Warning: Permanently added '[localhost]:47725' (ED25519) to the list of known hosts. 2026/06/20 05:43:09 parsed 1 programs 2026/06/20 05:43:09 serving rpc on tcp://33779 [ 80.411149][ T5292] cgroup: Unknown subsys name 'net' [ 80.457684][ T5292] cgroup: Unknown subsys name 'cpuset' [ 80.462032][ T5292] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.789047][ T5292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.006560][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.010722][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 86.191896][ T5310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.059309][ T5356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.062580][ T5356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.066792][ T5356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.070709][ T5356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.074262][ T5356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.343371][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.346892][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.350228][ T5370] bridge_slave_0: entered allmulticast mode [ 90.353780][ T5370] bridge_slave_0: entered promiscuous mode [ 90.358315][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.361941][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.365257][ T5370] bridge_slave_1: entered allmulticast mode [ 90.368453][ T5370] bridge_slave_1: entered promiscuous mode [ 90.385476][ T5370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.391538][ T5370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.409346][ T5370] team0: Port device team_slave_0 added [ 90.413681][ T5370] team0: Port device team_slave_1 added [ 90.429001][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.431981][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.444341][ T5370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.449741][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.453101][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.466095][ T5370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.506827][ T5370] hsr_slave_0: entered promiscuous mode [ 90.509885][ T5370] hsr_slave_1: entered promiscuous mode [ 90.582052][ T5370] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.586867][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.590290][ T5370] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.595269][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.598784][ T5370] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.603772][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.607376][ T5370] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.611940][ T5370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.627030][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.630181][ T5370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.633546][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.636974][ T5370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.701759][ T5370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.720230][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.726519][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.738273][ T5370] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.752297][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.755288][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.767331][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.770485][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.209306][ T5370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.269673][ T5370] veth0_vlan: entered promiscuous mode [ 91.284239][ T5370] veth1_vlan: entered promiscuous mode [ 91.314929][ T5370] veth0_macvtap: entered promiscuous mode [ 91.328029][ T5370] veth1_macvtap: entered promiscuous mode [ 91.352693][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.371897][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.389675][ T1149] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.404497][ T1149] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.415539][ T1149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.423533][ T1149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.569319][ T26] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.598639][ T26] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.619193][ T26] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.655055][ T26] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.771214][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.780690][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.797614][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.801006][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.244675][ T804] cfg80211: failed to load regulatory.db 2026/06/20 05:43:24 executed programs: 0 [ 92.486872][ T4655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.491345][ T4655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.495878][ T4655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.499969][ T4655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.503987][ T4655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.876571][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.879897][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.883186][ T5420] bridge_slave_0: entered allmulticast mode [ 92.888748][ T5420] bridge_slave_0: entered promiscuous mode [ 92.893864][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.897128][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.900402][ T5420] bridge_slave_1: entered allmulticast mode [ 92.904990][ T5420] bridge_slave_1: entered promiscuous mode [ 92.928513][ T5420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.934634][ T5420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.951121][ T5420] team0: Port device team_slave_0 added [ 92.955426][ T5420] team0: Port device team_slave_1 added [ 92.971848][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.975125][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.986137][ T5420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.992702][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.996146][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.008137][ T5420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.034045][ T5420] hsr_slave_0: entered promiscuous mode [ 93.037202][ T5420] hsr_slave_1: entered promiscuous mode [ 93.040270][ T5420] debugfs: 'hsr0' already exists in 'hsr' [ 93.044255][ T5420] Cannot create hsr debugfs directory [ 93.539589][ T26] bridge_slave_1: left allmulticast mode [ 93.542574][ T26] bridge_slave_1: left promiscuous mode [ 93.548418][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.552674][ T26] bridge_slave_0: left allmulticast mode [ 93.555977][ T26] bridge_slave_0: left promiscuous mode [ 93.558421][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.620523][ T26] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.630017][ T26] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.634778][ T26] bond0 (unregistering): Released all slaves [ 93.691100][ T26] hsr_slave_0: left promiscuous mode [ 93.698334][ T26] hsr_slave_1: left promiscuous mode [ 93.704424][ T26] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.714095][ T26] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.721889][ T26] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.727712][ T26] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.735045][ T26] veth1_macvtap: left promiscuous mode [ 93.738527][ T26] veth0_macvtap: left promiscuous mode [ 93.742265][ T26] veth1_vlan: left promiscuous mode [ 93.749863][ T26] veth0_vlan: left promiscuous mode [ 93.986887][ T26] team0 (unregistering): Port device team_slave_1 removed [ 94.005345][ T26] team0 (unregistering): Port device team_slave_0 removed [ 94.062591][ T5001] 8021q: adding VLAN 0 to HW filter on device eth2 [ 94.340612][ T5420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.360564][ T5420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.370814][ T5420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.382087][ T5420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.410929][ T5420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.425488][ T5420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.433093][ T5420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.447322][ T5420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.563724][ T4655] Bluetooth: hci0: command tx timeout [ 94.621103][ T5420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.647078][ T5420] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.660632][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.664471][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.686737][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.690122][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.149727][ T5420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.177802][ T5420] veth0_vlan: entered promiscuous mode [ 95.187019][ T5420] veth1_vlan: entered promiscuous mode [ 95.208700][ T5420] veth0_macvtap: entered promiscuous mode [ 95.214767][ T5420] veth1_macvtap: entered promiscuous mode [ 95.226399][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.234697][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.242941][ T1099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.251971][ T1099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.261586][ T1099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.277149][ T1099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.315406][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.324908][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.354769][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.368807][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.771882][ T5476] loop0: detected capacity change from 0 to 32768 [ 95.809177][ T5476] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 95.812964][ T5476] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 95.850064][ T5476] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 95.864702][ T5324] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 95.872223][ T5324] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 95.934411][ T5324] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 62ms [ 95.946129][ T5324] gfs2: fsid=syz:syz.0: jid=0: Done [ 95.955822][ T5476] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 96.032915][ T5476] gfs2: fsid=syz:syz.0: found 1 quota changes [ 96.049804][ T5476] syz.0.17: attempt to access beyond end of device [ 96.049804][ T5476] loop0: rw=2049, sector=68719479344, nr_sectors = 128 limit=32768 [ 96.056076][ T5324] loop0: writeback error on inode 8589934917, offset 0, sector 68719479344 [ 96.056893][ T24] audit: type=1800 audit(1781934207.762:2): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file0" dev="loop0" ino=8589934917 res=0 errno=0 [ 96.071522][ T5476] syz.0.17: attempt to access beyond end of device [ 96.071522][ T5476] loop0: rw=14337, sector=68719479336, nr_sectors = 8 limit=32768 [ 96.078009][ T5476] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 96.082064][ T5476] syz.0.17: attempt to access beyond end of device [ 96.082064][ T5476] loop0: rw=12288, sector=68719479336, nr_sectors = 8 limit=32768 [ 96.135163][ T5476] syz.0.17: attempt to access beyond end of device [ 96.135163][ T5476] loop0: rw=2049, sector=68719479088, nr_sectors = 248 limit=32768 [ 96.144708][ T5476] syz.0.17: attempt to access beyond end of device [ 96.144708][ T5476] loop0: rw=2049, sector=68719479592, nr_sectors = 3616 limit=32768 [ 96.151345][ T5476] syz.0.17: attempt to access beyond end of device [ 96.151345][ T5476] loop0: rw=2049, sector=68719483216, nr_sectors = 208 limit=32768 [ 96.159425][ T5476] syz.0.17: attempt to access beyond end of device [ 96.159425][ T5476] loop0: rw=2049, sector=68719483432, nr_sectors = 2048 limit=32768 [ 96.166836][ T5476] syz.0.17: attempt to access beyond end of device [ 96.166836][ T5476] loop0: rw=2049, sector=68719485480, nr_sectors = 2024 limit=32768 [ 96.174367][ T5476] syz.0.17: attempt to access beyond end of device [ 96.174367][ T5476] loop0: rw=2049, sector=68719487512, nr_sectors = 2048 limit=32768 [ 96.182510][ T5476] syz.0.17: attempt to access beyond end of device [ 96.182510][ T5476] loop0: rw=2049, sector=68719489560, nr_sectors = 2024 limit=32768 [ 96.189877][ T5476] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934917, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 