Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts.
2026/09/30 00:02:27 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 103.867516][ T5960] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 107.140924][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.140944][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.175474][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.175496][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.948266][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.948389][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.948468][ T6056] bridge_slave_0: entered allmulticast mode
[ 107.949356][ T6056] bridge_slave_0: entered promiscuous mode
[ 107.952490][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.952649][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.952768][ T6056] bridge_slave_1: entered allmulticast mode
[ 107.954357][ T6056] bridge_slave_1: entered promiscuous mode
[ 107.987607][ T6056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.991325][ T6056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 108.018621][ T6056] team0: Port device team_slave_0 added
[ 108.021393][ T6056] team0: Port device team_slave_1 added
[ 108.044088][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 108.044105][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 108.044127][ T6056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 108.045213][ T6056] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 108.045226][ T6056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 108.045247][ T6056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 108.079878][ T6056] hsr_slave_0: entered promiscuous mode
[ 108.080877][ T6056] hsr_slave_1: entered promiscuous mode
[ 108.570583][ T6056] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 108.574137][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 108.575031][ T6056] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 108.579485][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 108.580312][ T6056] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 108.591476][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 108.593840][ T6056] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 108.609315][ T6056] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 108.718441][ T6056] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.734243][ T6056] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.740457][ T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.740574][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.755085][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.755182][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 109.250921][ T6056] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 109.310422][ T6056] veth0_vlan: entered promiscuous mode
[ 109.322445][ T6056] veth1_vlan: entered promiscuous mode
[ 109.354213][ T6056] veth0_macvtap: entered promiscuous mode
[ 109.359036][ T6056] veth1_macvtap: entered promiscuous mode
[ 109.375521][ T6056] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 109.388310][ T6056] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 109.464178][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.464582][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.464895][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.465219][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.669452][ T1001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 109.826079][ T1001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 109.894592][ T1001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 110.006790][ T1001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 111.857806][ T1001] bridge_slave_1: left allmulticast mode
[ 111.857832][ T1001] bridge_slave_1: left promiscuous mode
