[ 86.219483][ T805] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:62361' (ED25519) to the list of known hosts.
2026/01/02 18:36:38 parsed 1 programs
[ 93.061071][ T5561] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 94.795821][ T4684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.798710][ T4684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.801428][ T4684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.804111][ T4684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.815316][ T4684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.010033][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.012696][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.033708][ T1049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 95.038443][ T1049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.901101][ T5603] chnl_net:caif_netlink_parms(): no params data found
[ 95.944494][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.947256][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.949661][ T5603] bridge_slave_0: entered allmulticast mode
[ 95.952337][ T5603] bridge_slave_0: entered promiscuous mode
[ 95.955755][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.958238][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.960728][ T5603] bridge_slave_1: entered allmulticast mode
[ 95.963405][ T5603] bridge_slave_1: entered promiscuous mode
[ 95.979824][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.984145][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.997025][ T5603] team0: Port device team_slave_0 added
[ 96.000116][ T5603] team0: Port device team_slave_1 added
[ 96.011884][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.014343][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 96.023251][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.027693][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.030039][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 96.038853][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.057323][ T5603] hsr_slave_0: entered promiscuous mode
[ 96.059643][ T5603] hsr_slave_1: entered promiscuous mode
[ 96.408911][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.414091][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.426798][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.435779][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.512609][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.531227][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.541810][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.544270][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.566594][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.568989][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.739982][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.785500][ T5603] veth0_vlan: entered promiscuous mode
[ 96.795922][ T5603] veth1_vlan: entered promiscuous mode
[ 96.823326][ T5603] veth0_macvtap: entered promiscuous mode
[ 96.838120][ T5603] veth1_macvtap: entered promiscuous mode
[ 96.855692][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 96.864140][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 96.882313][ T1317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.891907][ T1317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.894886][ T1317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 96.916140][ T1317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.060184][ T1049] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.187680][ T1049] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.275774][ T1049] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.362783][ T1049] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/01/02 18:36:46 executed programs: 0
