Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. 2026/01/27 08:58:15 parsed 1 programs [ 113.919358][ T6145] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 116.726177][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.734982][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.742943][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.750998][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.768222][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.046190][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.054429][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.117515][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.125658][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.585197][ T6210] chnl_net:caif_netlink_parms(): no params data found [ 118.668169][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.675819][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.684468][ T6210] bridge_slave_0: entered allmulticast mode [ 118.692510][ T6210] bridge_slave_0: entered promiscuous mode [ 118.701353][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.709238][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.716450][ T6210] bridge_slave_1: entered allmulticast mode [ 118.723738][ T6210] bridge_slave_1: entered promiscuous mode [ 118.761034][ T6210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.772577][ T6210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.807392][ T6210] team0: Port device team_slave_0 added [ 118.815092][ T6210] team0: Port device team_slave_1 added [ 118.839308][ T6210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.846344][ T6210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.872468][ T6210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.884330][ T6210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.891441][ T6210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.918146][ T6210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.956854][ T6210] hsr_slave_0: entered promiscuous mode [ 118.963199][ T6210] hsr_slave_1: entered promiscuous mode [ 119.490086][ T6210] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.502550][ T6210] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.514024][ T6210] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.525742][ T6210] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.646686][ T6210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.678104][ T6210] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.692117][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.699325][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.724978][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.732249][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.965838][ T6210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.030514][ T6210] veth0_vlan: entered promiscuous mode [ 120.045293][ T6210] veth1_vlan: entered promiscuous mode [ 120.095240][ T6210] veth0_macvtap: entered promiscuous mode [ 120.109695][ T6210] veth1_macvtap: entered promiscuous mode [ 120.133562][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.147415][ T6210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.179939][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.198862][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.226576][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.248609][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.401103][ T4201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.509621][ T4201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.612198][ T4201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.716035][ T4201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/27 08:58:27 executed programs: 0 [ 122.039252][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.051617][ T5157] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.068808][ T5157] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.076828][ T5157] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.084748][ T5157] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.324121][ T6323] chnl_net:caif_netlink_parms(): no params data found [ 122.456856][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.465075][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.472778][ T6323] bridge_slave_0: entered allmulticast mode [ 122.480956][ T6323] bridge_slave_0: entered promiscuous mode [ 122.494375][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.502163][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.509388][ T6323] bridge_slave_1: entered allmulticast mode [ 122.517513][ T6323] bridge_slave_1: entered promiscuous mode [ 122.568436][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.585697][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.632071][ T6323] team0: Port device team_slave_0 added [ 122.640962][ T6323] team0: Port device team_slave_1 added [ 122.731527][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.741718][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.770906][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.806981][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.814206][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.840588][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.885618][ T4201] bridge_slave_1: left allmulticast mode [ 122.891584][ T4201] bridge_slave_1: left promiscuous mode [ 122.898068][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.908793][ T4201] bridge_slave_0: left allmulticast mode [ 122.914986][ T4201] bridge_slave_0: left promiscuous mode [ 122.920788][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.270938][ T4201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.286174][ T4201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.296837][ T4201] bond0 (unregistering): Released all slaves [ 123.382862][ T6323] hsr_slave_0: entered promiscuous mode [ 123.396915][ T6323] hsr_slave_1: entered promiscuous mode [ 123.407275][ T6323] debugfs: 'hsr0' already exists in 'hsr' [ 123.413523][ T6323] Cannot create hsr debugfs directory [ 123.425259][ T4201] hsr_slave_0: left promiscuous mode [ 123.432147][ T4201] hsr_slave_1: left promiscuous mode [ 