Warning: Permanently added '[localhost]:58665' (ED25519) to the list of known hosts.
2026/01/27 09:36:06 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 135.702138][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 140.602967][ T4670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 140.607783][ T4670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 140.613518][ T4670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 140.618419][ T4670] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 140.622461][ T4670] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 143.094788][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[ 143.097755][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[ 144.631359][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 144.634920][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 145.437090][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 145.448162][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 146.508077][ T5639] syz-executor (5639) used greatest stack depth: 17544 bytes left
[ 148.775291][ T5658] chnl_net:caif_netlink_parms(): no params data found
[ 149.071901][ T5658] bridge0: port 1(bridge_slave_0) entered blocking state
[ 149.089917][ T5658] bridge0: port 1(bridge_slave_0) entered disabled state
[ 149.093184][ T5658] bridge_slave_0: entered allmulticast mode
[ 149.118765][ T5658] bridge_slave_0: entered promiscuous mode
[ 149.129122][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state
[ 149.147199][ T5658] bridge0: port 2(bridge_slave_1) entered disabled state
[ 149.155491][ T5658] bridge_slave_1: entered allmulticast mode
[ 149.175592][ T5658] bridge_slave_1: entered promiscuous mode
[ 149.275021][ T5658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 149.296407][ T5658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 149.374846][ T5658] team0: Port device team_slave_0 added
[ 149.382347][ T5658] team0: Port device team_slave_1 added
[ 149.426158][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 149.429230][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 149.455051][ T5658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 149.490028][ T5658] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 149.493184][ T5658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 149.519912][ T5658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 149.620824][ T5658] hsr_slave_0: entered promiscuous mode
[ 149.631365][ T5658] hsr_slave_1: entered promiscuous mode
[ 149.938255][ T5658] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 149.951091][ T5658] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 149.968437][ T5658] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 149.988436][ T5658] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 150.019003][ T5658] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.022344][ T5658] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 150.051952][ T54] bridge0: port 2(bridge_slave_1) entered disabled state
[ 150.078884][ T5658] 8021q: adding VLAN 0 to HW filter on device bond0
[ 150.092782][ T5658] 8021q: adding VLAN 0 to HW filter on device team0
[ 150.099304][ T54] bridge0: port 1(bridge_slave_0) entered blocking state
[ 150.102521][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 150.117882][ T54] bridge0: port 2(bridge_slave_1) entered blocking state
[ 150.121111][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 150.478819][ T5658] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 150.552785][ T5658] veth0_vlan: entered promiscuous mode
[ 150.572355][ T5658] veth1_vlan: entered promiscuous mode
[ 150.617950][ T5658] veth0_macvtap: entered promiscuous mode
[ 150.634106][ T5658] veth1_macvtap: entered promiscuous mode
[ 150.674515][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 150.691408][ T5658] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 150.717228][ T1042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 150.722480][ T1042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 150.726257][ T1042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 150.764143][ T1042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/01/27 09:36:26 executed programs: 0
[ 150.989087][ T5361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 150.997886][ T5361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 151.019472][ T5361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 151.030036][ T5361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 151.033507][ T5361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 151.180851][ T5361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 151.220339][ T5361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 151.234014][ T5361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 151.245625][ T5361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 151.256202][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 151.260783][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 151.264192][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 151.271471][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 151.276876][ T4670] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 151.281298][ T4670] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 151.311675][ T5731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 151.320861][ T5731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 151.325570][ T5731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 151.330829][ T5731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 151.334774][ T5731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 151.434497][ T5361] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 151.440369][ T5361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 151.444517][ T5361] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 151.448273][ T5361] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 151.451907][ T5361] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 151.455810][ T5361] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 151.459808][ T5361] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 151.465855][ T5361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 151.469148][ T5361] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 151.474270][ T5361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 151.927160][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 152.312441][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 153.073985][ T5719] chnl_net:caif_netlink_parms(): no params data found
[ 153.093633][ T5731] Bluetooth: hci0: command tx timeout
[ 153.157851][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 153.330127][ T5731] Bluetooth: hci2: command tx timeout
[ 153.333087][ T5731] Bluetooth: hci1: command tx timeout
[ 153.410309][ T5361] Bluetooth: hci3: command tx timeout
[ 153.491020][ T5361] Bluetooth: hci4: command tx timeout
[ 153.514252][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state
[ 153.517555][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state
[ 153.527680][ T5719] bridge_slave_0: entered allmulticast mode
[ 153.532039][ T5719] bridge_slave_0: entered promiscuous mode
[ 153.536982][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state
[ 153.550573][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state
[ 153.553945][ T5719] bridge_slave_1: entered allmulticast mode
[ 153.570126][ T5361] Bluetooth: hci5: command tx timeout
[ 153.573208][ T5719] bridge_slave_1: entered promiscuous mode
[ 153.680983][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 153.709594][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 153.781986][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 153.971651][ T5719] team0: Port device team_slave_0 added
[ 153.996331][ T5725] chnl_net:caif_netlink_parms(): no params data found
[ 154.037679][ T5719] team0: Port device team_slave_1 added
[ 154.148108][ T5739] chnl_net:caif_netlink_parms(): no params data found
[ 154.226444][ T5728] chnl_net:caif_netlink_parms(): no params data found
[ 154.258282][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 154.263315][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 154.276354][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 154.343872][ T5729] chnl_net:caif_netlink_parms(): no params data found
[ 154.367849][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 154.380331][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 154.410078][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 154.571629][ T31] bridge_slave_1: left allmulticast mode
[ 154.574176][ T31] bridge_slave_1: left promiscuous mode
[ 154.576768][ T31] bridge0: port 2(bridge_slave_1) entered disabled state
[ 154.591869][ T31] bridge_slave_0: left allmulticast mode
[ 154.594431][ T31] bridge_slave_0: left promiscuous mode
[ 154.597125][ T31] bridge0: port 1(bridge_slave_0) entered disabled state
[ 154.882497][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 154.888784][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 154.895085][ T31] bond0 (unregistering): Released all slaves
[ 155.000319][ T5735] chnl_net:caif_netlink_parms(): no params data found
[ 155.056235][ T31] hsr_slave_0: left promiscuous mode
[ 155.071150][ T31] hsr_slave_1: left promiscuous mode
[ 155.074430][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 155.077767][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 155.100567][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 155.106490][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 155.145688][ T31] veth1_macvtap: left promiscuous mode
[ 155.148350][ T31] veth0_macvtap: left promiscuous mode
[ 155.171340][ T5361] Bluetooth: hci0: command tx timeout
[ 155.177137][ T31] veth1_vlan: left promiscuous mode
[ 155.179607][ T31] veth0_vlan: left promiscuous mode
[ 155.413822][ T5361] Bluetooth: hci1: command tx timeout
[ 155.416314][ T5361] Bluetooth: hci2: command tx timeout
[ 155.491820][ T5731] Bluetooth: hci3: command tx timeout
[ 155.570868][ T5731] Bluetooth: hci4: command tx timeout
[ 155.650017][ T5731] Bluetooth: hci5: command tx timeout
[ 155.844837][ T31] team0 (unregistering): Port device team_slave_1 removed
[ 155.871589][ T31] team0 (unregistering): Port device team_slave_0 removed
[ 156.175380][ T5719] hsr_slave_0: entered promiscuous mode
[ 156.180589][ T5719] hsr_slave_1: entered promiscuous mode
[ 156.188018][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state
[ 156.191476][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state
[ 156.194658][ T5725] bridge_slave_0: entered allmulticast mode
[ 156.198842][ T5725] bridge_slave_0: entered promiscuous mode
[ 156.269182][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state
[ 156.272631][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state
[ 156.275879][ T5725] bridge_slave_1: entered allmulticast mode
[ 156.282808][ T5725] bridge_slave_1: entered promiscuous mode
[ 156.330000][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state
[ 156.333241][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state
[ 156.336419][ T5739] bridge_slave_0: entered allmulticast mode
[ 156.355449][ T5739] bridge_slave_0: entered promiscuous mode
[ 156.371217][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state
[ 156.375877][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state
[ 156.379080][ T5739] bridge_slave_1: entered allmulticast mode
[ 156.391696][ T5739] bridge_slave_1: entered promiscuous mode
[ 156.683279][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 156.689345][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 156.751622][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 156.760210][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state
[ 156.763412][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state
[ 156.766547][ T5729] bridge_slave_0: entered allmulticast mode
[ 156.792316][ T5729] bridge_slave_0: entered promiscuous mode
[ 156.811939][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state
[ 156.815153][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state
[ 156.818379][ T5729] bridge_slave_1: entered allmulticast mode
[ 156.840923][ T5729] bridge_slave_1: entered promiscuous mode
[ 156.877976][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state
[ 156.900101][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state
[ 156.903561][ T5728] bridge_slave_0: entered allmulticast mode
[ 156.911748][ T5728] bridge_slave_0: entered promiscuous mode
[ 156.931391][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state
[ 156.934558][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state
[ 156.938028][ T5728] bridge_slave_1: entered allmulticast mode
[ 156.977111][ T5728] bridge_slave_1: entered promiscuous mode
[ 157.007802][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 157.124727][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 157.142960][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 157.147190][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[ 157.151307][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[ 157.154814][ T5735] bridge_slave_0: entered allmulticast mode
[ 157.170693][ T5735] bridge_slave_0: entered promiscuous mode
[ 157.175087][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[ 157.178326][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[ 157.190125][ T5735] bridge_slave_1: entered allmulticast mode
[ 157.193975][ T5735] bridge_slave_1: entered promiscuous mode
[ 157.224057][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 157.240217][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 157.245845][ T5739] team0: Port device team_slave_0 added
[ 157.254096][ T5731] Bluetooth: hci0: command tx timeout
[ 157.293627][ T5725] team0: Port device team_slave_0 added
[ 157.320581][ T5739] team0: Port device team_slave_1 added
[ 157.469001][ T5725] team0: Port device team_slave_1 added
[ 157.492478][ T5731] Bluetooth: hci2: command tx timeout
[ 157.494944][ T5731] Bluetooth: hci1: command tx timeout
[ 157.565358][ T5728] team0: Port device team_slave_0 added
[ 157.572363][ T5361] Bluetooth: hci3: command tx timeout
[ 157.608894][ T5729] team0: Port device team_slave_0 added
[ 157.619240][ T5729] team0: Port device team_slave_1 added
[ 157.627829][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 157.644470][ T5728] team0: Port device team_slave_1 added
[ 157.650015][ T5361] Bluetooth: hci4: command tx timeout
[ 157.731310][ T5361] Bluetooth: hci5: command tx timeout