[ 111.858024][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state
[ 111.881945][ T1001] bridge_slave_0: left allmulticast mode
[ 111.881971][ T1001] bridge_slave_0: left promiscuous mode
[ 111.882193][ T1001] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.014447][ T1001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 112.016308][ T1001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 112.017284][ T1001] bond0 (unregistering): Released all slaves
[ 112.102622][ T1001] hsr_slave_0: left promiscuous mode
[ 112.108854][ T1001] hsr_slave_1: left promiscuous mode
[ 112.109847][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 112.109868][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 112.112322][ T1001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 112.112341][ T1001] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 112.144949][ T1001] veth1_macvtap: left promiscuous mode
[ 112.144986][ T1001] veth0_macvtap: left promiscuous mode
[ 112.145075][ T1001] veth1_vlan: left promiscuous mode
[ 112.145883][ T1001] veth0_vlan: left promiscuous mode
[ 112.647826][ T1001] team0 (unregistering): Port device team_slave_1 removed
[ 112.661238][ T1001] team0 (unregistering): Port device team_slave_0 removed
[ 113.101448][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 113.103581][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 113.111742][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 113.123467][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 113.125301][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2026/09/30 00:02:43 executed programs: 0
[ 114.671817][ T5666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.677382][ T5666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.681570][ T5666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.683084][ T5666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.684002][ T5666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 115.420981][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.421134][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.421255][ T6296] bridge_slave_0: entered allmulticast mode
[ 115.422793][ T6296] bridge_slave_0: entered promiscuous mode
[ 115.452396][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.452581][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.452706][ T6296] bridge_slave_1: entered allmulticast mode
[ 115.475287][ T6296] bridge_slave_1: entered promiscuous mode
[ 115.510041][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 115.513028][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 115.558461][ T6296] team0: Port device team_slave_0 added
[ 115.561171][ T6296] team0: Port device team_slave_1 added
[ 115.599333][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 115.599351][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.599373][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 115.601213][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 115.601226][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 115.601249][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 115.704016][ T6296] hsr_slave_0: entered promiscuous mode
[ 115.704920][ T6296] hsr_slave_1: entered promiscuous mode
[ 116.180653][ T6296] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 116.191713][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 116.192878][ T6296] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 116.211155][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 116.228209][ T6296] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 116.231858][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 116.248901][ T6296] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 116.252678][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 116.346170][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0