123.438287][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.446204][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.454939][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.462854][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.492203][ T4201] veth1_macvtap: left promiscuous mode [ 123.497732][ T4201] veth0_macvtap: left promiscuous mode [ 123.505293][ T4201] veth1_vlan: left promiscuous mode [ 123.510637][ T4201] veth0_vlan: left promiscuous mode [ 123.947398][ T4201] team0 (unregistering): Port device team_slave_1 removed [ 123.972823][ T4201] team0 (unregistering): Port device team_slave_0 removed [ 124.151436][ T51] Bluetooth: hci0: command tx timeout [ 125.053770][ T6323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.074669][ T6323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.088268][ T6323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.103407][ T6323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.222384][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.249716][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.267990][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.275176][ T4201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.295093][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.302346][ T4201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.566183][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.615237][ T6323] veth0_vlan: entered promiscuous mode [ 125.629532][ T6323] veth1_vlan: entered promiscuous mode [ 125.659550][ T6323] veth0_macvtap: entered promiscuous mode [ 125.669291][ T6323] veth1_macvtap: entered promiscuous mode [ 125.687120][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.701713][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.715612][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.724765][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.735416][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.744909][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.799093][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.807184][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.832020][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.839928][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.089089][ T6434] loop0: detected capacity change from 0 to 32768 [ 126.125348][ T6434] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 126.133824][ T6434] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 126.165701][ T6434] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 126.179003][ T1221] gfs2: fsid=loop0.0: jid=0, already locked for use [ 126.189564][ T1221] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 126.221249][ T51] Bluetooth: hci0: command tx timeout [ 126.231286][ T1221] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 41ms [ 126.239367][ T1221] gfs2: fsid=loop0.0: jid=0: Done [ 126.245003][ T6434] gfs2: fsid=loop0.0: first mount done, others may mount [ 126.811821][ T6438] loop0: detected capacity change from 0 to 32768 [ 126.829234][ T6438] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 126.838164][ T6438] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 126.852956][ T6438] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 126.868573][ T1221] gfs2: fsid=loop0.0: jid=0, already locked for use [ 126.884655][ T1221] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 126.918021][ T1221] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 33ms [ 126.927160][ T1221] gfs2: fsid=loop0.0: jid=0: Done [ 126.935248][ T6438] gfs2: fsid=loop0.0: first mount done, others may mount 2026/01/27 08:58:33 executed programs: 4 [ 127.624284][ T6442] loop0: detected capacity change from 0 to 32768 [ 127.646020][ T6442] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 127.655985][ T6442] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 127.682182][ T6442] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 127.692244][ T9] gfs2: fsid=loop0.0: jid=0, already locked for use [ 127.698875][ T9] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 127.734274][ T9] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 35ms [ 127.745050][ T9] gfs2: fsid=loop0.0: jid=0: Done [ 127.750139][ T6442] gfs2: fsid=loop0.0: first mount done, others may mount [ 128.299876][ T6446] loop0: detected capacity change from 0 to 32768 [ 128.307957][ T51] Bluetooth: hci0: command tx timeout [ 128.320682][ T6446] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 128.329204][ T6446] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 128.342933][ T6446] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 128.353442][ T1221] gfs2: fsid=loop0.0: jid=0, already locked for use [ 128.360077][ T1221] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 128.384414][ T1221] kworker/1:3: attempt to access beyond end of device [ 128.384414][ T1221] loop0: rw=0, sector=67113728, nr_sectors = 8 limit=32768 [ 128.422613][ T1221] gfs2: fsid=loop0.0: jid=0: Failed [ 128.430966][ T6446] gfs2: fsid=loop0.0: error recovering journal 0: -5 [ 128.716694][ T6446] loop0: detected capacity change from 0 to 32768 [ 128.733319][ T6446] gfs2: fsid=norecovery: Trying to join cluster "lock_nolock", "norecovery" [ 128.742674][ T6446] gfs2: fsid=norecovery: Now mounting FS (format 0)... [ 128.754981][ T6446] syz.0.20: attempt to access beyond end of device [ 128.754981][ T6446] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 128.771086][ T6446] gfs2: fsid=norecovery.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 128.786384][ T6446] gfs2: fsid=norecovery.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 128.798375][ T6446] gfs2: fsid=norecovery.s: H: s:SH f:eEcH e:0 p:6446 [syz.0.20] init_journal+0x16d9/0x2260 [ 128.808980][ T6446] gfs2: fsid=norecovery.