[ 86.648571][ T8] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:19938' (ED25519) to the list of known hosts. executing program [ 88.434217][ T5100] loop0: detected capacity change from 0 to 32768 [ 88.501671][ T5100] JBD2: Ignoring recovery information on journal [ 88.543888][ T5100] JBD2: Journal too short (blocks 65794-16384). [ 88.545917][ T5100] JBD2: journal reset failed [ 88.547173][ T5100] (syz-executor198,5100,0):ocfs2_journal_load:1144 ERROR: Failed to load journal! [ 88.549638][ T5100] (syz-executor198,5100,0):ocfs2_check_volume:2425 ERROR: ocfs2 journal load failed! -22 [ 88.560505][ T5100] (syz-executor198,5100,0):ocfs2_check_volume:2481 ERROR: status = -22 [ 88.563574][ T5100] (syz-executor198,5100,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 88.572020][ T5100] ================================================================== [ 88.574371][ T5100] BUG: KASAN: null-ptr-deref in jbd2_journal_update_sb_log_tail+0x19b/0x360 [ 88.576941][ T5100] Write of size 8 at addr 0000000000000000 by task syz-executor198/5100 [ 88.580055][ T5100] [ 88.580788][ T5100] CPU: 0 UID: 0 PID: 5100 Comm: syz-executor198 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 88.584285][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.587655][ T5100] Call Trace: [ 88.588892][ T5100] [ 88.590012][ T5100] dump_stack_lvl+0x241/0x360 [ 88.591806][ T5100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.593754][ T5100] ? __pfx__printk+0x10/0x10 [ 88.595420][ T5100] ? _printk+0xd5/0x120 [ 88.596758][ T5100] print_report+0xe8/0x550 [ 88.598147][ T5100] ? __virt_addr_valid+0x58/0x530 [ 88.599764][ T5100] ? jbd2_journal_update_sb_log_tail+0x19b/0x360 [ 88.602079][ T5100] kasan_report+0x143/0x180 [ 88.603779][ T5100] ? jbd2_journal_update_sb_log_tail+0x19b/0x360 [ 88.606034][ T5100] kasan_check_range+0x282/0x290 [ 88.607785][ T5100] jbd2_journal_update_sb_log_tail+0x19b/0x360 [ 88.609970][ T5100] __jbd2_update_log_tail+0x48/0x3f0 [ 88.611791][ T5100] ? jbd2_journal_get_log_tail+0x1df/0x3a0 [ 88.613851][ T5100] jbd2_cleanup_journal_tail+0x230/0x2d0 [ 88.615800][ T5100] ? __pfx_jbd2_cleanup_journal_tail+0x10/0x10 [ 88.617980][ T5100] ? do_raw_spin_unlock+0x58/0x8b0 [ 88.619552][ T5100] jbd2_journal_flush+0x290/0xc10 [ 88.621226][ T5100] ? jbd2_journal_lock_updates+0x2b4/0x380 [ 88.623194][ T5100] ? __pfx_jbd2_journal_flush+0x10/0x10 [ 88.625173][ T5100] ocfs2_journal_shutdown+0x443/0xbe0 [ 88.627216][ T5100] ? __pfx_ocfs2_journal_shutdown+0x10/0x10 [ 88.629358][ T5100] ? kfree+0x149/0x360 [ 88.630748][ T5100] ocfs2_mount_volume+0x169f/0x1940 [ 88.632643][ T5100] ? __lock_acquire+0x137a/0x2040 [ 88.634452][ T5100] ? __pfx_ocfs2_mount_volume+0x10/0x10 [ 88.636457][ T5100] ? __debugfs_create_file+0x400/0x4b0 [ 88.638369][ T5100] ? __pfx_lock_release+0x10/0x10 [ 88.639962][ T5100] ? d_instantiate+0x6f/0xa0 [ 88.641809][ T5100] ? up_write+0x1a9/0x590 [ 88.643493][ T5100] ? __pfx_up_write+0x10/0x10 [ 88.645192][ T5100] ? do_raw_spin_unlock+0x58/0x8b0 [ 88.647168][ T5100] ? __debugfs_create_file+0x400/0x4b0 [ 88.649091][ T5100] ocfs2_fill_super+0x483b/0x5880 [ 88.650852][ T5100] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 88.652711][ T5100] ? __pfx_validate_chain+0x10/0x10 [ 88.654595][ T5100] ? __pfx_validate_chain+0x10/0x10 [ 88.656312][ T5100] ? validate_chain+0x11e/0x5900 [ 88.658257][ T5100] ? __lock_acquire+0x137a/0x2040 [ 88.660248][ T5100] ? __pfx_validate_chain+0x10/0x10 [ 88.662102][ T5100] ? string+0x26a/0x2b0 [ 88.663478][ T5100] ? widen_string+0x3a/0x310 [ 88.664965][ T5100] ? string+0x26a/0x2b0 [ 88.666357][ T5100] ? bdev_name+0x2b1/0x3c0 [ 88.668079][ T5100] ? pointer+0x703/0x1210 [ 88.669725][ T5100] ? __pfx_pointer+0x10/0x10 [ 88.671564][ T5100] ? __pfx_format_decode+0x10/0x10 [ 88.673594][ T5100] ? __lock_acquire+0x137a/0x2040 [ 88.675409][ T5100] ? vsnprintf+0x1ccd/0x1da0 [ 88.677103][ T5100] ? snprintf+0xda/0x120 [ 88.678752][ T5100] ? __pfx_lock_release+0x10/0x10 [ 88.680555][ T5100] ? do_raw_spin_lock+0x14f/0x370 [ 88.682505][ T5100] ? __pfx_snprintf+0x10/0x10 [ 88.684218][ T5100] ? set_blocksize+0x1ff/0x360 [ 88.685860][ T5100] ? sb_set_blocksize+0x98/0xf0 [ 88.687611][ T5100] ? setup_bdev_super+0x4e6/0x5d0 [ 88.689384][ T5100] mount_bdev+0x20a/0x2d0 [ 88.690977][ T5100] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 88.692947][ T5100] ? __pfx_mount_bdev+0x10/0x10 [ 88.694832][ T5100] ? vfs_parse_fs_string+0x190/0x230 [ 88.696883][ T5100] legacy_get_tree+0xee/0x190 [ 88.698723][ T5100] ? __pfx_ocfs2_mount+0x10/0x10 [ 88.700685][ T5100] vfs_get_tree+0x90/0x2a0 [ 88.702479][ T5100] do_new_mount+0x2be/0xb40 [ 88.704211][ T5100] ? __pfx_do_new_mount+0x10/0x10 [ 88.706159][ T5100] __se_sys_mount+0x2d6/0x3c0 [ 88.707996][ T5100] ? __pfx___se_sys_mount+0x10/0x10 [ 88.709911][ T5100] ? do_syscall_64+0x100/0x230 [ 88.711814][ T5100] ? __x64_sys_mount+0x20/0xc0 [ 88.713726][ T5100] do_syscall_64+0xf3/0x230 [ 88.715359][ T5100] ? clear_bhb_loop+0x35/0x90 [ 88.717051][ T5100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.719175][ T5100] RIP: 0033:0x7f69037ad16a [ 88.720712][ T5100] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.727726][ T5100] RSP: 002b:00007ffed646ff58 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 88.730950][ T5100] RAX: ffffffffffffffda RBX: 00007ffed646ff70 RCX: 00007f69037ad16a [ 88.733933][ T5100] RDX: 0000000020004480 RSI: 00000000200044c0 RDI: 00007ffed646ff70 [ 88.736938][ T5100] RBP: 0000000000000004 R08: 00007ffed646ffb0 R09: 0000000000004470 [ 88.739982][ T5100] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 88.743066][ T5100] R13: 00007ffed646ffb0 R14: 0000000000000003 R15: 0000000001000000 [ 88.746121][ T5100] [ 88.747300][ T5100] ================================================================== [ 88.942171][ T5100] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.944770][ T5100] CPU: 0 UID: 0 PID: 5100 Comm: syz-executor198 Not tainted 6.11.0-rc3-syzkaller-00338-gc3f2d783a459 #0 [ 88.949132][ T5100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.953509][ T5100] Call Trace: [ 88.955037][ T5100] [ 88.956178][ T5100] dump_stack_lvl+0x241/0x360 [ 88.958276][ T5100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.960293][ T5100] ? __pfx__printk+0x10/0x10 [ 88.962126][ T5100] ? preempt_schedule+0xe1/0xf0 [ 88.964185][ T5100] ? vscnprintf+0x5d/0x90 [ 88.965990][ T5100] panic+0x349/0x860 [ 88.967286][ T5100] ? check_panic_on_warn+0x21/0xb0 [ 88.968776][ T5100] ? __pfx_panic+0x10/0x10 [ 88.970182][ T5100] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 88.972147][ T5100] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.974531][ T5100] ? print_report+0xe8/0x550 [ 88.976441][ T5100] check_panic_on_warn+0x86/0xb0 [ 88.978166][ T5100] ? jbd2_journal_update_sb_log_tail+0x19b/0x360 [ 88.980690][ T5100] end_report+0x77/0x160 [ 88.982161][ T5100] kasan_report+0x154/0x180 [ 88.983716][ T5100] ? jbd2_journal_update_sb_log_tail+0x19b/0x360 [ 88.985844][ T5100] kasan_check_range+0x282/0x290 [ 88.987362][ T5100] jbd2_journal_update_sb_log_tail+0x19b/0x360 [ 88.989443][ T5100] __jbd2_update_log_tail+0x48/0x3f0 [ 88.991304][ T5100] ? jbd2_journal_get_log_tail+0x1df/0x3a0 [ 88.993491][ T5100] jbd2_cleanup_journal_tail+0x230/0x2d0 [ 88.995576][ T5100] ? __pfx_jbd2_cleanup_journal_tail+0x10/0x10 [ 88.997894][ T5100] ? do_raw_spin_unlock+0x58/0x8b0 [ 88.999797][ T5100] jbd2_journal_flush+0x290/0xc10 [ 89.001769][ T5100] ? jbd2_journal_lock_updates+0x2b4/0x380 [ 89.004036][ T5100] ? __pfx_jbd2_journal_flush+0x10/0x10 [ 89.006244][ T5100] ocfs2_journal_shutdown+0x443/0xbe0 [ 89.008374][ T5100] ? __pfx_ocfs2_journal_shutdown+0x10/0x10 [ 89.010692][ T5100] ? kfree+0x149/0x360 [ 89.012210][ T5100] ocfs2_mount_volume+0x169f/0x1940 [ 89.014188][ T5100] ? __lock_acquire+0x137a/0x2040 [ 89.016065][ T5100] ? __pfx_ocfs2_mount_volume+0x10/0x10 [ 89.018203][ T5100] ? __debugfs_create_file+0x400/0x4b0 [ 89.020327][ T5100] ? __pfx_lock_release+0x10/0x10 [ 89.022262][ T5100] ? d_instantiate+0x6f/0xa0 [ 89.023926][ T5100] ? up_write+0x1a9/0x590 [ 89.025615][ T5100] ? __pfx_up_write+0x10/0x10 [ 89.027371][ T5100] ? do_raw_spin_unlock+0x58/0x8b0 [ 89.029336][ T5100] ? __debugfs_create_file+0x400/0x4b0 [ 89.031339][ T5100] ocfs2_fill_super+0x483b/0x5880 [ 89.033216][ T5100] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 89.035180][ T5100] ? __pfx_validate_chain+0x10/0x10 [ 89.037050][ T5100] ? __pfx_validate_chain+0x10/0x10 [ 89.038600][ T5100] ? validate_chain+0x11e/0x5900 [ 89.040256][ T5100] ? __lock_acquire+0x137a/0x2040 [ 89.042120][ T5100] ? __pfx_validate_chain+0x10/0x10 [ 89.044148][ T5100] ? string+0x26a/0x2b0 [ 89.045889][ T5100] ? widen_string+0x3a/0x310 [ 89.047838][ T5100] ? string+0x26a/0x2b0 [ 89.049661][ T5100] ? bdev_name+0x2b1/0x3c0 [ 89.051487][ T5100] ? pointer+0x703/0x1210 [ 89.053124][ T5100] ? __pfx_pointer+0x10/0x10 [ 89.054954][ T5100] ? __pfx_format_decode+0x10/0x10 [ 89.056958][ T5100] ? __lock_acquire+0x137a/0x2040 [ 89.058930][ T5100] ? vsnprintf+0x1ccd/0x1da0 [ 89.060504][ T5100] ? snprintf+0xda/0x120 [ 89.062143][ T5100] ? __pfx_lock_release+0x10/0x10 [ 89.064102][ T5100] ? do_raw_spin_lock+0x14f/0x370 [ 89.065652][ T5100] ? __pfx_snprintf+0x10/0x10 [ 89.067174][ T5100] ? set_blocksize+0x1ff/0x360 [ 89.068620][ T5100] ? sb_set_blocksize+0x98/0xf0 [ 89.070103][ T5100] ? setup_bdev_super+0x4e6/0x5d0 [ 89.071597][ T5100] mount_bdev+0x20a/0x2d0 [ 89.072919][ T5100] ? __pfx_ocfs2_fill_super+0x10/0x10 [ 89.074484][ T5100] ? __pfx_mount_bdev+0x10/0x10 [ 89.075984][ T5100] ? vfs_parse_fs_string+0x190/0x230 [ 89.077656][ T5100] legacy_get_tree+0xee/0x190 [ 89.079088][ T5100] ? __pfx_ocfs2_mount+0x10/0x10 [ 89.080614][ T5100] vfs_get_tree+0x90/0x2a0 [ 89.081995][ T5100] do_new_mount+0x2be/0xb40 [ 89.083423][ T5100] ? __pfx_do_new_mount+0x10/0x10 [ 89.085083][ T5100] __se_sys_mount+0x2d6/0x3c0 [ 89.086600][ T5100] ? __pfx___se_sys_mount+0x10/0x10 [ 89.088258][ T5100] ? do_syscall_64+0x100/0x230 [ 89.089836][ T5100] ? __x64_sys_mount+0x20/0xc0 [ 89.091373][ T5100] do_syscall_64+0xf3/0x230 [ 89.092779][ T5100] ? clear_bhb_loop+0x35/0x90 [ 89.094322][ T5100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.096340][ T5100] RIP: 0033:0x7f69037ad16a [ 89.097814][ T5100] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.104972][ T5100] RSP: 002b:00007ffed646ff58 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 89.108192][ T5100] RAX: ffffffffffffffda RBX: 00007ffed646ff70 RCX: 00007f69037ad16a [ 89.111267][ T5100] RDX: 0000000020004480 RSI: 00000000200044c0 RDI: 00007ffed646ff70 [ 89.114072][ T5100] RBP: 0000000000000004 R08: 00007ffed646ffb0 R09: 0000000000004470 [ 89.116821][ T5100] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 89.119594][ T5100] R13: 00007ffed646ffb0 R14: 0000000000000003 R15: 0000000001000000 [ 89.122440][ T5100] [ 89.123804][ T5100] Kernel Offset: disabled [ 89.125348][ T5100] Rebooting in 86400 seconds.. VM DIAGNOSIS: 11:13:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000072 RBX=ffffffff95256d40 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90000e36430 R8 =ffffffff853f053b R9 =1ffff110031bd046 R10=dffffc0000000000 R11=ffffffff853f04f0 R12=dffffc0000000000 R13=0000000000000072 R14=0000000000000072 R15=00000000000003f8 RIP=ffffffff853f056e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560f04380 ffffffff 00c00000 GS =0000 ffff888020800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdc928aa94 CR3=0000000020746000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff84fe5070 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2064616f6c206f74 2064656c69614620 3a524f5252452034 3431313a64616f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2064616566206574 2064656663614620 3052455252452034 3431313064616500 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3154202020205b20 3434333034392e20 322020205b3e362d 002e676f6520204d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120202020205120 2034203034332020 322020202034362d 0024646565202047 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 646f676f787f796b 6f672a4b47432a6f 7e6b6963667a7f4e 2a246e6f66686b79 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b5e2a2a2a2a5157 3e3e393a3e33243a 382a2a2a51343c36 00246d65662a4b47 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000