[ 116.373854][ T6296] 8021q: adding VLAN 0 to HW filter on device team0
[ 116.380694][ T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.380786][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 116.412119][ T61] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.412218][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 116.763769][ T5666] Bluetooth: hci0: command tx timeout
[ 116.769536][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.805169][ T6296] veth0_vlan: entered promiscuous mode
[ 116.809566][ T6296] veth1_vlan: entered promiscuous mode
[ 116.839738][ T6296] veth0_macvtap: entered promiscuous mode
[ 116.842588][ T6296] veth1_macvtap: entered promiscuous mode
[ 116.858063][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 116.872810][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 116.905466][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.906281][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.906317][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.932990][ T1001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.951535][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.951556][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.980989][ T291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.981010][ T291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.240744][ T6386] loop0: detected capacity change from 0 to 32768
[ 117.265607][ T6386] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 117.265626][ T6386] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 117.300244][ T6386] syz.0.17: attempt to access beyond end of device
[ 117.300244][ T6386] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 117.300295][ T6386] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 117.300324][ T6386] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 117.300351][ T6386] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6386 [syz.0.17] init_journal+0x1806/0x2390
[ 117.300402][ T6386] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 117.300440][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 117.300461][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 117.300480][ T6386] Call Trace:
[ 117.300488][ T6386]
[ 117.300499][ T6386] dump_stack_lvl+0xe8/0x150
[ 117.300528][ T6386] gfs2_withdraw+0xc3/0x1b0
[ 117.300557][ T6386] gfs2_jdesc_check+0x17d/0x2f0
[ 117.300582][ T6386] check_journal_clean+0x192/0x370
[ 117.300611][ T6386] ? __pfx_check_journal_clean+0x10/0x10
[ 117.300641][ T6386] ? init_journal+0x1806/0x2390
[ 117.300681][ T6386] ? do_raw_spin_unlock+0xf5/0x200
[ 117.300707][ T6386] ? _raw_spin_unlock+0x28/0x50
[ 117.300729][ T6386] ? gfs2_jdesc_find+0xab/0xc0
[ 117.300750][ T6386] init_journal+0x1806/0x2390
[ 117.300789][ T6386] ? init_inodes+0xdb/0x320
[ 117.300817][ T6386] ? __asan_memcpy+0x40/0x70
[ 117.300839][ T6386] ? __pfx_init_journal+0x10/0x10
[ 117.300865][ T6386] ? vsnprintf+0xe42/0xef0
[ 117.300897][ T6386] ? snprintf+0xe8/0x140
[ 117.300918][ T6386] ? init_inodes+0xdb/0x320
[ 117.300945][ T6386] ? __pfx_snprintf+0x10/0x10
[ 117.300967][ T6386] ? gfs2_glock_nq_num+0x15f/0x1a0
[ 117.300990][ T6386] init_inodes+0xdb/0x320
[ 117.301020][ T6386] gfs2_fill_super+0x193f/0x20b0
[ 117.301059][ T6386] ? __pfx_gfs2_fill_super+0x10/0x10
[ 117.301090][ T6386] ? init_locking+0xb8/0x210
[ 117.301115][ T6386] ? sb_set_blocksize+0x155/0x240
[ 117.301144][ T6386] ? setup_bdev_super+0x586/0x680
[ 117.301168][ T6386] get_tree_bdev_flags+0x430/0x4f0
[ 117.301194][ T6386] ? __pfx_gfs2_fill_super+0x10/0x10
[ 117.301221][ T6386] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 117.301257][ T6386] gfs2_get_tree+0x51/0x1e0
[ 117.301287][ T6386] vfs_get_tree+0x92/0x2a0