96.196372][ T5476] CPU: 0 UID: 0 PID: 5476 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 96.196393][ T5476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.196401][ T5476] Call Trace: [ 96.196406][ T5476] [ 96.196411][ T5476] dump_stack_lvl+0xe8/0x150 [ 96.196556][ T5476] gfs2_withdraw+0xc3/0x1b0 [ 96.196599][ T5476] gfs2_ail1_empty+0x2c5/0x7b0 [ 96.196616][ T5476] gfs2_flush_revokes+0x5c/0x80 [ 96.196627][ T5476] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 96.196641][ T5476] revoke_lo_before_commit+0x2f/0xea0 [ 96.196656][ T5476] ? rcu_is_watching+0x15/0xb0 [ 96.196672][ T5476] ? do_raw_spin_unlock+0x4d/0x210 [ 96.196687][ T5476] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 96.196699][ T5476] __gfs2_log_flush+0xa21/0x1d90 [ 96.196714][ T5476] ? __pfx___gfs2_log_flush+0x10/0x10 [ 96.196725][ T5476] ? down_write+0x16d/0x200 [ 96.196767][ T5476] ? __pfx_down_write+0x10/0x10 [ 96.196779][ T5476] gfs2_log_flush+0x34/0x50 [ 96.196791][ T5476] gfs2_inplace_reserve+0x171a/0x32b0 [ 96.196811][ T5476] ? __pfx_gfs2_inplace_reserve+0x10/0x10 [ 96.196823][ T5476] ? count_memcg_event_mm+0x21/0x260 [ 96.196835][ T5476] ? rcu_is_watching+0x15/0xb0 [ 96.196850][ T5476] gfs2_iomap_begin+0x828/0x12b0 [ 96.196871][ T5476] ? __pfx_gfs2_iomap_begin+0x10/0x10 [ 96.196890][ T5476] ? __pfx_handle_mm_fault+0x10/0x10 [ 96.196902][ T5476] ? __pfx_gfs2_iomap_begin+0x10/0x10 [ 96.196917][ T5476] iomap_iter+0x5f5/0xf80 [ 96.196936][ T5476] iomap_file_buffered_write+0x262/0xbb0 [ 96.196957][ T5476] ? inode_dio_wait+0x7f/0x270 [ 96.196969][ T5476] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 96.196993][ T5476] ? inode_dio_wait+0x1b6/0x270 [ 96.197009][ T5476] ? inode_go_held+0xe7/0x1f0 [ 96.197021][ T5476] ? gfs2_glock_wait+0x20f/0x2a0 [ 96.197035][ T5476] gfs2_file_buffered_write+0x4af/0x7f0 [ 96.197048][ T5476] ? gfs2_file_write_iter+0x991/0x1170 [ 96.197066][ T5476] gfs2_file_write_iter+0x991/0x1170 [ 96.197083][ T5476] ? lock_release+0x4b/0x3c0 [ 96.197094][ T5476] ? __futex_hash+0x317/0x750 [ 96.197106][ T5476] ? futex_hash+0x4e/0x2b0 [ 96.197117][ T5476] ? vfs_write+0x22b/0xba0 [ 96.197133][ T5476] ? rcu_is_watching+0x15/0xb0 [ 96.197145][ T5476] ? __pfx_gfs2_file_write_iter+0x10/0x10 [ 96.197161][ T5476] ? gfs2_file_write_iter+0x991/0x1170 [ 96.197179][ T5476] vfs_write+0x612/0xba0 [ 96.197197][ T5476] ? __pfx_vfs_write+0x10/0x10 [ 96.197212][ T5476] ? __pfx_do_futex+0x10/0x10 [ 96.197230][ T5476] ksys_write+0x150/0x270 [ 96.197239][ T5476] ? __pfx_ksys_write+0x10/0x10 [ 96.197252][ T5476] ? rcu_is_watching+0x15/0xb0 [ 96.197263][ T5476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.197276][ T5476] do_syscall_64+0x174/0x580 [ 96.197292][ T5476] ? trace_irq_disable+0x3b/0x140 [ 96.197310][ T5476] ? clear_bhb_loop+0x40/0x90 [ 96.197322][ T5476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.197335][ T5476] RIP: 0033:0x7f4dea99ce59 [ 96.197348][ T5476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.197360][ T5476] RSP: 002b:00007ffd2c1b0b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 96.197373][ T5476] RAX: ffffffffffffffda RBX: 00007f4deac15fa0 RCX: 00007f4dea99ce59 [ 96.197383][ T5476] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000004 [ 96.197391][ T5476] RBP: 00007f4deaa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 96.197399][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.197406][ T5476] R13: 00007f4deac15fac R14: 00007f4deac15fa0 R15: 00007f4deac15fa0 [ 96.197416][ T5476] [ 96.197421][ T5476] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 96.371884][ T5476] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI [ 96.377913][ T5476] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 96.381778][ T5476] CPU: 0 UID: 0 PID: 5476 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 96.385812][ T5476] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.390960][ T5476] RIP: 0010:do_raw_spin_lock+0x73/0x2f0 [ 96.393922][ T5476] Code: c7 44 24 30 d0 83 a2 81 4c 8d 64 24 20 49 c1 ec 03 48 b8 f1 f1 f1 f1 f8 f3 f3 f3 49 89 04 14 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 f3 