[ 99.363573][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.368527][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.371128][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.373806][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.376759][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.512971][ T5727] chnl_net:caif_netlink_parms(): no params data found
[ 99.547504][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.549954][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.552428][ T5727] bridge_slave_0: entered allmulticast mode
[ 99.555540][ T5727] bridge_slave_0: entered promiscuous mode
[ 99.558676][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.561152][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.563533][ T5727] bridge_slave_1: entered allmulticast mode
[ 99.566519][ T5727] bridge_slave_1: entered promiscuous mode
[ 99.580493][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.585446][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.605985][ T5727] team0: Port device team_slave_0 added
[ 99.608974][ T5727] team0: Port device team_slave_1 added
[ 99.620902][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.623236][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.632460][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.636898][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.639216][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 99.647932][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.667514][ T5727] hsr_slave_0: entered promiscuous mode
[ 99.669796][ T5727] hsr_slave_1: entered promiscuous mode
[ 99.671927][ T5727] debugfs: 'hsr0' already exists in 'hsr'
[ 99.673841][ T5727] Cannot create hsr debugfs directory
[ 99.908949][ T1049] bridge_slave_1: left allmulticast mode
[ 99.910959][ T1049] bridge_slave_1: left promiscuous mode
[ 99.912961][ T1049] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.926532][ T1049] bridge_slave_0: left allmulticast mode
[ 99.928508][ T1049] bridge_slave_0: left promiscuous mode
[ 99.930518][ T1049] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.140297][ T1049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.144212][ T1049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.148128][ T1049] bond0 (unregistering): Released all slaves
[ 100.201223][ T1049] hsr_slave_0: left promiscuous mode
[ 100.205316][ T1049] hsr_slave_1: left promiscuous mode
[ 100.213842][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.217911][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.229976][ T1049] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.232516][ T1049] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.252399][ T1049] veth1_macvtap: left promiscuous mode
[ 100.254399][ T1049] veth0_macvtap: left promiscuous mode
[ 100.266485][ T1049] veth1_vlan: left promiscuous mode
[ 100.268399][ T1049] veth0_vlan: left promiscuous mode
[ 100.471135][ T1049] team0 (unregistering): Port device team_slave_1 removed
[ 100.480769][ T1049] team0 (unregistering): Port device team_slave_0 removed
