allmulticast mode
[ 98.902491][ T5626] bridge_slave_1: entered promiscuous mode
[ 98.913168][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.917821][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.928950][ T5626] team0: Port device team_slave_0 added
[ 98.932821][ T5626] team0: Port device team_slave_1 added
[ 98.942578][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.945292][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.956301][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.961367][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.964811][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.975214][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.991224][ T5626] hsr_slave_0: entered promiscuous mode
[ 98.994067][ T5626] hsr_slave_1: entered promiscuous mode
[ 99.243419][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 99.252296][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 99.263063][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 99.273704][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 99.290060][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.293774][ T5626] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.297645][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.301226][ T5626] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.372980][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.376239][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.394753][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.407795][ T5626] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.425160][ T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.427804][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.436769][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.439288][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.471918][ T5626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 99.476194][ T5626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 99.601084][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.640493][ T5626] veth0_vlan: entered promiscuous mode
[ 99.672635][ T5626] veth1_vlan: entered promiscuous mode
[ 99.704495][ T5626] veth0_macvtap: entered promiscuous mode
[ 99.708407][ T5626] veth1_macvtap: entered promiscuous mode
[ 99.735356][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.750645][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.764728][ T5626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.768084][ T5626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.771394][ T5626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.791661][ T5626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.916291][ T1031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.958204][ T1031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.993685][ T1031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.043675][ T1031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.596078][ T4660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.598953][ T4660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.601900][ T4660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.605290][ T4660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.608277][ T4660] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 100.612387][ T4660] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/01/03 09:06:23 executed programs: 0
[ 100.760969][ T5378] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 100.764503][ T5378] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 100.767409][ T5378] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 100.770421][ T5378] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 100.774148][ T5378] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 100.777291][ T5378] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 101.000955][ T5714] chnl_net:caif_netlink_parms(): no params data found
[ 101.076610][ T5714] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.079678][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.083845][ T5714] bridge_slave_0: entered allmulticast mode
[ 101.092884][ T5714] bridge_slave_0: entered promiscuous mode
[ 101.102335][ T5714] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.105047][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.107772][ T5714] bridge_slave_1: entered allmulticast mode
[ 101.110532][ T5714] bridge_slave_1: entered promiscuous mode
[ 101.153848][ T5714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.158470][ T5714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.194215][ T5714] team0: Port device team_slave_0 added
[ 101.203249][ T5714] team0: Port device team_slave_1 added
[ 101.232214][ T5714] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.234960][ T5714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.262180][ T5714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.267552][ T5714] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.270234][ T5714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.302216][ T5714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.333403][ T5714] hsr_slave_0: entered promiscuous mode
[ 101.339760][ T5714] hsr_slave_1: entered promiscuous mode
[ 101.350176][ T5714] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 101.362368][ T5714] Cannot create hsr debugfs directory
[ 102.697958][ T1031] bridge_slave_1: left allmulticast mode
[ 102.700180][ T1031] bridge_slave_1: left promiscuous mode
[ 102.705969][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.709526][ T1031] bridge_slave_0: left allmulticast mode
[ 102.712263][ T1031] bridge_slave_0: left promiscuous mode
[ 102.714141][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.774164][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.779254][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.784367][ T1031] bond0 (unregistering): Released all slaves
[ 102.811764][ T5378] Bluetooth: hci1: command tx timeout
[ 102.857798][ T1031] hsr_slave_0: left promiscuous mode
[ 102.861427][ T1031] hsr_slave_1: left promiscuous mode
[ 102.873204][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.876033][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.882790][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.885607][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.913211][ T1031] veth1_macvtap: left promiscuous mode
[ 102.915380][ T1031] veth0_macvtap: left promiscuous mode
[ 102.917523][ T1031] veth1_vlan: left promiscuous mode
[ 102.919554][ T1031] veth0_vlan: left promiscuous mode
[ 103.008208][ T1031] team0 (unregistering): Port device team_slave_1 removed
[ 103.016304][ T1031] team0 (unregistering): Port device team_slave_0 removed
[ 103.256528][ T5714] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.267847][ T5714] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.276667][ T5714] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.280537][ T5714] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.330394][ T5714] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.345956][ T5714] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.356363][ T30] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.359216][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.377160][ T30] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.379862][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.388548][ T5714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 103.396279][ T5714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 103.467593][ T5714] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.484208][ T5714] veth0_vlan: entered promiscuous mode
[ 103.489486][ T5714] veth1_vlan: entered promiscuous mode
[ 103.501459][ T5714] veth0_macvtap: entered promiscuous mode
[ 103.506455][ T5714] veth1_macvtap: entered promiscuous mode
[ 103.514790][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.520000][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.528925][ T5714] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.533058][ T5714] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.536393][ T5714] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.539751][ T5714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.568972][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.577928][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.589016][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.593083][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.724467][ T5824] loop0: detected capacity change from 0 to 32768
[ 103.742086][ T5824] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 66 has bad blkno in extent list at depth 65533 (index 65534)
[ 103.756875][ T5824] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 103.760560][ T5824] OCFS2: File system is now read-only.