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 128.820077][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 128.820103][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 128.820120][ T6446] Call Trace: [ 128.820128][ T6446] [ 128.820135][ T6446] dump_stack_lvl+0xe8/0x150 [ 128.820165][ T6446] gfs2_withdraw+0xc3/0x1b0 [ 128.820192][ T6446] gfs2_jdesc_check+0x17d/0x2f0 [ 128.820224][ T6446] check_journal_clean+0x18d/0x360 [ 128.820250][ T6446] ? __pfx_check_journal_clean+0x10/0x10 [ 128.820276][ T6446] ? init_journal+0x16d9/0x2260 [ 128.820307][ T6446] ? do_raw_spin_unlock+0xf5/0x210 [ 128.820336][ T6446] ? _raw_spin_unlock+0x28/0x50 [ 128.820354][ T6446] ? gfs2_jdesc_find+0xab/0xc0 [ 128.820382][ T6446] init_journal+0x16d9/0x2260 [ 128.820417][ T6446] ? init_inodes+0xdb/0x320 [ 128.820444][ T6446] ? __pfx_init_journal+0x10/0x10 [ 128.820467][ T6446] ? vsnprintf+0xdf1/0xee0 [ 128.820502][ T6446] ? snprintf+0xe8/0x140 [ 128.820534][ T6446] ? init_inodes+0xdb/0x320 [ 128.820558][ T6446] ? __pfx_snprintf+0x10/0x10 [ 128.820583][ T6446] ? gfs2_glock_nq_num+0x13d/0x170 [ 128.820612][ T6446] init_inodes+0xdb/0x320 [ 128.820637][ T6446] gfs2_fill_super+0x1a38/0x21d0 [ 128.820675][ T6446] ? __pfx_gfs2_fill_super+0x10/0x10 [ 128.820702][ T6446] ? init_locking+0xb8/0x210 [ 128.820724][ T6446] ? sb_set_blocksize+0x155/0x240 [ 128.820750][ T6446] ? setup_bdev_super+0x4c1/0x5b0 [ 128.820779][ T6446] get_tree_bdev_flags+0x431/0x4f0 [ 128.820806][ T6446] ? __pfx_gfs2_fill_super+0x10/0x10 [ 128.820829][ T6446] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 128.820852][ T6446] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 128.820887][ T6446] gfs2_get_tree+0x51/0x1e0 [ 128.820914][ T6446] vfs_get_tree+0x92/0x2a0 [ 128.820941][ T6446] do_new_mount+0x341/0xd30 [ 128.820961][ T6446] ? apparmor_capable+0x137/0x1a0 [ 128.820989][ T6446] ? __pfx_do_new_mount+0x10/0x10 [ 128.821010][ T6446] ? ns_capable+0x89/0xe0 [ 128.821041][ T6446] ? user_path_at+0xd4/0x160 [ 128.821066][ T6446] __se_sys_mount+0x31d/0x420 [ 128.821114][ T6446] ? __pfx___se_sys_mount+0x10/0x10 [ 128.821138][ T6446] ? __x64_sys_mount+0x20/0xc0 [ 128.821159][ T6446] do_syscall_64+0xe2/0xf80 [ 128.821178][ T6446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.821195][ T6446] ? trace_irq_disable+0x37/0x100 [ 128.821217][ T6446] ? clear_bhb_loop+0x40/0x90 [ 128.821240][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.821257][ T6446] RIP: 0033:0x7f3e6cd9b58a [ 128.821280][ T6446] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.821295][ T6446] RSP: 002b:00007f3e6dc67e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.821321][ T6446] RAX: ffffffffffffffda RBX: 00007f3e6dc67ee0 RCX: 00007f3e6cd9b58a [ 128.821334][ T6446] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f3e6dc67ea0 [ 128.821347][ T6446] RBP: 0000200000000400 R08: 00007f3e6dc67ee0 R09: 0000000000200001 [ 128.821359][ T6446] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 128.821370][ T6446] R13: 00007f3e6dc67ea0 R14: 00000000000125bb R15: 0000200000000180 [ 128.821400][ T6446] [ 129.142482][ T6446] gfs2: fsid=norecovery.s: Error checking journal for spectator mount. [ 129.468422][ T6452] loop0: detected capacity change from 0 to 32768 [ 129.483882][ T6452] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 129.492990][ T6452] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 129.506748][ T6452] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 129.516314][ T42] gfs2: fsid=loop0.0: jid=0, already locked for use [ 129.523347][ T42] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 129.558484][ T42] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 35ms [ 129.566747][ T42] gfs2: fsid=loop0.0: jid=0: Done [ 129.574525][ T6452] gfs2: fsid=loop0.0: first mount done, others may mount [ 130.139716][ T6456] loop0: detected capacity change from 0 to 32768 [ 130.163452][ T6456] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 130.171432][ T6456] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 130.185573][ T6456] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 130.196316][ T9] gfs2: fsid=loop0.0: jid=0, already locked for use [ 130.203387][ T9] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 130.240404][ T9] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 37ms [ 130.249697][ T9] gfs2: fsid=loop0.0: jid=0: Done [ 130.255124][ T6456] gfs2: fsid=loop0.0: first mount done, others may mount [ 130.381362][ T51] Bluetooth: hci0: command tx timeout [ 130.815708][ T6460] loop0: detected capacity change from 0 to 32768 [ 130.838205][ T6460] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 130.846266][ T6460] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 130.865366][ T6460] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 130.874982][ T800] gfs2: fsid=loop0.0: jid=0, already locked for use [ 130.881997][ T800] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 130.903863][ T800] kworker/1:2: attempt to access beyond end of device [ 130.903863][ T800] loop0: rw=0, sector=67113728, nr_sectors = 8 limit=32768 [ 130.925435][ T800] gfs2: fsid=loop0.0: jid=0: Failed [ 130.931420][ T6460] gfs2: fsid=loop0.0: error recovering journal 0: -5 [ 131.217666][ T6460] loop0: detected capacity change from 0 to 32768 [ 131.233857][ T6460] gfs2: fsid=norecovery: Trying to join cluster "lock_nolock", "norecovery" [ 131.243931][ T6460] gfs2: fsid=norecovery: Now mounting FS (format 0)... [ 131.256754][ T6460] syz.0.23: attempt to access beyond end of device [ 131.256754][ T6460] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 131.272790][ T6460] gfs2: fsid=norecovery.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 131.287392][ T6460] gfs2: fsid=norecovery.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 131.296640][ T6460] gfs2: fsid=norecovery.s: H: s:SH f:eEcH e:0 p:6460 [syz.0.23] init_journal+0x16d9/0x2260 [ 131.307440][ T6460] gfs2: fsid=norecovery.