Warning: Permanently added '[localhost]:29027' (ED25519) to the list of known hosts. 2025/12/11 09:38:22 parsed 1 programs syzkaller login: [ 89.658637][ T5322] cgroup: Unknown subsys name 'net' [ 89.734636][ T5322] cgroup: Unknown subsys name 'cpuset' [ 89.740049][ T5322] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.907651][ T5322] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.951024][ T787] cfg80211: failed to load regulatory.db [ 97.199966][ T5340] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.830117][ T5352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.834530][ T5352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.838196][ T5352] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.843435][ T5352] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.846885][ T5352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.546636][ T121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.550363][ T121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.593141][ T2687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.597794][ T2687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.230862][ T5402] chnl_net:caif_netlink_parms(): no params data found [ 103.393849][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.401673][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.405418][ T5402] bridge_slave_0: entered allmulticast mode [ 103.415837][ T5402] bridge_slave_0: entered promiscuous mode [ 103.433528][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.436770][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.439901][ T5402] bridge_slave_1: entered allmulticast mode [ 103.451650][ T5402] bridge_slave_1: entered promiscuous mode [ 103.494500][ T5402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.514133][ T5402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.562737][ T5402] team0: Port device team_slave_0 added [ 103.567081][ T5402] team0: Port device team_slave_1 added [ 103.615746][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.621482][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.651774][ T5402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.661601][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.664727][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.701811][ T5402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.774847][ T5402] hsr_slave_0: entered promiscuous mode [ 103.778370][ T5402] hsr_slave_1: entered promiscuous mode [ 104.077893][ T5402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.099791][ T5402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.116370][ T5402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.123684][ T5402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.184888][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.188394][ T5402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.192975][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.196209][ T5402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.223433][ T2687] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.228187][ T2687] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.316314][ T5402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.348996][ T5402] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.367620][ T2687] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.371019][ T2687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.392439][ T2687] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.395605][ T2687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.449470][ T5402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.469078][ T5402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.639831][ T5402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.675548][ T5402] veth0_vlan: entered promiscuous mode [ 104.684567][ T5402] veth1_vlan: entered promiscuous mode [ 104.710122][ T5402] veth0_macvtap: entered promiscuous mode [ 104.716608][ T5402] veth1_macvtap: entered promiscuous