Warning: Permanently added '[localhost]:3562' (ED25519) to the list of known hosts. 2026/01/27 08:45:46 parsed 1 programs [ 143.104656][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.108937][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.557682][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 156.447032][ T5610] chnl_net:caif_netlink_parms(): no params data found [ 156.905290][ T4667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.910783][ T4667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.915459][ T4667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.919518][ T4667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.929024][ T4667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.319821][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.330629][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.351840][ T5610] bridge_slave_0: entered allmulticast mode [ 157.381392][ T5610] bridge_slave_0: entered promiscuous mode [ 157.416291][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.419691][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.454474][ T5610] bridge_slave_1: entered allmulticast mode [ 157.474693][ T5610] bridge_slave_1: entered promiscuous mode [ 158.098098][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.194117][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.793751][ T5610] team0: Port device team_slave_0 added [ 158.839265][ T5610] team0: Port device team_slave_1 added [ 159.021672][ T5333] Bluetooth: hci0: command tx timeout [ 159.116604][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.119900][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.181724][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.223183][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.226277][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.303108][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.525790][ T5610] hsr_slave_0: entered promiscuous mode [ 159.542246][ T5610] hsr_slave_1: entered promiscuous mode [ 159.614048][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.623624][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.026820][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.030286][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.363400][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.399714][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.426869][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.451340][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 160.682682][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.730473][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.792516][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.795654][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.800373][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.803579][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.101798][ T5333] Bluetooth: hci0: command tx timeout [ 161.222258][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.295367][ T5610] veth0_vlan: entered promiscuous mode [ 161.321335][ T5610] veth1_vlan: entered promiscuous mode [ 161.383683][ T5610] veth0_macvtap: entered promiscuous mode [ 161.405249][ T5610] veth1_macvtap: entered promiscuous mode [ 161.426875][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.455502][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.483366][ T1043] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.486957][ T1043] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.493299][ T1043] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.496878][ T1043] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/27 08:46:09 executed programs: 0 [ 163.116449][ T46] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.169245][ T5717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.173407][ T5717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.177224][ T5717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.182333][ T5717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.186832][ T5717] Bluetooth: hci0: command tx timeout [ 163.190038][ T5717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.193965][ T5717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.197707][ T5717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.200867][ T5717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.204672][ T5717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.208665][ T5717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.213089][ T5718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.217446][ T5718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.220879][ T5717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.225494][ T5718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.230699][ T4667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.243177][ T5717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.246441][ T5717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.249791][ T5717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.270481][ T46] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.307602][ T5720] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.315594][ T5720] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.319584][ T5720] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.339531][ T5720] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.357976][ T5720] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.433874][ T5717] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.445947][ T5717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.450016][ T5717] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.453943][ T5717] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.457544][ T5717] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 164.676534][ T1135] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.836434][ T1135] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.984425][ T1135] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.100456][ T1135] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.119220][ T5706] chnl_net:caif_netlink_parms(): no params data found [ 165.262407][ T5720] Bluetooth: hci2: command tx timeout [ 165.341725][ T5720] Bluetooth: hci1: command tx timeout [ 165.344493][ T5720] Bluetooth: hci3: command tx timeout [ 165.347166][ T5720] Bluetooth: hci4: command tx timeout [ 165.502023][ T5717] Bluetooth: hci5: command tx timeout [ 165.506561][ T1135] bridge_slave_1: left allmulticast mode [ 165.509195][ T1135] bridge_slave_1: left promiscuous mode [ 165.522503][ T1135] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.533058][ T1135] bridge_slave_0: left allmulticast mode [ 165.535650][ T1135] bridge_slave_0: left promiscuous mode [ 165.538269][ T1135] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.582578][ T5717] Bluetooth: hci6: command tx timeout [ 166.011746][ T1135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.017119][ T1135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.022494][ T1135] bond0 (unregistering): Released all slaves [ 166.327694][ T5706] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.330826][ T5706] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.351386][ T5706] bridge_slave_0: entered allmulticast mode [ 166.373886][ T5706] bridge_slave_0: entered promiscuous mode [ 166.385732][ T5706] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.403324][ T5706] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.408308][ T5706] bridge_slave_1: entered allmulticast