syzkaller login: [ 91.853994][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:16772' (ED25519) to the list of known hosts. 2026/02/28 01:48:05 parsed 1 programs [ 156.985498][ T5328] cgroup: Unknown subsys name 'net' [ 157.036486][ T5328] cgroup: Unknown subsys name 'cpuset' [ 157.043318][ T5328] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 159.063041][ T5328] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.228536][ T5347] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 165.497770][ T5363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.504326][ T5363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.508258][ T5363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.511649][ T5363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.514939][ T5363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.581751][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 168.789736][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.792843][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.121087][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.137359][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.499804][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.502893][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.557147][ T5349] bridge_slave_0: entered allmulticast mode [ 169.577520][ T5349] bridge_slave_0: entered promiscuous mode [ 169.599886][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.603368][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.647477][ T5349] bridge_slave_1: entered allmulticast mode [ 169.658611][ T5349] bridge_slave_1: entered promiscuous mode [ 169.871657][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.933111][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.044898][ T5349] team0: Port device team_slave_0 added [ 170.074532][ T5349] team0: Port device team_slave_1 added [ 170.215751][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.227959][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.267752][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.290085][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.293186][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.317736][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.447807][ T5349] hsr_slave_0: entered promiscuous mode [ 170.477403][ T5349] hsr_slave_1: entered promiscuous mode [ 170.968966][ T5349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.005422][ T5349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.024395][ T5349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.056760][ T5349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.233197][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.270892][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.280551][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.283766][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.312764][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.315840][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.726083][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.065203][ T5349] veth0_vlan: entered promiscuous mode [ 172.091376][ T5349] veth1_vlan: entered promiscuous mode [ 172.135349][ T5349] veth0_macvtap: entered promiscuous mode [ 172.153076][ T5349] veth1_macvtap: entered promiscuous mode [ 172.188266][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.198356][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.220414][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.231713][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.235428][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.265649][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/02/28 01:48:23 executed programs: 0 [ 172.745607][ T4662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.771366][ T45] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.775750][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.780331][ T45] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.784033][ T45] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.788090][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.792491][ T45] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.795476][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.799154][ T45] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.802483][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.875617][ T5461] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.887592][ T5461] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.891642][ T5461] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.904312][ T5461] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.917140][ T5461] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.935942][ T5461] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.947326][ T5461] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.950963][ T5461] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.967092][ T5461] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.983439][ T5461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.087548][ T4662] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 173.121622][ T5458] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 173.125540][ T5458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 173.138489][ T5458] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 173.159967][ T5458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.205971][ T4662] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.237531][ T4662] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.249712][ T5461] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.274611][ T4662] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.280112][ T4662] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.550629][ T70] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.880204][ T4662] Bluetooth: hci1: command tx timeout [ 174.882988][ T4662] Bluetooth: hci0: command tx timeout [ 174.908749][ T70] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.040694][ T70] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.115422][ T5453] chnl_net:caif_netlink_parms(): no params data found [ 175.175073][ T70] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.187891][ T5458] Bluetooth: hci3: command tx timeout [ 175.190730][ T5458] Bluetooth: hci2: command tx timeout [ 175.269919][ T4662] Bluetooth: hci4: command tx timeout [ 175.347022][ T4662] Bluetooth: hci5: command tx timeout [ 175.739134][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.742177][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.746656][ T5453] bridge_slave_0: entered allmulticast mode [ 175.758768][ T5453] bridge_slave_0: entered promiscuous mode [ 175.847494][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.851389][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.855618][ T5453] bridge_slave_1: entered allmulticast mode [ 175.878512][ T5453] bridge_slave_1: entered promiscuous mode [ 176.039385][ T5453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.045389][ T5453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.208816][ T70] bridge_slave_1: left allmulticast mode [ 176.211882][ T70] bridge_slave_1: left promiscuous mode [ 176.215011][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.240519][ T70] bridge_slave_0: left allmulticast mode [ 176.242997][ T70] bridge_slave_0: left promiscuous mode [ 176.245451][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.442580][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.448989][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.453852][ T70] bond0 (unregistering): Released all slaves [ 176.651202][ T5453] team0: Port device team_slave_0 added [ 176.670583][ T5453] team0: Port device team_slave_1 added [ 176.895743][ T5454] chnl_net:caif_netlink_parms(): no params data found [ 176.948386][ T4662] Bluetooth: hci0: command tx timeout [ 176.950839][ T4662] Bluetooth: hci1: command tx timeout [ 176.963536][ T5467] chnl_net:caif_netlink_parms(): no params data found [ 177.108860][ T5459] chnl_net:caif_netlink_parms(): no params data found [ 