[ 86.876998][ T943] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. 2024/08/29 05:46:27 ignoring optional flag "sandboxArg"="0" 2024/08/29 05:46:28 parsed 1 programs [ 94.356789][ T5219] cgroup: Unknown subsys name 'net' [ 94.525344][ T5219] cgroup: Unknown subsys name 'rlimit' [ 96.108350][ T5219] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.935953][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.945613][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.953811][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.985462][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.996017][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.003420][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.408285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.451826][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.701813][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.716689][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.294690][ T5278] chnl_net:caif_netlink_parms(): no params data found [ 101.537716][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.545720][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.552852][ T5278] bridge_slave_0: entered allmulticast mode [ 101.560527][ T5278] bridge_slave_0: entered promiscuous mode [ 101.569443][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.577170][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.584373][ T5278] bridge_slave_1: entered allmulticast mode [ 101.591983][ T5278] bridge_slave_1: entered promiscuous mode [ 101.625275][ T5278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.638687][ T5278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.677215][ T5278] team0: Port device team_slave_0 added [ 101.685714][ T5278] team0: Port device team_slave_1 added [ 101.711174][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.719029][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.744972][ T5278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.761355][ T5278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.768785][ T5278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.794771][ T5278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.995800][ T5278] hsr_slave_0: entered promiscuous mode [ 102.002727][ T5278] hsr_slave_1: entered promiscuous mode [ 102.181990][ T5278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.193388][ T5278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.203556][ T5278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.214289][ T5278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.325397][ T5278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.359677][ T5278] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.375530][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.382938][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.400832][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.408012][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.611397][ T5278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.652377][ T5278] veth0_vlan: entered promiscuous mode [ 102.663865][ T5278] veth1_vlan: entered promiscuous mode [ 102.692023][ T5278] veth0_macvtap: entered promiscuous mode [ 102.701989][ T5278] veth1_macvtap: entered promiscuous mode [ 102.720921][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.735419][ T5278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.747837][ T5278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.757138][ T5278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.766850][ T5278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.775945][ T5278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/08/29 05:46:40 executed programs: 0 [ 102.943534][ T5278] syz-executor (5278) used greatest stack depth: 18192 bytes left [ 102.972577][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.982564][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.007189][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.018051][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.037285][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.048520][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.057343][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.147381][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.198160][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.207536][ T5320] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.217357][ T5320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.225843][ T5320] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.233733][ T5320] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.242483][ T5320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.253741][ T5320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.263089][ T5322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.270858][ T5322] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.281107][ T5320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 103.282688][ T5326] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 103.288577][ T5322] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.297302][ T5326] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.309391][ T5322] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.319000][ T5322] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.326409][ T5322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.334387][ T5322] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.346709][ T5322] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.369925][ T5322] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.379093][ T5322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.387822][ T5322] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.398944][ T5322] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.410826][ T5322] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 103.418588][ T5322] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.434398][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.512353][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.877027][ T5312] chnl_net:caif_netlink_parms(): no params data found [ 104.065259][ T5317] chnl_net:caif_netlink_parms(): no params data found [ 104.220480][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.235862][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.243102][ T5312] bridge_slave_0: entered allmulticast mode [ 104.259837][ T5312] bridge_slave_0: entered promiscuous mode [ 104.270935][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.281809][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.289353][ T5312] bridge_slave_1: entered allmulticast mode [ 104.297008][ T5312] bridge_slave_1: entered promiscuous mode [ 104.313789][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 104.364756][ T5323] chnl_net:caif_netlink_parms(): no params data found [ 104.381796][ T5315] chnl_net:caif_netlink_parms(): no params data found [ 104.444367][ T5312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.460850][ T5312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.579425][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.586935][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.594111][ T5317] bridge_slave_0: entered allmulticast mode [ 104.601621][ T5317] bridge_slave_0: entered promiscuous mode [ 104.642660][ T5312] team0: Port device team_slave_0 added [ 104.649834][ T5317] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.657253][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.664395][ T5317] bridge_slave_1: entered allmulticast mode [ 104.671882][ T5317] bridge_slave_1: entered promiscuous mode [ 104.724720][ T5312] team0: Port device team_slave_1 added [ 104.807164][ T5315] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.814338][ T5315] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.822461][ T5315] bridge_slave_0: entered allmulticast mode [ 104.829915][ T5315] bridge_slave_0: entered promiscuous mode [ 104.854827][ T5317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.867614][ T5317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.878165][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.889845][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.897277][ T5327] bridge_slave_0: entered allmulticast mode [ 104.904262][ T5327] bridge_slave_0: entered promiscuous mode [ 104.915561][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.922666][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.930045][ T5327] bridge_slave_1: entered allmulticast mode [ 104.937816][ T5327] bridge_slave_1: entered promiscuous mode [ 104.958226][ T5323] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.965663][ T5323] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.972777][ T5323] bridge_slave_0: entered allmulticast mode [ 104.980144][ T5323] bridge_slave_0: entered promiscuous mode [ 104.988588][ T5315] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.996996][ T5315] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.004159][ T5315] bridge_slave_1: entered allmulticast mode [ 105.011357][ T5315] bridge_slave_1: entered promiscuous mode [ 105.031717][ T5312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.039064][ T5312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.066075][ T5312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.116456][ T5322] Bluetooth: hci0: command tx timeout [ 105.123744][ T5323] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.131717][ T5323] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.139155][ T5323] bridge_slave_1: entered allmulticast mode [ 105.146537][ T5323] bridge_slave_1: entered promiscuous mode [ 105.168938][ T5312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.176172][ T5312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.202997][ T5312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.229462][ T5317] team0: Port device team_slave_0 added [ 105.241032][ T5317] team0: Port device team_slave_1 added [ 105.272586][ T5315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.286704][ T5315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.334556][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.365710][ T5322] Bluetooth: hci2: command tx timeout [ 105.391944][ T5312] hsr_slave_0: entered promiscuous mode [ 105.398578][ T5312] hsr_slave_1: entered promiscuous mode [ 105.404769][ T5312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.412950][ T5312] Cannot create hsr debugfs directory [ 105.431657][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.440973][ T5322] Bluetooth: hci1: command tx timeout [ 105.448046][ T5322] Bluetooth: hci3: command tx timeout [ 105.469649][ T5323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.484546][ T5315] team0: Port device team_slave_0 added [ 105.493836][ T5315] team0: Port device team_slave_1 added [ 105.503558][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.510743][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.517353][ T5322] Bluetooth: hci4: command tx timeout [ 105.536959][ T5317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.539962][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.560284][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.586226][ T5317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.621906][ T5327] team0: Port device team_slave_0 added [ 105.630710][ T5323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.676031][ T5315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.683266][ T5315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.709755][ T5315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.746251][ T5327] team0: Port device team_slave_1 added [ 105.776042][ T5315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.783029][ T5315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.809243][ T5315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.838016][ T5317] hsr_slave_0: entered promiscuous mode [ 105.844490][ T5317] hsr_slave_1: entered promiscuous mode [ 105.851449][ T5317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.859686][ T5317] Cannot create hsr debugfs directory [ 105.884761][ T5323] team0: Port device team_slave_0 added [ 105.893914][ T5323] team0: Port device team_slave_1 added [ 106.009149][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.017413][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.043898][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.057596][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.064556][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.091305][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.110645][ T5323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.117803][ T5323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.143931][ T5323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.156968][ T5323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.163937][ T5323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.190130][ T5323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.313335][ T5315] hsr_slave_0: entered promiscuous mode [ 106.320638][ T5315] hsr_slave_1: entered promiscuous mode [ 106.330337][ T5315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.338161][ T5315] Cannot create hsr debugfs directory [ 106.397050][ T5327] hsr_slave_0: entered promiscuous mode [ 106.403491][ T5327] hsr_slave_1: entered promiscuous mode [ 106.410391][ T5327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.418220][ T5327] Cannot create hsr debugfs directory [ 106.446740][ T5323] hsr_slave_0: entered promiscuous mode [ 106.453764][ T5323] hsr_slave_1: entered promiscuous mode [ 106.461952][ T5323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.469718][ T5323] Cannot create hsr debugfs