[ 100.728165][ T5727] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.738410][ T5727] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.755691][ T5727] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.767099][ T5727] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.057629][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.076426][ T5727] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.083136][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.085635][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.111969][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.114393][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.162639][ T5727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 101.180173][ T5727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 101.311800][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.330141][ T5727] veth0_vlan: entered promiscuous mode
[ 101.336106][ T5727] veth1_vlan: entered promiscuous mode
[ 101.349021][ T5727] veth0_macvtap: entered promiscuous mode
[ 101.352749][ T5727] veth1_macvtap: entered promiscuous mode
[ 101.363758][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.370503][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.376614][ T1072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.379538][ T1072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.382461][ T1072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.398903][ T1072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.415521][ T46] Bluetooth: hci0: command tx timeout
[ 101.424597][ T1072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.431950][ T1072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.446497][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.449160][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.633741][ T5771] loop0: detected capacity change from 0 to 32768
[ 101.649049][ T5771] gfs2: fsid=.: Trying to join cluster "lock_nolock", "."
[ 101.651504][ T5771] gfs2: fsid=.: Now mounting FS (format 1801)...
[ 101.668111][ T5771] syz.0.16: attempt to access beyond end of device
[ 101.668111][ T5771] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 101.682837][ T5771] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 101.688269][ T5771] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4
[ 101.691059][ T5771] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5771 [syz.0.16] init_journal+0x19a3/0x2170
[ 101.694190][ T5771] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 101.697253][ T5771] CPU: 0 UID: 0 PID: 5771 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full)
[ 101.697262][ T5771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 101.697266][ T5771] Call Trace:
[ 101.697269][ T5771]
[ 101.697272][ T5771] dump_stack_lvl+0xe8/0x150
[ 101.697283][ T5771] gfs2_withdraw+0xc3/0x1b0
[ 101.697294][ T5771] gfs2_jdesc_check+0x17d/0x2f0
[ 101.697302][ T5771] check_journal_clean+0x158/0x310
[ 101.697312][ T5771] ? __pfx_check_journal_clean+0x10/0x10
[ 101.697322][ T5771] ? init_journal+0x19a3/0x2170
[ 101.697334][ T5771] ? do_raw_spin_unlock+0x4d/0x240
[ 101.697343][ T5771] ? _raw_spin_unlock+0x28/0x50
[ 101.697360][ T5771] ? gfs2_jdesc_find+0xab/0xc0
[ 101.697367][ T5771] init_journal+0x19a3/0x2170
[ 101.697379][ T5771] ? init_inodes+0xdb/0x320
[ 101.697388][ T5771] ? vsnprintf+0x38b/0xee0
[ 101.697396][ T5771] ? __pfx_init_journal+0x10/0x10
[ 101.697405][ T5771] ? vsnprintf+0xdf1/0xee0
[ 101.697416][ T5771] ? snprintf+0xda/0x120
[ 101.697424][ T5771] ? init_inodes+0xdb/0x320
[ 101.697433][ T5771] ? __pfx_snprintf+0x10/0x10
[ 101.697441][ T5771] ? gfs2_glock_nq_num+0x13d/0x170
[ 101.697449][ T5771] init_inodes+0xdb/0x320
[ 101.697458][ T5771] gfs2_fill_super+0x1a08/0x21b0
[ 101.697472][ T5771] ? __pfx_gfs2_fill_super+0x10/0x10
[ 101.697482][ T5771] ? init_locking+0xb8/0x210
[ 101.697490][ T5771] ? sb_set_blocksize+0x155/0x240
[ 101.697498][ T5771] ? setup_bdev_super+0x4c1/0x5b0