[ 117.301315][ T6386] do_new_mount+0x319/0xdc0
[ 117.301342][ T6386] ? __pfx_do_new_mount+0x10/0x10
[ 117.301366][ T6386] ? ns_capable+0x84/0xe0
[ 117.301393][ T6386] ? path_mount+0x647/0x1050
[ 117.301418][ T6386] ? user_path_at+0xd4/0x160
[ 117.301444][ T6386] __se_sys_mount+0x31d/0x420
[ 117.301472][ T6386] ? __pfx___se_sys_mount+0x10/0x10
[ 117.301501][ T6386] ? __x64_sys_mount+0x20/0xc0
[ 117.301525][ T6386] do_syscall_64+0x166/0x520
[ 117.301549][ T6386] ? trace_irq_disable+0x3b/0x140
[ 117.301573][ T6386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.301592][ T6386] ? clear_bhb_loop+0x70/0xc0
[ 117.301615][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.301634][ T6386] RIP: 0033:0x7fb9eaf9e04a
[ 117.301665][ T6386] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 117.301680][ T6386] RSP: 002b:00007fb9ebe14e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 117.301703][ T6386] RAX: ffffffffffffffda RBX: 00007fb9ebe14ee0 RCX: 00007fb9eaf9e04a
[ 117.301717][ T6386] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007fb9ebe14ea0
[ 117.301731][ T6386] RBP: 0000200000000000 R08: 00007fb9ebe14ee0 R09: 0000000000208c1b
[ 117.301744][ T6386] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 117.301756][ T6386] R13: 00007fb9ebe14ea0 R14: 0000000000012754 R15: 00002000000128c0
[ 117.301786][ T6386]
[ 117.328826][ T6386] gfs2: fsid=..s: Error checking journal for spectator mount.
[ 117.715259][ T6390] ==================================================================
[ 117.715271][ T6390] BUG: KASAN: slab-use-after-free in lru_add+0x25a/0xea0
[ 117.715292][ T6390] Read of size 8 at addr ffff88802170bbc0 by task syz.0.18/6390
[ 117.715300][ T6390]
[ 117.715307][ T6390] CPU: 1 UID: 0 PID: 6390 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 117.715317][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 117.715324][ T6390] Call Trace:
[ 117.715328][ T6390]
[ 117.715333][ T6390] dump_stack_lvl+0xe8/0x150
[ 117.715348][ T6390] print_address_description+0x55/0x1e0
[ 117.715362][ T6390] ? lru_add+0x25a/0xea0
[ 117.715375][ T6390] print_report+0x58/0x70
[ 117.715386][ T6390] kasan_report+0x117/0x150
[ 117.715402][ T6390] ? lru_add+0x25a/0xea0
[ 117.715416][ T6390] kasan_check_range+0x264/0x2c0
[ 117.715430][ T6390] ? lru_add+0x197/0xea0
[ 117.715443][ T6390] lru_add+0x25a/0xea0
[ 117.715457][ T6390] folio_batch_move_lru+0x6e9/0xa60
[ 117.715472][ T6390] ? __pfx_lru_add+0x10/0x10
[ 117.715485][ T6390] ? __lock_acquire+0x747/0x2de0
[ 117.715498][ T6390] ? __pfx_folio_batch_move_lru+0x10/0x10
[ 117.715517][ T6390] ? do_raw_spin_lock+0x12b/0x2f0
[ 117.715527][ T6390] ? __pfx_lru_add+0x10/0x10
[ 117.715540][ T6390] __folio_batch_add_and_move+0x510/0xc50
[ 117.715554][ T6390] ? __pfx_lru_add+0x10/0x10
[ 117.715568][ T6390] shmem_alloc_and_add_folio+0xcc2/0xf60
[ 117.715583][ T6390] ? __pfx_filemap_get_entry+0x10/0x10
[ 117.715597][ T6390] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 117.715610][ T6390] ? copy_folio_from_iter_atomic+0x1974/0x1a30
[ 117.715622][ T6390] shmem_get_folio_gfp+0x594/0x1330
[ 117.715637][ T6390] shmem_write_begin+0x16c/0x330
[ 117.715651][ T6390] generic_perform_write+0x2d5/0x8e0
[ 117.715670][ T6390] ? __pfx_generic_perform_write+0x10/0x10
[ 117.715684][ T6390] ? preempt_count_add+0x6a/0x140
[ 117.715694][ T6390] ? mnt_put_write_access_file+0xbc/0x100
[ 117.715709][ T6390] ? file_update_time_flags+0x3ab/0x440
[ 117.715724][ T6390] shmem_file_write_iter+0xf8/0x120
[ 117.715738][ T6390] vfs_write+0x612/0xba0
[ 117.715751][ T6390] ? __pfx_vfs_write+0x10/0x10
[ 117.715763][ T6390] ? __fget_files+0x3a2/0x420
[ 117.715774][ T6390] ? __fget_files+0x2a/0x420
[ 117.715785][ T6390] ? fdget+0x1ac/0x250
[ 117.715797][ T6390] ksys_write+0x150/0x270
[ 117.715809][ T6390] ? __pfx_ksys_write+0x10/0x10