directory [ 106.730263][ T5317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.766976][ T5317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.811567][ T5317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.847981][ T5317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.988208][ T5317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.019103][ T5317] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.044074][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.051411][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.088337][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.095519][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.186795][ T52] bridge_slave_1: left allmulticast mode [ 107.192676][ T52] bridge_slave_1: left promiscuous mode [ 107.201789][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.211006][ T5322] Bluetooth: hci0: command tx timeout [ 107.221920][ T52] bridge_slave_0: left allmulticast mode [ 107.227762][ T52] bridge_slave_0: left promiscuous mode [ 107.233457][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.446027][ T5322] Bluetooth: hci2: command tx timeout [ 107.480470][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.491935][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.503496][ T52] bond0 (unregistering): Released all slaves [ 107.516653][ T5320] Bluetooth: hci1: command tx timeout [ 107.522326][ T5322] Bluetooth: hci3: command tx timeout [ 107.598046][ T5322] Bluetooth: hci4: command tx timeout [ 107.656048][ T52] hsr_slave_0: left promiscuous mode [ 107.663520][ T52] hsr_slave_1: left promiscuous mode [ 107.704333][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.712024][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.722332][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.731175][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.761688][ T52] veth1_macvtap: left promiscuous mode [ 107.768797][ T52] veth0_macvtap: left promiscuous mode [ 107.774477][ T52] veth1_vlan: left promiscuous mode [ 107.780060][ T52] veth0_vlan: left promiscuous mode [ 108.222218][ T52] team0 (unregistering): Port device team_slave_1 removed [ 108.253077][ T52] team0 (unregistering): Port device team_slave_0 removed [ 108.718456][ T5317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.836822][ T5317] veth0_vlan: entered promiscuous mode [ 108.866412][ T5317] veth1_vlan: entered promiscuous mode [ 108.880388][ T5312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.917876][ T5312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.931572][ T5312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.941688][ T5312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.007522][ T5317] veth0_macvtap: entered promiscuous mode [ 109.029351][ T5315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.057062][ T5317] veth1_macvtap: entered promiscuous mode [ 109.072987][ T5315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.093714][ T5315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.149790][ T5315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.214587][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.253949][ T5327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.275365][ T5322] Bluetooth: hci0: command tx timeout [ 109.300622][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.320087][ T5327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.354426][ T5317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.373372][ T5317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.385351][ T5317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.394113][ T5317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.521632][ T5322] Bluetooth: hci2: command tx timeout [ 109.555935][ T5327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.595733][ T5322] Bluetooth: hci3: command tx timeout [ 109.596327][ T5320] Bluetooth: hci1: command tx timeout [ 109.607522][ T5327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.676194][ T5320] Bluetooth: hci4: command tx timeout [ 109.724067][ T5323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.814969][ T5312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.822238][ T5323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.834620][ T5323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.870897][ T5323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.990917][ T5312] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.063218][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.070551][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.096330][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.104196][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.138753][ T5315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.149456][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.156743][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.288604][ T5315] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.302251][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.326923][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/08/29 05:46:47 executed programs: 10 [ 110.412972][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.420212][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.429938][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.437104][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.646106][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.768243][ T5323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.830919][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.883949][ T5323] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.937863][ T2476] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.945118][ T2476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.982904][ T2476] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.990123][ T2476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.063273][ T2476] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.070486][ T2476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.089670][ T2476] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.096891][ T2476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.181935][ T5315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.233584][ T5312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.357415][ T5320] Bluetooth: hci0: command tx timeout [ 111.373719][ T5315] veth0_vlan: entered promiscuous mode [ 111.444705][ T5315] veth1_vlan: entered promiscuous mode [ 111.569260][ T5312] veth0_vlan: entered promiscuous mode [ 111.595399][ T5320] Bluetooth: hci2: command tx timeout [ 111.617285][ T5315] veth0_macvtap: entered promiscuous mode [ 111.644069][ T5315] veth1_macvtap: entered promiscuous mode [ 111.651485][ T5414] loop2: detected capacity change from 0 to 32768 [ 111.661298][ T5312] veth1_vlan: entered promiscuous mode [ 111.677935][ T5320] Bluetooth: hci1: command tx timeout [ 111.683375][ T5320] Bluetooth: hci3: command tx timeout [ 111.698421][ T5414] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.745616][ T5414] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.762453][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.773420][ T5320] Bluetooth: hci4: command tx timeout [ 111.786113][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.800131][ T5315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.812884][ T5315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.824125][ T5315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.836269][ T5315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.877009][ T5414] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 111.878266][ T5323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.889597][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 111.898559][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 111.914822][ T5315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.942113][ T5315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.968319][ T5315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.986495][ T5315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.039805][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 141ms [ 112.063222][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 112.095847][ T5414] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 112.108928][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.130162][ T5312] veth0_macvtap: entered promiscuous mode [ 112.258005][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.281010][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.297458][ T5312] veth1_macvtap: entered promiscuous mode [ 112.353534][ T5327] veth0_vlan: entered promiscuous mode [ 112.381609][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.394285][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.467936][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.488221][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.502812][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.521819][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.538501][ T5312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.550466][ T5327] veth1_vlan: entered promiscuous mode [ 112.579524][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.594964][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.613308][ T5312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.623934][ T5312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.640783][ T5312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.689767][ T5323] veth0_vlan: entered promiscuous mode [ 112.728005][ T5312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.747933][ T5312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.757249][ T5312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.767341][ T5312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.812360][ T5323] veth1_vlan: entered promiscuous mode [ 112.852432][ T5327] veth0_macvtap: entered promiscuous mode [ 112.903863][ T5327] veth1_macvtap: entered promiscuous mode [ 113.063034][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.087452][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.114133][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.148365][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.180858][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.197927][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.210393][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.227428][ T5323] veth0_macvtap: entered promiscuous mode [ 113.254104][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.295135][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.304983][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.335486][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.360532][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.386131][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.406870][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.452032][ T5445] loop1: detected capacity change from 0 to 32768 [ 113.472741][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.474296][ T5323] veth1_macvtap: entered promiscuous mode [ 113.499589][ T5445] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.508632][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.525274][ T5445] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.566669][ T5327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.581235][ T5327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.604354][ T5327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.619690][ T5327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.631908][ T5445] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 113.653213][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 113.665196][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 113.698215][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.700220][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.732864][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.736204][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.775118][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.793513][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 113.795107][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.815464][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 113.820727][ T5445] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.825109][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.852285][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.881821][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.905137][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.927827][ T5323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.949503][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.993018][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.015459][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.026369][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.036287][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.056571][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.087350][ T5323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.105075][ T5323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.123239][ T5323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.186260][ T5323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.195005][ T5323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.221698][ T5323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.252928][ T5323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.454292][ T5448] loop2: detected capacity change from 0 to 32768 [ 114.464315][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.483536][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.515674][ T5448] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 114.534144][ T5448] CPU: 1 UID: 0 PID: 5448 Comm: syz.2.20 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 114.544707][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 114.554807][ T5448] Call Trace: [ 114.558131][ T5448] [ 114.561076][ T5448] dump_stack_lvl+0x241/0x360 [ 114.565790][ T5448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.571014][ T5448] ? __pfx__printk+0x10/0x10 [ 114.575650][ T5448] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 114.581069][ T5448] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 114.586666][ T5448] sysfs_create_dir_ns+0x2ce/0x3a0 [ 114.591829][ T5448] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 114.597506][ T5448] kobject_add_internal+0x435/0x8d0 [ 114.602746][ T5448] kobject_init_and_add+0x124/0x190 [ 114.607980][ T5448] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 114.613827][ T5448] ? __pfx_kobject_init_and_add+0x10/0x10 [ 114.619588][ T5448] ? __init_swait_queue_head+0xae/0x150 [ 114.625209][ T5448] gfs2_sys_fs_add+0x23b/0x4a0 [ 114.630001][ T5448] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 114.635318][ T5448] ? __pfx_alloc_workqueue+0x10/0x10 [ 114.640640][ T5448] ? read_word_at_a_time+0xe/0x20 [ 114.645690][ T5448] ? sized_strscpy+0x8d/0x220 [ 114.650577][ T5448] gfs2_fill_super+0x11db/0x2500 [ 114.655571][ T5448] ? __pfx_gfs2_fill_super+0x10/0x10 [ 114.655621][ T5448] ? snprintf+0xda/0x120 [ 114.655648][ T5448] ? __pfx_lock_release+0x10/0x10 [ 114.655676][ T5448] ? do_raw_spin_lock+0x14f/0x370 [ 114.655705][ T5448] ? __pfx_snprintf+0x10/0x10 [ 114.655745][ T5448] ? sb_set_blocksize+0x98/0xf0 [ 114.655772][ T5448] ? setup_bdev_super+0x4e6/0x5d0 [ 114.662817][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.665339][ T5448] get_tree_bdev+0x3f7/0x570 [ 114.665368][ T5448] ? __pfx_gfs2_fill_super+0x10/0x10 [ 114.665395][ T5448] ? __pfx_get_tree_bdev+0x10/0x10 [ 114.665425][ T5448] gfs2_get_tree+0x54/0x220 [ 114.675451][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.680106][ T5448] ? bpf_lsm_capable+0x9/0x10 [ 114.680139][ T5448] vfs_get_tree+0x90/0x2b0 [ 114.680169][ T5448] do_new_mount+0x2be/0xb40 [ 114.680202][ T5448] ? __pfx_do_new_mount+0x10/0x10 [ 114.680240][ T5448] __se_sys_mount+0x2d6/0x3c0 [ 114.680275][ T5448] ? __pfx___se_sys_mount+0x10/0x10 [ 114.753345][ T5448] ? do_syscall_64+0x100/0x230 [ 114.758145][ T5448] ? __x64_sys_mount+0x20/0xc0 [ 114.762944][ T5448] do_syscall_64+0xf3/0x230 [ 114.767481][ T5448] ? clear_bhb_loop+0x35/0x90 [ 114.772195][ T5448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.778128][ T5448] RIP: 0033:0x7f0dc397b69a [ 114.782570][ T5448] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.802195][ T5448] RSP: 002b:00007f0dc47e7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.810633][ T5448] RAX: ffffffffffffffda RBX: 00007f0dc47e7ef0 RCX: 00007f0dc397b69a [ 114.818626][ T5448] RDX: 00000000200003c0 RSI: 0000000020037f80 RDI: 00007f0dc47e7eb0 [ 114.826605][ T5448] RBP: 00000000200003c0 R08: 00007f0dc47e7ef0 R09: 0000000000000000 [ 114.826623][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020037f80 [ 114.826638][ T5448] R13: 00007f0dc47e7eb0 R14: 0000000000037f59 R15: 0000000020000100 [ 114.826680][ T5448] [ 114.875461][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.898682][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.001747][ T5448] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 115.036430][ T5448] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 115.054359][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.067817][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/08/29 05:46:53 executed programs: 17 [ 116.005462][ T5454] loop0: detected capacity change from 0 to 32768 [ 116.054547][ T5454] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 116.085202][ T5454] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 116.250265][ T5454] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 116.281813][ T5403] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 116.295454][ T5403] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 116.412184][ T5403] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 116ms [ 116.436735][ T5403] gfs2: fsid=syz:syz.0: jid=0: Done [ 116.442149][ T5454] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 116.763931][ T5460] loop3: detected capacity change from 0 to 32768 [ 116.812289][ T5460] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 116.825217][ T5460] CPU: 0 UID: 0 PID: 5460 Comm: syz.3.18 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 116.835790][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 116.845881][ T5460] Call Trace: [ 116.849197][ T5460] [ 116.852148][ T5460] dump_stack_lvl+0x241/0x360 [ 116.856857][ T5460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.862083][ T5460] ? __pfx__printk+0x10/0x10 [ 116.866713][ T5460] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 116.872064][ T5460] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 116.877654][ T5460] sysfs_create_dir_ns+0x2ce/0x3a0 [ 116.882806][ T5460] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 116.888510][ T5460] kobject_add_internal+0x435/0x8d0 [ 116.893732][ T5460] kobject_init_and_add+0x124/0x190 [ 116.899377][ T5460] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 116.905228][ T5460] ? __pfx_kobject_init_and_add+0x10/0x10 [ 116.910956][ T5460] ? __init_swait_queue_head+0xae/0x150 [ 116.916512][ T5460] gfs2_sys_fs_add+0x23b/0x4a0 [ 116.921286][ T5460] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 116.926573][ T5460] ? __pfx_alloc_workqueue+0x10/0x10 [ 116.931860][ T5460] ? read_word_at_a_time+0xe/0x20 [ 116.936887][ T5460] ? sized_strscpy+0x8d/0x220 [ 116.941563][ T5460] gfs2_fill_super+0x11db/0x2500 [ 116.946525][ T5460] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.951814][ T5460] ? snprintf+0xda/0x120 [ 116.956065][ T5460] ? __pfx_lock_release+0x10/0x10 [ 116.961102][ T5460] ? do_raw_spin_lock+0x14f/0x370 [ 116.966130][ T5460] ? __pfx_snprintf+0x10/0x10 [ 116.970814][ T5460] ? sb_set_blocksize+0x98/0xf0 [ 116.975665][ T5460] ? setup_bdev_super+0x4e6/0x5d0 [ 116.980689][ T5460] get_tree_bdev+0x3f7/0x570 [ 116.985305][ T5460] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.990642][ T5460] ? __pfx_get_tree_bdev+0x10/0x10 [ 116.995788][ T5460] gfs2_get_tree+0x54/0x220 [ 117.000327][ T5460] ? bpf_lsm_capable+0x9/0x10 [ 117.005054][ T5460] vfs_get_tree+0x90/0x2b0 [ 117.009509][ T5460] do_new_mount+0x2be/0xb40 [ 117.014037][ T5460] ? __pfx_do_new_mount+0x10/0x10 [ 117.019184][ T5460] __se_sys_mount+0x2d6/0x3c0 [ 117.023879][ T5460] ? __pfx___se_sys_mount+0x10/0x10 [ 117.029091][ T5460] ? do_syscall_64+0x100/0x230 [ 117.033866][ T5460] ? __x64_sys_mount+0x20/0xc0 [ 117.038649][ T5460] do_syscall_64+0xf3/0x230 [ 117.043161][ T5460] ? clear_bhb_loop+0x35/0x90 [ 117.047861][ T5460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.053769][ T5460] RIP: 0033:0x7f23ae57b69a [ 117.058182][ T5460] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.077785][ T5460] RSP: 002b:00007f23af31ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.086198][ T5460] RAX: ffffffffffffffda RBX: 00007f23af31aef0 RCX: 00007f23ae57b69a [ 117.094173][ T5460] RDX: 00000000200003c0 RSI: 0000000020037f80 RDI: 00007f23af31aeb0 [ 117.102148][ T5460] RBP: 00000000200003c0 R08: 00007f23af31aef0 R09: 0000000000000000 [ 117.110140][ T5460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020037f80 [ 117.118108][ T5460] R13: 00007f23af31aeb0 R14: 0000000000037f59 R15: 0000000020000100 [ 117.126092][ T5460] [ 117.165721][ T5460] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 117.241832][ T5460] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 117.383829][ T5458] loop4: detected capacity change from 0 to 32768 [ 117.426657][ T5458] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 117.458578][ T5458] CPU: 1 UID: 0 PID: 5458 Comm: syz.4.19 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 117.469153][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 117.479234][ T5458] Call Trace: [ 117.482542][ T5458] [ 117.485504][ T5458] dump_stack_lvl+0x241/0x360 [ 117.490218][ T5458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.495452][ T5458] ? __pfx__printk+0x10/0x10 [ 117.500094][ T5458] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 117.505425][ T5458] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 117.511122][ T5458] sysfs_create_dir_ns+0x2ce/0x3a0 [ 117.516375][ T5458] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 117.522069][ T5458] kobject_add_internal+0x435/0x8d0 [ 117.527344][ T5458] kobject_init_and_add+0x124/0x190 [ 117.532587][ T5458] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 117.538440][ T5458] ? __pfx_kobject_init_and_add+0x10/0x10 [ 117.544213][ T5458] ? __init_swait_queue_head+0xae/0x150 [ 117.549809][ T5458] gfs2_sys_fs_add+0x23b/0x4a0 [ 117.554607][ T5458] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 117.559923][ T5458] ? __pfx_alloc_workqueue+0x10/0x10 [ 117.565241][ T5458] ? read_word_at_a_time+0xe/0x20 [ 117.570287][ T5458] ? sized_strscpy+0x8d/0x220 [ 117.574980][ T5458] gfs2_fill_super+0x11db/0x2500 [ 117.579956][ T5458] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.585259][ T5458] ? snprintf+0xda/0x120 [ 117.589515][ T5458] ? __pfx_lock_release+0x10/0x10 [ 117.594553][ T5458] ? do_raw_spin_lock+0x14f/0x370 [ 117.599599][ T5458] ? __pfx_snprintf+0x10/0x10 [ 117.604302][ T5458] ? sb_set_blocksize+0x98/0xf0 [ 117.609179][ T5458] ? setup_bdev_super+0x4e6/0x5d0 [ 117.614213][ T5458] get_tree_bdev+0x3f7/0x570 [ 117.618819][ T5458] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.624116][ T5458] ? __pfx_get_tree_bdev+0x10/0x10 [ 117.629244][ T5458] gfs2_get_tree+0x54/0x220 [ 117.633758][ T5458] ? bpf_lsm_capable+0x9/0x10 [ 117.638447][ T5458] vfs_get_tree+0x90/0x2b0 [ 117.642863][ T5458] do_new_mount+0x2be/0xb40 [ 117.647382][ T5458] ? __pfx_do_new_mount+0x10/0x10 [ 117.652423][ T5458] __se_sys_mount+0x2d6/0x3c0 [ 117.657125][ T5458] ? __pfx___se_sys_mount+0x10/0x10 [ 117.662333][ T5458] ? do_syscall_64+0x100/0x230 [ 117.667111][ T5458] ? __x64_sys_mount+0x20/0xc0 [ 117.671873][ T5458] do_syscall_64+0xf3/0x230 [ 117.676377][ T5458] ? clear_bhb_loop+0x35/0x90 [ 117.681055][ T5458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.686946][ T5458] RIP: 0033:0x7f599d17b69a [ 117.691362][ T5458] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.710962][ T5458] RSP: 002b:00007f599dfc8e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.719376][ T5458] RAX: ffffffffffffffda RBX: 00007f599dfc8ef0 RCX: 00007f599d17b69a [ 117.727354][ T5458] RDX: 00000000200003c0 RSI: 0000000020037f80 RDI: 00007f599dfc8eb0 [ 117.735327][ T5458] RBP: 00000000200003c0 R08: 00007f599dfc8ef0 R09: 0000000000000000 [ 117.743335][ T5458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020037f80 [ 117.751394][ T5458] R13: 00007f599dfc8eb0 R14: 0000000000037f59 R15: 0000000020000100 [ 117.759476][ T5458] [ 117.835591][ T5458] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 117.873544][ T5462] loop2: detected capacity change from 0 to 32768 [ 117.890608][ T5458] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 117.948725][ T5462] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 117.989455][ T5462] CPU: 0 UID: 0 PID: 5462 Comm: syz.2.22 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 118.000016][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 118.010272][ T5462] Call Trace: [ 118.013577][ T5462] [ 118.016539][ T5462] dump_stack_lvl+0x241/0x360 [ 118.021242][ T5462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.026475][ T5462] ? __pfx__printk+0x10/0x10 [ 118.031104][ T5462] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 118.036423][ T5462] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 118.042005][ T5462] sysfs_create_dir_ns+0x2ce/0x3a0 [ 118.047152][ T5462] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 118.052832][ T5462] kobject_add_internal+0x435/0x8d0 [ 118.058064][ T5462] kobject_init_and_add+0x124/0x190 [ 118.063284][ T5462] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 118.069126][ T5462] ? __pfx_kobject_init_and_add+0x10/0x10 [ 118.074888][ T5462] ? __init_swait_queue_head+0xae/0x150 [ 118.080496][ T5462] gfs2_sys_fs_add+0x23b/0x4a0 [ 118.085296][ T5462] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 118.090611][ T5462] ? __pfx_alloc_workqueue+0x10/0x10 [ 118.095919][ T5462] ? read_word_at_a_time+0xe/0x20 [ 118.100967][ T5462] ? sized_strscpy+0x8d/0x220 [ 118.105666][ T5462] gfs2_fill_super+0x11db/0x2500 [ 118.110663][ T5462] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.116061][ T5462] ? snprintf+0xda/0x120 [ 118.120331][ T5462] ? __pfx_lock_release+0x10/0x10 [ 118.125390][ T5462] ? do_raw_spin_lock+0x14f/0x370 [ 118.130460][ T5462] ? __pfx_snprintf+0x10/0x10 [ 118.135198][ T5462] ? sb_set_blocksize+0x98/0xf0 [ 118.140081][ T5462] ? setup_bdev_super+0x4e6/0x5d0 [ 118.145155][ T5462] get_tree_bdev+0x3f7/0x570 [ 118.149789][ T5462] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.155105][ T5462] ? __pfx_get_tree_bdev+0x10/0x10 [ 118.160272][ T5462] gfs2_get_tree+0x54/0x220 [ 118.164820][ T5462] ? bpf_lsm_capable+0x9/0x10 [ 118.169533][ T5462] vfs_get_tree+0x90/0x2b0 [ 118.174074][ T5462] do_new_mount+0x2be/0xb40 [ 118.178618][ T5462] ? __pfx_do_new_mount+0x10/0x10 [ 118.183701][ T5462] __se_sys_mount+0x2d6/0x3c0 [ 118.188435][ T5462] ? __pfx___se_sys_mount+0x10/0x10 [ 118.193656][ T5462] ? do_syscall_64+0x100/0x230 [ 118.198448][ T5462] ? __x64_sys_mount+0x20/0xc0 [ 118.203244][ T5462] do_syscall_64+0xf3/0x230 [ 118.207774][ T5462] ? clear_bhb_loop+0x35/0x90 [ 118.212482][ T5462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.218403][ T5462] RIP: 0033:0x7f0dc397b69a [ 118.222852][ T5462] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.242479][ T5462] RSP: 002b:00007f0dc47e7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.250912][ T5462] RAX: ffffffffffffffda RBX: 00007f0dc47e7ef0 RCX: 00007f0dc397b69a [ 118.258901][ T5462] RDX: 00000000200003c0 RSI: 0000000020037f80 RDI: 00007f0dc47e7eb0 [ 118.266887][ T5462] RBP: 00000000200003c0 R08: 00007f0dc47e7ef0 R09: 0000000000000000 [ 118.267788][ T5464] loop1: detected capacity change from 0 to 32768 [ 118.274857][ T5462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020037f80 [ 118.274877][ T5462] R13: 00007f0dc47e7eb0 R14: 0000000000037f59 R15: 0000000020000100 [ 118.274914][ T5462] [ 118.399017][ T5462] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 118.423399][ T5462] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 118.433767][ T5464] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 118.446075][ T5464] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 118.651689][ T5464] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 118.706827][ T5256] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 118.713648][ T5256] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 118.959164][ T5256] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 245ms [ 118.998641][ T5256] gfs2: fsid=syz:syz.0: jid=0: Done [ 119.003928][ T5464] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 119.044180][ T5464] gfs2: fsid=syz:syz.0: can't create quotad thread: -4 [ 119.251462][ T5464] ================================================================== [ 119.259577][ T5464] BUG: KASAN: slab-use-after-free in destroy_workqueue+0x41/0xc40 [ 119.267406][ T5464] Read of size 8 at addr ffff88807e7e9128 by task syz.1.21/5464 [ 119.275050][ T5464] [ 119.277395][ T5464] CPU: 0 UID: 0 PID: 5464 Comm: syz.1.21 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 119.287914][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 119.297982][ T5464] Call Trace: [ 119.301278][ T5464] [ 119.304221][ T5464] dump_stack_lvl+0x241/0x360 [ 119.308930][ T5464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.314144][ T5464] ? __pfx__printk+0x10/0x10 [ 119.318766][ T5464] ? _printk+0xd5/0x120 [ 119.322957][ T5464] ? __virt_addr_valid+0x183/0x530 [ 119.328076][ T5464] ? __virt_addr_valid+0x183/0x530 [ 119.333226][ T5464] print_report+0x169/0x550 [ 119.337751][ T5464] ? __virt_addr_valid+0x183/0x530 [ 119.342877][ T5464] ? __virt_addr_valid+0x183/0x530 [ 119.348000][ T5464] ? __virt_addr_valid+0x45f/0x530 [ 119.353121][ T5464] ? __phys_addr+0xba/0x170 [ 119.357657][ T5464] ? destroy_workqueue+0x41/0xc40 [ 119.362703][ T5464] kasan_report+0x143/0x180 [ 119.367234][ T5464] ? destroy_workqueue+0x41/0xc40 [ 119.372281][ T5464] destroy_workqueue+0x41/0xc40 [ 119.377145][ T5464] ? destroy_workqueue+0x86f/0xc40 [ 119.382274][ T5464] gfs2_fill_super+0x128a/0x2500 [ 119.387259][ T5464] ? __pfx_gfs2_fill_super+0x10/0x10 [ 119.392576][ T5464] ? snprintf+0xda/0x120 [ 119.396841][ T5464] ? __pfx_lock_release+0x10/0x10 [ 119.401898][ T5464] ? do_raw_spin_lock+0x14f/0x370 [ 119.406946][ T5464] ? __pfx_snprintf+0x10/0x10 [ 119.411645][ T5464] ? sb_set_blocksize+0x98/0xf0 [ 119.416518][ T5464] ? setup_bdev_super+0x4e6/0x5d0 [ 119.421574][ T5464] get_tree_bdev+0x3f7/0x570 [ 119.426188][ T5464] ? __pfx_gfs2_fill_super+0x10/0x10 [ 119.431495][ T5464] ? __pfx_get_tree_bdev+0x10/0x10 [ 119.436638][ T5464] gfs2_get_tree+0x54/0x220 [ 119.441162][ T5464] ? bpf_lsm_capable+0x9/0x10 [ 119.445859][ T5464] vfs_get_tree+0x90/0x2b0 [ 119.450299][ T5464] do_new_mount+0x2be/0xb40 [ 119.454828][ T5464] ? __pfx_do_new_mount+0x10/0x10 [ 119.459886][ T5464] __se_sys_mount+0x2d6/0x3c0 [ 119.464595][ T5464] ? __pfx___se_sys_mount+0x10/0x10 [ 119.469913][ T5464] ? do_syscall_64+0x100/0x230 [ 119.474701][ T5464] ? __x64_sys_mount+0x20/0xc0 [ 119.479494][ T5464] do_syscall_64+0xf3/0x230 [ 119.484041][ T5464] ? clear_bhb_loop+0x35/0x90 [ 119.488831][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.494750][ T5464] RIP: 0033:0x7fd68f97b69a [ 119.499205][ T5464] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.518844][ T5464] RSP: 002b:00007fd690720e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.527276][ T5464] RAX: ffffffffffffffda RBX: 00007fd690720ef0 RCX: 00007fd68f97b69a [ 119.535343][ T5464] RDX: 00000000200003c0 RSI: 0000000020037f80 RDI: 00007fd690720eb0 [ 119.543329][ T5464] RBP: 00000000200003c0 R08: 00007fd690720ef0 R09: 0000000000000000 [ 119.551317][ T5464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020037f80 [ 119.559303][ T5464] R13: 00007fd690720eb0 R14: 0000000000037f59 R15: 0000000020000100 [ 119.567305][ T5464] [ 119.570337][ T5464] [ 119.572694][ T5464] Allocated by task 5464: [ 119.577029][ T5464] kasan_save_track+0x3f/0x80 [ 119.581717][ T5464] __kasan_kmalloc+0x98/0xb0 [ 119.586324][ T5464] __kmalloc_noprof+0x1fc/0x400 [ 119.591196][ T5464] alloc_workqueue+0x1b0/0x1fe0 [ 119.596062][ T5464] gfs2_fill_super+0x1149/0x2500 [ 119.601021][ T5464] get_tree_bdev+0x3f7/0x570 [ 119.605627][ T5464] gfs2_get_tree+0x54/0x220 [ 119.610165][ T5464] vfs_get_tree+0x90/0x2b0 [ 119.614598][ T5464] do_new_mount+0x2be/0xb40 [ 119.619118][ T5464] __se_sys_mount+0x2d6/0x3c0 [ 119.623843][ T5464] do_syscall_64+0xf3/0x230 [ 119.628353][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.634261][ T5464] [ 119.636597][ T5464] Freed by task 5480: [ 119.640581][ T5464] kasan_save_track+0x3f/0x80 [ 119.645297][ T5464] kasan_save_free_info+0x40/0x50 [ 119.650337][ T5464] poison_slab_object+0xe0/0x150 [ 119.655283][ T5464] __kasan_slab_free+0x37/0x60 [ 119.660064][ T5464] kfree+0x149/0x360 [ 119.663995][ T5464] rcu_core+0xafd/0x1830 [ 119.668260][ T5464] handle_softirqs+0x2c4/0x970 [ 119.673035][ T5464] __irq_exit_rcu+0xf4/0x1c0 [ 119.677634][ T5464] irq_exit_rcu+0x9/0x30 [ 119.681888][ T5464] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 119.687541][ T5464] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.693567][ T5464] [ 119.695897][ T5464] Last potentially related work creation: [ 119.701619][ T5464] kasan_save_stack+0x3f/0x60 [ 119.706306][ T5464] __kasan_record_aux_stack+0xac/0xc0 [ 119.711699][ T5464] call_rcu+0x167/0xa70 [ 119.715869][ T5464] kthread_worker_fn+0x500/0xaf0 [ 119.720818][ T5464] kthread+0x2f0/0x390 [ 119.724904][ T5464] ret_from_fork+0x4b/0x80 [ 119.729344][ T5464] ret_from_fork_asm+0x1a/0x30 [ 119.734126][ T5464] [ 119.736456][ T5464] The buggy address belongs to the object at ffff88807e7e9000 [ 119.736456][ T5464] which belongs to the cache kmalloc-512 of size 512 [ 119.750523][ T5464] The buggy address is located 296 bytes inside of [ 119.750523][ T5464] freed 512-byte region [ffff88807e7e9000, ffff88807e7e9200) [ 119.764334][ T5464] [ 119.766671][ T5464] The buggy address belongs to the physical page: [ 