mode [ 166.441129][ T5706] bridge_slave_1: entered promiscuous mode [ 166.894457][ T5707] chnl_net:caif_netlink_parms(): no params data found [ 166.950119][ T5706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.010529][ T1135] hsr_slave_0: left promiscuous mode [ 167.022375][ T1135] hsr_slave_1: left promiscuous mode [ 167.027310][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.030608][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.042977][ T1135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.046326][ T1135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.059184][ T1135] veth1_macvtap: left promiscuous mode [ 167.063523][ T1135] veth0_macvtap: left promiscuous mode [ 167.066367][ T1135] veth1_vlan: left promiscuous mode [ 167.068916][ T1135] veth0_vlan: left promiscuous mode [ 167.342309][ T5717] Bluetooth: hci2: command tx timeout [ 167.394561][ T1135] team0 (unregistering): Port device team_slave_1 removed [ 167.416078][ T1135] team0 (unregistering): Port device team_slave_0 removed [ 167.426229][ T5717] Bluetooth: hci4: command tx timeout [ 167.428604][ T5717] Bluetooth: hci3: command tx timeout [ 167.430811][ T5717] Bluetooth: hci1: command tx timeout [ 167.585939][ T5720] Bluetooth: hci5: command tx timeout [ 167.661983][ T5720] Bluetooth: hci6: command tx timeout [ 167.705014][ T5706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.786099][ T5719] chnl_net:caif_netlink_parms(): no params data found [ 167.817236][ T5709] chnl_net:caif_netlink_parms(): no params data found [ 167.973625][ T5706] team0: Port device team_slave_0 added [ 167.997409][ T5710] chnl_net:caif_netlink_parms(): no params data found [ 168.073806][ T5706] team0: Port device team_slave_1 added [ 168.109375][ T5707] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.122078][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.125297][ T5707] bridge_slave_0: entered allmulticast mode [ 168.138262][ T5707] bridge_slave_0: entered promiscuous mode [ 168.156358][ T5727] chnl_net:caif_netlink_parms(): no params data found [ 168.222335][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.225446][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.252445][ T5706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.270729][ T5707] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.287933][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.292273][ T5707] bridge_slave_1: entered allmulticast mode [ 168.307832][ T5707] bridge_slave_1: entered promiscuous mode [ 168.363517][ T5706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.366714][ T5706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.407583][ T5706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.510784][ T5707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.556412][ T5707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.588743][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.594440][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.597528][ T5709] bridge_slave_0: entered allmulticast mode [ 168.601168][ T5709] bridge_slave_0: entered promiscuous mode [ 168.605988][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.609084][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.612888][ T5709] bridge_slave_1: entered allmulticast mode [ 168.616661][ T5709] bridge_slave_1: entered promiscuous mode [ 168.624581][ T5706] hsr_slave_0: entered promiscuous mode [ 168.628051][ T5706] hsr_slave_1: entered promiscuous mode [ 168.653490][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.656688][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.659905][ T5719] bridge_slave_0: entered allmulticast mode [ 168.664976][ T5719] bridge_slave_0: entered promiscuous mode [ 168.701422][ T5710] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.706565][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.710025][ T5710] bridge_slave_0: entered allmulticast mode [ 168.714471][ T5710] bridge_slave_0: entered promiscuous mode [ 168.718413][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.722875][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.726576][ T5719] bridge_slave_1: entered allmulticast mode [ 168.731206][ T5719] bridge_slave_1: entered promiscuous mode [ 168.773928][ T5707] team0: Port device team_slave_0 added [ 168.784922][ T5710] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.787994][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.803409][ T5710] bridge_slave_1: entered allmulticast mode [ 168.807230][ T5710] bridge_slave_1: entered promiscuous mode [ 168.857250][ T5709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.894081][ T5707] team0: Port device team_slave_1 added [ 168.907881][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.917666][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.921081][ T5727] bridge_slave_0: entered allmulticast mode [ 168.931663][ T5727] bridge_slave_0: entered promiscuous mode [ 168.964802][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.989263][ T5709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.062775][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.065914][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.069237][ T5727] bridge_slave_1: entered allmulticast mode [ 169.091814][ T5727] bridge_slave_1: entered promiscuous mode [ 169.115959][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.133122][ T5710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.174609][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.177621][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.193718][ T5707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.216603][ T5710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.230193][ T5709] team0: Port device team_slave_0 added [ 169.238640][ T5707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.244254][ T5707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.255969][ T5707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.267081][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.280681][ T5719] team0: Port device team_slave_0 added [ 169.293943][ T5709] team0: Port device team_slave_1 added [ 169.306519][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.319970][ T5719] team0: Port device team_slave_1 added [ 169.359659][ T5710] team0: Port device team_slave_0 added [ 169.410642][ T5710] team0: Port device team_slave_1 added [ 169.421932][ T5720] Bluetooth: hci2: command tx timeout [ 169.432168][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.435284][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.448033][ T5709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.464501][ T5707] hsr_slave_0: entered promiscuous mode [ 169.467790][ T5707] hsr_slave_1: entered promiscuous mode [ 169.470912][ T5707] debugfs: 'hsr0' already exists in 'hsr' [ 169.474077][ T5707] Cannot create hsr debugfs directory [ 169.478640][ T5727] team0: Port device team_slave_0 added [ 169.492508][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.495653][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.507405][ T5720] Bluetooth: hci1: command tx timeout [ 169.509970][ T5720] Bluetooth: hci3: command tx timeout [ 169.513291][ T5717] Bluetooth: hci4: command tx timeout [ 169.516266][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.523823][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.526775][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.538236][ T5709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.556102][ T5727] team0: Port device