177.118845][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.121804][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.142551][ T5453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.163572][ T5453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.166553][ T5453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.177344][ T5453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.243435][ T70] hsr_slave_0: left promiscuous mode [ 177.246350][ T70] hsr_slave_1: left promiscuous mode [ 177.249733][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.253035][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.256551][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.260343][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.267499][ T5458] Bluetooth: hci2: command tx timeout [ 177.269729][ T5458] Bluetooth: hci3: command tx timeout [ 177.275376][ T70] veth1_macvtap: left promiscuous mode [ 177.278162][ T70] veth0_macvtap: left promiscuous mode [ 177.280478][ T70] veth1_vlan: left promiscuous mode [ 177.282755][ T70] veth0_vlan: left promiscuous mode [ 177.348510][ T4662] Bluetooth: hci4: command tx timeout [ 177.427055][ T4662] Bluetooth: hci5: command tx timeout [ 177.484169][ T70] team0 (unregistering): Port device team_slave_1 removed [ 177.492047][ T70] team0 (unregistering): Port device team_slave_0 removed [ 177.731487][ T5462] chnl_net:caif_netlink_parms(): no params data found [ 177.888385][ T5453] hsr_slave_0: entered promiscuous mode [ 177.897428][ T5453] hsr_slave_1: entered promiscuous mode [ 178.091218][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 178.114754][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.118336][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.121503][ T5459] bridge_slave_0: entered allmulticast mode [ 178.137548][ T5459] bridge_slave_0: entered promiscuous mode [ 178.149921][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.153073][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.156122][ T5459] bridge_slave_1: entered allmulticast mode [ 178.178248][ T5459] bridge_slave_1: entered promiscuous mode [ 178.196257][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.199637][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.202705][ T5454] bridge_slave_0: entered allmulticast mode [ 178.219327][ T5454] bridge_slave_0: entered promiscuous mode [ 178.289399][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.299934][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.303084][ T5454] bridge_slave_1: entered allmulticast mode [ 178.318692][ T5454] bridge_slave_1: entered promiscuous mode [ 178.353746][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.356775][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.364365][ T5467] bridge_slave_0: entered allmulticast mode [ 178.369030][ T5467] bridge_slave_0: entered promiscuous mode [ 178.457144][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.459842][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.462468][ T5467] bridge_slave_1: entered allmulticast mode [ 178.483997][ T5467] bridge_slave_1: entered promiscuous mode [ 178.512842][ T5459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.541375][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.575806][ T5459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.597967][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.698823][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.701896][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.717770][ T5462] bridge_slave_0: entered allmulticast mode [ 178.727503][ T5462] bridge_slave_0: entered promiscuous mode [ 178.738157][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.741232][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.744386][ T5462] bridge_slave_1: entered allmulticast mode [ 178.763651][ T5462] bridge_slave_1: entered promiscuous mode [ 178.787922][ T5467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.815134][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.819293][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.822392][ T5468] bridge_slave_0: entered allmulticast mode [ 178.826148][ T5468] bridge_slave_0: entered promiscuous mode [ 178.847797][ T5467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.853285][ T5459] team0: Port device team_slave_0 added [ 178.859162][ T5454] team0: Port device team_slave_0 added [ 178.874557][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.878643][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.881723][ T5468] bridge_slave_1: entered allmulticast mode [ 178.885431][ T5468] bridge_slave_1: entered promiscuous mode [ 178.918891][ T5459] team0: Port device team_slave_1 added [ 178.929106][ T5454] team0: Port device team_slave_1 added [ 178.937958][ T5462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.027244][ T4662] Bluetooth: hci1: command tx timeout [ 179.029533][ T4662] Bluetooth: hci0: command tx timeout [ 179.055210][ T5462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.109483][ T5467] team0: Port device team_slave_0 added [ 179.112070][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.114995][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.138652][ T5459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.181408][ T5462] team0: Port device team_slave_0 added [ 179.186420][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.209259][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.220686][ T5467] team0: Port device team_slave_1 added [ 179.223757][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.226661][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.258974][ T5459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.264085][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.278628][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.302250][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.314104][ T5462] team0: Port device team_slave_1 added [ 179.345978][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.349236][ T5458] Bluetooth: hci3: command tx timeout [ 179.351510][ T5458] Bluetooth: hci2: command tx timeout [ 179.354518][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.365748][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.427220][ T4662] Bluetooth: hci4: command tx timeout [ 179.443880][ T5468] team0: Port device team_slave_0 added [ 179.448237][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.451184][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.465964][ T5467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.489560][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.492544][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.503969][ T5462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.508689][ T4662] Bluetooth: hci5: command tx timeout [ 179.522449][ T5468] team0: Port device team_slave_1 added [ 179.531708][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.534768][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.558571][ T5467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.600167][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.603140][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.627005][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.658331][ T5459] hsr_slave_0: entered promiscuous mode [ 179.671962][ T5459] hsr_slave_1: entered promiscuous mode [ 179.681124][ T5459] debugfs: 'hsr0' already exists in 'hsr' [ 179.683630][ T5459] Cannot create hsr debugfs directory [ 179.706524][ T5454] hsr_slave_0: entered promiscuous mode [ 179.713894][ T5454] hsr_slave_1: entered promiscuous mode [ 179.716763][ T5454] debugfs: 'hsr0' already exists in 'hsr' [ 179.724405][ T5454] Cannot create hsr debugfs directory [ 179.834472][ T5453] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.863300][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.866239][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.886938][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.951666][ T5453] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.969670][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.973407][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.984625][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.002557][ T5467] hsr_slave_0: entered promiscuous mode [ 180.006309][ T5467] hsr_slave_1: entered promiscuous mode [ 180.009678][ T5467] debugfs: 'hsr0' already exists in 'hsr' [ 180.012215][ T5467] Cannot create hsr debugfs directory [ 180.023813][ T5453] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.035201][ T5462] hsr_slave_0: entered promiscuous mode [ 180.038744][ T5462] hsr_slave_1: entered promiscuous mode [ 180.041534][ T5462] debugfs: 'hsr0' already exists in 'hsr' [ 180.046388][ T5462] Cannot create hsr debugfs directory [ 180.124327][ T5453] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.283799][ T5468] hsr_slave_0: entered promiscuous mode [ 180.288085][ T5468] hsr_slave_1: entered promiscuous mode [ 180.291130][ T5468] debugfs: 'hsr0' already exists in 'hsr' [ 180.293600][ T5468] Cannot create hsr debugfs directory [ 180.766806][ T5459] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.791505][ T5459] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.829073][ T5453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.837678][ T5459] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.854402][ T5459] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.892263][ T5453] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.911354][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.914421][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.931134][ T5454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.966776][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.969945][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.975027][ T5454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.014141][ T5454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.055577][ T5454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.108400][ T4662] Bluetooth: hci0: command tx timeout [ 181.110882][ T4662] Bluetooth: hci1: command tx timeout [ 181.140373][ T5467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.175377][ T5467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.209714][ T5467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.222757][ T5467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.306803][ T5459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.398760][ T5462] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.429931][ T5458] Bluetooth: hci2: command tx timeout [ 181.432158][ T5458] Bluetooth: hci3: command tx timeout [ 181.507172][ T4662] Bluetooth: hci4: command tx timeout [ 181.521489][ T5462] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.548468][ T5462] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.590203][ T4662] Bluetooth: hci5: command tx timeout [ 181.656393][ T5462] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.720649][ T5459] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.809151][ T5453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.813229][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.816287][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.906793][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.910048][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.952342][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.043503][ T5454] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.059708][ T5453] veth0_vlan: entered promiscuous mode [ 182.125664][ T5453] veth1_vlan: entered promiscuous mode [ 182.132744][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.135849][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.219557][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.222623][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.262856][ T5467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.364811][ T5453] veth0_macvtap: entered promiscuous mode [ 182.409432][ T5453] veth1_macvtap: entered promiscuous mode [ 182.438462][ T5468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.502556][ T5467] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.528873][ T5468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.573375][ T5468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.609407][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.668158][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.675321][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.678581][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.711708][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.714886][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.733644][ T5468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.761418][ T5453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.785565][ T5462] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.855294][ T5467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.897077][ T5467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.908171][ T5459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.944544][ T1055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.962770][ T1055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.013702][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.016975][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.048006][ T1055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.129915][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.133227][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.138238][ T1055] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.394627][ T5459] veth0_vlan: entered promiscuous mode [ 183.449119][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.469847][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.473387][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.552420][ T5459] veth1_vlan: entered promiscuous mode [ 183.756552][ T5459] veth0_macvtap: entered promiscuous mode [ 183.789417][ T5454] veth0_vlan: entered promiscuous mode [ 183.796152][ T5454] veth1_vlan: entered promiscuous mode [ 183.835322][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.854803][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.900098][ T5459] veth1_macvtap: entered promiscuous mode [ 183.943582][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.994274][ T5467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.076576][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_0 2026/02/28 01:48:34 executed programs: 12 [ 184.121423][ T5454] veth0_macvtap: entered promiscuous mode [ 184.126302][ T5454] veth1_macvtap: entered promiscuous mode [ 184.190324][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.256259][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.276998][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.280720][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.284298][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.335070][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.401371][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.414631][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.417777][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.547901][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.588732][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.591996][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.647970][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.667308][ T1055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.671133][ T1055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.674562][ T1055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.782200][ T5468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.786541][ T5468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.833088][ T1055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.990653][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.994217][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.159441][ T3063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.162690][ T3063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.442439][ T5462] veth0_vlan: entered promiscuous mode [ 185.455725][ T5664] loop0: detected capacity change from 0 to 32768 [ 185.481799][ T3063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.485383][ T3063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.520302][ T5462] veth1_vlan: entered promiscuous mode [ 185.612349][ T5664] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 185.615955][ T5664] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 185.771844][ T5664] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 185.811513][ T5462] veth0_macvtap: entered promiscuous mode [ 185.849399][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 185.852530][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 185.879244][ T5467] veth0_vlan: entered promiscuous mode [ 185.885092][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.889760][ T5462] veth1_macvtap: entered promiscuous mode [ 185.910805][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.997644][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.031643][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.046424][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 193ms [ 186.106051][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 186.131511][ T5664] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 186.139245][ T5467] veth1_vlan: entered promiscuous mode [ 186.163356][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.177328][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.269694][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.340683][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.392278][ T5664] gfs2: fsid=syz:syz.0: found 1 quota changes [ 186.402100][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.575747][ T5467] veth0_macvtap: entered promiscuous mode [ 186.624059][ T5453] syz-executor: attempt to access beyond end of device [ 186.624059][ T5453] loop0: rw=8400897, sector=68719479080, nr_sectors = 8 limit=32768 [ 186.659321][ T5467] veth1_macvtap: entered promiscuous mode [ 186.697411][ T5453] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 186.703544][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.742225][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.748032][ T5453] syz-executor: attempt to access beyond end of device [ 186.748032][ T5453] loop0: rw=8400897, sector=68719479336, nr_sectors = 8 limit=32768 [ 186.754346][ T5453] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 186.846452][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.859658][ T5453] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 186.865470][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 186.865486][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.865493][ T5453] Call Trace: [ 186.865498][ T5453] [ 186.865503][ T5453] dump_stack_lvl+0xe8/0x150 [ 186.865620][ T5453] gfs2_withdraw+0xc3/0x1b0 [ 186.865678][ T5453] gfs2_ail1_flush+0x990/0xfd0 [ 186.865692][ T5453] ? unwind_get_return_address+0x4d/0x90 [ 186.865709][ T5453] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 186.865734][ T5453] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 186.865754][ T5453] empty_ail1_list+0x1b3/0x330 [ 186.865772][ T5453] ? __pfx_empty_ail1_list+0x10/0x10 [ 186.865810][ T5453] ? do_raw_spin_unlock+0x4d/0x210 [ 186.865825][ T5453] gfs2_log_flush+0x1e20/0x2510 [ 186.865847][ T5453] ? __pfx_gfs2_log_flush+0x10/0x10 [ 186.865863][ T5453] ? call_rcu+0x644/0x890 [ 186.865887][ T5453] ? lockdep_hardirqs_on+0x7a/0x110 [ 186.866279][ T5453] gfs2_kill_sb+0x5c/0x430 [ 186.866297][ T5453] deactivate_locked_super+0xbc/0x130 [ 186.866314][ T5453] cleanup_mnt+0x437/0x4d0 [ 186.866333][ T5453] ? _raw_spin_unlock_irq+0x23/0x50 [ 186.866355][ T5453] task_work_run+0x1d9/0x270 [ 186.866374][ T5453] ? __pfx_task_work_run+0x10/0x10 [ 186.866391][ T5453] exit_to_user_mode_loop+0xed/0x480 [ 186.866403][ T5453] ? rcu_is_watching+0x15/0xb0 [ 186.866421][ T5453] do_syscall_64+0x32d/0xf80 [ 186.866438][ T5453] ? trace_irq_disable+0x3b/0x150 [ 186.866454][ T5453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.866467][ T5453] ? clear_bhb_loop+0x40/0x90 [ 186.866481][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.866493][ T5453] RIP: 0033:0x7f5723d9d9d7 [ 186.866506][ T5453] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 186.866516][ T5453] RSP: 002b:00007ffdf057f5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 186.866528][ T5453] RAX: 0000000000000000 RBX: 00007f5723e31f90 RCX: 00007f5723d9d9d7 [ 186.866535][ T5453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf057f660 [ 186.866542][ T5453] RBP: 00007ffdf057f660 R08: 00007ffdf0580660 R09: 00000000ffffffff [ 186.866549][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf05806f0 [ 186.866555][ T5453] R13: 00007f5723e31f90 R14: 000000000002d7f0 R15: 00007ffdf0580730 [ 186.866572][ T5453] [ 186.866578][ T5453] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 187.199650][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.253464][ T1094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.280284][ T1094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.284002][ T1094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.437418][ T1094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.444577][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.466069][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.940158][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.943439][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.218929][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.242589][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.291125][ T5468] veth0_vlan: entered promiscuous mode [ 188.418284][ T5468] veth1_vlan: entered promiscuous mode [ 188.662263][ T5468] veth0_macvtap: entered promiscuous mode [ 188.731692][ T5468] veth1_macvtap: entered promiscuous mode [ 188.805650][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.381026][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.871893][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.877973][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.881768][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.885573][ T70] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/02/28 01:48:42 executed programs: 20 [ 191.744426][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.778719][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.952262][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.972389][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.870722][ T5621] gfs2: fsid=syz:syz.0: file system withdrawn 2026/02/28 01:48:47 executed programs: 30 2026/02/28 01:48:53 executed programs: 37 [ 204.477679][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.480662][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 2026/02/28 01:48:58 executed programs: 48 [ 211.005717][ T5796] loop0: detected capacity change from 0 to 32768 [ 211.100230][ T5796] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 211.104166][ T5796] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 211.219325][ T5796] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 211.287091][ T5679] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 211.302437][ T5679] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 212.111345][ T5679] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 808ms [ 212.164884][ T5679] gfs2: fsid=syz:syz.0: jid=0: Done [ 212.210972][ T5796] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 213.169690][ T5796] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/02/28 01:49:04 executed programs: 56 [ 215.855611][ T5822] loop0: detected capacity change from 0 to 32768 [ 215.928795][ T5822] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 215.932133][ T5822] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 216.029417][ T5822] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 217.221775][ T5621] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 217.231340][ T5621] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 217.442489][ T5621] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 211ms [ 217.479474][ T5621] gfs2: fsid=syz:syz.0: jid=0: Done [ 217.487611][ T5822] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 217.540628][ T5822] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/02/28 01:49:09 