Warning: Permanently added '[localhost]:9140' (ED25519) to the list of known hosts. 2026/01/27 08:29:04 parsed 1 programs [ 135.825329][ T5552] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 142.317624][ T5358] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.322868][ T5358] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.326243][ T5358] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.366409][ T5358] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.384660][ T5358] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.684708][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.688212][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.172027][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.175436][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.321049][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.324610][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.002897][ T5586] chnl_net:caif_netlink_parms(): no params data found [ 144.431281][ T4667] Bluetooth: hci0: command tx timeout [ 144.821358][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.825920][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.829117][ T5586] bridge_slave_0: entered allmulticast mode [ 144.849561][ T5586] bridge_slave_0: entered promiscuous mode [ 144.901639][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.911055][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.914384][ T5586] bridge_slave_1: entered allmulticast mode [ 144.936680][ T5586] bridge_slave_1: entered promiscuous mode [ 145.084436][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.180465][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.269125][ T5586] team0: Port device team_slave_0 added [ 145.289879][ T5586] team0: Port device team_slave_1 added [ 145.380826][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.399999][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.462148][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.502019][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.505065][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.537164][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.645460][ T5586] hsr_slave_0: entered promiscuous mode [ 145.665607][ T5586] hsr_slave_1: entered promiscuous mode [ 146.506999][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.512389][ T4667] Bluetooth: hci0: command tx timeout [ 146.531070][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.555658][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.591170][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.772655][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.832042][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.863898][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.867160][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.898745][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.901992][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.404537][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.514229][ T5586] veth0_vlan: entered promiscuous mode [ 147.543529][ T5586] veth1_vlan: entered promiscuous mode [ 147.605814][ T5586] veth0_macvtap: entered promiscuous mode [ 147.634653][ T5586] veth1_macvtap: entered promiscuous mode [ 147.700495][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.709060][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.751403][ T1042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.754997][ T1042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.758558][ T1042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.801042][ T1042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/27 08:29:20 executed programs: 0 [ 148.247845][ T5679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 148.251817][ T5679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.263546][ T5683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.267948][ T5683] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.273206][ T5683] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.276488][ T5683] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 148.280959][ T5683] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.285250][ T5683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.289070][ T5683] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 148.292982][ T5683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.296612][ T5683] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.300247][ T5683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.304715][ T5683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.308079][ T5683] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 148.311918][ T5683] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.315184][ T5685] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.318472][ T5685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.322160][ T5683] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 148.326540][ T5683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.330213][ T5685] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.599606][ T5358] Bluetooth: hci0: command tx timeout [ 148.629901][ T5358] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.650243][ T5358] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.653863][ T5358] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.658115][ T5358] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.662038][ T5358] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.781460][ T5687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.785734][ T5687] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.789186][ T5687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.793527][ T5687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.799835][ T5687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.352738][ T1042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.473675][ T5674] chnl_net:caif_netlink_parms(): no params data found [ 150.524534][ T5687] Bluetooth: hci2: command tx timeout [ 150.527529][ T5687] Bluetooth: hci3: command tx timeout [ 150.530869][ T5358] Bluetooth: hci4: command tx timeout [ 150.533613][ T5358] Bluetooth: hci1: command tx timeout [ 150.620584][ T1042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.749999][ T5687] Bluetooth: hci5: command tx timeout [ 150.770808][ T1042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.831700][ T5687] Bluetooth: hci0: command tx timeout [ 150.978975][ T1042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.185087][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.188068][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.199611][ T5674] bridge_slave_0: entered allmulticast mode [ 151.214624][ T5674] bridge_slave_0: entered promiscuous mode [ 151.278269][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.299928][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.303182][ T5674] bridge_slave_1: entered allmulticast mode [ 151.310280][ T5674] bridge_slave_1: entered