[ 101.697509][ T5771] get_tree_bdev_flags+0x40e/0x4d0
[ 101.697518][ T5771] ? __pfx_gfs2_fill_super+0x10/0x10
[ 101.697526][ T5771] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 101.697535][ T5771] ? __pfx_vfs_parse_comma_sep+0x10/0x10
[ 101.697547][ T5771] gfs2_get_tree+0x51/0x1e0
[ 101.697561][ T5771] vfs_get_tree+0x92/0x2a0
[ 101.697571][ T5771] do_new_mount+0x302/0xa10
[ 101.697578][ T5771] ? apparmor_capable+0x137/0x1a0
[ 101.697588][ T5771] ? __pfx_do_new_mount+0x10/0x10
[ 101.697595][ T5771] ? ns_capable+0x8a/0xf0
[ 101.697602][ T5771] ? kmem_cache_free+0x197/0x620
[ 101.697615][ T5771] __se_sys_mount+0x313/0x410
[ 101.697624][ T5771] ? __pfx___se_sys_mount+0x10/0x10
[ 101.697632][ T5771] ? __x64_sys_mount+0x20/0xc0
[ 101.697640][ T5771] do_syscall_64+0xec/0xf80
[ 101.697647][ T5771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.697653][ T5771] ? trace_irq_disable+0x37/0x100
[ 101.697661][ T5771] ? clear_bhb_loop+0x60/0xb0
[ 101.697668][ T5771] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 101.697674][ T5771] RIP: 0033:0x7f0d63d900ca
[ 101.697682][ T5771] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 101.697687][ T5771] RSP: 002b:00007f0d64bafe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 101.697695][ T5771] RAX: ffffffffffffffda RBX: 00007f0d64bafef0 RCX: 00007f0d63d900ca
[ 101.697700][ T5771] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f0d64bafeb0
[ 101.697704][ T5771] RBP: 0000200000000000 R08: 00007f0d64bafef0 R09: 0000000000208c1b
[ 101.697708][ T5771] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100
[ 101.697712][ T5771] R13: 00007f0d64bafeb0 R14: 0000000000012754 R15: 00002000000128c0
[ 101.697723][ T5771]
[ 101.697725][ T5771] gfs2: fsid=..s: Error checking journal for spectator mount.
[ 101.921685][ T77] ==================================================================
[ 101.924468][ T77] BUG: KASAN: slab-use-after-free in folio_evictable+0xe4/0x250
[ 101.927109][ T77] Read of size 8 at addr ffff8880114253a0 by task kswapd0/77
[ 101.930261][ T77]
[ 101.931112][ T77] CPU: 0 UID: 0 PID: 77 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full)
[ 101.931121][ T77] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 101.931125][ T77] Call Trace:
[ 101.931129][ T77]
[ 101.931132][ T77] dump_stack_lvl+0xe8/0x150
[ 101.931142][ T77] print_report+0xca/0x240
[ 101.931149][ T77] ? folio_evictable+0xe4/0x250
[ 101.931156][ T77] kasan_report+0x118/0x150
[ 101.931163][ T77] ? folio_evictable+0xe4/0x250
[ 101.931171][ T77] kasan_check_range+0x2b0/0x2c0
[ 101.931177][ T77] ? folio_evictable+0x1c/0x250
[ 101.931184][ T77] folio_evictable+0xe4/0x250
[ 101.931192][ T77] evict_folios+0x1af9/0x57f0
[ 101.931207][ T77] ? __pfx_evict_folios+0x10/0x10
[ 101.931216][ T77] ? list_lru_count_one+0x264/0x2c0
[ 101.931226][ T77] ? __lock_acquire+0x6b6/0x2cf0
[ 101.931234][ T77] ? __lock_acquire+0x6b6/0x2cf0
[ 101.931241][ T77] ? mem_cgroup_get_nr_swap_pages+0x32/0x110
[ 101.931247][ T77] ? get_swappiness+0x358/0x3c0
[ 101.931256][ T77] try_to_shrink_lruvec+0x8a3/0xb50
[ 101.931269][ T77] shrink_one+0x25c/0x720
[ 101.931279][ T77] ? shrink_node+0x2d3f/0x35b0
[ 101.931288][ T77] shrink_node+0x2f7d/0x35b0
[ 101.931298][ T77] ? shrink_node+0x2d3f/0x35b0
[ 101.931307][ T77] ? __lock_acquire+0x6b6/0x2cf0
[ 101.931314][ T77] ? percpu_ref_put+0x19/0x180
[ 101.931320][ T77] ? percpu_ref_put+0x19/0x180
[ 101.931327][ T77] ? __pfx_shrink_node+0x10/0x10
[ 101.931335][ T77] ? percpu_ref_put+0x19/0x180
[ 101.931342][ T77] ? mem_cgroup_iter+0x420/0x460
[ 101.931349][ T77] ? mem_cgroup_iter+0x3b/0x460
[ 101.931356][ T77] kswapd+0x145a/0x2820