[ 157.734638][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 157.737679][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 157.770828][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 157.777112][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 157.788761][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 157.814508][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 157.873536][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 157.878440][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 157.887206][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 157.919940][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 158.044432][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 158.047450][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 158.062448][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 158.076622][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 158.080724][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 158.092565][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 158.099292][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 158.103220][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 158.115215][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 158.137033][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 158.142235][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 158.156497][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 158.209268][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 158.214310][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 158.226901][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 158.242032][ T5725] hsr_slave_0: entered promiscuous mode
[ 158.245392][ T5725] hsr_slave_1: entered promiscuous mode
[ 158.248878][ T5725] debugfs: 'hsr0' already exists in 'hsr'
[ 158.252133][ T5725] Cannot create hsr debugfs directory
[ 158.266799][ T5735] team0: Port device team_slave_0 added
[ 158.345673][ T5735] team0: Port device team_slave_1 added
[ 158.396109][ T5739] hsr_slave_0: entered promiscuous mode
[ 158.410087][ T5739] hsr_slave_1: entered promiscuous mode
[ 158.413228][ T5739] debugfs: 'hsr0' already exists in 'hsr'
[ 158.415742][ T5739] Cannot create hsr debugfs directory
[ 158.472331][ T5729] hsr_slave_0: entered promiscuous mode
[ 158.498932][ T5729] hsr_slave_1: entered promiscuous mode
[ 158.515793][ T5729] debugfs: 'hsr0' already exists in 'hsr'
[ 158.518387][ T5729] Cannot create hsr debugfs directory
[ 158.552037][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 158.555286][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 158.590581][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 158.704796][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 158.707863][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 158.739914][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 158.795457][ T5728] hsr_slave_0: entered promiscuous mode
[ 158.798580][ T5728] hsr_slave_1: entered promiscuous mode
[ 158.802398][ T5728] debugfs: 'hsr0' already exists in 'hsr'
[ 158.804907][ T5728] Cannot create hsr debugfs directory
[ 159.077535][ T5735] hsr_slave_0: entered promiscuous mode
[ 159.089298][ T5735] hsr_slave_1: entered promiscuous mode
[ 159.100411][ T5735] debugfs: 'hsr0' already exists in 'hsr'
[ 159.103030][ T5735] Cannot create hsr debugfs directory
[ 159.163421][ T5719] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 159.187348][ T5719] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 159.303430][ T5719] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 159.333141][ T5361] Bluetooth: hci0: command tx timeout
[ 159.413995][ T5719] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 159.569938][ T5361] Bluetooth: hci1: command tx timeout
[ 159.572392][ T5361] Bluetooth: hci2: command tx timeout
[ 159.649916][ T5731] Bluetooth: hci3: command tx timeout
[ 159.730554][ T5731] Bluetooth: hci4: command tx timeout
[ 159.811395][ T5731] Bluetooth: hci5: command tx timeout
[ 159.874522][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 159.893471][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 159.966764][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 159.977351][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 160.236693][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0
[ 160.287432][ T5719] 8021q: adding VLAN 0 to HW filter on device team0
[ 160.343304][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state
[ 160.346520][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 160.380896][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state
[ 160.388050][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 160.433875][ T5739] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 160.511997][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0
[ 160.535936][ T5739] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 160.613504][ T5739] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 160.670607][ T5739] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 160.780880][ T5729] 8021q: adding VLAN 0 to HW filter on device team0
[ 160.831607][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state
[ 160.834867][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 160.890959][ T31] bridge0: port 2(bridge_slave_1) entered blocking state
[ 160.894257][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 161.073140][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 161.155757][ T5725] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 161.284604][ T5725] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 161.322109][ T5725] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 161.383858][ T5725] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 161.475452][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 161.531592][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0
[ 161.565627][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 161.666171][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 161.690360][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 161.713454][ T5739] 8021q: adding VLAN 0 to HW filter on device team0
[ 161.745031][ T5719] veth0_vlan: entered promiscuous mode
[ 161.755861][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 161.831189][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 161.834718][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 161.839496][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state
[ 161.842907][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 161.917027][ T5735] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 161.935629][ T5735] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 161.979032][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 161.992747][ T5719] veth1_vlan: entered promiscuous mode
[ 162.034631][ T5735] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 162.052117][ T5735] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 162.332618][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0
[ 162.449390][ T5719] veth0_macvtap: entered promiscuous mode
[ 162.491778][ T5729] veth0_vlan: entered promiscuous mode
[ 162.527989][ T5725] 8021q: adding VLAN 0 to HW filter on device team0
[ 162.545862][ T5719] veth1_macvtap: entered promiscuous mode
[ 162.599071][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 162.602354][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 162.644366][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 162.647526][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 162.685078][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0
[ 162.729140][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 162.774048][ T5729] veth1_vlan: entered promiscuous mode
[ 162.843007][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 162.950473][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 162.969290][ T5728] 8021q: adding VLAN 0 to HW filter on device team0
[ 163.020957][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 163.044104][ T31] bridge0: port 1(bridge_slave_0) entered blocking state
[ 163.047246][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 163.061882][ T31] bridge0: port 2(bridge_slave_1) entered blocking state
[ 163.065180][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 163.078859][ T5729] veth0_macvtap: entered promiscuous mode
[ 163.106015][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 163.120684][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 163.164250][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 163.192800][ T5729] veth1_macvtap: entered promiscuous mode
[ 163.283378][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0
[ 163.407661][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 163.510937][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 163.587340][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 163.609909][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 163.626863][ T5735] 8021q: adding VLAN 0 to HW filter on device team0
[ 163.666656][ T1042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 163.692634][ T1042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 163.696375][ T1042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 163.833597][ T1042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 163.845554][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 163.849350][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 163.868337][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 163.871540][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 163.996247][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 163.999634][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 164.031847][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 164.186552][ T5735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 164.214183][ T5735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 164.259039][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 164.361605][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 164.402336][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/01/27 09:36:39 executed programs: 12
[ 164.565626][ T5725] veth0_vlan: entered promiscuous mode
[ 164.722084][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 164.729916][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 164.767241][ T5725] veth1_vlan: entered promiscuous mode
[ 164.797863][ T5739] veth0_vlan: entered promiscuous mode
[ 164.878604][ T5739] veth1_vlan: entered promiscuous mode
[ 165.068759][ T5728] veth0_vlan: entered promiscuous mode
[ 165.088015][ T5725] veth0_macvtap: entered promiscuous mode
[ 165.176688][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 165.235706][ T5739] veth0_macvtap: entered promiscuous mode
[ 165.261372][ T5728] veth1_vlan: entered promiscuous mode
[ 165.270620][ T5725] veth1_macvtap: entered promiscuous mode
[ 165.296117][ T5739] veth1_macvtap: entered promiscuous mode
[ 165.351443][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 165.454996][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 165.470523][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 165.525260][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 165.609757][ T5728] veth0_macvtap: entered promiscuous mode
[ 165.742875][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.749260][ T5728] veth1_macvtap: entered promiscuous mode
[ 165.754084][ T5960] loop0: detected capacity change from 0 to 32768
[ 165.837042][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.856257][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.861886][ T5960] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 165.865239][ T5960] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 165.935590][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 165.967074][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 166.012662][ T5960] syz.0.17: attempt to access beyond end of device
[ 166.012662][ T5960] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 166.063586][ T5960] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 166.069572][ T5960] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 166.142004][ T54] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.160098][ T5960] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5960 [syz.0.17] init_journal+0x16d9/0x2260
[ 166.164708][ T5960] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 166.168211][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 166.168228][ T5960] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 166.168235][ T5960] Call Trace:
[ 166.168243][ T5960]
[ 166.168249][ T5960] dump_stack_lvl+0xe8/0x150
[ 166.168266][ T5960] gfs2_withdraw+0xc3/0x1b0
[ 166.168283][ T5960] gfs2_jdesc_check+0x17d/0x2f0
[ 166.168298][ T5960] check_journal_clean+0x18d/0x360
[ 166.168315][ T5960] ? __pfx_check_journal_clean+0x10/0x10
[ 166.168331][ T5960] ? init_journal+0x16d9/0x2260
[ 166.168350][ T5960] ? do_raw_spin_unlock+0x4d/0x210
[ 166.168365][ T5960] ? _raw_spin_unlock+0x28/0x50
[ 166.168426][ T5960] ? gfs2_jdesc_find+0xab/0xc0
[ 166.168439][ T5960] init_journal+0x16d9/0x2260
[ 166.168461][ T5960] ? init_inodes+0xdb/0x320
[ 166.168479][ T5960] ? __pfx_init_journal+0x10/0x10
[ 166.168493][ T5960] ? vsnprintf+0xdf1/0xee0
[ 166.168512][ T5960] ? snprintf+0xe8/0x140
[ 166.168525][ T5960] ? init_inodes+0xdb/0x320
[ 166.168540][ T5960] ? __pfx_snprintf+0x10/0x10
[ 166.168554][ T5960] ? gfs2_glock_nq_num+0x13d/0x170
[ 166.168568][ T5960] init_inodes+0xdb/0x320
[ 166.168584][ T5960] gfs2_fill_super+0x1a38/0x21d0
[ 166.168609][ T5960] ? __pfx_gfs2_fill_super+0x10/0x10
[ 166.168626][ T5960] ? init_locking+0xb8/0x210
[ 166.168640][ T5960] ? sb_set_blocksize+0x155/0x240
[ 166.168688][ T5960] ? setup_bdev_super+0x4c1/0x5b0
[ 166.168704][ T5960] get_tree_bdev_flags+0x431/0x4f0
[ 166.168719][ T5960] ? __pfx_gfs2_fill_super+0x10/0x10
[ 166.168733][ T5960] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 166.168745][ T5960] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 166.168763][ T5960] gfs2_get_tree+0x51/0x1e0
[ 166.168781][ T5960] vfs_get_tree+0x92/0x2a0
[ 166.168796][ T5960] do_new_mount+0x329/0xa50
[ 166.168809][ T5960] ? apparmor_capable+0x137/0x1a0
[ 166.168824][ T5960] ? __pfx_do_new_mount+0x10/0x10
[ 166.168840][ T5960] ? ns_capable+0x89/0xe0
[ 166.168880][ T5960] __se_sys_mount+0x31d/0x420
[ 166.168902][ T5960] ? __pfx___se_sys_mount+0x10/0x10
[ 166.168920][ T5960] ? __x64_sys_mount+0x20/0xc0
[ 166.168937][ T5960] do_syscall_64+0xe2/0xf80
[ 166.168948][ T5960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.168959][ T5960] ? trace_irq_disable+0x37/0x100
[ 166.168969][ T5960] ? clear_bhb_loop+0x60/0xb0
[ 166.168982][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.168992][ T5960] RIP: 0033:0x7f905b99c1ca
[ 166.169002][ T5960] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 166.169008][ T5960] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 166.169017][ T5960] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 166.169022][ T5960] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 166.169027][ T5960] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 166.169032][ T5960] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 166.169036][ T5960] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 166.169053][ T5960]
[ 166.169127][ T5960] gfs2: fsid=..s: Error checking journal for spectator mount.
