Warning: Permanently added '[localhost]:4633' (ED25519) to the list of known hosts. 2025/06/19 23:52:22 ignoring optional flag "sandboxArg"="0" 2025/06/19 23:52:22 parsed 1 programs [ 132.030179][ T5749] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 137.995781][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.998900][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 152.674191][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.677491][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.923288][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.961090][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.849935][ T5772] syz-executor (5772) used greatest stack depth: 19192 bytes left [ 156.526028][ T5398] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.530638][ T5398] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.535701][ T5398] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.539587][ T5398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.544537][ T5398] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.140045][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 158.324839][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.351883][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.355166][ T5793] bridge_slave_0: entered allmulticast mode [ 158.359129][ T5793] bridge_slave_0: entered promiscuous mode [ 158.376231][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.379511][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.404104][ T5793] bridge_slave_1: entered allmulticast mode [ 158.425085][ T5793] bridge_slave_1: entered promiscuous mode [ 158.495112][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.500911][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.611606][ T5793] team0: Port device team_slave_0 added [ 158.622567][ T5793] team0: Port device team_slave_1 added [ 158.631615][ T5398] Bluetooth: hci0: command tx timeout [ 158.669194][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.691795][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.732023][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.762386][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.765389][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.808125][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.915168][ T5793] hsr_slave_0: entered promiscuous mode [ 158.919049][ T5793] hsr_slave_1: entered promiscuous mode [ 160.424561][ T5793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.453311][ T5793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.480006][ T5793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.500060][ T5793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.712052][ T5398] Bluetooth: hci0: command tx timeout [ 160.746490][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.813937][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.854592][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.857839][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.882375][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.885696][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.445204][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.007205][ T5793] veth0_vlan: entered promiscuous mode [ 162.038240][ T5793] veth1_vlan: entered promiscuous mode [ 162.099419][ T5793] veth0_macvtap: entered promiscuous mode [ 162.129356][ T5793] veth1_macvtap: entered promiscuous mode [ 162.178140][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.215036][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.241876][ T5793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.245485][ T5793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.249171][ T5793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.282167][ T5793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.793626][ T5398] Bluetooth: hci0: command tx timeout [ 163.120217][ T5583] dhcpcd (5583) used greatest stack depth: 19112 bytes left [ 164.871547][ T5398] Bluetooth: hci0: command tx timeout 2025/06/19 23:53:02 executed programs: 0 [ 166.971466][ T4676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.977946][ T4676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.982464][ T4676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.986611][ T4676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.990782][ T4676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.222503][ T5398] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.229089][ T5398] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.233832][ T5398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.243419][ T45] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.248001][ T45] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.252427][ T45] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.256408][ T45] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.260209][ T45] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.267212][ T45] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 167.271975][ T45] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.652968][ T5958] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.667916][ T5958] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.699260][ T5958] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.710269][ T4676] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.714495][ T4676] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.733208][ T4676] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.756717][ T45] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.763488][ T45] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.767167][ T45] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.770788][ T45] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.787972][ T45] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 167.821739][ T5975] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 167.852179][ T5975] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.877604][ T5975] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.893961][ T5975] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.924060][ T1038] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.014460][ T5946] chnl_net:caif_netlink_parms(): no params data found [ 169.052300][ T5958] Bluetooth: hci1: command tx timeout [ 169.185318][ T1038] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.352237][ T5958] Bluetooth: hci3: command tx timeout [ 169.355345][ T5958] Bluetooth: hci2: command tx timeout [ 169.434141][ T1038] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.726889][ T1038] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.897146][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.900481][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.913473][ T4676] Bluetooth: hci5: command tx timeout [ 169.916360][ T4676] Bluetooth: hci4: command tx timeout [ 169.931551][ T5946] bridge_slave_0: entered allmulticast mode [ 169.938676][ T5946] bridge_slave_0: entered promiscuous mode [ 169.954553][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.957951][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.972033][ T5946] bridge_slave_1: entered allmulticast mode [ 169.983546][ T5946] bridge_slave_1: entered promiscuous mode [ 170.153103][ T5958] Bluetooth: hci6: command tx timeout [ 170.366907][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.452996][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.607218][ T1038] bridge_slave_1: left allmulticast mode [ 170.609681][ T1038] bridge_slave_1: left promiscuous mode [ 170.631556][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.642590][ T1038] bridge_slave_0: left allmulticast mode [ 170.645059][ T1038] bridge_slave_0: left promiscuous mode [ 170.647614][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.111471][ T5958] Bluetooth: hci1: command tx timeout [ 171.431343][ T5958] Bluetooth: hci2: command tx timeout [ 171.433733][ T5958] Bluetooth: hci3: command tx timeout [ 171.500330][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.507199][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.523161][ T1038] bond0 (unregistering): Released all slaves [ 171.687483][ T5946] team0: Port device team_slave_0 added [ 171.748587][ T1038] hsr_slave_0: left promiscuous mode [ 171.762615][ T1038] hsr_slave_1: left promiscuous mode [ 171.766667][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.769986][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.783883][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.787241][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.815744][ T1038] veth1_macvtap: left promiscuous mode [ 171.818406][ T1038] veth0_macvtap: left promiscuous mode [ 171.827292][ T1038] veth1_vlan: left promiscuous mode [ 171.830385][ T1038] veth0_vlan: left promiscuous mode [ 171.995474][ T4676] Bluetooth: hci4: command tx timeout [ 171.997934][ T4676] Bluetooth: hci5: command tx timeout [ 172.194015][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 172.219891][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 172.231998][ T5958] Bluetooth: hci6: command tx timeout [ 172.577308][ T5946] team0: Port device team_slave_1 added [ 172.916458][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 172.946833][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.950079][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.012107][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.080052][ T5954] chnl_net:caif_netlink_parms(): no params data found [ 173.102823][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.105780][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.150489][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.191489][ T5958] Bluetooth: hci1: command tx timeout [ 173.408274][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 173.428738][ T5946] hsr_slave_0: entered promiscuous mode [ 173.443800][ T5946] hsr_slave_1: entered promiscuous mode [ 173.512204][ T5958] Bluetooth: hci3: command tx timeout [ 173.514732][ T5958] Bluetooth: hci2: command tx timeout [ 173.737869][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 173.754852][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.758109][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.781430][ T5953] bridge_slave_0: entered allmulticast mode [ 173.785037][ T5953] bridge_slave_0: entered promiscuous mode [ 173.853486][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.857452][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.860777][ T5953] bridge_slave_1: entered allmulticast mode [ 173.901336][ T5953] bridge_slave_1: entered promiscuous mode [ 173.994553][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.997870][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.012392][ T5954] bridge_slave_0: entered allmulticast mode [ 174.023905][ T5954] bridge_slave_0: entered promiscuous mode [ 174.070042][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 174.073580][ T4676] Bluetooth: hci5: command tx timeout [ 174.076091][ T4676] Bluetooth: hci4: command tx timeout [ 174.119506][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.132420][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.136000][ T5954] bridge_slave_1: entered allmulticast mode [ 174.150729][ T5954] bridge_slave_1: entered promiscuous mode [ 174.173145][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.254631][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.266831][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.270135][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.291649][ T5971] bridge_slave_0: entered allmulticast mode [ 174.295650][ T5971] bridge_slave_0: entered promiscuous mode [ 174.311294][ T5958] Bluetooth: hci6: command tx timeout [ 174.343314][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.392529][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.395806][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.398945][ T5971] bridge_slave_1: entered allmulticast mode [ 174.412432][ T5971] bridge_slave_1: entered promiscuous mode [ 174.456808][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.609349][ T5953] team0: Port device team_slave_0 added [ 174.618017][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.636066][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.665051][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.668160][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.681562][ T5965] bridge_slave_0: entered allmulticast mode [ 174.694792][ T5965] bridge_slave_0: entered promiscuous mode [ 174.755634][ T5953] team0: Port device team_slave_1 added [ 174.814100][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.817261][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.820251][ T5965] bridge_slave_1: entered allmulticast mode [ 174.833448][ T5965] bridge_slave_1: entered promiscuous mode [ 174.895493][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.898935][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.911941][ T5968] bridge_slave_0: entered allmulticast mode [ 174.925259][ T5968] bridge_slave_0: entered promiscuous mode [ 174.933469][ T5954] team0: Port device team_slave_0 added [ 174.936971][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.940089][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.963974][ T5968] bridge_slave_1: entered allmulticast mode [ 174.973591][ T5968] bridge_slave_1: entered promiscuous mode [ 175.170385][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.187501][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.223901][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.232804][ T5971] team0: Port device team_slave_0 added [ 175.265250][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.275157][ T5958] Bluetooth: hci1: command tx timeout [ 175.282525][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.288063][ T5954] team0: Port device team_slave_1 added [ 175.447057][ T5971] team0: Port device team_slave_1 added [ 175.472849][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.476087][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.496872][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.526233][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.592280][ T5958] Bluetooth: hci2: command tx timeout [ 175.594810][ T5958] Bluetooth: hci3: command tx timeout [ 175.642864][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.691914][ T5965] team0: Port device team_slave_0 added [ 175.745771][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.748881][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.774055][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.780923][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.789150][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.804192][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.835249][ T5965] team0: Port device team_slave_1 added [ 175.838713][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.844707][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.856376][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.867839][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.874637][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.901331][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.923232][ T5968] team0: Port device team_slave_0 added [ 175.943730][ T5953] hsr_slave_0: entered promiscuous mode [ 175.954592][ T5953] hsr_slave_1: entered promiscuous mode [ 175.960815][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.974645][ T5953] Cannot create hsr debugfs directory [ 176.017554][ T5968] team0: Port device team_slave_1 added [ 176.103842][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.107131][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.141429][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.153659][ T4676] Bluetooth: hci4: command tx timeout [ 176.156097][ T4676] Bluetooth: hci5: command tx timeout [ 176.228801][ T5971] hsr_slave_0: entered promiscuous mode [ 176.242929][ T5971] hsr_slave_1: entered promiscuous mode [ 176.246653][ T5971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.250004][ T5971] Cannot create hsr debugfs directory [ 176.274791][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.277938][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.314456][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.364630][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.367759][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.384245][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.392016][ T5958] Bluetooth: hci6: command tx timeout [ 176.427413][ T5954] hsr_slave_0: entered promiscuous mode [ 176.430756][ T5954] hsr_slave_1: entered promiscuous mode [ 176.436163][ T5954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.439487][ T5954] Cannot create hsr debugfs directory [ 176.479793][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.484650][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.499116][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.649453][ T5965] hsr_slave_0: entered promiscuous mode [ 176.654835][ T5965] hsr_slave_1: entered promiscuous mode [ 176.657898][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.662462][ T5965] Cannot create hsr debugfs directory [ 176.764123][ T5946] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.770852][ T5946] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.786846][ T5968] hsr_slave_0: entered promiscuous mode [ 176.789979][ T5968] hsr_slave_1: entered promiscuous mode [ 176.812430][ T5968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.817694][ T5968] Cannot create hsr debugfs directory [ 176.886952][ T5946] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.902765][ T5946] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.657417][ T5953] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.689833][ T5953] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.705495][ T5953] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.772284][ T5953] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.899398][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.933457][ T5965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.967341][ T5965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.014588][ T5965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.056418][ T5965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.090871][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.137932][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.141236][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.157248][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.175770][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.178751][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.220791][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.297524][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.330680][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.549234][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.693268][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.825013][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.828103][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.843901][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.847101][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.884767][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.905211][ T5971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.970800][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.004586][ T5971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.084991][ T5971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.102193][ T5971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.136853][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.147590][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.150784][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.186549][ T5954] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.226416][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.229675][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.258140][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.269738][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.273009][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.350494][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.353948][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.505117][ T5968] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.524655][ T5968] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.543346][ T5968] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.585116][ T5968] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.974411][ T5946] veth0_vlan: entered promiscuous mode [ 180.016613][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.029638][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.088056][ T5946] veth1_vlan: entered promiscuous mode [ 180.100146][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.229259][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.232613][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.277375][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.370928][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.374581][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.426447][ T5953] veth0_vlan: entered promiscuous mode [ 180.435907][ T5946] veth0_macvtap: entered promiscuous mode [ 180.458897][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.487377][ T5953] veth1_vlan: entered promiscuous mode [ 180.494047][ T5946] veth1_macvtap: entered promiscuous mode [ 180.619183][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.637092][ T5953] veth0_macvtap: entered promiscuous mode [ 180.659632][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.702713][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.710661][ T5953] veth1_macvtap: entered promiscuous mode [ 180.760656][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.807932][ T5965] veth0_vlan: entered promiscuous mode [ 180.815021][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.818634][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.850460][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.854156][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.899324][ T5954] veth0_vlan: entered promiscuous mode [ 180.929426][ T5946] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.954517][ T5946] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.958053][ T5946] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.982905][ T5946] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.010149][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.066362][ T5954] veth1_vlan: entered promiscuous mode [ 181.100636][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.150108][ T5968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.198098][ T5968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.212361][ T5965] veth1_vlan: entered promiscuous mode [ 181.279828][ T5953] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.311516][ T5953] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.315192][ T5953] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.319062][ T5953] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.525586][ T5954] veth0_macvtap: entered promiscuous mode [ 181.557670][ T5954] veth1_macvtap: entered promiscuous mode [ 181.656957][ T5965] veth0_macvtap: entered promiscuous mode [ 181.724266][ T5965] veth1_macvtap: entered promiscuous mode [ 181.770741][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.817948][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.850970][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.861415][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.924528][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.937192][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.078161][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.085008][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.089028][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.098620][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.133817][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.137711][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.183227][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.244237][ T5965] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.248076][ T5965] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.273665][ T5965] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.277280][ T5965] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.344984][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.696292][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.699706][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.859071][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.896675][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/19 23:53:18 executed programs: 12 [ 183.008921][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.041248][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.238008][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.277038][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.656074][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.699169][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.967878][ T5971] veth0_vlan: entered promiscuous mode [ 184.067824][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.114294][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.125491][ T5971] veth1_vlan: entered promiscuous mode [ 184.210756][ T5968] veth0_vlan: entered promiscuous mode [ 184.348147][ T5968] veth1_vlan: entered promiscuous mode [ 184.529479][ T5971] veth0_macvtap: entered promiscuous mode [ 184.556971][ T6204] loop0: detected capacity change from 0 to 32768 [ 184.678149][ T5971] veth1_macvtap: entered promiscuous mode [ 184.719879][ T6204] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 184.786744][ T6204] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 184.799060][ T5968] veth0_macvtap: entered promiscuous mode [ 184.854752][ T5968] veth1_macvtap: entered promiscuous mode [ 184.963242][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.967680][ T6204] syz.0.16: attempt to access beyond end of device [ 184.967680][ T6204] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 185.046835][ T6204] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 185.070039][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.088030][ T6204] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 185.121200][ T6204] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 185.156645][ T6204] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 185.160310][ T6204] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 185.214857][ T6204] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 185.218703][ T6204] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 185.227732][ T5971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.273841][ T5971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.277753][ T5971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.286194][ T6204] gfs2: fsid=syz:syz.0: File system withdrawn [ 185.321274][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.0.16 Not tainted 6.16.0-rc2-syzkaller-g5c8013ae2e86 #0 PREEMPT(full) [ 185.321295][ T6204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.321301][ T6204] Call Trace: [ 185.321306][ T6204] [ 185.321332][ T6204] dump_stack_lvl+0x189/0x250 [ 185.321355][ T6204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.321371][ T6204] ? __pfx__printk+0x10/0x10 [ 185.321381][ T6204] ? kobject_uevent_env+0x36b/0x8c0 [ 185.321453][ T6204] gfs2_withdraw+0x111e/0x14f0 [ 185.321475][ T6204] ? __pfx_gfs2_withdraw+0x10/0x10 [ 185.321487][ T6204] ? __pfx_wake_up_bit+0x10/0x10 [ 185.321504][ T6204] ? gfs2_consist_inode_i+0xf5/0x110 [ 185.321518][ T6204] gfs2_jdesc_check+0x17d/0x2f0 [ 185.321535][ T6204] init_journal+0xca7/0x2260 [ 185.321555][ T6204] ? init_inodes+0xdb/0x320 [ 185.321570][ T6204] ? __pfx_init_journal+0x10/0x10 [ 185.321580][ T6204] ? vsnprintf+0xe11/0xf00 [ 185.321600][ T6204] ? snprintf+0xda/0x120 [ 185.321614][ T6204] ? init_inodes+0xdb/0x320 [ 185.321626][ T6204] ? __pfx_snprintf+0x10/0x10 [ 185.321639][ T6204] ? gfs2_glock_nq_num+0x13d/0x170 [ 185.321653][ T6204] init_inodes+0xdb/0x320 [ 185.321666][ T6204] gfs2_fill_super+0x1939/0x20e0 [ 185.321687][ T6204] ? __pfx_gfs2_fill_super+0x10/0x10 [ 185.321700][ T6204] ? init_locking+0xb8/0x210 [ 185.321709][ T6204] ? sb_set_blocksize+0x104/0x180 [ 185.321726][ T6204] ? setup_bdev_super+0x4c1/0x5b0 [ 185.321739][ T6204] get_tree_bdev_flags+0x40b/0x4d0 [ 185.321749][ T6204] ? __pfx_gfs2_fill_super+0x10/0x10 [ 185.321760][ T6204] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 185.321769][ T6204] ? rcu_is_watching+0x15/0xb0 [ 185.321788][ T6204] gfs2_get_tree+0x51/0x1e0 [ 185.321802][ T6204] vfs_get_tree+0x8f/0x2b0 [ 185.321814][ T6204] do_new_mount+0x24a/0xa40 [ 185.321831][ T6204] __se_sys_mount+0x317/0x410 [ 185.321844][ T6204] ? __pfx___se_sys_mount+0x10/0x10 [ 185.321853][ T6204] ? do_syscall_64+0xbe/0x3b0 [ 185.321859][ T6204] ? __x64_sys_mount+0x20/0xc0 [ 185.321867][ T6204] do_syscall_64+0xfa/0x3b0 [ 185.321873][ T6204] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.321882][ T6204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.321889][ T6204] ? clear_bhb_loop+0x60/0xb0 [ 185.321897][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.321903][ T6204] RIP: 0033:0x7fbc60b874ba [ 185.321911][ T6204] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.321917][ T6204] RSP: 002b:00007fbc61a49e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.321929][ T6204] RAX: ffffffffffffffda RBX: 00007fbc61a49ef0 RCX: 00007fbc60b874ba [ 185.321942][ T6204] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fbc61a49eb0 [ 185.321948][ T6204] RBP: 0000000020000000 R08: 00007fbc61a49ef0 R09: 0000000000208c1b [ 185.321954][ T6204] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000000020000100 [ 185.321960][ T6204] R13: 00007fbc61a49eb0 R14: 0000000000012750 R15: 00000000200129c0 [ 185.321978][ T6204] [ 185.482646][ T6204] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 185.491143][ T5971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.618056][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.282544][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.483458][ T5968] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.487109][ T5968] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.546015][ T5968] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.549786][ T5968] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.962617][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.000239][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.186538][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.190021][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.299220][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.350503][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.633434][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.672837][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/06/19 23:53:23 executed programs: 19 [ 188.325943][ T6238] loop0: detected capacity change from 0 to 32768 [ 188.471556][ T6238] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 188.475089][ T6238] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 188.647554][ T6238] syz.0.22: attempt to access beyond end of device [ 188.647554][ T6238] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 188.715913][ T6238] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 188.783797][ T6238] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 188.787902][ T6238] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 188.892981][ T6238] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 188.896462][ T6238] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 188.899552][ T6238] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 188.991865][ T6238] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 189.030562][ T6238] gfs2: fsid=syz:syz.0: File system withdrawn [ 189.085390][ T6238] CPU: 0 UID: 0 PID: 6238 Comm: syz.0.22 Not tainted 6.16.0-rc2-syzkaller-g5c8013ae2e86 #0 PREEMPT(full) [ 189.085410][ T6238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.085416][ T6238] Call Trace: [ 189.085421][ T6238] [ 189.085427][ T6238] dump_stack_lvl+0x189/0x250 [ 189.085451][ T6238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.085467][ T6238] ? __pfx__printk+0x10/0x10 [ 189.085477][ T6238] ? kobject_uevent_env+0x36b/0x8c0 [ 189.085510][ T6238] gfs2_withdraw+0x111e/0x14f0 [ 189.085533][ T6238] ? __pfx_gfs2_withdraw+0x10/0x10 [ 189.085544][ T6238] ? __pfx_wake_up_bit+0x10/0x10 [ 189.085561][ T6238] ? gfs2_consist_inode_i+0xf5/0x110 [ 189.085575][ T6238] gfs2_jdesc_check+0x17d/0x2f0 [ 189.085591][ T6238] init_journal+0xca7/0x2260 [ 189.085609][ T6238] ? init_inodes+0xdb/0x320 [ 189.085624][ T6238] ? __pfx_init_journal+0x10/0x10 [ 189.085635][ T6238] ? vsnprintf+0xe11/0xf00 [ 189.085654][ T6238] ? snprintf+0xda/0x120 [ 189.085666][ T6238] ? init_inodes+0xdb/0x320 [ 189.085677][ T6238] ? __pfx_snprintf+0x10/0x10 [ 189.085691][ T6238] ? gfs2_glock_nq_num+0x13d/0x170 [ 189.085705][ T6238] init_inodes+0xdb/0x320 [ 189.085718][ T6238] gfs2_fill_super+0x1939/0x20e0 [ 189.085740][ T6238] ? __pfx_gfs2_fill_super+0x10/0x10 [ 189.085753][ T6238] ? init_locking+0xb8/0x210 [ 189.085762][ T6238] ? sb_set_blocksize+0x104/0x180 [ 189.085779][ T6238] ? setup_bdev_super+0x4c1/0x5b0 [ 189.085792][ T6238] get_tree_bdev_flags+0x40b/0x4d0 [ 189.085801][ T6238] ? __pfx_gfs2_fill_super+0x10/0x10 [ 189.085811][ T6238] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 189.085821][ T6238] ? rcu_is_watching+0x15/0xb0 [ 189.085840][ T6238] gfs2_get_tree+0x51/0x1e0 [ 189.085853][ T6238] vfs_get_tree+0x8f/0x2b0 [ 189.085864][ T6238] do_new_mount+0x24a/0xa40 [ 189.085882][ T6238] __se_sys_mount+0x317/0x410 [ 189.085897][ T6238] ? __pfx___se_sys_mount+0x10/0x10 [ 189.085912][ T6238] ? do_syscall_64+0xbe/0x3b0 [ 189.085920][ T6238] ? __x64_sys_mount+0x20/0xc0 [ 189.085932][ T6238] do_syscall_64+0xfa/0x3b0 [ 189.085940][ T6238] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.085956][ T6238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.085966][ T6238] ? clear_bhb_loop+0x60/0xb0 [ 189.085979][ T6238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.085990][ T6238] RIP: 0033:0x7fbc60b874ba [ 189.086000][ T6238] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.086006][ T6238] RSP: 002b:00007fbc61a49e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.086018][ T6238] RAX: ffffffffffffffda RBX: 00007fbc61a49ef0 RCX: 00007fbc60b874ba [ 189.086025][ T6238] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fbc61a49eb0 [ 189.086031][ T6238] RBP: 0000000020000000 R08: 00007fbc61a49ef0 R09: 0000000000208c1b [ 189.086037][ T6238] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000000020000100 [ 189.086044][ T6238] R13: 00007fbc61a49eb0 R14: 0000000000012750 R15: 00000000200129c0 [ 189.086059][ T6238] [ 189.086065][ T6238] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 190.087677][ T5749] ================================================================== [ 190.091250][ T5749] BUG: KASAN: slab-use-after-free in folio_evictable+0xe4/0x250 [ 190.094504][ T5749] Read of size 8 at addr ffff888058c413a0 by task syz-executor/5749 [ 190.098708][ T5749] [ 190.099797][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-g5c8013ae2e86 #0 PREEMPT(full) [ 190.099810][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.099816][ T5749] Call Trace: [ 190.099823][ T5749] [ 190.099829][ T5749] dump_stack_lvl+0x189/0x250 [ 190.099848][ T5749] ? rcu_is_watching+0x15/0xb0 [ 190.099863][ T5749] ? __kasan_check_byte+0x12/0x40 [ 190.099874][ T5749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.099888][ T5749] ? rcu_is_watching+0x15/0xb0 [ 190.099967][ T5749] ? lock_release+0x4b/0x3e0 [ 190.099987][ T5749] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 190.100002][ T5749] ? __virt_addr_valid+0x1c8/0x5c0 [ 190.100015][ T5749] ? __virt_addr_valid+0x4a5/0x5c0 [ 190.100024][ T5749] print_report+0xd2/0x2b0 [ 190.100040][ T5749] ? folio_evictable+0xe4/0x250 [ 190.100054][ T5749] kasan_report+0x118/0x150 [ 190.100065][ T5749] ? folio_evictable+0xe4/0x250 [ 190.100087][ T5749] kasan_check_range+0x2b0/0x2c0 [ 190.100096][ T5749] ? folio_evictable+0x1c/0x250 [ 190.100110][ T5749] folio_evictable+0xe4/0x250 [ 190.100124][ T5749] evict_folios+0x1acd/0x5500 [ 190.100144][ T5749] ? __pfx_evict_folios+0x10/0x10 [ 190.100158][ T5749] ? __lock_acquire+0xab9/0xd20 [ 190.100178][ T5749] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 190.100194][ T5749] ? get_swappiness+0x358/0x3c0 [ 190.100205][ T5749] try_to_shrink_lruvec+0x705/0x990 [ 190.100223][ T5749] shrink_one+0x21b/0x7c0 [ 190.100235][ T5749] ? shrink_node+0x2f10/0x3760 [ 190.100246][ T5749] shrink_node+0x314e/0x3760 [ 190.100259][ T5749] ? __lock_acquire+0xab9/0xd20 [ 190.100271][ T5749] ? shrink_node+0x2f10/0x3760 [ 190.100323][ T5749] ? is_bpf_text_address+0x26/0x2b0 [ 190.100343][ T5749] ? is_bpf_text_address+0x292/0x2b0 [ 190.100361][ T5749] ? is_bpf_text_address+0x26/0x2b0 [ 190.100375][ T5749] ? __pfx_shrink_node+0x10/0x10 [ 190.100390][ T5749] ? bad_range+0x8b/0x2c0 [ 190.100406][ T5749] ? vmpressure_prio+0x33/0x150 [ 190.100422][ T5749] do_try_to_free_pages+0x66b/0x1960 [ 190.100442][ T5749] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 190.100457][ T5749] ? allow_direct_reclaim+0x80d/0x8d0 [ 190.100469][ T5749] try_to_free_pages+0x8a2/0xdd0 [ 190.100483][ T5749] ? __pfx_try_to_free_pages+0x10/0x10 [ 190.100500][ T5749] ? __lock_acquire+0xab9/0xd20 [ 190.100521][ T5749] ? fs_reclaim_acquire+0x7d/0x100 [ 190.100536][ T5749] __alloc_pages_direct_reclaim+0x144/0x300 [ 190.100554][ T5749] ? __pfx___alloc_pages_direct_reclaim+0x10/0x10 [ 190.100570][ T5749] ? wake_all_kswapds+0x167/0x280 [ 190.100586][ T5749] __alloc_pages_slowpath+0x5ff/0xce0 [ 190.100603][ T5749] __alloc_frozen_pages_noprof+0x319/0x370 [ 190.100616][ T5749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 190.100628][ T5749] ? do_raw_spin_lock+0x121/0x290 [ 190.100639][ T5749] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 190.100650][ T5749] ? policy_nodemask+0x27c/0x720 [ 190.100664][ T5749] alloc_pages_mpol+0x232/0x4a0 [ 190.100677][ T5749] alloc_pages_noprof+0xa9/0x190 [ 190.100691][ T5749] get_free_pages_noprof+0xf/0x80 [ 190.100705][ T5749] __pollwait+0x27b/0x460 [ 190.100717][ T5749] ? __pfx___pollwait+0x10/0x10 [ 190.100726][ T5749] pipe_poll+0xdd/0x470 [ 190.100737][ T5749] ? __pfx_pipe_poll+0x10/0x10 [ 190.100747][ T5749] do_select+0x105b/0x17e0 [ 190.100764][ T5749] ? __pfx_do_select+0x10/0x10 [ 190.100775][ T5749] ? __pfx___pollwait+0x10/0x10 [ 190.100786][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.100797][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.100808][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.100818][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.100828][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.100841][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.100851][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.100864][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.100875][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.100892][ T5749] core_sys_select+0x6dd/0xa20 [ 190.100905][ T5749] ? __pfx_core_sys_select+0x10/0x10 [ 190.100920][ T5749] ? __pfx_set_user_sigmask+0x10/0x10 [ 190.100936][ T5749] ? rcu_is_watching+0x15/0xb0 [ 190.100955][ T5749] __se_sys_pselect6+0x27a/0x300 [ 190.100969][ T5749] ? __pfx___se_sys_pselect6+0x10/0x10 [ 190.100979][ T5749] ? rcu_is_watching+0x15/0xb0 [ 190.100993][ T5749] ? __x64_sys_pselect6+0x21/0xf0 [ 190.101002][ T5749] do_syscall_64+0xfa/0x3b0 [ 190.101015][ T5749] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.101031][ T5749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.101042][ T5749] ? clear_bhb_loop+0x60/0xb0 [ 190.101054][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.101065][ T5749] RIP: 0033:0x7fc38bb85adc [ 190.101085][ T5749] Code: 29 44 24 30 80 3d 7b 6a 1c 00 00 4c 89 4c 24 40 4c 8d 4c 24 40 48 c7 44 24 48 08 00 00 00 74 2e 4c 89 ea b8 0e 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7c 48 8b 54 24 58 64 48 2b 14 25 28 00 00 00 [ 190.101093][ T5749] RSP: 002b:00007ffde95585e0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 190.101106][ T5749] RAX: ffffffffffffffda RBX: 00007ffde9558710 RCX: 00007fc38bb85adc [ 190.101113][ T5749] RDX: 0000000000000000 RSI: 00007ffde9558710 RDI: 000000000000002a [ 190.101120][ T5749] RBP: 00007ffde9558950 R08: 00007ffde9558610 R09: 00007ffde9558620 [ 190.101127][ T5749] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffde95589b0 [ 190.101133][ T5749] R13: 0000000000000000 R14: 00007ffde9558b60 R15: 00007ffde95587a0 [ 190.101143][ T5749] [ 190.101148][ T5749] [ 190.320903][ T5749] Allocated by task 6238: [ 190.322949][ T5749] kasan_save_track+0x3e/0x80 [ 190.324993][ T5749] __kasan_slab_alloc+0x6c/0x80 [ 190.327031][ T5749] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 190.329341][ T5749] gfs2_glock_get+0x263/0xec0 [ 190.331444][ T5749] gfs2_inode_lookup+0x215/0xb10 [ 190.333571][ T5749] gfs2_dir_search+0x168/0x220 [ 190.335707][ T5749] gfs2_lookupi+0x3d9/0x5a0 [ 190.337826][ T5749] gfs2_lookup_meta+0xa7/0x170 [ 190.339863][ T5749] init_journal+0x19f/0x2260 [ 190.341827][ T5749] init_inodes+0xdb/0x320 [ 190.343592][ T5749] gfs2_fill_super+0x1939/0x20e0 [ 190.345697][ T5749] get_tree_bdev_flags+0x40b/0x4d0 [ 190.347957][ T5749] gfs2_get_tree+0x51/0x1e0 [ 190.349943][ T5749] vfs_get_tree+0x8f/0x2b0 [ 190.351954][ T5749] do_new_mount+0x24a/0xa40 [ 190.353948][ T5749] __se_sys_mount+0x317/0x410 [ 190.356027][ T5749] do_syscall_64+0xfa/0x3b0 [ 190.358061][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.360721][ T5749] [ 190.361842][ T5749] Freed by task 15: [ 190.363627][ T5749] kasan_save_track+0x3e/0x80 [ 190.365742][ T5749] kasan_save_free_info+0x46/0x50 [ 190.367955][ T5749] __kasan_slab_free+0x62/0x70 [ 190.370068][ T5749] kmem_cache_free+0x18f/0x400 [ 190.372318][ T5749] rcu_core+0xca5/0x1710 [ 190.374213][ T5749] handle_softirqs+0x286/0x870 [ 190.376377][ T5749] run_ksoftirqd+0x9b/0x100 [ 190.378443][ T5749] smpboot_thread_fn+0x53f/0xa60 [ 190.380675][ T5749] kthread+0x70e/0x8a0 [ 190.382555][ T5749] ret_from_fork+0x3f9/0x770 [ 190.384666][ T5749] ret_from_fork_asm+0x1a/0x30 [ 190.386813][ T5749] [ 190.387938][ T5749] Last potentially related work creation: [ 190.390573][ T5749] kasan_save_stack+0x3e/0x60 [ 190.392789][ T5749] kasan_record_aux_stack+0xbd/0xd0 [ 190.395139][ T5749] call_rcu+0x142/0x990 [ 190.397025][ T5749] __gfs2_glock_free+0xb44/0xc90 [ 190.399212][ T5749] gfs2_glock_free+0x3c/0xa0 [ 190.401385][ T5749] process_scheduled_works+0xae1/0x17b0 [ 190.403813][ T5749] worker_thread+0x8a0/0xda0 [ 190.405970][ T5749] kthread+0x70e/0x8a0 [ 190.407762][ T5749] ret_from_fork+0x3f9/0x770 [ 190.409894][ T5749] ret_from_fork_asm+0x1a/0x30 [ 190.412096][ T5749] [ 190.413210][ T5749] Second to last potentially related work creation: [ 190.416099][ T5749] kasan_save_stack+0x3e/0x60 [ 190.418211][ T5749] kasan_record_aux_stack+0xbd/0xd0 [ 190.420529][ T5749] insert_work+0x3d/0x330 [ 190.422428][ T5749] __queue_work+0xcfc/0xfe0 [ 190.424484][ T5749] queue_delayed_work_on+0x18b/0x280 [ 190.426776][ T5749] do_xmote+0xce0/0x1220 [ 190.428714][ T5749] glock_work_func+0x2a8/0x580 [ 190.430853][ T5749] process_scheduled_works+0xae1/0x17b0 [ 190.433435][ T5749] worker_thread+0x8a0/0xda0 [ 190.435605][ T5749] kthread+0x70e/0x8a0 [ 190.437506][ T5749] ret_from_fork+0x3f9/0x770 [ 190.439610][ T5749] ret_from_fork_asm+0x1a/0x30 [ 190.441850][ T5749] [ 190.442900][ T5749] The buggy address belongs to the object at ffff888058c40fd8 [ 190.442900][ T5749] which belongs to the cache gfs2_glock(aspace) of size 1224 [ 190.449223][ T5749] The buggy address is located 968 bytes inside of [ 190.449223][ T5749] freed 1224-byte region [ffff888058c40fd8, ffff888058c414a0) [ 190.455115][ T5749] [ 190.456250][ T5749] The buggy address belongs to the physical page: [ 190.459269][ T5749] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58c40 [ 190.463236][ T5749] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 190.467220][ T5749] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 190.470586][ T5749] page_type: f5(slab) [ 190.472433][ T5749] raw: 04fff00000000040 ffff88801c52c640 dead000000000122 0000000000000000 [ 190.476333][ T5749] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 190.480100][ T5749] head: 04fff00000000040 ffff88801c52c640 dead000000000122 0000000000000000 [ 190.483885][ T5749] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 190.488191][ T5749] head: 04fff00000000002 ffffea0001631001 00000000ffffffff 00000000ffffffff [ 190.492392][ T5749] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 190.496366][ T5749] page dumped because: kasan: bad access detected [ 190.499364][ T5749] page_owner tracks the page as allocated [ 190.502013][ T5749] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6204, tgid 6202 (syz.0.16), ts 184870044075, free_ts 168258045000 [ 190.510694][ T5749] post_alloc_hook+0x240/0x2a0 [ 190.512855][ T5749] get_page_from_freelist+0x21e4/0x22c0 [ 190.515257][ T5749] __alloc_frozen_pages_noprof+0x181/0x370 [ 190.517832][ T5749] alloc_pages_mpol+0x232/0x4a0 [ 190.520150][ T5749] allocate_slab+0x8a/0x3b0 [ 190.522219][ T5749] ___slab_alloc+0xbfc/0x1480 [ 190.524328][ T5749] kmem_cache_alloc_noprof+0x283/0x3c0 [ 190.526725][ T5749] gfs2_glock_get+0x263/0xec0 [ 190.528886][ T5749] gfs2_inode_lookup+0x215/0xb10 [ 190.531046][ T5749] init_sb+0xa30/0x12c0 [ 190.533067][ T5749] gfs2_fill_super+0x1605/0x20e0 [ 190.535233][ T5749] get_tree_bdev_flags+0x40b/0x4d0 [ 190.537481][ T5749] gfs2_get_tree+0x51/0x1e0 [ 190.539399][ T5749] vfs_get_tree+0x8f/0x2b0 [ 190.541375][ T5749] do_new_mount+0x24a/0xa40 [ 190.543388][ T5749] __se_sys_mount+0x317/0x410 [ 190.545513][ T5749] page last free pid 9 tgid 9 stack trace: [ 190.548103][ T5749] __free_frozen_pages+0xc71/0xe70 [ 190.550399][ T5749] kasan_depopulate_vmalloc_pte+0x74/0xa0 [ 190.553018][ T5749] __apply_to_page_range+0xb92/0x1380 [ 190.555385][ T5749] kasan_release_vmalloc+0xa2/0xd0 [ 190.557676][ T5749] purge_vmap_node+0x214/0x8f0 [ 190.559784][ T5749] __purge_vmap_area_lazy+0x7a4/0xb40 [ 190.562259][ T5749] drain_vmap_area_work+0x27/0x40 [ 190.564466][ T5749] process_scheduled_works+0xae1/0x17b0 [ 190.567108][ T5749] worker_thread+0x8a0/0xda0 [ 190.569145][ T5749] kthread+0x70e/0x8a0 [ 190.571032][ T5749] ret_from_fork+0x3f9/0x770 [ 190.572969][ T5749] ret_from_fork_asm+0x1a/0x30 [ 190.575044][ T5749] [ 190.576162][ T5749] Memory state around the buggy address: [ 190.578607][ T5749] ffff888058c41280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.582018][ T5749] ffff888058c41300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.585417][ T5749] >ffff888058c41380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.588955][ T5749] ^ [ 190.591349][ T5749] ffff888058c41400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.594908][ T5749] ffff888058c41480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 190.598389][ T5749] ================================================================== [ 190.601927][ T5749] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 190.605083][ T5749] CPU: 0 UID: 0 PID: 5749 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-g5c8013ae2e86 #0 PREEMPT(full) [ 190.609984][ T5749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.614690][ T5749] Call Trace: [ 190.616235][ T5749] [ 190.617598][ T5749] dump_stack_lvl+0x99/0x250 [ 190.619645][ T5749] ? __asan_memcpy+0x40/0x70 [ 190.621729][ T5749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.624002][ T5749] ? __pfx__printk+0x10/0x10 [ 190.626079][ T5749] panic+0x2db/0x790 [ 190.627885][ T5749] ? __pfx_panic+0x10/0x10 [ 190.629938][ T5749] ? do_raw_spin_unlock+0x4d/0x240 [ 190.632300][ T5749] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 190.634892][ T5749] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 190.637644][ T5749] ? folio_evictable+0xe4/0x250 [ 190.639804][ T5749] check_panic_on_warn+0x89/0xb0 [ 190.642063][ T5749] ? folio_evictable+0xe4/0x250 [ 190.644348][ T5749] end_report+0x78/0x160 [ 190.646244][ T5749] kasan_report+0x129/0x150 [ 190.648315][ T5749] ? folio_evictable+0xe4/0x250 [ 190.650488][ T5749] kasan_check_range+0x2b0/0x2c0 [ 190.652748][ T5749] ? folio_evictable+0x1c/0x250 [ 190.654839][ T5749] folio_evictable+0xe4/0x250 [ 190.656913][ T5749] evict_folios+0x1acd/0x5500 [ 190.658980][ T5749] ? __pfx_evict_folios+0x10/0x10 [ 190.661207][ T5749] ? __lock_acquire+0xab9/0xd20 [ 190.663770][ T5749] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 190.666544][ T5749] ? get_swappiness+0x358/0x3c0 [ 190.668737][ T5749] try_to_shrink_lruvec+0x705/0x990 [ 190.671172][ T5749] shrink_one+0x21b/0x7c0 [ 190.673176][ T5749] ? shrink_node+0x2f10/0x3760 [ 190.675550][ T5749] shrink_node+0x314e/0x3760 [ 190.677732][ T5749] ? __lock_acquire+0xab9/0xd20 [ 190.679868][ T5749] ? shrink_node+0x2f10/0x3760 [ 190.682085][ T5749] ? is_bpf_text_address+0x26/0x2b0 [ 190.684415][ T5749] ? is_bpf_text_address+0x292/0x2b0 [ 190.686793][ T5749] ? is_bpf_text_address+0x26/0x2b0 [ 190.689134][ T5749] ? __pfx_shrink_node+0x10/0x10 [ 190.691376][ T5749] ? bad_range+0x8b/0x2c0 [ 190.693379][ T5749] ? vmpressure_prio+0x33/0x150 [ 190.695835][ T5749] do_try_to_free_pages+0x66b/0x1960 [ 190.698233][ T5749] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 190.700772][ T5749] ? allow_direct_reclaim+0x80d/0x8d0 [ 190.703295][ T5749] try_to_free_pages+0x8a2/0xdd0 [ 190.705574][ T5749] ? __pfx_try_to_free_pages+0x10/0x10 [ 190.708079][ T5749] ? __lock_acquire+0xab9/0xd20 [ 190.710352][ T5749] ? fs_reclaim_acquire+0x7d/0x100 [ 190.712763][ T5749] __alloc_pages_direct_reclaim+0x144/0x300 [ 190.715399][ T5749] ? __pfx___alloc_pages_direct_reclaim+0x10/0x10 [ 190.718250][ T5749] ? wake_all_kswapds+0x167/0x280 [ 190.720532][ T5749] __alloc_pages_slowpath+0x5ff/0xce0 [ 190.722933][ T5749] __alloc_frozen_pages_noprof+0x319/0x370 [ 190.725439][ T5749] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 190.728215][ T5749] ? do_raw_spin_lock+0x121/0x290 [ 190.730511][ T5749] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 190.732941][ T5749] ? policy_nodemask+0x27c/0x720 [ 190.735115][ T5749] alloc_pages_mpol+0x232/0x4a0 [ 190.737299][ T5749] alloc_pages_noprof+0xa9/0x190 [ 190.739494][ T5749] get_free_pages_noprof+0xf/0x80 [ 190.741767][ T5749] __pollwait+0x27b/0x460 [ 190.743743][ T5749] ? __pfx___pollwait+0x10/0x10 [ 190.745925][ T5749] pipe_poll+0xdd/0x470 [ 190.747830][ T5749] ? __pfx_pipe_poll+0x10/0x10 [ 190.749964][ T5749] do_select+0x105b/0x17e0 [ 190.752132][ T5749] ? __pfx_do_select+0x10/0x10 [ 190.754470][ T5749] ? __pfx___pollwait+0x10/0x10 [ 190.756846][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.759203][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.761345][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.763447][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.765611][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.767709][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.769836][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.771996][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.774125][ T5749] ? __pfx_pollwake+0x10/0x10 [ 190.776239][ T5749] core_sys_select+0x6dd/0xa20 [ 190.778418][ T5749] ? __pfx_core_sys_select+0x10/0x10 [ 190.780775][ T5749] ? __pfx_set_user_sigmask+0x10/0x10 [ 190.783176][ T5749] ? rcu_is_watching+0x15/0xb0 [ 190.785313][ T5749] __se_sys_pselect6+0x27a/0x300 [ 190.787588][ T5749] ? __pfx___se_sys_pselect6+0x10/0x10 [ 190.789998][ T5749] ? rcu_is_watching+0x15/0xb0 [ 190.792147][ T5749] ? __x64_sys_pselect6+0x21/0xf0 [ 190.794418][ T5749] do_syscall_64+0xfa/0x3b0 [ 190.796524][ T5749] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.798818][ T5749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.801577][ T5749] ? clear_bhb_loop+0x60/0xb0 [ 190.803703][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.806391][ T5749] RIP: 0033:0x7fc38bb85adc [ 190.808372][ T5749] Code: 29 44 24 30 80 3d 7b 6a 1c 00 00 4c 89 4c 24 40 4c 8d 4c 24 40 48 c7 44 24 48 08 00 00 00 74 2e 4c 89 ea b8 0e 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 7c 48 8b 54 24 58 64 48 2b 14 25 28 00 00 00 [ 190.816829][ T5749] RSP: 002b:00007ffde95585e0 EFLAGS: 00000202 ORIG_RAX: 000000000000010e [ 190.820518][ T5749] RAX: ffffffffffffffda RBX: 00007ffde9558710 RCX: 00007fc38bb85adc [ 190.824010][ T5749] RDX: 0000000000000000 RSI: 00007ffde9558710 RDI: 000000000000002a [ 190.827555][ T5749] RBP: 00007ffde9558950 R08: 00007ffde9558610 R09: 00007ffde9558620 [ 190.831211][ T5749] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffde95589b0 [ 190.834677][ T5749] R13: 0000000000000000 R14: 00007ffde9558b60 R15: 00007ffde95587a0 [ 190.838191][ T5749] [ 190.839901][ T5749] Kernel Offset: disabled [ 190.841871][ T5749] Rebooting in 86400 seconds..