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 131.316473][ T6460] CPU: 1 UID: 0 PID: 6460 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(full) [ 131.316496][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 131.316507][ T6460] Call Trace: [ 131.316516][ T6460] [ 131.316525][ T6460] dump_stack_lvl+0xe8/0x150 [ 131.316552][ T6460] gfs2_withdraw+0xc3/0x1b0 [ 131.316573][ T6460] gfs2_jdesc_check+0x17d/0x2f0 [ 131.316601][ T6460] check_journal_clean+0x18d/0x360 [ 131.316624][ T6460] ? __pfx_check_journal_clean+0x10/0x10 [ 131.316647][ T6460] ? init_journal+0x16d9/0x2260 [ 131.316675][ T6460] ? do_raw_spin_unlock+0xf5/0x210 [ 131.316700][ T6460] ? _raw_spin_unlock+0x28/0x50 [ 131.316715][ T6460] ? gfs2_jdesc_find+0xab/0xc0 [ 131.316741][ T6460] init_journal+0x16d9/0x2260 [ 131.316774][ T6460] ? init_inodes+0xdb/0x320 [ 131.316801][ T6460] ? __pfx_init_journal+0x10/0x10 [ 131.316822][ T6460] ? vsnprintf+0xdf1/0xee0 [ 131.316856][ T6460] ? snprintf+0xe8/0x140 [ 131.316882][ T6460] ? init_inodes+0xdb/0x320 [ 131.316904][ T6460] ? __pfx_snprintf+0x10/0x10 [ 131.316929][ T6460] ? gfs2_glock_nq_num+0x13d/0x170 [ 131.316958][ T6460] init_inodes+0xdb/0x320 [ 131.316983][ T6460] gfs2_fill_super+0x1a38/0x21d0 [ 131.317028][ T6460] ? __pfx_gfs2_fill_super+0x10/0x10 [ 131.317054][ T6460] ? init_locking+0xb8/0x210 [ 131.317075][ T6460] ? sb_set_blocksize+0x155/0x240 [ 131.317100][ T6460] ? setup_bdev_super+0x4c1/0x5b0 [ 131.317127][ T6460] get_tree_bdev_flags+0x431/0x4f0 [ 131.317152][ T6460] ? __pfx_gfs2_fill_super+0x10/0x10 [ 131.317176][ T6460] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 131.317200][ T6460] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 131.317236][ T6460] gfs2_get_tree+0x51/0x1e0 [ 131.317262][ T6460] vfs_get_tree+0x92/0x2a0 [ 131.317291][ T6460] do_new_mount+0x341/0xd30 [ 131.317311][ T6460] ? apparmor_capable+0x137/0x1a0 [ 131.317338][ T6460] ? __pfx_do_new_mount+0x10/0x10 [ 131.317358][ T6460] ? ns_capable+0x89/0xe0 [ 131.317390][ T6460] ? user_path_at+0xd4/0x160 [ 131.317415][ T6460] __se_sys_mount+0x31d/0x420 [ 131.317442][ T6460] ? __pfx___se_sys_mount+0x10/0x10 [ 131.317469][ T6460] ? __x64_sys_mount+0x20/0xc0 [ 131.317492][ T6460] do_syscall_64+0xe2/0xf80 [ 131.317512][ T6460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.317528][ T6460] ? trace_irq_disable+0x37/0x100 [ 131.317551][ T6460] ? clear_bhb_loop+0x40/0x90 [ 131.317572][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.317590][ T6460] RIP: 0033:0x7f3e6cd9b58a [ 131.317608][ T6460] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.317622][ T6460] RSP: 002b:00007f3e6dc67e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.317641][ T6460] RAX: ffffffffffffffda RBX: 00007f3e6dc67ee0 RCX: 00007f3e6cd9b58a [ 131.317653][ T6460] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f3e6dc67ea0 [ 131.317665][ T6460] RBP: 0000200000000400 R08: 00007f3e6dc67ee0 R09: 0000000000200001 [ 131.317676][ T6460] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 131.317688][ T6460] R13: 00007f3e6dc67ea0 R14: 00000000000125bb R15: 0000200000000180 [ 131.317731][ T6460] [ 131.317739][ T6460] gfs2: fsid=norecovery.s: Error checking journal for spectator mount. [ 131.938753][ T6466] loop0: detected capacity change from 0 to 32768 [ 131.953756][ T6466] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 131.961839][ T6466] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 131.975662][ T6466] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 131.985680][ T42] gfs2: fsid=loop0.0: jid=0, already locked for use [ 131.992703][ T42] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 132.037503][ T42] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 44ms [ 132.046925][ T42] gfs2: fsid=loop0.0: jid=0: Done [ 132.052404][ T6466] gfs2: fsid=loop0.0: first mount done, others may mount [ 132.621183][ T6470] loop0: detected capacity change from 0 to 32768 [ 132.652331][ T6470] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 132.660312][ T6470] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 132.673773][ T6470] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 132.685336][ T800] gfs2: fsid=loop0.0: jid=0, already locked for use [ 132.692255][ T800] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 132.728104][ T800] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 35ms [ 132.735631][ T800] gfs2: fsid=loop0.0: jid=0: Done [ 132.743225][ T6470] gfs2: fsid=loop0.0: first mount done, others may mount [ 132.867832][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.874939][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 2026/01/27 08:58:38 executed programs: 11 [ 133.317782][ T6474] loop0: detected capacity change from 0 to 32768 [ 133.334380][ T6474] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 133.348469][ T6474] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 133.367223][ T6474] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 133.377195][ T42] gfs2: fsid=loop0.0: jid=0, already locked for use [ 133.384109][ T42] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 133.414015][ T42] kworker/1:1: attempt to access beyond end of device [ 133.414015][ T42] loop0: rw=0, sector=67113728, nr_sectors = 8 limit=32768 [ 133.440366][ T42] gfs2: fsid=loop0.0: jid=0: Failed [ 133.446736][ T6474] gfs2: fsid=loop0.0: error recovering journal 0: -5 [ 133.728614][ T6474] loop0: detected capacity change from 0 to 32768 [ 133.748410][ T6474] gfs2: fsid=norecovery: Trying to join cluster "lock_nolock", "norecovery" [ 133.758510][ T6474] gfs2: fsid=norecovery: Now mounting FS (format 0)... [ 133.775380][ T6474] syz.0.26: attempt to access beyond end of device [ 133.775380][ T6474] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 133.791081][ T6474] gfs2: fsid=norecovery.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 133.806204][ T6474] gfs2: fsid=norecovery.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 133.815507][ T6474] gfs2: fsid=norecovery.s: H: s:SH f:eEcH e:0 p:6474 [syz.0.26] init_journal+0x16d9/0x2260 [ 133.825648][ T6474] gfs2: fsid=norecovery.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 133.834425][ T6474] CPU: 1 UID: 0 PID: 6474 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT(full) [ 133.834449][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 133.834458][ T6474] Call Trace: [ 133.834464][ T6474] [ 133.834471][ T6474] dump_stack_lvl+0xe8/0x150 [ 133.834501][ T6474] gfs2_withdraw+0xc3/0x1b0 [ 133.834525][ T6474] gfs2_jdesc_check+0x17d/0x2f0 [ 133.834555][ T6474] check_journal_clean+0x18d/0x360 [ 133.834581][ T6474] ? __pfx_check_journal_clean+0x10/0x10 [ 133.834605][ T6474] ? init_journal+0x16d9/0x2260 [ 133.834633][ T6474] ? do_raw_spin_unlock+0xf5/0x210 [ 133.834659][ T6474] ? _raw_spin_unlock+0x28/0x50 [ 133.834675][ T6474] ? gfs2_jdesc_find+0xab/0xc0 [ 133.834702][ T6474] init_journal+0x16d9/0x2260 [ 133.834735][ T6474] ? init_inodes+0xdb/0x320 [ 133.834761][ T6474] ? __pfx_init_journal+0x10/0x10 [ 133.834783][ T6474] ? vsnprintf+0xdf1/0xee0 [ 133.834818][ T6474] ? snprintf+0xe8/0x140 [ 133.834843][ T6474] ? init_inodes+0xdb/0x320 [ 133.834864][ T6474] ? __pfx_snprintf+0x10/0x10 [ 133.834890][ T6474] ? gfs2_glock_nq_num+0x13d/0x170 [ 133.834915][ T6474] init_inodes+0xdb/0x320 [ 133.834938][ T6474] gfs2_fill_super+0x1a38/0x21d0 [ 133.834978][ T6474] ? __pfx_gfs2_fill_super+0x10/0x10 [ 133.835004][ T6474] ? init_locking+0xb8/0x210 [ 133.835023][ T6474] ? sb_set_blocksize+0x155/0x240 [ 133.835047][ T6474] ? setup_bdev_super+0x4c1/0x5b0 [ 133.835075][ T6474] get_tree_bdev_flags+0x431/0x4f0 [ 133.835111][ T6474] ? __pfx_gfs2_fill_super+0x10/0x10 [ 133.835145][ T6474] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 133.835168][ T6474] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 133.835202][ T6474] gfs2_get_tree+0x51/0x1e0 [ 133.835236][ T6474] vfs_get_tree+0x92/0x2a0 [ 133.835264][ T6474] do_new_mount+0x341/0xd30 [ 133.835283][ T6474] ? apparmor_capable+0x137/0x1a0 [ 133.835325][ T6474] ? __pfx_do_new_mount+0x10/0x10 [ 133.835347][ T6474] ? ns_capable+0x89/0xe0 [ 133.835376][ T6474] ? user_path_at+0xd4/0x160 [ 133.835413][ T6474] __se_sys_mount+0x31d/0x420 [ 133.835438][ T6474] ? __pfx___se_sys_mount+0x10/0x10 [ 133.835461][ T6474] ? __x64_sys_mount+0x20/0xc0 [ 133.835484][ T6474] do_syscall_64+0xe2/0xf80 [ 133.835502][ T6474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.835518][ T6474] ? trace_irq_disable+0x37/0x100 [ 133.835540][ T6474] ? clear_bhb_loop+0x40/0x90 [ 133.835559][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.835576][ T6474] RIP: 0033:0x7f3e6cd9b58a [ 133.835595][ T6474] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.835609][ T6474] RSP: 002b:00007f3e6dc67e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 133.835629][ T6474] RAX: ffffffffffffffda RBX: 00007f3e6dc67ee0 RCX: 00007f3e6cd9b58a [ 133.835647][ T6474] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f3e6dc67ea0 [ 133.835658][ T6474] RBP: 0000200000000400 R08: 00007f3e6dc67ee0 R09: 0000000000200001 [ 133.835668][ T6474] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 133.835678][ T6474] R13: 00007f3e6dc67ea0 R14: 00000000000125bb R15: 0000200000000180 [ 133.835705][ T6474] [ 133.835712][ T6474] gfs2: fsid=norecovery.s: Error checking journal for spectator mount. [ 134.451299][ T6480] loop0: detected capacity change from 0 to 32768 [ 134.476719][ T6480] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 134.485804][ T6480] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 134.502835][ T6480] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 134.513813][ T42] gfs2: fsid=loop0.0: jid=0, already locked for use [ 134.520631][ T42] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 134.569171][ T42] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 48ms [ 134.577648][ T42] gfs2: fsid=loop0.0: jid=0: Done [ 134.583896][ T6480] gfs2: fsid=loop0.0: first mount done, others may mount [ 135.124163][ T6484] loop0: detected capacity change from 0 to 32768 [ 135.141595][ T6484] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 135.149478][ T6484] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 135.165938][ T6484] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 135.176459][ T42] gfs2: fsid=loop0.0: jid=0, already locked for use [ 135.183539][ T42] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 135.209902][ T42] kworker/1:1: attempt to access beyond end of device [ 135.209902][ T42] loop0: rw=0, sector=67113728, nr_sectors = 8 limit=32768 [ 135.236431][ T42] gfs2: fsid=loop0.0: jid=0: Failed [ 135.241946][ T6484] gfs2: fsid=loop0.0: error recovering journal 0: -5 [ 135.514007][ T6484] loop0: detected capacity change from 0 to 32768 [ 135.527820][ T6484] gfs2: fsid=norecovery: Trying to join cluster "lock_nolock", "norecovery" [ 135.537909][ T6484] gfs2: fsid=norecovery: Now mounting FS (format 0)... [ 135.550913][ T6484] syz.0.28: attempt to access beyond end of device [ 135.550913][ T6484] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 135.567468][ T6484] gfs2: fsid=norecovery.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 135.583799][ T6484] gfs2: fsid=norecovery.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 135.593213][ T6484] gfs2: fsid=norecovery.s: H: s:SH f:eEcH e:0 p:6484 [syz.0.28] init_journal+0x16d9/0x2260 [ 135.603911][ T6484] gfs2: fsid=norecovery.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 135.613423][ T6484] CPU: 1 UID: 0 PID: 6484 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(full) [ 135.613448][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 135.613458][ T6484] Call Trace: [ 135.613466][ T6484] [ 135.613473][ T6484] dump_stack_lvl+0xe8/0x150 [ 135.613503][ T6484] gfs2_withdraw+0xc3/0x1b0 [ 135.613534][ T6484] gfs2_jdesc_check+0x17d/0x2f0 [ 135.613563][ T6484] check_journal_clean+0x18d/0x360 [ 135.613588][ T6484] ? __pfx_check_journal_clean+0x10/0x10 [ 135.613612][ T6484] ? init_journal+0x16d9/0x2260 [ 135.613641][ T6484] ? do_raw_spin_unlock+0xf5/0x210 [ 135.613669][ T6484] ? _raw_spin_unlock+0x28/0x50 [ 135.613687][ T6484] ? gfs2_jdesc_find+0xab/0xc0 [ 135.613721][ T6484] init_journal+0x16d9/0x2260 [ 135.613752][ T6484] ? init_inodes+0xdb/0x320 [ 135.613779][ T6484] ? __pfx_init_journal+0x10/0x10 [ 135.613801][ T6484] ? vsnprintf+0xdf1/0xee0 [ 135.613838][ T6484] ? snprintf+0xe8/0x140 [ 135.613864][ T6484] ? init_inodes+0xdb/0x320 [ 135.613888][ T6484] ? __pfx_snprintf+0x10/0x10 [ 135.613913][ T6484] ? gfs2_glock_nq_num+0x13d/0x170 [ 135.613946][ T6484] init_inodes+0xdb/0x320 [ 135.613970][ T6484] gfs2_fill_super+0x1a38/0x21d0 [ 135.614008][ T6484] ? __pfx_gfs2_fill_super+0x10/0x10 [ 135.614035][ T6484] ? init_locking+0xb8/0x210 [ 135.614056][ T6484] ? sb_set_blocksize+0x155/0x240 [ 135.614081][ T6484] ? setup_bdev_super+0x4c1/0x5b0 [ 135.614112][ T6484] get_tree_bdev_flags+0x431/0x4f0 [ 135.614140][ T6484] ? __pfx_gfs2_fill_super+0x10/0x10 [ 135.614163][ T6484] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 135.614187][ T6484] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 135.614222][ T6484] gfs2_get_tree+0x51/0x1e0 [ 135.614248][ T6484] vfs_get_tree+0x92/0x2a0 [ 135.614276][ T6484] do_new_mount+0x341/0xd30 [ 135.614294][ T6484] ? apparmor_capable+0x137/0x1a0 [ 135.614322][ T6484] ? __pfx_do_new_mount+0x10/0x10 [ 135.614342][ T6484] ? ns_capable+0x89/0xe0 [ 135.614373][ T6484] ? user_path_at+0xd4/0x160 [ 135.614399][ T6484] __se_sys_mount+0x31d/0x420 [ 135.614426][ T6484] ? __pfx___se_sys_mount+0x10/0x10 [ 135.614455][ T6484] ? __x64_sys_mount+0x20/0xc0 [ 135.614478][ T6484] do_syscall_64+0xe2/0xf80 [ 135.614498][ T6484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.614516][ T6484] ? trace_irq_disable+0x37/0x100 [ 135.614538][ T6484] ? clear_bhb_loop+0x40/0x90 [ 135.614560][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.614578][ T6484] RIP: 0033:0x7f3e6cd9b58a [ 135.614596][ T6484] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.614610][ T6484] RSP: 002b:00007f3e6dc67e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.614629][ T6484] RAX: ffffffffffffffda RBX: 00007f3e6dc67ee0 RCX: 00007f3e6cd9b58a [ 135.614642][ T6484] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f3e6dc67ea0 [ 135.614655][ T6484] RBP: 0000200000000400 R08: 00007f3e6dc67ee0 R09: 0000000000200001 [ 135.614666][ T6484] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 135.614678][ T6484] R13: 00007f3e6dc67ea0 R14: 00000000000125bb R15: 0000200000000180 [ 135.614713][ T6484] [ 135.614804][ T6484] gfs2: fsid=norecovery.s: Error checking journal for spectator mount. [ 136.235928][ T6490] loop0: detected capacity change from 0 to 32768 [ 136.253896][ T6490] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 136.263316][ T6490] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 136.276352][ T6490] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 136.285981][ T42] gfs2: fsid=loop0.0: jid=0, already locked for use [ 136.294073][ T42] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 136.333194][ T42] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 39ms [ 136.341475][ T42] gfs2: fsid=loop0.0: jid=0: Done [ 136.346557][ T6490] gfs2: fsid=loop0.0: first mount done, others may mount [ 136.907280][ T6494] loop0: detected capacity change from 0 to 32768 [ 136.943340][ T6494] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 136.951320][ T6494] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 136.965952][ T6494] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 136.979416][ T800] gfs2: fsid=loop0.0: jid=0, already locked for use [ 136.986325][ T800] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 137.020334][ T800] gfs2: fsid=loop0.0: jid=0: Journal head lookup took 34ms [ 137.027838][ T800] gfs2: fsid=loop0.0: jid=0: Done [ 137.033078][ T6494] gfs2: fsid=loop0.0: first mount done, others may mount [ 137.578444][ T6498] loop0: detected capacity change from 0 to 32768 [ 137.594939][ T6498] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 137.607215][ T6498] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 137.623997][ T6498] gfs2: fsid=loop0.0: journal 0 mapped with 10 extents in 0ms [ 137.633288][ T951] gfs2: fsid=loop0.0: jid=0, already locked for use [ 137.639906][ T951] gfs2: fsid=loop0.0: jid=0: Looking at journal... [ 137.665023][ T951] kworker/0:2: attempt to access beyond end of device [ 137.665023][ T951] loop0: rw=0, sector=67113728, nr_sectors = 8 limit=32768 [ 137.692283][ T951] gfs2: fsid=loop0.0: jid=0: Failed [ 137.698348][ T6498] gfs2: fsid=loop0.0: error recovering journal 0: -5 [ 137.984856][ T6498] loop0: detected capacity change from 0 to 32768 [ 138.010614][ T6498] gfs2: fsid=norecovery: Trying to join cluster "lock_nolock", "norecovery" [ 138.019530][ T6498] gfs2: fsid=norecovery: Now mounting FS (format 0)... [ 138.046734][ T6498] syz.0.31: attempt to access beyond end of device [ 138.046734][ T6498] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 138.062926][ T6498] gfs2: fsid=norecovery.s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 138.078183][ T6498] gfs2: fsid=norecovery.s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:2 [ 138.087758][ T6498] gfs2: fsid=norecovery.s: H: s:SH f:eEcH e:0 p:6498 [syz.0.31] init_journal+0x16d9/0x2260 [ 138.098189][ T6498] gfs2: fsid=norecovery.s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 138.107570][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 138.107592][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 138.107603][ T6498] Call Trace: [ 138.107610][ T6498] [ 138.107617][ T6498] dump_stack_lvl+0xe8/0x150 [ 138.107656][ T6498] gfs2_withdraw+0xc3/0x1b0 [ 138.107684][ T6498] gfs2_jdesc_check+0x17d/0x2f0 [ 138.107716][ T6498] check_journal_clean+0x18d/0x360 [ 138.107741][ T6498] ? __pfx_check_journal_clean+0x10/0x10 [ 138.107766][ T6498] ? init_journal+0x16d9/0x2260 [ 138.107796][ T6498] ? do_raw_spin_unlock+0xf5/0x210 [ 138.107826][ T6498] ? _raw_spin_unlock+0x28/0x50 [ 138.107844][ T6498] ? gfs2_jdesc_find+0xab/0xc0 [ 138.107872][ T6498] init_journal+0x16d9/0x2260 [ 138.107908][ T6498] ? init_inodes+0xdb/0x320 [ 138.107935][ T6498] ? __pfx_init_journal+0x10/0x10 [ 138.107957][ T6498] ? vsnprintf+0xdf1/0xee0 [ 138.107992][ T6498] ? snprintf+0xe8/0x140 [ 138.108018][ T6498] ? init_inodes+0xdb/0x320 [ 138.108042][ T6498] ? __pfx_snprintf+0x10/0x10 [ 138.108068][ T6498] ? gfs2_glock_nq_num+0x13d/0x170 [ 138.108097][ T6498] init_inodes+0xdb/0x320 [ 138.108124][ T6498] gfs2_fill_super+0x1a38/0x21d0 [ 138.108163][ T6498] ? __pfx_gfs2_fill_super+0x10/0x10 [ 138.108190][ T6498] ? init_locking+0xb8/0x210 [ 138.108212][ T6498] ? sb_set_blocksize+0x155/0x240 [ 138.108238][ T6498] ? setup_bdev_super+0x4c1/0x5b0 [ 138.108268][ T6498] get_tree_bdev_flags+0x431/0x4f0 [ 138.108295][ T6498] ? __pfx_gfs2_fill_super+0x10/0x10 [ 138.108319][ T6498] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 138.108341][ T6498] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 138.108376][ T6498] gfs2_get_tree+0x51/0x1e0 [ 138.108401][ T6498] vfs_get_tree+0x92/0x2a0 [ 138.108423][ T6498] do_new_mount+0x341/0xd30 [ 138.108439][ T6498] ? apparmor_capable+0x137/0x1a0 [ 138.108462][ T6498] ? __pfx_do_new_mount+0x10/0x10 [ 138.108484][ T6498] ? ns_capable+0x89/0xe0 [ 138.108516][ T6498] ? user_path_at+0xd4/0x160 [ 138.108543][ T6498] __se_sys_mount+0x31d/0x420 [ 138.108571][ T6498] ? __pfx___se_sys_mount+0x10/0x10 [ 138.108597][ T6498] ? __x64_sys_mount+0x20/0xc0 [ 138.108619][ T6498] do_syscall_64+0xe2/0xf80 [ 138.108639][ T6498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.108663][ T6498] ? trace_irq_disable+0x37/0x100 [ 138.108685][ T6498] ? clear_bhb_loop+0x40/0x90 [ 