[ 166.331149][ T1100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.336181][ T1100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.371108][ T1100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.382652][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 166.390806][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.394789][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.398833][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.557111][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 166.712848][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 166.716441][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 166.757726][ T5735] veth0_vlan: entered promiscuous mode
[ 166.835071][ T5735] veth1_vlan: entered promiscuous mode
[ 166.874177][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 166.877680][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 166.952851][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 166.960010][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 167.007488][ T5735] veth0_macvtap: entered promiscuous mode
[ 167.113182][ T5735] veth1_macvtap: entered promiscuous mode
[ 167.167810][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 167.181325][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 167.287989][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 167.393897][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 167.409177][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 167.435949][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 167.525560][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 167.529878][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 167.574512][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 167.606357][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 167.634863][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 167.638776][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 168.165131][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 168.168616][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 168.433734][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 168.455899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/01/27 09:36:46 executed programs: 21
2026/01/27 09:36:52 executed programs: 32
[ 181.092087][ T6071] loop0: detected capacity change from 0 to 32768
[ 181.195727][ T6071] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 181.198892][ T6071] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 181.354728][ T6071] syz.0.40: attempt to access beyond end of device
[ 181.354728][ T6071] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 181.429909][ T6071] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 181.498568][ T6071] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 181.513480][ T6071] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6071 [syz.0.40] init_journal+0x16d9/0x2260
[ 181.540702][ T6071] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 181.544414][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT(full)
[ 181.544432][ T6071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 181.544439][ T6071] Call Trace:
[ 181.544445][ T6071]
[ 181.544450][ T6071] dump_stack_lvl+0xe8/0x150
[ 181.544469][ T6071] gfs2_withdraw+0xc3/0x1b0
[ 181.544487][ T6071] gfs2_jdesc_check+0x17d/0x2f0
[ 181.544501][ T6071] check_journal_clean+0x18d/0x360
[ 181.544518][ T6071] ? __pfx_check_journal_clean+0x10/0x10
[ 181.544534][ T6071] ? init_journal+0x16d9/0x2260
[ 181.544555][ T6071] ? do_raw_spin_unlock+0x4d/0x210
[ 181.544572][ T6071] ? _raw_spin_unlock+0x28/0x50
[ 181.544614][ T6071] ? gfs2_jdesc_find+0xab/0xc0
[ 181.544626][ T6071] init_journal+0x16d9/0x2260
[ 181.544649][ T6071] ? init_inodes+0xdb/0x320
[ 181.544665][ T6071] ? __pfx_init_journal+0x10/0x10
[ 181.544680][ T6071] ? vsnprintf+0xdf1/0xee0
[ 181.544699][ T6071] ? snprintf+0xe8/0x140
[ 181.544720][ T6071] ? init_inodes+0xdb/0x320
[ 181.544735][ T6071] ? __pfx_snprintf+0x10/0x10
[ 181.544748][ T6071] ? gfs2_glock_nq_num+0x13d/0x170
[ 181.544762][ T6071] init_inodes+0xdb/0x320
[ 181.544779][ T6071] gfs2_fill_super+0x1a38/0x21d0
[ 181.544803][ T6071] ? __pfx_gfs2_fill_super+0x10/0x10
[ 181.544820][ T6071] ? init_locking+0xb8/0x210
[ 181.544835][ T6071] ? sb_set_blocksize+0x155/0x240
[ 181.544866][ T6071] ? setup_bdev_super+0x4c1/0x5b0
[ 181.544883][ T6071] get_tree_bdev_flags+0x431/0x4f0
[ 181.544898][ T6071] ? __pfx_gfs2_fill_super+0x10/0x10
[ 181.544914][ T6071] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 181.544926][ T6071] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 181.544942][ T6071] gfs2_get_tree+0x51/0x1e0
[ 181.544960][ T6071] vfs_get_tree+0x92/0x2a0
[ 181.544976][ T6071] do_new_mount+0x329/0xa50
[ 181.544992][ T6071] ? apparmor_capable+0x137/0x1a0
[ 181.545010][ T6071] ? __pfx_do_new_mount+0x10/0x10
[ 181.545026][ T6071] ? ns_capable+0x89/0xe0
[ 181.545044][ T6071] __se_sys_mount+0x31d/0x420
[ 181.545064][ T6071] ? __pfx___se_sys_mount+0x10/0x10
[ 181.545084][ T6071] ? __x64_sys_mount+0x20/0xc0
[ 181.545101][ T6071] do_syscall_64+0xe2/0xf80
[ 181.545112][ T6071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 181.545123][ T6071] ? trace_irq_disable+0x37/0x100
[ 181.545136][ T6071] ? clear_bhb_loop+0x60/0xb0
[ 181.545149][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 181.545160][ T6071] RIP: 0033:0x7f905b99c1ca
[ 181.545174][ T6071] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 181.545182][ T6071] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 181.545196][ T6071] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 181.545203][ T6071] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 181.545211][ T6071] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 181.545218][ T6071] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 181.545231][ T6071] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 181.545247][ T6071]
[ 181.545252][ T6071] gfs2: fsid=..s: Error checking journal for spectator mount.
2026/01/27 09:36:57 executed programs: 40
2026/01/27 09:37:03 executed programs: 47
[ 191.200561][ T6136] loop0: detected capacity change from 0 to 32768
[ 191.268565][ T6136] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 191.288996][ T6136] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 191.409010][ T6136] syz.0.54: attempt to access beyond end of device
[ 191.409010][ T6136] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 191.473911][ T6136] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 191.539813][ T6136] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 191.543711][ T6136] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6136 [syz.0.54] init_journal+0x16d9/0x2260
[ 191.547901][ T6136] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 191.671401][ T6136] CPU: 0 UID: 0 PID: 6136 Comm: syz.0.54 Not tainted syzkaller #0 PREEMPT(full)
[ 191.671422][ T6136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 191.671430][ T6136] Call Trace:
[ 191.671435][ T6136]
[ 191.671439][ T6136] dump_stack_lvl+0xe8/0x150
[ 191.671460][ T6136] gfs2_withdraw+0xc3/0x1b0
[ 191.671478][ T6136] gfs2_jdesc_check+0x17d/0x2f0
[ 191.671493][ T6136] check_journal_clean+0x18d/0x360
[ 191.671509][ T6136] ? __pfx_check_journal_clean+0x10/0x10
[ 191.671526][ T6136] ? init_journal+0x16d9/0x2260
[ 191.671547][ T6136] ? do_raw_spin_unlock+0x4d/0x210
[ 191.671561][ T6136] ? _raw_spin_unlock+0x28/0x50
[ 191.671576][ T6136] ? gfs2_jdesc_find+0xab/0xc0
[ 191.671587][ T6136] init_journal+0x16d9/0x2260
[ 191.671608][ T6136] ? init_inodes+0xdb/0x320
[ 191.671624][ T6136] ? __pfx_init_journal+0x10/0x10
[ 191.671639][ T6136] ? vsnprintf+0xdf1/0xee0
[ 191.671659][ T6136] ? snprintf+0xe8/0x140
[ 191.671672][ T6136] ? init_inodes+0xdb/0x320
[ 191.671686][ T6136] ? __pfx_snprintf+0x10/0x10
[ 191.671699][ T6136] ? gfs2_glock_nq_num+0x13d/0x170
[ 191.671711][ T6136] init_inodes+0xdb/0x320
[ 191.671728][ T6136] gfs2_fill_super+0x1a38/0x21d0
[ 191.671752][ T6136] ? __pfx_gfs2_fill_super+0x10/0x10
[ 191.671769][ T6136] ? init_locking+0xb8/0x210
[ 191.671782][ T6136] ? sb_set_blocksize+0x155/0x240
[ 191.671801][ T6136] ? setup_bdev_super+0x4c1/0x5b0
[ 191.671816][ T6136] get_tree_bdev_flags+0x431/0x4f0
[ 191.671837][ T6136] ? __pfx_gfs2_fill_super+0x10/0x10
[ 191.671852][ T6136] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 191.671863][ T6136] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 191.671880][ T6136] gfs2_get_tree+0x51/0x1e0
[ 191.671898][ T6136] vfs_get_tree+0x92/0x2a0
[ 191.671912][ T6136] do_new_mount+0x329/0xa50
[ 191.671928][ T6136] ? apparmor_capable+0x137/0x1a0
[ 191.671945][ T6136] ? __pfx_do_new_mount+0x10/0x10
[ 191.671961][ T6136] ? ns_capable+0x89/0xe0
[ 191.671980][ T6136] __se_sys_mount+0x31d/0x420
[ 191.672000][ T6136] ? __pfx___se_sys_mount+0x10/0x10
[ 191.672019][ T6136] ? __x64_sys_mount+0x20/0xc0
[ 191.672036][ T6136] do_syscall_64+0xe2/0xf80
[ 191.672046][ T6136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 191.672058][ T6136] ? trace_irq_disable+0x37/0x100
[ 191.672068][ T6136] ? clear_bhb_loop+0x60/0xb0
[ 191.672080][ T6136] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 191.672091][ T6136] RIP: 0033:0x7f905b99c1ca
[ 191.672102][ T6136] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 191.672111][ T6136] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 191.672125][ T6136] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 191.672133][ T6136] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 191.672141][ T6136] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 191.672148][ T6136] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 191.672154][ T6136] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 191.672171][ T6136]
[ 191.672176][ T6136] gfs2: fsid=..s: Error checking journal for spectator mount.
2026/01/27 09:37:08 executed programs: 57
[ 196.607332][ T6176] loop0: detected capacity change from 0 to 32768
[ 196.692245][ T6176] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 196.720882][ T6176] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 196.766164][ T6176] syz.0.63: attempt to access beyond end of device
[ 196.766164][ T6176] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 196.811219][ T6176] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 196.865901][ T6176] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 196.869575][ T6176] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6176 [syz.0.63] init_journal+0x16d9/0x2260
[ 196.932410][ T6176] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 196.950005][ T6176] CPU: 0 UID: 0 PID: 6176 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(full)
[ 196.950026][ T6176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 196.950035][ T6176] Call Trace:
[ 196.950040][ T6176]
[ 196.950045][ T6176] dump_stack_lvl+0xe8/0x150
[ 196.950065][ T6176] gfs2_withdraw+0xc3/0x1b0
[ 196.950085][ T6176] gfs2_jdesc_check+0x17d/0x2f0
[ 196.950099][ T6176] check_journal_clean+0x18d/0x360
[ 196.950115][ T6176] ? __pfx_check_journal_clean+0x10/0x10
[ 196.950132][ T6176] ? init_journal+0x16d9/0x2260
[ 196.950151][ T6176] ? do_raw_spin_unlock+0x4d/0x210
[ 196.950166][ T6176] ? _raw_spin_unlock+0x28/0x50
[ 196.950181][ T6176] ? gfs2_jdesc_find+0xab/0xc0
[ 196.950192][ T6176] init_journal+0x16d9/0x2260
[ 196.950214][ T6176] ? init_inodes+0xdb/0x320
[ 196.950231][ T6176] ? __pfx_init_journal+0x10/0x10
[ 196.950245][ T6176] ? vsnprintf+0xdf1/0xee0
[ 196.950265][ T6176] ? snprintf+0xe8/0x140
[ 196.950280][ T6176] ? init_inodes+0xdb/0x320
[ 196.950294][ T6176] ? __pfx_snprintf+0x10/0x10
[ 196.950304][ T6176] ? gfs2_glock_nq_num+0x13d/0x170
[ 196.950313][ T6176] init_inodes+0xdb/0x320
[ 196.950324][ T6176] gfs2_fill_super+0x1a38/0x21d0
[ 196.950339][ T6176] ? __pfx_gfs2_fill_super+0x10/0x10
[ 196.950350][ T6176] ? init_locking+0xb8/0x210
[ 196.950359][ T6176] ? sb_set_blocksize+0x155/0x240
[ 196.950370][ T6176] ? setup_bdev_super+0x4c1/0x5b0
[ 196.950382][ T6176] get_tree_bdev_flags+0x431/0x4f0
[ 196.950391][ T6176] ? __pfx_gfs2_fill_super+0x10/0x10
[ 196.950401][ T6176] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 196.950409][ T6176] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 196.950420][ T6176] gfs2_get_tree+0x51/0x1e0
[ 196.950432][ T6176] vfs_get_tree+0x92/0x2a0
[ 196.950441][ T6176] do_new_mount+0x329/0xa50
[ 196.950472][ T6176] ? apparmor_capable+0x137/0x1a0
[ 196.950483][ T6176] ? __pfx_do_new_mount+0x10/0x10
[ 196.950493][ T6176] ? ns_capable+0x89/0xe0
[ 196.950505][ T6176] __se_sys_mount+0x31d/0x420
[ 196.950523][ T6176] ? __pfx___se_sys_mount+0x10/0x10
[ 196.950541][ T6176] ? __x64_sys_mount+0x20/0xc0
[ 196.950556][ T6176] do_syscall_64+0xe2/0xf80
[ 196.950567][ T6176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 196.950575][ T6176] ? trace_irq_disable+0x37/0x100
[ 196.950582][ T6176] ? clear_bhb_loop+0x60/0xb0
[ 196.950591][ T6176] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 196.950604][ T6176] RIP: 0033:0x7f905b99c1ca
[ 196.950640][ T6176] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 196.950649][ T6176] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 196.950659][ T6176] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 196.950664][ T6176] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 196.950669][ T6176] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 196.950674][ T6176] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 196.950679][ T6176] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 196.950690][ T6176]
[ 196.952603][ T6176] gfs2: fsid=..s: Error checking journal for spectator mount.