[ 101.931366][ T77] ? kswapd+0x92a/0x2820
[ 101.931374][ T77] ? __pfx_kswapd+0x10/0x10
[ 101.931381][ T77] ? __lock_acquire+0x6b6/0x2cf0
[ 101.931387][ T77] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 101.931395][ T77] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 101.931407][ T77] ? __pfx_autoremove_wake_function+0x10/0x10
[ 101.931415][ T77] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 101.931425][ T77] ? __kthread_parkme+0x7b/0x200
[ 101.931433][ T77] ? __kthread_parkme+0x1a1/0x200
[ 101.931440][ T77] kthread+0x711/0x8a0
[ 101.931448][ T77] ? __pfx_kswapd+0x10/0x10
[ 101.931454][ T77] ? __pfx_kthread+0x10/0x10
[ 101.931462][ T77] ? _raw_spin_unlock_irq+0x23/0x50
[ 101.931470][ T77] ? __pfx_kthread+0x10/0x10
[ 101.931478][ T77] ret_from_fork+0x510/0xa50
[ 101.931484][ T77] ? __pfx_ret_from_fork+0x10/0x10
[ 101.931489][ T77] ? __switch_to+0xc9e/0x1480
[ 101.931499][ T77] ? __pfx_kthread+0x10/0x10
[ 101.931507][ T77] ret_from_fork_asm+0x1a/0x30
[ 101.931517][ T77]
[ 101.931520][ T77]
[ 102.020327][ T77] Allocated by task 5771:
[ 102.021831][ T77] kasan_save_track+0x3e/0x80
[ 102.023461][ T77] __kasan_slab_alloc+0x6c/0x80
[ 102.025165][ T77] kmem_cache_alloc_noprof+0x37d/0x710
[ 102.027058][ T77] gfs2_glock_get+0x263/0xf10
[ 102.028683][ T77] gfs2_inode_lookup+0x270/0xbe0
[ 102.030402][ T77] gfs2_dir_search+0x168/0x220
[ 102.032070][ T77] gfs2_lookupi+0x3d9/0x5a0
[ 102.033651][ T77] init_journal+0x553/0x2170
[ 102.035255][ T77] init_inodes+0xdb/0x320
[ 102.036760][ T77] gfs2_fill_super+0x1a08/0x21b0
[ 102.038475][ T77] get_tree_bdev_flags+0x40e/0x4d0
[ 102.040234][ T77] gfs2_get_tree+0x51/0x1e0
[ 102.041831][ T77] vfs_get_tree+0x92/0x2a0
[ 102.043386][ T77] do_new_mount+0x302/0xa10
[ 102.044962][ T77] __se_sys_mount+0x313/0x410
[ 102.046602][ T77] do_syscall_64+0xec/0xf80
[ 102.048177][ T77] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.050233][ T77]
[ 102.051037][ T77] Freed by task 15:
[ 102.052316][ T77] kasan_save_track+0x3e/0x80
[ 102.053911][ T77] kasan_save_free_info+0x46/0x50
[ 102.055598][ T77] __kasan_slab_free+0x5c/0x80
[ 102.057209][ T77] kmem_cache_free+0x197/0x620
[ 102.058824][ T77] rcu_core+0xc8e/0x1720
[ 102.060242][ T77] handle_softirqs+0x22b/0x7c0
[ 102.061861][ T77] run_ksoftirqd+0x36/0x60
[ 102.063367][ T77] smpboot_thread_fn+0x542/0xa60
[ 102.065034][ T77] kthread+0x711/0x8a0
[ 102.066419][ T77] ret_from_fork+0x510/0xa50
[ 102.067988][ T77] ret_from_fork_asm+0x1a/0x30
[ 102.069616][ T77]
[ 102.070440][ T77] Last potentially related work creation:
[ 102.072353][ T77] kasan_save_stack+0x3e/0x60
[ 102.073953][ T77] kasan_record_aux_stack+0xbd/0xd0
[ 102.075709][ T77] call_rcu+0xee/0x890
[ 102.077090][ T77] gfs2_glock_free+0x3c/0xa0
[ 102.078677][ T77] gfs2_evict_inode+0xae7/0x1000
[ 102.080341][ T77] evict+0x5f4/0xae0
[ 102.081682][ T77] gfs2_jindex_free+0x39c/0x440
[ 102.083319][ T77] init_journal+0x865/0x2170
[ 102.084884][ T77] init_inodes+0xdb/0x320
[ 102.086352][ T77] gfs2_fill_super+0x1a08/0x21b0
[ 102.088028][ T77] get_tree_bdev_flags+0x40e/0x4d0
[ 102.089771][ T77] gfs2_get_tree+0x51/0x1e0
[ 102.091269][ T77] vfs_get_tree+0x92/0x2a0
[ 102.092765][ T77] do_new_mount+0x302/0xa10
[ 102.094309][ T77] __se_sys_mount+0x313/0x410
[ 102.095897][ T77] do_syscall_64+0xec/0xf80
[ 102.097442][ T77] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 102.099420][ T77]
[ 102.100241][ T77] Second to last potentially related work creation:
[ 102.102435][ T77] kasan_save_stack+0x3e/0x60
[ 102.104019][ T77] kasan_record_aux_stack+0xbd/0xd0
[ 102.105780][ T77] insert_work+0x3d/0x330