executed programs: 66 [ 228.938470][ T5783] udevd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 228.943455][ T5783] CPU: 0 UID: 0 PID: 5783 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 228.943472][ T5783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.943479][ T5783] Call Trace: [ 228.943485][ T5783] [ 228.943490][ T5783] dump_stack_lvl+0xe8/0x150 [ 228.943613][ T5783] dump_header+0xd3/0x4c0 [ 228.943629][ T5783] oom_kill_process+0x3ab/0x970 [ 228.943649][ T5783] out_of_memory+0x1141/0x1410 [ 228.943671][ T5783] ? __pfx_out_of_memory+0x10/0x10 [ 228.943694][ T5783] __alloc_pages_may_oom+0x1ea/0x330 [ 228.943710][ T5783] ? lockdep_hardirqs_on+0x7a/0x110 [ 228.943854][ T5783] ? __pfx___alloc_pages_may_oom+0x10/0x10 [ 228.943867][ T5783] ? unreserve_highatomic_pageblock+0x3e3/0x610 [ 228.943892][ T5783] __alloc_pages_slowpath+0x6c2/0xd40 [ 228.943915][ T5783] __alloc_frozen_pages_noprof+0x322/0x380 [ 228.943929][ T5783] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 228.943943][ T5783] ? __pfx_policy_nodemask+0x10/0x10 [ 228.943954][ T5783] ? do_raw_spin_lock+0x12b/0x2f0 [ 228.943971][ T5783] alloc_pages_mpol+0x232/0x4a0 [ 228.943986][ T5783] folio_alloc_mpol_noprof+0x39/0x70 [ 228.943998][ T5783] swap_cache_alloc_folio+0xd5/0x240 [ 228.944016][ T5783] swap_cluster_readahead+0x53a/0x690 [ 228.944034][ T5783] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 228.944056][ T5783] ? get_vma_policy+0x27b/0x3c0 [ 228.944069][ T5783] swapin_readahead+0x196/0xc50 [ 228.944082][ T5783] ? filemap_map_pages+0x185/0x2050 [ 228.944098][ T5783] ? __pfx_swapin_readahead+0x10/0x10 [ 228.944113][ T5783] ? swap_table_get+0x1e/0x260 [ 228.944126][ T5783] ? swap_table_get+0x1e/0x260 [ 228.944136][ T5783] ? swap_table_get+0x1e/0x260 [ 228.944149][ T5783] ? swap_table_get+0x216/0x260 [ 228.944163][ T5783] ? swap_cache_get_folio+0x513/0x520 [ 228.944179][ T5783] do_swap_page+0x54f/0x58d0 [ 228.944193][ T5783] ? __lock_acquire+0x6b5/0x2cf0 [ 228.944219][ T5783] ? do_swap_page+0x12c/0x58d0 [ 228.944230][ T5783] ? __pfx_do_swap_page+0x10/0x10 [ 228.944242][ T5783] ? __pte_offset_map+0x1ae/0x240 [ 228.944258][ T5783] ? pte_offset_map_rw_nolock+0xea/0x160 [ 228.944274][ T5783] handle_mm_fault+0x12d2/0x3310 [ 228.944295][ T5783] ? handle_mm_fault+0xee/0x3310 [ 228.944312][ T5783] ? __pfx_handle_mm_fault+0x10/0x10 [ 228.944325][ T5783] ? lock_vma_under_rcu+0x45a/0x500 [ 228.944357][ T5783] do_user_addr_fault+0xa73/0x1340 [ 228.944375][ T5783] ? rcu_is_watching+0x15/0xb0 [ 228.944387][ T5783] ? trace_page_fault_user+0x84/0x210 [ 228.944397][ T5783] exc_page_fault+0x6a/0xc0 [ 228.944408][ T5783] asm_exc_page_fault+0x26/0x30 [ 228.944416][ T5783] RIP: 0033:0x7f8809dfe5a0 [ 228.944425][ T5783] Code: 68 54 00 00 00 e9 a0 fa ff ff ff 25 3a 49 01 00 68 55 00 00 00 e9 90 fa ff ff ff 25 32 49 01 00 68 56 00 00 00 e9 80 fa ff ff 25 2a 49 01 00 68 57 00 00 00 e9 70 fa ff ff ff 25 22 49 01 00 [ 228.944432][ T5783] RSP: 002b:00007ffd6ad75cd8 EFLAGS: 00010246 [ 228.944439][ T5783] RAX: 0000000000000000 RBX: 000055a6bbdb8fa0 RCX: 000000000000001d [ 228.944444][ T5783] RDX: 00000000000001d1 RSI: 00007f88097f1ce0 RDI: 000055a6bbdb8fa0 [ 228.944455][ T5783] RBP: 000055a6bbd9b910 R08: 0000000020000000 R09: 0000000000000003 [ 228.944459][ T5783] R10: 0000000000000000 R11: 0000000000000297 R12: 000055a68dde7588 [ 228.944464][ T5783] R13: 00007ffd6ad75d60 R14: 0000000000000000 R15: 0000000000000000 [ 228.944474][ T5783] [ 228.944478][ T5783] Mem-Info: 2026/02/28 01:49:20 executed programs: 70 [ 230.106902][ T5783] active_anon:13154 inactive_anon:20635 isolated_anon:0 [ 230.106902][ T5783] active_file:983 inactive_file:3422 isolated_file:0 [ 230.106902][ T5783] unevictable:1768 dirty:125 writeback:0 [ 230.106902][ T5783] slab_reclaimable:5879 slab_unreclaimable:49956 [ 230.106902][ T5783] mapped:2538 shmem:1888 pagetables:1124 [ 230.106902][ T5783] sec_pagetables:289 bounce:0 [ 230.106902][ T5783] kernel_misc_reclaimable:0 [ 230.106902][ T5783] free:32379 free_pcp:197 free_cma:0 [ 230.263276][ T5783] Node 0 active_anon:40kB inactive_anon:20kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3392kB pagetables:712kB sec_pagetables:1084kB all_unreclaimable? yes Balloon:0kB [ 230.379019][ T5783] Node 1 active_anon:71044kB inactive_anon:82520kB active_file:3932kB inactive_file:13672kB unevictable:7072kB isolated(anon):0kB isolated(file):0kB mapped:10144kB dirty:500kB writeback:0kB shmem:13240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9148kB pagetables:3856kB sec_pagetables:72kB all_unreclaimable? no Balloon:0kB [ 230.493217][ T5783] Node 0 DMA free:0kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:1252kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 230.586912][ T5783] lowmem_reserve[]: 0 114 114 114 114 [ 230.600690][ T5783] Node 0 DMA32 free:0kB boost:9916kB min:14328kB low:15428kB high:16528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:20kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB zspages:8576kB present:770052kB managed:116776kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 230.691801][ T5783] lowmem_reserve[]: 0 0 0 0 0 [ 230.693891][ T5783] Node 1 DMA32 free:69240kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108232kB inactive_anon:82520kB active_file:3932kB inactive_file:13672kB unevictable:7072kB writepending:500kB zspages:34804kB present:786288kB managed:690812kB mlocked:0kB bounce:0kB free_pcp:5444kB local_pcp:5444kB free_cma:0kB [ 230.826950][ T5783] lowmem_reserve[]: 0 0 0 0 0 [ 230.847064][ T5783] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.870609][ T5783] Node 0 DMA32: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.919252][ T5783] Node 1 DMA32: 290*4kB (UE) 138*8kB (UME) 36*16kB (UM) 2*32kB (UM) 12*64kB (UE) 159*128kB (UME) 42*256kB (ME) 20*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 45016kB [ 230.925701][ T5783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.028104][ T5783] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.031905][ T5783] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.035908][ T5783] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.111364][ T5783] 26878 total pagecache pages [ 231.128990][ T5783] 135 pages in swap cache [ 231.161214][ T5783] Free swap = 32kB [ 231.162990][ T5783] Total swap = 124996kB [ 231.164624][ T5783] 393083 pages RAM [ 231.166158][ T5783] 0 pages HighMem/MovableOnly [ 231.243430][ T5783] 187346 pages reserved [ 231.269602][ T5783] 0 pages cma reserved [ 231.271577][ T5783] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=udevd,pid=5783,uid=0 [ 231.336763][ T5783] Out of memory (oom_kill_allocating_task): Killed process 5783 (udevd) total-vm:12332kB, anon-rss:944kB, file-rss:1604kB, shmem-rss:0kB, UID:0 pgtables:52kB oom_score_adj:0 [ 231.434431][ T4711] udevd[4711]: worker [5783] terminated by signal 9 (Killed) [ 231.682814][ T5867] loop0: detected capacity change from 0 to 32768 [ 231.723829][ T5867] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 231.726504][ T5867] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 231.818509][ T5867] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 231.882905][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 231.886624][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 232.112729][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 226ms [ 232.147359][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 232.167570][ T5867] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 232.337580][ T5867] gfs2: fsid=syz:syz.0: found 1 quota changes [ 232.481489][ T5453] syz-executor: attempt to access beyond end of device [ 232.481489][ T5453] loop0: rw=8400897, sector=68719479080, nr_sectors = 8 limit=32768 [ 232.526936][ T5453] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 232.552625][ T5453] syz-executor: attempt to access beyond end of device [ 232.552625][ T5453] loop0: rw=8400897, sector=68719479336, nr_sectors = 8 limit=32768 [ 232.596932][ T5453] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 232.621375][ T5453] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 232.626699][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 