2026/01/27 09:37:14 executed programs: 67
[ 203.954200][ T6212] loop0: detected capacity change from 0 to 32768
[ 204.016222][ T6212] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 204.054033][ T6212] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 204.158332][ T6212] syz.0.77: attempt to access beyond end of device
[ 204.158332][ T6212] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 204.232231][ T6212] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 204.238210][ T6212] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 204.303344][ T6212] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6212 [syz.0.77] init_journal+0x16d9/0x2260
[ 204.307631][ T6212] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 204.364387][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.0.77 Not tainted syzkaller #0 PREEMPT(full)
[ 204.364406][ T6212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 204.364421][ T6212] Call Trace:
[ 204.364427][ T6212]
[ 204.364432][ T6212] dump_stack_lvl+0xe8/0x150
[ 204.364450][ T6212] gfs2_withdraw+0xc3/0x1b0
[ 204.364469][ T6212] gfs2_jdesc_check+0x17d/0x2f0
[ 204.364485][ T6212] check_journal_clean+0x18d/0x360
[ 204.364505][ T6212] ? __pfx_check_journal_clean+0x10/0x10
[ 204.364524][ T6212] ? init_journal+0x16d9/0x2260
[ 204.364547][ T6212] ? do_raw_spin_unlock+0x4d/0x210
[ 204.364564][ T6212] ? _raw_spin_unlock+0x28/0x50
[ 204.364580][ T6212] ? gfs2_jdesc_find+0xab/0xc0
[ 204.364593][ T6212] init_journal+0x16d9/0x2260
[ 204.364618][ T6212] ? init_inodes+0xdb/0x320
[ 204.364638][ T6212] ? __pfx_init_journal+0x10/0x10
[ 204.364654][ T6212] ? vsnprintf+0xdf1/0xee0
[ 204.364675][ T6212] ? snprintf+0xe8/0x140
[ 204.364691][ T6212] ? init_inodes+0xdb/0x320
[ 204.364707][ T6212] ? __pfx_snprintf+0x10/0x10
[ 204.364722][ T6212] ? gfs2_glock_nq_num+0x13d/0x170
[ 204.364737][ T6212] init_inodes+0xdb/0x320
[ 204.364755][ T6212] gfs2_fill_super+0x1a38/0x21d0
[ 204.364782][ T6212] ? __pfx_gfs2_fill_super+0x10/0x10
[ 204.364801][ T6212] ? init_locking+0xb8/0x210
[ 204.364817][ T6212] ? sb_set_blocksize+0x155/0x240
[ 204.364836][ T6212] ? setup_bdev_super+0x4c1/0x5b0
[ 204.364854][ T6212] get_tree_bdev_flags+0x431/0x4f0
[ 204.364869][ T6212] ? __pfx_gfs2_fill_super+0x10/0x10
[ 204.364886][ T6212] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 204.364900][ T6212] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 204.364919][ T6212] gfs2_get_tree+0x51/0x1e0
[ 204.364939][ T6212] vfs_get_tree+0x92/0x2a0
[ 204.364953][ T6212] do_new_mount+0x329/0xa50
[ 204.364969][ T6212] ? apparmor_capable+0x137/0x1a0
[ 204.364987][ T6212] ? __pfx_do_new_mount+0x10/0x10
[ 204.365004][ T6212] ? ns_capable+0x89/0xe0
[ 204.365026][ T6212] __se_sys_mount+0x31d/0x420
[ 204.365047][ T6212] ? __pfx___se_sys_mount+0x10/0x10
[ 204.365069][ T6212] ? __x64_sys_mount+0x20/0xc0
[ 204.365088][ T6212] do_syscall_64+0xe2/0xf80
[ 204.365100][ T6212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 204.365111][ T6212] ? trace_irq_disable+0x37/0x100
[ 204.365123][ T6212] ? clear_bhb_loop+0x60/0xb0
[ 204.365138][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 204.365150][ T6212] RIP: 0033:0x7f905b99c1ca
[ 204.365162][ T6212] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 204.365172][ T6212] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 204.365187][ T6212] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 204.365196][ T6212] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 204.365204][ T6212] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 204.365212][ T6212] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 204.365220][ T6212] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 204.365240][ T6212]
[ 204.365245][ T6212] gfs2: fsid=..s: Error checking journal for spectator mount.
[ 204.643622][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[ 204.646331][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
2026/01/27 09:37:20 executed programs: 78
[ 207.712816][ T6236] loop0: detected capacity change from 0 to 32768
[ 207.787818][ T6236] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 207.825899][ T6236] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 207.895969][ T6236] syz.0.86: attempt to access beyond end of device
[ 207.895969][ T6236] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 207.968979][ T6236] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 208.010366][ T6236] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 208.014069][ T6236] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6236 [syz.0.86] init_journal+0x16d9/0x2260
[ 208.071625][ T6236] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 208.075230][ T6236] CPU: 0 UID: 0 PID: 6236 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full)
[ 208.075247][ T6236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 208.075254][ T6236] Call Trace:
[ 208.075260][ T6236]
[ 208.075266][ T6236] dump_stack_lvl+0xe8/0x150
[ 208.075285][ T6236] gfs2_withdraw+0xc3/0x1b0
[ 208.075302][ T6236] gfs2_jdesc_check+0x17d/0x2f0
[ 208.075318][ T6236] check_journal_clean+0x18d/0x360
[ 208.075335][ T6236] ? __pfx_check_journal_clean+0x10/0x10
[ 208.075352][ T6236] ? init_journal+0x16d9/0x2260
[ 208.075371][ T6236] ? do_raw_spin_unlock+0x4d/0x210
[ 208.075386][ T6236] ? _raw_spin_unlock+0x28/0x50
[ 208.075450][ T6236] ? gfs2_jdesc_find+0xab/0xc0
[ 208.075462][ T6236] init_journal+0x16d9/0x2260
[ 208.075485][ T6236] ? init_inodes+0xdb/0x320
[ 208.075502][ T6236] ? __pfx_init_journal+0x10/0x10
[ 208.075516][ T6236] ? vsnprintf+0xdf1/0xee0
[ 208.075535][ T6236] ? snprintf+0xe8/0x140
[ 208.075549][ T6236] ? init_inodes+0xdb/0x320
[ 208.075564][ T6236] ? __pfx_snprintf+0x10/0x10
[ 208.075578][ T6236] ? gfs2_glock_nq_num+0x13d/0x170
[ 208.075590][ T6236] init_inodes+0xdb/0x320
[ 208.075607][ T6236] gfs2_fill_super+0x1a38/0x21d0
[ 208.075630][ T6236] ? __pfx_gfs2_fill_super+0x10/0x10
[ 208.075647][ T6236] ? init_locking+0xb8/0x210
[ 208.075661][ T6236] ? sb_set_blocksize+0x155/0x240
[ 208.075719][ T6236] ? setup_bdev_super+0x4c1/0x5b0
[ 208.075735][ T6236] get_tree_bdev_flags+0x431/0x4f0
[ 208.075749][ T6236] ? __pfx_gfs2_fill_super+0x10/0x10
[ 208.075765][ T6236] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 208.075777][ T6236] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 208.075796][ T6236] gfs2_get_tree+0x51/0x1e0
[ 208.075813][ T6236] vfs_get_tree+0x92/0x2a0
[ 208.075828][ T6236] do_new_mount+0x329/0xa50
[ 208.075844][ T6236] ? apparmor_capable+0x137/0x1a0
[ 208.075862][ T6236] ? __pfx_do_new_mount+0x10/0x10
[ 208.075876][ T6236] ? ns_capable+0x89/0xe0
[ 208.075897][ T6236] __se_sys_mount+0x31d/0x420
[ 208.075915][ T6236] ? __pfx___se_sys_mount+0x10/0x10
[ 208.075935][ T6236] ? __x64_sys_mount+0x20/0xc0
[ 208.075951][ T6236] do_syscall_64+0xe2/0xf80
[ 208.075962][ T6236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 208.075973][ T6236] ? trace_irq_disable+0x37/0x100
[ 208.075983][ T6236] ? clear_bhb_loop+0x60/0xb0
[ 208.075995][ T6236] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 208.076002][ T6236] RIP: 0033:0x7f905b99c1ca
[ 208.076011][ T6236] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 208.076017][ T6236] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 208.076027][ T6236] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 208.076032][ T6236] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 208.076037][ T6236] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 208.076041][ T6236] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 208.076046][ T6236] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 208.076063][ T6236]
[ 208.076069][ T6236] gfs2: fsid=..s: Error checking journal for spectator mount.
