Warning: Permanently added '[localhost]:2454' (ED25519) to the list of known hosts. 2025/09/19 20:06:12 parsed 1 programs syzkaller login: [ 85.806317][ T5351] cgroup: Unknown subsys name 'net' [ 85.890689][ T5351] cgroup: Unknown subsys name 'cpuset' [ 85.895936][ T5351] cgroup: Unknown subsys name 'rlimit' [ 87.586954][ T5351] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.837800][ T10] cfg80211: failed to load regulatory.db [ 91.942508][ T5366] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.996886][ T5377] chnl_net:caif_netlink_parms(): no params data found [ 93.064126][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.068222][ T5377] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.072021][ T5377] bridge_slave_0: entered allmulticast mode [ 93.076219][ T5377] bridge_slave_0: entered promiscuous mode [ 93.084031][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.087614][ T5377] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.090522][ T5377] bridge_slave_1: entered allmulticast mode [ 93.094246][ T5377] bridge_slave_1: entered promiscuous mode [ 93.124266][ T5377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.131352][ T5377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.156292][ T5377] team0: Port device team_slave_0 added [ 93.161573][ T5377] team0: Port device team_slave_1 added [ 93.184454][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.187605][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.200251][ T5377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.206313][ T5377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.210028][ T5377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.221470][ T5377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.261238][ T5377] hsr_slave_0: entered promiscuous mode [ 93.264516][ T5377] hsr_slave_1: entered promiscuous mode [ 93.434424][ T5377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.444446][ T5377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.458381][ T5377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.464433][ T5377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.494696][ T5377] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.498038][ T5377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.501826][ T5377] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.504806][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.564527][ T5377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.580828][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.584821][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.598968][ T5377] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.608680][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.611820][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.624739][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.627808][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.856555][ T5377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.893880][ T5377] veth0_vlan: entered promiscuous mode [ 93.904158][ T5377] veth1_vlan: entered promiscuous mode [ 93.932405][ T5377] veth0_macvtap: entered promiscuous mode [ 93.939290][ T5377] veth1_macvtap: entered promiscuous mode [ 93.955980][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.965618][ T5377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.979584][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.990291][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.003665][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.019890][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.150139][ T1047] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.202871][ T1047] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.249168][ T1047] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.294062][ T1047] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.333642][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.336894][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.371659][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.375547][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.217467][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.222689][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.226237][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.230984][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.234688][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.952541][ T1047] bridge_slave_1: left allmulticast mode [ 96.955155][ T1047] bridge_slave_1: left promiscuous mode [ 96.988048][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.994927][ T1047] bridge_slave_0: left allmulticast mode [ 97.013420][ T1047] bridge_slave_0: left promiscuous mode [ 97.016306][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.479256][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.485008][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.490153][ T1047] bond0 (unregistering): Released all slaves [ 97.599582][ T1047] hsr_slave_0: left promiscuous mode [ 97.617540][ T1047] hsr_slave_1: left promiscuous mode [ 97.620081][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.622974][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.639340][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.642299][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.662274][ T1047] veth1_macvtap: left promiscuous mode [ 97.664380][ T1047] veth0_macvtap: left promiscuous mode [ 97.666239][ T1047] veth1_vlan: left promiscuous mode [ 97.676541][ T1047] veth0_vlan: left promiscuous mode [ 98.104107][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 98.121618][ T1047] team0 (unregistering): Port device team_slave_0 removed 2025/09/19 20:06:29 executed programs: 0 [ 100.474190][ T4707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.478389][ T4707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.481943][ T4707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.485842][ T4707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.492374][ T4707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.775574][ T5492] chnl_net:caif_netlink_parms(): no params data found [ 100.845367][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.848559][ T5492] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.851653][ T5492] bridge_slave_0: entered allmulticast mode [ 100.855577][ T5492] bridge_slave_0: entered promiscuous mode [ 100.864268][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.867763][ T5492] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.870725][ T5492] bridge_slave_1: entered allmulticast mode [ 100.874657][ T5492] bridge_slave_1: entered promiscuous mode [ 100.899642][ T5492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.906028][ T5492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.932138][ T5492] team0: Port device team_slave_0 added [ 100.936769][ T5492] team0: Port device team_slave_1 added [ 100.959404][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.962519][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.973988][ T5492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.980848][ T5492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.983929][ T5492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.995976][ T5492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.033002][ T5492] hsr_slave_0: entered promiscuous mode [ 101.036062][ T5492] hsr_slave_1: entered promiscuous mode [ 101.504786][ T5492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.524720][ T5492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.549767][ T5492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.555593][ T5492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.612873][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.616534][ T5492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.619850][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.622904][ T5492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.660364][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.664391][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.756979][ T5492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.808949][ T5492] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.826066][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.829086][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.848224][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.851371][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.238676][ T5492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.315134][ T5492] veth0_vlan: entered promiscuous mode [ 102.342418][ T5492] veth1_vlan: entered promiscuous mode [ 102.386594][ T5492] veth0_macvtap: entered promiscuous mode [ 102.402095][ T5492] veth1_macvtap: entered promiscuous mode [ 102.433581][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.451508][ T5492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.477340][ T1154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.481739][ T1154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.485622][ T1154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.503837][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.538614][ T4707] Bluetooth: hci0: command tx timeout [ 