119.773110][ T5464] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807e7eb000 pfn:0x7e7e8 [ 119.783202][ T5464] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 119.791713][ T5464] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 119.800256][ T5464] page_type: 0xfdffffff(slab) [ 119.804971][ T5464] raw: 00fff00000000240 ffff888015441c80 ffffea0000475e10 ffffea0001685610 [ 119.813585][ T5464] raw: ffff88807e7eb000 0000000000100008 00000001fdffffff 0000000000000000 [ 119.822183][ T5464] head: 00fff00000000240 ffff888015441c80 ffffea0000475e10 ffffea0001685610 [ 119.830863][ T5464] head: ffff88807e7eb000 0000000000100008 00000001fdffffff 0000000000000000 [ 119.839548][ T5464] head: 00fff00000000002 ffffea0001f9fa01 ffffffffffffffff 0000000000000000 [ 119.846959][ T5480] loop4: detected capacity change from 0 to 32768 [ 119.848217][ T5464] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 119.863299][ T5464] page dumped because: kasan: bad access detected [ 119.865661][ T5476] loop3: detected capacity change from 0 to 32768 [ 119.869795][ T5464] page_owner tracks the page as allocated [ 119.881903][ T5464] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5278, tgid 5278 (syz-executor), ts 102299778167, free_ts 102288061878 [ 119.904845][ T5464] post_alloc_hook+0x1f3/0x230 [ 119.909639][ T5464] get_page_from_freelist+0x2e4c/0x2f10 [ 119.915223][ T5464] __alloc_pages_noprof+0x256/0x6c0 [ 119.920442][ T5464] alloc_slab_page+0x5f/0x120 [ 119.925142][ T5464] allocate_slab+0x5a/0x2f0 [ 119.929671][ T5464] ___slab_alloc+0xcd1/0x14b0 [ 119.934376][ T5464] __slab_alloc+0x58/0xa0 [ 119.938734][ T5464] __kmalloc_noprof+0x25a/0x400 [ 119.943692][ T5464] fib6_info_alloc+0x2e/0xf0 [ 119.948305][ T5464] ip6_route_info_create+0x445/0x12b0 [ 119.953701][ T5464] ip6_route_add+0x28/0x160 [ 119.958228][ T5464] add_v4_addrs+0xb5a/0x1160 [ 119.962829][ T5464] addrconf_init_auto_addrs+0x208/0xeb0 [ 119.968472][ T5464] addrconf_notify+0xaff/0x1020 [ 119.973341][ T5464] notifier_call_chain+0x19f/0x3e0 [ 119.978470][ T5464] __dev_notify_flags+0x207/0x400 [ 119.983600][ T5464] page last free pid 5278 tgid 5278 stack trace: [ 119.989932][ T5464] free_unref_page+0xd19/0xea0 [ 119.994715][ T5464] __put_partials+0xeb/0x130 [ 119.999329][ T5464] put_cpu_partial+0x17c/0x250 [ 120.004117][ T5464] __slab_free+0x2ea/0x3d0 [ 120.008552][ T5464] qlist_free_all+0x9e/0x140 [ 120.013157][ T5464] kasan_quarantine_reduce+0x14f/0x170 [ 120.018643][ T5464] __kasan_slab_alloc+0x23/0x80 [ 120.023518][ T5464] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 120.029438][ T5464] __alloc_skb+0x1c3/0x440 [ 120.033906][ T5464] rtmsg_fib+0x144/0x630 [ 120.038209][ T5464] fib_table_insert+0xfbe/0x1f30 [ 120.043163][ T5464] fib_magic+0x3d8/0x620 [ 120.047426][ T5464] fib_add_ifaddr+0x398/0x5e0 [ 120.052120][ T5464] fib_netdev_event+0x375/0x490 [ 120.056993][ T5464] notifier_call_chain+0x19f/0x3e0 [ 120.062127][ T5464] __dev_notify_flags+0x207/0x400 [ 120.067172][ T5464] [ 120.069509][ T5464] Memory state around the buggy address: [ 120.075150][ T5464] ffff88807e7e9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.083400][ T5464] ffff88807e7e9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.091480][ T5464] >ffff88807e7e9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.099553][ T5464] ^ [ 120.104946][ T5464] ffff88807e7e9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 120.113021][ T5464] ffff88807e7e9200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 120.121095][ T5464] ================================================================== [ 120.142565][ T5480] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 120.150888][ T5464] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 120.158213][ T5464] CPU: 0 UID: 0 PID: 5464 Comm: syz.1.21 Not tainted 6.11.0-rc5-syzkaller-00079-g928f79a188aa #0 [ 120.168717][ T5464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 120.178870][ T5464] Call Trace: [ 120.182172][ T5464] [ 120.185119][ T5464] dump_stack_lvl+0x241/0x360 [ 120.189947][ T5464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.195184][ T5464] ? __pfx__printk+0x10/0x10 [ 120.199797][ T5464] ? preempt_schedule+0xe1/0xf0 [ 120.204662][ T5464] ? vscnprintf+0x5d/0x90 [ 120.209009][ T5464] panic+0x349/0x860 [ 120.212946][ T5464] ? check_panic_on_warn+0x21/0xb0 [ 120.218068][ T5464] ? __pfx_panic+0x10/0x10 [ 120.222507][ T5464] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 120.228506][ T5464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 120.234836][ T5464] ? print_report+0x502/0x550 [ 120.239531][ T5464] check_panic_on_warn+0x86/0xb0 [ 120.244478][ T5464] ? destroy_workqueue+0x41/0xc40 [ 120.249501][ T5464] end_report+0x77/0x160 [ 120.253742][ T5464] kasan_report+0x154/0x180 [ 120.258251][ T5464] ? destroy_workqueue+0x41/0xc40 [ 120.263285][ T5464] destroy_workqueue+0x41/0xc40 [ 120.268137][ T5464] ? destroy_workqueue+0x86f/0xc40 [ 120.273251][ T5464] gfs2_fill_super+0x128a/0x2500 [ 120.278208][ T5464] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.283499][ T5464] ? snprintf+0xda/0x120 [ 120.287747][ T5464] ? __pfx_lock_release+0x10/0x10 [ 120.292776][ T5464] ? do_raw_spin_lock+0x14f/0x370 [ 120.297802][ T5464] ? __pfx_snprintf+0x10/0x10 [ 120.302488][ T5464] ? sb_set_blocksize+0x98/0xf0 [ 120.307343][ T5464] ? setup_bdev_super+0x4e6/0x5d0 [ 120.312370][ T5464] get_tree_bdev+0x3f7/0x570 [ 120.316966][ T5464] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.322282][ T5464] ? __pfx_get_tree_bdev+0x10/0x10 [ 120.327407][ T5464] gfs2_get_tree+0x54/0x220 [ 120.331919][ T5464] ? bpf_lsm_capable+0x9/0x10 [ 120.336597][ T5464] vfs_get_tree+0x90/0x2b0 [ 120.341016][ T5464] do_new_mount+0x2be/0xb40 [ 120.345528][ T5464] ? __pfx_do_new_mount+0x10/0x10 [ 120.350559][ T5464] __se_sys_mount+0x2d6/0x3c0 [ 120.355247][ T5464] ? __pfx___se_sys_mount+0x10/0x10 [ 120.360469][ T5464] ? do_syscall_64+0x100/0x230 [ 120.365249][ T5464] ? __x64_sys_mount+0x20/0xc0 [ 120.370027][ T5464] do_syscall_64+0xf3/0x230 [ 120.374528][ T5464] ? clear_bhb_loop+0x35/0x90 [ 120.379272][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.385185][ T5464] RIP: 0033:0x7fd68f97b69a [ 120.389600][ T5464] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.409205][ T5464] RSP: 002b:00007fd690720e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.417619][ T5464] RAX: ffffffffffffffda RBX: 00007fd690720ef0 RCX: 00007fd68f97b69a [ 120.425588][ T5464] RDX: 00000000200003c0 RSI: 0000000020037f80 RDI: 00007fd690720eb0 [ 120.433553][ T5464] RBP: 00000000200003c0 R08: 00007fd690720ef0 R09: 0000000000000000 [ 120.441602][ T5464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020037f80 [ 120.449567][ T5464] R13: 00007fd690720eb0 R14: 0000000000037f59 R15: 0000000020000100 [ 120.457540][ T5464] [ 120.460843][ T5464] Kernel Offset: disabled [ 120.465163][ T5464] Rebooting in 86400 seconds..