[ 103.763580][ T5824] (syz.0.15,5824,0):ocfs2_find_leaf:1940 ERROR: status = -30
[ 103.766690][ T5824] (syz.0.15,5824,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[ 103.769894][ T5824] (syz.0.15,5824,0):ocfs2_get_clusters:624 ERROR: status = -30
[ 103.775052][ T5824] (syz.0.15,5824,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[ 103.778116][ T5824] (syz.0.15,5824,0):ocfs2_read_virt_blocks:987 ERROR: status = -30
[ 103.781093][ T5824] (syz.0.15,5824,0):ocfs2_read_dir_block:511 ERROR: status = -30
[ 103.784816][ T5824] (syz.0.15,5824,0):ocfs2_init_global_system_inodes:461 ERROR: status = -30
[ 103.788114][ T5824] (syz.0.15,5824,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs?
[ 103.788133][ T5824] (syz.0.15,5824,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30
[ 103.797016][ T5824] (syz.0.15,5824,0):ocfs2_initialize_super:2250 ERROR: status = -30
[ 103.800063][ T5824] (syz.0.15,5824,0):ocfs2_fill_super:1178 ERROR: status = -30
[ 103.973953][ T5826] loop0: detected capacity change from 0 to 32768
[ 103.992234][ T5826] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 66 has bad blkno in extent list at depth 65533 (index 52)
[ 104.003399][ T5826] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 104.007218][ T5826] OCFS2: File system is now read-only.
[ 104.009322][ T5826] (syz.0.16,5826,0):ocfs2_find_leaf:1940 ERROR: status = -30
[ 104.013888][ T5826] (syz.0.16,5826,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[ 104.016711][ T5826] (syz.0.16,5826,0):ocfs2_get_clusters:624 ERROR: status = -30
[ 104.019407][ T5826] (syz.0.16,5826,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[ 104.024865][ T5826] (syz.0.16,5826,0):ocfs2_read_virt_blocks:987 ERROR: status = -30
[ 104.027920][ T5826] (syz.0.16,5826,0):ocfs2_read_dir_block:511 ERROR: status = -30
[ 104.032728][ T5826] (syz.0.16,5826,0):ocfs2_init_global_system_inodes:461 ERROR: status = -30
[ 104.036101][ T5826] (syz.0.16,5826,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs?