2026/01/27 09:37:25 executed programs: 93
[ 211.149266][ T6256] loop0: detected capacity change from 0 to 32768
[ 211.262838][ T6256] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 211.266376][ T6256] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 211.364430][ T6256] syz.0.97: attempt to access beyond end of device
[ 211.364430][ T6256] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 211.426285][ T6256] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 211.468557][ T6256] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 211.520385][ T6256] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6256 [syz.0.97] init_journal+0x16d9/0x2260
[ 211.546728][ T6256] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 211.578033][ T6256] CPU: 0 UID: 0 PID: 6256 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT(full)
[ 211.578052][ T6256] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 211.578060][ T6256] Call Trace:
[ 211.578065][ T6256]
[ 211.578070][ T6256] dump_stack_lvl+0xe8/0x150
[ 211.578089][ T6256] gfs2_withdraw+0xc3/0x1b0
[ 211.578107][ T6256] gfs2_jdesc_check+0x17d/0x2f0
[ 211.578120][ T6256] check_journal_clean+0x18d/0x360
[ 211.578138][ T6256] ? __pfx_check_journal_clean+0x10/0x10
[ 211.578155][ T6256] ? init_journal+0x16d9/0x2260
[ 211.578177][ T6256] ? do_raw_spin_unlock+0x4d/0x210
[ 211.578192][ T6256] ? _raw_spin_unlock+0x28/0x50
[ 211.578209][ T6256] ? gfs2_jdesc_find+0xab/0xc0
[ 211.578221][ T6256] init_journal+0x16d9/0x2260
[ 211.578243][ T6256] ? init_inodes+0xdb/0x320
[ 211.578261][ T6256] ? __pfx_init_journal+0x10/0x10
[ 211.578276][ T6256] ? vsnprintf+0xdf1/0xee0
[ 211.578297][ T6256] ? snprintf+0xe8/0x140
[ 211.578311][ T6256] ? init_inodes+0xdb/0x320
[ 211.578324][ T6256] ? __pfx_snprintf+0x10/0x10
[ 211.578336][ T6256] ? gfs2_glock_nq_num+0x13d/0x170
[ 211.578348][ T6256] init_inodes+0xdb/0x320
[ 211.578364][ T6256] gfs2_fill_super+0x1a38/0x21d0
[ 211.578386][ T6256] ? __pfx_gfs2_fill_super+0x10/0x10
[ 211.578402][ T6256] ? init_locking+0xb8/0x210
[ 211.578415][ T6256] ? sb_set_blocksize+0x155/0x240
[ 211.578433][ T6256] ? setup_bdev_super+0x4c1/0x5b0
[ 211.578448][ T6256] get_tree_bdev_flags+0x431/0x4f0
[ 211.578499][ T6256] ? __pfx_gfs2_fill_super+0x10/0x10
[ 211.578514][ T6256] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 211.578527][ T6256] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 211.578543][ T6256] gfs2_get_tree+0x51/0x1e0
[ 211.578560][ T6256] vfs_get_tree+0x92/0x2a0
[ 211.578576][ T6256] do_new_mount+0x329/0xa50
[ 211.578591][ T6256] ? apparmor_capable+0x137/0x1a0
[ 211.578607][ T6256] ? __pfx_do_new_mount+0x10/0x10
[ 211.578629][ T6256] ? ns_capable+0x89/0xe0
[ 211.578648][ T6256] __se_sys_mount+0x31d/0x420
[ 211.578667][ T6256] ? __pfx___se_sys_mount+0x10/0x10
[ 211.578685][ T6256] ? __x64_sys_mount+0x20/0xc0
[ 211.578702][ T6256] do_syscall_64+0xe2/0xf80
[ 211.578713][ T6256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 211.578723][ T6256] ? trace_irq_disable+0x37/0x100
[ 211.578733][ T6256] ? clear_bhb_loop+0x60/0xb0
[ 211.578746][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 211.578757][ T6256] RIP: 0033:0x7f905b99c1ca
[ 211.578768][ T6256] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 211.578778][ T6256] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 211.578790][ T6256] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 211.578797][ T6256] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 211.578805][ T6256] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 211.578812][ T6256] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 211.578819][ T6256] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 211.578835][ T6256]
[ 211.578841][ T6256] gfs2: fsid=..s: Error checking journal for spectator mount.
[ 214.642228][ T6276] loop0: detected capacity change from 0 to 32768
[ 214.737812][ T6276] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 214.774406][ T6276] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 214.812917][ T6276] syz.0.106: attempt to access beyond end of device
[ 214.812917][ T6276] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 214.871948][ T6276] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 214.878253][ T6276] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 214.959765][ T6276] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6276 [syz.0.106] init_journal+0x16d9/0x2260
[ 214.988718][ T6276] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 215.023079][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz.0.106 Not tainted syzkaller #0 PREEMPT(full)
[ 215.023100][ T6276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 215.023107][ T6276] Call Trace:
[ 215.023112][ T6276]
[ 215.023117][ T6276] dump_stack_lvl+0xe8/0x150
[ 215.023137][ T6276] gfs2_withdraw+0xc3/0x1b0
[ 215.023155][ T6276] gfs2_jdesc_check+0x17d/0x2f0
[ 215.023170][ T6276] check_journal_clean+0x18d/0x360
[ 215.023187][ T6276] ? __pfx_check_journal_clean+0x10/0x10
[ 215.023203][ T6276] ? init_journal+0x16d9/0x2260
[ 215.023217][ T6276] ? do_raw_spin_unlock+0x4d/0x210
[ 215.023229][ T6276] ? _raw_spin_unlock+0x28/0x50
[ 215.023263][ T6276] ? gfs2_jdesc_find+0xab/0xc0
[ 215.023275][ T6276] init_journal+0x16d9/0x2260
[ 215.023295][ T6276] ? init_inodes+0xdb/0x320
[ 215.023311][ T6276] ? __pfx_init_journal+0x10/0x10
[ 215.023326][ T6276] ? vsnprintf+0xdf1/0xee0
[ 215.023346][ T6276] ? snprintf+0xe8/0x140
[ 215.023359][ T6276] ? init_inodes+0xdb/0x320
[ 215.023373][ T6276] ? __pfx_snprintf+0x10/0x10
[ 215.023387][ T6276] ? gfs2_glock_nq_num+0x13d/0x170
[ 215.023400][ T6276] init_inodes+0xdb/0x320
[ 215.023416][ T6276] gfs2_fill_super+0x1a38/0x21d0
[ 215.023440][ T6276] ? __pfx_gfs2_fill_super+0x10/0x10
[ 215.023457][ T6276] ? init_locking+0xb8/0x210
[ 215.023470][ T6276] ? sb_set_blocksize+0x155/0x240
[ 215.023496][ T6276] ? setup_bdev_super+0x4c1/0x5b0
[ 215.023513][ T6276] get_tree_bdev_flags+0x431/0x4f0
[ 215.023528][ T6276] ? __pfx_gfs2_fill_super+0x10/0x10
[ 215.023542][ T6276] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 215.023555][ T6276] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 215.023571][ T6276] gfs2_get_tree+0x51/0x1e0
[ 215.023588][ T6276] vfs_get_tree+0x92/0x2a0
[ 215.023602][ T6276] do_new_mount+0x329/0xa50
[ 215.023618][ T6276] ? apparmor_capable+0x137/0x1a0
[ 215.023641][ T6276] ? __pfx_do_new_mount+0x10/0x10
[ 215.023656][ T6276] ? ns_capable+0x89/0xe0
[ 215.023675][ T6276] __se_sys_mount+0x31d/0x420
[ 215.023695][ T6276] ? __pfx___se_sys_mount+0x10/0x10
[ 215.023714][ T6276] ? __x64_sys_mount+0x20/0xc0
[ 215.023731][ T6276] do_syscall_64+0xe2/0xf80
[ 215.023741][ T6276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 215.023750][ T6276] ? trace_irq_disable+0x37/0x100
[ 215.023761][ T6276] ? clear_bhb_loop+0x60/0xb0
[ 215.023773][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 215.023783][ T6276] RIP: 0033:0x7f905b99c1ca
[ 215.023794][ T6276] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 215.023803][ T6276] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 215.023817][ T6276] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 215.023825][ T6276] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 215.023833][ T6276] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 215.023840][ T6276] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 215.023847][ T6276] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 215.023864][ T6276]
[ 215.174042][ T6276] gfs2: fsid=..s: Error checking journal for spectator mount.
2026/01/27 09:37:30 executed programs: 106
[ 217.530691][ T6292] loop0: detected capacity change from 0 to 32768
[ 217.629013][ T6292] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 217.656483][ T6292] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 217.732985][ T6292] syz.0.113: attempt to access beyond end of device
[ 217.732985][ T6292] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 217.793399][ T6292] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 217.844385][ T6292] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 217.848175][ T6292] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6292 [syz.0.113] init_journal+0x16d9/0x2260
[ 217.898655][ T6292] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 217.929786][ T6292] CPU: 0 UID: 0 PID: 6292 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full)
[ 217.929807][ T6292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 217.929813][ T6292] Call Trace:
[ 217.929820][ T6292]
[ 217.929826][ T6292] dump_stack_lvl+0xe8/0x150
[ 217.929846][ T6292] gfs2_withdraw+0xc3/0x1b0
[ 217.929863][ T6292] gfs2_jdesc_check+0x17d/0x2f0
[ 217.929878][ T6292] check_journal_clean+0x18d/0x360
[ 217.929895][ T6292] ? __pfx_check_journal_clean+0x10/0x10
[ 217.929911][ T6292] ? init_journal+0x16d9/0x2260
[ 217.929931][ T6292] ? do_raw_spin_unlock+0x4d/0x210
[ 217.929946][ T6292] ? _raw_spin_unlock+0x28/0x50
[ 217.929959][ T6292] ? gfs2_jdesc_find+0xab/0xc0
[ 217.929971][ T6292] init_journal+0x16d9/0x2260
[ 217.929994][ T6292] ? init_inodes+0xdb/0x320
[ 217.930010][ T6292] ? __pfx_init_journal+0x10/0x10
[ 217.930025][ T6292] ? vsnprintf+0xdf1/0xee0
[ 217.930045][ T6292] ? snprintf+0xe8/0x140
[ 217.930058][ T6292] ? init_inodes+0xdb/0x320
[ 217.930073][ T6292] ? __pfx_snprintf+0x10/0x10
[ 217.930086][ T6292] ? gfs2_glock_nq_num+0x13d/0x170
[ 217.930098][ T6292] init_inodes+0xdb/0x320
[ 217.930114][ T6292] gfs2_fill_super+0x1a38/0x21d0
[ 217.930157][ T6292] ? __pfx_gfs2_fill_super+0x10/0x10
[ 217.930176][ T6292] ? init_locking+0xb8/0x210
[ 217.930190][ T6292] ? sb_set_blocksize+0x155/0x240
[ 217.930207][ T6292] ? setup_bdev_super+0x4c1/0x5b0
[ 217.930224][ T6292] get_tree_bdev_flags+0x431/0x4f0
[ 217.930238][ T6292] ? __pfx_gfs2_fill_super+0x10/0x10
[ 217.930249][ T6292] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 217.930257][ T6292] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 217.930271][ T6292] gfs2_get_tree+0x51/0x1e0
[ 217.930288][ T6292] vfs_get_tree+0x92/0x2a0
[ 217.930302][ T6292] do_new_mount+0x329/0xa50
[ 217.930316][ T6292] ? apparmor_capable+0x137/0x1a0
[ 217.930333][ T6292] ? __pfx_do_new_mount+0x10/0x10
[ 217.930349][ T6292] ? ns_capable+0x89/0xe0
[ 217.930368][ T6292] __se_sys_mount+0x31d/0x420
[ 217.930388][ T6292] ? __pfx___se_sys_mount+0x10/0x10
[ 217.930435][ T6292] ? __x64_sys_mount+0x20/0xc0
[ 217.930452][ T6292] do_syscall_64+0xe2/0xf80
[ 217.930463][ T6292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 217.930474][ T6292] ? trace_irq_disable+0x37/0x100
[ 217.930483][ T6292] ? clear_bhb_loop+0x60/0xb0
[ 217.930496][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 217.930507][ T6292] RIP: 0033:0x7f905b99c1ca
[ 217.930518][ T6292] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 217.930535][ T6292] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 217.930549][ T6292] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 217.930556][ T6292] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 217.930562][ T6292] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 217.930569][ T6292] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 217.930576][ T6292] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 217.930593][ T6292]
[ 217.932246][ T6292] gfs2: fsid=..s: Error checking journal for spectator mount.
