Warning: Permanently added '[localhost]:16580' (ED25519) to the list of known hosts. syzkaller login: [ 81.049167][ T5314] cgroup: Unknown subsys name 'net' [ 81.122485][ T5314] cgroup: Unknown subsys name 'cpuset' [ 81.129549][ T5314] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.719709][ T5314] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.809788][ T5339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.814267][ T5339] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.829939][ T5340] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.837222][ T5340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.841805][ T5340] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.845543][ T5340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.849426][ T5340] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.856603][ T5340] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.860604][ T5340] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.863761][ T5340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.867373][ T5340] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.871257][ T5340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.875075][ T5340] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.880026][ T5340] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.883558][ T5340] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.886762][ T5340] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.890675][ T5340] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.894426][ T5340] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.898001][ T5342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.901394][ T5342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.904600][ T5340] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.912220][ T5340] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.915671][ T5340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.928020][ T45] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.931899][ T45] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.937326][ T45] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.940561][ T5340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.943837][ T5342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.948101][ T45] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.954901][ T45] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.895948][ T5322] chnl_net:caif_netlink_parms(): no params data found [ 84.315293][ T5322] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.327435][ T5322] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.336906][ T5322] bridge_slave_0: entered allmulticast mode [ 84.341089][ T5322] bridge_slave_0: entered promiscuous mode [ 84.370480][ T5322] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.382877][ T5322] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.390507][ T5322] bridge_slave_1: entered allmulticast mode [ 84.399560][ T5322] bridge_slave_1: entered promiscuous mode [ 84.505593][ T5322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.549137][ T5322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.657441][ T5322] team0: Port device team_slave_0 added [ 84.679157][ T5322] team0: Port device team_slave_1 added [ 84.783851][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.787919][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.799661][ T5322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.829660][ T5322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.832371][ T5322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.844904][ T5322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.970662][ T5346] Bluetooth: hci1: command tx timeout [ 85.046924][ T5346] Bluetooth: hci5: command tx timeout [ 85.049669][ T5346] Bluetooth: hci3: command tx timeout [ 85.052256][ T5346] Bluetooth: hci4: command tx timeout [ 85.055090][ T5346] Bluetooth: hci0: command tx timeout [ 85.057820][ T5344] Bluetooth: hci2: command tx timeout [ 85.061602][ T5321] chnl_net:caif_netlink_parms(): no params data found [ 85.074402][ T5322] hsr_slave_0: entered promiscuous mode [ 85.077998][ T5322] hsr_slave_1: entered promiscuous mode [ 85.099184][ T5329] chnl_net:caif_netlink_parms(): no params data found [ 85.111999][ T5328] chnl_net:caif_netlink_parms(): no params data found [ 85.161117][ T5326] chnl_net:caif_netlink_parms(): no params data found [ 85.224870][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 85.521042][ T5328] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.524131][ T5328] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.529778][ T5328] bridge_slave_0: entered allmulticast mode [ 85.533735][ T5328] bridge_slave_0: entered promiscuous mode [ 85.568371][ T5329] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.571291][ T5329] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.574500][ T5329] bridge_slave_0: entered allmulticast mode [ 85.580617][ T5329] bridge_slave_0: entered promiscuous mode [ 85.585612][ T5329] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.590474][ T5329] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.593823][ T5329] bridge_slave_1: entered allmulticast mode [ 85.599564][ T5329] bridge_slave_1: entered promiscuous mode [ 85.602854][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.605894][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.611380][ T5326] bridge_slave_0: entered allmulticast mode [ 85.615063][ T5326] bridge_slave_0: entered promiscuous mode [ 85.639103][ T5328] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.643162][ T5328] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.648436][ T5328] bridge_slave_1: entered allmulticast mode [ 85.652541][ T5328] bridge_slave_1: entered promiscuous mode [ 85.655756][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.660615][ T5321] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.663562][ T5321] bridge_slave_0: entered allmulticast mode [ 85.669006][ T5321] bridge_slave_0: entered promiscuous mode [ 85.692979][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.697850][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.701324][ T5326] bridge_slave_1: entered allmulticast mode [ 85.705115][ T5326] bridge_slave_1: entered promiscuous mode [ 85.741047][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.744656][ T5321] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.749410][ T5321] bridge_slave_1: entered allmulticast mode [ 85.753699][ T5321] bridge_slave_1: entered promiscuous mode [ 85.834835][ T5329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.845187][ T5326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.854198][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.860566][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.863964][ T5327] bridge_slave_0: entered allmulticast mode [ 85.869661][ T5327] bridge_slave_0: entered promiscuous mode [ 85.879264][ T5328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.884099][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.889535][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.892743][ T5327] bridge_slave_1: entered allmulticast mode [ 85.899015][ T5327] bridge_slave_1: entered promiscuous mode [ 85.906141][ T5321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.929096][ T5329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.945228][ T5326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.952796][ T5328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.990648][ T5321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.035865][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.101937][ T5328] team0: Port device team_slave_0 added [ 86.112544][ T5329] team0: Port device team_slave_0 added [ 86.118920][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.149495][ T5326] team0: Port device team_slave_0 added [ 86.153841][ T5328] team0: Port device team_slave_1 added [ 86.174319][ T5329] team0: Port device team_slave_1 added [ 86.192638][ T5321] team0: Port device team_slave_0 added [ 86.199285][ T5326] team0: Port device team_slave_1 added [ 86.245001][ T5321] team0: Port device team_slave_1 added [ 86.262169][ T5322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.278677][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.281852][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.295551][ T5328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.317819][ T5327] team0: Port device team_slave_0 added [ 86.354971][ T5322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.362621][ T5328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.365646][ T5328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.380794][ T5328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.388549][ T5329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.391560][ T5329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.407368][ T5329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.414140][ T5327] team0: Port device team_slave_1 added [ 86.420045][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.422794][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.433675][ T5326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.441559][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.444677][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.461020][ T5321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.466908][ T5322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.482127][ T5329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.485038][ T5329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.500740][ T5329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.514308][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.520283][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.531946][ T5326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.539672][ T5322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.559365][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.562473][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.574257][ T5321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.611523][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.614394][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.629599][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.662422][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.665683][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.680954][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.713967][ T5328] hsr_slave_0: entered promiscuous mode [ 86.722671][ T5328] hsr_slave_1: entered promiscuous mode [ 86.725952][ T5328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.730228][ T5328] Cannot create hsr debugfs directory [ 86.785069][ T5321] hsr_slave_0: entered promiscuous mode [ 86.789355][ T5321] hsr_slave_1: entered promiscuous mode [ 86.792183][ T5321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.795164][ T5321] Cannot create hsr debugfs directory [ 86.831689][ T5326] hsr_slave_0: entered promiscuous mode [ 86.834704][ T5326] hsr_slave_1: entered promiscuous mode [ 86.839641][ T5326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.842411][ T5326] Cannot create hsr debugfs directory [ 86.856124][ T5329] hsr_slave_0: entered promiscuous mode [ 86.862630][ T5329] hsr_slave_1: entered promiscuous mode [ 86.865833][ T5329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.869829][ T5329] Cannot create hsr debugfs directory [ 86.959536][ T5327] hsr_slave_0: entered promiscuous mode [ 86.962717][ T5327] hsr_slave_1: entered promiscuous mode [ 86.965451][ T5327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.971537][ T5327] Cannot create hsr debugfs directory [ 87.047400][ T5346] Bluetooth: hci1: command tx timeout [ 87.126703][ T5346] Bluetooth: hci0: command tx timeout [ 87.129069][ T5346] Bluetooth: hci2: command tx timeout [ 87.131608][ T5346] Bluetooth: hci4: command tx timeout [ 87.133974][ T5346] Bluetooth: hci3: command tx timeout [ 87.136084][ T5346] Bluetooth: hci5: command tx timeout [ 87.503357][ T5322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.563494][ T5322] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.588988][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.592140][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.603275][ T5326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.642744][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.645949][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.653951][ T5326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.694250][ T5326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.728017][ T5326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.807870][ T5328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.848140][ T5328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.854843][ T5328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.888267][ T5328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.913039][ T5322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.985476][ T5329] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.010818][ T5329] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.054568][ T5329] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.101204][ T5329] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.149261][ T5322] veth0_vlan: entered promiscuous mode [ 88.221228][ T5322] veth1_vlan: entered promiscuous mode [ 88.241655][ T5321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.253777][ T5321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.305650][ T5321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.322127][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.351647][ T5321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.374853][ T5326] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.466130][ T5328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.483942][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.487162][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.525312][ T5328] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.535484][ T5322] veth0_macvtap: entered promiscuous mode [ 88.548812][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.552111][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.565300][ T5327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.604840][ T5322] veth1_macvtap: entered promiscuous mode [ 