[ 117.715823][ T6390] do_syscall_64+0x166/0x520
[ 117.715836][ T6390] ? trace_irq_disable+0x3b/0x140
[ 117.715849][ T6390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.715859][ T6390] ? clear_bhb_loop+0x70/0xc0
[ 117.715869][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.715879][ T6390] RIP: 0033:0x7fb9eaf5d60e
[ 117.715888][ T6390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 117.715896][ T6390] RSP: 002b:00007fb9ebe14da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 117.715908][ T6390] RAX: ffffffffffffffda RBX: 00007fb9ebe156c0 RCX: 00007fb9eaf5d60e
[ 117.715915][ T6390] RDX: 0000000001000000 RSI: 00007fb9e2000000 RDI: 0000000000000003
[ 117.715921][ T6390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 117.715927][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 117.715933][ T6390] R13: 00007fb9ebe14ee0 R14: 00007fb9ebe14ea0 R15: 00007fb9e2000000
[ 117.715943][ T6390]
[ 117.715946][ T6390]
[ 117.715948][ T6390] Allocated by task 6386:
[ 117.715953][ T6390] kasan_save_track+0x3e/0x80
[ 117.715965][ T6390] __kasan_slab_alloc+0x6c/0x80
[ 117.715977][ T6390] kmem_cache_alloc_noprof+0x2b4/0x600
[ 117.715987][ T6390] gfs2_glock_get+0x276/0xf20
[ 117.715994][ T6390] gfs2_inode_lookup+0x296/0xb90
[ 117.716002][ T6390] gfs2_dir_search+0x168/0x220
[ 117.716015][ T6390] gfs2_lookupi+0x3ee/0x5c0
[ 117.716022][ T6390] init_journal+0x5b1/0x2390
[ 117.716036][ T6390] init_inodes+0xdb/0x320
[ 117.716048][ T6390] gfs2_fill_super+0x193f/0x20b0
[ 117.716060][ T6390] get_tree_bdev_flags+0x430/0x4f0
[ 117.716072][ T6390] gfs2_get_tree+0x51/0x1e0
[ 117.716084][ T6390] vfs_get_tree+0x92/0x2a0
[ 117.716095][ T6390] do_new_mount+0x319/0xdc0
[ 117.716104][ T6390] __se_sys_mount+0x31d/0x420
[ 117.716114][ T6390] do_syscall_64+0x166/0x520
[ 117.716128][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.716137][ T6390]
[ 117.716139][ T6390] Freed by task 15:
[ 117.716143][ T6390] kasan_save_track+0x3e/0x80
[ 117.716159][ T6390] kasan_save_free_info+0x40/0x50
[ 117.716168][ T6390] __kasan_slab_free+0x5c/0x80
[ 117.716179][ T6390] kmem_cache_free+0x182/0x650
[ 117.716190][ T6390] rcu_core+0x926/0x1260
[ 117.716202][ T6390] handle_softirqs+0x223/0x840
[ 117.716214][ T6390] run_ksoftirqd+0x36/0x60
[ 117.716226][ T6390] smpboot_thread_fn+0x565/0xa70
[ 117.716235][ T6390] kthread+0x38b/0x480
[ 117.716245][ T6390] ret_from_fork+0x514/0xb70
[ 117.716253][ T6390] ret_from_fork_asm+0x1a/0x30
[ 117.716266][ T6390]
[ 117.716268][ T6390] Last potentially related work creation:
[ 117.716272][ T6390] kasan_save_stack+0x3e/0x60
[ 117.716282][ T6390] kasan_record_aux_stack+0xbd/0xd0
[ 117.716291][ T6390] call_rcu+0x86/0x300
[ 117.716305][ T6390] gfs2_glock_free+0x3c/0xa0
[ 117.716317][ T6390] gfs2_evict_inode+0xdfc/0x13f0
[ 117.716326][ T6390] evict+0x624/0xb50
[ 117.716338][ T6390] gfs2_jindex_free+0x398/0x450
[ 117.716346][ T6390] init_journal+0x8dd/0x2390
[ 117.716358][ T6390] init_inodes+0xdb/0x320
[ 117.716370][ T6390] gfs2_fill_super+0x193f/0x20b0
[ 117.716382][ T6390] get_tree_bdev_flags+0x430/0x4f0
[ 117.716395][ T6390] gfs2_get_tree+0x51/0x1e0
[ 117.716409][ T6390] vfs_get_tree+0x92/0x2a0
[ 117.716419][ T6390] do_new_mount+0x319/0xdc0
[ 117.716429][ T6390] __se_sys_mount+0x31d/0x420
[ 117.716438][ T6390] do_syscall_64+0x166/0x520
[ 117.716449][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 117.716458][ T6390]
[ 117.716460][ T6390] Second to last potentially related work creation:
[ 117.716463][ T6390] kasan_save_stack+0x3e/0x60
[ 117.716474][ T6390] kasan_record_aux_stack+0xbd/0xd0
[ 117.716483][ T6390] insert_work+0x3d/0x330
[ 117.716494][ T6390] __queue_work+0xd3c/0x1360
[ 117.716507][ T6390] queue_delayed_work_on+0x11a/0x1e0
[ 117.716520][ T6390] do_xmote+0x539/0x770
[ 117.716529][ T6390] glock_work_func+0x2d4/0x5d0