[ 104.036119][ T5826] (syz.0.16,5826,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30
[ 104.044610][ T5826] (syz.0.16,5826,0):ocfs2_initialize_super:2250 ERROR: status = -30
[ 104.047865][ T5826] (syz.0.16,5826,0):ocfs2_fill_super:1178 ERROR: status = -30
[ 104.234908][ T5828] loop0: detected capacity change from 0 to 32768
[ 104.242257][ T5828] ==================================================================
[ 104.245361][ T5828] BUG: KASAN: use-after-free in __ocfs2_find_path+0x203/0x7e0
[ 104.248347][ T5828] Read of size 4 at addr ffff88804ba9c000 by task syz.0.17/5828
[ 104.252064][ T5828]
[ 104.252978][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.0.17 Not tainted 6.13.0-rc5-syzkaller-g0bc21e701a6f #0
[ 104.256659][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 104.260659][ T5828] Call Trace:
[ 104.261919][ T5828]
[ 104.263074][ T5828] dump_stack_lvl+0x241/0x360
[ 104.264865][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10
[ 104.266761][ T5828] ? __pfx__printk+0x10/0x10
[ 104.268550][ T5828] ? _printk+0xd5/0x120
[ 104.270002][ T5828] ? __virt_addr_valid+0x183/0x530
[ 104.271917][ T5828] ? __virt_addr_valid+0x183/0x530
[ 104.274073][ T5828] print_report+0x169/0x550
[ 104.275876][ T5828] ? __virt_addr_valid+0x183/0x530
[ 104.277891][ T5828] ? __virt_addr_valid+0x183/0x530
[ 104.280100][ T5828] ? __virt_addr_valid+0x45f/0x530
[ 104.281979][ T5828] ? __phys_addr+0xba/0x170
[ 104.283694][ T5828] ? __ocfs2_find_path+0x203/0x7e0
[ 104.285541][ T5828] kasan_report+0x143/0x180
[ 104.287320][ T5828] ? __ocfs2_find_path+0x203/0x7e0
[ 104.289326][ T5828] __ocfs2_find_path+0x203/0x7e0
[ 104.291262][ T5828] ? __pfx_find_leaf_ins+0x10/0x10
[ 104.293369][ T5828] ? __pfx___ocfs2_find_path+0x10/0x10
[ 104.295502][ T5828] ? __pfx_ocfs2_validate_inode_block+0x10/0x10
[ 104.297859][ T5828] ocfs2_find_leaf+0xcf/0x230
[ 104.299712][ T5828] ? __pfx_ocfs2_find_leaf+0x10/0x10
[ 104.301810][ T5828] ? __pfx_ocfs2_validate_inode_block+0x10/0x10
[ 104.304277][ T5828] ocfs2_get_clusters_nocache+0x1ad/0xbf0
[ 104.306484][ T5828] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10
[ 104.308916][ T5828] ? ocfs2_read_inode_block+0x14c/0x1e0
[ 104.310965][ T5828] ? __pfx_ocfs2_read_inode_block+0x10/0x10
[ 104.313355][ T5828] ? do_raw_spin_unlock+0x58/0x8b0
[ 104.315389][ T5828] ? lock_release+0xbf/0xa30
[ 104.317289][ T5828] ocfs2_get_clusters+0x5bd/0xbd0
[ 104.319223][ T5828] ? sched_clock+0x4a/0x70
[ 104.320992][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.322846][ T5828] ? __pfx_ocfs2_get_clusters+0x10/0x10
[ 104.324961][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.326760][ T5828] ? lock_acquire+0xe3/0x550
[ 104.328543][ T5828] ? __pfx_lock_acquire+0x10/0x10
[ 104.330363][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.332251][ T5828] ? __switch_to+0xe93/0x1c30
[ 104.333994][ T5828] ocfs2_extent_map_get_blocks+0x24c/0x7d0
[ 104.336225][ T5828] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10
[ 104.338690][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.340512][ T5828] ? lock_release+0xbf/0xa30
[ 104.342305][ T5828] ocfs2_read_virt_blocks+0x313/0xb10
[ 104.344428][ T5828] ? do_raw_spin_unlock+0x58/0x8b0
[ 104.346434][ T5828] ? __pfx_ocfs2_validate_dir_block+0x10/0x10
[ 104.348763][ T5828] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10
