[ 91.870849][ T1225] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:34357' (ED25519) to the list of known hosts. 2026/01/08 22:57:14 parsed 1 programs [ 113.372437][ T5341] cgroup: Unknown subsys name 'net' [ 113.438229][ T5341] cgroup: Unknown subsys name 'cpuset' [ 113.444340][ T5341] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 115.184848][ T5341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 120.349523][ T5356] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 120.435788][ T2619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.439954][ T2619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.567705][ T1819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.570892][ T1819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.231797][ T5391] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.237866][ T5391] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.255935][ T5391] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.386220][ T5391] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.389479][ T5391] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.995230][ T5405] chnl_net:caif_netlink_parms(): no params data found [ 126.287201][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.302453][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.306229][ T5405] bridge_slave_0: entered allmulticast mode [ 126.315568][ T5405] bridge_slave_0: entered promiscuous mode [ 126.326486][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.329999][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.343936][ T5405] bridge_slave_1: entered allmulticast mode [ 126.349120][ T5405] bridge_slave_1: entered promiscuous mode [ 126.399612][ T5405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.418375][ T5405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.476286][ T5405] team0: Port device team_slave_0 added [ 126.480776][ T5405] team0: Port device team_slave_1 added [ 126.511787][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.516083][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.527152][ T5405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.533542][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.537258][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.550234][ T5405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.582666][ T5405] hsr_slave_0: entered promiscuous mode [ 126.585741][ T5405] hsr_slave_1: entered promiscuous mode [ 126.718723][ T5405] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.729660][ T5405] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.735984][ T5405] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.741764][ T5405] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.814218][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.828788][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.838267][ T2670] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.841360][ T2670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.851576][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.854618][ T1819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.051054][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.240910][ T5405] veth0_vlan: entered promiscuous mode [ 127.249350][ T5405] veth1_vlan: entered promiscuous mode [ 127.273488][ T5405] veth0_macvtap: entered promiscuous mode [ 127.280063][ T5405] veth1_macvtap: entered promiscuous mode [ 127.294485][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.309058][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.320221][ T798] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.323985][ T798] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.339073][ T798] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.342539][ T798] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/08 22:57:30 executed programs: 0 [ 127.739218][ T4684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.742896][ T4684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.747746][ T4684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.753774][ T4684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.757500][ T4684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.775666][ T4684] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.780262][ T4684] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.783803][ T4684] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.788045][ T4684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.815259][ T4684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.914944][ T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.919402][ T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.922838][ T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.930005][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.933672][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.975530][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.986400][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.990093][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.993953][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.001132][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.135176][ T4684] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 128.141438][ T4684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.146281][ T4684] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 128.149406][ T4684] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.153114][ T4684] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 128.157466][ T4684] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.161131][ T4684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 128.165956][ T4684] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 128.169941][ T4684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.174856][ T5391] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.631062][ T2670] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.788424][ T5391] Bluetooth: hci0: command tx timeout [ 129.866410][ T5391] Bluetooth: hci1: command tx timeout [ 129.887191][ T2670] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.025632][ T5391] Bluetooth: hci2: command tx timeout [ 130.051012][ T5469] chnl_net:caif_netlink_parms(): no params data found [ 130.104825][ T5391] Bluetooth: hci3: command tx timeout [ 130.265072][ T5473] Bluetooth: hci4: command tx timeout [ 130.268910][ T5391] Bluetooth: hci5: command tx timeout [ 130.406708][ T2670] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.475699][ T5469] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.479361][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.492058][ T5469] bridge_slave_0: entered allmulticast mode [ 130.498383][ T5469] bridge_slave_0: entered promiscuous mode [ 130.540348][ T5469] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.543397][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.547615][ T5469] bridge_slave_1: entered allmulticast mode [ 130.551466][ T5469] bridge_slave_1: entered promiscuous mode [ 130.610716][ T2670] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.723778][ T5469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.739301][ T5484] chnl_net:caif_netlink_parms(): no params data found [ 130.790101][ T5469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.890081][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 130.937600][ T5485] chnl_net:caif_netlink_parms(): no params data found [ 131.012937][ T5469] team0: Port device team_slave_0 added [ 131.022240][ T5469] team0: Port device team_slave_1 added [ 131.110958][ T5477] chnl_net:caif_netlink_parms(): no params data found [ 131.237884][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.240739][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.259076][ T5469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.321320][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.324443][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.338657][ T5469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.343285][ T5478] chnl_net:caif_netlink_parms(): no params data found [ 131.471652][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.485061][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.488170][ T5484] bridge_slave_0: entered allmulticast mode [ 131.491735][ T5484] bridge_slave_0: entered promiscuous mode [ 131.506568][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.510377][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.513698][ T5484] bridge_slave_1: entered allmulticast mode [ 131.524720][ T5484] bridge_slave_1: entered promiscuous mode [ 131.561209][ T2670] bridge_slave_1: left allmulticast mode [ 131.563387][ T2670] bridge_slave_1: left promiscuous mode [ 131.575435][ T2670] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.582918][ T2670] bridge_slave_0: left allmulticast mode [ 131.594955][ T2670] bridge_slave_0: left promiscuous mode [ 131.597678][ T2670] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.872065][ T5391] Bluetooth: hci0: command tx timeout [ 131.945489][ T5391] Bluetooth: hci1: command tx timeout [ 132.077184][ T2670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.088074][ T2670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.105579][ T5391] Bluetooth: hci2: command tx timeout [ 132.109467][ T2670] bond0 (unregistering): Released all slaves [ 132.189071][ T5391] Bluetooth: hci3: command tx timeout [ 132.279208][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.282356][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.300548][ T5468] bridge_slave_0: entered allmulticast mode [ 132.310099][ T5468] bridge_slave_0: entered promiscuous mode [ 132.345233][ T5473] Bluetooth: hci4: command tx timeout [ 132.347646][ T5391] Bluetooth: hci5: command tx timeout [ 132.461395][ T5484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.470391][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.473416][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.482029][ T5468] bridge_slave_1: entered allmulticast mode [ 132.489953][ T5468] bridge_slave_1: entered promiscuous mode [ 132.513675][ T5485] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.516905][ T5485] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.519841][ T5485] bridge_slave_0: entered allmulticast mode [ 132.523771][ T5485] bridge_slave_0: entered promiscuous mode [ 132.545628][ T5484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.567262][ T5477] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.570517][ T5477] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.574456][ T5477] bridge_slave_0: entered allmulticast mode [ 132.580467][ T5477] bridge_slave_0: entered promiscuous mode [ 132.584184][ T5485] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.589445][ T5485] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.592592][ T5485] bridge_slave_1: entered allmulticast mode [ 132.596576][ T5485] bridge_slave_1: entered promiscuous mode [ 132.665666][ T5469] hsr_slave_0: entered promiscuous mode [ 132.675096][ T5469] hsr_slave_1: entered promiscuous mode [ 132.677705][ T5469] debugfs: 'hsr0' already exists in 'hsr' [ 132.680137][ T5469] Cannot create hsr debugfs directory [ 132.685192][ T5477] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.688249][ T5477] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.690887][ T5477] bridge_slave_1: entered allmulticast mode [ 132.705261][ T5477] bridge_slave_1: entered promiscuous mode [ 132.750958][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.766844][ T5484] team0: Port device team_slave_0 added [ 132.810058][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.815913][ T5484] team0: Port device team_slave_1 added [ 132.837506][ T5485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.857865][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.860405][ T5478] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.862781][ T5478] bridge_slave_0: entered allmulticast mode [ 132.866647][ T5478] bridge_slave_0: entered promiscuous mode [ 132.898295][ T5477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.903402][ T5485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.920897][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.923669][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.934899][ T5478] bridge_slave_1: entered allmulticast mode [ 132.937800][ T5478] bridge_slave_1: entered promiscuous mode [ 132.958473][ T5468] team0: Port device team_slave_0 added [ 132.963806][ T5477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.996930][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.000336][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.010819][ T5484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.018451][ T5468] team0: Port device team_slave_1 added [ 133.047865][ T2670] hsr_slave_0: left promiscuous mode [ 133.051097][ T2670] hsr_slave_1: left promiscuous mode [ 133.054029][ T2670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.062074][ T2670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.066446][ T2670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.069569][ T2670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.083088][ T2670] veth1_macvtap: left promiscuous mode [ 133.086229][ T2670] veth0_macvtap: left promiscuous mode [ 133.088233][ T2670] veth1_vlan: left promiscuous mode [ 133.090426][ T2670] veth0_vlan: left promiscuous mode [ 133.432105][ T2670] team0 (unregistering): Port device team_slave_1 removed [ 133.470482][ T2670] team0 (unregistering): Port device team_slave_0 removed [ 133.738794][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.741808][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.770946][ T5484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.796946][ T5485] team0: Port device team_slave_0 added [ 133.813443][ T5478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.851542][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.856568][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.869098][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.877244][ T5477] team0: Port device team_slave_0 added [ 133.883568][ T5485] team0: Port device team_slave_1 added [ 133.897831][ T5478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.910289][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.913429][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.935845][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.941749][ T5477] team0: Port device team_slave_1 added [ 133.945581][ T5391] Bluetooth: hci0: command tx timeout [ 134.025585][ T5391] Bluetooth: hci1: command tx timeout [ 134.067108][ T5485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.070042][ T5485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.085626][ T5485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.132993][ T5484] hsr_slave_0: entered promiscuous mode [ 134.137127][ T5484] hsr_slave_1: entered promiscuous mode [ 134.142762][ T5478] team0: Port device team_slave_0 added [ 134.180258][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.182663][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.194696][ T5391] Bluetooth: hci2: command tx timeout [ 134.207334][ T5477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.216007][ T5485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.218649][ T5485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.237204][ T5485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.265002][ T5391] Bluetooth: hci3: command tx timeout [ 134.303309][ T5478] team0: Port device team_slave_1 added [ 134.327422][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.330907][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.391119][ T5477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.426295][ T5473] Bluetooth: hci4: command tx timeout [ 134.428855][ T5391] Bluetooth: hci5: command tx timeout [ 134.473938][ T5468] hsr_slave_0: entered promiscuous mode [ 134.480688][ T5468] hsr_slave_1: entered promiscuous mode [ 134.483497][ T5468] debugfs: 'hsr0' already exists in 'hsr' [ 134.486379][ T5468] Cannot create hsr debugfs directory [ 134.556315][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.559289][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.570762][ T5478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.610337][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.613311][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.627189][ T5478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.718718][ T5477] hsr_slave_0: entered promiscuous mode [ 134.724111][ T5477] hsr_slave_1: entered promiscuous mode [ 134.729374][ T5477] debugfs: 'hsr0' already exists in 'hsr' [ 134.732527][ T5477] Cannot create hsr debugfs directory [ 134.740897][ T5485] hsr_slave_0: entered promiscuous mode [ 134.746385][ T5485] hsr_slave_1: entered promiscuous mode [ 134.749535][ T5485] debugfs: 'hsr0' already exists in 'hsr' [ 134.752087][ T5485] Cannot create hsr debugfs directory [ 134.971684][ T5469] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.027532][ T5478] hsr_slave_0: entered promiscuous mode [ 135.030983][ T5478] hsr_slave_1: entered promiscuous mode [ 135.036449][ T5478] debugfs: 'hsr0' already exists in 'hsr' [ 135.039071][ T5478] Cannot create hsr debugfs directory [ 135.076484][ T5469] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.136681][ T5469] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.188627][ T5469] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.509322][ T5484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 135.532347][ T5484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 135.589343][ T5484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 135.627859][ T5484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 135.902776][ T5469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.965927][ T5469] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.998631][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.001541][ T1819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.016982][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.020007][ T1819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.024944][ T5391] Bluetooth: hci0: command tx timeout [ 136.070092][ T5468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.104849][ T5391] Bluetooth: hci1: command tx timeout [ 136.133769][ T5468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.154226][ T5484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.165859][ T5468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.208132][ T5468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.264901][ T5391] Bluetooth: hci2: command tx timeout [ 136.293812][ T5484] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.328075][ T5477] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 136.344868][ T5391] Bluetooth: hci3: command tx timeout [ 136.361812][ T5477] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 136.431053][ T5477] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 136.457395][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.460440][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.488830][ T5477] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.511834][ T5473] Bluetooth: hci4: command tx timeout [ 136.514328][ T5391] Bluetooth: hci5: command tx timeout [ 136.530447][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.533809][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.684251][ T5484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.711217][ T5484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.810400][ T5485] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.837487][ T5485] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.886481][ T5485] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.948626][ T5485] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.117253][ T5469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.289481][ T5478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.316686][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.337852][ T5478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.358845][ T5478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.384226][ T5478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.501401][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.526296][ T5477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.539061][ T5484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.644768][ T2670] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.648564][ T2670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.689213][ T2670] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.692419][ T2670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.754488][ T5469] veth0_vlan: entered promiscuous mode [ 137.789904][ T5477] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.885833][ T2670] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.888953][ T2670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.915488][ T5469] veth1_vlan: entered promiscuous mode [ 137.986927][ T2619] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.989897][ T2619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.101806][ T5485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.205939][ T5485] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.295033][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.297977][ T1819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.334259][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.337197][ T1819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.385987][ T5469] veth0_macvtap: entered promiscuous mode [ 138.477275][ T5469] veth1_macvtap: entered promiscuous mode [ 138.517244][ T5478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.628230][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.657736][ T5478] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.673978][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.727293][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.730520][ T1819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.776665][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.779797][ T1819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.796732][ T5484] veth0_vlan: entered promiscuous mode [ 138.811430][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.826591][ T2670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.869840][ T5484] veth1_vlan: entered promiscuous mode [ 138.886930][ T2670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.910024][ T2670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.913944][ T2670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.113745][ T2619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.121125][ T5477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.132527][ T2619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.137801][ T5484] veth0_macvtap: entered promiscuous mode [ 139.216433][ T5484] veth1_macvtap: entered promiscuous mode [ 139.250559][ T5485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.275838][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.279373][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.325269][ T5468] veth0_vlan: entered promiscuous mode [ 139.389586][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.465931][ T5468] veth1_vlan: entered promiscuous mode [ 139.520707][ T5484] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/01/08 22:57:42 executed programs: 12 [ 139.596671][ T1819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.692812][ T1819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.717214][ T5477] veth0_vlan: entered promiscuous mode [ 139.755558][ T1819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.772432][ T1819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.814932][ T5468] veth0_macvtap: entered promiscuous mode [ 139.871259][ T5477] veth1_vlan: entered promiscuous mode [ 139.875812][ T5468] veth1_macvtap: entered promiscuous mode [ 139.903923][ T5478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.017566][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.067103][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.097705][ T3387] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.111941][ T3387] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.129898][ T3387] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.133703][ T4263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.145922][ T4263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.156888][ T3387] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.228983][ T5477] veth0_macvtap: entered promiscuous mode [ 140.267653][ T2670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.270949][ T2670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.316091][ T5477] veth1_macvtap: entered promiscuous mode [ 140.379420][ T5478] veth0_vlan: entered promiscuous mode [ 140.444179][ T3387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.471051][ T5478] veth1_vlan: entered promiscuous mode [ 140.474275][ T3387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.510754][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.529250][ T5485] veth0_vlan: entered promiscuous mode [ 140.603284][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.615144][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.622316][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.630645][ T5675] loop0: detected capacity change from 0 to 32768 [ 140.686181][ T798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.690255][ T798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.734010][ T5485] veth1_vlan: entered promiscuous mode [ 140.747212][ T5675] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 140.749829][ T5675] gfs2: fsid=.: Now mounting FS (format 1801)... [ 140.774908][ T798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.801574][ T798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.899060][ T5675] syz.0.17: attempt to access beyond end of device [ 140.899060][ T5675] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 140.947809][ T5478] veth0_macvtap: entered promiscuous mode [ 140.950659][ T5675] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 140.981372][ T5675] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 141.001287][ T5478] veth1_macvtap: entered promiscuous mode [ 141.014128][ T5675] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5675 [syz.0.17] init_journal+0x19a3/0x2170 [ 141.045236][ T5675] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 141.049156][ T5675] CPU: 0 UID: 0 PID: 5675 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 141.049175][ T5675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.049182][ T5675] Call Trace: [ 141.049189][ T5675] [ 141.049195][ T5675] dump_stack_lvl+0xe8/0x150 [ 141.049216][ T5675] gfs2_withdraw+0xc3/0x1b0 [ 141.049234][ T5675] gfs2_jdesc_check+0x17d/0x2f0 [ 141.049247][ T5675] check_journal_clean+0x158/0x310 [ 141.049264][ T5675] ? __pfx_check_journal_clean+0x10/0x10 [ 141.049280][ T5675] ? init_journal+0x19a3/0x2170 [ 141.049299][ T5675] ? do_raw_spin_unlock+0x4d/0x240 [ 141.049316][ T5675] ? _raw_spin_unlock+0x28/0x50 [ 141.049402][ T5675] ? gfs2_jdesc_find+0xab/0xc0 [ 141.049413][ T5675] init_journal+0x19a3/0x2170 [ 141.049434][ T5675] ? init_inodes+0xdb/0x320 [ 141.049447][ T5675] ? vsnprintf+0x38b/0xee0 [ 141.049461][ T5675] ? __pfx_init_journal+0x10/0x10 [ 141.049476][ T5675] ? vsnprintf+0xdf1/0xee0 [ 141.049504][ T5675] ? snprintf+0xda/0x120 [ 141.049519][ T5675] ? init_inodes+0xdb/0x320 [ 141.049534][ T5675] ? __pfx_snprintf+0x10/0x10 [ 141.049547][ T5675] ? gfs2_glock_nq_num+0x13d/0x170 [ 141.049560][ T5675] init_inodes+0xdb/0x320 [ 141.049577][ T5675] gfs2_fill_super+0x1a08/0x21b0 [ 141.049600][ T5675] ? __pfx_gfs2_fill_super+0x10/0x10 [ 141.049616][ T5675] ? init_locking+0xb8/0x210 [ 141.049629][ T5675] ? sb_set_blocksize+0x155/0x240 [ 141.049643][ T5675] ? setup_bdev_super+0x4c1/0x5b0 [ 141.049662][ T5675] get_tree_bdev_flags+0x40e/0x4d0 [ 141.049678][ T5675] ? __pfx_gfs2_fill_super+0x10/0x10 [ 141.049693][ T5675] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 141.049706][ T5675] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 141.049725][ T5675] gfs2_get_tree+0x51/0x1e0 [ 141.049742][ T5675] vfs_get_tree+0x92/0x2a0 [ 141.049757][ T5675] do_new_mount+0x302/0xa10 [ 141.049768][ T5675] ? apparmor_capable+0x137/0x1a0 [ 141.049785][ T5675] ? __pfx_do_new_mount+0x10/0x10 [ 141.049796][ T5675] ? ns_capable+0x8a/0xf0 [ 141.049810][ T5675] ? kmem_cache_free+0x197/0x620 [ 141.049832][ T5675] __se_sys_mount+0x313/0x410 [ 141.049847][ T5675] ? __pfx___se_sys_mount+0x10/0x10 [ 141.049862][ T5675] ? __x64_sys_mount+0x20/0xc0 [ 141.049875][ T5675] do_syscall_64+0xec/0xf80 [ 141.049886][ T5675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.049896][ T5675] ? trace_irq_disable+0x37/0x100 [ 141.049911][ T5675] ? clear_bhb_loop+0x60/0xb0 [ 141.049925][ T5675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.049937][ T5675] RIP: 0033:0x7f655f590f6a [ 141.049949][ T5675] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.049957][ T5675] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 141.049970][ T5675] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 141.049977][ T5675] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 141.049983][ T5675] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 141.049990][ T5675] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 141.049996][ T5675] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 141.050013][ T5675] [ 141.050018][ T5675] gfs2: fsid=..s: Error checking journal for spectator mount. [ 141.229756][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.356219][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.472655][ T5485] veth0_macvtap: entered promiscuous mode [ 141.513647][ T3387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.572712][ T3387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.636102][ T5485] veth1_macvtap: entered promiscuous mode [ 141.639664][ T3387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.681546][ T3387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.709807][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.713295][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.817772][ T3769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.820921][ T3769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.857841][ T5485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.931530][ T3769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.940366][ T5485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.952396][ T3769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.038338][ T3769] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.041869][ T3769] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.135325][ T3769] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.163971][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.186011][ T3769] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.201330][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.848315][ T3847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.851570][ T3847] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.080770][ T3847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.083884][ T3847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.093157][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.105716][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 2026/01/08 22:57:49 executed programs: 21 2026/01/08 22:57:55 executed programs: 32 [ 155.983995][ T5710] loop0: detected capacity change from 0 to 32768 [ 156.072080][ T5710] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 156.127841][ T5710] gfs2: fsid=.: Now mounting FS (format 1801)... [ 156.191332][ T5710] syz.0.41: attempt to access beyond end of device [ 156.191332][ T5710] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 156.230382][ T5710] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 156.304463][ T5710] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 156.308680][ T5710] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5710 [syz.0.41] init_journal+0x19a3/0x2170 [ 156.312721][ T5710] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 156.357605][ T5710] CPU: 0 UID: 0 PID: 5710 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(full) [ 156.357623][ T5710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.357630][ T5710] Call Trace: [ 156.357636][ T5710] [ 156.357640][ T5710] dump_stack_lvl+0xe8/0x150 [ 156.357662][ T5710] gfs2_withdraw+0xc3/0x1b0 [ 156.357679][ T5710] gfs2_jdesc_check+0x17d/0x2f0 [ 156.357691][ T5710] check_journal_clean+0x158/0x310 [ 156.357706][ T5710] ? __pfx_check_journal_clean+0x10/0x10 [ 156.357721][ T5710] ? init_journal+0x19a3/0x2170 [ 156.357740][ T5710] ? do_raw_spin_unlock+0x4d/0x240 [ 156.357754][ T5710] ? _raw_spin_unlock+0x28/0x50 [ 156.357825][ T5710] ? gfs2_jdesc_find+0xab/0xc0 [ 156.357836][ T5710] init_journal+0x19a3/0x2170 [ 156.357853][ T5710] ? init_inodes+0xdb/0x320 [ 156.357866][ T5710] ? vsnprintf+0x38b/0xee0 [ 156.357878][ T5710] ? __pfx_init_journal+0x10/0x10 [ 156.357891][ T5710] ? vsnprintf+0xdf1/0xee0 [ 156.357909][ T5710] ? snprintf+0xda/0x120 [ 156.357921][ T5710] ? init_inodes+0xdb/0x320 [ 156.357935][ T5710] ? __pfx_snprintf+0x10/0x10 [ 156.357947][ T5710] ? gfs2_glock_nq_num+0x13d/0x170 [ 156.357956][ T5710] init_inodes+0xdb/0x320 [ 156.357965][ T5710] gfs2_fill_super+0x1a08/0x21b0 [ 156.357983][ T5710] ? __pfx_gfs2_fill_super+0x10/0x10 [ 156.357997][ T5710] ? init_locking+0xb8/0x210 [ 156.358009][ T5710] ? sb_set_blocksize+0x155/0x240 [ 156.358021][ T5710] ? setup_bdev_super+0x4c1/0x5b0 [ 156.358036][ T5710] get_tree_bdev_flags+0x40e/0x4d0 [ 156.358051][ T5710] ? __pfx_gfs2_fill_super+0x10/0x10 [ 156.358063][ T5710] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 156.358075][ T5710] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 156.358094][ T5710] gfs2_get_tree+0x51/0x1e0 [ 156.358110][ T5710] vfs_get_tree+0x92/0x2a0 [ 156.358126][ T5710] do_new_mount+0x302/0xa10 [ 156.358134][ T5710] ? apparmor_capable+0x137/0x1a0 [ 156.358145][ T5710] ? __pfx_do_new_mount+0x10/0x10 [ 156.358151][ T5710] ? ns_capable+0x8a/0xf0 [ 156.358160][ T5710] ? kmem_cache_free+0x197/0x620 [ 156.358173][ T5710] __se_sys_mount+0x313/0x410 [ 156.358182][ T5710] ? __pfx___se_sys_mount+0x10/0x10 [ 156.358190][ T5710] ? __x64_sys_mount+0x20/0xc0 [ 156.358198][ T5710] do_syscall_64+0xec/0xf80 [ 156.358204][ T5710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.358210][ T5710] ? trace_irq_disable+0x37/0x100 [ 156.358219][ T5710] ? clear_bhb_loop+0x60/0xb0 [ 156.358229][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.358237][ T5710] RIP: 0033:0x7f655f590f6a [ 156.358248][ T5710] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.358255][ T5710] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.358267][ T5710] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 156.358274][ T5710] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 156.358280][ T5710] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 156.358285][ T5710] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 156.358291][ T5710] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 156.358309][ T5710] [ 156.358313][ T5710] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/01/08 22:58:00 executed programs: 43 [ 159.578081][ T5721] loop0: detected capacity change from 0 to 32768 [ 159.680645][ T5721] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 