promiscuous mode [ 151.478520][ T5674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.505239][ T5674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.706687][ T5674] team0: Port device team_slave_0 added [ 151.734860][ T5674] team0: Port device team_slave_1 added [ 151.804659][ T1042] bridge_slave_1: left allmulticast mode [ 151.807038][ T1042] bridge_slave_1: left promiscuous mode [ 151.830541][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.841660][ T1042] bridge_slave_0: left allmulticast mode [ 151.844204][ T1042] bridge_slave_0: left promiscuous mode [ 151.846822][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.594398][ T5687] Bluetooth: hci3: command tx timeout [ 152.596804][ T5687] Bluetooth: hci1: command tx timeout [ 152.601905][ T5685] Bluetooth: hci4: command tx timeout [ 152.604442][ T5685] Bluetooth: hci2: command tx timeout [ 152.801467][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.830489][ T5687] Bluetooth: hci5: command tx timeout [ 152.834178][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.862079][ T1042] bond0 (unregistering): Released all slaves [ 152.924513][ T5687] Bluetooth: hci0: command tx timeout [ 153.048850][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.060451][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.103575][ T5674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.158976][ T1042] hsr_slave_0: left promiscuous mode [ 153.166819][ T1042] hsr_slave_1: left promiscuous mode [ 153.170593][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.173976][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.190439][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.193915][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.233208][ T1042] veth1_macvtap: left promiscuous mode [ 153.235787][ T1042] veth0_macvtap: left promiscuous mode [ 153.238512][ T1042] veth1_vlan: left promiscuous mode [ 153.250132][ T1042] veth0_vlan: left promiscuous mode [ 153.739844][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 153.779117][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 154.276185][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.289645][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.309667][ T5674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.679829][ T5687] Bluetooth: hci1: command tx timeout [ 154.682145][ T5687] Bluetooth: hci2: command tx timeout [ 154.684565][ T5687] Bluetooth: hci4: command tx timeout [ 154.686837][ T5687] Bluetooth: hci3: command tx timeout [ 154.734748][ T5677] chnl_net:caif_netlink_parms(): no params data found [ 154.854816][ T5674] hsr_slave_0: entered promiscuous mode [ 154.879881][ T5674] hsr_slave_1: entered promiscuous mode [ 154.911616][ T5687] Bluetooth: hci5: command tx timeout [ 154.991562][ T5687] Bluetooth: hci0: command tx timeout [ 155.191578][ T5695] chnl_net:caif_netlink_parms(): no params data found [ 155.320244][ T5675] chnl_net:caif_netlink_parms(): no params data found [ 155.491987][ T5700] chnl_net:caif_netlink_parms(): no params data found [ 155.656107][ T5676] chnl_net:caif_netlink_parms(): no params data found [ 155.990187][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.993616][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.996724][ T5677] bridge_slave_0: entered allmulticast mode [ 156.012594][ T5677] bridge_slave_0: entered promiscuous mode [ 156.154837][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.157988][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.170148][ T5677] bridge_slave_1: entered allmulticast mode [ 156.174016][ T5677] bridge_slave_1: entered promiscuous mode [ 156.203955][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.207197][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.219696][ T5700] bridge_slave_0: entered allmulticast mode [ 156.224131][ T5700] bridge_slave_0: entered promiscuous mode [ 156.227753][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.231249][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.234377][ T5695] bridge_slave_0: entered allmulticast mode [ 156.250775][ T5695] bridge_slave_0: entered promiscuous mode [ 156.255751][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.258955][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.279674][ T5695] bridge_slave_1: entered allmulticast mode [ 156.283445][ T5695] bridge_slave_1: entered promiscuous mode [ 156.290515][ T5675] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.293630][ T5675] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.296841][ T5675] bridge_slave_0: entered allmulticast mode [ 156.303344][ T5675] bridge_slave_0: entered promiscuous mode [ 156.307469][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.311244][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.314195][ T5676] bridge_slave_0: entered allmulticast mode [ 156.318384][ T5676] bridge_slave_0: entered promiscuous mode [ 156.328842][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.332510][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.335549][ T5700] bridge_slave_1: entered allmulticast mode [ 156.339837][ T5700] bridge_slave_1: entered promiscuous mode [ 156.362066][ T5675] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.365206][ T5675] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.368459][ T5675] bridge_slave_1: entered allmulticast mode [ 156.373009][ T5675] bridge_slave_1: entered promiscuous mode [ 156.376572][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.383250][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.386482][ T5676] bridge_slave_1: entered allmulticast mode [ 156.390846][ T5676] bridge_slave_1: entered promiscuous mode [ 156.503307][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.520441][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.533026][ T5695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.552058][ T5675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.558732][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.594612][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.602766][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.608936][ T5695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.631924][ T5675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.653385][ T5677] team0: Port device team_slave_0 added [ 156.676424][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.721955][ T5677] team0: Port device team_slave_1 added [ 156.765225][ T5687] Bluetooth: hci1: command tx timeout [ 156.767476][ T5687] Bluetooth: hci3: command tx timeout [ 156.770137][ T5685] Bluetooth: hci4: command tx timeout [ 156.772401][ T5685] Bluetooth: hci2: command tx timeout [ 156.806155][ T5695] team0: Port device team_slave_0 added [ 156.896600][ T5700] team0: Port device team_slave_0 added [ 156.915603][ T5700] team0: Port device team_slave_1 added [ 156.922571][ T5695] team0: Port device team_slave_1 added [ 156.928110][ T5676] team0: Port device team_slave_0 added [ 156.935805][ T5675] team0: Port device team_slave_0 added [ 