2026/01/27 09:37:35 executed programs: 120
[ 220.991081][ T6314] loop0: detected capacity change from 0 to 32768
[ 221.067474][ T6314] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 221.096202][ T6314] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 221.213724][ T6314] syz.0.122: attempt to access beyond end of device
[ 221.213724][ T6314] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 221.282444][ T6314] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 221.379890][ T6314] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 221.383669][ T6314] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6314 [syz.0.122] init_journal+0x16d9/0x2260
[ 221.387767][ T6314] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 221.461054][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.0.122 Not tainted syzkaller #0 PREEMPT(full)
[ 221.461074][ T6314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 221.461081][ T6314] Call Trace:
[ 221.461086][ T6314]
[ 221.461091][ T6314] dump_stack_lvl+0xe8/0x150
[ 221.461114][ T6314] gfs2_withdraw+0xc3/0x1b0
[ 221.461130][ T6314] gfs2_jdesc_check+0x17d/0x2f0
[ 221.461144][ T6314] check_journal_clean+0x18d/0x360
[ 221.461161][ T6314] ? __pfx_check_journal_clean+0x10/0x10
[ 221.461178][ T6314] ? init_journal+0x16d9/0x2260
[ 221.461198][ T6314] ? do_raw_spin_unlock+0x4d/0x210
[ 221.461213][ T6314] ? _raw_spin_unlock+0x28/0x50
[ 221.461255][ T6314] ? gfs2_jdesc_find+0xab/0xc0
[ 221.461272][ T6314] init_journal+0x16d9/0x2260
[ 221.461295][ T6314] ? init_inodes+0xdb/0x320
[ 221.461312][ T6314] ? __pfx_init_journal+0x10/0x10
[ 221.461327][ T6314] ? vsnprintf+0xdf1/0xee0
[ 221.461347][ T6314] ? snprintf+0xe8/0x140
[ 221.461362][ T6314] ? init_inodes+0xdb/0x320
[ 221.461379][ T6314] ? __pfx_snprintf+0x10/0x10
[ 221.461394][ T6314] ? gfs2_glock_nq_num+0x13d/0x170
[ 221.461409][ T6314] init_inodes+0xdb/0x320
[ 221.461429][ T6314] gfs2_fill_super+0x1a38/0x21d0
[ 221.461454][ T6314] ? __pfx_gfs2_fill_super+0x10/0x10
[ 221.461472][ T6314] ? init_locking+0xb8/0x210
[ 221.461486][ T6314] ? sb_set_blocksize+0x155/0x240
[ 221.461502][ T6314] ? setup_bdev_super+0x4c1/0x5b0
[ 221.461519][ T6314] get_tree_bdev_flags+0x431/0x4f0
[ 221.461533][ T6314] ? __pfx_gfs2_fill_super+0x10/0x10
[ 221.461548][ T6314] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 221.461562][ T6314] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 221.461581][ T6314] gfs2_get_tree+0x51/0x1e0
[ 221.461601][ T6314] vfs_get_tree+0x92/0x2a0
[ 221.461620][ T6314] do_new_mount+0x329/0xa50
[ 221.461635][ T6314] ? apparmor_capable+0x137/0x1a0
[ 221.461652][ T6314] ? __pfx_do_new_mount+0x10/0x10
[ 221.461667][ T6314] ? ns_capable+0x89/0xe0
[ 221.461686][ T6314] __se_sys_mount+0x31d/0x420
[ 221.461705][ T6314] ? __pfx___se_sys_mount+0x10/0x10
[ 221.461723][ T6314] ? __x64_sys_mount+0x20/0xc0
[ 221.461740][ T6314] do_syscall_64+0xe2/0xf80
[ 221.461751][ T6314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 221.461760][ T6314] ? trace_irq_disable+0x37/0x100
[ 221.461771][ T6314] ? clear_bhb_loop+0x60/0xb0
[ 221.461784][ T6314] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 221.461794][ T6314] RIP: 0033:0x7f905b99c1ca
[ 221.461805][ T6314] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 221.461813][ T6314] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 221.461826][ T6314] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 221.461833][ T6314] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 221.461840][ T6314] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 221.461847][ T6314] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 221.461854][ T6314] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 221.461872][ T6314]
[ 221.606977][ T6314] gfs2: fsid=..s: Error checking journal for spectator mount.
[ 223.802112][ T6334] loop0: detected capacity change from 0 to 32768
[ 223.880750][ T6334] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 223.906819][ T6334] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 223.992356][ T6334] syz.0.129: attempt to access beyond end of device
[ 223.992356][ T6334] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 224.055852][ T6334] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 224.096553][ T6334] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 224.123544][ T6334] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6334 [syz.0.129] init_journal+0x16d9/0x2260
[ 224.161179][ T6334] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 224.164663][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT(full)
[ 224.164680][ T6334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 224.164687][ T6334] Call Trace:
[ 224.164692][ T6334]
[ 224.164698][ T6334] dump_stack_lvl+0xe8/0x150
[ 224.164716][ T6334] gfs2_withdraw+0xc3/0x1b0
[ 224.164734][ T6334] gfs2_jdesc_check+0x17d/0x2f0
[ 224.164754][ T6334] check_journal_clean+0x18d/0x360
[ 224.164771][ T6334] ? __pfx_check_journal_clean+0x10/0x10
[ 224.164789][ T6334] ? init_journal+0x16d9/0x2260
[ 224.164808][ T6334] ? do_raw_spin_unlock+0x4d/0x210
[ 224.164822][ T6334] ? _raw_spin_unlock+0x28/0x50
[ 224.164860][ T6334] ? gfs2_jdesc_find+0xab/0xc0
[ 224.164872][ T6334] init_journal+0x16d9/0x2260
[ 224.164894][ T6334] ? init_inodes+0xdb/0x320
[ 224.164911][ T6334] ? __pfx_init_journal+0x10/0x10
[ 224.164921][ T6334] ? vsnprintf+0xdf1/0xee0
[ 224.164934][ T6334] ? snprintf+0xe8/0x140
[ 224.164943][ T6334] ? init_inodes+0xdb/0x320
[ 224.164953][ T6334] ? __pfx_snprintf+0x10/0x10
[ 224.164965][ T6334] ? gfs2_glock_nq_num+0x13d/0x170
[ 224.164977][ T6334] init_inodes+0xdb/0x320
[ 224.164993][ T6334] gfs2_fill_super+0x1a38/0x21d0
[ 224.165015][ T6334] ? __pfx_gfs2_fill_super+0x10/0x10
[ 224.165032][ T6334] ? init_locking+0xb8/0x210
[ 224.165046][ T6334] ? sb_set_blocksize+0x155/0x240
[ 224.165099][ T6334] ? setup_bdev_super+0x4c1/0x5b0
[ 224.165115][ T6334] get_tree_bdev_flags+0x431/0x4f0
[ 224.165129][ T6334] ? __pfx_gfs2_fill_super+0x10/0x10
[ 224.165143][ T6334] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 224.165155][ T6334] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 224.165174][ T6334] gfs2_get_tree+0x51/0x1e0
[ 224.165191][ T6334] vfs_get_tree+0x92/0x2a0
[ 224.165206][ T6334] do_new_mount+0x329/0xa50
[ 224.165224][ T6334] ? apparmor_capable+0x137/0x1a0
[ 224.165240][ T6334] ? __pfx_do_new_mount+0x10/0x10
[ 224.165255][ T6334] ? ns_capable+0x89/0xe0
[ 224.165279][ T6334] __se_sys_mount+0x31d/0x420
[ 224.165297][ T6334] ? __pfx___se_sys_mount+0x10/0x10
[ 224.165316][ T6334] ? __x64_sys_mount+0x20/0xc0
[ 224.165332][ T6334] do_syscall_64+0xe2/0xf80
[ 224.165342][ T6334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 224.165354][ T6334] ? trace_irq_disable+0x37/0x100
[ 224.165364][ T6334] ? clear_bhb_loop+0x60/0xb0
[ 224.165376][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 224.165387][ T6334] RIP: 0033:0x7f905b99c1ca
[ 224.165398][ T6334] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 224.165407][ T6334] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 224.165421][ T6334] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 224.165429][ T6334] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 224.165436][ T6334] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 224.165444][ T6334] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 224.165449][ T6334] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 224.165462][ T6334]
[ 224.165466][ T6334] gfs2: fsid=..s: Error checking journal for spectator mount.
2026/01/27 09:37:40 executed programs: 133
[ 227.325362][ T6357] loop0: detected capacity change from 0 to 32768
[ 227.464941][ T6357] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 227.468130][ T6357] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 227.591905][ T6357] syz.0.140: attempt to access beyond end of device
[ 227.591905][ T6357] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 227.659857][ T6357] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 227.707370][ T6357] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 227.749919][ T6357] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6357 [syz.0.140] init_journal+0x16d9/0x2260
[ 227.770843][ T6357] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 227.774436][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(full)
[ 227.774451][ T6357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 227.774458][ T6357] Call Trace:
[ 227.774464][ T6357]
[ 227.774469][ T6357] dump_stack_lvl+0xe8/0x150
[ 227.774488][ T6357] gfs2_withdraw+0xc3/0x1b0
[ 227.774506][ T6357] gfs2_jdesc_check+0x17d/0x2f0
[ 227.774519][ T6357] check_journal_clean+0x18d/0x360
[ 227.774530][ T6357] ? __pfx_check_journal_clean+0x10/0x10
[ 227.774543][ T6357] ? init_journal+0x16d9/0x2260
[ 227.774562][ T6357] ? do_raw_spin_unlock+0x4d/0x210
[ 227.774576][ T6357] ? _raw_spin_unlock+0x28/0x50
[ 227.774607][ T6357] ? gfs2_jdesc_find+0xab/0xc0
[ 227.774620][ T6357] init_journal+0x16d9/0x2260
[ 227.774643][ T6357] ? init_inodes+0xdb/0x320
[ 227.774660][ T6357] ? __pfx_init_journal+0x10/0x10
[ 227.774675][ T6357] ? vsnprintf+0xdf1/0xee0
[ 227.774694][ T6357] ? snprintf+0xe8/0x140
[ 227.774708][ T6357] ? init_inodes+0xdb/0x320
[ 227.774722][ T6357] ? __pfx_snprintf+0x10/0x10
[ 227.774736][ T6357] ? gfs2_glock_nq_num+0x13d/0x170
[ 227.774750][ T6357] init_inodes+0xdb/0x320
[ 227.774767][ T6357] gfs2_fill_super+0x1a38/0x21d0
[ 227.774791][ T6357] ? __pfx_gfs2_fill_super+0x10/0x10
[ 227.774809][ T6357] ? init_locking+0xb8/0x210
[ 227.774823][ T6357] ? sb_set_blocksize+0x155/0x240
[ 227.774840][ T6357] ? setup_bdev_super+0x4c1/0x5b0
[ 227.774856][ T6357] get_tree_bdev_flags+0x431/0x4f0
[ 227.774870][ T6357] ? __pfx_gfs2_fill_super+0x10/0x10
[ 227.774885][ T6357] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 227.774898][ T6357] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 227.774915][ T6357] gfs2_get_tree+0x51/0x1e0
[ 227.774931][ T6357] vfs_get_tree+0x92/0x2a0
[ 227.774946][ T6357] do_new_mount+0x329/0xa50
[ 227.774961][ T6357] ? apparmor_capable+0x137/0x1a0
[ 227.774978][ T6357] ? __pfx_do_new_mount+0x10/0x10
[ 227.774993][ T6357] ? ns_capable+0x89/0xe0
[ 227.775012][ T6357] __se_sys_mount+0x31d/0x420
[ 227.775031][ T6357] ? __pfx___se_sys_mount+0x10/0x10
[ 227.775051][ T6357] ? __x64_sys_mount+0x20/0xc0
[ 227.775068][ T6357] do_syscall_64+0xe2/0xf80
[ 227.775080][ T6357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 227.775090][ T6357] ? trace_irq_disable+0x37/0x100
[ 227.775100][ T6357] ? clear_bhb_loop+0x60/0xb0
[ 227.775114][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 227.775125][ T6357] RIP: 0033:0x7f905b99c1ca
[ 227.775137][ T6357] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 227.775147][ T6357] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 227.775159][ T6357] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 227.775167][ T6357] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 227.775174][ T6357] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 227.775180][ T6357] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 227.775187][ T6357] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 227.775204][ T6357]
[ 227.939792][ T6357] gfs2: fsid=..s: Error checking journal for spectator mount.