159.700845][ T5721] gfs2: fsid=.: Now mounting FS (format 1801)... [ 159.755399][ T5721] syz.0.48: attempt to access beyond end of device [ 159.755399][ T5721] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 159.817075][ T5721] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 159.823116][ T5721] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 159.885011][ T5721] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5721 [syz.0.48] init_journal+0x19a3/0x2170 [ 159.912215][ T5721] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 159.952934][ T5721] CPU: 0 UID: 0 PID: 5721 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 159.952953][ T5721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.952960][ T5721] Call Trace: [ 159.952964][ T5721] [ 159.952970][ T5721] dump_stack_lvl+0xe8/0x150 [ 159.952990][ T5721] gfs2_withdraw+0xc3/0x1b0 [ 159.953005][ T5721] gfs2_jdesc_check+0x17d/0x2f0 [ 159.953018][ T5721] check_journal_clean+0x158/0x310 [ 159.953033][ T5721] ? __pfx_check_journal_clean+0x10/0x10 [ 159.953049][ T5721] ? init_journal+0x19a3/0x2170 [ 159.953066][ T5721] ? do_raw_spin_unlock+0x4d/0x240 [ 159.953082][ T5721] ? _raw_spin_unlock+0x28/0x50 [ 159.953144][ T5721] ? gfs2_jdesc_find+0xab/0xc0 [ 159.953154][ T5721] init_journal+0x19a3/0x2170 [ 159.953173][ T5721] ? init_inodes+0xdb/0x320 [ 159.953186][ T5721] ? vsnprintf+0x38b/0xee0 [ 159.953199][ T5721] ? __pfx_init_journal+0x10/0x10 [ 159.953212][ T5721] ? vsnprintf+0xdf1/0xee0 [ 159.953231][ T5721] ? snprintf+0xda/0x120 [ 159.953244][ T5721] ? init_inodes+0xdb/0x320 [ 159.953258][ T5721] ? __pfx_snprintf+0x10/0x10 [ 159.953270][ T5721] ? gfs2_glock_nq_num+0x13d/0x170 [ 159.953282][ T5721] init_inodes+0xdb/0x320 [ 159.953297][ T5721] gfs2_fill_super+0x1a08/0x21b0 [ 159.953318][ T5721] ? __pfx_gfs2_fill_super+0x10/0x10 [ 159.953334][ T5721] ? init_locking+0xb8/0x210 [ 159.953347][ T5721] ? sb_set_blocksize+0x155/0x240 [ 159.953359][ T5721] ? setup_bdev_super+0x4c1/0x5b0 [ 159.953377][ T5721] get_tree_bdev_flags+0x40e/0x4d0 [ 159.953389][ T5721] ? __pfx_gfs2_fill_super+0x10/0x10 [ 159.953402][ T5721] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 159.953414][ T5721] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 159.953432][ T5721] gfs2_get_tree+0x51/0x1e0 [ 159.953447][ T5721] vfs_get_tree+0x92/0x2a0 [ 159.953463][ T5721] do_new_mount+0x302/0xa10 [ 159.953474][ T5721] ? apparmor_capable+0x137/0x1a0 [ 159.953490][ T5721] ? __pfx_do_new_mount+0x10/0x10 [ 159.953500][ T5721] ? ns_capable+0x8a/0xf0 [ 159.953511][ T5721] ? kmem_cache_free+0x197/0x620 [ 159.953532][ T5721] __se_sys_mount+0x313/0x410 [ 159.953546][ T5721] ? __pfx___se_sys_mount+0x10/0x10 [ 159.953561][ T5721] ? __x64_sys_mount+0x20/0xc0 [ 159.953573][ T5721] do_syscall_64+0xec/0xf80 [ 159.953583][ T5721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.953592][ T5721] ? trace_irq_disable+0x37/0x100 [ 159.953606][ T5721] ? clear_bhb_loop+0x60/0xb0 [ 159.953618][ T5721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.953628][ T5721] RIP: 0033:0x7f655f590f6a [ 159.953639][ T5721] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.953648][ T5721] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.953660][ T5721] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 159.953668][ T5721] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 159.953674][ T5721] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 159.953680][ T5721] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 159.953686][ T5721] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 159.953703][ T5721] [ 159.953707][ T5721] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/01/08 22:58:06 executed programs: 57 [ 162.986053][ T5734] loop0: detected capacity change from 0 to 32768 [ 163.095829][ T5734] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 163.098769][ T5734] gfs2: fsid=.: Now mounting FS (format 1801)... [ 163.162145][ T5734] syz.0.58: attempt to access beyond end of device [ 163.162145][ T5734] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 163.215140][ T5734] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 163.222242][ T5734] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 163.320160][ T5734] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5734 [syz.0.58] init_journal+0x19a3/0x2170 [ 163.345351][ T5734] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 163.374156][ T5734] CPU: 0 UID: 0 PID: 5734 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(full) [ 163.374176][ T5734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.374183][ T5734] Call Trace: [ 163.374188][ T5734] [ 163.374192][ T5734] dump_stack_lvl+0xe8/0x150 [ 163.374223][ T5734] gfs2_withdraw+0xc3/0x1b0 [ 163.374239][ T5734] gfs2_jdesc_check+0x17d/0x2f0 [ 163.374253][ T5734] check_journal_clean+0x158/0x310 [ 163.374266][ T5734] ? __pfx_check_journal_clean+0x10/0x10 [ 163.374276][ T5734] ? init_journal+0x19a3/0x2170 [ 163.374288][ T5734] ? do_raw_spin_unlock+0x4d/0x240 [ 163.374298][ T5734] ? _raw_spin_unlock+0x28/0x50 [ 163.374312][ T5734] ? gfs2_jdesc_find+0xab/0xc0 [ 163.374319][ T5734] init_journal+0x19a3/0x2170 [ 163.374331][ T5734] ? init_inodes+0xdb/0x320 [ 163.374341][ T5734] ? vsnprintf+0x38b/0xee0 [ 163.374353][ T5734] ? __pfx_init_journal+0x10/0x10 [ 163.374365][ T5734] ? vsnprintf+0xdf1/0xee0 [ 163.374381][ T5734] ? snprintf+0xda/0x120 [ 163.374394][ T5734] ? init_inodes+0xdb/0x320 [ 163.374407][ T5734] ? __pfx_snprintf+0x10/0x10 [ 163.374419][ T5734] ? gfs2_glock_nq_num+0x13d/0x170 [ 163.374430][ T5734] init_inodes+0xdb/0x320 [ 163.374445][ T5734] gfs2_fill_super+0x1a08/0x21b0 [ 163.374469][ T5734] ? __pfx_gfs2_fill_super+0x10/0x10 [ 163.374484][ T5734] ? init_locking+0xb8/0x210 [ 163.374511][ T5734] ? sb_set_blocksize+0x155/0x240 [ 163.374520][ T5734] ? setup_bdev_super+0x4c1/0x5b0 [ 163.374532][ T5734] get_tree_bdev_flags+0x40e/0x4d0 [ 163.374542][ T5734] ? __pfx_gfs2_fill_super+0x10/0x10 [ 163.374555][ T5734] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 163.374567][ T5734] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 163.374585][ T5734] gfs2_get_tree+0x51/0x1e0 [ 163.374601][ T5734] vfs_get_tree+0x92/0x2a0 [ 163.374616][ T5734] do_new_mount+0x302/0xa10 [ 163.374625][ T5734] ? apparmor_capable+0x137/0x1a0 [ 163.374640][ T5734] ? __pfx_do_new_mount+0x10/0x10 [ 163.374650][ T5734] ? ns_capable+0x8a/0xf0 [ 163.374663][ T5734] ? kmem_cache_free+0x197/0x620 [ 163.374684][ T5734] __se_sys_mount+0x313/0x410 [ 163.374699][ T5734] ? __pfx___se_sys_mount+0x10/0x10 [ 163.374708][ T5734] ? __x64_sys_mount+0x20/0xc0 [ 163.374716][ T5734] do_syscall_64+0xec/0xf80 [ 163.374722][ T5734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.374728][ T5734] ? trace_irq_disable+0x37/0x100 [ 163.374742][ T5734] ? clear_bhb_loop+0x60/0xb0 [ 163.374752][ T5734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.374761][ T5734] RIP: 0033:0x7f655f590f6a [ 163.374771][ T5734] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.374779][ T5734] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.374791][ T5734] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 163.374799][ T5734] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 163.374806][ T5734] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 163.374812][ T5734] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 163.374819][ T5734] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 163.374860][ T5734] [ 164.277005][ T5734] gfs2: fsid=..s: Error checking journal for spectator mount. [ 166.408452][ T5746] loop0: detected capacity change from 0 to 32768 [ 166.497881][ T5746] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 166.544653][ T5746] gfs2: fsid=.: Now mounting FS (format 1801)... [ 166.600303][ T5746] syz.0.69: attempt to access beyond end of device [ 166.600303][ T5746] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 166.669617][ T5746] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 166.724678][ T5746] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 166.728061][ T5746] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5746 [syz.0.69] init_journal+0x19a3/0x2170 [ 166.804722][ T5746] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 166.808206][ T5746] CPU: 0 UID: 0 PID: 5746 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(full) [ 166.808224][ T5746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.808230][ T5746] Call Trace: [ 166.808236][ T5746] [ 166.808242][ T5746] dump_stack_lvl+0xe8/0x150 [ 166.808262][ T5746] gfs2_withdraw+0xc3/0x1b0 [ 166.808299][ T5746] gfs2_jdesc_check+0x17d/0x2f0 [ 166.808313][ T5746] check_journal_clean+0x158/0x310 [ 166.808329][ T5746] ? __pfx_check_journal_clean+0x10/0x10 [ 166.808345][ T5746] ? init_journal+0x19a3/0x2170 [ 166.808363][ T5746] ? do_raw_spin_unlock+0x4d/0x240 [ 166.808379][ T5746] ? _raw_spin_unlock+0x28/0x50 [ 166.808393][ T5746] ? gfs2_jdesc_find+0xab/0xc0 [ 166.808404][ T5746] init_journal+0x19a3/0x2170 [ 166.808430][ T5746] ? init_inodes+0xdb/0x320 [ 166.808441][ T5746] ? vsnprintf+0x38b/0xee0 [ 166.808455][ T5746] ? __pfx_init_journal+0x10/0x10 [ 166.808468][ T5746] ? vsnprintf+0xdf1/0xee0 [ 166.808486][ T5746] ? snprintf+0xda/0x120 [ 166.808500][ T5746] ? init_inodes+0xdb/0x320 [ 166.808512][ T5746] ? __pfx_snprintf+0x10/0x10 [ 166.808524][ T5746] ? gfs2_glock_nq_num+0x13d/0x170 [ 166.808536][ T5746] init_inodes+0xdb/0x320 [ 166.808551][ T5746] gfs2_fill_super+0x1a08/0x21b0 [ 166.808572][ T5746] ? __pfx_gfs2_fill_super+0x10/0x10 [ 166.808586][ T5746] ? init_locking+0xb8/0x210 [ 166.808597][ T5746] ? sb_set_blocksize+0x155/0x240 [ 166.808610][ T5746] ? setup_bdev_super+0x4c1/0x5b0 [ 166.808626][ T5746] get_tree_bdev_flags+0x40e/0x4d0 [ 166.808639][ T5746] ? __pfx_gfs2_fill_super+0x10/0x10 [ 166.808651][ T5746] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 166.808663][ T5746] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 166.808680][ T5746] gfs2_get_tree+0x51/0x1e0 [ 166.808694][ T5746] vfs_get_tree+0x92/0x2a0 [ 166.808710][ T5746] do_new_mount+0x302/0xa10 [ 166.808719][ T5746] ? apparmor_capable+0x137/0x1a0 [ 166.808734][ T5746] ? __pfx_do_new_mount+0x10/0x10 [ 166.808743][ T5746] ? ns_capable+0x8a/0xf0 [ 166.808755][ T5746] ? kmem_cache_free+0x197/0x620 [ 166.808773][ T5746] __se_sys_mount+0x313/0x410 [ 166.808786][ T5746] ? __pfx___se_sys_mount+0x10/0x10 [ 166.808799][ T5746] ? __x64_sys_mount+0x20/0xc0 [ 166.808810][ T5746] do_syscall_64+0xec/0xf80 [ 166.808820][ T5746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.808829][ T5746] ? trace_irq_disable+0x37/0x100 [ 166.808840][ T5746] ? clear_bhb_loop+0x60/0xb0 [ 166.808851][ T5746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.808860][ T5746] RIP: 0033:0x7f655f590f6a [ 166.808871][ T5746] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.808879][ T5746] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 166.808891][ T5746] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 166.808898][ T5746] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 166.808905][ T5746] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 166.808911][ T5746] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 166.808917][ T5746] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 166.808933][ T5746] [ 166.808938][ T5746] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/01/08 22:58:11 executed programs: 71 [ 170.305850][ T5756] loop0: detected capacity change from 0 to 32768 [ 170.412388][ T5756] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 170.447982][ T5756] gfs2: fsid=.: Now mounting FS (format 1801)... [ 170.497604][ T5756] syz.0.76: attempt to access beyond end of device [ 170.497604][ T5756] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 170.578063][ T5756] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 170.583794][ T5756] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 