[ 104.351032][ T5828] ? __pfx_number+0x10/0x10
[ 104.352885][ T5828] ? string+0x26a/0x2b0
[ 104.354448][ T5828] ? widen_string+0x3a/0x310
[ 104.356287][ T5828] ocfs2_find_entry+0x43b/0x2730
[ 104.358189][ T5828] ? __pfx_ocfs2_find_entry+0x10/0x10
[ 104.360218][ T5828] ? __asan_memset+0x23/0x50
[ 104.361954][ T5828] ? lockdep_init_map_type+0xa1/0x910
[ 104.364064][ T5828] ? schedule+0x90/0x320
[ 104.365736][ T5828] ? do_raw_spin_unlock+0x58/0x8b0
[ 104.367734][ T5828] ? set_normalized_timespec64+0x119/0x1e0
[ 104.370103][ T5828] ? ocfs2_lock_res_init_common+0x32a/0x430
[ 104.372596][ T5828] ? format_decode+0xc5f/0x1bb0
[ 104.374516][ T5828] ? __pfx_format_decode+0x10/0x10
[ 104.376434][ T5828] ? __mutex_trylock_common+0x183/0x2e0
[ 104.378604][ T5828] ? __pfx___might_resched+0x10/0x10
[ 104.380669][ T5828] ? string+0x26a/0x2b0
[ 104.382291][ T5828] ? widen_string+0x3a/0x310
[ 104.384050][ T5828] ? string+0x26a/0x2b0
[ 104.385736][ T5828] ? vsnprintf+0x1ccd/0x1da0
[ 104.387598][ T5828] ocfs2_find_files_on_disk+0xff/0x360
[ 104.389698][ T5828] ocfs2_lookup_ino_from_name+0xb1/0x1e0
[ 104.392044][ T5828] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10
[ 104.394453][ T5828] ? kasan_save_track+0x51/0x80
[ 104.396267][ T5828] ? kasan_save_track+0x3f/0x80
[ 104.398074][ T5828] ? __kasan_kmalloc+0x98/0xb0
[ 104.399816][ T5828] ? ocfs2_new_dlm_debug+0x97/0x200
[ 104.401733][ T5828] ocfs2_get_system_file_inode+0x305/0x7b0
[ 104.404053][ T5828] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10
[ 104.406459][ T5828] ocfs2_init_global_system_inodes+0x32c/0x730
[ 104.408756][ T5828] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10
[ 104.411282][ T5828] ? __kmalloc_cache_noprof+0x243/0x390
[ 104.413485][ T5828] ? ocfs2_new_dlm_debug+0x97/0x200
[ 104.415511][ T5828] ? ocfs2_new_dlm_debug+0xb5/0x200
[ 104.417475][ T5828] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10
[ 104.419592][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.421404][ T5828] ? trace_ocfs2_initialize_super+0x9e/0x230
[ 104.423826][ T5828] ocfs2_fill_super+0x2f5b/0x5760
[ 104.425784][ T5828] ? __pfx_ocfs2_fill_super+0x10/0x10
[ 104.427772][ T5828] ? stack_trace_save+0x118/0x1d0
[ 104.429612][ T5828] ? unwind_next_frame+0x18e6/0x22d0
[ 104.431532][ T5828] ? deref_stack_reg+0x17c/0x210
[ 104.433295][ T5828] ? preempt_count_add+0x93/0x190
[ 104.435218][ T5828] ? is_bpf_text_address+0x285/0x2a0
[ 104.437138][ T5828] ? is_bpf_text_address+0x26/0x2a0
[ 104.439062][ T5828] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 104.441300][ T5828] ? kernel_text_address+0xa7/0xe0
[ 104.443280][ T5828] ? __kernel_text_address+0xd/0x40
[ 104.445263][ T5828] ? unwind_get_return_address+0x4d/0x90
[ 104.447465][ T5828] ? arch_stack_walk+0xfd/0x150
[ 104.449295][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.451061][ T5828] ? lock_acquire+0xe3/0x550
[ 104.452866][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.454628][ T5828] ? lock_release+0xbf/0xa30
[ 104.456410][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.458205][ T5828] ? lock_acquire+0xe3/0x550
[ 104.459980][ T5828] ? string+0x26a/0x2b0
[ 104.461593][ T5828] ? widen_string+0x3a/0x310
[ 104.463337][ T5828] ? string+0x26a/0x2b0
[ 104.464943][ T5828] ? bdev_name+0x2b1/0x3c0
[ 104.466617][ T5828] ? pointer+0x703/0x1210