mode [ 104.730745][ T5402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.742379][ T5402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.758958][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.769401][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.781937][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.785602][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.014795][ T2687] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.262637][ T2687] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.417251][ T2687] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.494900][ T2687] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/11 09:38:42 executed programs: 0 [ 106.865736][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.869841][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.875973][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.879657][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.884040][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.054517][ T5435] chnl_net:caif_netlink_parms(): no params data found [ 107.165256][ T5435] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.168655][ T5435] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.172563][ T5435] bridge_slave_0: entered allmulticast mode [ 107.176762][ T5435] bridge_slave_0: entered promiscuous mode [ 107.182120][ T5435] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.186345][ T5435] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.189712][ T5435] bridge_slave_1: entered allmulticast mode [ 107.194490][ T5435] bridge_slave_1: entered promiscuous mode [ 107.224018][ T5435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.230786][ T5435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.257031][ T5435] team0: Port device team_slave_0 added [ 107.262233][ T5435] team0: Port device team_slave_1 added [ 107.285835][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.289007][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.301063][ T5435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.308194][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.311814][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.324012][ T5435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.363903][ T5435] hsr_slave_0: entered promiscuous mode [ 107.367368][ T5435] hsr_slave_1: entered promiscuous mode [ 107.370600][ T5435] debugfs: 'hsr0' already exists in 'hsr' [ 107.373907][ T5435] Cannot create hsr debugfs directory [ 107.558169][ T2687] bridge_slave_1: left allmulticast mode [ 107.560977][ T2687] bridge_slave_1: left promiscuous mode [ 107.566416][ T2687] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.574657][ T2687] bridge_slave_0: left allmulticast mode [ 107.576998][ T2687] bridge_slave_0: left promiscuous mode [ 107.579651][ T2687] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.783145][ T2687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.789456][ T2687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.794753][ T2687] bond0 (unregistering): Released all slaves [ 107.863676][ T2687] hsr_slave_0: left promiscuous mode [ 107.866811][ T2687] hsr_slave_1: left promiscuous mode [ 107.870358][ T2687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.874567][ T2687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.878603][ T2687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.883448][ T2687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.895217][ T2687] veth1_macvtap: left promiscuous mode [ 107.898094][ T2687] veth0_macvtap: left promiscuous mode [ 107.900660][ T2687] veth1_vlan: left promiscuous mode [ 107.903342][ T2687] veth0_vlan: left promiscuous mode [ 108.277442][ T2687] team0 (unregistering): Port device team_slave_1 removed [ 108.302800][ T2687] team0 (unregistering): Port device team_slave_0 removed [ 108.902203][ T46] Bluetooth: hci0: command tx timeout [ 109.273829][ T5435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.302817][ T5435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.323532][ T5435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.349879][ T5435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.510904][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.539383][ T5435] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.565315][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.568442][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.603563][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.606894][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.813255][ T5435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.854162][ T5435] veth0_vlan: entered promiscuous mode [ 109.866956][ T5435] veth1_vlan: entered promiscuous mode [ 109.894027][ T5435] veth0_macvtap: entered promiscuous mode [ 109.900985][ T5435] veth1_macvtap: entered promiscuous mode [ 109.917014][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.927963][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.939197][ T2687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.948057][ T2687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.957204][ T2687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.969072][ T2687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.055051][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.058954][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.097477][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.100933][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.408780][ T5467] loop0: detected capacity change from 0 to 32768 [ 110.488111][ T5467] ------------[ cut here ]------------ [ 110.490414][ T5467] UBSAN: array-index-out-of-bounds in fs/ocfs2/alloc.c:1838:11 [ 110.511465][ T5467] index 0 is out of range for type 'struct ocfs2_extent_rec[] __counted_by(l_count)' (aka 'struct ocfs2_extent_rec[]') [ 110.517952][ T5467] CPU: 0 UID: 0 PID: 5467 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 110.517975][ T5467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.517981][ T5467] Call Trace: [ 110.517987][ T5467] [ 110.517992][ T5467] dump_stack_lvl+0x189/0x250 [ 110.518099][ T5467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.518107][ T5467] ? __pfx__printk+0x10/0x10 [ 110.518121][ T5467] ubsan_epilogue+0xa/0x40 [ 110.518130][ T5467] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 110.518174][ T5467] __ocfs2_find_path+0x606/0xa40 [ 110.518191][ T5467] ? __pfx_find_leaf_ins+0x10/0x10 [ 110.518203][ T5467] ? __pfx___ocfs2_find_path+0x10/0x10 [ 110.518217][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.518232][ T5467] ? ocfs2_read_blocks+0x1196/0x1490 [ 110.518247][ T5467] ocfs2_find_leaf+0xab/0x1c0 [ 110.518260][ T5467] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 110.518271][ T5467] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 110.518290][ T5467] ocfs2_get_clusters_nocache+0x172/0xc60 [ 110.518323][ T5467] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 110.518338][ T5467] ? ocfs2_read_inode_block+0x14c/0x1c0 [ 110.518352][ T5467] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 110.518366][ T5467] ? do_raw_spin_unlock+0x4d/0x240 [ 110.518385][ T5467] ocfs2_get_clusters+0x505/0xa70 [ 110.518407][ T5467] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 110.518427][ T5467] ? ocfs2_read_virt_blocks+0x248/0x930 [ 110.518444][ T5467] ? __kasan_check_byte+0x12/0x40 [ 110.518461][ T5467] ocfs2_extent_map_get_blocks+0x202/0x6a0 [ 110.518480][ T5467] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 110.518494][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.518505][ T5467] ? __kasan_check_byte+0x12/0x40 [ 110.518520][ T5467] ocfs2_read_virt_blocks+0x286/0x930 [ 110.518537][ T5467] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 110.518557][ T5467] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 110.518571][ T5467] ? __kernel_text_address+0xd/0x40 [ 110.518584][ T5467] ? unwind_get_return_address+0x4d/0x90 [ 