156.950553][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.953835][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.965689][ T5677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.989540][ T5687] Bluetooth: hci5: command tx timeout [ 157.003729][ T5676] team0: Port device team_slave_1 added [ 157.016316][ T5675] team0: Port device team_slave_1 added [ 157.019268][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.022909][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.035447][ T5677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.067437][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.071039][ T5687] Bluetooth: hci0: command tx timeout [ 157.073499][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.085534][ T5695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.117721][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.121936][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.133564][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.146332][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.150844][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.162322][ T5695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.192924][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.195748][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.219581][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.225077][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.228167][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.255973][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.297254][ T5675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.311609][ T5675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.337568][ T5675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.367678][ T5674] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.382253][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.385400][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.409581][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.492941][ T5695] hsr_slave_0: entered promiscuous mode [ 157.496300][ T5695] hsr_slave_1: entered promiscuous mode [ 157.510109][ T5695] debugfs: 'hsr0' already exists in 'hsr' [ 157.512777][ T5695] Cannot create hsr debugfs directory [ 157.515871][ T5675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.518921][ T5675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.538891][ T5675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.547963][ T5677] hsr_slave_0: entered promiscuous mode [ 157.551857][ T5677] hsr_slave_1: entered promiscuous mode [ 157.554912][ T5677] debugfs: 'hsr0' already exists in 'hsr' [ 157.557454][ T5677] Cannot create hsr debugfs directory [ 157.561002][ T5674] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.566903][ T5674] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.615927][ T5674] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.628600][ T5700] hsr_slave_0: entered promiscuous mode [ 157.632226][ T5700] hsr_slave_1: entered promiscuous mode [ 157.635202][ T5700] debugfs: 'hsr0' already exists in 'hsr' [ 157.637772][ T5700] Cannot create hsr debugfs directory [ 157.661311][ T5676] hsr_slave_0: entered promiscuous mode [ 157.664645][ T5676] hsr_slave_1: entered promiscuous mode [ 157.668029][ T5676] debugfs: 'hsr0' already exists in 'hsr' [ 157.670966][ T5676] Cannot create hsr debugfs directory [ 157.775453][ T5675] hsr_slave_0: entered promiscuous mode [ 157.778699][ T5675] hsr_slave_1: entered promiscuous mode [ 157.782141][ T5675] debugfs: 'hsr0' already exists in 'hsr' [ 157.784651][ T5675] Cannot create hsr debugfs directory [ 158.188611][ T5695] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.198233][ T5695] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.221699][ T5695] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.231296][ T5674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.245138][ T5695] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.287706][ T5674] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.298153][ T5677] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 158.330784][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.334045][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.339064][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.342392][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.352475][ T5677] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 158.360915][ T5677] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 158.401083][ T5677] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.516771][ T5700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.565995][ T5700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.597264][ T5700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.646216][ T5700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.849790][ T5695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.854397][ T5676] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.895747][ T5676] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.904933][ T5676] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.932720][ T5695] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.946937][ T5676] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.983704][ T5674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.991159][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.994303][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.002278][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.067882][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.071018][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.148887][ T5677] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.184044][ T5695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.203153][ T5675] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 159.224495][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.227867][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.249114][ T5675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 159.259247][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.262416][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.297816][ T5675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 159.332955][ T5675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 159.408527][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.497031][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.512094][ T5674] veth0_vlan: entered promiscuous mode [ 159.542993][ T5677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.591031][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.594033][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.598334][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.601502][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.701571][ T5674] veth1_vlan: entered promiscuous mode [ 159.754631][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.782651][ T5695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.847361][ T5676] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.885095][ T5674] veth0_macvtap: entered promiscuous mode [ 159.923709][ T3048] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.926933][ T3048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.992402][ T3048] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.995589][ T3048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.073651][ T5674] veth1_macvtap: entered promiscuous mode [ 160.173678][ T5675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.205401][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.234808][ T5676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.275513][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.290978][ T5674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.320352][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.403667][ T5675] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.436838][ T1042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.471381][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.475364][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.534581][ T1042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.581614][ T1042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.585335][ T1042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.595086][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.598146][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.742450][ T5677] veth0_vlan: entered promiscuous mode [ 160.805035][ T5675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.842421][ T5695] veth0_vlan: entered promiscuous mode [ 160.855080][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.858733][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.871701][ T5695] veth1_vlan: entered promiscuous mode [ 160.893151][ T5677] veth1_vlan: entered promiscuous mode [ 160.973862][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.977101][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.013959][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.073282][ T5695] veth0_macvtap: entered promiscuous mode [ 161.111015][ T5677] veth0_macvtap: entered promiscuous mode [ 161.115554][ T5677] veth1_macvtap: entered promiscuous mode [ 161.133882][ T5695] veth1_macvtap: entered promiscuous mode [ 161.208678][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.263323][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.268437][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.354838][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/01/27 08:29:34 executed programs: 12 [ 161.441607][ T1039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.485328][ T1039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.499805][ T1039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.506478][ T5700] veth0_vlan: entered promiscuous mode [ 161.518996][ T5676] veth0_vlan: entered promiscuous mode [ 161.547703][ T1039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.564925][ T5675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.586209][ T5676] veth1_vlan: entered promiscuous mode [ 161.625017][ T1039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.643296][ T5700] veth1_vlan: entered promiscuous mode [ 161.673957][ T1039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.750209][ T1039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.755004][ T1039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.789311][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.811649][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.815961][ T5700] veth0_macvtap: entered promiscuous mode [ 161.825209][ T5676] veth0_macvtap: entered promiscuous mode [ 161.862028][ T5700] veth1_macvtap: entered promiscuous mode [ 161.898835][ T5676] veth1_macvtap: entered promiscuous mode [ 161.931889][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.953044][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.982410][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.005303][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.030499][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.045470][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.084942][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.100937][ T1039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.106879][ T1039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.133190][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.141167][ T5675] veth0_vlan: entered promiscuous mode [ 162.144369][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.169907][ T1039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.178529][ T1039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.215267][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.232957][ T5675] veth1_vlan: entered promiscuous mode [ 162.263074][ T5905] loop0: detected capacity change from 0 to 32768 [ 162.325469][ T5905] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 162.371010][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.379655][ T5905] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 162.424487][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.453387][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.457159][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.491664][ T5905] syz.0.16: attempt to access beyond end of device [ 162.491664][ T5905] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 162.498488][ T5905] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 162.554796][ T5905] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 162.558574][ T5905] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 162.612349][ T5905] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 162.647894][ T5905] CPU: 0 UID: 0 PID: 5905 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 162.647914][ T5905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 162.647921][ T5905] Call Trace: [ 162.647947][ T5905] [ 162.647969][ T5905] dump_stack_lvl+0xe8/0x150 [ 162.648003][ T5905] gfs2_withdraw+0xc3/0x1b0 [ 162.648022][ T5905] gfs2_jdesc_check+0x17d/0x2f0 [ 162.648037][ T5905] init_journal+0xc7e/0x2260 [ 162.648061][ T5905] ? init_inodes+0xdb/0x320 [ 162.648094][ T5905] ? __pfx_init_journal+0x10/0x10 [ 162.648109][ T5905] ? vsnprintf+0xdf1/0xee0 [ 162.648205][ T5905] ? snprintf+0xe8/0x140 [ 162.648222][ T5905] ? init_inodes+0xdb/0x320 [ 162.648238][ T5905] ? __pfx_snprintf+0x10/0x10 [ 162.648252][ T5905] ? gfs2_glock_nq_num+0x13d/0x170 [ 162.648272][ T5905] init_inodes+0xdb/0x320 [ 162.648288][ T5905] gfs2_fill_super+0x1a38/0x21d0 [ 162.648313][ T5905] ? __pfx_gfs2_fill_super+0x10/0x10 [ 162.648330][ T5905] ? init_locking+0xb8/0x210 [ 162.648349][ T5905] ? sb_set_blocksize+0x155/0x240 [ 162.648401][ T5905] ? setup_bdev_super+0x4c1/0x5b0 [ 162.648418][ T5905] get_tree_bdev_flags+0x431/0x4f0 [ 162.648432][ T5905] ? __pfx_gfs2_fill_super+0x10/0x10 [ 162.648447][ T5905] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 162.648459][ T5905] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 