[ 104.468258][ T5828] ? __pfx_pointer+0x10/0x10
[ 104.469993][ T5828] ? __pfx_format_decode+0x10/0x10
[ 104.471944][ T5828] ? __mutex_unlock_slowpath+0x21e/0x790
[ 104.474144][ T5828] ? vsnprintf+0x1ccd/0x1da0
[ 104.476064][ T5828] ? snprintf+0xda/0x120
[ 104.478134][ T5828] ? __pfx_lock_release+0x10/0x10
[ 104.480132][ T5828] ? do_raw_spin_lock+0x14f/0x370
[ 104.482179][ T5828] ? __pfx_snprintf+0x10/0x10
[ 104.484001][ T5828] ? set_blocksize+0x1fc/0x360
[ 104.485875][ T5828] ? sb_set_blocksize+0x98/0xf0
[ 104.487645][ T5828] ? setup_bdev_super+0x4e6/0x5d0
[ 104.489584][ T5828] mount_bdev+0x20a/0x2d0
[ 104.491199][ T5828] ? __pfx_ocfs2_fill_super+0x10/0x10
[ 104.493401][ T5828] ? __pfx_mount_bdev+0x10/0x10
[ 104.495288][ T5828] ? vfs_parse_fs_string+0x190/0x230
[ 104.497260][ T5828] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 104.499376][ T5828] legacy_get_tree+0xee/0x190
[ 104.501219][ T5828] ? __pfx_ocfs2_mount+0x10/0x10
[ 104.503075][ T5828] vfs_get_tree+0x90/0x2b0
[ 104.504756][ T5828] do_new_mount+0x2be/0xb40
[ 104.506472][ T5828] ? __pfx_do_new_mount+0x10/0x10
[ 104.508331][ T5828] __se_sys_mount+0x2d6/0x3c0
[ 104.510145][ T5828] ? __pfx___se_sys_mount+0x10/0x10
[ 104.512204][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.513869][ T5828] ? __x64_sys_mount+0x20/0xc0
[ 104.515592][ T5828] do_syscall_64+0xf3/0x230
[ 104.517368][ T5828] ? clear_bhb_loop+0x35/0x90
[ 104.519278][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.521578][ T5828] RIP: 0033:0x7fd0e47816ba
[ 104.523112][ T5828] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 104.530019][ T5828] RSP: 002b:00007fd0e5572e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 104.533190][ T5828] RAX: ffffffffffffffda RBX: 00007fd0e5572f10 RCX: 00007fd0e47816ba
[ 104.536288][ T5828] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007fd0e5572ed0
[ 104.539497][ T5828] RBP: 0000000020004440 R08: 00007fd0e5572f10 R09: 0000000001000000
[ 104.542241][ T5828] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780
[ 104.544976][ T5828] R13: 00007fd0e5572ed0 R14: 000000000000444a R15: 00000000200005c0
[ 104.547829][ T5828]
[ 104.548984][ T5828]
[ 104.549845][ T5828] The buggy address belongs to the physical page:
[ 104.552147][ T5828] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7fd0db42c pfn:0x4ba9c
[ 104.555626][ T5828] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 104.558328][ T5828] raw: 04fff00000000000 ffffea00012ea748 ffff88801fc44b30 0000000000000000
[ 104.561421][ T5828] raw: 00000007fd0db42c 0000000000000000 00000000ffffffff 0000000000000000
[ 104.565213][ T5828] page dumped because: kasan: bad access detected
[ 104.567763][ T5828] page_owner tracks the page as freed
[ 104.569713][ T5828] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5828, tgid 5827 (syz.0.17), ts 104127593549, free_ts 104234374030
[ 104.576641][ T5828] post_alloc_hook+0x1f3/0x230
[ 104.578497][ T5828] get_page_from_freelist+0x365c/0x37a0
[ 104.580693][ T5828] __alloc_pages_noprof+0x292/0x710
[ 104.582670][ T5828] alloc_pages_mpol_noprof+0x3e8/0x680
[ 104.584819][ T5828] vma_alloc_folio_noprof+0x12e/0x230
[ 104.586789][ T5828] folio_prealloc+0x2e/0x170
[ 104.588443][ T5828] handle_pte_fault+0x2c98/0x5ed0
[ 104.590334][ T5828] handle_mm_fault+0x1106/0x1bb0