[ 228.757848][ T30] ==================================================================
[ 228.761394][ T30] BUG: KASAN: slab-use-after-free in move_to_new_folio+0x145/0x470
[ 228.764945][ T30] Read of size 8 at addr ffff888035872e08 by task kcompactd1/30
[ 228.769141][ T30]
[ 228.770235][ T30] CPU: 0 UID: 0 PID: 30 Comm: kcompactd1 Not tainted syzkaller #0 PREEMPT(full)
[ 228.770250][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 228.770256][ T30] Call Trace:
[ 228.770264][ T30]
[ 228.770270][ T30] dump_stack_lvl+0xe8/0x150
[ 228.770314][ T30] print_report+0xba/0x230
[ 228.770326][ T30] ? move_to_new_folio+0x145/0x470
[ 228.770344][ T30] kasan_report+0x117/0x150
[ 228.770353][ T30] ? __free_frozen_pages+0x6d9/0xd70
[ 228.770373][ T30] ? move_to_new_folio+0x145/0x470
[ 228.770385][ T30] kasan_check_range+0x264/0x2c0
[ 228.770396][ T30] move_to_new_folio+0x145/0x470
[ 228.770409][ T30] migrate_pages_batch+0x2b80/0x4d80
[ 228.770429][ T30] ? __pfx_compaction_free+0x10/0x10
[ 228.770449][ T30] ? __pfx_migrate_pages_batch+0x10/0x10
[ 228.770461][ T30] ? finish_task_switch+0x23c/0x920
[ 228.770475][ T30] ? lockdep_hardirqs_on+0x7a/0x110
[ 228.770486][ T30] ? finish_task_switch+0x23c/0x920
[ 228.770499][ T30] ? css_rstat_updated+0x23a/0x530
[ 228.770513][ T30] ? __pfx_css_rstat_updated+0x10/0x10
[ 228.770525][ T30] ? __schedule+0x1500/0x5050
[ 228.770541][ T30] ? __pfx_remove_migration_pte+0x10/0x10
[ 228.770552][ T30] ? css_rstat_updated+0x23a/0x530
[ 228.770565][ T30] ? __pfx_css_rstat_updated+0x10/0x10
[ 228.770580][ T30] ? __pfx_compaction_free+0x10/0x10
[ 228.770595][ T30] migrate_pages+0x1c95/0x29e0
[ 228.770608][ T30] ? __pfx_compaction_free+0x10/0x10
[ 228.770622][ T30] ? __pfx_compaction_alloc+0x10/0x10
[ 228.770638][ T30] ? __pfx_migrate_pages+0x10/0x10
[ 228.770649][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 228.770665][ T30] ? rcu_is_watching+0x15/0xb0
[ 228.770675][ T30] ? isolate_migratepages_block+0x3ba3/0x4410
[ 228.770694][ T30] compact_zone+0x2140/0x4640
[ 228.770715][ T30] ? __lock_acquire+0x6b5/0x2cf0
[ 228.770736][ T30] ? __pfx_compact_zone+0x10/0x10
[ 228.770749][ T30] ? __mutex_trylock_common+0x158/0x260
[ 228.770762][ T30] compact_node+0x21a/0x320
[ 228.770776][ T30] ? __pfx_compact_node+0x10/0x10
[ 228.770799][ T30] ? fragmentation_score_node+0x391/0x3b0
[ 228.770813][ T30] kcompactd+0xc0f/0x12a0
[ 228.770828][ T30] ? __pfx_kcompactd+0x10/0x10
[ 228.770849][ T30] ? __pfx_autoremove_wake_function+0x10/0x10
[ 228.770862][ T30] ? __kthread_parkme+0x7a/0x1f0
[ 228.770872][ T30] ? __kthread_parkme+0x19c/0x1f0
[ 228.770882][ T30] kthread+0x726/0x8b0
[ 228.770894][ T30] ? __pfx_kcompactd+0x10/0x10
[ 228.770905][ T30] ? __pfx_kthread+0x10/0x10
[ 228.770917][ T30] ? _raw_spin_unlock_irq+0x23/0x50
[ 228.770931][ T30] ? __pfx_kthread+0x10/0x10
[ 228.770941][ T30] ret_from_fork+0x51b/0xa40
[ 228.770952][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 228.770968][ T30] ? __switch_to+0xc82/0x1410
[ 228.770983][ T30] ? __pfx_kthread+0x10/0x10
[ 228.770994][ T30] ret_from_fork_asm+0x1a/0x30
[ 228.771011][ T30]
[ 228.771015][ T30]
[ 228.898268][ T30] Allocated by task 6357:
[ 228.900284][ T30] kasan_save_track+0x3e/0x80
[ 228.902515][ T30] __kasan_slab_alloc+0x6c/0x80
[ 228.904711][ T30] kmem_cache_alloc_noprof+0x370/0x6e0
[ 228.907453][ T30] gfs2_glock_get+0x27b/0xf40
[ 228.909575][ T30] gfs2_inode_lookup+0x29f/0xc50
[ 228.911879][ T30] init_sb+0xb0d/0x12f0
[ 228.913678][ T30] gfs2_fill_super+0x16d6/0x21d0
[ 228.915734][ T30] get_tree_bdev_flags+0x431/0x4f0
[ 228.917820][ T30] gfs2_get_tree+0x51/0x1e0
[ 228.919826][ T30] vfs_get_tree+0x92/0x2a0
[ 228.921862][ T30] do_new_mount+0x329/0xa50
[ 228.923816][ T30] __se_sys_mount+0x31d/0x420
[ 228.925925][ T30] do_syscall_64+0xe2/0xf80
[ 228.928037][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 228.930600][ T30]
[ 228.931705][ T30] Freed by task 6367:
[ 228.933490][ T30] kasan_save_track+0x3e/0x80
[ 228.935640][ T30] kasan_save_free_info+0x46/0x50
[ 228.937876][ T30] __kasan_slab_free+0x5c/0x80
[ 228.940019][ T30] kmem_cache_free+0x195/0x610
[ 228.942261][ T30] rcu_core+0xc9e/0x1750
[ 228.944144][ T30] handle_softirqs+0x22a/0x7c0
[ 228.946308][ T30] __irq_exit_rcu+0x5f/0x150
[ 228.948326][ T30] irq_exit_rcu+0x9/0x30
[ 228.950133][ T30] sysvec_apic_timer_interrupt+0x57/0xc0
[ 228.952671][ T30] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 228.955259][ T30]
[ 228.956341][ T30] Last potentially related work creation:
[ 228.958767][ T30] kasan_save_stack+0x3e/0x60
[ 228.960837][ T30] kasan_record_aux_stack+0xbd/0xd0
[ 228.963144][ T30] call_rcu+0xee/0x890
[ 228.964978][ T30] gfs2_glock_free+0x3c/0xa0
[ 228.967220][ T30] process_scheduled_works+0xaec/0x17a0
[ 228.969608][ T30] worker_thread+0xda6/0x1360
[ 228.971730][ T30] kthread+0x726/0x8b0
[ 228.973539][ T30] ret_from_fork+0x51b/0xa40
[ 228.975569][ T30] ret_from_fork_asm+0x1a/0x30
[ 228.977692][ T30]
[ 228.978781][ T30] Second to last potentially related work creation:
[ 228.981591][ T30] kasan_save_stack+0x3e/0x60
[ 228.983630][ T30] kasan_record_aux_stack+0xbd/0xd0
[ 228.985863][ T30] insert_work+0x3d/0x330
[ 228.987799][ T30] __queue_work+0xccf/0xf90
[ 228.989850][ T30] queue_delayed_work_on+0x11a/0x1e0
[ 228.992097][ T30] do_xmote+0x514/0x750
[ 228.993888][ T30] glock_work_func+0x2a8/0x580
[ 228.995995][ T30] process_scheduled_works+0xaec/0x17a0
[ 228.998181][ T30] worker_thread+0xda6/0x1360
[ 229.000137][ T30] kthread+0x726/0x8b0
[ 229.001888][ T30] ret_from_fork+0x51b/0xa40
[ 229.003918][ T30] ret_from_fork_asm+0x1a/0x30
[ 229.005952][ T30]
[ 229.007074][ T30] The buggy address belongs to the object at ffff888035872a40
[ 229.007074][ T30] which belongs to the cache gfs2_glock(aspace) of size 1224
[ 229.013506][ T30] The buggy address is located 968 bytes inside of
[ 229.013506][ T30] freed 1224-byte region [ffff888035872a40, ffff888035872f08)
[ 229.019505][ T30]
[ 229.020569][ T30] The buggy address belongs to the physical page:
[ 229.023509][ T30] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35870
[ 229.028369][ T30] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 229.032850][ T30] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 229.036108][ T30] page_type: f5(slab)
[ 229.037811][ T30] raw: 04fff00000000040 ffff888000c21780 dead000000000122 0000000000000000
[ 229.041430][ T30] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000
[ 229.045110][ T30] head: 04fff00000000040 ffff888000c21780 dead000000000122 0000000000000000
[ 229.048716][ T30] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000
[ 229.052358][ T30] head: 04fff00000000002 ffffea0000d61c01 00000000ffffffff 00000000ffffffff
[ 229.055978][ T30] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 229.059738][ T30] page dumped because: kasan: bad access detected
[ 229.062501][ T30] page_owner tracks the page as allocated
[ 229.064806][ T30] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5960, tgid 5958 (syz.0.17), ts 165973974940, free_ts 145621510451
[ 229.073671][ T30] post_alloc_hook+0x228/0x280
[ 229.075736][ T30] get_page_from_freelist+0x24dc/0x2580
[ 229.078041][ T30] __alloc_frozen_pages_noprof+0x18d/0x380
[ 229.080436][ T30] alloc_pages_mpol+0x232/0x4a0
[ 229.082525][ T30] allocate_slab+0x86/0x3a0
[ 229.084483][ T30] ___slab_alloc+0xd82/0x1760
[ 229.086469][ T30] __slab_alloc+0x65/0x100
[ 229.088460][ T30] kmem_cache_alloc_noprof+0x3fe/0x6e0
[ 229.090815][ T30] gfs2_glock_get+0x27b/0xf40
[ 229.092874][ T30] gfs2_inode_lookup+0x29f/0xc50
[ 229.095073][ T30] init_sb+0xa5a/0x12f0
[ 229.096960][ T30] gfs2_fill_super+0x16d6/0x21d0
[ 229.099055][ T30] get_tree_bdev_flags+0x431/0x4f0
[ 229.101313][ T30] gfs2_get_tree+0x51/0x1e0
[ 229.103334][ T30] vfs_get_tree+0x92/0x2a0
[ 229.105302][ T30] do_new_mount+0x329/0xa50
[ 229.107194][ T30] page last free pid 5643 tgid 5643 stack trace:
[ 229.109861][ T30] __free_frozen_pages+0xbf8/0xd70
[ 229.112246][ T30] vfree+0x25a/0x400
[ 229.114018][ T30] kcov_close+0x28/0x50
[ 229.115788][ T30] __fput+0x44f/0xa70
[ 229.117548][ T30] task_work_run+0x1d9/0x270