138.108708][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.108725][ T6498] RIP: 0033:0x7f3e6cd9b58a [ 138.108743][ T6498] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.108758][ T6498] RSP: 002b:00007f3e6dc67e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 138.108778][ T6498] RAX: ffffffffffffffda RBX: 00007f3e6dc67ee0 RCX: 00007f3e6cd9b58a [ 138.108792][ T6498] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f3e6dc67ea0 [ 138.108804][ T6498] RBP: 0000200000000400 R08: 00007f3e6dc67ee0 R09: 0000000000200001 [ 138.108817][ T6498] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 138.108828][ T6498] R13: 00007f3e6dc67ea0 R14: 00000000000125bb R15: 0000200000000180 [ 138.108856][ T6498] [ 138.108865][ T6498] gfs2: fsid=norecovery.s: Error checking journal for spectator mount. [ 138.541546][ T6503] ================================================================== [ 138.549647][ T6503] BUG: KASAN: slab-use-after-free in lru_add+0x25b/0xd70 [ 138.556748][ T6503] Read of size 8 at addr ffff88803262f350 by task syz.0.32/6503 [ 138.564375][ T6503] [ 138.566781][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 138.566795][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 138.566801][ T6503] Call Trace: [ 138.566806][ T6503] [ 138.566812][ T6503] dump_stack_lvl+0xe8/0x150 [ 138.566828][ T6503] print_report+0xba/0x230 [ 138.566840][ T6503] ? lru_add+0x25b/0xd70 [ 138.566849][ T6503] kasan_report+0x117/0x150 [ 138.566859][ T6503] ? lru_add+0x25b/0xd70 [ 138.566869][ T6503] kasan_check_range+0x264/0x2c0 [ 138.566879][ T6503] ? lru_add+0x198/0xd70 [ 138.566888][ T6503] lru_add+0x25b/0xd70 [ 138.566897][ T6503] folio_batch_move_lru+0x29a/0x430 [ 138.566907][ T6503] ? __folio_batch_add_and_move+0x11a/0xc50 [ 138.566916][ T6503] ? __pfx_lru_add+0x10/0x10 [ 138.566925][ T6503] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 138.566935][ T6503] ? __pfx_lru_add+0x10/0x10 [ 138.566944][ T6503] __folio_batch_add_and_move+0x510/0xc50 [ 138.566953][ T6503] ? __pfx_lru_add+0x10/0x10 [ 138.566962][ T6503] do_pte_missing+0x2e37/0x3750 [ 138.566980][ T6503] handle_mm_fault+0x1bec/0x3310 [ 138.566996][ T6503] ? handle_mm_fault+0xee/0x3310 [ 138.567009][ T6503] ? __pfx_handle_mm_fault+0x10/0x10 [ 138.567020][ T6503] ? lock_vma_under_rcu+0x45a/0x500 [ 138.567039][ T6503] do_user_addr_fault+0xa73/0x1340 [ 138.567052][ T6503] ? rcu_is_watching+0x15/0xb0 [ 138.567065][ T6503] ? trace_page_fault_user+0x84/0x1c0 [ 138.567077][ T6503] exc_page_fault+0x6a/0xc0 [ 138.567089][ T6503] asm_exc_page_fault+0x26/0x30 [ 138.567098][ T6503] RIP: 0033:0x7f3e6cd694c7 [ 138.567110][ T6503] Code: 4e e0 d9 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 138.567118][ T6503] RSP: 002b:00007fff640611a8 EFLAGS: 00010206 [ 138.567127][ T6503] RAX: 0000200000012540 RBX: 0000000000000004 RCX: 0000000000002b2b [ 138.567134][ T6503] RDX: 00000000000125eb RSI: 00007f3e6c80fca2 RDI: 0000200000022000 [ 138.567141][ T6503] RBP: fffffffffffffffe R08: 0000200000012540 R09: 0000000000000009 [ 138.567148][ T6503] R10: 00000000000125eb R11: 0000000000000002 R12: 0000000000000000 [ 138.567154][ T6503] R13: 0000000000000000 R14: 0000000000021d0d R15: 00007fff64061440 [ 138.567164][ T6503] [ 138.567167][ T6503] [ 138.788249][ T6503] Allocated by task 6498: [ 138.792560][ T6503] kasan_save_track+0x3e/0x80 [ 138.797232][ T6503] __kasan_slab_alloc+0x6c/0x80 [ 138.802333][ T6503] kmem_cache_alloc_noprof+0x2bc/0x650 [ 138.807781][ T6503] gfs2_glock_get+0x27b/0xf40 [ 138.812450][ T6503] gfs2_inode_lookup+0x29f/0xc50 [ 138.817377][ T6503] gfs2_dir_search+0x168/0x220 [ 138.822125][ T6503] gfs2_lookupi+0x45b/0x640 [ 138.826613][ T6503] init_journal+0x592/0x2260 [ 138.831190][ T6503] init_inodes+0xdb/0x320 [ 138.835540][ T6503] gfs2_fill_super+0x1a38/0x21d0 [ 138.840470][ T6503] get_tree_bdev_flags+0x431/0x4f0 [ 138.845572][ T6503] gfs2_get_tree+0x51/0x1e0 [ 138.850060][ T6503] vfs_get_tree+0x92/0x2a0 [ 138.854488][ T6503] do_new_mount+0x341/0xd30 [ 138.858978][ T6503] __se_sys_mount+0x31d/0x420 [ 138.863639][ T6503] do_syscall_64+0xe2/0xf80 [ 138.868130][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.874004][ T6503] [ 138.876309][ T6503] Freed by task 23: [ 138.880092][ T6503] kasan_save_track+0x3e/0x80 [ 138.884763][ T6503] kasan_save_free_info+0x46/0x50 [ 138.889776][ T6503] __kasan_slab_free+0x5c/0x80 [ 138.894528][ T6503] kmem_cache_free+0x180/0x610 [ 138.899307][ T6503] rcu_core+0x7cd/0x1070 [ 138.903533][ T6503] handle_softirqs+0x22a/0x7c0 [ 138.908282][ T6503] run_ksoftirqd+0x36/0x60 [ 138.912684][ T6503] smpboot_thread_fn+0x541/0xa50 [ 138.917620][ T6503] kthread+0x388/0x470 [ 138.921675][ T6503] ret_from_fork+0x51b/0xa40 [ 138.926271][ T6503] ret_from_fork_asm+0x1a/0x30 [ 138.931031][ T6503] [ 138.933347][ T6503] Last potentially related work creation: [ 138.939041][ T6503] kasan_save_stack+0x3e/0x60 [ 138.943716][ T6503] kasan_record_aux_stack+0xbd/0xd0 [ 138.948901][ T6503] call_rcu+0xee/0x890 [ 138.952953][ T6503] gfs2_glock_free+0x3c/0xa0 [ 138.957531][ T6503] gfs2_evict_inode+0x598/0x1050 [ 138.962448][ T6503] evict+0x61e/0xb10 [ 138.966324][ T6503] gfs2_jindex_free+0x3a4/0x450 [ 138.971295][ T6503] init_journal+0x8aa/0x2260 [ 138.975883][ T6503] init_inodes+0xdb/0x320 [ 138.980212][ T6503] gfs2_fill_super+0x1a38/0x21d0 [ 138.985138][ T6503] get_tree_bdev_flags+0x431/0x4f0 [ 138.990284][ T6503] gfs2_get_tree+0x51/0x1e0 [ 138.994772][ T6503] vfs_get_tree+0x92/0x2a0 [ 138.999180][ T6503] do_new_mount+0x341/0xd30 [ 139.003673][ T6503] __se_sys_mount+0x31d/0x420 [ 139.008366][ T6503] do_syscall_64+0xe2/0xf80 [ 139.012856][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.018742][ T6503] [ 139.021060][ T6503] Second to last potentially related work creation: [ 139.027636][ T6503] kasan_save_stack+0x3e/0x60 [ 139.032323][ T6503] kasan_record_aux_stack+0xbd/0xd0 [ 139.037511][ T6503] insert_work+0x3d/0x330 [ 139.041824][ T6503] __queue_work+0xccf/0xf90 [ 139.046312][ T6503] queue_delayed_work_on+0x11a/0x1e0 [ 139.051584][ T6503] do_xmote+0x515/0x760 [ 139.055732][ T6503] glock_work_func+0x2a8/0x580 [ 139.060488][ T6503] process_one_work+0x949/0x15a0 [ 139.065408][ T6503] worker_thread+0xb46/0x1140 [ 139.070074][ T6503] kthread+0x388/0x470 [ 139.074128][ T6503] ret_from_fork+0x51b/0xa40 [ 