[ 104.592224][ T5828] exc_page_fault+0x459/0x8b0
[ 104.594082][ T5828] asm_exc_page_fault+0x26/0x30
[ 104.596038][ T5828] page last free pid 5828 tgid 5827 stack trace:
[ 104.598409][ T5828] free_unref_folios+0xe39/0x18b0
[ 104.600312][ T5828] folios_put_refs+0x76c/0x860
[ 104.602027][ T5828] free_pages_and_swap_cache+0x5c8/0x690
[ 104.604218][ T5828] tlb_flush_mmu+0x3a3/0x680
[ 104.605987][ T5828] tlb_finish_mmu+0xd4/0x200
[ 104.607813][ T5828] vms_clear_ptes+0x437/0x530
[ 104.609602][ T5828] vms_complete_munmap_vmas+0x210/0x8f0
[ 104.611715][ T5828] do_vmi_align_munmap+0x5ef/0x6f0
[ 104.613608][ T5828] do_vmi_munmap+0x24e/0x2d0
[ 104.615400][ T5828] __vm_munmap+0x24c/0x480
[ 104.617005][ T5828] __x64_sys_munmap+0x60/0x70
[ 104.618751][ T5828] do_syscall_64+0xf3/0x230
[ 104.620232][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.622487][ T5828]
[ 104.623450][ T5828] Memory state around the buggy address:
[ 104.625631][ T5828] ffff88804ba9bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 104.628612][ T5828] ffff88804ba9bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 104.631672][ T5828] >ffff88804ba9c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.634846][ T5828] ^
[ 104.636424][ T5828] ffff88804ba9c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.639583][ T5828] ffff88804ba9c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.642658][ T5828] ==================================================================
[ 104.686771][ T5828] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.689517][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.0.17 Not tainted 6.13.0-rc5-syzkaller-g0bc21e701a6f #0
[ 104.693433][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 104.697514][ T5828] Call Trace:
[ 104.698812][ T5828]
[ 104.699860][ T5828] dump_stack_lvl+0x241/0x360
[ 104.701706][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10
[ 104.703895][ T5828] ? __pfx__printk+0x10/0x10
[ 104.705697][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.707607][ T5828] ? preempt_schedule+0xe1/0xf0
[ 104.709531][ T5828] ? vscnprintf+0x5d/0x90
[ 104.711172][ T5828] panic+0x349/0x880
[ 104.712704][ T5828] ? check_panic_on_warn+0x21/0xb0
[ 104.714516][ T5828] ? __pfx_panic+0x10/0x10
[ 104.716160][ T5828] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 104.718501][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 104.720931][ T5828] ? print_report+0x502/0x550
[ 104.722683][ T5828] check_panic_on_warn+0x86/0xb0
[ 104.724727][ T5828] ? __ocfs2_find_path+0x203/0x7e0
[ 104.726674][ T5828] end_report+0x77/0x160
[ 104.728258][ T5828] kasan_report+0x154/0x180
[ 104.729958][ T5828] ? __ocfs2_find_path+0x203/0x7e0
[ 104.731866][ T5828] __ocfs2_find_path+0x203/0x7e0
[ 104.733834][ T5828] ? __pfx_find_leaf_ins+0x10/0x10
[ 104.735743][ T5828] ? __pfx___ocfs2_find_path+0x10/0x10
[ 104.737741][ T5828] ? __pfx_ocfs2_validate_inode_block+0x10/0x10
[ 104.740060][ T5828] ocfs2_find_leaf+0xcf/0x230
[ 104.741797][ T5828] ? __pfx_ocfs2_find_leaf+0x10/0x10
[ 104.743805][ T5828] ? __pfx_ocfs2_validate_inode_block+0x10/0x10
[ 104.746118][ T5828] ocfs2_get_clusters_nocache+0x1ad/0xbf0
[ 104.748309][ T5828] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10
[ 104.750615][ T5828] ? ocfs2_read_inode_block+0x14c/0x1e0
[ 104.752713][ T5828] ? __pfx_ocfs2_read_inode_block+0x10/0x10