232.626716][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.626724][ T5453] Call Trace: [ 232.626730][ T5453] [ 232.626736][ T5453] dump_stack_lvl+0xe8/0x150 [ 232.626757][ T5453] gfs2_withdraw+0xc3/0x1b0 [ 232.627095][ T5453] gfs2_ail1_flush+0x990/0xfd0 [ 232.627122][ T5453] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 232.627145][ T5453] empty_ail1_list+0x1b3/0x330 [ 232.627171][ T5453] ? __pfx_empty_ail1_list+0x10/0x10 [ 232.627210][ T5453] ? do_raw_spin_unlock+0x4d/0x210 [ 232.627225][ T5453] gfs2_log_flush+0x1e20/0x2510 [ 232.627248][ T5453] ? __pfx_gfs2_log_flush+0x10/0x10 [ 232.627265][ T5453] ? call_rcu+0x644/0x890 [ 232.627280][ T5453] ? lockdep_hardirqs_on+0x7a/0x110 [ 232.627299][ T5453] gfs2_kill_sb+0x5c/0x430 [ 232.627317][ T5453] deactivate_locked_super+0xbc/0x130 [ 232.627334][ T5453] cleanup_mnt+0x437/0x4d0 [ 232.627350][ T5453] ? _raw_spin_unlock_irq+0x23/0x50 [ 232.627367][ T5453] task_work_run+0x1d9/0x270 [ 232.627381][ T5453] ? __pfx_task_work_run+0x10/0x10 [ 232.627399][ T5453] exit_to_user_mode_loop+0xed/0x480 [ 232.627412][ T5453] ? rcu_is_watching+0x15/0xb0 [ 232.627435][ T5453] do_syscall_64+0x32d/0xf80 [ 232.627451][ T5453] ? trace_irq_disable+0x3b/0x150 [ 232.627467][ T5453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.627478][ T5453] ? clear_bhb_loop+0x40/0x90 [ 232.627492][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.627504][ T5453] RIP: 0033:0x7f5723d9d9d7 [ 232.627517][ T5453] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 232.627526][ T5453] RSP: 002b:00007ffdf057f5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 232.627538][ T5453] RAX: 0000000000000000 RBX: 00007f5723e31f90 RCX: 00007f5723d9d9d7 [ 232.627544][ T5453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf057f660 [ 232.627549][ T5453] RBP: 00007ffdf057f660 R08: 00007ffdf0580660 R09: 00000000ffffffff [ 232.627556][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf05806f0 [ 232.627562][ T5453] R13: 00007f5723e31f90 R14: 0000000000038b4e R15: 00007ffdf0580730 [ 232.627580][ T5453] [ 232.716544][ T5453] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/02/28 01:49:26 executed programs: 87 [ 238.390393][ T9] gfs2: fsid=syz:syz.0: file system withdrawn [ 240.615898][ T5940] loop0: detected capacity change from 0 to 32768 [ 240.765182][ T5940] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 240.809536][ T5940] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 240.915280][ T5940] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 240.939515][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 240.942584][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 241.132448][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 189ms [ 241.168275][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 241.191128][ T5940] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 241.459443][ T5940] gfs2: fsid=syz:syz.0: found 1 quota changes [ 241.649441][ T5453] syz-executor: attempt to access beyond end of device [ 241.649441][ T5453] loop0: rw=8400897, sector=68719479080, nr_sectors = 8 limit=32768 [ 241.713649][ T5453] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 241.733251][ T5453] syz-executor: attempt to access beyond end of device [ 241.733251][ T5453] loop0: rw=8400897, sector=68719479336, nr_sectors = 8 limit=32768 [ 241.807018][ T5453] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 241.837207][ T5453] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 241.843024][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 241.843042][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.843049][ T5453] Call Trace: [ 241.843055][ T5453] [ 241.843060][ T5453] dump_stack_lvl+0xe8/0x150 [ 241.843083][ T5453] gfs2_withdraw+0xc3/0x1b0 [ 241.843098][ T5453] gfs2_ail1_flush+0x990/0xfd0 [ 241.843126][ T5453] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 241.843148][ T5453] empty_ail1_list+0x1b3/0x330 [ 241.843167][ T5453] ? __pfx_empty_ail1_list+0x10/0x10 [ 241.843219][ T5453] ? do_raw_spin_unlock+0x4d/0x210 [ 241.843236][ T5453] gfs2_log_flush+0x1e20/0x2510 [ 241.843261][ T5453] ? __pfx_gfs2_log_flush+0x10/0x10 [ 241.843277][ T5453] ? call_rcu+0x644/0x890 [ 241.843292][ T5453] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.843312][ T5453] gfs2_kill_sb+0x5c/0x430 [ 241.843328][ T5453] deactivate_locked_super+0xbc/0x130 [ 241.843346][ T5453] cleanup_mnt+0x437/0x4d0 [ 241.843362][ T5453] ? _raw_spin_unlock_irq+0x23/0x50 [ 241.843378][ T5453] task_work_run+0x1d9/0x270 [ 241.843393][ T5453] ? __pfx_task_work_run+0x10/0x10 [ 241.843410][ T5453] exit_to_user_mode_loop+0xed/0x480 [ 241.843423][ T5453] ? rcu_is_watching+0x15/0xb0 [ 241.843441][ T5453] do_syscall_64+0x32d/0xf80 [ 241.843457][ T5453] ? trace_irq_disable+0x3b/0x150 [ 241.843473][ T5453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.843484][ T5453] ? clear_bhb_loop+0x40/0x90 [ 241.843498][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.843508][ T5453] RIP: 0033:0x7f5723d9d9d7 [ 241.843519][ T5453] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 241.843529][ T5453] RSP: 002b:00007ffdf057f5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 241.843542][ T5453] RAX: 0000000000000000 RBX: 00007f5723e31f90 RCX: 00007f5723d9d9d7 [ 241.843549][ T5453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf057f660 [ 241.843556][ T5453] RBP: 00007ffdf057f660 R08: 00007ffdf0580660 R09: 00000000ffffffff [ 241.843562][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf05806f0 [ 241.843575][ T5453] R13: 00007f5723e31f90 R14: 000000000003aede R15: 00007ffdf0580730 [ 241.843590][ T5453] [ 241.843641][ T5453] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/02/28 01:49:32 executed programs: 102 2026/02/28 01:49:37 executed programs: 116 [ 247.911109][ T9] gfs2: fsid=syz:syz.0: file system withdrawn [ 250.419283][ T6015] loop0: detected capacity change from 0 to 32768 [ 250.488720][ T6015] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 250.493114][ T6015] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 250.798396][ T6015] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 250.827453][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 250.841339][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 251.855590][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1014ms [ 251.877662][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 251.879930][ T6015] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 251.911308][ T6015] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/02/28 01:49:43 executed programs: 123 [ 254.873144][ T6040] loop0: detected capacity change from 0 to 32768 [ 254.953308][ T6040] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 254.993132][ T6040] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 255.069280][ T6040] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 255.119125][ T5624] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 255.138638][ T5624] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 255.426274][ T5624] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 287ms [ 255.463400][ T5624] gfs2: fsid=syz:syz.0: jid=0: Done [ 255.465736][ T6040] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 255.847277][ T6040] gfs2: fsid=syz:syz.0: found 1 quota changes [ 256.004695][ T5453] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 256.055522][ T5453] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 256.080113][ T5453] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5453 [syz-executor] gfs2_quota_sync+0x370/0x470 [ 256.084361][ T5453] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 256.150525][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 256.150543][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.150550][ T5453] Call Trace: [ 256.150555][ T5453] [ 256.150560][ T5453] dump_stack_lvl+0xe8/0x150 [ 256.150581][ T5453] gfs2_withdraw+0xc3/0x1b0 [ 256.150597][ T5453] inode_go_instantiate+0xab4/0x1220 [ 256.150611][ T5453] ? __pfx_bit_wait+0x10/0x10 [ 256.150632][ T5453] ? __pfx_bit_wait+0x10/0x10 [ 256.150647][ T5453] ? __pfx_inode_go_instantiate+0x10/0x10 [ 256.150662][ T5453] ? __pfx_wake_bit_function+0x10/0x10 [ 256.150678][ T5453] gfs2_instantiate+0x168/0x220 [ 256.150695][ T5453] gfs2_glock_wait+0x1d4/0x2a0 [ 256.150712][ T5453] do_sync+0x49a/0xcb0 [ 256.150722][ T5453] ? _raw_spin_unlock+0x28/0x50 [ 256.150735][ T5453] ? gfs2_quota_sync+0x370/0x470 [ 256.150752][ T5453] ? __pfx_do_sync+0x10/0x10 [ 256.150768][ T5453] ? gfs2_quota_sync+0x370/0x470 [ 256.150781][ T5453] ? do_raw_spin_unlock+0x4d/0x210 [ 256.150796][ T5453] gfs2_quota_sync+0x370/0x470 [ 256.150813][ T5453] gfs2_sync_fs+0x4c/0xb0 [ 256.150831][ T5453] sync_filesystem+0xee/0x230 [ 256.150848][ T5453] generic_shutdown_super+0x77/0x2d0 [ 256.150865][ T5453] kill_block_super+0x44/0x90 [ 256.150882][ T5453] deactivate_locked_super+0xbc/0x130 [ 256.150897][ T5453] cleanup_mnt+0x437/0x4d0 [ 256.150913][ T5453] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.150930][ T5453] task_work_run+0x1d9/0x270 [ 256.150945][ T5453] ? __pfx_task_work_run+0x10/0x10 [ 256.150962][ T5453] exit_to_user_mode_loop+0xed/0x480 [ 256.150975][ T5453] ? rcu_is_watching+0x15/0xb0 [ 256.150993][ T5453] do_syscall_64+0x32d/0xf80 [ 256.151008][ T5453] ? trace_irq_disable+0x3b/0x150 [ 256.151023][ T5453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.151034][ T5453] ? clear_bhb_loop+0x40/0x90 [ 256.151069][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.151080][ T5453] RIP: 0033:0x7f5723d9d9d7 [ 256.151092][ T5453] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 256.151100][ T5453] RSP: 002b:00007ffdf057f5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 256.151113][ T5453] RAX: 0000000000000000 RBX: 00007f5723e31f90 RCX: 00007f5723d9d9d7 [ 256.151120][ T5453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf057f660 [ 256.151127][ T5453] RBP: 00007ffdf057f660 R08: 00007ffdf0580660 R09: 00000000ffffffff [ 256.151134][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf05806f0 [ 256.151141][ T5453] R13: 00007f5723e31f90 R14: 000000000003da96 R15: 00007ffdf0580730 [ 256.151157][ T5453] [ 256.151220][ T5453] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/02/28 01:49:48 executed programs: 134 [ 259.817867][ T6071] loop0: detected capacity change from 0 to 32768 [ 259.892674][ T6071] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 259.896256][ T6071] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 260.013716][ T6071] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 260.064216][ T5624] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 260.083697][ T5624] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 260.264616][ T5624] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 180ms [ 260.348208][ T5624] gfs2: fsid=syz:syz.0: jid=0: Done [ 260.350505][ T6071] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 260.590050][ T6071] gfs2: fsid=syz:syz.0: found 1 quota changes [ 260.752821][ T5453] syz-executor: attempt to access beyond end of device [ 260.752821][ T5453] loop0: rw=8400897, sector=68719479080, nr_sectors = 8 limit=32768 [ 260.822847][ T5453] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 260.864418][ T5453] syz-executor: attempt to access beyond end of device [ 260.864418][ T5453] loop0: rw=8400897, sector=68719479336, nr_sectors = 8 limit=32768 [ 260.932546][ T5453] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 260.974121][ T5453] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 260.980321][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 260.980341][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.980349][ T5453] Call Trace: [ 260.980357][ T5453] [ 260.980363][ T5453] dump_stack_lvl+0xe8/0x150 [ 260.980475][ T5453] gfs2_withdraw+0xc3/0x1b0 [ 260.980531][ T5453] gfs2_ail1_flush+0x990/0xfd0 [ 260.980561][ T5453] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 260.980588][ T5453] empty_ail1_list+0x1b3/0x330 [ 260.980608][ T5453] ? __pfx_empty_ail1_list+0x10/0x10 [ 260.980652][ T5453] ? do_raw_spin_unlock+0x4d/0x210 [ 260.980669][ T5453] gfs2_log_flush+0x1e20/0x2510 [ 260.980695][ T5453] ? __pfx_gfs2_log_flush+0x10/0x10 [ 260.980713][ T5453] ? call_rcu+0x644/0x890 [ 260.980730][ T5453] ? lockdep_hardirqs_on+0x7a/0x110 [ 260.980861][ T5453] gfs2_kill_sb+0x5c/0x430 [ 260.980880][ T5453] deactivate_locked_super+0xbc/0x130 [ 260.980898][ T5453] cleanup_mnt+0x437/0x4d0 [ 260.980915][ T5453] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.980934][ T5453] task_work_run+0x1d9/0x270 [ 260.980950][ T5453] ? __pfx_task_work_run+0x10/0x10 [ 260.980969][ T5453] exit_to_user_mode_loop+0xed/0x480 [ 260.980983][ T5453] ? rcu_is_watching+0x15/0xb0 [ 260.981002][ T5453] do_syscall_64+0x32d/0xf80 [ 260.981019][ T5453] ? trace_irq_disable+0x3b/0x150 [ 260.981036][ T5453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.981047][ T5453] ? clear_bhb_loop+0x40/0x90 [ 260.981062][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.981075][ T5453] RIP: 0033:0x7f5723d9d9d7 [ 260.981088][ T5453] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 260.981097][ T5453] RSP: 002b:00007ffdf057f5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 260.981111][ T5453] RAX: 0000000000000000 RBX: 00007f5723e31f90 RCX: 00007f5723d9d9d7 [ 260.981119][ T5453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf057f660 [ 260.981131][ T5453] RBP: 00007ffdf057f660 R08: 00007ffdf0580660 R09: 00000000ffffffff [ 260.981139][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf05806f0 [ 260.981147][ T5453] R13: 00007f5723e31f90 R14: 000000000003f9c1 R15: 00007ffdf0580730 [ 260.981189][ T5453] [ 260.981195][ T5453] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/02/28 01:49:54 executed programs: 147 [ 265.917977][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.920802][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.870471][ T5624] gfs2: fsid=syz:syz.0: file system withdrawn 2026/02/28 01:49:59 executed programs: 157 [ 269.013397][ T6139] loop0: detected capacity change from 0 to 32768 [ 269.122447][ T6139] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 269.125953][ T6139] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 269.740494][ T6139] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 269.768238][ T5621] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 269.774158][ T5621] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 270.913366][ T5621] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1139ms [ 270.947317][ T5621] gfs2: fsid=syz:syz.0: jid=0: Done [ 270.954094][ T6139] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 270.993225][ T6139] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 273.040391][ T6160] loop0: detected capacity change from 0 to 32768 [ 273.111300][ T6160] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 273.146000][ T6160] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 273.250877][ T6160] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 273.287935][ T5621] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 273.322037][ T5621] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 273.475492][ T5621] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 153ms [ 273.553438][ T5621] gfs2: fsid=syz:syz.0: jid=0: Done [ 273.566527][ T6160] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 274.257216][ T6160] gfs2: fsid=syz:syz.0: found 1 quota changes [ 274.417534][ T13] kworker/u4:1: attempt to access beyond end of device [ 274.417534][ T13] loop0: rw=8402945, sector=68719479080, nr_sectors = 8 limit=32768 [ 274.497704][ T13] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 274.507985][ T5453] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 274.513785][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 274.513801][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.513807][ T5453] Call Trace: [ 274.513812][ T5453] [ 274.513816][ T5453] dump_stack_lvl+0xe8/0x150 [ 274.513872][ T5453] gfs2_withdraw+0xc3/0x1b0 [ 274.513891][ T5453] gfs2_ail1_empty+0x2ba/0x7c0 [ 274.513913][ T5453] gfs2_flush_revokes+0x5c/0x80 [ 274.513925][ T5453] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 274.513940][ T5453] revoke_lo_before_commit+0x2f/0xe70 [ 274.513954][ T5453] ? __pfx_list_sort+0x10/0x10 [ 274.513963][ T5453] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.513978][ T5453] ? do_raw_spin_unlock+0x4d/0x210 [ 274.513988][ T5453] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 274.514003][ T5453] gfs2_log_flush+0xa6e/0x2510 [ 274.514023][ T5453] ? __pfx_gfs2_log_flush+0x10/0x10 [ 274.514043][ T5453] ? call_rcu+0x644/0x890 [ 274.514056][ T5453] ? lockdep_hardirqs_on+0x7a/0x110 [ 274.514184][ T5453] gfs2_kill_sb+0x5c/0x430 [ 274.514198][ T5453] deactivate_locked_super+0xbc/0x130 [ 274.514212][ T5453] cleanup_mnt+0x437/0x4d0 [ 274.514226][ T5453] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.514240][ T5453] task_work_run+0x1d9/0x270 [ 274.514254][ T5453] ? __pfx_task_work_run+0x10/0x10 [ 274.514269][ T5453] exit_to_user_mode_loop+0xed/0x480 [ 274.514280][ T5453] ? rcu_is_watching+0x15/0xb0 [ 274.514295][ T5453] do_syscall_64+0x32d/0xf80 [ 274.514309][ T5453] ? trace_irq_disable+0x3b/0x150 [ 274.514323][ T5453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.514332][ T5453] ? clear_bhb_loop+0x40/0x90 [ 274.514344][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.514354][ T5453] RIP: 0033:0x7f5723d9d9d7 [ 274.514364][ T5453] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 274.514372][ T5453] RSP: 002b:00007ffdf057f5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 274.514385][ T5453] RAX: 0000000000000000 RBX: 00007f5723e31f90 RCX: 00007f5723d9d9d7 [ 274.514391][ T5453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf057f660 [ 274.514397][ T5453] RBP: 00007ffdf057f660 R08: 00007ffdf0580660 R09: 00000000ffffffff [ 274.514403][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf05806f0 [ 274.514409][ T5453] R13: 00007f5723e31f90 R14: 0000000000042f12 R15: 00007ffdf0580730 [ 274.514424][ T5453] [ 274.514429][ T5453] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/02/28 01:50:07 executed programs: 164 [ 280.637669][ T5624] gfs2: fsid=syz:syz.0: file system withdrawn [ 280.661232][ T5453] ------------[ cut here ]------------ [ 280.663643][ T5453] kernel BUG at fs/gfs2/super.c:76! [ 280.665779][ T5453] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 280.668266][ T5453] CPU: 0 UID: 0 PID: 5453 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 280.672007][ T5453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.676103][ T5453] RIP: 0010:gfs2_jindex_free+0x44e/0x450 [ 280.679196][ T5453] Code: c8 69 8d 07 cc 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e2 fd ff ff e8 42 90 0c fe e9 d8 fd ff ff e8 e8 81 8a 07 e8 f3 db a0 fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 [ 280.686689][ T5453] RSP: 0018:ffffc900032c7bc0 EFLAGS: 00010293 [ 280.689100][ T5453] RAX: ffffffff8424bf7d RBX: dead000000000122 RCX: ffff88803e310000 [ 280.692387][ T5453] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000ffffffff [ 280.695938][ T5453] RBP: ffffc900032c7c80 R08: ffff8880463a4e37 R09: 1ffff11008c749c6 [ 280.699290][ T5453] R10: dffffc0000000000 R11: ffffed1008c749c7 R12: ffff8880463a4908 [ 280.702557][ T5453] R13: dffffc0000000000 R14: ffff88804629ec00 R15: ffff88804629ec78 [ 280.705920][ T5453] FS: 000055558118e500(0000) GS:ffff88808ca59000(0000) knlGS:0000000000000000 [ 280.709588][ T5453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.712269][ T5453] CR2: 00007f8de1eb3a37 CR3: 0000000040ad6000 CR4: 0000000000352ef0 [ 280.715665][ T5453] Call Trace: [ 280.717120][ T5453] [ 280.718435][ T5453] ? __pfx_gfs2_jindex_free+0x10/0x10 [ 280.720695][ T5453] ? gfs2_clear_rgrpd+0x710/0x740 [ 280.722813][ T5453] gfs2_put_super+0x7d9/0x860 [ 280.724799][ T5453] ? __pfx_gfs2_put_super+0x10/0x10 [ 280.727086][ T5453] generic_shutdown_super+0x13d/0x2d0 [ 280.729388][ T5453] kill_block_super+0x44/0x90 [ 280.731557][ T5453] deactivate_locked_super+0xbc/0x130 [ 280.733903][ T5453] cleanup_mnt+0x437/0x4d0 [ 280.735882][ T5453] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.738166][ T5453] task_work_run+0x1d9/0x270 [ 280.740102][ T5453] ? __pfx_task_work_run+0x10/0x10 [ 280.742363][ T5453] exit_to_user_mode_loop+0xed/0x480 [ 280.744626][ T5453] ? rcu_is_watching+0x15/0xb0 [ 280.746711][ T5453] do_syscall_64+0x32d/0xf80 [ 280.748662][ T5453] ? trace_irq_disable+0x3b/0x150 [ 280.750841][ T5453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.753340][ T5453] ? clear_bhb_loop+0x40/0x90 [ 280.755358][ T5453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.757881][ T5453] RIP: 0033:0x7f5723d9d9d7 [ 280.759829][ T5453] Code: Unable to access opcode bytes at 0x7f5723d9d9ad. [ 280.762717][ T5453] RSP: 002b:00007ffdf057f5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 280.766263][ T5453] RAX: 0000000000000000 RBX: 00007f5723e31f90 RCX: 00007f5723d9d9d7 [ 280.769504][ T5453] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf057f660 [ 280.772891][ T5453] RBP: 00007ffdf057f660 R08: 00007ffdf0580660 R09: 00000000ffffffff [ 280.776102][ T5453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf05806f0 [ 280.779204][ T5453] R13: 00007f5723e31f90 R14: 0000000000042f12 R15: 00007ffdf0580730 [ 280.782354][ T5453] [ 280.783642][ T5453] Modules linked in: [ 280.786378][ T5453] ---[ end trace 0000000000000000 ]--- [ 281.443773][ T5453] RIP: 0010:gfs2_jindex_free+0x44e/0x450 [ 281.473907][ T5453] Code: c8 69 8d 07 cc 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c e2 fd ff ff e8 42 90 0c fe e9 d8 fd ff ff e8 e8 81 8a 07 e8 f3 db a0 fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 [ 281.510147][ T5453] RSP: 0018:ffffc900032c7bc0 EFLAGS: 00010293 [ 281.535846][ T5453] RAX: ffffffff8424bf7d RBX: dead000000000122 RCX: ffff88803e310000 [ 281.556184][ T5453] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000ffffffff [ 281.587371][ T5453] RBP: ffffc900032c7c80 R08: ffff8880463a4e37 R09: 1ffff11008c749c6 [ 281.590869][ T5453] R10: dffffc0000000000 R11: ffffed1008c749c7 R12: ffff8880463a4908 [ 281.594342][ T5453] R13: dffffc0000000000 R14: ffff88804629ec00 R15: ffff88804629ec78 [ 281.633440][ T5453] FS: 000055558118e500(0000) GS:ffff88808ca59000(0000) knlGS:0000000000000000 [ 281.659624][ T5453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.662569][ T5453] CR2: 000000c007054000 CR3: 0000000040ad6000 CR4: 0000000000352ef0 [ 281.666183][ T5453] Kernel panic - not syncing: Fatal exception [ 281.669125][ T5453] Kernel Offset: disabled [ 281.670941][ T5453] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:50:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900032c73f0 R8 =ffff888034d38237 R9 =1ffff110069a7046 R10=dffffc0000000000 R11=ffffffff854184f0 R12=dffffc0000000000 R13=ffffffff9a2bda68 R14=ffffffff9a5d5c60 R15=0000000000000000 RIP=ffffffff8541856c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558118e500 ffffffff 00c00000 GS =0000 ffff88808ca59000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8de1eb3a37 CR3=0000000040ad6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dc8e7210dc8e7210 dc8e7210dc8e7210 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0da037ba0da037ba 0da037ba0da037ba ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ab6890c1ab6890c 1ab6890c1ab6890c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 63acd0c663acd0c6 63acd0c663acd0c6 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 81025eb4383d370a bf88a973b636f038 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b1e2cf887a57fdd8 d58c4f11c9c58361 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 46602d936e2f3aa3 e9d2ade8e769bff9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c45fdde37c9769a2 cc2531b713c487ff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f736732332d64933 917f74d4dbd205f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e2d7a64bcbacbdb5 6a60407cabe8ba5a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b08fc580d0bcc33d 88ba72edc14902d3 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8f19eb241ed272b3 d661d21553f4fe67 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 09d227ac09d227ac 09d227ac09d227ac ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c625a8a8c625a8a 8c625a8a8c625a8a ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e50b83b5e50b83b 5e50b83b5e50b83b ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000