139.078703][ T6503] ret_from_fork_asm+0x1a/0x30 [ 139.083457][ T6503] [ 139.085765][ T6503] The buggy address belongs to the object at ffff88803262ef88 [ 139.085765][ T6503] which belongs to the cache gfs2_glock(aspace) of size 1224 [ 139.100515][ T6503] The buggy address is located 968 bytes inside of [ 139.100515][ T6503] freed 1224-byte region [ffff88803262ef88, ffff88803262f450) [ 139.114387][ T6503] [ 139.116699][ T6503] The buggy address belongs to the physical page: [ 139.123102][ T6503] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3262c [ 139.131842][ T6503] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 139.140322][ T6503] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 139.147873][ T6503] page_type: f5(slab) [ 139.151839][ T6503] raw: 00fff00000000040 ffff88801e3f0500 dead000000000122 0000000000000000 [ 139.160411][ T6503] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 139.168979][ T6503] head: 00fff00000000040 ffff88801e3f0500 dead000000000122 0000000000000000 [ 139.177637][ T6503] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 139.186294][ T6503] head: 00fff00000000002 ffffea0000c98b01 00000000ffffffff 00000000ffffffff [ 139.194956][ T6503] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 139.203612][ T6503] page dumped because: kasan: bad access detected [ 139.210021][ T6503] page_owner tracks the page as allocated [ 139.215713][ T6503] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6498, tgid 6497 (syz.0.31), ts 138044239239, free_ts 137757996031 [ 139.236102][ T6503] post_alloc_hook+0x231/0x280 [ 139.240863][ T6503] get_page_from_freelist+0x24dc/0x2580 [ 139.246395][ T6503] __alloc_frozen_pages_noprof+0x18d/0x380 [ 139.252186][ T6503] allocate_slab+0x7b/0x660 [ 139.256681][ T6503] refill_objects+0x33a/0x3d0 [ 139.261347][ T6503] __pcs_replace_empty_main+0x2b9/0x620 [ 139.266892][ T6503] kmem_cache_alloc_noprof+0x37d/0x650 [ 139.272358][ T6503] gfs2_glock_get+0x27b/0xf40 [ 139.277031][ T6503] gfs2_inode_lookup+0x29f/0xc50 [ 139.281959][ T6503] init_sb+0xb0d/0x12f0 [ 139.286101][ T6503] gfs2_fill_super+0x16d6/0x21d0 [ 139.291024][ T6503] get_tree_bdev_flags+0x431/0x4f0 [ 139.296127][ T6503] gfs2_get_tree+0x51/0x1e0 [ 139.300617][ T6503] vfs_get_tree+0x92/0x2a0 [ 139.305026][ T6503] do_new_mount+0x341/0xd30 [ 139.309516][ T6503] __se_sys_mount+0x31d/0x420 [ 139.314179][ T6503] page last free pid 6170 tgid 6170 stack trace: [ 139.320484][ T6503] __free_frozen_pages+0xc01/0xd80 [ 139.325586][ T6503] __slab_free+0x263/0x2b0 [ 139.329991][ T6503] qlist_free_all+0x97/0x100 [ 139.334579][ T6503] kasan_quarantine_reduce+0x148/0x160 [ 139.340029][ T6503] __kasan_slab_alloc+0x22/0x80 [ 139.344872][ T6503] kmem_cache_alloc_noprof+0x2bc/0x650 [ 139.350334][ T6503] do_getname+0x2e/0x250 [ 139.354560][ T6503] __se_sys_unlink+0x1e/0x140 [ 139.359224][ T6503] do_syscall_64+0xe2/0xf80 [ 139.363723][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.369619][ T6503] [ 139.371936][ T6503] Memory state around the buggy address: [ 139.377549][ T6503] ffff88803262f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.385594][ T6503] ffff88803262f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.393638][ T6503] >ffff88803262f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.401681][ T6503] ^ [ 139.408344][ T6503] ffff88803262f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.416444][ T6503] ffff88803262f400: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 139.424483][ T6503] ================================================================== [ 139.432526][ T6503] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 139.439703][ T6503] CPU: 0 UID: 0 PID: 6503 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 139.448793][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 139.458833][ T6503] Call Trace: [ 139.462106][ T6503] [ 139.465023][ T6503] vpanic+0x1e0/0x670 [ 139.469001][ T6503] panic+0xc5/0xd0 [ 139.472712][ T6503] ? __pfx_panic+0x10/0x10 [ 139.477117][ T6503] ? lru_add+0x25b/0xd70 [ 139.481353][ T6503] ? lru_add+0x25b/0xd70 [ 139.485585][ T6503] ? lru_add+0x25b/0xd70 [ 139.489808][ T6503] check_panic_on_warn+0x89/0xb0 [ 139.494728][ T6503] ? lru_add+0x25b/0xd70 [ 139.498954][ T6503] end_report+0x6f/0x140 [ 139.503215][ T6503] kasan_report+0x128/0x150 [ 139.507705][ T6503] ? lru_add+0x25b/0xd70 [ 139.511933][ T6503] kasan_check_range+0x264/0x2c0 [ 139.516855][ T6503] ? lru_add+0x198/0xd70 [ 139.521084][ T6503] lru_add+0x25b/0xd70 [ 139.525143][ T6503] folio_batch_move_lru+0x29a/0x430 [ 139.530326][ T6503] ? __folio_batch_add_and_move+0x11a/0xc50 [ 139.536221][ T6503] ? __pfx_lru_add+0x10/0x10 [ 139.540881][ T6503] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 139.546586][ T6503] ? __pfx_lru_add+0x10/0x10 [ 139.551163][ T6503] __folio_batch_add_and_move+0x510/0xc50 [ 139.556867][ T6503] ? __pfx_lru_add+0x10/0x10 [ 139.561444][ T6503] do_pte_missing+0x2e37/0x3750 [ 139.566291][ T6503] handle_mm_fault+0x1bec/0x3310 [ 139.571232][ T6503] ? handle_mm_fault+0xee/0x3310 [ 139.576158][ T6503] ? __pfx_handle_mm_fault+0x10/0x10 [ 139.581442][ T6503] ? lock_vma_under_rcu+0x45a/0x500 [ 139.586641][ T6503] do_user_addr_fault+0xa73/0x1340 [ 139.591918][ T6503] ? rcu_is_watching+0x15/0xb0 [ 139.596674][ T6503] ? trace_page_fault_user+0x84/0x1c0 [ 139.602385][ T6503] exc_page_fault+0x6a/0xc0 [ 139.606880][ T6503] asm_exc_page_fault+0x26/0x30 [ 139.611716][ T6503] RIP: 0033:0x7f3e6cd694c7 [ 139.616119][ T6503] Code: 4e e0 d9 00 01 74 9d 83 f9 c0 0f 87 8f fe ff ff c5 fe 6f 4e 20 48 29 fe 48 83 c7 3f 49 8d 0c 10 48 83 e7 c0 48 01 fe 48 29 f9 a4 c4 c1 7e 7f 00 c4 c1 7e 7f 48 20 e9 0e fd ff ff 0f 1f 80 00 [ 139.635719][ T6503] RSP: 002b:00007fff640611a8 EFLAGS: 00010206 [ 139.641798][ T6503] RAX: 0000200000012540 RBX: 0000000000000004 RCX: 0000000000002b2b [ 139.649755][ T6503] RDX: 00000000000125eb RSI: 00007f3e6c80fca2 RDI: 0000200000022000 [ 139.657712][ T6503] RBP: fffffffffffffffe R08: 0000200000012540 R09: 0000000000000009 [ 139.665667][ T6503] R10: 00000000000125eb R11: 0000000000000002 R12: 0000000000000000 [ 139.673629][ T6503] R13: 0000000000000000 R14: 0000000000021d0d R15: 00007fff64061440 [ 139.681594][ T6503] [ 139.684994][ T6503] Kernel Offset: disabled [ 139.689339][ T6503] Rebooting in 86400 seconds..