[ 117.716536][ T6390] process_scheduled_works+0xc3d/0x1630
[ 117.716549][ T6390] worker_thread+0xa47/0xfb0
[ 117.716561][ T6390] kthread+0x38b/0x480
[ 117.716570][ T6390] ret_from_fork+0x514/0xb70
[ 117.716577][ T6390] ret_from_fork_asm+0x1a/0x30
[ 117.716589][ T6390]
[ 117.716591][ T6390] The buggy address belongs to the object at ffff88802170b808
[ 117.716591][ T6390] which belongs to the cache gfs2_glock(aspace) of size 1176
[ 117.716599][ T6390] The buggy address is located 952 bytes inside of
[ 117.716599][ T6390] freed 1176-byte region [ffff88802170b808, ffff88802170bca0)
[ 117.716609][ T6390]
[ 117.716611][ T6390] The buggy address belongs to the physical page:
[ 117.716623][ T6390] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21708
[ 117.716635][ T6390] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 117.716642][ T6390] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 117.716654][ T6390] page_type: f5(slab)
[ 117.716663][ T6390] raw: 00fff00000000040 ffff88801e773b40 dead000000000122 0000000000000000
[ 117.716671][ T6390] raw: 0000000000000000 00000002000c000c 00000000f5000000 0000000000000000
[ 117.716680][ T6390] head: 00fff00000000040 ffff88801e773b40 dead000000000122 0000000000000000
[ 117.716687][ T6390] head: 0000000000000000 00000002000c000c 00000000f5000000 0000000000000000
[ 117.716696][ T6390] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[ 117.716703][ T6390] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 117.716708][ T6390] page dumped because: kasan: bad access detected
[ 117.716716][ T6390] page_owner tracks the page as allocated
[ 117.716720][ T6390] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6386, tgid 6385 (syz.0.17), ts 117289703707
[ 117.716735][ T6390] post_alloc_hook+0x1f9/0x250
[ 117.716745][ T6390] get_page_from_freelist+0x220f/0x2280
[ 117.716757][ T6390] __alloc_frozen_pages_noprof+0x1fc/0x400
[ 117.716768][ T6390] allocate_slab+0x7d/0x5e0
[ 117.716776][ T6390] refill_objects+0x2d5/0x350
[ 117.716783][ T6390] __pcs_replace_empty_main+0x2c8/0x6c0
[ 117.716796][ T6390] kmem_cache_alloc_noprof+0x394/0x600
[ 117.716806][ T6390] gfs2_glock_get+0x276/0xf20
[ 117.716813][ T6390] gfs2_inode_lookup+0x296/0xb90
[ 117.716820][ T6390] gfs2_dir_search+0x168/0x220
[ 117.716832][ T6390] gfs2_lookupi+0x3ee/0x5c0
[ 117.716839][ T6390] init_journal+0x5b1/0x2390
[ 117.716851][ T6390] init_inodes+0xdb/0x320
[ 117.716863][ T6390] gfs2_fill_super+0x193f/0x20b0
[ 117.716878][ T6390] get_tree_bdev_flags+0x430/0x4f0
[ 117.716890][ T6390] gfs2_get_tree+0x51/0x1e0
[ 117.716902][ T6390] page last free pid 1001 tgid 1001 ts 112532787567 stack trace:
[ 117.716909][ T6390] __free_frozen_pages+0xc97/0xd90
[ 117.716918][ T6390] __slab_free+0x269/0x2c0
[ 117.716928][ T6390] qlist_free_all+0x99/0x100
[ 117.716939][ T6390] kasan_quarantine_reduce+0x148/0x160
[ 117.716949][ T6390] __kasan_slab_alloc+0x22/0x80
[ 117.716961][ T6390] kmem_cache_alloc_node_noprof+0x34f/0x600
[ 117.716971][ T6390] __alloc_skb+0x1db/0x7a0
[ 117.716981][ T6390] inet_netconf_notify_devconf+0x173/0x240
[ 117.716993][ T6390] inetdev_event+0x633/0x1610
[ 117.717005][ T6390] notifier_call_chain+0x1a5/0x3d0
[ 117.717015][ T6390] unregister_netdevice_many_notify+0x17f4/0x2140
[ 117.717029][ T6390] default_device_exit_batch+0x6cf/0x760
[ 117.717039][ T6390] ops_undo_list+0x4d7/0x8f0
[ 117.717049][ T6390] cleanup_net+0x572/0x810
[ 117.717058][ T6390] process_scheduled_works+0xc3d/0x1630
[ 117.717070][ T6390] worker_thread+0xa47/0xfb0
[ 117.717083][ T6390]
[ 117.717085][ T6390] Memory state around the buggy address:
[ 117.717090][ T6390] ffff88802170ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.717096][ T6390] ffff88802170bb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.717102][ T6390] >ffff88802170bb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.717107][ T6390] ^