88.630427][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.633472][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.641309][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.644469][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.654135][ T5327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.692548][ T5327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.743116][ T5329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.753373][ T5327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.809952][ T5322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.861895][ T5322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.872352][ T5329] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.933095][ T5322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.941685][ T5322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.945720][ T5322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.951106][ T5322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.963187][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.966676][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.991002][ T5321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.004446][ T5328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.040900][ T5326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.050837][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.054099][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.127516][ T5346] Bluetooth: hci1: command tx timeout [ 89.164215][ T5321] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.206998][ T5346] Bluetooth: hci5: command tx timeout [ 89.209331][ T5346] Bluetooth: hci3: command tx timeout [ 89.211669][ T5346] Bluetooth: hci4: command tx timeout [ 89.214006][ T5346] Bluetooth: hci2: command tx timeout [ 89.220226][ T5344] Bluetooth: hci0: command tx timeout [ 89.270362][ T5328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.287848][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.290926][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.295700][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.298730][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.434370][ T5322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.544753][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 executing program [ 89.700287][ T5326] veth0_vlan: entered promiscuous mode [ 89.772128][ T5329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.825113][ T5326] veth1_vlan: entered promiscuous mode [ 89.862979][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.983075][ T5326] veth0_macvtap: entered promiscuous mode [ 90.051812][ T5321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.081609][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.085020][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.131025][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.133889][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.188205][ T5326] veth1_macvtap: entered promiscuous mode [ 90.441169][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.459475][ T5321] veth0_vlan: entered promiscuous mode [ 90.532793][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.558673][ T5326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.562400][ T5326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.566161][ T5326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.617308][ T5326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.658135][ T5328] veth0_vlan: entered promiscuous mode [ 90.693597][ T5321] veth1_vlan: entered promiscuous mode [ 90.769911][ T5328] veth1_vlan: entered promiscuous mode [ 90.897307][ T5321] veth0_macvtap: entered promiscuous mode [ 90.940165][ T5321] veth1_macvtap: entered promiscuous mode [ 90.950053][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.079120][ T5465] loop0: detected capacity change from 0 to 32768 [ 91.155294][ T5465] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 91.195776][ T5327] veth0_vlan: entered promiscuous mode [ 91.201889][ T5465] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 91.210836][ T5346] Bluetooth: hci1: command tx timeout executing program [ 91.271049][ T5328] veth0_macvtap: entered promiscuous mode [ 91.281530][ T5465] syz-executor114: attempt to access beyond end of device [ 91.281530][ T5465] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 91.289080][ T5346] Bluetooth: hci2: command tx timeout [ 91.291530][ T5346] Bluetooth: hci0: command tx timeout [ 91.293971][ T5346] Bluetooth: hci4: command tx timeout [ 91.297284][ T45] Bluetooth: hci3: command tx timeout [ 91.299764][ T45] Bluetooth: hci5: command tx timeout [ 91.321107][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.330691][ T5329] veth0_vlan: entered promiscuous mode [ 91.346542][ T5465] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 91.351927][ T5465] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 91.355504][ T5465] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 91.399872][ T5328] veth1_macvtap: entered promiscuous mode [ 91.411142][ T5465] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 91.414855][ T5465] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 91.433115][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.441294][ T5465] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 91.461987][ T5327] veth1_vlan: entered promiscuous mode [ 91.479485][ T5465] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 91.489745][ T5465] gfs2: fsid=syz:syz.0: File system withdrawn [ 91.492473][ T5465] CPU: 0 UID: 0 PID: 5465 Comm: syz-executor114 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 91.492488][ T5465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.492494][ T5465] Call Trace: [ 91.492499][ T5465] [ 91.492504][ T5465] dump_stack_lvl+0x189/0x250 [ 91.492527][ T5465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.492547][ T5465] ? __pfx__printk+0x10/0x10 [ 91.492559][ T5465] ? kobject_uevent_env+0x36b/0x8c0 [ 91.492628][ T5465] gfs2_withdraw+0x111e/0x14f0 [ 91.492652][ T5465] ? __pfx_gfs2_withdraw+0x10/0x10 [ 91.492666][ T5465] ? __pfx_wake_up_bit+0x10/0x10 [ 91.492709][ T5465] ? gfs2_consist_inode_i+0xf5/0x110 [ 91.492725][ T5465] gfs2_jdesc_check+0x17d/0x2f0 [ 91.492743][ T5465] init_journal+0xca7/0x2260 [ 91.492762][ T5465] ? init_inodes+0xdb/0x320 [ 91.492777][ T5465] ? __pfx_init_journal+0x10/0x10 [ 91.492789][ T5465] ? vsnprintf+0xe11/0xf00 [ 91.492808][ T5465] ? snprintf+0xda/0x120 [ 91.492822][ T5465] ? init_inodes+0xdb/0x320 [ 91.492833][ T5465] ? __pfx_snprintf+0x10/0x10 [ 91.492846][ T5465] ? gfs2_glock_nq_num+0x13d/0x170 [ 91.492863][ T5465] init_inodes+0xdb/0x320 [ 91.492877][ T5465] gfs2_fill_super+0x1939/0x20e0 [ 91.492900][ T5465] ? __pfx_gfs2_fill_super+0x10/0x10 [ 91.492915][ T5465] ? init_locking+0xb8/0x210 [ 91.492925][ T5465] ? sb_set_blocksize+0x104/0x180 [ 91.492942][ T5465] ? setup_bdev_super+0x4c1/0x5b0 [ 91.492956][ T5465] get_tree_bdev_flags+0x40b/0x4d0 [ 91.492967][ T5465] ? __pfx_gfs2_fill_super+0x10/0x10 [ 91.492980][ T5465] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 91.492991][ T5465] ? rcu_is_watching+0x15/0xb0 [ 91.493012][ T5465] gfs2_get_tree+0x51/0x1e0 [ 91.493027][ T5465] vfs_get_tree+0x8f/0x2b0 [ 91.493039][ T5465] do_new_mount+0x24a/0xa40 [ 91.493057][ T5465] __se_sys_mount+0x317/0x410 [ 91.493073][ T5465] ? __pfx___se_sys_mount+0x10/0x10 [ 91.493089][ T5465] ? do_syscall_64+0xbe/0x3b0 [ 91.493097][ T5465] ? __x64_sys_mount+0x20/0xc0 [ 91.493111][ T5465] do_syscall_64+0xfa/0x3b0 [ 91.493120][ T5465] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.493137][ T5465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.493147][ T5465] ? clear_bhb_loop+0x60/0xb0 [ 91.493159][ T5465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.493169][ T5465] RIP: 0033:0x7ff2f7e1b16a [ 91.493180][ T5465] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 91.493188][ T5465] RSP: 002b:00007ff2f75bdfd8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 91.493201][ T5465] RAX: ffffffffffffffda RBX: 00007ff2f75bdff0 RCX: 00007ff2f7e1b16a [ 91.493208][ T5465] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007ff2f75bdff0 [ 91.493215][ T5465] RBP: 0000200000000000 R08: 00007ff2f75be030 R09: 000000000001274a [ 91.493221][ T5465] R10: 0000000000208c1b R11: 0000000000000282 R12: 0000000000000004 [ 91.493228][ T5465] R13: 0000200000000100 R14: 0000000000000003 R15: 00007ff2f75be030 [ 91.493245][ T5465] [ 91.493251][ T5465] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 91.683380][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.701015][ T5328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.723836][ T5328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.736761][ T5328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.745649][ T5328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.761050][ T5328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.767922][ T5321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.771613][ T5321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.775568][ T5321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.804600][ T5321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.813579][ T5329] veth1_vlan: entered promiscuous mode [ 91.937451][ T5327] veth0_macvtap: entered promiscuous mode [ 91.943160][ T5327] veth1_macvtap: entered promiscuous mode [ 91.954113][ T10] cfg80211: failed to load regulatory.db [ 92.090065][ T5329] veth0_macvtap: entered promiscuous mode [ 92.101873][ T5329] veth1_macvtap: entered promiscuous mode [ 92.172406][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.271852][ T5329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.341206][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.352435][ T5329] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program [ 92.451202][ T5327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.454812][ T5327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 92.490134][ T5327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.520816][ T5327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.551725][ T5329] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.555579][ T5329] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.597304][ T5329] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.625114][ T5329] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program executing program executing program executing program [ 93.902727][ T79] ================================================================== [ 93.906351][ T79] BUG: KASAN: slab-use-after-free in folio_evictable+0xe4/0x250 [ 93.909766][ T79] Read of size 8 at addr ffff888052ccd3a0 by task kswapd1/79 [ 93.913698][ T79] [ 93.914693][ T79] CPU: 0 UID: 0 PID: 79 Comm: kswapd1 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 93.914707][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.914714][ T79] Call Trace: [ 93.914721][ T79] [ 93.914727][ T79] dump_stack_lvl+0x189/0x250 [ 93.914746][ T79] ? rcu_is_watching+0x15/0xb0 [ 93.914761][ T79] ? __kasan_check_byte+0x12/0x40 [ 93.914772][ T79] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.914786][ T79] ? rcu_is_watching+0x15/0xb0 [ 93.914800][ T79] ? lock_release+0x4b/0x3e0 [ 93.914814][ T79] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 93.914850][ T79] ? __virt_addr_valid+0x1c8/0x5c0 [ 93.914861][ T79] ? __virt_addr_valid+0x4a5/0x5c0 [ 93.914871][ T79] print_report+0xd2/0x2b0 [ 93.914888][ T79] ? folio_evictable+0xe4/0x250 [ 93.914905][ T79] kasan_report+0x118/0x150 [ 93.914912][ T79] ? folio_evictable+0xe4/0x250 [ 93.914922][ T79] kasan_check_range+0x2b0/0x2c0 [ 93.914929][ T79] ? folio_evictable+0x1c/0x250 [ 93.914938][ T79] folio_evictable+0xe4/0x250 [ 93.914947][ T79] evict_folios+0x1acd/0x5500 [ 93.914964][ T79] ? __pfx_evict_folios+0x10/0x10 [ 93.914974][ T79] ? shrink_slab+0x129/0x10d0 [ 93.914986][ T79] ? __pfx___might_resched+0x10/0x10 [ 93.915004][ T79] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 93.915017][ T79] ? get_swappiness+0x358/0x3c0 [ 93.915028][ T79] try_to_shrink_lruvec+0x705/0x990 [ 93.915048][ T79] shrink_one+0x21b/0x7c0 [ 93.915057][ T79] ? shrink_node+0x2f10/0x3760 [ 93.915068][ T79] shrink_node+0x314e/0x3760 [ 93.915079][ T79] ? shrink_node+0x2f10/0x3760 [ 93.915091][ T79] ? __lock_acquire+0xab9/0xd20 [ 93.915107][ T79] ? percpu_ref_put+0x19/0x180 [ 93.915118][ T79] ? __pfx_shrink_node+0x10/0x10 [ 93.915128][ T79] ? percpu_ref_put+0x19/0x180 [ 93.915139][ T79] ? mem_cgroup_iter+0x420/0x460 [ 93.915152][ T79] ? mem_cgroup_iter+0x3b/0x460 [ 93.915163][ T79] kswapd+0x147c/0x2830 [ 93.915181][ T79] ? kswapd+0x951/0x2830 [ 93.915196][ T79] ? __pfx_kswapd+0x10/0x10 [ 93.915208][ T79] ? __lock_acquire+0xab9/0xd20 [ 93.915226][ T79] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 93.915239][ T79] ? _raw_spin_unlock+0x20/0x50 [ 93.915252][ T79] ? __pfx_autoremove_wake_function+0x10/0x10 [ 93.915264][ T79] ? __pfx_set_cpus_allowed_ptr+0x10/0x10 [ 93.915273][ T79] ? __kthread_parkme+0x7b/0x200 [ 93.915284][ T79] ? __kthread_parkme+0x1a1/0x200 [ 93.915293][ T79] kthread+0x70e/0x8a0 [ 93.915305][ T79] ? __pfx_kswapd+0x10/0x10 [ 93.915319][ T79] ? __pfx_kthread+0x10/0x10 [ 93.915330][ T79] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.915343][ T79] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.915359][ T79] ? __pfx_kthread+0x10/0x10 [ 93.915369][ T79] ret_from_fork+0x3f9/0x770 [ 93.915383][ T79] ? __pfx_ret_from_fork+0x10/0x10 [ 93.915400][ T79] ? __pfx_kthread+0x10/0x10 [ 93.915409][ T79] ret_from_fork_asm+0x1a/0x30 [ 93.915422][ T79] [ 93.915427][ T79] [ 94.045992][ T79] Allocated by task 5465: [ 94.047856][ T79] kasan_save_track+0x3e/0x80 [ 94.049908][ T79] __kasan_slab_alloc+0x6c/0x80 [ 94.052115][ T79] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 94.054625][ T79] gfs2_glock_get+0x263/0xec0 [ 94.056556][ T79] gfs2_inode_lookup+0x215/0xb10 [ 94.058676][ T79] gfs2_dir_search+0x168/0x220 [ 94.060788][ T79] gfs2_lookupi+0x3d9/0x5a0 [ 94.062932][ T79] init_journal+0x54a/0x2260 [ 94.065487][ T79] init_inodes+0xdb/0x320 [ 94.067991][ T79] gfs2_fill_super+0x1939/0x20e0 [ 94.070519][ T79] get_tree_bdev_flags+0x40b/0x4d0 [ 94.073051][ T79] gfs2_get_tree+0x51/0x1e0 [ 94.075198][ T79] vfs_get_tree+0x8f/0x2b0 [ 94.077586][ T79] do_new_mount+0x24a/0xa40 [ 94.079826][ T79] __se_sys_mount+0x317/0x410 [ 94.081960][ T79] do_syscall_64+0xfa/0x3b0 [ 94.084036][ T79] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.086728][ T79] [ 94.087749][ T79] Freed by task 15: [ 94.089480][ T79] kasan_save_track+0x3e/0x80 [ 94.091665][ T79] kasan_save_free_info+0x46/0x50 [ 94.094233][ T79] __kasan_slab_free+0x62/0x70 [ 94.096631][ T79] kmem_cache_free+0x18f/0x400 [ 94.098909][ T79] rcu_core+0xca5/0x1710 [ 94.100833][ T79] handle_softirqs+0x286/0x870 [ 94.102956][ T79] run_ksoftirqd+0x9b/0x100 [ 94.105118][ T79] smpboot_thread_fn+0x53f/0xa60 [ 94.107262][ T79] kthread+0x70e/0x8a0 [ 94.109053][ T79] ret_from_fork+0x3f9/0x770 [ 94.111121][ T79] ret_from_fork_asm+0x1a/0x30 [ 94.113300][ T79] [ 94.114462][ T79] Last potentially related work creation: [ 94.116994][ T79] kasan_save_stack+0x3e/0x60 [ 94.119266][ T79] kasan_record_aux_stack+0xbd/0xd0 [ 94.121627][ T79] call_rcu+0x142/0x990 [ 94.123483][ T79] __gfs2_glock_free+0xb44/0xc90 [ 94.125749][ T79] gfs2_glock_free+0x3c/0xa0 [ 94.128067][ T79] gfs2_evict_inode+0xae7/0x1000 [ 94.130525][ T79] evict+0x501/0x9c0 [ 94.132356][ T79] gfs2_jindex_free+0x39c/0x440 [ 94.134563][ T79] init_journal+0x8f1/0x2260 [ 94.136388][ T79] init_inodes+0xdb/0x320 [ 94.138149][ T79] gfs2_fill_super+0x1939/0x20e0 [ 94.140359][ T79] get_tree_bdev_flags+0x40b/0x4d0 [ 94.142691][ T79] gfs2_get_tree+0x51/0x1e0 [ 94.144702][ T79] vfs_get_tree+0x8f/0x2b0 [ 94.146771][ T79] do_new_mount+0x24a/0xa40 [ 94.148850][ T79] __se_sys_mount+0x317/0x410 [ 94.150951][ T79] do_syscall_64+0xfa/0x3b0 [ 94.153340][ T79] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.156880][ T79] [ 94.158236][ T79] Second to last potentially related work creation: [ 94.161427][ T79] kasan_save_stack+0x3e/0x60 [ 94.163483][ T79] kasan_record_aux_stack+0xbd/0xd0 [ 94.165604][ T79] insert_work+0x3d/0x330 [ 94.167339][ T79] __queue_work+0xcfc/0xfe0 [ 94.169352][ T79] queue_delayed_work_on+0x18b/0x280 [ 94.171690][ T79] do_xmote+0xce0/0x1220 [ 94.173609][ T79] glock_work_func+0x2a8/0x580 [ 94.175765][ T79] process_scheduled_works+0xae1/0x17b0 [ 94.178310][ T79] worker_thread+0x8a0/0xda0 [ 94.180510][ T79] kthread+0x70e/0x8a0 [ 94.182427][ T79] ret_from_fork+0x3f9/0x770 [ 94.184610][ T79] ret_from_fork_asm+0x1a/0x30 [ 94.186675][ T79] [ 94.187764][ T79] The buggy address belongs to the object at ffff888052cccfd8 [ 94.187764][ T79] which belongs to the cache gfs2_glock(aspace) of size 1224 [ 94.193985][ T79] The buggy address is located 968 bytes inside of [ 94.193985][ T79] freed 1224-byte region [ffff888052cccfd8, ffff888052ccd4a0) [ 94.200113][ T79] [ 94.201336][ T79] The buggy address belongs to the physical page: [ 94.204348][ T79] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52ccc [ 94.208726][ T79] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 94.212509][ T79] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 94.215903][ T79] page_type: f5(slab) [ 94.217717][ T79] raw: 04fff00000000040 ffff888032736640 dead000000000122 0000000000000000 [ 94.221376][ T79] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 94.225080][ T79] head: 04fff00000000040 ffff888032736640 dead000000000122 0000000000000000 [ 94.229008][ T79] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 94.233575][ T79] head: 04fff00000000002 ffffea00014b3301 00000000ffffffff 00000000ffffffff [ 94.237674][ T79] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 94.241520][ T79] page dumped because: kasan: bad access detected [ 94.244427][ T79] page_owner tracks the page as allocated [ 94.246954][ T79] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5465, tgid 5464 (syz-executor114), ts 91222604804, free_ts 89981277226 [ 94.256191][ T79] post_alloc_hook+0x240/0x2a0 [ 94.258518][ T79] get_page_from_freelist+0x21e4/0x22c0 [ 94.261447][ T79] __alloc_frozen_pages_noprof+0x181/0x370 [ 94.264338][ T79] alloc_pages_mpol+0x232/0x4a0 [ 94.266629][ T79] allocate_slab+0x8a/0x3b0 [ 94.268708][ T79] ___slab_alloc+0xbfc/0x1480 [ 94.270815][ T79] kmem_cache_alloc_noprof+0x283/0x3c0 [ 94.273301][ T79] gfs2_glock_get+0x263/0xec0 [ 94.275490][ T79] gfs2_inode_lookup+0x215/0xb10 [ 94.277633][ T79] init_sb+0xa30/0x12c0 [ 94.279500][ T79] gfs2_fill_super+0x1605/0x20e0 [ 94.281889][ T79] get_tree_bdev_flags+0x40b/0x4d0 [ 94.284377][ T79] gfs2_get_tree+0x51/0x1e0 [ 94.286643][ T79] vfs_get_tree+0x8f/0x2b0 [ 94.288698][ T79] do_new_mount+0x24a/0xa40 [ 94.290791][ T79] __se_sys_mount+0x317/0x410 [ 94.293007][ T79] page last free pid 5326 tgid 5326 stack trace: [ 94.296275][ T79] __free_frozen_pages+0xc71/0xe70 [ 94.298574][ T79] __slab_free+0x326/0x400 [ 94.300896][ T79] qlist_free_all+0x97/0x140 [ 94.303047][ T79] kasan_quarantine_reduce+0x148/0x160 [ 94.305542][ T79] __kasan_slab_alloc+0x22/0x80 [ 94.307714][ T79] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 94.310338][ T79] __alloc_skb+0x112/0x2d0 [ 94.312412][ T79] netlink_sendmsg+0x5c6/0xb30 [ 94.314753][ T79] __sock_sendmsg+0x219/0x270 [ 94.317126][ T79] __sys_sendto+0x3bd/0x520 [ 94.319539][ T79] __x64_sys_sendto+0xde/0x100 [ 94.322208][ T79] do_syscall_64+0xfa/0x3b0 [ 94.324691][ T79] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.327415][ T79] [ 94.328505][ T79] Memory state around the buggy address: [ 94.330843][ T79] ffff888052ccd280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.334245][ T79] ffff888052ccd300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.337571][ T79] >ffff888052ccd380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.341177][ T79] ^ [ 94.343521][ T79] ffff888052ccd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.347057][ T79] ffff888052ccd480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 94.350606][ T79] ================================================================== [ 94.354202][ T79] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 94.357512][ T79] CPU: 0 UID: 0 PID: 79 Comm: kswapd1 Not tainted 6.16.0-rc2-syzkaller-00162-g41687a5c6f8b #0 PREEMPT(full) [ 94.362208][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 94.366622][ T79] Call Trace: [ 94.368130][ T79] [ 94.369340][ T79] dump_stack_lvl+0x99/0x250 [ 94.371266][ T79] ? __asan_memcpy+0x40/0x70 [ 94.373195][ T79] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.375965][ T79] ? __pfx__printk+0x10/0x10 [ 94.378457][ T79] panic+0x2db/0x790 [ 94.380559][ T79] ? __pfx_panic+0x10/0x10 [ 94.382641][ T79] ? do_raw_spin_unlock+0x4d/0x240 [ 94.384988][ T79] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 94.387582][ T79] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 94.390407][ T79] ? folio_evictable+0xe4/0x250 [ 94.392561][ T79] check_panic_on_warn+0x89/0xb0 [ 94.394915][ T79] ? folio_evictable+0xe4/0x250 [ 94.397149][ T79] end_report+0x78/0x160 [ 94.399092][ T79] kasan_report+0x129/0x150 [ 94.401180][ T79] ? folio_evictable+0xe4/0x250 [ 94.403469][ T79] kasan_check_range+0x2b0/0x2c0 [ 94.405821][ T79] ? folio_evictable+0x1c/0x250 [ 94.408132][ T79] folio_evictable+0xe4/0x250 [ 94.410308][ T79] evict_folios+0x1acd/0x5500 [ 94.412377][ T79] ? __pfx_evict_folios+0x10/0x10 [ 94.414707][ T79] ? shrink_slab+0x129/0x10d0 [ 94.416845][ T79] ? __pfx___might_resched+0x10/0x10 [ 94.419167][ T79] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 94.421901][ T79] ? get_swappiness+0x358/0x3c0 [ 94.424256][ T79] try_to_shrink_lruvec+0x705/0x990 [ 94.426836][ T79] shrink_one+0x21b/0x7c0 [ 94.428899][ T79] ? shrink_node+0x2f10/0x3760 [ 94.431160][ T79] shrink_node+0x314e/0x3760 [ 94.433259][ T79] ? shrink_node+0x2f10/0x3760 [ 94.435426][ T79] ? __lock_acquire+0xab9/0xd20 [ 94.437596][ T79] ? percpu_ref_put+0x19/0x180 [ 94.439761][ T79] ? __pfx_shrink_node+0x10/0x10 [ 94.442069][ T79] ? percpu_ref_put+0x19/0x180 [ 94.444247][ T79] ? mem_cgroup_iter+0x420/0x460 [ 94.446646][ T79] ? mem_cgroup_iter+0x3b/0x460 [ 94.448826][ T79] kswapd+0x147c/0x2830 [ 94.450423][ T79] ? kswapd+0x951/0x2830 [ 94.452207][ T79] ? __pfx_kswapd+0x10/0x10 [ 94.454314][ T79] ? __lock_acquire+0xab9/0xd20 [ 94.456550][ T79] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 94.459269][ T79] ? _raw_spin_unlock+0x20/0x50 [ 94.461346][ T79] ? __pfx_autoremove_wake_function+0x10/0x10 [ 94.463992][ T79] ? __pfx_set_cpus_allowed_ptr+0x10/0x10 [ 94.466557][ T79] ? __kthread_parkme+0x7b/0x200 [ 94.468817][ T79] ? __kthread_parkme+0x1a1/0x200 [ 94.471112][ T79] kthread+0x70e/0x8a0 [ 94.472975][ T79] ? __pfx_kswapd+0x10/0x10 [ 94.475061][ T79] ? __pfx_kthread+0x10/0x10 [ 94.477619][ T79] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.480699][ T79] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.483308][ T79] ? __pfx_kthread+0x10/0x10 [ 94.485423][ T79] ret_from_fork+0x3f9/0x770 [ 94.487360][ T79] ? __pfx_ret_from_fork+0x10/0x10 [ 94.489451][ T79] ? __pfx_kthread+0x10/0x10 [ 94.491367][ T79] ret_from_fork_asm+0x1a/0x30 [ 94.493326][ T79] [ 94.494941][ T79] Kernel Offset: disabled [ 94.496814][ T79] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:09:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000103e9f0 R8 =ffff8880337f8237 R9 =1ffff110066ff046 R10=dffffc0000000000 R11=ffffffff85473cf0 R12=dffffc0000000000 R13=ffffffff99ac38e7 R14=ffffffff99dc8780 R15=0000000000000000 RIP=ffffffff85473d6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808d251000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff2ef430000 CR3=0000000055b80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeab57a0d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010006 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000050006 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff2f7eb4778 00007ff2f7eb4758 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040014 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000040020 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000060006 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000180 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000000000 0000000000000000 0000000000000180 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000