162.648477][ T5905] gfs2_get_tree+0x51/0x1e0 [ 162.648495][ T5905] vfs_get_tree+0x92/0x2a0 [ 162.648510][ T5905] do_new_mount+0x329/0xa50 [ 162.648525][ T5905] ? apparmor_capable+0x137/0x1a0 [ 162.648542][ T5905] ? __pfx_do_new_mount+0x10/0x10 [ 162.648558][ T5905] ? ns_capable+0x89/0xe0 [ 162.648578][ T5905] __se_sys_mount+0x31d/0x420 [ 162.648598][ T5905] ? __pfx___se_sys_mount+0x10/0x10 [ 162.648617][ T5905] ? __x64_sys_mount+0x20/0xc0 [ 162.648633][ T5905] do_syscall_64+0xe2/0xf80 [ 162.648643][ T5905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.648653][ T5905] ? trace_irq_disable+0x37/0x100 [ 162.648663][ T5905] ? clear_bhb_loop+0x60/0xb0 [ 162.648676][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.648687][ T5905] RIP: 0033:0x7fddd8d9164a [ 162.648711][ T5905] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.648720][ T5905] RSP: 002b:00007fddd9c0fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.648734][ T5905] RAX: ffffffffffffffda RBX: 00007fddd9c0fee0 RCX: 00007fddd8d9164a [ 162.648742][ T5905] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fddd9c0fea0 [ 162.648749][ T5905] RBP: 0000000020000000 R08: 00007fddd9c0fee0 R09: 0000000000208c1b [ 162.648756][ T5905] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000000020000100 [ 162.648763][ T5905] R13: 00007fddd9c0fea0 R14: 0000000000012750 R15: 00000000200129c0 [ 162.648780][ T5905] [ 162.648786][ T5905] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 162.933437][ T5675] veth0_macvtap: entered promiscuous mode [ 162.949906][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.953483][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.037365][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.046194][ T5675] veth1_macvtap: entered promiscuous mode [ 163.063519][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.117041][ T5675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.176763][ T5675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.219912][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.232502][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.320756][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.326475][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.357791][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.366208][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.457083][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.460763][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.672074][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.675598][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.911657][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.915009][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/27 08:29:40 executed programs: 21 [ 168.697299][ T5924] loop0: detected capacity change from 0 to 32768 [ 168.806690][ T5924] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 168.850770][ T5924] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 168.966811][ T5924] syz.0.24: attempt to access beyond end of device [ 168.966811][ T5924] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 169.025566][ T5924] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 169.110101][ T5924] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 169.114192][ T5924] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 169.118220][ T5924] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 169.196164][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 169.196190][ T5924] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.196197][ T5924] Call Trace: [ 169.196202][ T5924] [ 169.196207][ T5924] dump_stack_lvl+0xe8/0x150 [ 169.196227][ T5924] gfs2_withdraw+0xc3/0x1b0 [ 169.196247][ T5924] gfs2_jdesc_check+0x17d/0x2f0 [ 169.196260][ T5924] init_journal+0xc7e/0x2260 [ 169.196281][ T5924] ? init_inodes+0xdb/0x320 [ 169.196299][ T5924] ? __pfx_init_journal+0x10/0x10 [ 169.196313][ T5924] ? vsnprintf+0xdf1/0xee0 [ 169.196332][ T5924] ? snprintf+0xe8/0x140 [ 169.196346][ T5924] ? init_inodes+0xdb/0x320 [ 169.196359][ T5924] ? __pfx_snprintf+0x10/0x10 [ 169.196373][ T5924] ? gfs2_glock_nq_num+0x13d/0x170 [ 169.196386][ T5924] init_inodes+0xdb/0x320 [ 169.196402][ T5924] gfs2_fill_super+0x1a38/0x21d0 [ 169.196425][ T5924] ? __pfx_gfs2_fill_super+0x10/0x10 [ 169.196441][ T5924] ? init_locking+0xb8/0x210 [ 169.196453][ T5924] ? sb_set_blocksize+0x155/0x240 [ 169.196469][ T5924] ? setup_bdev_super+0x4c1/0x5b0 [ 169.196483][ T5924] get_tree_bdev_flags+0x431/0x4f0 [ 169.196497][ T5924] ? __pfx_gfs2_fill_super+0x10/0x10 [ 169.196510][ T5924] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 169.196522][ T5924] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 169.196540][ T5924] gfs2_get_tree+0x51/0x1e0 [ 169.196556][ T5924] vfs_get_tree+0x92/0x2a0 [ 169.196570][ T5924] do_new_mount+0x329/0xa50 [ 169.196583][ T5924] ? apparmor_capable+0x137/0x1a0 [ 169.196598][ T5924] ? __pfx_do_new_mount+0x10/0x10 [ 169.196613][ T5924] ? ns_capable+0x89/0xe0 [ 169.196632][ T5924] __se_sys_mount+0x31d/0x420 [ 169.196650][ T5924] ? __pfx___se_sys_mount+0x10/0x10 [ 169.196668][ T5924] ? __x64_sys_mount+0x20/0xc0 [ 169.196684][ T5924] do_syscall_64+0xe2/0xf80 [ 169.196694][ T5924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.196704][ T5924] ? trace_irq_disable+0x37/0x100 [ 169.196714][ T5924] ? clear_bhb_loop+0x60/0xb0 [ 169.196726][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.196736][ T5924] RIP: 0033:0x7fddd8d9164a [ 169.196747][ T5924] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.196755][ T5924] RSP: 002b:00007fddd9c0fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.196767][ T5924] RAX: ffffffffffffffda RBX: 00007fddd9c0fee0 RCX: 00007fddd8d9164a [ 169.196773][ T5924] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fddd9c0fea0 [ 169.196779][ T5924] RBP: 0000000020000000 R08: 00007fddd9c0fee0 R09: 0000000000208c1b [ 169.196785][ T5924] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000000020000100 [ 169.196791][ T5924] R13: 00007fddd9c0fea0 R14: 0000000000012750 R15: 00000000200129c0 [ 169.196805][ T5924] [ 169.196810][ T5924] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 172.305230][ T5938] loop0: detected capacity change from 0 to 32768 [ 172.411868][ T5938] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 172.468028][ T5938] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 172.541309][ T5938] syz.0.30: attempt to access beyond end of device [ 172.541309][ T5938] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 172.629464][ T5938] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 172.673405][ T5938] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 172.677392][ T5938] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 172.741402][ T5938] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 172.762276][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full) [ 172.762296][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.762302][ T5938] Call Trace: [ 