[ 104.754910][ T5828] ? do_raw_spin_unlock+0x58/0x8b0
[ 104.756830][ T5828] ? lock_release+0xbf/0xa30
[ 104.758562][ T5828] ocfs2_get_clusters+0x5bd/0xbd0
[ 104.760447][ T5828] ? sched_clock+0x4a/0x70
[ 104.762140][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.763951][ T5828] ? __pfx_ocfs2_get_clusters+0x10/0x10
[ 104.765997][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.767918][ T5828] ? lock_acquire+0xe3/0x550
[ 104.769680][ T5828] ? __pfx_lock_acquire+0x10/0x10
[ 104.771666][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.773497][ T5828] ? __switch_to+0xe93/0x1c30
[ 104.775253][ T5828] ocfs2_extent_map_get_blocks+0x24c/0x7d0
[ 104.777438][ T5828] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10
[ 104.779787][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.781612][ T5828] ? lock_release+0xbf/0xa30
[ 104.783423][ T5828] ocfs2_read_virt_blocks+0x313/0xb10
[ 104.785422][ T5828] ? do_raw_spin_unlock+0x58/0x8b0
[ 104.787336][ T5828] ? __pfx_ocfs2_validate_dir_block+0x10/0x10
[ 104.790008][ T5828] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10
[ 104.792813][ T5828] ? __pfx_number+0x10/0x10
[ 104.794673][ T5828] ? string+0x26a/0x2b0
[ 104.796324][ T5828] ? widen_string+0x3a/0x310
[ 104.798101][ T5828] ocfs2_find_entry+0x43b/0x2730
[ 104.799913][ T5828] ? __pfx_ocfs2_find_entry+0x10/0x10
[ 104.801898][ T5828] ? __asan_memset+0x23/0x50
[ 104.803621][ T5828] ? lockdep_init_map_type+0xa1/0x910
[ 104.805653][ T5828] ? schedule+0x90/0x320
[ 104.807224][ T5828] ? do_raw_spin_unlock+0x58/0x8b0
[ 104.809178][ T5828] ? set_normalized_timespec64+0x119/0x1e0
[ 104.811440][ T5828] ? ocfs2_lock_res_init_common+0x32a/0x430
[ 104.813746][ T5828] ? format_decode+0xc5f/0x1bb0
[ 104.815718][ T5828] ? __pfx_format_decode+0x10/0x10
[ 104.817706][ T5828] ? __mutex_trylock_common+0x183/0x2e0
[ 104.819820][ T5828] ? __pfx___might_resched+0x10/0x10
[ 104.821849][ T5828] ? string+0x26a/0x2b0
[ 104.823351][ T5828] ? widen_string+0x3a/0x310
[ 104.825125][ T5828] ? string+0x26a/0x2b0
[ 104.826688][ T5828] ? vsnprintf+0x1ccd/0x1da0
[ 104.828494][ T5828] ocfs2_find_files_on_disk+0xff/0x360
[ 104.830634][ T5828] ocfs2_lookup_ino_from_name+0xb1/0x1e0
[ 104.832813][ T5828] ? __pfx_ocfs2_lookup_ino_from_name+0x10/0x10
[ 104.835223][ T5828] ? kasan_save_track+0x51/0x80
[ 104.837164][ T5828] ? kasan_save_track+0x3f/0x80
[ 104.838975][ T5828] ? __kasan_kmalloc+0x98/0xb0
[ 104.840784][ T5828] ? ocfs2_new_dlm_debug+0x97/0x200
[ 104.842781][ T5828] ocfs2_get_system_file_inode+0x305/0x7b0
[ 104.845056][ T5828] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10
[ 104.847503][ T5828] ocfs2_init_global_system_inodes+0x32c/0x730
[ 104.849812][ T5828] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10
[ 104.852353][ T5828] ? __kmalloc_cache_noprof+0x243/0x390
[ 104.854423][ T5828] ? ocfs2_new_dlm_debug+0x97/0x200
[ 104.856472][ T5828] ? ocfs2_new_dlm_debug+0xb5/0x200
[ 104.858434][ T5828] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10
[ 104.860562][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.862442][ T5828] ? trace_ocfs2_initialize_super+0x9e/0x230
[ 104.864796][ T5828] ocfs2_fill_super+0x2f5b/0x5760
[ 104.866713][ T5828] ? __pfx_ocfs2_fill_super+0x10/0x10
[ 104.868764][ T5828] ? stack_trace_save+0x118/0x1d0
[ 104.870659][ T5828] ? unwind_next_frame+0x18e6/0x22d0