01 00 00 41 8b 06 3d ad 4e ad de 0f 85 [ 96.402137][ T5476] RSP: 0018:ffffc90003797a80 EFLAGS: 00010203 [ 96.405127][ T5476] RAX: 0000000000000004 RBX: 0000000000000020 RCX: 0000000080000002 [ 96.409659][ T5476] RDX: dffffc0000000000 RSI: ffffffff8c296400 RDI: 0000000000000020 [ 96.413148][ T5476] RBP: ffffc90003797b30 R08: 0000000000000001 R09: 0000000000000000 [ 96.416648][ T5476] R10: dffffc0000000000 R11: ffffed1007fdb805 R12: 1ffff920006f2f54 [ 96.420256][ T5476] R13: 0000000000000000 R14: 0000000000000024 R15: dffffc0000000000 [ 96.424083][ T5476] FS: 0000555585a45500(0000) GS:ffff88808c848000(0000) knlGS:0000000000000000 [ 96.428292][ T5476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.431330][ T5476] CR2: 00002000006cb000 CR3: 000000003e1b2000 CR4: 0000000000352ef0 [ 96.434944][ T5476] Call Trace: [ 96.436613][ T5476] [ 96.438063][ T5476] ? lock_acquire+0x5f/0x350 [ 96.440315][ T5476] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 96.442757][ T5476] ? rcu_is_watching+0x15/0xb0 [ 96.444893][ T5476] gfs2_glock_dq+0xbe/0xb40 [ 96.447087][ T5476] ? do_raw_spin_lock+0x12b/0x2f0 [ 96.449754][ T5476] ? rcu_is_watching+0x15/0xb0 [ 96.452175][ T5476] ? __pfx_gfs2_glock_dq+0x10/0x10 [ 96.454387][ T5476] ? do_raw_spin_unlock+0x4d/0x210 [ 96.456683][ T5476] ? _raw_spin_unlock+0x28/0x50 [ 96.459012][ T5476] ? lockref_put_or_lock+0x71/0xc0 [ 96.461500][ T5476] ? gfs2_glock_put+0x2b/0x160 [ 96.463974][ T5476] gfs2_glock_dq_uninit+0x25/0xb0 [ 96.466286][ T5476] gfs2_seek_data+0x176/0x250 [ 96.468381][ T5476] ? __pfx_gfs2_seek_data+0x10/0x10 [ 96.470685][ T5476] ? do_futex+0x458/0x4e0 [ 96.472725][ T5476] ? __pfx_do_futex+0x10/0x10 [ 96.475116][ T5476] gfs2_llseek+0x1c1/0x270 [ 96.477340][ T5476] ? __se_sys_futex+0x3a8/0x450 [ 96.479586][ T5476] ? __pfx_gfs2_llseek+0x10/0x10 [ 96.481851][ T5476] ? __pfx___se_sys_futex+0x10/0x10 [ 96.484191][ T5476] ? rcu_is_watching+0x15/0xb0 [ 96.486394][ T5476] __x64_sys_lseek+0x14f/0x1e0 [ 96.488783][ T5476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.491742][ T5476] do_syscall_64+0x174/0x580 [ 96.493748][ T5476] ? trace_irq_disable+0x3b/0x140 [ 96.495829][ T5476] ? clear_bhb_loop+0x40/0x90 [ 96.497743][ T5476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.500385][ T5476] RIP: 0033:0x7f4dea99ce59 [ 96.502572][ T5476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.511813][ T5476] RSP: 002b:00007ffd2c1b0b78 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 96.515342][ T5476] RAX: ffffffffffffffda RBX: 00007f4deac15fa0 RCX: 00007f4dea99ce59 [ 96.518783][ T5476] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000005 [ 96.522828][ T5476] RBP: 00007f4deaa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 96.526834][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.530252][ T5476] R13: 00007f4deac15fac R14: 00007f4deac15fa0 R15: 00007f4deac15fa0 [ 96.533744][ T5476] [ 96.536005][ T5476] Modules linked in: [ 96.539828][ T5476] ---[ end trace 0000000000000000 ]--- [ 96.542449][ T5476] RIP: 0010:do_raw_spin_lock+0x73/0x2f0 [ 96.545365][ T5476] Code: c7 44 24 30 d0 83 a2 81 4c 8d 64 24 20 49 c1 ec 03 48 b8 f1 f1 f1 f1 f8 f3 f3 f3 49 89 04 14 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 f3 01 00 00 41 8b 06 3d ad 4e ad de 0f 85 [ 96.554035][ T5476] RSP: 0018:ffffc90003797a80 EFLAGS: 00010203 [ 96.556725][ T5476] RAX: 0000000000000004 RBX: 0000000000000020 RCX: 0000000080000002 [ 96.561028][ T5476] RDX: dffffc0000000000 RSI: ffffffff8c296400 RDI: 0000000000000020 [ 96.565276][ T5476] RBP: ffffc90003797b30 R08: 0000000000000001 R09: 0000000000000000 [ 96.568705][ T5476] R10: dffffc0000000000 R11: ffffed1007fdb805 R12: 1ffff920006f2f54 [ 96.572167][ T5476] R13: 0000000000000000 R14: 0000000000000024 R15: dffffc0000000000 [ 96.576365][ T5476] FS: 0000555585a45500(0000) GS:ffff88808c848000(0000) knlGS:0000000000000000 [ 96.580496][ T5476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.583530][ T5476] CR2: 00002000006cb000 CR3: 000000003e1b2000 CR4: 0000000000352ef0 [ 96.587300][ T5476] Kernel panic - not syncing: Fatal exception [ 96.591037][ T5476] Kernel Offset: disabled [ 96.593104][ T5476] Rebooting in 86400 seconds..