172.762308][ T5938] [ 172.762313][ T5938] dump_stack_lvl+0xe8/0x150 [ 172.762334][ T5938] gfs2_withdraw+0xc3/0x1b0 [ 172.762352][ T5938] gfs2_jdesc_check+0x17d/0x2f0 [ 172.762366][ T5938] init_journal+0xc7e/0x2260 [ 172.762388][ T5938] ? init_inodes+0xdb/0x320 [ 172.762406][ T5938] ? __pfx_init_journal+0x10/0x10 [ 172.762421][ T5938] ? vsnprintf+0xdf1/0xee0 [ 172.762442][ T5938] ? snprintf+0xe8/0x140 [ 172.762456][ T5938] ? init_inodes+0xdb/0x320 [ 172.762469][ T5938] ? __pfx_snprintf+0x10/0x10 [ 172.762478][ T5938] ? gfs2_glock_nq_num+0x13d/0x170 [ 172.762490][ T5938] init_inodes+0xdb/0x320 [ 172.762505][ T5938] gfs2_fill_super+0x1a38/0x21d0 [ 172.762530][ T5938] ? __pfx_gfs2_fill_super+0x10/0x10 [ 172.762547][ T5938] ? init_locking+0xb8/0x210 [ 172.762562][ T5938] ? sb_set_blocksize+0x155/0x240 [ 172.762580][ T5938] ? setup_bdev_super+0x4c1/0x5b0 [ 172.762596][ T5938] get_tree_bdev_flags+0x431/0x4f0 [ 172.762611][ T5938] ? __pfx_gfs2_fill_super+0x10/0x10 [ 172.762625][ T5938] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 172.762637][ T5938] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 172.762655][ T5938] gfs2_get_tree+0x51/0x1e0 [ 172.762673][ T5938] vfs_get_tree+0x92/0x2a0 [ 172.762688][ T5938] do_new_mount+0x329/0xa50 [ 172.762704][ T5938] ? apparmor_capable+0x137/0x1a0 [ 172.762722][ T5938] ? __pfx_do_new_mount+0x10/0x10 [ 172.762737][ T5938] ? ns_capable+0x89/0xe0 [ 172.762757][ T5938] __se_sys_mount+0x31d/0x420 [ 172.762777][ T5938] ? __pfx___se_sys_mount+0x10/0x10 [ 172.762796][ T5938] ? __x64_sys_mount+0x20/0xc0 [ 172.762813][ T5938] do_syscall_64+0xe2/0xf80 [ 172.762823][ T5938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.762832][ T5938] ? trace_irq_disable+0x37/0x100 [ 172.762843][ T5938] ? clear_bhb_loop+0x60/0xb0 [ 172.762857][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.762868][ T5938] RIP: 0033:0x7fddd8d9164a [ 172.762879][ T5938] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.762889][ T5938] RSP: 002b:00007fddd9c0fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 172.762900][ T5938] RAX: ffffffffffffffda RBX: 00007fddd9c0fee0 RCX: 00007fddd8d9164a [ 172.762906][ T5938] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fddd9c0fea0 [ 172.762910][ T5938] RBP: 0000000020000000 R08: 00007fddd9c0fee0 R09: 0000000000208c1b [ 172.762915][ T5938] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000000020000100 [ 172.762920][ T5938] R13: 00007fddd9c0fea0 R14: 0000000000012750 R15: 00000000200129c0 [ 172.762937][ T5938] [ 172.762942][ T5938] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 2026/01/27 08:29:46 executed programs: 29 [ 176.478931][ T5952] loop0: detected capacity change from 0 to 32768 [ 176.557628][ T5952] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 176.587388][ T5952] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 176.644963][ T5952] syz.0.36: attempt to access beyond end of device [ 176.644963][ T5952] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 176.707659][ T5952] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 176.770632][ T5952] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 176.811900][ T5952] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 176.828234][ T5952] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 176.870531][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT(full) [ 176.870552][ T5952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.870559][ T5952] Call Trace: [ 176.870583][ T5952] [ 176.870600][ T5952] dump_stack_lvl+0xe8/0x150 [ 176.870634][ T5952] gfs2_withdraw+0xc3/0x1b0 [ 176.870653][ T5952] gfs2_jdesc_check+0x17d/0x2f0 [ 176.870669][ T5952] init_journal+0xc7e/0x2260 [ 176.870693][ T5952] ? init_inodes+0xdb/0x320 [ 176.870727][ T5952] ? __pfx_init_journal+0x10/0x10 [ 176.870743][ T5952] ? vsnprintf+0xdf1/0xee0 [ 176.870771][ T5952] ? snprintf+0xe8/0x140 [ 176.870786][ T5952] ? init_inodes+0xdb/0x320 [ 176.870802][ T5952] ? __pfx_snprintf+0x10/0x10 [ 176.870815][ T5952] ? gfs2_glock_nq_num+0x13d/0x170 [ 176.870829][ T5952] init_inodes+0xdb/0x320 [ 176.870847][ T5952] gfs2_fill_super+0x1a38/0x21d0 [ 176.870870][ T5952] ? __pfx_gfs2_fill_super+0x10/0x10 [ 176.870887][ T5952] ? init_locking+0xb8/0x210 [ 176.870900][ T5952] ? sb_set_blocksize+0x155/0x240 [ 176.870927][ T5952] ? setup_bdev_super+0x4c1/0x5b0 [ 176.870946][ T5952] get_tree_bdev_flags+0x431/0x4f0 [ 176.870960][ T5952] ? __pfx_gfs2_fill_super+0x10/0x10 [ 176.870974][ T5952] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 176.870987][ T5952] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 176.871006][ T5952] gfs2_get_tree+0x51/0x1e0 [ 176.871026][ T5952] vfs_get_tree+0x92/0x2a0 [ 176.871044][ T5952] do_new_mount+0x329/0xa50 [ 176.871060][ T5952] ? apparmor_capable+0x137/0x1a0 [ 176.871081][ T5952] ? __pfx_do_new_mount+0x10/0x10 [ 176.871097][ T5952] ? ns_capable+0x89/0xe0 [ 176.871119][ T5952] __se_sys_mount+0x31d/0x420 [ 176.871140][ T5952] ? __pfx___se_sys_mount+0x10/0x10 [ 176.871162][ T5952] ? __x64_sys_mount+0x20/0xc0 [ 176.871181][ T5952] do_syscall_64+0xe2/0xf80 [ 176.871193][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.871204][ T5952] ? trace_irq_disable+0x37/0x100 [ 176.871215][ T5952] ? clear_bhb_loop+0x60/0xb0 [ 176.871230][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.871242][ T5952] RIP: 0033:0x7fddd8d9164a [ 176.871270][ T5952] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.871280][ T5952] RSP: 002b:00007fddd9c0fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 176.871295][ T5952] RAX: ffffffffffffffda RBX: 00007fddd9c0fee0 RCX: 00007fddd8d9164a [ 176.871303][ T5952] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fddd9c0fea0 [ 176.871311][ T5952] RBP: 0000000020000000 R08: 00007fddd9c0fee0 R09: 0000000000208c1b [ 176.871319][ T5952] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000000020000100 [ 176.871326][ T5952] R13: 00007fddd9c0fea0 R14: 0000000000012750 R15: 00000000200129c0 [ 176.871347][ T5952] [ 176.871353][ T5952] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 2026/01/27 08:29:53 executed programs: 38 [ 181.730496][ T5966] loop0: detected capacity change from 0 to 32768 [ 181.777996][ T5966] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 181.786501][ T5966] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 181.821327][ T5966] syz.0.42: attempt to access beyond end of device [ 181.821327][ T5966] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 181.845362][ T5966] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 181.888871][ T5966] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 181.904858][ T5966] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 181.918765][ T5966] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 181.948641][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(full) [ 181.948662][ T5966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.948669][ T5966] Call Trace: [ 181.948697][ T5966] [ 181.948721][ T5966] dump_stack_lvl+0xe8/0x150 [ 181.948756][ T5966] gfs2_withdraw+0xc3/0x1b0 [ 181.948774][ T5966] gfs2_jdesc_check+0x17d/0x2f0 [ 181.948788][ T5966] init_journal+0xc7e/0x2260 [ 181.948811][ T5966] ? init_inodes+0xdb/0x320 [ 181.948842][ T5966] ? __pfx_init_journal+0x10/0x10 [ 181.948857][ T5966] ? vsnprintf+0xdf1/0xee0 [ 181.948947][ T5966] ? snprintf+0xe8/0x140 [ 181.948961][ T5966] ? init_inodes+0xdb/0x320 [ 181.948976][ T5966] ? __pfx_snprintf+0x10/0x10 [ 181.948990][ T5966] ? gfs2_glock_nq_num+0x13d/0x170 [ 181.949002][ T5966] init_inodes+0xdb/0x320 [ 181.949019][ T5966] gfs2_fill_super+0x1a38/0x21d0 [ 181.949042][ T5966] ? __pfx_gfs2_fill_super+0x10/0x10 [ 181.949066][ T5966] ? init_locking+0xb8/0x210 [ 181.949080][ T5966] ? sb_set_blocksize+0x155/0x240 [ 181.949138][ T5966] ? setup_bdev_super+0x4c1/0x5b0 [ 181.949154][ T5966] get_tree_bdev_flags+0x431/0x4f0 [ 181.949168][ T5966] ? __pfx_gfs2_fill_super+0x10/0x10 [ 181.949183][ T5966] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 181.949195][ T5966] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 181.949213][ T5966] gfs2_get_tree+0x51/0x1e0 [ 181.949231][ T5966] vfs_get_tree+0x92/0x2a0 [ 181.949246][ T5966] do_new_mount+0x329/0xa50 [ 181.949261][ T5966] ? apparmor_capable+0x137/0x1a0 [ 181.949278][ T5966] ? __pfx_do_new_mount+0x10/0x10 [ 181.949294][ T5966] ? ns_capable+0x89/0xe0 [ 181.949332][ T5966] __se_sys_mount+0x31d/0x420 [ 181.949352][ T5966] ? __pfx___se_sys_mount+0x10/0x10 [ 181.949370][ T5966] ? __x64_sys_mount+0x20/0xc0 [ 181.949387][ T5966] do_syscall_64+0xe2/0xf80 [ 181.949398][ T5966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.949408][ T5966] ? trace_irq_disable+0x37/0x100 [ 181.949420][ T5966] ? clear_bhb_loop+0x60/0xb0 [ 181.949432][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.949443][ T5966] RIP: 0033:0x7fddd8d9164a [ 181.949473][ T5966] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.949481][ T5966] RSP: 002b:00007fddd9c0fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.949495][ T5966] RAX: ffffffffffffffda RBX: 00007fddd9c0fee0 RCX: 00007fddd8d9164a [ 181.949503][ T5966] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fddd9c0fea0 [ 181.949510][ T5966] RBP: 0000000020000000 R08: 00007fddd9c0fee0 R09: 0000000000208c1b [ 181.949516][ T5966] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000000020000100 [ 181.949523][ T5966] R13: 00007fddd9c0fea0 R14: 0000000000012750 R15: 00000000200129c0 [ 181.949538][ T5966] [ 182.299119][ T5966] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 183.739223][ T5966] loop0: detected capacity change from 0 to 32768 [ 185.293024][ T79] ================================================================== [ 185.296765][ T79] BUG: KASAN: slab-use-after-free in folio_evictable+0xe4/0x250 [ 185.299856][ T79] Read of size 8 at addr ffff8880443c13a0 by task kswapd1/79 [ 185.304102][ T79] [ 185.305400][ T79] CPU: 0 UID: 0 PID: 79 Comm: kswapd1 Not tainted syzkaller #0 PREEMPT(full) [ 185.305442][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.305449][ T79] Call Trace: [ 185.305482][ T79] [ 185.305515][ T79] dump_stack_lvl+0xe8/0x150 [ 185.305536][ T79] print_report+0xba/0x230 [ 185.305550][ T79] ? folio_evictable+0xe4/0x250 [ 185.305565][ T79] kasan_report+0x117/0x150 [ 185.305576][ T79] ? folio_evictable+0xe4/0x250 [ 185.305590][ T79] kasan_check_range+0x264/0x2c0 [ 185.305602][ T79] ? folio_evictable+0x1c/0x250 [ 185.305699][ T79] folio_evictable+0xe4/0x250 [ 185.305713][ T79] evict_folios+0x1b0a/0x5880 [ 185.305732][ T79] ? __pfx_evict_folios+0x10/0x10 [ 185.305748][ T79] ? __lock_acquire+0x6b5/0x2cf0 [ 185.305765][ T79] ? folios_put_refs+0x790/0x8d0 [ 185.305777][ T79] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 185.305794][ T79] ? get_swappiness+0x350/0x3c0 [ 185.305809][ T79] try_to_shrink_lruvec+0x88b/0xb20 [ 185.305828][ T79] shrink_one+0x25c/0x710 [ 185.305839][ T79] ? shrink_node+0x2d4d/0x35f0 [ 185.305849][ T79] shrink_node+0x2f8b/0x35f0 [ 185.305861][ T79] ? shrink_node+0x2d4d/0x35f0 [ 185.305871][ T79] ? __lock_acquire+0x6b5/0x2cf0 [ 185.305887][ T79] ? percpu_ref_put+0x19/0x180 [ 185.305902][ T79] ? percpu_ref_put+0x19/0x180 [ 185.305919][ T79] ? __pfx_shrink_node+0x10/0x10 [ 185.305929][ T79] ? percpu_ref_put+0x19/0x180 [ 185.305945][ T79] ? mem_cgroup_iter+0x420/0x450 [ 185.305954][ T79] ? mem_cgroup_iter+0x3b/0x450 [ 185.305962][ T79] kswapd+0x144c/0x2800 [ 185.305973][ T79] ? kswapd+0x90d/0x2800 [ 185.305985][ T79] ? __pfx_kswapd+0x10/0x10 [ 185.305996][ T79] ? __lock_acquire+0x6b5/0x2cf0 [ 185.306011][ T79] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.306024][ T79] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.306046][ T79] ? __pfx_autoremove_wake_function+0x10/0x10 [ 185.306059][ T79] ? __kthread_parkme+0x7a/0x1f0 [ 185.306070][ T79] ? __kthread_parkme+0x19c/0x1f0 [ 185.306081][ T79] kthread+0x726/0x8b0 [ 185.306093][ T79] ? __pfx_kswapd+0x10/0x10 [ 185.306104][ T79] ? __pfx_kthread+0x10/0x10 [ 185.306115][ T79] ? _raw_spin_unlock_irq+0x23/0x50 [ 185.306182][ T79] ? __pfx_kthread+0x10/0x10 [ 185.306193][ T79] ret_from_fork+0x51b/0xa40 [ 185.306213][ T79] ? __pfx_ret_from_fork+0x10/0x10 [ 185.306228][ T79] ? __switch_to+0xc82/0x1410 [ 185.306241][ T79] ? __pfx_kthread+0x10/0x10 [ 185.306252][ T79] ret_from_fork_asm+0x1a/0x30 [ 185.306270][ T79] [ 185.306330][ T79] [ 185.417291][ T79] Allocated by task 5966: [ 185.419288][ T79] kasan_save_track+0x3e/0x80 [ 185.421499][ T79] __kasan_slab_alloc+0x6c/0x80 [ 185.423610][ T79] kmem_cache_alloc_noprof+0x370/0x6e0 [ 185.425996][ T79] gfs2_glock_get+0x27b/0xf40 [ 185.428150][ T79] gfs2_inode_lookup+0x29f/0xc50 [ 185.430232][ T79] init_sb+0xa5a/0x12f0 [ 185.431969][ T79] gfs2_fill_super+0x16d6/0x21d0 [ 185.434112][ T79] get_tree_bdev_flags+0x431/0x4f0 [ 185.436493][ T79] gfs2_get_tree+0x51/0x1e0 [ 185.438528][ T79] vfs_get_tree+0x92/0x2a0 [ 185.440530][ T79] do_new_mount+0x329/0xa50 [ 185.442514][ T79] __se_sys_mount+0x31d/0x420 [ 185.444691][ T79] do_syscall_64+0xe2/0xf80 [ 185.446694][ T79] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.449422][ T79] [ 185.450505][ T79] Freed by task 15: [ 185.452242][ T79] kasan_save_track+0x3e/0x80 [ 185.454499][ T79] kasan_save_free_info+0x46/0x50 [ 185.457320][ T79] __kasan_slab_free+0x5c/0x80 [ 185.459898][ T79] kmem_cache_free+0x195/0x610 [ 185.462067][ T79] rcu_core+0xc9e/0x1750 [ 185.463929][ T79] handle_softirqs+0x22a/0x7c0 [ 185.466070][ T79] run_ksoftirqd+0x36/0x60 [ 185.468101][ T79] smpboot_thread_fn+0x541/0xa50 [ 185.470289][ T79] kthread+0x726/0x8b0 [ 185.472130][ T79] ret_from_fork+0x51b/0xa40 [ 185.474121][ T79] ret_from_fork_asm+0x1a/0x30 [ 185.476242][ T79] [ 185.477324][ T79] Last potentially related work creation: [ 185.479923][ T79] kasan_save_stack+0x3e/0x60 [ 185.482153][ T79] kasan_record_aux_stack+0xbd/0xd0 [ 185.484550][ T79] call_rcu+0xee/0x890 [ 185.486321][ T79] gfs2_glock_free+0x3c/0xa0 [ 185.488437][ T79] gfs2_evict_inode+0x598/0x1050 [ 185.490578][ T79] evict+0x61e/0xb10 [ 185.492295][ T79] __dentry_kill+0x1a2/0x5e0 [ 185.494356][ T79] finish_dput+0xc9/0x480 [ 185.496276][ T79] gfs2_fill_super+0x195b/0x21d0 [ 185.498453][ T79] get_tree_bdev_flags+0x431/0x4f0 [ 185.500671][ T79] gfs2_get_tree+0x51/0x1e0 [ 185.502605][ T79] vfs_get_tree+0x92/0x2a0 [ 185.504626][ T79] do_new_mount+0x329/0xa50 [ 185.506601][ T79] __se_sys_mount+0x31d/0x420 [ 185.508661][ T79] do_syscall_64+0xe2/0xf80 [ 185.510674][ T79] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.513308][ T79] [ 185.514312][ T79] The buggy address belongs to the object at ffff8880443c0fd8 [ 185.514312][ T79] which belongs to the cache gfs2_glock(aspace) of size 1224 [ 185.520611][ T79] The buggy address is located 968 bytes inside of [ 185.520611][ T79] freed 1224-byte region [ffff8880443c0fd8, ffff8880443c14a0) [ 185.526412][ T79] [ 185.527495][ T79] The buggy address belongs to the physical page: [ 185.530318][ T79] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x443c0 [ 185.534085][ T79] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 185.537793][ T79] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 185.541023][ T79] page_type: f5(slab) [ 185.542758][ T79] raw: 04fff00000000040 ffff888000b8c500 dead000000000122 0000000000000000 [ 185.546450][ T79] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 185.550491][ T79] head: 04fff00000000040 ffff888000b8c500 dead000000000122 0000000000000000 [ 185.554342][ T79] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 185.558200][ T79] head: 04fff00000000002 ffffea000110f001 00000000ffffffff 00000000ffffffff [ 185.562007][ T79] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 185.565649][ T79] page dumped because: kasan: bad access detected [ 185.568453][ T79] page_owner tracks the page as allocated [ 185.570896][ T79] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5905, tgid 5904 (syz.0.16), ts 162462878948, free_ts 162462620642 [ 185.579737][ T79] post_alloc_hook+0x228/0x280 [ 185.581883][ T79] get_page_from_freelist+0x24dc/0x2580 [ 185.584414][ T79] __alloc_frozen_pages_noprof+0x18d/0x380 [ 185.586881][ T79] alloc_pages_mpol+0x232/0x4a0 [ 185.589013][ T79] allocate_slab+0x86/0x3a0 [ 185.591127][ T79] ___slab_alloc+0xd82/0x1760 [ 185.593305][ T79] __slab_alloc+0x65/0x100 [ 185.595217][ T79] kmem_cache_alloc_noprof+0x3fe/0x6e0 [ 185.597587][ T79] gfs2_glock_get+0x27b/0xf40 [ 185.599915][ T79] gfs2_inode_lookup+0x29f/0xc50 [ 185.602323][ T79] init_sb+0xa5a/0x12f0 [ 185.604207][ T79] gfs2_fill_super+0x16d6/0x21d0 [ 185.606376][ T79] get_tree_bdev_flags+0x431/0x4f0 [ 185.608541][ T79] gfs2_get_tree+0x51/0x1e0 [ 185.610457][ T79] vfs_get_tree+0x92/0x2a0 [ 185.612544][ T79] do_new_mount+0x329/0xa50 [ 185.614619][ T79] page last free pid 5905 tgid 5904 stack trace: [ 185.617466][ T79] __free_frozen_pages+0xbf8/0xd70 [ 185.619757][ T79] stack_depot_save_flags+0x40e/0x810 [ 185.622128][ T79] kasan_save_track+0x4f/0x80 [ 185.624160][ T79] __kasan_slab_alloc+0x6c/0x80 [ 185.626361][ T79] kmem_cache_alloc_noprof+0x370/0x6e0 [ 185.628666][ T79] security_inode_alloc+0x39/0x310 [ 185.630877][ T79] inode_init_always_gfp+0x9ed/0xdc0 [ 185.633157][ T79] alloc_inode+0x82/0x1b0 [ 185.635115][ T79] iget5_locked+0x4a/0xa0 [ 185.636999][ T79] gfs2_inode_lookup+0xfb/0xc50 [ 185.639091][ T79] init_sb+0xa5a/0x12f0 [ 185.640970][ T79] gfs2_fill_super+0x16d6/0x21d0 [ 185.643124][ T79] get_tree_bdev_flags+0x431/0x4f0 [ 185.645386][ T79] gfs2_get_tree+0x51/0x1e0 [ 185.647417][ T79] vfs_get_tree+0x92/0x2a0 [ 185.649430][ T79] do_new_mount+0x329/0xa50 [ 185.651379][ T79] [ 185.652451][ T79] Memory state around the buggy address: [ 185.654787][ T79] ffff8880443c1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.658375][ T79] ffff8880443c1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.661737][ T79] >ffff8880443c1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.665141][ T79] ^ [ 185.667305][ T79] ffff8880443c1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 185.670672][ T79] ffff8880443c1480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 185.673933][ T79] ================================================================== [ 185.677384][ T79] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 185.680449][ T79] CPU: 0 UID: 0 PID: 79 Comm: kswapd1 Not tainted syzkaller #0 PREEMPT(full) [ 185.684159][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 185.688379][ T79] Call Trace: [ 185.689801][ T79] [ 185.691109][ T79] vpanic+0x1e0/0x670 [ 185.692921][ T79] panic+0xc5/0xd0 [ 185.694561][ T79] ? __pfx_panic+0x10/0x10 [ 185.696433][ T79] ? folio_evictable+0xe4/0x250 [ 185.698527][ T79] ? rcu_is_watching+0x15/0xb0 [ 185.700609][ T79] ? folio_evictable+0xe4/0x250 [ 185.702693][ T79] ? folio_evictable+0xe4/0x250 [ 185.704842][ T79] check_panic_on_warn+0x89/0xb0 [ 185.706944][ T79] ? folio_evictable+0xe4/0x250 [ 185.709037][ T79] end_report+0x6f/0x140 [ 185.710845][ T79] kasan_report+0x128/0x150 [ 185.712818][ T79] ? folio_evictable+0xe4/0x250 [ 185.714845][ T79] kasan_check_range+0x264/0x2c0 [ 185.717013][ T79] ? folio_evictable+0x1c/0x250 [ 185.719188][ T79] folio_evictable+0xe4/0x250 [ 185.721183][ T79] evict_folios+0x1b0a/0x5880 [ 185.723340][ T79] ? __pfx_evict_folios+0x10/0x10 [ 185.725565][ T79] ? __lock_acquire+0x6b5/0x2cf0 [ 185.727616][ T79] ? folios_put_refs+0x790/0x8d0 [ 185.729793][ T79] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 185.732449][ T79] ? get_swappiness+0x350/0x3c0 [ 185.734509][ T79] try_to_shrink_lruvec+0x88b/0xb20 [ 185.736563][ T79] shrink_one+0x25c/0x710 [ 185.738373][ T79] ? shrink_node+0x2d4d/0x35f0 [ 185.740470][ T79] shrink_node+0x2f8b/0x35f0 [ 185.742517][ T79] ? shrink_node+0x2d4d/0x35f0 [ 185.744601][ T79] ? __lock_acquire+0x6b5/0x2cf0 [ 185.746760][ T79] ? percpu_ref_put+0x19/0x180 [ 185.748929][ T79] ? percpu_ref_put+0x19/0x180 [ 185.751043][ T79] ? __pfx_shrink_node+0x10/0x10 [ 185.753317][ T79] ? percpu_ref_put+0x19/0x180 [ 185.755217][ T79] ? mem_cgroup_iter+0x420/0x450 [ 185.757496][ T79] ? mem_cgroup_iter+0x3b/0x450 [ 185.759484][ T79] kswapd+0x144c/0x2800 [ 185.761267][ T79] ? kswapd+0x90d/0x2800 [ 185.763061][ T79] ? __pfx_kswapd+0x10/0x10 [ 185.765145][ T79] ? __lock_acquire+0x6b5/0x2cf0 [ 185.767388][ T79] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.769633][ T79] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.772009][ T79] ? __pfx_autoremove_wake_function+0x10/0x10 [ 185.774653][ T79] ? __kthread_parkme+0x7a/0x1f0 [ 185.776788][ T79] ? __kthread_parkme+0x19c/0x1f0 [ 185.779118][ T79] kthread+0x726/0x8b0 [ 185.780950][ T79] ? __pfx_kswapd+0x10/0x10 [ 185.783056][ T79] ? __pfx_kthread+0x10/0x10 [ 185.784843][ T79] ? _raw_spin_unlock_irq+0x23/0x50 [ 185.786849][ T79] ? __pfx_kthread+0x10/0x10 [ 185.788798][ T79] ret_from_fork+0x51b/0xa40 [ 185.790781][ T79] ? __pfx_ret_from_fork+0x10/0x10 [ 185.793041][ T79] ? __switch_to+0xc82/0x1410 [ 185.795194][ T79] ? __pfx_kthread+0x10/0x10 [ 185.797244][ T79] ret_from_fork_asm+0x1a/0x30 [ 185.799376][ T79] [ 185.801171][ T79] Kernel Offset: disabled [ 185.802902][ T79] Rebooting in 86400 seconds..