[ 104.872678][ T5828] ? deref_stack_reg+0x17c/0x210
[ 104.874617][ T5828] ? preempt_count_add+0x93/0x190
[ 104.876559][ T5828] ? is_bpf_text_address+0x285/0x2a0
[ 104.878576][ T5828] ? is_bpf_text_address+0x26/0x2a0
[ 104.880571][ T5828] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 104.882942][ T5828] ? kernel_text_address+0xa7/0xe0
[ 104.884938][ T5828] ? __kernel_text_address+0xd/0x40
[ 104.886927][ T5828] ? unwind_get_return_address+0x4d/0x90
[ 104.889059][ T5828] ? arch_stack_walk+0xfd/0x150
[ 104.890946][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.892791][ T5828] ? lock_acquire+0xe3/0x550
[ 104.894554][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.896359][ T5828] ? lock_release+0xbf/0xa30
[ 104.898126][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.900027][ T5828] ? lock_acquire+0xe3/0x550
[ 104.901804][ T5828] ? string+0x26a/0x2b0
[ 104.903503][ T5828] ? widen_string+0x3a/0x310
[ 104.905175][ T5828] ? string+0x26a/0x2b0
[ 104.906677][ T5828] ? bdev_name+0x2b1/0x3c0
[ 104.908348][ T5828] ? pointer+0x703/0x1210
[ 104.909956][ T5828] ? __pfx_pointer+0x10/0x10
[ 104.911704][ T5828] ? __pfx_format_decode+0x10/0x10
[ 104.913621][ T5828] ? __mutex_unlock_slowpath+0x21e/0x790
[ 104.915811][ T5828] ? vsnprintf+0x1ccd/0x1da0
[ 104.917578][ T5828] ? snprintf+0xda/0x120
[ 104.919137][ T5828] ? __pfx_lock_release+0x10/0x10
[ 104.921066][ T5828] ? do_raw_spin_lock+0x14f/0x370
[ 104.922979][ T5828] ? __pfx_snprintf+0x10/0x10
[ 104.924630][ T5828] ? set_blocksize+0x1fc/0x360
[ 104.926458][ T5828] ? sb_set_blocksize+0x98/0xf0
[ 104.928304][ T5828] ? setup_bdev_super+0x4e6/0x5d0
[ 104.930192][ T5828] mount_bdev+0x20a/0x2d0
[ 104.931882][ T5828] ? __pfx_ocfs2_fill_super+0x10/0x10
[ 104.934097][ T5828] ? __pfx_mount_bdev+0x10/0x10
[ 104.935948][ T5828] ? vfs_parse_fs_string+0x190/0x230
[ 104.938201][ T5828] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 104.940113][ T5828] legacy_get_tree+0xee/0x190
[ 104.941907][ T5828] ? __pfx_ocfs2_mount+0x10/0x10
[ 104.943855][ T5828] vfs_get_tree+0x90/0x2b0
[ 104.945560][ T5828] do_new_mount+0x2be/0xb40
[ 104.947204][ T5828] ? __pfx_do_new_mount+0x10/0x10
[ 104.949046][ T5828] __se_sys_mount+0x2d6/0x3c0
[ 104.950780][ T5828] ? __pfx___se_sys_mount+0x10/0x10
[ 104.952812][ T5828] ? rcu_is_watching+0x15/0xb0
[ 104.954613][ T5828] ? __x64_sys_mount+0x20/0xc0
[ 104.956440][ T5828] do_syscall_64+0xf3/0x230
[ 104.958135][ T5828] ? clear_bhb_loop+0x35/0x90
[ 104.959941][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 104.962157][ T5828] RIP: 0033:0x7fd0e47816ba
[ 104.963938][ T5828] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 104.971311][ T5828] RSP: 002b:00007fd0e5572e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 104.974345][ T5828] RAX: ffffffffffffffda RBX: 00007fd0e5572f10 RCX: 00007fd0e47816ba
[ 104.977364][ T5828] RDX: 0000000020004440 RSI: 0000000020000780 RDI: 00007fd0e5572ed0
[ 104.980425][ T5828] RBP: 0000000020004440 R08: 00007fd0e5572f10 R09: 0000000001000000
[ 104.983363][ T5828] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020000780
[ 104.986330][ T5828] R13: 00007fd0e5572ed0 R14: 000000000000444a R15: 00000000200005c0
[ 104.989356][ T5828]
[ 104.990841][ T5828] Kernel Offset: disabled
[ 104.992567][ T5828] Rebooting in 86400 seconds..