170.695847][ T5756] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5756 [syz.0.76] init_journal+0x19a3/0x2170 [ 170.699696][ T5756] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 170.703025][ T5756] CPU: 0 UID: 0 PID: 5756 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 170.703041][ T5756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 170.703047][ T5756] Call Trace: [ 170.703053][ T5756] [ 170.703058][ T5756] dump_stack_lvl+0xe8/0x150 [ 170.703075][ T5756] gfs2_withdraw+0xc3/0x1b0 [ 170.703091][ T5756] gfs2_jdesc_check+0x17d/0x2f0 [ 170.703103][ T5756] check_journal_clean+0x158/0x310 [ 170.703118][ T5756] ? __pfx_check_journal_clean+0x10/0x10 [ 170.703133][ T5756] ? init_journal+0x19a3/0x2170 [ 170.703151][ T5756] ? do_raw_spin_unlock+0x4d/0x240 [ 170.703167][ T5756] ? _raw_spin_unlock+0x28/0x50 [ 170.703228][ T5756] ? gfs2_jdesc_find+0xab/0xc0 [ 170.703238][ T5756] init_journal+0x19a3/0x2170 [ 170.703259][ T5756] ? init_inodes+0xdb/0x320 [ 170.703271][ T5756] ? vsnprintf+0x38b/0xee0 [ 170.703285][ T5756] ? __pfx_init_journal+0x10/0x10 [ 170.703298][ T5756] ? vsnprintf+0xdf1/0xee0 [ 170.703315][ T5756] ? snprintf+0xda/0x120 [ 170.703328][ T5756] ? init_inodes+0xdb/0x320 [ 170.703341][ T5756] ? __pfx_snprintf+0x10/0x10 [ 170.703353][ T5756] ? gfs2_glock_nq_num+0x13d/0x170 [ 170.703364][ T5756] init_inodes+0xdb/0x320 [ 170.703379][ T5756] gfs2_fill_super+0x1a08/0x21b0 [ 170.703401][ T5756] ? __pfx_gfs2_fill_super+0x10/0x10 [ 170.703417][ T5756] ? init_locking+0xb8/0x210 [ 170.703428][ T5756] ? sb_set_blocksize+0x155/0x240 [ 170.703446][ T5756] ? setup_bdev_super+0x4c1/0x5b0 [ 170.703462][ T5756] get_tree_bdev_flags+0x40e/0x4d0 [ 170.703476][ T5756] ? __pfx_gfs2_fill_super+0x10/0x10 [ 170.703489][ T5756] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 170.703502][ T5756] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 170.703520][ T5756] gfs2_get_tree+0x51/0x1e0 [ 170.703535][ T5756] vfs_get_tree+0x92/0x2a0 [ 170.703550][ T5756] do_new_mount+0x302/0xa10 [ 170.703559][ T5756] ? apparmor_capable+0x137/0x1a0 [ 170.703575][ T5756] ? __pfx_do_new_mount+0x10/0x10 [ 170.703585][ T5756] ? ns_capable+0x8a/0xf0 [ 170.703597][ T5756] ? kmem_cache_free+0x197/0x620 [ 170.703617][ T5756] __se_sys_mount+0x313/0x410 [ 170.703632][ T5756] ? __pfx___se_sys_mount+0x10/0x10 [ 170.703646][ T5756] ? __x64_sys_mount+0x20/0xc0 [ 170.703657][ T5756] do_syscall_64+0xec/0xf80 [ 170.703668][ T5756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.703677][ T5756] ? trace_irq_disable+0x37/0x100 [ 170.703689][ T5756] ? clear_bhb_loop+0x60/0xb0 [ 170.703700][ T5756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.703710][ T5756] RIP: 0033:0x7f655f590f6a [ 170.703721][ T5756] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.703729][ T5756] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.703741][ T5756] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 170.703748][ T5756] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 170.703755][ T5756] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 170.703761][ T5756] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 170.703767][ T5756] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 170.703783][ T5756] [ 170.703788][ T5756] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/01/08 22:58:16 executed programs: 85 [ 174.003815][ T5768] loop0: detected capacity change from 0 to 32768 [ 174.109283][ T5768] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 174.112326][ T5768] gfs2: fsid=.: Now mounting FS (format 1801)... [ 174.176305][ T5768] syz.0.87: attempt to access beyond end of device [ 174.176305][ T5768] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 174.234729][ T5768] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 174.268243][ T5768] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 174.272320][ T5768] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5768 [syz.0.87] init_journal+0x19a3/0x2170 [ 174.332450][ T5768] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 174.361845][ T5768] CPU: 0 UID: 0 PID: 5768 Comm: syz.0.87 Not tainted syzkaller #0 PREEMPT(full) [ 174.361864][ T5768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 174.361871][ T5768] Call Trace: [ 174.361876][ T5768] [ 174.361881][ T5768] dump_stack_lvl+0xe8/0x150 [ 174.361900][ T5768] gfs2_withdraw+0xc3/0x1b0 [ 174.361915][ T5768] gfs2_jdesc_check+0x17d/0x2f0 [ 174.361924][ T5768] check_journal_clean+0x158/0x310 [ 174.361934][ T5768] ? __pfx_check_journal_clean+0x10/0x10 [ 174.361944][ T5768] ? init_journal+0x19a3/0x2170 [ 174.361957][ T5768] ? do_raw_spin_unlock+0x4d/0x240 [ 174.361968][ T5768] ? _raw_spin_unlock+0x28/0x50 [ 174.361993][ T5768] ? gfs2_jdesc_find+0xab/0xc0 [ 174.362004][ T5768] init_journal+0x19a3/0x2170 [ 174.362021][ T5768] ? init_inodes+0xdb/0x320 [ 174.362032][ T5768] ? vsnprintf+0x38b/0xee0 [ 174.362044][ T5768] ? __pfx_init_journal+0x10/0x10 [ 174.362056][ T5768] ? vsnprintf+0xdf1/0xee0 [ 174.362074][ T5768] ? snprintf+0xda/0x120 [ 174.362087][ T5768] ? init_inodes+0xdb/0x320 [ 174.362100][ T5768] ? __pfx_snprintf+0x10/0x10 [ 174.362113][ T5768] ? gfs2_glock_nq_num+0x13d/0x170 [ 174.362121][ T5768] init_inodes+0xdb/0x320 [ 174.362132][ T5768] gfs2_fill_super+0x1a08/0x21b0 [ 174.362146][ T5768] ? __pfx_gfs2_fill_super+0x10/0x10 [ 174.362156][ T5768] ? init_locking+0xb8/0x210 [ 174.362163][ T5768] ? sb_set_blocksize+0x155/0x240 [ 174.362172][ T5768] ? setup_bdev_super+0x4c1/0x5b0 [ 174.362183][ T5768] get_tree_bdev_flags+0x40e/0x4d0 [ 174.362192][ T5768] ? __pfx_gfs2_fill_super+0x10/0x10 [ 174.362201][ T5768] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 174.362209][ T5768] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 174.362220][ T5768] gfs2_get_tree+0x51/0x1e0 [ 174.362231][ T5768] vfs_get_tree+0x92/0x2a0 [ 174.362245][ T5768] do_new_mount+0x302/0xa10 [ 174.362255][ T5768] ? apparmor_capable+0x137/0x1a0 [ 174.362271][ T5768] ? __pfx_do_new_mount+0x10/0x10 [ 174.362281][ T5768] ? ns_capable+0x8a/0xf0 [ 174.362293][ T5768] ? kmem_cache_free+0x197/0x620 [ 174.362311][ T5768] __se_sys_mount+0x313/0x410 [ 174.362324][ T5768] ? __pfx___se_sys_mount+0x10/0x10 [ 174.362339][ T5768] ? __x64_sys_mount+0x20/0xc0 [ 174.362350][ T5768] do_syscall_64+0xec/0xf80 [ 174.362359][ T5768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.362369][ T5768] ? trace_irq_disable+0x37/0x100 [ 174.362380][ T5768] ? clear_bhb_loop+0x60/0xb0 [ 174.362392][ T5768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.362402][ T5768] RIP: 0033:0x7f655f590f6a [ 174.362412][ T5768] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.362420][ T5768] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.362433][ T5768] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 174.362440][ T5768] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 174.362446][ T5768] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 174.362451][ T5768] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 174.362455][ T5768] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 174.362465][ T5768] [ 174.362469][ T5768] gfs2: fsid=..s: Error checking journal for spectator mount. [ 177.647941][ T5778] loop0: detected capacity change from 0 to 32768 [ 177.772542][ T5778] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 177.817457][ T5778] gfs2: fsid=.: Now mounting FS (format 1801)... [ 177.860364][ T5778] syz.0.95: attempt to access beyond end of device [ 177.860364][ T5778] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 177.954683][ T5778] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 177.960632][ T5778] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 177.964150][ T5778] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5778 [syz.0.95] init_journal+0x19a3/0x2170 [ 178.060093][ T5778] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 178.063306][ T5778] CPU: 0 UID: 0 PID: 5778 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(full) [ 178.063322][ T5778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 178.063329][ T5778] Call Trace: [ 178.063334][ T5778] [ 178.063339][ T5778] dump_stack_lvl+0xe8/0x150 [ 178.063358][ T5778] gfs2_withdraw+0xc3/0x1b0 [ 178.063374][ T5778] gfs2_jdesc_check+0x17d/0x2f0 [ 178.063387][ T5778] check_journal_clean+0x158/0x310 [ 178.063403][ T5778] ? __pfx_check_journal_clean+0x10/0x10 [ 178.063418][ T5778] ? init_journal+0x19a3/0x2170 [ 178.063438][ T5778] ? do_raw_spin_unlock+0x4d/0x240 [ 178.063455][ T5778] ? _raw_spin_unlock+0x28/0x50 [ 178.063479][ T5778] ? gfs2_jdesc_find+0xab/0xc0 [ 178.063490][ T5778] init_journal+0x19a3/0x2170 [ 178.063510][ T5778] ? init_inodes+0xdb/0x320 [ 178.063524][ T5778] ? vsnprintf+0x38b/0xee0 [ 178.063537][ T5778] ? __pfx_init_journal+0x10/0x10 [ 178.063550][ T5778] ? vsnprintf+0xdf1/0xee0 [ 178.063568][ T5778] ? snprintf+0xda/0x120 [ 178.063580][ T5778] ? init_inodes+0xdb/0x320 [ 178.063594][ T5778] ? __pfx_snprintf+0x10/0x10 [ 178.063606][ T5778] ? gfs2_glock_nq_num+0x13d/0x170 [ 178.063618][ T5778] init_inodes+0xdb/0x320 [ 178.063633][ T5778] gfs2_fill_super+0x1a08/0x21b0 [ 178.063660][ T5778] ? __pfx_gfs2_fill_super+0x10/0x10 [ 178.063675][ T5778] ? init_locking+0xb8/0x210 [ 178.063687][ T5778] ? sb_set_blocksize+0x155/0x240 [ 178.063700][ T5778] ? setup_bdev_super+0x4c1/0x5b0 [ 178.063716][ T5778] get_tree_bdev_flags+0x40e/0x4d0 [ 178.063730][ T5778] ? __pfx_gfs2_fill_super+0x10/0x10 [ 178.063743][ T5778] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 178.063755][ T5778] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 178.063774][ T5778] gfs2_get_tree+0x51/0x1e0 [ 178.063789][ T5778] vfs_get_tree+0x92/0x2a0 [ 178.063804][ T5778] do_new_mount+0x302/0xa10 [ 178.063813][ T5778] ? apparmor_capable+0x137/0x1a0 [ 178.063829][ T5778] ? __pfx_do_new_mount+0x10/0x10 [ 178.063839][ T5778] ? ns_capable+0x8a/0xf0 [ 178.063853][ T5778] ? kmem_cache_free+0x197/0x620 [ 178.063872][ T5778] __se_sys_mount+0x313/0x410 [ 178.063886][ T5778] ? __pfx___se_sys_mount+0x10/0x10 [ 178.063901][ T5778] ? __x64_sys_mount+0x20/0xc0 [ 178.063912][ T5778] do_syscall_64+0xec/0xf80 [ 178.063922][ T5778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.063933][ T5778] ? trace_irq_disable+0x37/0x100 [ 178.063945][ T5778] ? clear_bhb_loop+0x60/0xb0 [ 178.063957][ T5778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.063967][ T5778] RIP: 0033:0x7f655f590f6a [ 178.063977][ T5778] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.063985][ T5778] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.063999][ T5778] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 178.064006][ T5778] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 178.064012][ T5778] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 178.064018][ T5778] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 178.064025][ T5778] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 178.064042][ T5778] [ 178.064046][ T5778] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/01/08 22:58:21 executed programs: 97 [ 181.468533][ T5791] loop0: detected capacity change from 0 to 32768 [ 181.599013][ T5791] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 181.602313][ T5791] gfs2: fsid=.: Now mounting FS (format 1801)... [ 181.702143][ T5791] syz.0.104: attempt to access beyond end of device [ 181.702143][ T5791] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 181.792853][ T5791] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 181.824701][ T5791] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 181.854908][ T5791] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5791 [syz.0.104] init_journal+0x19a3/0x2170 [ 181.894857][ T5791] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 181.925367][ T5791] CPU: 0 UID: 0 PID: 5791 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(full) [ 181.925380][ T5791] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.925384][ T5791] Call Trace: [ 181.925387][ T5791] [ 181.925391][ T5791] dump_stack_lvl+0xe8/0x150 [ 181.925410][ T5791] gfs2_withdraw+0xc3/0x1b0 [ 181.925422][ T5791] gfs2_jdesc_check+0x17d/0x2f0 [ 181.925430][ T5791] check_journal_clean+0x158/0x310 [ 181.925440][ T5791] ? __pfx_check_journal_clean+0x10/0x10 [ 181.925450][ T5791] ? init_journal+0x19a3/0x2170 [ 181.925462][ T5791] ? do_raw_spin_unlock+0x4d/0x240 [ 181.925473][ T5791] ? _raw_spin_unlock+0x28/0x50 [ 181.925491][ T5791] ? gfs2_jdesc_find+0xab/0xc0 [ 181.925498][ T5791] init_journal+0x19a3/0x2170 [ 181.925511][ T5791] ? init_inodes+0xdb/0x320 [ 181.925519][ T5791] ? vsnprintf+0x38b/0xee0 [ 181.925528][ T5791] ? __pfx_init_journal+0x10/0x10 [ 181.925537][ T5791] ? vsnprintf+0xdf1/0xee0 [ 181.925548][ T5791] ? snprintf+0xda/0x120 [ 181.925556][ T5791] ? init_inodes+0xdb/0x320 [ 181.925564][ T5791] ? __pfx_snprintf+0x10/0x10 [ 181.925573][ T5791] ? gfs2_glock_nq_num+0x13d/0x170 [ 181.925580][ T5791] init_inodes+0xdb/0x320 [ 181.925590][ T5791] gfs2_fill_super+0x1a08/0x21b0 [ 181.925604][ T5791] ? __pfx_gfs2_fill_super+0x10/0x10 [ 181.925614][ T5791] ? init_locking+0xb8/0x210 [ 181.925622][ T5791] ? sb_set_blocksize+0x155/0x240 [ 181.925630][ T5791] ? setup_bdev_super+0x4c1/0x5b0 [ 181.925640][ T5791] get_tree_bdev_flags+0x40e/0x4d0 [ 181.925650][ T5791] ? __pfx_gfs2_fill_super+0x10/0x10 [ 181.925661][ T5791] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 181.925669][ T5791] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 181.925681][ T5791] gfs2_get_tree+0x51/0x1e0 [ 181.925691][ T5791] vfs_get_tree+0x92/0x2a0 [ 181.925700][ T5791] do_new_mount+0x302/0xa10 [ 181.925707][ T5791] ? apparmor_capable+0x137/0x1a0 [ 181.925718][ T5791] ? __pfx_do_new_mount+0x10/0x10 [ 181.925724][ T5791] ? ns_capable+0x8a/0xf0 [ 181.925731][ T5791] ? kmem_cache_free+0x197/0x620 [ 181.925744][ T5791] __se_sys_mount+0x313/0x410 [ 181.925753][ T5791] ? __pfx___se_sys_mount+0x10/0x10 [ 181.925762][ T5791] ? __x64_sys_mount+0x20/0xc0 [ 181.925769][ T5791] do_syscall_64+0xec/0xf80 [ 181.925776][ T5791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.925782][ T5791] ? trace_irq_disable+0x37/0x100 [ 181.925790][ T5791] ? clear_bhb_loop+0x60/0xb0 [ 181.925798][ T5791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.925804][ T5791] RIP: 0033:0x7f655f590f6a [ 181.925811][ T5791] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.925816][ T5791] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.925824][ T5791] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 181.925829][ T5791] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 181.925833][ T5791] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 181.925838][ T5791] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 181.925842][ T5791] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 181.925852][ T5791] [ 181.925855][ T5791] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/01/08 22:58:26 executed programs: 111 [ 184.931523][ T5803] loop0: detected capacity change from 0 to 32768 [ 185.062758][ T5803] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 185.068230][ T5803] gfs2: fsid=.: Now mounting FS (format 1801)... [ 185.107159][ T5803] syz.0.114: attempt to access beyond end of device [ 185.107159][ T5803] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 185.175610][ T5803] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 185.182481][ T5803] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 185.262998][ T5803] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5803 [syz.0.114] init_journal+0x19a3/0x2170 [ 185.334756][ T5803] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 185.338136][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: syz.0.114 Not tainted syzkaller #0 PREEMPT(full) [ 185.338152][ T5803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.338159][ T5803] Call Trace: [ 185.338164][ T5803] [ 185.338170][ T5803] dump_stack_lvl+0xe8/0x150 [ 185.338216][ T5803] gfs2_withdraw+0xc3/0x1b0 [ 185.338239][ T5803] gfs2_jdesc_check+0x17d/0x2f0 [ 185.338253][ T5803] check_journal_clean+0x158/0x310 [ 185.338268][ T5803] ? __pfx_check_journal_clean+0x10/0x10 [ 185.338284][ T5803] ? init_journal+0x19a3/0x2170 [ 185.338303][ T5803] ? do_raw_spin_unlock+0x4d/0x240 [ 185.338319][ T5803] ? _raw_spin_unlock+0x28/0x50 [ 185.338374][ T5803] ? gfs2_jdesc_find+0xab/0xc0 [ 185.338385][ T5803] init_journal+0x19a3/0x2170 [ 185.338411][ T5803] ? init_inodes+0xdb/0x320 [ 185.338425][ T5803] ? vsnprintf+0x38b/0xee0 [ 185.338438][ T5803] ? __pfx_init_journal+0x10/0x10 [ 185.338451][ T5803] ? vsnprintf+0xdf1/0xee0 [ 185.338467][ T5803] ? snprintf+0xda/0x120 [ 185.338480][ T5803] ? init_inodes+0xdb/0x320 [ 185.338493][ T5803] ? __pfx_snprintf+0x10/0x10 [ 185.338506][ T5803] ? gfs2_glock_nq_num+0x13d/0x170 [ 185.338517][ T5803] init_inodes+0xdb/0x320 [ 185.338532][ T5803] gfs2_fill_super+0x1a08/0x21b0 [ 185.338554][ T5803] ? __pfx_gfs2_fill_super+0x10/0x10 [ 185.338569][ T5803] ? init_locking+0xb8/0x210 [ 185.338581][ T5803] ? sb_set_blocksize+0x155/0x240 [ 185.338593][ T5803] ? setup_bdev_super+0x4c1/0x5b0 [ 185.338609][ T5803] get_tree_bdev_flags+0x40e/0x4d0 [ 185.338623][ T5803] ? __pfx_gfs2_fill_super+0x10/0x10 [ 185.338637][ T5803] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 185.338648][ T5803] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 185.338666][ T5803] gfs2_get_tree+0x51/0x1e0 [ 185.338681][ T5803] vfs_get_tree+0x92/0x2a0 [ 185.338696][ T5803] do_new_mount+0x302/0xa10 [ 185.338706][ T5803] ? apparmor_capable+0x137/0x1a0 [ 185.338723][ T5803] ? __pfx_do_new_mount+0x10/0x10 [ 185.338733][ T5803] ? ns_capable+0x8a/0xf0 [ 185.338745][ T5803] ? kmem_cache_free+0x197/0x620 [ 185.338766][ T5803] __se_sys_mount+0x313/0x410 [ 185.338779][ T5803] ? __pfx___se_sys_mount+0x10/0x10 [ 185.338793][ T5803] ? __x64_sys_mount+0x20/0xc0 [ 185.338830][ T5803] do_syscall_64+0xec/0xf80 [ 185.338840][ T5803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.338850][ T5803] ? trace_irq_disable+0x37/0x100 [ 185.338863][ T5803] ? clear_bhb_loop+0x60/0xb0 [ 185.338874][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.338884][ T5803] RIP: 0033:0x7f655f590f6a [ 185.338895][ T5803] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.338903][ T5803] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 185.338915][ T5803] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 185.338922][ T5803] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 185.338929][ T5803] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 185.338936][ T5803] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 185.338942][ T5803] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 185.338958][ T5803] [ 185.338963][ T5803] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/01/08 22:58:31 executed programs: 124 [ 188.990902][ T5821] loop0: detected capacity change from 0 to 32768 [ 189.063773][ T5821] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 189.081214][ T5821] gfs2: fsid=.: Now mounting FS (format 1801)... [ 189.126286][ T5821] syz.0.123: attempt to access beyond end of device [ 189.126286][ T5821] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 189.189174][ T5821] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 189.226736][ T5821] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 189.230616][ T5821] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5821 [syz.0.123] init_journal+0x19a3/0x2170 [ 189.256242][ T5821] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 189.273827][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.0.123 Not tainted syzkaller #0 PREEMPT(full) [ 189.273846][ T5821] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 189.273853][ T5821] Call Trace: [ 189.273857][ T5821] [ 189.273862][ T5821] dump_stack_lvl+0xe8/0x150 [ 189.273881][ T5821] gfs2_withdraw+0xc3/0x1b0 [ 189.273897][ T5821] gfs2_jdesc_check+0x17d/0x2f0 [ 189.273910][ T5821] check_journal_clean+0x158/0x310 [ 189.273926][ T5821] ? __pfx_check_journal_clean+0x10/0x10 [ 189.273941][ T5821] ? init_journal+0x19a3/0x2170 [ 189.273958][ T5821] ? do_raw_spin_unlock+0x4d/0x240 [ 189.273973][ T5821] ? _raw_spin_unlock+0x28/0x50 [ 189.273998][ T5821] ? gfs2_jdesc_find+0xab/0xc0 [ 189.274009][ T5821] init_journal+0x19a3/0x2170 [ 189.274028][ T5821] ? init_inodes+0xdb/0x320 [ 189.274038][ T5821] ? vsnprintf+0x38b/0xee0 [ 189.274047][ T5821] ? __pfx_init_journal+0x10/0x10 [ 189.274056][ T5821] ? vsnprintf+0xdf1/0xee0 [ 189.274067][ T5821] ? snprintf+0xda/0x120 [ 189.274078][ T5821] ? init_inodes+0xdb/0x320 [ 189.274090][ T5821] ? __pfx_snprintf+0x10/0x10 [ 189.274102][ T5821] ? gfs2_glock_nq_num+0x13d/0x170 [ 189.274114][ T5821] init_inodes+0xdb/0x320 [ 189.274128][ T5821] gfs2_fill_super+0x1a08/0x21b0 [ 189.274150][ T5821] ? __pfx_gfs2_fill_super+0x10/0x10 [ 189.274165][ T5821] ? init_locking+0xb8/0x210 [ 189.274179][ T5821] ? sb_set_blocksize+0x155/0x240 [ 189.274192][ T5821] ? setup_bdev_super+0x4c1/0x5b0 [ 189.274208][ T5821] get_tree_bdev_flags+0x40e/0x4d0 [ 189.274221][ T5821] ? __pfx_gfs2_fill_super+0x10/0x10 [ 189.274235][ T5821] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 189.274247][ T5821] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 189.274265][ T5821] gfs2_get_tree+0x51/0x1e0 [ 189.274280][ T5821] vfs_get_tree+0x92/0x2a0 [ 189.274294][ T5821] do_new_mount+0x302/0xa10 [ 189.274306][ T5821] ? apparmor_capable+0x137/0x1a0 [ 189.274321][ T5821] ? __pfx_do_new_mount+0x10/0x10 [ 189.274331][ T5821] ? ns_capable+0x8a/0xf0 [ 189.274344][ T5821] ? kmem_cache_free+0x197/0x620 [ 189.274364][ T5821] __se_sys_mount+0x313/0x410 [ 189.274377][ T5821] ? __pfx___se_sys_mount+0x10/0x10 [ 189.274391][ T5821] ? __x64_sys_mount+0x20/0xc0 [ 189.274403][ T5821] do_syscall_64+0xec/0xf80 [ 189.274413][ T5821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.274423][ T5821] ? trace_irq_disable+0x37/0x100 [ 189.274435][ T5821] ? clear_bhb_loop+0x60/0xb0 [ 189.274447][ T5821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.274458][ T5821] RIP: 0033:0x7f655f590f6a [ 189.274468][ T5821] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.274477][ T5821] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.274489][ T5821] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 189.274520][ T5821] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 189.274527][ T5821] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 189.274534][ T5821] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 189.274540][ T5821] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 189.274558][ T5821] [ 189.692759][ T5821] gfs2: fsid=..s: Error checking journal for spectator mount. [ 192.312436][ T5828] loop0: detected capacity change from 0 to 32768 [ 192.458446][ T5828] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 192.461601][ T5828] gfs2: fsid=.: Now mounting FS (format 1801)... [ 192.568152][ T5828] syz.0.130: attempt to access beyond end of device [ 192.568152][ T5828] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 192.646107][ T5828] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 192.697342][ T5828] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 192.700903][ T5828] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5828 [syz.0.130] init_journal+0x19a3/0x2170 [ 192.744978][ T5828] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 192.786627][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz.0.130 Not tainted syzkaller #0 PREEMPT(full) [ 192.786645][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.786651][ T5828] Call Trace: [ 192.786656][ T5828] [ 192.786660][ T5828] dump_stack_lvl+0xe8/0x150 [ 192.786680][ T5828] gfs2_withdraw+0xc3/0x1b0 [ 192.786695][ T5828] gfs2_jdesc_check+0x17d/0x2f0 [ 192.786708][ T5828] check_journal_clean+0x158/0x310 [ 192.786724][ T5828] ? __pfx_check_journal_clean+0x10/0x10 [ 192.786738][ T5828] ? init_journal+0x19a3/0x2170 [ 192.786757][ T5828] ? do_raw_spin_unlock+0x4d/0x240 [ 192.786773][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 192.786824][ T5828] ? gfs2_jdesc_find+0xab/0xc0 [ 192.786835][ T5828] init_journal+0x19a3/0x2170 [ 192.786853][ T5828] ? init_inodes+0xdb/0x320 [ 192.786866][ T5828] ? vsnprintf+0x38b/0xee0 [ 192.786878][ T5828] ? __pfx_init_journal+0x10/0x10 [ 192.786890][ T5828] ? vsnprintf+0xdf1/0xee0 [ 192.786908][ T5828] ? snprintf+0xda/0x120 [ 192.786921][ T5828] ? init_inodes+0xdb/0x320 [ 192.786933][ T5828] ? __pfx_snprintf+0x10/0x10 [ 192.786945][ T5828] ? gfs2_glock_nq_num+0x13d/0x170 [ 192.786957][ T5828] init_inodes+0xdb/0x320 [ 192.786972][ T5828] gfs2_fill_super+0x1a08/0x21b0 [ 192.786994][ T5828] ? __pfx_gfs2_fill_super+0x10/0x10 [ 192.787009][ T5828] ? init_locking+0xb8/0x210 [ 192.787021][ T5828] ? sb_set_blocksize+0x155/0x240 [ 192.787034][ T5828] ? setup_bdev_super+0x4c1/0x5b0 [ 192.787050][ T5828] get_tree_bdev_flags+0x40e/0x4d0 [ 192.787064][ T5828] ? __pfx_gfs2_fill_super+0x10/0x10 [ 192.787078][ T5828] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 192.787090][ T5828] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 192.787108][ T5828] gfs2_get_tree+0x51/0x1e0 [ 192.787124][ T5828] vfs_get_tree+0x92/0x2a0 [ 192.787139][ T5828] do_new_mount+0x302/0xa10 [ 192.787149][ T5828] ? apparmor_capable+0x137/0x1a0 [ 192.787165][ T5828] ? __pfx_do_new_mount+0x10/0x10 [ 192.787175][ T5828] ? ns_capable+0x8a/0xf0 [ 192.787188][ T5828] ? kmem_cache_free+0x197/0x620 [ 192.787208][ T5828] __se_sys_mount+0x313/0x410 [ 192.787222][ T5828] ? __pfx___se_sys_mount+0x10/0x10 [ 192.787236][ T5828] ? __x64_sys_mount+0x20/0xc0 [ 192.787248][ T5828] do_syscall_64+0xec/0xf80 [ 192.787258][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.787267][ T5828] ? trace_irq_disable+0x37/0x100 [ 192.787280][ T5828] ? clear_bhb_loop+0x60/0xb0 [ 192.787292][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.787301][ T5828] RIP: 0033:0x7f655f590f6a [ 192.787311][ T5828] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.787320][ T5828] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.787332][ T5828] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 192.787339][ T5828] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 192.787345][ T5828] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 192.787352][ T5828] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 192.787359][ T5828] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 192.787382][ T5828] [ 192.787387][ T5828] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/01/08 22:58:37 executed programs: 132 [ 195.873185][ T5837] loop0: detected capacity change from 0 to 32768 [ 196.026055][ T5837] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 196.029368][ T5837] gfs2: fsid=.: Now mounting FS (format 1801)... [ 196.099998][ T5837] syz.0.137: attempt to access beyond end of device [ 196.099998][ T5837] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 196.173935][ T5837] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 196.228545][ T5837] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 196.232384][ T5837] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5837 [syz.0.137] init_journal+0x19a3/0x2170 [ 196.268646][ T5837] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 196.272260][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT(full) [ 196.272277][ T5837] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.272283][ T5837] Call Trace: [ 196.272290][ T5837] [ 196.272296][ T5837] dump_stack_lvl+0xe8/0x150 [ 196.272315][ T5837] gfs2_withdraw+0xc3/0x1b0 [ 196.272331][ T5837] gfs2_jdesc_check+0x17d/0x2f0 [ 196.272345][ T5837] check_journal_clean+0x158/0x310 [ 196.272359][ T5837] ? __pfx_check_journal_clean+0x10/0x10 [ 196.272373][ T5837] ? init_journal+0x19a3/0x2170 [ 196.272400][ T5837] ? do_raw_spin_unlock+0x4d/0x240 [ 196.272416][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 196.272440][ T5837] ? gfs2_jdesc_find+0xab/0xc0 [ 196.272450][ T5837] init_journal+0x19a3/0x2170 [ 196.272474][ T5837] ? init_inodes+0xdb/0x320 [ 196.272488][ T5837] ? vsnprintf+0x38b/0xee0 [ 196.272502][ T5837] ? __pfx_init_journal+0x10/0x10 [ 196.272513][ T5837] ? vsnprintf+0xdf1/0xee0 [ 196.272524][ T5837] ? snprintf+0xda/0x120 [ 196.272532][ T5837] ? init_inodes+0xdb/0x320 [ 196.272541][ T5837] ? __pfx_snprintf+0x10/0x10 [ 196.272549][ T5837] ? gfs2_glock_nq_num+0x13d/0x170 [ 196.272560][ T5837] init_inodes+0xdb/0x320 [ 196.272573][ T5837] gfs2_fill_super+0x1a08/0x21b0 [ 196.272595][ T5837] ? __pfx_gfs2_fill_super+0x10/0x10 [ 196.272609][ T5837] ? init_locking+0xb8/0x210 [ 196.272621][ T5837] ? sb_set_blocksize+0x155/0x240 [ 196.272633][ T5837] ? setup_bdev_super+0x4c1/0x5b0 [ 196.272651][ T5837] get_tree_bdev_flags+0x40e/0x4d0 [ 196.272665][ T5837] ? __pfx_gfs2_fill_super+0x10/0x10 [ 196.272679][ T5837] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 196.272691][ T5837] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 196.272708][ T5837] gfs2_get_tree+0x51/0x1e0 [ 196.272724][ T5837] vfs_get_tree+0x92/0x2a0 [ 196.272739][ T5837] do_new_mount+0x302/0xa10 [ 196.272749][ T5837] ? apparmor_capable+0x137/0x1a0 [ 196.272764][ T5837] ? __pfx_do_new_mount+0x10/0x10 [ 196.272773][ T5837] ? ns_capable+0x8a/0xf0 [ 196.272786][ T5837] ? kmem_cache_free+0x197/0x620 [ 196.272807][ T5837] __se_sys_mount+0x313/0x410 [ 196.272822][ T5837] ? __pfx___se_sys_mount+0x10/0x10 [ 196.272834][ T5837] ? __x64_sys_mount+0x20/0xc0 [ 196.272841][ T5837] do_syscall_64+0xec/0xf80 [ 196.272848][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.272855][ T5837] ? trace_irq_disable+0x37/0x100 [ 196.272864][ T5837] ? clear_bhb_loop+0x60/0xb0 [ 196.272874][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.272884][ T5837] RIP: 0033:0x7f655f590f6a [ 196.272894][ T5837] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.272902][ T5837] RSP: 002b:00007ffd9df2c4f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.272915][ T5837] RAX: ffffffffffffffda RBX: 00007ffd9df2c580 RCX: 00007f655f590f6a [ 196.272922][ T5837] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ffd9df2c540 [ 196.272929][ T5837] RBP: 0000200000000000 R08: 00007ffd9df2c580 R09: 0000000000208c1b [ 196.272935][ T5837] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 196.272942][ T5837] R13: 00007ffd9df2c540 R14: 0000000000012750 R15: 00002000000128c0 [ 196.272959][ T5837] [ 196.272963][ T5837] gfs2: fsid=..s: Error checking journal for spectator mount. [ 196.691574][ T5841] ================================================================== [ 196.695036][ T5841] BUG: KASAN: slab-use-after-free in folio_evictable+0xe4/0x250 [ 196.698200][ T5841] Read of size 8 at addr ffff8880534753a0 by task syz.5.141/5841 [ 196.702259][ T5841] [ 196.703463][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.5.141 Not tainted syzkaller #0 PREEMPT(full) [ 196.703480][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.703487][ T5841] Call Trace: [ 196.703496][ T5841] [ 196.703503][ T5841] dump_stack_lvl+0xe8/0x150 [ 196.703525][ T5841] print_report+0xca/0x240 [ 196.703537][ T5841] ? folio_evictable+0xe4/0x250 [ 196.703552][ T5841] kasan_report+0x118/0x150 [ 196.703565][ T5841] ? folio_evictable+0xe4/0x250 [ 196.703579][ T5841] kasan_check_range+0x2b0/0x2c0 [ 196.703590][ T5841] ? folio_evictable+0x1c/0x250 [ 196.703601][ T5841] folio_evictable+0xe4/0x250 [ 196.703614][ T5841] evict_folios+0x1af9/0x57f0 [ 196.703637][ T5841] ? __pfx_evict_folios+0x10/0x10 [ 196.703652][ T5841] ? __pfx_zswap_shrinker_count+0x10/0x10 [ 196.703667][ T5841] ? __lock_acquire+0x6b6/0x2cf0 [ 196.703681][ T5841] ? __lock_acquire+0x6b6/0x2cf0 [ 196.703692][ T5841] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 196.703705][ T5841] ? get_swappiness+0x358/0x3c0 [ 196.703721][ T5841] try_to_shrink_lruvec+0x8a3/0xb50 [ 196.703744][ T5841] shrink_one+0x25c/0x720 [ 196.703760][ T5841] ? shrink_node+0x2d3f/0x35b0 [ 196.703776][ T5841] shrink_node+0x2f7d/0x35b0 [ 196.703794][ T5841] ? shrink_node+0x2d3f/0x35b0 [ 196.703809][ T5841] ? unwind_next_frame+0xa5/0x23d0 [ 196.703824][ T5841] ? unwind_next_frame+0xa5/0x23d0 [ 196.703836][ T5841] ? is_bpf_text_address+0x26/0x2b0 [ 196.703852][ T5841] ? lock_acquire+0x107/0x340 [ 196.703863][ T5841] ? __lock_acquire+0x6b6/0x2cf0 [ 196.703873][ T5841] ? __pfx_shrink_node+0x10/0x10 [ 196.703892][ T5841] ? vmpressure_prio+0x33/0x150 [ 196.703906][ T5841] do_try_to_free_pages+0x668/0x1960 [ 196.703924][ T5841] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 196.703936][ T5841] ? allow_direct_reclaim+0x65/0x570 [ 196.703954][ T5841] try_to_free_pages+0x892/0xd90 [ 196.703967][ T5841] ? __pfx_try_to_free_pages+0x10/0x10 [ 196.703979][ T5841] ? psi_group_change+0xab8/0x1050 [ 196.703998][ T5841] ? fs_reclaim_acquire+0x7d/0x100 [ 196.704016][ T5841] __alloc_pages_direct_reclaim+0x144/0x300 [ 196.704032][ T5841] ? __pfx___alloc_pages_direct_reclaim+0x10/0x10 [ 196.704047][ T5841] ? wake_all_kswapds+0x167/0x280 [ 196.704061][ T5841] __alloc_pages_slowpath+0x60c/0xce0 [ 196.704076][ T5841] __alloc_frozen_pages_noprof+0x319/0x370 [ 196.704088][ T5841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 196.704100][ T5841] ? lock_acquire+0x107/0x340 [ 196.704110][ T5841] ? policy_nodemask+0x27c/0x720 [ 196.704122][ T5841] alloc_pages_mpol+0x232/0x4a0 [ 196.704135][ T5841] folio_alloc_mpol_noprof+0x39/0x70 [ 196.704147][ T5841] shmem_alloc_and_add_folio+0x423/0xf40 [ 196.704162][ T5841] ? filemap_get_entry+0xad/0x2f0 [ 196.704176][ T5841] ? filemap_get_entry+0xad/0x2f0 [ 196.704190][ T5841] ? filemap_get_entry+0x28f/0x2f0 [ 196.704204][ T5841] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 196.704219][ T5841] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 196.704232][ T5841] shmem_get_folio_gfp+0x59d/0x1660 [ 196.704248][ T5841] shmem_write_begin+0x16c/0x330 [ 196.704263][ T5841] generic_perform_write+0x2c5/0x900 [ 196.704277][ T5841] ? __pfx_generic_perform_write+0x10/0x10 [ 196.704286][ T5841] ? preempt_count_add+0x91/0x190 [ 196.704297][ T5841] ? mnt_put_write_access_file+0xb9/0x100 [ 196.704314][ T5841] ? file_update_time_flags+0x448/0x4e0 [ 196.704329][ T5841] shmem_file_write_iter+0xf8/0x120 [ 196.704343][ T5841] vfs_write+0x5c9/0xb30 [ 196.704360][ T5841] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 196.704391][ T5841] ? __pfx_vfs_write+0x10/0x10 [ 196.704418][ T5841] ksys_write+0x145/0x250 [ 196.704434][ T5841] ? __pfx_ksys_write+0x10/0x10 [ 196.704450][ T5841] do_syscall_64+0xec/0xf80 [ 196.704475][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.704483][ T5841] ? trace_irq_disable+0x37/0x100 [ 196.704495][ T5841] ? clear_bhb_loop+0x60/0xb0 [ 196.704505][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.704516][ T5841] RIP: 0033:0x7f01a7b8e27f [ 196.704528][ T5841] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 196.704538][ T5841] RSP: 002b:00007ffc6df7c470 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 196.704552][ T5841] RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007f01a7b8e27f [ 196.704559][ T5841] RDX: 0000000001000000 RSI: 00007f019ec00000 RDI: 0000000000000003 [ 196.704565][ T5841] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000001274a [ 196.704571][ T5841] R10: 0000200000000142 R11: 0000000000000293 R12: 0000000000000003 [ 196.704578][ T5841] R13: 00007ffc6df7c570 R14: 00007ffc6df7c530 R15: 00007f019ec00000 [ 196.704589][ T5841] [ 196.704594][ T5841] [ 196.900819][ T5841] Allocated by task 5791: [ 196.902762][ T5841] kasan_save_track+0x3e/0x80 [ 196.904849][ T5841] __kasan_slab_alloc+0x6c/0x80 [ 196.907316][ T5841] kmem_cache_alloc_noprof+0x37d/0x710 [ 196.909775][ T5841] gfs2_glock_get+0x263/0xf10 [ 196.911641][ T5841] gfs2_inode_lookup+0x270/0xbe0 [ 196.913792][ T5841] gfs2_dir_search+0x168/0x220 [ 196.915999][ T5841] gfs2_lookupi+0x3d9/0x5a0 [ 196.918035][ T5841] gfs2_lookup_meta+0xa7/0x170 [ 196.920162][ T5841] init_journal+0x1002/0x2170 [ 196.922505][ T5841] init_inodes+0xdb/0x320 [ 196.924639][ T5841] gfs2_fill_super+0x1a08/0x21b0 [ 196.926782][ T5841] get_tree_bdev_flags+0x40e/0x4d0 [ 196.928986][ T5841] gfs2_get_tree+0x51/0x1e0 [ 196.930944][ T5841] vfs_get_tree+0x92/0x2a0 [ 196.932788][ T5841] do_new_mount+0x302/0xa10 [ 196.934580][ T5841] __se_sys_mount+0x313/0x410 [ 196.936549][ T5841] do_syscall_64+0xec/0xf80 [ 196.938508][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.940954][ T5841] [ 196.941925][ T5841] Freed by task 15: [ 196.943511][ T5841] kasan_save_track+0x3e/0x80 [ 196.945573][ T5841] kasan_save_free_info+0x46/0x50 [ 196.947829][ T5841] __kasan_slab_free+0x5c/0x80 [ 196.949806][ T5841] kmem_cache_free+0x197/0x620 [ 196.951623][ T5841] rcu_core+0xc8e/0x1720 [ 196.953402][ T5841] handle_softirqs+0x22b/0x7c0 [ 196.955349][ T5841] run_ksoftirqd+0x36/0x60 [ 196.957068][ T5841] smpboot_thread_fn+0x542/0xa60 [ 196.959041][ T5841] kthread+0x711/0x8a0 [ 196.960865][ T5841] ret_from_fork+0x510/0xa50 [ 196.962823][ T5841] ret_from_fork_asm+0x1a/0x30 [ 196.964992][ T5841] [ 196.966093][ T5841] Last potentially related work creation: [ 196.968694][ T5841] kasan_save_stack+0x3e/0x60 [ 196.970484][ T5841] kasan_record_aux_stack+0xbd/0xd0 [ 196.972752][ T5841] call_rcu+0xee/0x890 [ 196.974368][ T5841] gfs2_glock_free+0x3c/0xa0 [ 196.976183][ T5841] gfs2_evict_inode+0xae7/0x1000 [ 196.978229][ T5841] evict+0x5f4/0xae0 [ 196.980323][ T5841] init_journal+0x7d1/0x2170 [ 196.982751][ T5841] init_inodes+0xdb/0x320 [ 196.984497][ T5841] gfs2_fill_super+0x1a08/0x21b0 [ 196.986463][ T5841] get_tree_bdev_flags+0x40e/0x4d0 [ 196.988604][ T5841] gfs2_get_tree+0x51/0x1e0 [ 196.990468][ T5841] vfs_get_tree+0x92/0x2a0 [ 196.992334][ T5841] do_new_mount+0x302/0xa10 [ 196.994269][ T5841] __se_sys_mount+0x313/0x410 [ 196.996309][ T5841] do_syscall_64+0xec/0xf80 [ 196.998246][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.000683][ T5841] [ 197.001751][ T5841] The buggy address belongs to the object at ffff888053474fd8 [ 197.001751][ T5841] which belongs to the cache gfs2_glock(aspace) of size 1224 [ 197.007863][ T5841] The buggy address is located 968 bytes inside of [ 197.007863][ T5841] freed 1224-byte region [ffff888053474fd8, ffff8880534754a0) [ 197.013960][ T5841] [ 197.015089][ T5841] The buggy address belongs to the physical page: [ 197.018044][ T5841] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53474 [ 197.021741][ T5841] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 197.025327][ T5841] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 197.028622][ T5841] page_type: f5(slab) [ 197.030453][ T5841] raw: 04fff00000000040 ffff888000197780 dead000000000122 0000000000000000 [ 197.033987][ T5841] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 197.037031][ T5841] head: 04fff00000000040 ffff888000197780 dead000000000122 0000000000000000 [ 197.040051][ T5841] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 197.043446][ T5841] head: 04fff00000000002 ffffea00014d1d01 00000000ffffffff 00000000ffffffff [ 197.047637][ T5841] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 197.051303][ T5841] page dumped because: kasan: bad access detected [ 197.054735][ T5841] page_owner tracks the page as allocated [ 197.057749][ T5841] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5675, tgid 5675 (syz.0.17), ts 140815264190, free_ts 125252773083 [ 197.066055][ T5841] post_alloc_hook+0x234/0x290 [ 197.068029][ T5841] get_page_from_freelist+0x24e0/0x2580 [ 197.070450][ T5841] __alloc_frozen_pages_noprof+0x181/0x370 [ 197.073107][ T5841] alloc_pages_mpol+0x232/0x4a0 [ 197.075329][ T5841] allocate_slab+0x86/0x3b0 [ 197.077455][ T5841] ___slab_alloc+0xe53/0x1820 [ 197.079584][ T5841] __slab_alloc+0x65/0x100 [ 197.081576][ T5841] kmem_cache_alloc_noprof+0x40f/0x710 [ 197.083812][ T5841] gfs2_glock_get+0x263/0xf10 [ 197.085489][ T5841] gfs2_inode_lookup+0x270/0xbe0 [ 197.087440][ T5841] init_sb+0xa30/0x12c0 [ 197.089205][ T5841] gfs2_fill_super+0x16a6/0x21b0 [ 197.091183][ T5841] get_tree_bdev_flags+0x40e/0x4d0 [ 197.093320][ T5841] gfs2_get_tree+0x51/0x1e0 [ 197.095371][ T5841] vfs_get_tree+0x92/0x2a0 [ 197.097188][ T5841] do_new_mount+0x302/0xa10 [ 197.099027][ T5841] page last free pid 5395 tgid 5395 stack trace: [ 197.101603][ T5841] __free_frozen_pages+0xbc8/0xd30 [ 197.103792][ T5841] vfree+0x25a/0x400 [ 197.105419][ T5841] kcov_close+0x28/0x50 [ 197.107163][ T5841] __fput+0x44c/0xa70 [ 197.109018][ T5841] task_work_run+0x1d4/0x260 [ 197.111019][ T5841] do_exit+0x694/0x22f0 [ 197.113125][ T5841] do_group_exit+0x21c/0x2d0 [ 197.115266][ T5841] get_signal+0x1285/0x1340 [ 197.117277][ T5841] arch_do_signal_or_restart+0x9a/0x7a0 [ 197.119775][ T5841] exit_to_user_mode_loop+0x87/0x4e0 [ 197.121993][ T5841] do_syscall_64+0x2c1/0xf80 [ 197.124088][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.126681][ T5841] [ 197.127842][ T5841] Memory state around the buggy address: [ 197.130399][ T5841] ffff888053475280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.133820][ T5841] ffff888053475300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.137572][ T5841] >ffff888053475380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.141012][ T5841] ^ [ 197.143066][ T5841] ffff888053475400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 197.145980][ T5841] ffff888053475480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 197.149620][ T5841] ================================================================== [ 197.152717][ T5841] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 197.155811][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.5.141 Not tainted syzkaller #0 PREEMPT(full) [ 197.160064][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 197.164685][ T5841] Call Trace: [ 197.166061][ T5841] [ 197.167459][ T5841] vpanic+0x1e0/0x670 [ 197.169378][ T5841] panic+0xb9/0xc0 [ 197.171069][ T5841] ? __pfx_panic+0x10/0x10 [ 197.173021][ T5841] ? folio_evictable+0xe4/0x250 [ 197.174960][ T5841] ? rcu_is_watching+0x15/0xb0 [ 197.177113][ T5841] ? folio_evictable+0xe4/0x250 [ 197.179293][ T5841] ? folio_evictable+0xe4/0x250 [ 197.181429][ T5841] check_panic_on_warn+0x89/0xb0 [ 197.183661][ T5841] ? folio_evictable+0xe4/0x250 [ 197.185835][ T5841] end_report+0x6f/0x140 [ 197.187710][ T5841] kasan_report+0x129/0x150 [ 197.189631][ T5841] ? folio_evictable+0xe4/0x250 [ 197.191477][ T5841] kasan_check_range+0x2b0/0x2c0 [ 197.193660][ T5841] ? folio_evictable+0x1c/0x250 [ 197.195891][ T5841] folio_evictable+0xe4/0x250 [ 197.198031][ T5841] evict_folios+0x1af9/0x57f0 [ 197.200246][ T5841] ? __pfx_evict_folios+0x10/0x10 [ 197.202560][ T5841] ? __pfx_zswap_shrinker_count+0x10/0x10 [ 197.205112][ T5841] ? __lock_acquire+0x6b6/0x2cf0 [ 197.207276][ T5841] ? __lock_acquire+0x6b6/0x2cf0 [ 197.209446][ T5841] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 197.212115][ T5841] ? get_swappiness+0x358/0x3c0 [ 197.214307][ T5841] try_to_shrink_lruvec+0x8a3/0xb50 [ 197.216580][ T5841] shrink_one+0x25c/0x720 [ 197.218545][ T5841] ? shrink_node+0x2d3f/0x35b0 [ 197.220649][ T5841] shrink_node+0x2f7d/0x35b0 [ 197.222726][ T5841] ? shrink_node+0x2d3f/0x35b0 [ 197.224912][ T5841] ? unwind_next_frame+0xa5/0x23d0 [ 197.227043][ T5841] ? unwind_next_frame+0xa5/0x23d0 [ 197.229104][ T5841] ? is_bpf_text_address+0x26/0x2b0 [ 197.231271][ T5841] ? lock_acquire+0x107/0x340 [ 197.233418][ T5841] ? __lock_acquire+0x6b6/0x2cf0 [ 197.235489][ T5841] ? __pfx_shrink_node+0x10/0x10 [ 197.237843][ T5841] ? vmpressure_prio+0x33/0x150 [ 197.240116][ T5841] do_try_to_free_pages+0x668/0x1960 [ 197.242125][ T5841] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 197.244349][ T5841] ? allow_direct_reclaim+0x65/0x570 [ 197.246372][ T5841] try_to_free_pages+0x892/0xd90 [ 197.248541][ T5841] ? __pfx_try_to_free_pages+0x10/0x10 [ 197.251009][ T5841] ? psi_group_change+0xab8/0x1050 [ 197.253320][ T5841] ? fs_reclaim_acquire+0x7d/0x100 [ 197.255529][ T5841] __alloc_pages_direct_reclaim+0x144/0x300 [ 197.257865][ T5841] ? __pfx___alloc_pages_direct_reclaim+0x10/0x10 [ 197.260462][ T5841] ? wake_all_kswapds+0x167/0x280 [ 197.262500][ T5841] __alloc_pages_slowpath+0x60c/0xce0 [ 197.264692][ T5841] __alloc_frozen_pages_noprof+0x319/0x370 [ 197.267057][ T5841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.269804][ T5841] ? lock_acquire+0x107/0x340 [ 197.271939][ T5841] ? policy_nodemask+0x27c/0x720 [ 197.274090][ T5841] alloc_pages_mpol+0x232/0x4a0 [ 197.276300][ T5841] folio_alloc_mpol_noprof+0x39/0x70 [ 197.278633][ T5841] shmem_alloc_and_add_folio+0x423/0xf40 [ 197.281016][ T5841] ? filemap_get_entry+0xad/0x2f0 [ 197.283103][ T5841] ? filemap_get_entry+0xad/0x2f0 [ 197.285147][ T5841] ? filemap_get_entry+0x28f/0x2f0 [ 197.287390][ T5841] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 197.289912][ T5841] ? shmem_allowable_huge_orders+0x1d4/0x4e0 [ 197.292400][ T5841] shmem_get_folio_gfp+0x59d/0x1660 [ 197.294477][ T5841] shmem_write_begin+0x16c/0x330 [ 197.296506][ T5841] generic_perform_write+0x2c5/0x900 [ 197.298684][ T5841] ? __pfx_generic_perform_write+0x10/0x10 [ 197.301055][ T5841] ? preempt_count_add+0x91/0x190 [ 197.303122][ T5841] ? mnt_put_write_access_file+0xb9/0x100 [ 197.305407][ T5841] ? file_update_time_flags+0x448/0x4e0 [ 197.307643][ T5841] shmem_file_write_iter+0xf8/0x120 [ 197.309669][ T5841] vfs_write+0x5c9/0xb30 [ 197.311469][ T5841] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 197.314032][ T5841] ? __pfx_vfs_write+0x10/0x10 [ 197.316199][ T5841] ksys_write+0x145/0x250 [ 197.318276][ T5841] ? __pfx_ksys_write+0x10/0x10 [ 197.320494][ T5841] do_syscall_64+0xec/0xf80 [ 197.322449][ T5841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.325083][ T5841] ? trace_irq_disable+0x37/0x100 [ 197.327424][ T5841] ? clear_bhb_loop+0x60/0xb0 [ 197.329563][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.332053][ T5841] RIP: 0033:0x7f01a7b8e27f [ 197.334024][ T5841] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 197.342187][ T5841] RSP: 002b:00007ffc6df7c470 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 197.345540][ T5841] RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 00007f01a7b8e27f [ 197.348821][ T5841] RDX: 0000000001000000 RSI: 00007f019ec00000 RDI: 0000000000000003 [ 197.352148][ T5841] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000001274a [ 197.355468][ T5841] R10: 0000200000000142 R11: 0000000000000293 R12: 0000000000000003 [ 197.359321][ T5841] R13: 00007ffc6df7c570 R14: 00007ffc6df7c530 R15: 00007f019ec00000 [ 197.362457][ T5841] [ 197.364126][ T5841] Kernel Offset: disabled [ 197.365992][ T5841] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:58:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000b7462d0 R8 =ffff888033d68237 R9 =1ffff110067ad046 R10=dffffc0000000000 R11=ffffffff851bb760 R12=dffffc0000000000 R13=ffffffff99900a11 R14=ffffffff99c156c0 R15=0000000000000000 RIP=ffffffff851bb7dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555570b2500 ffffffff 00c00000 GS =0000 ffff88808d414000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0f334a6000 CR3=0000000036a13000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6df7c990 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a7c15050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a7c1505d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a7c15057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a7c1506b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a7c150f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01a7c151cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000140 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000140 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000