[ 117.717112][ T6390] ffff88802170bc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 117.717118][ T6390] ffff88802170bc80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 117.717122][ T6390] ==================================================================
[ 117.717132][ T6390] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 118.734338][ T6390] CPU: 1 UID: 0 PID: 6390 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 118.743540][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 118.753606][ T6390] Call Trace:
[ 118.756881][ T6390]
[ 118.759894][ T6390] vpanic+0x26f/0x710
[ 118.763977][ T6390] panic+0xc5/0xd0
[ 118.767753][ T6390] ? __pfx_panic+0x10/0x10
[ 118.772175][ T6390] ? lru_add+0x25a/0xea0
[ 118.776418][ T6390] ? rcu_is_watching+0x16/0xb0
[ 118.781185][ T6390] ? lru_add+0x25a/0xea0
[ 118.785427][ T6390] ? lru_add+0x25a/0xea0
[ 118.789667][ T6390] check_panic_on_warn+0x89/0xb0
[ 118.794599][ T6390] ? lru_add+0x25a/0xea0
[ 118.798836][ T6390] end_report+0x73/0x170
[ 118.803114][ T6390] ? lru_add+0x25a/0xea0
[ 118.807356][ T6390] kasan_report+0x128/0x150
[ 118.811866][ T6390] ? lru_add+0x25a/0xea0
[ 118.816120][ T6390] kasan_check_range+0x264/0x2c0
[ 118.821073][ T6390] ? lru_add+0x197/0xea0
[ 118.825326][ T6390] lru_add+0x25a/0xea0
[ 118.829397][ T6390] folio_batch_move_lru+0x6e9/0xa60
[ 118.834645][ T6390] ? __pfx_lru_add+0x10/0x10
[ 118.839234][ T6390] ? __lock_acquire+0x747/0x2de0
[ 118.844174][ T6390] ? __pfx_folio_batch_move_lru+0x10/0x10
[ 118.849930][ T6390] ? do_raw_spin_lock+0x12b/0x2f0
[ 118.854972][ T6390] ? __pfx_lru_add+0x10/0x10
[ 118.859684][ T6390] __folio_batch_add_and_move+0x510/0xc50
[ 118.865403][ T6390] ? __pfx_lru_add+0x10/0x10
[ 118.870001][ T6390] shmem_alloc_and_add_folio+0xcc2/0xf60
[ 118.875633][ T6390] ? __pfx_filemap_get_entry+0x10/0x10
[ 118.881214][ T6390] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 118.887390][ T6390] ? copy_folio_from_iter_atomic+0x1974/0x1a30
[ 118.893552][ T6390] shmem_get_folio_gfp+0x594/0x1330
[ 118.898756][ T6390] shmem_write_begin+0x16c/0x330
[ 118.903696][ T6390] generic_perform_write+0x2d5/0x8e0
[ 118.909013][ T6390] ? __pfx_generic_perform_write+0x10/0x10
[ 118.914818][ T6390] ? preempt_count_add+0x6a/0x140
[ 118.919836][ T6390] ? mnt_put_write_access_file+0xbc/0x100
[ 118.925569][ T6390] ? file_update_time_flags+0x3ab/0x440
[ 118.931144][ T6390] shmem_file_write_iter+0xf8/0x120
[ 118.936360][ T6390] vfs_write+0x612/0xba0
[ 118.940639][ T6390] ? __pfx_vfs_write+0x10/0x10
[ 118.945420][ T6390] ? __fget_files+0x3a2/0x420
[ 118.950115][ T6390] ? __fget_files+0x2a/0x420
[ 118.954712][ T6390] ? fdget+0x1ac/0x250
[ 118.958793][ T6390] ksys_write+0x150/0x270
[ 118.963146][ T6390] ? __pfx_ksys_write+0x10/0x10
[ 118.967995][ T6390] do_syscall_64+0x166/0x520
[ 118.972586][ T6390] ? trace_irq_disable+0x3b/0x140
[ 118.977696][ T6390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.983758][ T6390] ? clear_bhb_loop+0x70/0xc0
[ 118.988432][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 118.994343][ T6390] RIP: 0033:0x7fb9eaf5d60e
[ 118.998753][ T6390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 119.018383][ T6390] RSP: 002b:00007fb9ebe14da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 119.026809][ T6390] RAX: ffffffffffffffda RBX: 00007fb9ebe156c0 RCX: 00007fb9eaf5d60e
[ 119.034780][ T6390] RDX: 0000000001000000 RSI: 00007fb9e2000000 RDI: 0000000000000003
[ 119.042749][ T6390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 119.050709][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 119.058682][ T6390] R13: 00007fb9ebe14ee0 R14: 00007fb9ebe14ea0 R15: 00007fb9e2000000
[ 119.066662][ T6390]
[ 119.069937][ T6390] Kernel Offset: disabled
[ 119.074278][ T6390] Rebooting in 86400 seconds..