102.606592][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.628572][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.682520][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.686679][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.062764][ T5536] loop0: detected capacity change from 0 to 32768 [ 103.119956][ T5536] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 103.123444][ T5536] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 103.149644][ T5536] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 103.155992][ T5384] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 103.173219][ T5384] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 103.366680][ T5384] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 193ms [ 103.378687][ T5384] gfs2: fsid=syz:syz.0: jid=0: Done [ 103.381167][ T5536] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 103.675192][ T25] audit: type=1800 audit(1758312392.678:2): pid=5536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=9378 res=0 errno=0 [ 103.759719][ T5545] loop0: detected capacity change from 32768 to 64 [ 103.785265][ T5536] syz.0.17: attempt to access beyond end of device [ 103.785265][ T5536] loop0: rw=2049, sector=31108, nr_sectors = 250 limit=64 [ 103.792542][ T5536] loop0: writeback error on inode 9378, offset 6272000, sector 31108 [ 103.793468][ T5536] syz.0.17: attempt to access beyond end of device [ 103.793468][ T5536] loop0: rw=2049, sector=31360, nr_sectors = 250 limit=64 [ 103.802721][ T5536] loop0: writeback error on inode 9378, offset 6400000, sector 31360 [ 103.803499][ T5536] syz.0.17: attempt to access beyond end of device [ 103.803499][ T5536] loop0: rw=2049, sector=31612, nr_sectors = 250 limit=64 [ 103.812726][ T5536] loop0: writeback error on inode 9378, offset 6528000, sector 31612 [ 103.813471][ T5536] syz.0.17: attempt to access beyond end of device [ 103.813471][ T5536] loop0: rw=2049, sector=31864, nr_sectors = 250 limit=64 [ 103.824281][ T5536] loop0: writeback error on inode 9378, offset 6656000, sector 31864 [ 103.825054][ T5536] syz.0.17: attempt to access beyond end of device [ 103.825054][ T5536] loop0: rw=2049, sector=32116, nr_sectors = 250 limit=64 [ 103.834571][ T5536] loop0: writeback error on inode 9378, offset 6784000, sector 32116 [ 103.835359][ T5536] syz.0.17: attempt to access beyond end of device [ 103.835359][ T5536] loop0: rw=2049, sector=32368, nr_sectors = 250 limit=64 [ 103.844036][ T5536] loop0: writeback error on inode 9378, offset 6912000, sector 32368 [ 103.844267][ T5536] syz.0.17: attempt to access beyond end of device [ 103.844267][ T5536] loop0: rw=2049, sector=32620, nr_sectors = 58 limit=64 [ 103.853137][ T5536] loop0: writeback error on inode 9378, offset 7040000, sector 32620 [ 103.861859][ T5536] syz.0.17: attempt to access beyond end of device [ 103.861859][ T5536] loop0: rw=14337, sector=18756, nr_sectors = 2 limit=64 [ 103.872088][ T5536] Buffer I/O error on dev loop0, logical block 9378, lost async page write [ 103.875891][ T5536] syz.0.17: attempt to access beyond end of device [ 103.875891][ T5536] loop0: rw=14337, sector=18956, nr_sectors = 2 limit=64 [ 103.881514][ T5536] Buffer I/O error on dev loop0, logical block 9478, lost async page write [ 103.884968][ T5536] syz.0.17: attempt to access beyond end of device [ 103.884968][ T5536] loop0: rw=14337, sector=19010, nr_sectors = 2 limit=64 [ 103.890673][ T5536] Buffer I/O error on dev loop0, logical block 9505, lost async page write [ 103.894539][ T5536] Buffer I/O error on dev loop0, logical block 9631, lost async page write [ 103.898431][ T5536] Buffer I/O error on dev loop0, logical block 9757, lost async page write [ 103.901904][ T5536] Buffer I/O error on dev loop0, logical block 9883, lost async page write [ 103.905273][ T5536] Buffer I/O error on dev loop0, logical block 10009, lost async page write [ 103.908842][ T5536] Buffer I/O error on dev loop0, logical block 10135, lost async page write [ 103.912524][ T5536] Buffer I/O error on dev loop0, logical block 10261, lost async page write [ 103.916247][ T5536] Buffer I/O error on dev loop0, logical block 10387, lost async page write [ 104.192957][ T5536] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 9478, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 328 [ 104.197768][ T5536] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 104.269623][ T5545] loop0: detected capacity change from 64 to 32671 [ 104.618398][ T4707] Bluetooth: hci0: command tx timeout [ 106.699089][ T45] Bluetooth: hci0: command tx timeout [ 108.777552][ T45] Bluetooth: hci0: command tx timeout [ 109.261921][ T5536] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 