[ 102.107241][ T77] __queue_work+0xcd0/0xf90
[ 102.108778][ T77] queue_delayed_work_on+0x11a/0x1d0
[ 102.110574][ T77] do_xmote+0x514/0x750
[ 102.112003][ T77] glock_work_func+0x2a8/0x580
[ 102.113633][ T77] process_scheduled_works+0xad1/0x1770
[ 102.115482][ T77] worker_thread+0x8a0/0xda0
[ 102.117042][ T77] kthread+0x711/0x8a0
[ 102.118429][ T77] ret_from_fork+0x510/0xa50
[ 102.119993][ T77] ret_from_fork_asm+0x1a/0x30
[ 102.121624][ T77]
[ 102.122447][ T77] The buggy address belongs to the object at ffff888011424fd8
[ 102.122447][ T77] which belongs to the cache gfs2_glock(aspace) of size 1224
[ 102.127263][ T77] The buggy address is located 968 bytes inside of
[ 102.127263][ T77] freed 1224-byte region [ffff888011424fd8, ffff8880114254a0)
[ 102.131803][ T77]
[ 102.132624][ T77] The buggy address belongs to the physical page:
[ 102.134770][ T77] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11424
[ 102.137661][ T77] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 102.140456][ T77] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 102.142961][ T77] page_type: f5(slab)
[ 102.144314][ T77] raw: 00fff00000000040 ffff888031b4c8c0 dead000000000122 0000000000000000
[ 102.147175][ T77] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000
[ 102.150026][ T77] head: 00fff00000000040 ffff888031b4c8c0 dead000000000122 0000000000000000
[ 102.152894][ T77] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000
[ 102.155764][ T77] head: 00fff00000000002 ffffea0000450901 00000000ffffffff 00000000ffffffff
[ 102.158643][ T77] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 102.161519][ T77] page dumped because: kasan: bad access detected
[ 102.163661][ T77] page_owner tracks the page as allocated
[ 102.165579][ T77] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5771, tgid 5770 (syz.0.16), ts 101660520864, free_ts 101644579564
[ 102.172181][ T77] post_alloc_hook+0x234/0x290
[ 102.173857][ T77] get_page_from_freelist+0x24e0/0x2580
[ 102.175761][ T77] __alloc_frozen_pages_noprof+0x181/0x370
[ 102.177781][ T77] alloc_pages_mpol+0x232/0x4a0
[ 102.179465][ T77] allocate_slab+0x86/0x3b0
[ 102.181042][ T77] ___slab_alloc+0xe53/0x1820
[ 102.182648][ T77] __slab_alloc+0x65/0x100
[ 102.184138][ T77] kmem_cache_alloc_noprof+0x40f/0x710
[ 102.185969][ T77] gfs2_glock_get+0x263/0xf10
[ 102.187569][ T77] gfs2_inode_lookup+0x270/0xbe0
[ 102.189239][ T77] init_sb+0xa30/0x12c0
[ 102.190651][ T77] gfs2_fill_super+0x16a6/0x21b0
[ 102.192294][ T77] get_tree_bdev_flags+0x40e/0x4d0
[ 102.194024][ T77] gfs2_get_tree+0x51/0x1e0
[ 102.195562][ T77] vfs_get_tree+0x92/0x2a0
[ 102.197070][ T77] do_new_mount+0x302/0xa10
[ 102.198620][ T77] page last free pid 5771 tgid 5770 stack trace:
[ 102.200728][ T77] __free_frozen_pages+0xbc8/0xd30
[ 102.202469][ T77] stack_depot_save_flags+0x40e/0x810
[ 102.204268][ T77] kasan_save_track+0x4f/0x80
[ 102.205855][ T77] __kasan_slab_alloc+0x6c/0x80
[ 102.207498][ T77] kmem_cache_alloc_noprof+0x37d/0x710
[ 102.209328][ T77] __kernfs_new_node+0xdc/0x8a0
[ 102.210971][ T77] kernfs_new_node+0x102/0x210
[ 102.212590][ T77] kernfs_create_dir_ns+0x44/0x130
[ 102.214322][ T77] sysfs_create_dir_ns+0x123/0x280
[ 102.216038][ T77] kobject_add_internal+0x6ab/0xcc0
[ 102.217805][ T77] kobject_init_and_add+0x125/0x190
[ 102.219548][ T77] gfs2_sys_fs_add+0x234/0x450
[ 102.221175][ T77] gfs2_fill_super+0x1388/0x21b0
[ 102.222852][ T77] get_tree_bdev_flags+0x40e/0x4d0
[ 102.224535][ T77] gfs2_get_tree+0x51/0x1e0
[ 102.226081][ T77] vfs_get_tree+0x92/0x2a0
[ 102.227561][ T77]
[ 102.228370][ T77] Memory state around the buggy address:
[ 102.230205][ T77] ffff888011425280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 102.232833][ T77] ffff888011425300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 102.235468][ T77] >ffff888011425380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 102.238077][ T77] ^
[ 102.239729][ T77] ffff888011425400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 102.242339][ T77] ffff888011425480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 102.244951][ T77] ==================================================================
[ 102.247631][ T77] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.250034][ T77] CPU: 0 UID: 0 PID: 77 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full)
[ 102.252957][ T77] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 102.256514][ T77] Call Trace:
[ 102.257671][ T77]
[ 102.258685][ T77] vpanic+0x1e0/0x670
[ 102.260044][ T77] panic+0xb9/0xc0
[ 102.261331][ T77] ? __pfx_panic+0x10/0x10
[ 102.262843][ T77] ? folio_evictable+0xe4/0x250
[ 102.264486][ T77] ? rcu_is_watching+0x15/0xb0
[ 102.266115][ T77] ? folio_evictable+0xe4/0x250
[ 102.267765][ T77] ? folio_evictable+0xe4/0x250
[ 102.269408][ T77] check_panic_on_warn+0x89/0xb0
[ 102.271080][ T77] ? folio_evictable+0xe4/0x250
[ 102.272710][ T77] end_report+0x6f/0x140
[ 102.274119][ T77] kasan_report+0x129/0x150
[ 102.275636][ T77] ? folio_evictable+0xe4/0x250
[ 102.277294][ T77] kasan_check_range+0x2b0/0x2c0
[ 102.278960][ T77] ? folio_evictable+0x1c/0x250
[ 102.280602][ T77] folio_evictable+0xe4/0x250
[ 102.282210][ T77] evict_folios+0x1af9/0x57f0
[ 102.283799][ T77] ? __pfx_evict_folios+0x10/0x10
[ 102.285476][ T77] ? list_lru_count_one+0x264/0x2c0
[ 102.287190][ T77] ? __lock_acquire+0x6b6/0x2cf0
[ 102.288858][ T77] ? __lock_acquire+0x6b6/0x2cf0
[ 102.290533][ T77] ? mem_cgroup_get_nr_swap_pages+0x32/0x110
[ 102.292536][ T77] ? get_swappiness+0x358/0x3c0
[ 102.294188][ T77] try_to_shrink_lruvec+0x8a3/0xb50
[ 102.295936][ T77] shrink_one+0x25c/0x720
[ 102.297399][ T77] ? shrink_node+0x2d3f/0x35b0
[ 102.299007][ T77] shrink_node+0x2f7d/0x35b0
[ 102.300571][ T77] ? shrink_node+0x2d3f/0x35b0
[ 102.302194][ T77] ? __lock_acquire+0x6b6/0x2cf0
[ 102.303906][ T77] ? percpu_ref_put+0x19/0x180
[ 102.305572][ T77] ? percpu_ref_put+0x19/0x180
[ 102.307237][ T77] ? __pfx_shrink_node+0x10/0x10
[ 102.308954][ T77] ? percpu_ref_put+0x19/0x180
[ 102.310622][ T77] ? mem_cgroup_iter+0x420/0x460
[ 102.312331][ T77] ? mem_cgroup_iter+0x3b/0x460
[ 102.314025][ T77] kswapd+0x145a/0x2820
[ 102.315470][ T77] ? kswapd+0x92a/0x2820
[ 102.316949][ T77] ? __pfx_kswapd+0x10/0x10
[ 102.318536][ T77] ? __lock_acquire+0x6b6/0x2cf0
[ 102.320248][ T77] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.322059][ T77] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 102.323861][ T77] ? __pfx_autoremove_wake_function+0x10/0x10
[ 102.325903][ T77] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 102.327825][ T77] ? __kthread_parkme+0x7b/0x200
[ 102.329461][ T77] ? __kthread_parkme+0x1a1/0x200
[ 102.331142][ T77] kthread+0x711/0x8a0
[ 102.332533][ T77] ? __pfx_kswapd+0x10/0x10
[ 102.334076][ T77] ? __pfx_kthread+0x10/0x10
[ 102.335637][ T77] ? _raw_spin_unlock_irq+0x23/0x50
[ 102.337391][ T77] ? __pfx_kthread+0x10/0x10
[ 102.338959][ T77] ret_from_fork+0x510/0xa50
[ 102.340519][ T77] ? __pfx_ret_from_fork+0x10/0x10
[ 102.342261][ T77] ? __switch_to+0xc9e/0x1480
[ 102.343853][ T77] ? __pfx_kthread+0x10/0x10
[ 102.345428][ T77] ret_from_fork_asm+0x1a/0x30
[ 102.347055][ T77]
[ 102.348703][ T77] Kernel Offset: disabled
[ 102.350186][ T77] Rebooting in 86400 seconds..