team_slave_1 added [ 169.570294][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.574559][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.586213][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.648289][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.661650][ T5720] Bluetooth: hci5: command tx timeout [ 169.664658][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.693462][ T5710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.743955][ T5720] Bluetooth: hci6: command tx timeout [ 169.813941][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.817166][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.843902][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.853262][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.862868][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.883076][ T5710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.979852][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.985150][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.015078][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.089841][ T5709] hsr_slave_0: entered promiscuous mode [ 170.093848][ T5709] hsr_slave_1: entered promiscuous mode [ 170.097101][ T5709] debugfs: 'hsr0' already exists in 'hsr' [ 170.099741][ T5709] Cannot create hsr debugfs directory [ 170.136676][ T5719] hsr_slave_0: entered promiscuous mode [ 170.140142][ T5719] hsr_slave_1: entered promiscuous mode [ 170.147789][ T5719] debugfs: 'hsr0' already exists in 'hsr' [ 170.150326][ T5719] Cannot create hsr debugfs directory [ 170.238841][ T5710] hsr_slave_0: entered promiscuous mode [ 170.242738][ T5710] hsr_slave_1: entered promiscuous mode [ 170.245840][ T5710] debugfs: 'hsr0' already exists in 'hsr' [ 170.248488][ T5710] Cannot create hsr debugfs directory [ 170.374898][ T5727] hsr_slave_0: entered promiscuous mode [ 170.383037][ T5727] hsr_slave_1: entered promiscuous mode [ 170.415128][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 170.417838][ T5727] Cannot create hsr debugfs directory [ 171.002588][ T5707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.013650][ T5707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.085464][ T5707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.098613][ T5707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.250422][ T5706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.383582][ T5706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.408375][ T5706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.455680][ T5706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.502671][ T5720] Bluetooth: hci2: command tx timeout [ 171.583018][ T5720] Bluetooth: hci3: command tx timeout [ 171.585545][ T5720] Bluetooth: hci4: command tx timeout [ 171.587845][ T5720] Bluetooth: hci1: command tx timeout [ 171.646109][ T5707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.707935][ T5707] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.742298][ T5721] Bluetooth: hci5: command tx timeout [ 171.805292][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.808675][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.822580][ T5721] Bluetooth: hci6: command tx timeout [ 171.826924][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.830209][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.907956][ T5706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.972733][ T5709] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 171.980388][ T5709] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.005557][ T5706] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.013990][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.017334][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.059704][ T5709] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.074508][ T5709] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.114433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.117509][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.290704][ T5706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.314615][ T5706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.407208][ T5719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.425079][ T5719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.579444][ T5719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.654004][ T5719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.896533][ T5707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.060855][ T5706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.136365][ T5707] veth0_vlan: entered promiscuous mode [ 173.206195][ T5707] veth1_vlan: entered promiscuous mode [ 173.230215][ T5709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.243571][ T5710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.256910][ T5710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.334630][ T5710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.390932][ T5709] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.415024][ T5710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.463597][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.535377][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.540432][ T5727] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 173.557873][ T5707] veth0_macvtap: entered promiscuous mode [ 173.575052][ T950] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.578366][ T950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.602698][ T5706] veth0_vlan: entered promiscuous mode [ 173.628609][ T5727] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.666814][ T5707] veth1_macvtap: entered promiscuous mode [ 173.673503][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.676736][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.696185][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.699284][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.714017][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.717228][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.776011][ T5727] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.793507][ T5727] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.832880][ T5706] veth1_vlan: entered promiscuous mode [ 173.849339][ T5709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.875819][ T5709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.911346][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.996069][ T5707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.094539][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.101977][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.105757][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.109571][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.276438][ T5719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.324256][ T5706] veth0_macvtap: entered promiscuous mode [ 174.426991][ T5706] veth1_macvtap: entered promiscuous mode [ 174.479080][ T5710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.540273][ T5709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.635692][ T5710] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.703630][ T950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.707081][ T950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.755582][ T950] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.758615][ T950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.773536][ T950] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.776811][ T950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.786653][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.828762][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.930896][ T5706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.951404][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.049611][ T5709] veth0_vlan: entered promiscuous mode [ 175.066055][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.069796][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.076038][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.080005][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.098346][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.105301][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.167421][ T950] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.171208][ T950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.216605][ T950] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.219884][ T950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.249271][ T5709] veth1_vlan: entered promiscuous mode [ 175.280253][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/27 08:46:22 executed programs: 12 [ 175.861245][ T5709] veth0_macvtap: entered promiscuous mode [ 176.609483][ T5709] veth1_macvtap: entered promiscuous mode [ 177.079912][ T950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.119438][ T950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.436663][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.521296][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.932622][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.344264][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.404472][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.407804][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.747304][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.778680][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.148255][ T5710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.946596][ T5719] veth0_vlan: entered promiscuous mode [ 180.182329][ T5978] loop0: detected capacity change from 0 to 32768 [ 180.252371][ T5978] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 180.255742][ T5978] gfs2: fsid=.: Now mounting FS (format 1801)... [ 180.279688][ T5978] syz.0.16: attempt to access beyond end of device [ 180.279688][ T5978] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 180.286670][ T5978] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 180.293005][ T5978] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 180.296933][ T5978] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5978 [syz.0.16] init_journal+0x16d9/0x2260 [ 180.301837][ T5978] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 180.305373][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 180.305390][ T5978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 180.305398][ T5978] Call Trace: [ 180.305405][ T5978] [ 180.305430][ T5978] dump_stack_lvl+0xe8/0x150 [ 180.305519][ T5978] gfs2_withdraw+0xc3/0x1b0 [ 180.305538][ T5978] gfs2_jdesc_check+0x17d/0x2f0 [ 180.305554][ T5978] check_journal_clean+0x18d/0x360 [ 180.305573][ T5978] ? __pfx_check_journal_clean+0x10/0x10 [ 180.305591][ T5978] ? init_journal+0x16d9/0x2260 [ 180.305613][ T5978] ? do_raw_spin_unlock+0x4d/0x210 [ 180.305679][ T5978] ? _raw_spin_unlock+0x28/0x50 [ 180.305836][ T5978] ? gfs2_jdesc_find+0xab/0xc0 [ 180.305850][ T5978] init_journal+0x16d9/0x2260 [ 180.305873][ T5978] ? init_inodes+0xdb/0x320 [ 180.305892][ T5978] ? __pfx_init_journal+0x10/0x10 [ 180.305908][ T5978] ? vsnprintf+0xdf1/0xee0 [ 180.305930][ T5978] ? snprintf+0xe8/0x140 [ 180.305945][ T5978] ? init_inodes+0xdb/0x320 [ 180.305961][ T5978] ? __pfx_snprintf+0x10/0x10 [ 180.305976][ T5978] ? gfs2_glock_nq_num+0x13d/0x170 [ 180.305990][ T5978] init_inodes+0xdb/0x320 [ 180.306009][ T5978] gfs2_fill_super+0x1a38/0x21d0 [ 180.306036][ T5978] ? __pfx_gfs2_fill_super+0x10/0x10 [ 180.306053][ T5978] ? init_locking+0xb8/0x210 [ 180.306068][ T5978] ? sb_set_blocksize+0x155/0x240 [ 180.306130][ T5978] ? setup_bdev_super+0x4c1/0x5b0 [ 180.306188][ T5978] get_tree_bdev_flags+0x431/0x4f0 [ 180.306203][ T5978] ? __pfx_gfs2_fill_super+0x10/0x10 [ 180.306217][ T5978] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 180.306229][ T5978] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 180.306242][ T5978] gfs2_get_tree+0x51/0x1e0 [ 180.306253][ T5978] vfs_get_tree+0x92/0x2a0 [ 180.306263][ T5978] do_new_mount+0x329/0xa50 [ 180.306273][ T5978] ? apparmor_capable+0x137/0x1a0 [ 180.306285][ T5978] ? __pfx_do_new_mount+0x10/0x10 [ 180.306295][ T5978] ? ns_capable+0x89/0xe0 [ 180.306308][ T5978] __se_sys_mount+0x31d/0x420 [ 180.306321][ T5978] ? __pfx___se_sys_mount+0x10/0x10 [ 180.306333][ T5978] ? __x64_sys_mount+0x20/0xc0 [ 180.306344][ T5978] do_syscall_64+0xe2/0xf80 [ 180.306351][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.306373][ T5978] ? trace_irq_disable+0x37/0x100 [ 180.306381][ T5978] ? clear_bhb_loop+0x60/0xb0 [ 180.306389][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.306396][ T5978] RIP: 0033:0x7f6748f9b30a [ 180.306406][ T5978] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.306429][ T5978] RSP: 002b:00007f6749e62e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.306438][ T5978] RAX: ffffffffffffffda RBX: 00007f6749e62ee0 RCX: 00007f6748f9b30a [ 180.306443][ T5978] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f6749e62ea0 [ 180.306448][ T5978] RBP: 0000200000000000 R08: 00007f6749e62ee0 R09: 0000000000208c1b [ 180.306453][ T5978] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 180.306457][ T5978] R13: 00007f6749e62ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 180.306474][ T5978] [ 180.306479][ T5978] gfs2: fsid=..s: Error checking journal for spectator mount. [ 180.843563][ T5710] veth0_vlan: entered promiscuous mode 2026/01/27 08:46:28 executed programs: 26 [ 181.244569][ T5719] veth1_vlan: entered promiscuous mode [ 181.899868][ T5710] veth1_vlan: entered promiscuous mode [ 181.935023][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.269156][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.578938][ T5995] loop0: detected capacity change from 0 to 32768 [ 182.937697][ T5995] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 182.941444][ T5995] gfs2: fsid=.: Now mounting FS (format 1801)... [ 182.957933][ T5995] syz.0.37: attempt to access beyond end of device [ 182.957933][ T5995] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 182.964964][ T5995] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 182.970658][ T5995] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 182.974358][ T5995] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5995 [syz.0.37] init_journal+0x16d9/0x2260 [ 182.978763][ T5995] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 182.982308][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 182.982324][ T5995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 182.982331][ T5995] Call Trace: [ 182.982339][ T5995] [ 182.982367][ T5995] dump_stack_lvl+0xe8/0x150 [ 182.982453][ T5995] gfs2_withdraw+0xc3/0x1b0 [ 182.982471][ T5995] gfs2_jdesc_check+0x17d/0x2f0 [ 182.982487][ T5995] check_journal_clean+0x18d/0x360 [ 182.982507][ T5995] ? __pfx_check_journal_clean+0x10/0x10 [ 182.982530][ T5995] ? init_journal+0x16d9/0x2260 [ 182.982564][ T5995] ? do_raw_spin_unlock+0x4d/0x210 [ 182.982642][ T5995] ? _raw_spin_unlock+0x28/0x50 [ 182.982763][ T5995] ? gfs2_jdesc_find+0xab/0xc0 [ 182.982776][ T5995] init_journal+0x16d9/0x2260 [ 182.982802][ T5995] ? init_inodes+0xdb/0x320 [ 182.982821][ T5995] ? __pfx_init_journal+0x10/0x10 [ 182.982838][ T5995] ? vsnprintf+0xdf1/0xee0 [ 182.982859][ T5995] ? snprintf+0xe8/0x140 [ 182.982876][ T5995] ? init_inodes+0xdb/0x320 [ 182.982894][ T5995] ? __pfx_snprintf+0x10/0x10 [ 182.982910][ T5995] ? gfs2_glock_nq_num+0x13d/0x170 [ 182.982925][ T5995] init_inodes+0xdb/0x320 [ 182.982945][ T5995] gfs2_fill_super+0x1a38/0x21d0 [ 182.982972][ T5995] ? __pfx_gfs2_fill_super+0x10/0x10 [ 182.982992][ T5995] ? init_locking+0xb8/0x210 [ 182.983008][ T5995] ? sb_set_blocksize+0x155/0x240 [ 182.983054][ T5995] ? setup_bdev_super+0x4c1/0x5b0 [ 182.983128][ T5995] get_tree_bdev_flags+0x431/0x4f0 [ 182.983144][ T5995] ? __pfx_gfs2_fill_super+0x10/0x10 [ 182.983160][ T5995] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 182.983173][ T5995] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 182.983192][ T5995] gfs2_get_tree+0x51/0x1e0 [ 182.983210][ T5995] vfs_get_tree+0x92/0x2a0 [ 182.983225][ T5995] do_new_mount+0x329/0xa50 [ 182.983241][ T5995] ? apparmor_capable+0x137/0x1a0 [ 182.983260][ T5995] ? __pfx_do_new_mount+0x10/0x10 [ 182.983276][ T5995] ? ns_capable+0x89/0xe0 [ 182.983296][ T5995] __se_sys_mount+0x31d/0x420 [ 182.983313][ T5995] ? __pfx___se_sys_mount+0x10/0x10 [ 182.983331][ T5995] ? __x64_sys_mount+0x20/0xc0 [ 182.983348][ T5995] do_syscall_64+0xe2/0xf80 [ 182.983360][ T5995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.983389][ T5995] ? trace_irq_disable+0x37/0x100 [ 182.983402][ T5995] ? clear_bhb_loop+0x60/0xb0 [ 182.983415][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.983426][ T5995] RIP: 0033:0x7f6748f9b30a [ 182.983438][ T5995] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.983461][ T5995] RSP: 002b:00007f6749e62e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 182.983474][ T5995] RAX: ffffffffffffffda RBX: 00007f6749e62ee0 RCX: 00007f6748f9b30a [ 182.983482][ T5995] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f6749e62ea0 [ 182.983489][ T5995] RBP: 0000200000000000 R08: 00007f6749e62ee0 R09: 0000000000208c1b [ 182.983497][ T5995] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 182.983504][ T5995] R13: 00007f6749e62ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 182.983520][ T5995] [ 182.983526][ T5995] gfs2: fsid=..s: Error checking journal for spectator mount. [ 183.844559][ T6003] loop0: detected capacity change from 0 to 32768 [ 184.079686][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.099799][ T5719] veth0_macvtap: entered promiscuous mode [ 184.180046][ T5710] veth0_macvtap: entered promiscuous mode [ 184.185570][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.188880][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.213865][ T5719] veth1_macvtap: entered promiscuous mode [ 184.268897][ T5710] veth1_macvtap: entered promiscuous mode [ 184.391224][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.435405][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.833296][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.862565][ T6003] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 184.865790][ T6003] gfs2: fsid=.: Now mounting FS (format 1801)... [ 184.879780][ T6003] syz.0.40: attempt to access beyond end of device [ 184.879780][ T6003] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 184.886661][ T6003] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 184.892714][ T6003] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 184.896308][ T6003] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6003 [syz.0.40] init_journal+0x16d9/0x2260 [ 184.900637][ T6003] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 184.904273][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT(full) [ 184.904290][ T6003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 184.904297][ T6003] Call Trace: [ 184.904301][ T6003] [ 184.904324][ T6003] dump_stack_lvl+0xe8/0x150 [ 184.904414][ T6003] gfs2_withdraw+0xc3/0x1b0 [ 184.904433][ T6003] gfs2_jdesc_check+0x17d/0x2f0 [ 184.904448][ T6003] check_journal_clean+0x18d/0x360 [ 184.904463][ T6003] ? __pfx_check_journal_clean+0x10/0x10 [ 184.904480][ T6003] ? init_journal+0x16d9/0x2260 [ 184.904501][ T6003] ? do_raw_spin_unlock+0x4d/0x210 [ 184.904542][ T6003] ? _raw_spin_unlock+0x28/0x50 [ 184.904633][ T6003] ? gfs2_jdesc_find+0xab/0xc0 [ 184.904645][ T6003] init_journal+0x16d9/0x2260 [ 184.904668][ T6003] ? init_inodes+0xdb/0x320 [ 184.904686][ T6003] ? __pfx_init_journal+0x10/0x10 [ 184.904701][ T6003] ? vsnprintf+0xdf1/0xee0 [ 184.904726][ T6003] ? snprintf+0xe8/0x140 [ 184.904740][ T6003] ? init_inodes+0xdb/0x320 [ 184.904755][ T6003] ? __pfx_snprintf+0x10/0x10 [ 184.904770][ T6003] ? gfs2_glock_nq_num+0x13d/0x170 [ 184.904783][ T6003] init_inodes+0xdb/0x320 [ 184.904799][ T6003] gfs2_fill_super+0x1a38/0x21d0 [ 184.904824][ T6003] ? __pfx_gfs2_fill_super+0x10/0x10 [ 184.904841][ T6003] ? init_locking+0xb8/0x210 [ 184.904856][ T6003] ? sb_set_blocksize+0x155/0x240 [ 184.904894][ T6003] ? setup_bdev_super+0x4c1/0x5b0 [ 184.904963][ T6003] get_tree_bdev_flags+0x431/0x4f0 [ 184.904977][ T6003] ? __pfx_gfs2_fill_super+0x10/0x10 [ 184.904993][ T6003] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 184.905006][ T6003] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 184.905024][ T6003] gfs2_get_tree+0x51/0x1e0 [ 184.905042][ T6003] vfs_get_tree+0x92/0x2a0 [ 184.905058][ T6003] do_new_mount+0x329/0xa50 [ 184.905073][ T6003] ? apparmor_capable+0x137/0x1a0 [ 184.905099][ T6003] ? __pfx_do_new_mount+0x10/0x10 [ 184.905114][ T6003] ? ns_capable+0x89/0xe0 [ 184.905134][ T6003] __se_sys_mount+0x31d/0x420 [ 184.905154][ T6003] ? __pfx___se_sys_mount+0x10/0x10 [ 184.905172][ T6003] ? __x64_sys_mount+0x20/0xc0 [ 184.905189][ T6003] do_syscall_64+0xe2/0xf80 [ 184.905200][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.905233][ T6003] ? trace_irq_disable+0x37/0x100 [ 184.905245][ T6003] ? clear_bhb_loop+0x60/0xb0 [ 184.905258][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.905269][ T6003] RIP: 0033:0x7f6748f9b30a [ 184.905280][ T6003] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.905305][ T6003] RSP: 002b:00007f6749e62e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 184.905318][ T6003] RAX: ffffffffffffffda RBX: 00007f6749e62ee0 RCX: 00007f6748f9b30a [ 184.905326][ T6003] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f6749e62ea0 [ 184.905333][ T6003] RBP: 0000200000000000 R08: 00007f6749e62ee0 R09: 0000000000208c1b [ 184.905340][ T6003] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 184.905347][ T6003] R13: 00007f6749e62ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 184.905365][ T6003] [ 184.905370][ T6003] gfs2: fsid=..s: Error checking journal for spectator mount. [ 185.491909][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.497419][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.886540][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.114854][ T6023] loop0: detected capacity change from 0 to 32768 [ 186.432125][ T6023] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 186.435216][ T6023] gfs2: fsid=.: Now mounting FS (format 1801)... [ 186.459010][ T6023] syz.0.43: attempt to access beyond end of device [ 186.459010][ T6023] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 186.467668][ T6023] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 186.473838][ T6023] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 186.477537][ T6023] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6023 [syz.0.43] init_journal+0x16d9/0x2260 [ 186.483940][ T6023] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 186.488418][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.0.43 Not tainted syzkaller #0 PREEMPT(full) [ 186.488437][ T6023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.488444][ T6023] Call Trace: [ 186.488451][ T6023] [ 186.488457][ T6023] dump_stack_lvl+0xe8/0x150 [ 186.488476][ T6023] gfs2_withdraw+0xc3/0x1b0 [ 186.488495][ T6023] gfs2_jdesc_check+0x17d/0x2f0 [ 186.488511][ T6023] check_journal_clean+0x18d/0x360 [ 186.488549][ T6023] ? __pfx_check_journal_clean+0x10/0x10 [ 186.488567][ T6023] ? init_journal+0x16d9/0x2260 [ 186.488589][ T6023] ? do_raw_spin_unlock+0x4d/0x210 [ 186.488606][ T6023] ? _raw_spin_unlock+0x28/0x50 [ 186.488624][ T6023] ? gfs2_jdesc_find+0xab/0xc0 [ 186.488638][ T6023] init_journal+0x16d9/0x2260 [ 186.488661][ T6023] ? init_inodes+0xdb/0x320 [ 186.488679][ T6023] ? __pfx_init_journal+0x10/0x10 [ 186.488695][ T6023] ? vsnprintf+0xdf1/0xee0 [ 186.488716][ T6023] ? snprintf+0xe8/0x140 [ 186.488731][ T6023] ? init_inodes+0xdb/0x320 [ 186.488767][ T6023] ? __pfx_snprintf+0x10/0x10 [ 186.488781][ T6023] ? gfs2_glock_nq_num+0x13d/0x170 [ 186.488796][ T6023] init_inodes+0xdb/0x320 [ 186.488814][ T6023] gfs2_fill_super+0x1a38/0x21d0 [ 186.488840][ T6023] ? __pfx_gfs2_fill_super+0x10/0x10 [ 186.488858][ T6023] ? init_locking+0xb8/0x210 [ 186.488873][ T6023] ? sb_set_blocksize+0x155/0x240 [ 186.488892][ T6023] ? setup_bdev_super+0x4c1/0x5b0 [ 186.488910][ T6023] get_tree_bdev_flags+0x431/0x4f0 [ 186.488925][ T6023] ? __pfx_gfs2_fill_super+0x10/0x10 [ 186.488941][ T6023] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 186.488954][ T6023] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 186.488973][ T6023] gfs2_get_tree+0x51/0x1e0 [ 186.488990][ T6023] vfs_get_tree+0x92/0x2a0 [ 186.489007][ T6023] do_new_mount+0x329/0xa50 [ 186.489022][ T6023] ? apparmor_capable+0x137/0x1a0 [ 186.489040][ T6023] ? __pfx_do_new_mount+0x10/0x10 [ 186.489056][ T6023] ? ns_capable+0x89/0xe0 [ 186.489075][ T6023] __se_sys_mount+0x31d/0x420 [ 186.489095][ T6023] ? __pfx___se_sys_mount+0x10/0x10 [ 186.489114][ T6023] ? __x64_sys_mount+0x20/0xc0 [ 186.489132][ T6023] do_syscall_64+0xe2/0xf80 [ 186.489145][ T6023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.489156][ T6023] ? trace_irq_disable+0x37/0x100 [ 186.489168][ T6023] ? clear_bhb_loop+0x60/0xb0 [ 186.489181][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.489193][ T6023] RIP: 0033:0x7f6748f9b30a [ 186.489206][ T6023] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.489216][ T6023] RSP: 002b:00007f6749e62e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 186.489229][ T6023] RAX: ffffffffffffffda RBX: 00007f6749e62ee0 RCX: 00007f6748f9b30a [ 186.489237][ T6023] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f6749e62ea0 [ 186.489244][ T6023] RBP: 0000200000000000 R08: 00007f6749e62ee0 R09: 0000000000208c1b [ 186.489251][ T6023] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 186.489258][ T6023] R13: 00007f6749e62ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 186.489275][ T6023] [ 186.489280][ T6023] gfs2: fsid=..s: Error checking journal for spectator mount. [ 187.064426][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.084806][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/27 08:46:34 executed programs: 36 [ 187.997317][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.011967][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.093818][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.153397][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.056735][ T5734] ================================================================== [ 189.060476][ T5734] BUG: KASAN: slab-use-after-free in folio_evictable+0xe4/0x250 [ 189.063971][ T5734] Read of size 8 at addr ffff888049e013a0 by task udevd/5734 [ 189.068159][ T5734] [ 189.069340][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 189.069356][ T5734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.069363][ T5734] Call Trace: [ 189.069371][ T5734] [ 189.069376][ T5734] dump_stack_lvl+0xe8/0x150 [ 189.069395][ T5734] print_report+0xba/0x230 [ 189.069408][ T5734] ? folio_evictable+0xe4/0x250 [ 189.069422][ T5734] kasan_report+0x117/0x150 [ 189.069433][ T5734] ? folio_evictable+0xe4/0x250 [ 189.069447][ T5734] kasan_check_range+0x264/0x2c0 [ 189.069456][ T5734] ? folio_evictable+0x1c/0x250 [ 189.069469][ T5734] folio_evictable+0xe4/0x250 [ 189.069482][ T5734] evict_folios+0x1b0a/0x5880 [ 189.069500][ T5734] ? __pfx_evict_folios+0x10/0x10 [ 189.069515][ T5734] ? list_lru_count_one+0x264/0x2c0 [ 189.069529][ T5734] ? __lock_acquire+0x6b5/0x2cf0 [ 189.069546][ T5734] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 189.069563][ T5734] ? get_swappiness+0x350/0x3c0 [ 189.069577][ T5734] try_to_shrink_lruvec+0x88b/0xb20 [ 189.069596][ T5734] shrink_one+0x25c/0x710 [ 189.069607][ T5734] ? shrink_node+0x2d4d/0x35f0 [ 189.069617][ T5734] shrink_node+0x2f8b/0x35f0 [ 189.069636][ T5734] ? shrink_node+0x2d4d/0x35f0 [ 189.069646][ T5734] ? unwind_next_frame+0xa5/0x23c0 [ 189.069659][ T5734] ? lock_acquire+0x106/0x330 [ 189.069674][ T5734] ? unwind_next_frame+0xa5/0x23c0 [ 189.069685][ T5734] ? is_bpf_text_address+0x26/0x2b0 [ 189.069697][ T5734] ? lock_acquire+0x106/0x330 [ 189.069712][ T5734] ? __pfx_shrink_node+0x10/0x10 [ 189.069722][ T5734] ? is_bpf_text_address+0x292/0x2b0 [ 189.069733][ T5734] ? is_bpf_text_address+0x26/0x2b0 [ 189.069745][ T5734] ? vmpressure_prio+0x33/0x140 [ 189.069758][ T5734] do_try_to_free_pages+0x69e/0x1a40 [ 189.069771][ T5734] ? __lock_acquire+0x6b5/0x2cf0 [ 189.069789][ T5734] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 189.069801][ T5734] ? allow_direct_reclaim+0x65/0x570 [ 189.069813][ T5734] try_to_free_pages+0x923/0xe40 [ 189.069825][ T5734] ? __pfx_try_to_free_pages+0x10/0x10 [ 189.069838][ T5734] ? psi_group_change+0xab8/0x1050 [ 189.069855][ T5734] ? fs_reclaim_acquire+0x7c/0x100 [ 189.069870][ T5734] __alloc_pages_direct_reclaim+0x148/0x310 [ 189.069885][ T5734] ? __pfx___alloc_pages_direct_reclaim+0x10/0x10 [ 189.069900][ T5734] ? wake_all_kswapds+0x167/0x280 [ 189.069913][ T5734] __alloc_pages_slowpath+0x619/0xd40 [ 189.069927][ T5734] __alloc_frozen_pages_noprof+0x322/0x380 [ 189.069938][ T5734] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.069948][ T5734] ? __pfx_policy_nodemask+0x10/0x10 [ 189.069957][ T5734] ? __anon_vma_prepare+0x21c/0x4a0 [ 189.069973][ T5734] alloc_pages_mpol+0x232/0x4a0 [ 189.069985][ T5734] vma_alloc_folio_noprof+0xea/0x210 [ 189.069995][ T5734] ? up_write+0x1ab/0x410 [ 189.070005][ T5734] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 189.070016][ T5734] ? __anon_vma_prepare+0x3eb/0x4a0 [ 189.070031][ T5734] do_pte_missing+0x15a4/0x37a0 [ 189.070049][ T5734] ? handle_mm_fault+0xee/0x32a0 [ 189.070062][ T5734] handle_mm_fault+0x1b8c/0x32a0 [ 189.070079][ T5734] ? handle_mm_fault+0xee/0x32a0 [ 189.070093][ T5734] ? __pfx_handle_mm_fault+0x10/0x10 [ 189.070108][ T5734] ? __lock_acquire+0x6b5/0x2cf0 [ 189.070123][ T5734] ? lock_mm_and_find_vma+0xa7/0x340 [ 189.070138][ T5734] do_user_addr_fault+0x75b/0x1360 [ 189.070158][ T5734] exc_page_fault+0x6a/0xc0 [ 189.070169][ T5734] asm_exc_page_fault+0x26/0x30 [ 189.070181][ T5734] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 189.070197][ T5734] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 3f 45 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 189.070207][ T5734] RSP: 0018:ffffc900036a77d8 EFLAGS: 00050206 [ 189.070218][ T5734] RAX: ffffffff849fe201 RBX: ffff888058e43000 RCX: 0000000000000200 [ 189.070227][ T5734] RDX: 0000000000000000 RSI: ffff888058e43000 RDI: 00007ff743dae000 [ 189.070234][ T5734] RBP: ffffc900036a7948 R08: ffff888058e431ff R09: 1ffff1100b1c863f [ 189.070268][ T5734] R10: dffffc0000000000 R11: ffffed100b1c8640 R12: 1ffff920006d4faf [ 189.070276][ T5734] R13: 00007ff743dae000 R14: ffffc900036a7d88 R15: 0000000000000200 [ 189.070286][ T5734] ? _copy_to_iter+0x161/0x17d0 [ 189.070301][ T5734] _copy_to_iter+0x255/0x17d0 [ 189.070316][ T5734] ? __pfx_filemap_get_pages+0x10/0x10 [ 189.070333][ T5734] ? __pfx__copy_to_iter+0x10/0x10 [ 189.070344][ T5734] ? folio_mark_accessed+0x276/0x8c0 [ 189.070356][ T5734] ? __pfx_folio_mark_accessed+0x10/0x10 [ 189.070366][ T5734] ? page_copy_sane+0x4e/0x270 [ 189.070378][ T5734] copy_page_to_iter+0x10c/0x1c0 [ 189.070391][ T5734] filemap_read+0x811/0x1230 [ 189.070406][ T5734] ? aa_file_perm+0x12d/0x1630 [ 189.070422][ T5734] ? __pfx_filemap_read+0x10/0x10 [ 189.070443][ T5734] ? down_read+0x272/0x2e0 [ 189.070454][ T5734] ? blkdev_read_iter+0x177/0x440 [ 189.070465][ T5734] blkdev_read_iter+0x30a/0x440 [ 189.070478][ T5734] vfs_read+0x582/0xa70 [ 189.070494][ T5734] ? __pfx_vfs_read+0x10/0x10 [ 189.070504][ T5734] ? vm_mmap_pgoff+0x373/0x4f0 [ 189.070521][ T5734] ksys_read+0x150/0x270 [ 189.070534][ T5734] ? __pfx_ksys_read+0x10/0x10 [ 189.070549][ T5734] do_syscall_64+0xe2/0xf80 [ 189.070559][ T5734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.070569][ T5734] ? clear_bhb_loop+0x60/0xb0 [ 189.070580][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.070591][ T5734] RIP: 0033:0x7ff7436a7407 [ 189.070602][ T5734] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 189.070611][ T5734] RSP: 002b:00007fff451714b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 189.070630][ T5734] RAX: ffffffffffffffda RBX: 00007ff743dca880 RCX: 00007ff7436a7407 [ 189.070637][ T5734] RDX: 0000000000000200 RSI: 00007ff743dae000 RDI: 0000000000000009 [ 189.070644][ T5734] RBP: 000055a800afb180 R08: 0000000000000000 R09: 0000000000000000 [ 189.070649][ T5734] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 189.070653][ T5734] R13: 0000000000004000 R14: 000055a800b06578 R15: 00007ff743ef139c [ 189.070660][ T5734] [ 189.070664][ T5734] [ 189.334218][ T5734] Allocated by task 6003: [ 189.336167][ T5734] kasan_save_track+0x3e/0x80 [ 189.338338][ T5734] __kasan_slab_alloc+0x6c/0x80 [ 189.340651][ T5734] kmem_cache_alloc_noprof+0x370/0x6e0 [ 189.343094][ T5734] gfs2_glock_get+0x27b/0xf40 [ 189.345305][ T5734] gfs2_inode_lookup+0x29f/0xc50 [ 189.347536][ T5734] gfs2_dir_search+0x168/0x220 [ 189.349760][ T5734] gfs2_lookupi+0x45b/0x640 [ 189.351887][ T5734] gfs2_lookup_meta+0xaf/0x180 [ 189.354065][ T5734] init_journal+0x1ce/0x2260 [ 189.356233][ T5734] init_inodes+0xdb/0x320 [ 189.358231][ T5734] gfs2_fill_super+0x1a38/0x21d0 [ 189.360528][ T5734] get_tree_bdev_flags+0x431/0x4f0 [ 189.362855][ T5734] gfs2_get_tree+0x51/0x1e0 [ 189.364932][ T5734] vfs_get_tree+0x92/0x2a0 [ 189.366946][ T5734] do_new_mount+0x329/0xa50 [ 189.369047][ T5734] __se_sys_mount+0x31d/0x420 [ 189.371208][ T5734] do_syscall_64+0xe2/0xf80 [ 189.373306][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.376019][ T5734] [ 189.377155][ T5734] Freed by task 15: [ 189.378999][ T5734] kasan_save_track+0x3e/0x80 [ 189.381183][ T5734] kasan_save_free_info+0x46/0x50 [ 189.383485][ T5734] __kasan_slab_free+0x5c/0x80 [ 189.385669][ T5734] kmem_cache_free+0x195/0x610 [ 189.387875][ T5734] rcu_core+0xc9e/0x1750 [ 189.389841][ T5734] handle_softirqs+0x22a/0x7c0 [ 189.392033][ T5734] run_ksoftirqd+0x36/0x60 [ 189.394059][ T5734] smpboot_thread_fn+0x541/0xa50 [ 189.396275][ T5734] kthread+0x726/0x8b0 [ 189.398111][ T5734] ret_from_fork+0x51b/0xa40 [ 189.400242][ T5734] ret_from_fork_asm+0x1a/0x30 [ 189.402446][ T5734] [ 189.403580][ T5734] Last potentially related work creation: [ 189.406146][ T5734] kasan_save_stack+0x3e/0x60 [ 189.408311][ T5734] kasan_record_aux_stack+0xbd/0xd0 [ 189.410679][ T5734] call_rcu+0xee/0x890 [ 189.412568][ T5734] gfs2_glock_free+0x3c/0xa0 [ 189.414657][ T5734] process_scheduled_works+0xaec/0x17a0 [ 189.417137][ T5734] worker_thread+0xda6/0x1360 [ 189.419290][ T5734] kthread+0x726/0x8b0 [ 189.421180][ T5734] ret_from_fork+0x51b/0xa40 [ 189.423248][ T5734] ret_from_fork_asm+0x1a/0x30 [ 189.425387][ T5734] [ 189.426488][ T5734] Second to last potentially related work creation: [ 189.429496][ T5734] kasan_save_stack+0x3e/0x60 [ 189.431646][ T5734] kasan_record_aux_stack+0xbd/0xd0 [ 189.433987][ T5734] insert_work+0x3d/0x330 [ 189.435962][ T5734] __queue_work+0xccf/0xf90 [ 189.437986][ T5734] queue_delayed_work_on+0x11a/0x1e0 [ 189.440369][ T5734] do_xmote+0x514/0x750 [ 189.442276][ T5734] glock_work_func+0x2a8/0x580 [ 189.444447][ T5734] process_scheduled_works+0xaec/0x17a0 [ 189.446893][ T5734] worker_thread+0xda6/0x1360 [ 189.449139][ T5734] kthread+0x726/0x8b0 [ 189.451001][ T5734] ret_from_fork+0x51b/0xa40 [ 189.453131][ T5734] ret_from_fork_asm+0x1a/0x30 [ 189.455322][ T5734] [ 189.456445][ T5734] The buggy address belongs to the object at ffff888049e00fd8 [ 189.456445][ T5734] which belongs to the cache gfs2_glock(aspace) of size 1224 [ 189.463012][ T5734] The buggy address is located 968 bytes inside of [ 189.463012][ T5734] freed 1224-byte region [ffff888049e00fd8, ffff888049e014a0) [ 189.469071][ T5734] [ 189.470180][ T5734] The buggy address belongs to the physical page: [ 189.473088][ T5734] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49e00 [ 189.476965][ T5734] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 189.480768][ T5734] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 189.484191][ T5734] page_type: f5(slab) [ 189.485934][ T5734] raw: 04fff00000000040 ffff888032829a00 dead000000000122 0000000000000000 [ 189.489749][ T5734] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 189.493559][ T5734] head: 04fff00000000040 ffff888032829a00 dead000000000122 0000000000000000 [ 189.497357][ T5734] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 189.501331][ T5734] head: 04fff00000000002 ffffea0001278001 00000000ffffffff 00000000ffffffff [ 189.505059][ T5734] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 189.508900][ T5734] page dumped because: kasan: bad access detected [ 189.511714][ T5734] page_owner tracks the page as allocated [ 189.514191][ T5734] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5978, tgid 5975 (syz.0.16), ts 180273488234, free_ts 159145261548 [ 189.522676][ T5734] post_alloc_hook+0x228/0x280 [ 189.524677][ T5734] get_page_from_freelist+0x24dc/0x2580 [ 189.527044][ T5734] __alloc_frozen_pages_noprof+0x18d/0x380 [ 189.529647][ T5734] alloc_pages_mpol+0x232/0x4a0 [ 189.531843][ T5734] allocate_slab+0x86/0x3a0 [ 189.533888][ T5734] ___slab_alloc+0xd82/0x1760 [ 189.536016][ T5734] __slab_alloc+0x65/0x100 [ 189.538059][ T5734] kmem_cache_alloc_noprof+0x3fe/0x6e0 [ 189.540502][ T5734] gfs2_glock_get+0x27b/0xf40 [ 189.542695][ T5734] gfs2_inode_lookup+0x29f/0xc50 [ 189.544983][ T5734] init_sb+0xa5a/0x12f0 [ 189.546848][ T5734] gfs2_fill_super+0x16d6/0x21d0 [ 189.549145][ T5734] get_tree_bdev_flags+0x431/0x4f0 [ 189.551435][ T5734] gfs2_get_tree+0x51/0x1e0 [ 189.553477][ T5734] vfs_get_tree+0x92/0x2a0 [ 189.555537][ T5734] do_new_mount+0x329/0xa50 [ 189.557638][ T5734] page last free pid 5649 tgid 5649 stack trace: [ 189.560484][ T5734] __free_frozen_pages+0xbf8/0xd70 [ 189.562716][ T5734] vfree+0x25a/0x400 [ 189.564399][ T5734] kcov_close+0x28/0x50 [ 189.566205][ T5734] __fput+0x44f/0xa70 [ 189.568022][ T5734] task_work_run+0x1d9/0x270 [ 189.570143][ T5734] do_exit+0x69b/0x2310 [ 189.572068][ T5734] do_group_exit+0x21b/0x2d0 [ 189.574212][ T5734] get_signal+0x1284/0x1330 [ 189.576276][ T5734] arch_do_signal_or_restart+0xbc/0x830 [ 189.578784][ T5734] exit_to_user_mode_loop+0x86/0x480 [ 189.581192][ T5734] do_syscall_64+0x2b7/0xf80 [ 189.583258][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.585900][ T5734] [ 189.586996][ T5734] Memory state around the buggy address: [ 189.589532][ T5734] ffff888049e01280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.593083][ T5734] ffff888049e01300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.596622][ T5734] >ffff888049e01380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.600292][ T5734] ^ [ 189.602570][ T5734] ffff888049e01400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 189.605907][ T5734] ffff888049e01480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 189.609349][ T5734] ================================================================== [ 189.612927][ T5734] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 189.616013][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 189.620008][ T5734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.624128][ T5734] Call Trace: [ 189.625489][ T5734] [ 189.626807][ T5734] vpanic+0x1e0/0x670 [ 189.628636][ T5734] panic+0xc5/0xd0 [ 189.630368][ T5734] ? __pfx_panic+0x10/0x10 [ 189.632309][ T5734] ? folio_evictable+0xe4/0x250 [ 189.634383][ T5734] ? rcu_is_watching+0x15/0xb0 [ 189.636534][ T5734] ? folio_evictable+0xe4/0x250 [ 189.638626][ T5734] ? folio_evictable+0xe4/0x250 [ 189.640803][ T5734] check_panic_on_warn+0x89/0xb0 [ 189.642925][ T5734] ? folio_evictable+0xe4/0x250 [ 189.645076][ T5734] end_report+0x6f/0x140 [ 189.646909][ T5734] kasan_report+0x128/0x150 [ 189.649032][ T5734] ? folio_evictable+0xe4/0x250 [ 189.651249][ T5734] kasan_check_range+0x264/0x2c0 [ 189.653535][ T5734] ? folio_evictable+0x1c/0x250 [ 189.655762][ T5734] folio_evictable+0xe4/0x250 [ 189.657901][ T5734] evict_folios+0x1b0a/0x5880 [ 189.660104][ T5734] ? __pfx_evict_folios+0x10/0x10 [ 189.662386][ T5734] ? list_lru_count_one+0x264/0x2c0 [ 189.664752][ T5734] ? __lock_acquire+0x6b5/0x2cf0 [ 189.666996][ T5734] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 189.669798][ T5734] ? get_swappiness+0x350/0x3c0 [ 189.672072][ T5734] try_to_shrink_lruvec+0x88b/0xb20 [ 189.674440][ T5734] shrink_one+0x25c/0x710 [ 189.676432][ T5734] ? shrink_node+0x2d4d/0x35f0 [ 189.678619][ T5734] shrink_node+0x2f8b/0x35f0 [ 189.680782][ T5734] ? shrink_node+0x2d4d/0x35f0 [ 189.682946][ T5734] ? unwind_next_frame+0xa5/0x23c0 [ 189.685329][ T5734] ? lock_acquire+0x106/0x330 [ 189.687490][ T5734] ? unwind_next_frame+0xa5/0x23c0 [ 189.689957][ T5734] ? is_bpf_text_address+0x26/0x2b0 [ 189.692309][ T5734] ? lock_acquire+0x106/0x330 [ 189.694459][ T5734] ? __pfx_shrink_node+0x10/0x10 [ 189.696764][ T5734] ? is_bpf_text_address+0x292/0x2b0 [ 189.699235][ T5734] ? is_bpf_text_address+0x26/0x2b0 [ 189.701641][ T5734] ? vmpressure_prio+0x33/0x140 [ 189.703897][ T5734] do_try_to_free_pages+0x69e/0x1a40 [ 189.706292][ T5734] ? __lock_acquire+0x6b5/0x2cf0 [ 189.708586][ T5734] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 189.711215][ T5734] ? allow_direct_reclaim+0x65/0x570 [ 189.713634][ T5734] try_to_free_pages+0x923/0xe40 [ 189.715927][ T5734] ? __pfx_try_to_free_pages+0x10/0x10 [ 189.718437][ T5734] ? psi_group_change+0xab8/0x1050 [ 189.720838][ T5734] ? fs_reclaim_acquire+0x7c/0x100 [ 189.723259][ T5734] __alloc_pages_direct_reclaim+0x148/0x310 [ 189.725989][ T5734] ? __pfx___alloc_pages_direct_reclaim+0x10/0x10 [ 189.728917][ T5734] ? wake_all_kswapds+0x167/0x280 [ 189.731186][ T5734] __alloc_pages_slowpath+0x619/0xd40 [ 189.733664][ T5734] __alloc_frozen_pages_noprof+0x322/0x380 [ 189.736276][ T5734] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.739098][ T5734] ? __pfx_policy_nodemask+0x10/0x10 [ 189.741449][ T5734] ? __anon_vma_prepare+0x21c/0x4a0 [ 189.743775][ T5734] alloc_pages_mpol+0x232/0x4a0 [ 189.745956][ T5734] vma_alloc_folio_noprof+0xea/0x210 [ 189.748337][ T5734] ? up_write+0x1ab/0x410 [ 189.750357][ T5734] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 189.753081][ T5734] ? __anon_vma_prepare+0x3eb/0x4a0 [ 189.755448][ T5734] do_pte_missing+0x15a4/0x37a0 [ 189.757713][ T5734] ? handle_mm_fault+0xee/0x32a0 [ 189.760066][ T5734] handle_mm_fault+0x1b8c/0x32a0 [ 189.762308][ T5734] ? handle_mm_fault+0xee/0x32a0 [ 189.764581][ T5734] ? __pfx_handle_mm_fault+0x10/0x10 [ 189.766945][ T5734] ? __lock_acquire+0x6b5/0x2cf0 [ 189.769249][ T5734] ? lock_mm_and_find_vma+0xa7/0x340 [ 189.771637][ T5734] do_user_addr_fault+0x75b/0x1360 [ 189.773970][ T5734] exc_page_fault+0x6a/0xc0 [ 189.776057][ T5734] asm_exc_page_fault+0x26/0x30 [ 189.778259][ T5734] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 189.780941][ T5734] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 3f 45 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 189.789501][ T5734] RSP: 0018:ffffc900036a77d8 EFLAGS: 00050206 [ 189.792238][ T5734] RAX: ffffffff849fe201 RBX: ffff888058e43000 RCX: 0000000000000200 [ 189.795747][ T5734] RDX: 0000000000000000 RSI: ffff888058e43000 RDI: 00007ff743dae000 [ 189.799297][ T5734] RBP: ffffc900036a7948 R08: ffff888058e431ff R09: 1ffff1100b1c863f [ 189.802894][ T5734] R10: dffffc0000000000 R11: ffffed100b1c8640 R12: 1ffff920006d4faf [ 189.806441][ T5734] R13: 00007ff743dae000 R14: ffffc900036a7d88 R15: 0000000000000200 [ 189.810063][ T5734] ? _copy_to_iter+0x161/0x17d0 [ 189.812306][ T5734] _copy_to_iter+0x255/0x17d0 [ 189.814429][ T5734] ? __pfx_filemap_get_pages+0x10/0x10 [ 189.816929][ T5734] ? __pfx__copy_to_iter+0x10/0x10 [ 189.819299][ T5734] ? folio_mark_accessed+0x276/0x8c0 [ 189.821783][ T5734] ? __pfx_folio_mark_accessed+0x10/0x10 [ 189.824365][ T5734] ? page_copy_sane+0x4e/0x270 [ 189.826574][ T5734] copy_page_to_iter+0x10c/0x1c0 [ 189.828891][ T5734] filemap_read+0x811/0x1230 [ 189.831037][ T5734] ? aa_file_perm+0x12d/0x1630 [ 189.833266][ T5734] ? __pfx_filemap_read+0x10/0x10 [ 189.835515][ T5734] ? down_read+0x272/0x2e0 [ 189.837563][ T5734] ? blkdev_read_iter+0x177/0x440 [ 189.839908][ T5734] blkdev_read_iter+0x30a/0x440 [ 189.842112][ T5734] vfs_read+0x582/0xa70 [ 189.843998][ T5734] ? __pfx_vfs_read+0x10/0x10 [ 189.846110][ T5734] ? vm_mmap_pgoff+0x373/0x4f0 [ 189.848298][ T5734] ksys_read+0x150/0x270 [ 189.850269][ T5734] ? __pfx_ksys_read+0x10/0x10 [ 189.852422][ T5734] do_syscall_64+0xe2/0xf80 [ 189.854477][ T5734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.857080][ T5734] ? clear_bhb_loop+0x60/0xb0 [ 189.859108][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.861773][ T5734] RIP: 0033:0x7ff7436a7407 [ 189.863811][ T5734] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 189.872245][ T5734] RSP: 002b:00007fff451714b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 189.875872][ T5734] RAX: ffffffffffffffda RBX: 00007ff743dca880 RCX: 00007ff7436a7407 [ 189.879301][ T5734] RDX: 0000000000000200 RSI: 00007ff743dae000 RDI: 0000000000000009 [ 189.882772][ T5734] RBP: 000055a800afb180 R08: 0000000000000000 R09: 0000000000000000 [ 189.886237][ T5734] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 189.889843][ T5734] R13: 0000000000004000 R14: 000055a800b06578 R15: 00007ff743ef139c [ 189.893390][ T5734] [ 189.895121][ T5734] Kernel Offset: disabled [ 189.897063][ T5734] Rebooting in 86400 seconds..