109.265470][ T5536] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 109.269659][ T5536] gfs2: fsid=syz:syz.0: File system withdrawn [ 109.272200][ T5536] CPU: 0 UID: 0 PID: 5536 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 109.272215][ T5536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.272222][ T5536] Call Trace: [ 109.272228][ T5536] [ 109.272233][ T5536] dump_stack_lvl+0x189/0x250 [ 109.272346][ T5536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.272359][ T5536] ? __pfx__printk+0x10/0x10 [ 109.272375][ T5536] ? kobject_uevent_env+0x36b/0x8c0 [ 109.272429][ T5536] gfs2_withdraw+0xb30/0x1430 [ 109.272481][ T5536] ? __pfx_gfs2_withdraw+0x10/0x10 [ 109.272494][ T5536] ? __pfx_autoremove_wake_function+0x10/0x10 [ 109.272512][ T5536] ? do_raw_spin_unlock+0x4d/0x240 [ 109.272529][ T5536] ? gfs2_flush_revokes+0xf5/0x140 [ 109.272542][ T5536] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 109.272559][ T5536] revoke_lo_before_commit+0x2f/0xe60 [ 109.272585][ T5536] ? do_raw_spin_unlock+0x4d/0x240 [ 109.272598][ T5536] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 109.272615][ T5536] gfs2_log_flush+0xb88/0x24c0 [ 109.272642][ T5536] ? __pfx_gfs2_log_flush+0x10/0x10 [ 109.272660][ T5536] ? do_raw_spin_unlock+0x4d/0x240 [ 109.272677][ T5536] gfs2_inplace_reserve+0x16d9/0x32f0 [ 109.272714][ T5536] ? __pfx_gfs2_inplace_reserve+0x10/0x10 [ 109.272728][ T5536] ? bpf_lsm_capable+0x9/0x20 [ 109.272741][ T5536] ? security_capable+0x7e/0x2e0 [ 109.272759][ T5536] gfs2_iomap_begin+0x7a3/0x11c0 [ 109.272780][ T5536] ? __pfx_gfs2_iomap_begin+0x10/0x10 [ 109.272792][ T5536] ? is_bpf_text_address+0x26/0x2b0 [ 109.272826][ T5536] ? __pfx_gfs2_iomap_begin+0x10/0x10 [ 109.272838][ T5536] iomap_iter+0x534/0xde0 [ 109.272860][ T5536] iomap_file_buffered_write+0x207/0x9b0 [ 109.272874][ T5536] ? __pfx_wake_up_bit+0x10/0x10 [ 109.272896][ T5536] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 109.272907][ T5536] ? inode_dio_wait+0x19e/0x240 [ 109.272934][ T5536] ? inode_go_held+0xf8/0x200 [ 109.272949][ T5536] ? gfs2_glock_wait+0x20f/0x2a0 [ 109.272964][ T5536] gfs2_file_buffered_write+0x4ed/0x880 [ 109.272985][ T5536] ? gfs2_file_write_iter+0x94e/0x1100 [ 109.272999][ T5536] gfs2_file_write_iter+0x94e/0x1100 [ 109.273025][ T5536] ? __pfx_gfs2_file_write_iter+0x10/0x10 [ 109.273035][ T5536] ? rcu_read_lock_any_held+0xb3/0x120 [ 109.273052][ T5536] ? gfs2_file_write_iter+0x94e/0x1100 [ 109.273070][ T5536] vfs_write+0x5c9/0xb30 [ 109.273087][ T5536] ? __pfx_gfs2_file_write_iter+0x10/0x10 [ 109.273100][ T5536] ? __pfx_vfs_write+0x10/0x10 [ 109.273121][ T5536] ? __fget_files+0x2a/0x420 [ 109.273140][ T5536] ksys_write+0x145/0x250 [ 109.273154][ T5536] ? __pfx_ksys_write+0x10/0x10 [ 109.273166][ T5536] ? rcu_is_watching+0x15/0xb0 [ 109.273182][ T5536] ? do_syscall_64+0xbe/0x3b0 [ 109.273196][ T5536] do_syscall_64+0xfa/0x3b0 [ 109.273206][ T5536] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.273217][ T5536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.273229][ T5536] ? clear_bhb_loop+0x60/0xb0 [ 109.273244][ T5536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.273254][ T5536] RIP: 0033:0x7fc992f8ec29 [ 109.273265][ T5536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.273275][ T5536] RSP: 002b:00007fc993e61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.273287][ T5536] RAX: ffffffffffffffda RBX: 00007fc9931d5fa0 RCX: 00007fc992f8ec29 [ 109.273300][ T5536] RDX: 000000000000ffc9 RSI: 0000200000000140 RDI: 0000000000000007 [ 109.273307][ T5536] RBP: 00007fc993011e41 R08: 0000000000000000 R09: 0000000000000000 [ 109.273312][ T5536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.273318][ T5536] R13: 00007fc9931d6038 R14: 00007fc9931d5fa0 R15: 00007fff8e210c58 [ 109.273347][ T5536] [ 109.275701][ T5545] Oops: stack segment: 0000 [#1] SMP KASAN NOPTI [ 109.424984][ T5545] CPU: 0 UID: 0 PID: 5545 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 109.429541][ T5545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.433829][ T5545] RIP: 0010:gfs2_glock_dq+0x60/0xb20 [ 109.436093][ T5545] Code: 4c 89 ff e8 92 3a 2d fe 4c 89 64 24 28 4c 89 7c 24 30 4d 8b 2f 4d 8d 7d 10 4c 89 fd 48 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <80> 7c 05 00 00 74 08 4c 89 ff e8 61 3a 2d fe 49 8b 45 10 48 89 44 [ 109.443834][ T5545] RSP: 0018:ffffc90002c7fc20 EFLAGS: 00010202 [ 109.446232][ T5545] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88803609c880 [ 109.449558][ T5545] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90002c7fd00 [ 109.452808][ T5545] RBP: 0000000000000002 R08: ffff888059d48023 R09: 