110.518596][ T5467] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 110.518607][ T5467] ? arch_stack_walk+0xfc/0x150 [ 110.518627][ T5467] ocfs2_find_entry+0x3e4/0x2090 [ 110.518649][ T5467] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 110.518667][ T5467] ? __mutex_trylock_common+0x153/0x260 [ 110.518677][ T5467] ? __pfx___mutex_trylock_common+0x10/0x10 [ 110.518688][ T5467] ? format_decode+0x60f/0xe10 [ 110.518742][ T5467] ? string+0x279/0x2b0 [ 110.518751][ T5467] ? widen_string+0x3b/0x2a0 [ 110.518761][ T5467] ? string+0x279/0x2b0 [ 110.518772][ T5467] ? vsnprintf+0xdf1/0xee0 [ 110.518795][ T5467] ocfs2_find_files_on_disk+0xdf/0x310 [ 110.518813][ T5467] ocfs2_lookup_ino_from_name+0x52/0x100 [ 110.518833][ T5467] ocfs2_get_system_file_inode+0x326/0x770 [ 110.518849][ T5467] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 110.518880][ T5467] ocfs2_init_global_system_inodes+0x319/0x660 [ 110.518901][ T5467] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 110.518915][ T5467] ? ocfs2_new_dlm_debug+0x96/0x1e0 [ 110.518926][ T5467] ? __pfx_snprintf+0x10/0x10 [ 110.518939][ T5467] ? ocfs2_new_dlm_debug+0xb4/0x1e0 [ 110.518951][ T5467] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 110.518970][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.518983][ T5467] ? trace_ocfs2_initialize_super+0x8b/0x1e0 [ 110.519001][ T5467] ocfs2_fill_super+0x2ab4/0x63a0 [ 110.519027][ T5467] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 110.519040][ T5467] ? __kasan_check_byte+0x12/0x40 [ 110.519050][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 110.519065][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 110.519075][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.519086][ T5467] ? __kasan_check_byte+0x12/0x40 [ 110.519096][ T5467] ? is_bpf_text_address+0x26/0x2b0 [ 110.519106][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.519116][ T5467] ? __kasan_check_byte+0x12/0x40 [ 110.519129][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.519142][ T5467] ? lock_release+0x4b/0x3b0 [ 110.519152][ T5467] ? lock_release+0x4b/0x3b0 [ 110.519168][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 110.519179][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.519191][ T5467] ? __kasan_check_byte+0x12/0x40 [ 110.519202][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 110.519215][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 110.519227][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.519239][ T5467] ? __kasan_check_byte+0x12/0x40 [ 110.519250][ T5467] ? is_bpf_text_address+0x26/0x2b0 [ 110.519258][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.519271][ T5467] ? __kasan_check_byte+0x12/0x40 [ 110.519283][ T5467] ? rcu_is_watching+0x15/0xb0 [ 110.519298][ T5467] ? lock_release+0x4b/0x3b0 [ 110.519308][ T5467] ? lock_release+0x4b/0x3b0 [ 110.519324][ T5467] ? is_bpf_text_address+0x292/0x2b0 [ 110.519333][ T5467] ? is_bpf_text_address+0x26/0x2b0 [ 110.519346][ T5467] ? kernel_text_address+0xa5/0xe0 [ 110.519363][ T5467] ? __kernel_text_address+0xd/0x40 [ 110.519379][ T5467] ? unwind_get_return_address+0x4d/0x90 [ 110.519392][ T5467] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 110.519402][ T5467] ? arch_stack_walk+0xfc/0x150 [ 110.519416][ T5467] ? __bfs+0x154/0x290 [ 110.519427][ T5467] ? __pfx_hlock_conflict+0x10/0x10 [ 110.519443][ T5467] ? __bfs+0x154/0x290 [ 110.519453][ T5467] ? __pfx_hlock_conflict+0x10/0x10 [ 110.519471][ T5467] ? check_path+0x21/0x40 [ 110.519483][ T5467] ? check_noncircular+0xda/0x150 [ 110.519500][ T5467] ? lockdep_unlock+0x89/0x120 [ 110.519510][ T5467] ? __lock_acquire+0x146f/0x2cf0 [ 110.519539][ T5467] ? __mutex_trylock_common+0x153/0x260 [ 110.519556][ T5467] ? __pfx___mutex_trylock_common+0x10/0x10 [ 110.519569][ T5467] ? string+0x279/0x2b0 [ 110.519579][ T5467] ? widen_string+0x3b/0x2a0 [ 110.519588][ T5467] ? string+0x279/0x2b0 [ 110.519600][ T5467] ? bdev_name+0x2ce/0x430 [ 110.519611][ T5467] ? trace_contention_end+0x39/0x100 [ 110.519627][ T5467] ? pointer+0x5f2/0x1170 [ 110.519642][ T5467] ? __pfx_pointer+0x10/0x10 [ 110.519656][ T5467] ? format_decode+0x60f/0xe10 [ 110.519680][ T5467] ? snprintf+0xda/0x120 [ 110.519695][ T5467] ? __pfx_snprintf+0x10/0x10 [ 110.519704][ T5467] ? set_blocksize+0x21e/0x500 [ 110.519731][ T5467] ? sb_set_blocksize+0x155/0x240 [ 110.519746][ T5467] ? setup_bdev_super+0x4c1/0x5b0 [ 110.519763][ T5467] get_tree_bdev_flags+0x40e/0x4d0 [ 110.519778][ T5467] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 110.519794][ T5467] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 110.519815][ T5467] vfs_get_tree+0x92/0x2a0 [ 110.519832][ T5467] do_new_mount+0x302/0xa10 [ 110.519858][ T5467] ? apparmor_capable+0x137/0x1a0 [ 110.519875][ T5467] ? __pfx_do_new_mount+0x10/0x10 [ 110.519886][ T5467] ? ns_capable+0x8a/0xf0 [ 110.519899][ T5467] ? kmem_cache_free+0x197/0x620 [ 110.519920][ T5467] __se_sys_mount+0x313/0x410 [ 110.519935][ T5467] ? __pfx___se_sys_mount+0x10/0x10 [ 110.519949][ T5467] ? do_syscall_64+0xbe/0xf80 [ 110.519969][ T5467] ? __x64_sys_mount+0x20/0xc0 [ 110.519981][ T5467] do_syscall_64+0xfa/0xf80 [ 110.519997][ T5467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.520007][ T5467] ? clear_bhb_loop+0x60/0xb0 [ 110.520020][ T5467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.520030][ T5467] RIP: 0033:0x7f9f8e990f6a [ 110.520042][ T5467] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.520051][ T5467] RSP: 002b:00007ffe346ec368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.520064][ T5467] RAX: ffffffffffffffda RBX: 00007ffe346ec3f0 RCX: 00007f9f8e990f6a [ 110.520071][ T5467] RDX: 0000200000004440 RSI: 0000200000000340 RDI: 00007ffe346ec3b0 [ 110.520077][ T5467] RBP: 0000200000004440 R08: 00007ffe346ec3f0 R09: 0000000000004000 [ 110.520084][ T5467] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000000340 [ 110.520090][ T5467] R13: 00007ffe346ec3b0 R14: 0000000000004463 R15: 0000200000000300 [ 110.520109][ T5467] [ 110.520114][ T5467] ---[ end trace ]--- [ 110.983493][ T46] Bluetooth: hci0: command tx timeout [ 110.985960][ T5467] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 110.988695][ T5467] CPU: 0 UID: 0 PID: 5467 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 110.992178][ T5467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.996721][ T5467] Call Trace: [ 110.998301][ T5467] [ 110.999696][ T5467] dump_stack_lvl+0x99/0x250 [ 111.001901][ T5467] ? __asan_memcpy+0x40/0x70 [ 111.004026][ T5467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.006351][ T5467] ? __pfx__printk+0x10/0x10 [ 111.008383][ T5467] vpanic+0x237/0x6d0 [ 111.010243][ T5467] ? __pfx_vpanic+0x10/0x10 [ 111.012346][ T5467] panic+0xb9/0xc0 [ 111.014079][ T5467] ? __pfx_panic+0x10/0x10 [ 111.016031][ T5467] ? __pfx__printk+0x10/0x10 [ 111.018149][ T5467] check_panic_on_warn+0x89/0xb0 [ 111.020479][ T5467] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 111.023085][ T5467] __ocfs2_find_path+0x606/0xa40 [ 111.025286][ T5467] ? __pfx_find_leaf_ins+0x10/0x10 [ 111.027626][ T5467] ? __pfx___ocfs2_find_path+0x10/0x10 [ 111.030072][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.032111][ T5467] ? ocfs2_read_blocks+0x1196/0x1490 [ 111.034397][ T5467] ocfs2_find_leaf+0xab/0x1c0 [ 111.036463][ T5467] ? __pfx_ocfs2_find_leaf+0x10/0x10 [ 111.038745][ T5467] ? __pfx_ocfs2_validate_inode_block+0x10/0x10 [ 111.041418][ T5467] ocfs2_get_clusters_nocache+0x172/0xc60 [ 111.043947][ T5467] ? __pfx_ocfs2_get_clusters_nocache+0x10/0x10 [ 111.046852][ T5467] ? ocfs2_read_inode_block+0x14c/0x1c0 [ 111.049415][ T5467] ? __pfx_ocfs2_read_inode_block+0x10/0x10 [ 111.052093][ T5467] ? do_raw_spin_unlock+0x4d/0x240 [ 111.054485][ T5467] ocfs2_get_clusters+0x505/0xa70 [ 111.056839][ T5467] ? __pfx_ocfs2_get_clusters+0x10/0x10 [ 111.059449][ T5467] ? ocfs2_read_virt_blocks+0x248/0x930 [ 111.061948][ T5467] ? __kasan_check_byte+0x12/0x40 [ 111.064286][ T5467] ocfs2_extent_map_get_blocks+0x202/0x6a0 [ 111.066821][ T5467] ? __pfx_ocfs2_extent_map_get_blocks+0x10/0x10 [ 111.069886][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.072250][ T5467] ? __kasan_check_byte+0x12/0x40 [ 111.074407][ T5467] ocfs2_read_virt_blocks+0x286/0x930 [ 111.076850][ T5467] ? __pfx_ocfs2_validate_dir_block+0x10/0x10 [ 111.079466][ T5467] ? __pfx_ocfs2_read_virt_blocks+0x10/0x10 [ 111.082025][ T5467] ? __kernel_text_address+0xd/0x40 [ 111.084416][ T5467] ? unwind_get_return_address+0x4d/0x90 [ 111.086776][ T5467] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.089189][ T5467] ? arch_stack_walk+0xfc/0x150 [ 111.091158][ T5467] ocfs2_find_entry+0x3e4/0x2090 [ 111.093360][ T5467] ? __pfx_ocfs2_find_entry+0x10/0x10 [ 111.095848][ T5467] ? __mutex_trylock_common+0x153/0x260 [ 111.098344][ T5467] ? __pfx___mutex_trylock_common+0x10/0x10 [ 111.101011][ T5467] ? format_decode+0x60f/0xe10 [ 111.103114][ T5467] ? string+0x279/0x2b0 [ 111.104983][ T5467] ? widen_string+0x3b/0x2a0 [ 111.107038][ T5467] ? string+0x279/0x2b0 [ 111.108912][ T5467] ? vsnprintf+0xdf1/0xee0 [ 111.110898][ T5467] ocfs2_find_files_on_disk+0xdf/0x310 [ 111.113358][ T5467] ocfs2_lookup_ino_from_name+0x52/0x100 [ 111.115893][ T5467] ocfs2_get_system_file_inode+0x326/0x770 [ 111.118527][ T5467] ? __pfx_ocfs2_get_system_file_inode+0x10/0x10 [ 111.121296][ T5467] ocfs2_init_global_system_inodes+0x319/0x660 [ 111.123966][ T5467] ? __pfx_ocfs2_init_global_system_inodes+0x10/0x10 [ 111.127080][ T5467] ? ocfs2_new_dlm_debug+0x96/0x1e0 [ 111.129355][ T5467] ? __pfx_snprintf+0x10/0x10 [ 111.131342][ T5467] ? ocfs2_new_dlm_debug+0xb4/0x1e0 [ 111.133624][ T5467] ? __pfx_ocfs2_new_dlm_debug+0x10/0x10 [ 111.136091][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.138250][ T5467] ? trace_ocfs2_initialize_super+0x8b/0x1e0 [ 111.140950][ T5467] ocfs2_fill_super+0x2ab4/0x63a0 [ 111.143170][ T5467] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 111.145693][ T5467] ? __kasan_check_byte+0x12/0x40 [ 111.147962][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 111.150315][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 111.152671][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.154897][ T5467] ? __kasan_check_byte+0x12/0x40 [ 111.157088][ T5467] ? is_bpf_text_address+0x26/0x2b0 [ 111.159360][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.161476][ T5467] ? __kasan_check_byte+0x12/0x40 [ 111.163614][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.165735][ T5467] ? lock_release+0x4b/0x3b0 [ 111.167719][ T5467] ? lock_release+0x4b/0x3b0 [ 111.169744][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 111.172024][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.174204][ T5467] ? __kasan_check_byte+0x12/0x40 [ 111.176464][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 111.178705][ T5467] ? unwind_next_frame+0xa5/0x2390 [ 111.181528][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.183929][ T5467] ? __kasan_check_byte+0x12/0x40 [ 111.186285][ T5467] ? is_bpf_text_address+0x26/0x2b0 [ 111.188595][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.190665][ T5467] ? __kasan_check_byte+0x12/0x40 [ 111.192845][ T5467] ? rcu_is_watching+0x15/0xb0 [ 111.195028][ T5467] ? lock_release+0x4b/0x3b0 [ 111.197162][ T5467] ? lock_release+0x4b/0x3b0 [ 111.199293][ T5467] ? is_bpf_text_address+0x292/0x2b0 [ 111.201765][ T5467] ? is_bpf_text_address+0x26/0x2b0 [ 111.204072][ T5467] ? kernel_text_address+0xa5/0xe0 [ 111.206517][ T5467] ? __kernel_text_address+0xd/0x40 [ 111.208917][ T5467] ? unwind_get_return_address+0x4d/0x90 [ 111.211389][ T5467] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 111.214147][ T5467] ? arch_stack_walk+0xfc/0x150 [ 111.216418][ T5467] ? __bfs+0x154/0x290 [ 111.218251][ T5467] ? __pfx_hlock_conflict+0x10/0x10 [ 111.220687][ T5467] ? __bfs+0x154/0x290 [ 111.222521][ T5467] ? __pfx_hlock_conflict+0x10/0x10 [ 111.224804][ T5467] ? check_path+0x21/0x40 [ 111.226781][ T5467] ? check_noncircular+0xda/0x150 [ 111.229122][ T5467] ? lockdep_unlock+0x89/0x120 [ 111.231327][ T5467] ? __lock_acquire+0x146f/0x2cf0 [ 111.233700][ T5467] ? __mutex_trylock_common+0x153/0x260 [ 111.236260][ T5467] ? __pfx___mutex_trylock_common+0x10/0x10 [ 111.239007][ T5467] ? string+0x279/0x2b0 [ 111.240869][ T5467] ? widen_string+0x3b/0x2a0 [ 111.242922][ T5467] ? string+0x279/0x2b0 [ 111.244795][ T5467] ? bdev_name+0x2ce/0x430 [ 111.246799][ T5467] ? trace_contention_end+0x39/0x100 [ 111.249214][ T5467] ? pointer+0x5f2/0x1170 [ 111.251217][ T5467] ? __pfx_pointer+0x10/0x10 [ 111.253404][ T5467] ? format_decode+0x60f/0xe10 [ 111.255527][ T5467] ? snprintf+0xda/0x120 [ 111.257452][ T5467] ? __pfx_snprintf+0x10/0x10 [ 111.259629][ T5467] ? set_blocksize+0x21e/0x500 [ 111.261777][ T5467] ? sb_set_blocksize+0x155/0x240 [ 111.264040][ T5467] ? setup_bdev_super+0x4c1/0x5b0 [ 111.266399][ T5467] get_tree_bdev_flags+0x40e/0x4d0 [ 111.268755][ T5467] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 111.271214][ T5467] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 111.273752][ T5467] vfs_get_tree+0x92/0x2a0 [ 111.275819][ T5467] do_new_mount+0x302/0xa10 [ 111.277896][ T5467] ? apparmor_capable+0x137/0x1a0 [ 111.280191][ T5467] ? __pfx_do_new_mount+0x10/0x10 [ 111.282528][ T5467] ? ns_capable+0x8a/0xf0 [ 111.284543][ T5467] ? kmem_cache_free+0x197/0x620 [ 111.286713][ T5467] __se_sys_mount+0x313/0x410 [ 111.288759][ T5467] ? __pfx___se_sys_mount+0x10/0x10 [ 111.291106][ T5467] ? do_syscall_64+0xbe/0xf80 [ 111.293306][ T5467] ? __x64_sys_mount+0x20/0xc0 [ 111.295534][ T5467] do_syscall_64+0xfa/0xf80 [ 111.297681][ T5467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.300471][ T5467] ? clear_bhb_loop+0x60/0xb0 [ 111.302715][ T5467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.305193][ T5467] RIP: 0033:0x7f9f8e990f6a [ 111.307113][ T5467] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.315323][ T5467] RSP: 002b:00007ffe346ec368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.319111][ T5467] RAX: ffffffffffffffda RBX: 00007ffe346ec3f0 RCX: 00007f9f8e990f6a [ 111.322675][ T5467] RDX: 0000200000004440 RSI: 0000200000000340 RDI: 00007ffe346ec3b0 [ 111.326135][ T5467] RBP: 0000200000004440 R08: 00007ffe346ec3f0 R09: 0000000000004000 [ 111.329582][ T5467] R10: 0000000000004000 R11: 0000000000000246 R12: 0000200000000340 [ 111.333006][ T5467] R13: 00007ffe346ec3b0 R14: 0000000000004463 R15: 0000200000000300 [ 111.336438][ T5467] [ 111.338182][ T5467] Kernel Offset: disabled [ 111.340086][ T5467] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:38:45 Registers: info registers vcpu 0 CPU#0 RAX=1ffff11006b32008 RBX=0000000000000000 RCX=ffff888035990040 RDX=ffff888035990044 RSI=1ffff110016d1279 RDI=ffff88800b6893cd RBP=dffffc0000000000 RSP=ffffc9000126e458 R8 =ffff88800b6893cc R9 =ffff88800b6893cb R10=1ffff110016d1279 R11=ffffed1006b33cb8 R12=0000000000000000 R13=dffffc0000000000 R14=ffff888035990000 R15=ffff88800b6893c8 RIP=ffffffff849aa084 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d22f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb146d54510 CR3=00000000117e5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1ee909db 00007fff1ee909db ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1ee90ee0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff1ee90ee0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6465746365746564 203a30706f6f6c20 5d3736343554205b 5d3038373830342e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 55544d2065687420 676e697474655320 2e65636e616d726f 6672657020656874 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e6d656c626f7270 206568742065766c 6f7320646c756f77 2032333531206f74 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2055544d20656874 20676e6974746553 202e65636e616d72 6f66726570206568 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7420746361706d69 20646c756f632068 6369687720327265 79616c206e6f2064 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000