[ 229.119572][ T30] do_exit+0x69b/0x2310
[ 229.121439][ T30] do_group_exit+0x21b/0x2d0
[ 229.123518][ T30] get_signal+0x1284/0x1330
[ 229.125498][ T30] arch_do_signal_or_restart+0xbc/0x830
[ 229.127952][ T30] exit_to_user_mode_loop+0x86/0x480
[ 229.130208][ T30] do_syscall_64+0x2b7/0xf80
[ 229.132249][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 229.134760][ T30]
[ 229.135832][ T30] Memory state around the buggy address:
[ 229.138228][ T30] ffff888035872d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 229.141637][ T30] ffff888035872d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 229.145053][ T30] >ffff888035872e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 229.148539][ T30] ^
[ 229.150472][ T30] ffff888035872e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 229.153886][ T30] ffff888035872f00: fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 229.157243][ T30] ==================================================================
[ 230.078883][ T6373] loop0: detected capacity change from 0 to 32768
[ 230.244384][ T6373] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 230.247496][ T6373] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 230.407383][ T6373] syz.0.147: attempt to access beyond end of device
[ 230.407383][ T6373] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 230.414382][ T6373] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 230.434729][ T6373] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 230.438421][ T6373] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6373 [syz.0.147] init_journal+0x16d9/0x2260
[ 230.463489][ T6373] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 230.467099][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.0.147 Not tainted syzkaller #0 PREEMPT(full)
[ 230.467115][ T6373] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 230.467122][ T6373] Call Trace:
[ 230.467130][ T6373]
[ 230.467147][ T6373] dump_stack_lvl+0xe8/0x150
[ 230.467167][ T6373] gfs2_withdraw+0xc3/0x1b0
[ 230.467185][ T6373] gfs2_jdesc_check+0x17d/0x2f0
[ 230.467198][ T6373] check_journal_clean+0x18d/0x360
[ 230.467216][ T6373] ? __pfx_check_journal_clean+0x10/0x10
[ 230.467234][ T6373] ? init_journal+0x16d9/0x2260
[ 230.467252][ T6373] ? do_raw_spin_unlock+0x4d/0x210
[ 230.467267][ T6373] ? _raw_spin_unlock+0x28/0x50
[ 230.467282][ T6373] ? gfs2_jdesc_find+0xab/0xc0
[ 230.467292][ T6373] init_journal+0x16d9/0x2260
[ 230.467315][ T6373] ? init_inodes+0xdb/0x320
[ 230.467331][ T6373] ? __pfx_init_journal+0x10/0x10
[ 230.467346][ T6373] ? vsnprintf+0xdf1/0xee0
[ 230.467366][ T6373] ? snprintf+0xe8/0x140
[ 230.467380][ T6373] ? init_inodes+0xdb/0x320
[ 230.467393][ T6373] ? __pfx_snprintf+0x10/0x10
[ 230.467417][ T6373] ? gfs2_glock_nq_num+0x13d/0x170
[ 230.467431][ T6373] init_inodes+0xdb/0x320
[ 230.467447][ T6373] gfs2_fill_super+0x1a38/0x21d0
[ 230.467489][ T6373] ? __pfx_gfs2_fill_super+0x10/0x10
[ 230.467508][ T6373] ? init_locking+0xb8/0x210
[ 230.467522][ T6373] ? sb_set_blocksize+0x155/0x240
[ 230.467538][ T6373] ? setup_bdev_super+0x4c1/0x5b0
[ 230.467554][ T6373] get_tree_bdev_flags+0x431/0x4f0
[ 230.467568][ T6373] ? __pfx_gfs2_fill_super+0x10/0x10
[ 230.467583][ T6373] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 230.467594][ T6373] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 230.467612][ T6373] gfs2_get_tree+0x51/0x1e0
[ 230.467630][ T6373] vfs_get_tree+0x92/0x2a0
[ 230.467645][ T6373] do_new_mount+0x329/0xa50
[ 230.467660][ T6373] ? apparmor_capable+0x137/0x1a0
[ 230.467676][ T6373] ? __pfx_do_new_mount+0x10/0x10
[ 230.467691][ T6373] ? ns_capable+0x89/0xe0
[ 230.467712][ T6373] __se_sys_mount+0x31d/0x420
[ 230.467730][ T6373] ? __pfx___se_sys_mount+0x10/0x10
[ 230.467748][ T6373] ? __x64_sys_mount+0x20/0xc0
[ 230.467765][ T6373] do_syscall_64+0xe2/0xf80
[ 230.467777][ T6373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 230.467787][ T6373] ? trace_irq_disable+0x37/0x100
[ 230.467798][ T6373] ? clear_bhb_loop+0x60/0xb0
[ 230.467810][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 230.467820][ T6373] RIP: 0033:0x7f905b99c1ca
[ 230.467831][ T6373] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 230.467841][ T6373] RSP: 002b:00007f905affde58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 230.467854][ T6373] RAX: ffffffffffffffda RBX: 00007f905affdee0 RCX: 00007f905b99c1ca
[ 230.467861][ T6373] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f905affdea0
[ 230.467868][ T6373] RBP: 0000200000000000 R08: 00007f905affdee0 R09: 0000000000208c1b
[ 230.467876][ T6373] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 230.467883][ T6373] R13: 00007f905affdea0 R14: 0000000000012750 R15: 00002000000128c0
[ 230.467900][ T6373]
[ 230.467961][ T6373] gfs2: fsid=..s: Error checking journal for spectator mount.
[ 230.654670][ T30] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 230.657707][ T30] CPU: 0 UID: 0 PID: 30 Comm: kcompactd1 Not tainted syzkaller #0 PREEMPT(full)
[ 230.661845][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 230.666337][ T30] Call Trace:
[ 230.667875][ T30]
[ 230.669258][ T30] vpanic+0x1e0/0x670
[ 230.671078][ T30] panic+0xc5/0xd0
[ 230.672830][ T30] ? __pfx_panic+0x10/0x10
[ 230.674880][ T30] ? preempt_schedule_thunk+0x16/0x30
[ 230.677227][ T30] ? preempt_schedule_thunk+0x16/0x30
[ 230.679599][ T30] ? move_to_new_folio+0x145/0x470
[ 230.681874][ T30] check_panic_on_warn+0x89/0xb0
[ 230.684048][ T30] ? move_to_new_folio+0x145/0x470
[ 230.686297][ T30] end_report+0x6f/0x140
[ 230.688187][ T30] kasan_report+0x128/0x150
[ 230.690212][ T30] ? __free_frozen_pages+0x6d9/0xd70
[ 230.692545][ T30] ? move_to_new_folio+0x145/0x470
[ 230.694826][ T30] kasan_check_range+0x264/0x2c0
[ 230.696968][ T30] move_to_new_folio+0x145/0x470
[ 230.699111][ T30] migrate_pages_batch+0x2b80/0x4d80
[ 230.701665][ T30] ? __pfx_compaction_free+0x10/0x10
[ 230.704159][ T30] ? __pfx_migrate_pages_batch+0x10/0x10
[ 230.706600][ T30] ? finish_task_switch+0x23c/0x920
[ 230.708872][ T30] ? lockdep_hardirqs_on+0x7a/0x110
[ 230.711143][ T30] ? finish_task_switch+0x23c/0x920
[ 230.713937][ T30] ? css_rstat_updated+0x23a/0x530
[ 230.716382][ T30] ? __pfx_css_rstat_updated+0x10/0x10
[ 230.719012][ T30] ? __schedule+0x1500/0x5050
[ 230.721099][ T30] ? __pfx_remove_migration_pte+0x10/0x10
[ 230.723636][ T30] ? css_rstat_updated+0x23a/0x530
[ 230.725819][ T30] ? __pfx_css_rstat_updated+0x10/0x10
[ 230.728240][ T30] ? __pfx_compaction_free+0x10/0x10
[ 230.730543][ T30] migrate_pages+0x1c95/0x29e0
[ 230.732670][ T30] ? __pfx_compaction_free+0x10/0x10
[ 230.735080][ T30] ? __pfx_compaction_alloc+0x10/0x10
[ 230.737377][ T30] ? __pfx_migrate_pages+0x10/0x10
[ 230.739606][ T30] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 230.742183][ T30] ? rcu_is_watching+0x15/0xb0
[ 230.744323][ T30] ? isolate_migratepages_block+0x3ba3/0x4410
[ 230.747001][ T30] compact_zone+0x2140/0x4640
[ 230.749057][ T30] ? __lock_acquire+0x6b5/0x2cf0
[ 230.751212][ T30] ? __pfx_compact_zone+0x10/0x10
[ 230.753438][ T30] ? __mutex_trylock_common+0x158/0x260
[ 230.755889][ T30] compact_node+0x21a/0x320
[ 230.757888][ T30] ? __pfx_compact_node+0x10/0x10
[ 230.760201][ T30] ? fragmentation_score_node+0x391/0x3b0
[ 230.762708][ T30] kcompactd+0xc0f/0x12a0
[ 230.764670][ T30] ? __pfx_kcompactd+0x10/0x10
[ 230.767039][ T30] ? __pfx_autoremove_wake_function+0x10/0x10
[ 230.769689][ T30] ? __kthread_parkme+0x7a/0x1f0
[ 230.771890][ T30] ? __kthread_parkme+0x19c/0x1f0
[ 230.774110][ T30] kthread+0x726/0x8b0
[ 230.775939][ T30] ? __pfx_kcompactd+0x10/0x10
[ 230.778357][ T30] ? __pfx_kthread+0x10/0x10
[ 230.780589][ T30] ? _raw_spin_unlock_irq+0x23/0x50
[ 230.782860][ T30] ? __pfx_kthread+0x10/0x10
[ 230.784935][ T30] ret_from_fork+0x51b/0xa40
[ 230.786887][ T30] ? __pfx_ret_from_fork+0x10/0x10
[ 230.789133][ T30] ? __switch_to+0xc82/0x1410
[ 230.791197][ T30] ? __pfx_kthread+0x10/0x10
[ 230.793261][ T30] ret_from_fork_asm+0x1a/0x30
[ 230.795257][ T30]
[ 230.796932][ T30] Kernel Offset: disabled
[ 230.798846][ T30] Rebooting in 86400 seconds..