1ffff1100b3a9004 [ 109.455836][ T5545] R10: dffffc0000000000 R11: ffffed100b3a9005 R12: 1ffff9200058ffa2 [ 109.459078][ T5545] R13: 0000000000000000 R14: ffffc90002c7fd00 R15: 0000000000000010 [ 109.462142][ T5545] FS: 00007fc993e406c0(0000) GS:ffff88808d009000(0000) knlGS:0000000000000000 [ 109.465722][ T5545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.468328][ T5545] CR2: 00007fe63f3f37b0 CR3: 00000000595fe000 CR4: 0000000000352ef0 [ 109.471403][ T5545] Call Trace: [ 109.472938][ T5545] [ 109.474249][ T5545] ? lockref_put_or_lock+0x71/0xc0 [ 109.476266][ T5545] ? gfs2_glock_put+0x2b/0x170 [ 109.478138][ T5545] gfs2_glock_dq_uninit+0x25/0xb0 [ 109.480267][ T5545] gfs2_seek_hole+0x16c/0x240 [ 109.482146][ T5545] ? __pfx_gfs2_seek_hole+0x10/0x10 [ 109.484435][ T5545] ? fdget_pos+0x247/0x320 [ 109.486240][ T5545] gfs2_llseek+0xfa/0x240 [ 109.488138][ T5545] ? __pfx_gfs2_llseek+0x10/0x10 [ 109.490247][ T5545] ? __fget_files+0x2a/0x420 [ 109.492006][ T5545] ? __fget_files+0x3a0/0x420 [ 109.493849][ T5545] ? __fget_files+0x2a/0x420 [ 109.495723][ T5545] __x64_sys_lseek+0x14f/0x1e0 [ 109.497546][ T5545] do_syscall_64+0xfa/0x3b0 [ 109.499615][ T5545] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.501988][ T5545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.504571][ T5545] ? clear_bhb_loop+0x60/0xb0 [ 109.506507][ T5545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.508864][ T5545] RIP: 0033:0x7fc992f8ec29 [ 109.510758][ T5545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.518326][ T5545] RSP: 002b:00007fc993e40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 109.521863][ T5545] RAX: ffffffffffffffda RBX: 00007fc9931d6090 RCX: 00007fc992f8ec29 [ 109.525211][ T5545] RDX: 0000000000000004 RSI: 0000000000000f13 RDI: 0000000000000007 [ 109.528447][ T5545] RBP: 00007fc993011e41 R08: 0000000000000000 R09: 0000000000000000 [ 109.531623][ T5545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.534889][ T5545] R13: 00007fc9931d6128 R14: 00007fc9931d6090 R15: 00007fff8e210c58 [ 109.538398][ T5545] [ 109.539731][ T5545] Modules linked in: [ 109.543275][ T5545] ---[ end trace 0000000000000000 ]--- [ 109.555373][ T5545] RIP: 0010:gfs2_glock_dq+0x60/0xb20 [ 109.557654][ T5545] Code: 4c 89 ff e8 92 3a 2d fe 4c 89 64 24 28 4c 89 7c 24 30 4d 8b 2f 4d 8d 7d 10 4c 89 fd 48 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <80> 7c 05 00 00 74 08 4c 89 ff e8 61 3a 2d fe 49 8b 45 10 48 89 44 [ 109.565500][ T5545] RSP: 0018:ffffc90002c7fc20 EFLAGS: 00010202 [ 109.568536][ T5545] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88803609c880 [ 109.571838][ T5545] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90002c7fd00 [ 109.575242][ T5545] RBP: 0000000000000002 R08: ffff888059d48023 R09: 1ffff1100b3a9004 [ 109.579121][ T5545] R10: dffffc0000000000 R11: ffffed100b3a9005 R12: 1ffff9200058ffa2 [ 109.582499][ T5545] R13: 0000000000000000 R14: ffffc90002c7fd00 R15: 0000000000000010 [ 109.585749][ T5545] FS: 00007fc993e406c0(0000) GS:ffff88808d009000(0000) knlGS:0000000000000000 [ 109.589843][ T5545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.592609][ T5545] CR2: 00007ffe298e6e54 CR3: 00000000595fe000 CR4: 0000000000352ef0 [ 109.596089][ T5545] Kernel panic - not syncing: Fatal exception [ 109.599071][ T5545] Kernel Offset: disabled [ 109.601198][ T5545] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:06:38 Registers: info registers vcpu 0 CPU#0 RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002c7f330 R8 =ffff888034070237 R9 =1ffff1100680e046 R10=dffffc0000000000 R11=ffffffff85513730 R12=dffffc0000000000 R13=ffffffff99d0c8f4 R14=ffffffff9a001880 R15=0000000000000000 RIP=ffffffff855137ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc993e406c0 ffffffff 00c00000 GS =0000 ffff88808d009000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe63f3f37b0 CR3=00000000595fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79733a7a79732f 327366672f73662f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556334d16880 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000556334d17ba0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe63f352c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432363346463239 393635372d463636 382d454538342d38 3045382d30333044 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697377685f313132 303863616d2f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a302e 30312d3533712d63 707276633a317463 3a554d45516e7663 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313731302c453631 302c353631302c34 3631302c33343130 2c323431302c3134 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000