Warning: Permanently added '[localhost]:29075' (ED25519) to the list of known hosts. 2026/02/09 17:20:29 parsed 1 programs syzkaller login: [ 89.727624][ T5316] cgroup: Unknown subsys name 'net' [ 89.814582][ T5316] cgroup: Unknown subsys name 'cpuset' [ 89.821570][ T5316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.673443][ T5316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.859043][ T5316] ODEBUG: Out of memory. ODEBUG disabled [ 96.828369][ T5331] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.032837][ T51] cfg80211: failed to load regulatory.db [ 98.374070][ T5343] chnl_net:caif_netlink_parms(): no params data found [ 98.601765][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.605616][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.608785][ T5343] bridge_slave_0: entered allmulticast mode [ 98.630765][ T5343] bridge_slave_0: entered promiscuous mode [ 98.640623][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.643759][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.646888][ T5343] bridge_slave_1: entered allmulticast mode [ 98.670198][ T5343] bridge_slave_1: entered promiscuous mode [ 98.732404][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.738653][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.788289][ T5343] team0: Port device team_slave_0 added [ 98.802344][ T5343] team0: Port device team_slave_1 added [ 98.844871][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.847633][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.878332][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.885030][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.888090][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.919675][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.981267][ T5343] hsr_slave_0: entered promiscuous mode [ 98.990079][ T5343] hsr_slave_1: entered promiscuous mode [ 99.347681][ T5343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.366252][ T5343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.383453][ T5343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.400607][ T5343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.536730][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.570677][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.583161][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.586492][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.610829][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.613793][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.897361][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.966353][ T5343] veth0_vlan: entered promiscuous mode [ 99.985585][ T5343] veth1_vlan: entered promiscuous mode [ 100.031027][ T5343] veth0_macvtap: entered promiscuous mode [ 100.043100][ T5343] veth1_macvtap: entered promiscuous mode [ 100.067971][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.086269][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.106089][ T2991] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.113333][ T2991] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.117098][ T2991] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.136197][ T2991] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.392657][ T2991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.497951][ T2991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.573491][ T2991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.692899][ T2991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.755896][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.760256][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.763766][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.767891][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.771350][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.561153][ T2991] bridge_slave_1: left allmulticast mode [ 102.563547][ T2991] bridge_slave_1: left promiscuous mode [ 102.566894][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.616120][ T2991] bridge_slave_0: left allmulticast mode [ 102.618656][ T2991] bridge_slave_0: left promiscuous mode [ 102.635811][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.010085][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.015984][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.022010][ T2991] bond0 (unregistering): Released all slaves [ 103.159501][ T2991] hsr_slave_0: left promiscuous mode [ 103.163988][ T2991] hsr_slave_1: left promiscuous mode [ 103.169836][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.173078][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.200841][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.204007][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.241713][ T2991] veth1_macvtap: left promiscuous mode [ 103.244516][ T2991] veth0_macvtap: left promiscuous mode [ 103.246976][ T2991] veth1_vlan: left promiscuous mode [ 103.279576][ T2991] veth0_vlan: left promiscuous mode [ 103.817147][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 103.842314][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 105.267541][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.281429][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.317342][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.325414][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/02/09 17:20:49 executed programs: 0 [ 107.315363][ T4671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.333662][ T4671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.336934][ T4671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.349056][ T4671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.352602][ T4671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.586984][ T5458] chnl_net:caif_netlink_parms(): no params data found [ 107.647481][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.650630][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.653664][ T5458] bridge_slave_0: entered allmulticast mode [ 107.657291][ T5458] bridge_slave_0: entered promiscuous mode [ 107.662987][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.666273][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.669864][ T5458] bridge_slave_1: entered allmulticast mode [ 107.673531][ T5458] bridge_slave_1: entered promiscuous mode [ 107.696438][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.708595][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.739089][ T5458] team0: Port device team_slave_0 added [ 107.744390][ T5458] team0: Port device team_slave_1 added [ 107.765646][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.768664][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.780782][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.787344][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.790818][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.802568][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.837794][ T5458] hsr_slave_0: entered promiscuous mode [ 107.841475][ T5458] hsr_slave_1: entered promiscuous mode [ 108.249093][ T5458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.272933][ T5458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.292491][ T5458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.301046][ T5458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.353347][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.356865][ T5458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.359997][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.362798][ T5458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.474237][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.495692][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.512538][ T1040] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.516019][ T1040] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.545267][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.548585][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.578205][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.581322][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.637454][ T5458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.650928][ T5458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.939096][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.007713][ T5458] veth0_vlan: entered promiscuous mode [ 109.025952][ T5458] veth1_vlan: entered promiscuous mode [ 109.081056][ T5458] veth0_macvtap: entered promiscuous mode [ 109.092659][ T5458] veth1_macvtap: entered promiscuous mode [ 109.116139][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.135229][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.164194][ T1043] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.186991][ T1043] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.200052][ T1043] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.203902][ T1043] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.284106][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.288421][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.362320][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.367730][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.430696][ T47] Bluetooth: hci0: command tx timeout [ 110.148547][ T5504] loop0: detected capacity change from 0 to 32768 [ 110.241024][ T5504] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 110.244975][ T5504] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 110.327028][ T5504] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 110.375945][ T5360] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 110.379179][ T5360] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 110.696599][ T5360] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 317ms [ 110.735860][ T5360] gfs2: fsid=syz:syz.0: jid=0: Done [ 110.738682][ T5504] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 110.844593][ T5504] gfs2: fsid=syz:syz.0: found 1 quota changes [ 111.393744][ T5530] loop0: detected capacity change from 0 to 32768 [ 111.413841][ T5530] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.423031][ T5530] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.439136][ T5530] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 111.450702][ T5360] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 111.453720][ T5360] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 111.509929][ T47] Bluetooth: hci0: command tx timeout [ 111.525776][ T5360] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 111.530700][ T5360] gfs2: fsid=syz:syz.0: jid=0: Done [ 111.532862][ T5530] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 111.571695][ T5530] gfs2: fsid=syz:syz.0: found 1 quota changes [ 111.976179][ T5537] loop0: detected capacity change from 0 to 32768 [ 111.991748][ T5537] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.994870][ T5537] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.010863][ T5537] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 112.020548][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 112.023569][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 112.088487][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 112.093175][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 112.095598][ T5537] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 112.133966][ T5537] gfs2: fsid=syz:syz.0: found 1 quota changes [ 112.502403][ T5544] loop0: detected capacity change from 0 to 32768 [ 112.513820][ T5544] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 112.521843][ T5544] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.535452][ T5544] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 112.551377][ T5360] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 112.554125][ T5360] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 112.619853][ T5360] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 65ms [ 112.627256][ T5360] gfs2: fsid=syz:syz.0: jid=0: Done [ 112.634551][ T5544] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 112.673705][ T5544] gfs2: fsid=syz:syz.0: found 1 quota changes 2026/02/09 17:20:54 executed programs: 6 [ 113.067654][ T5551] loop0: detected capacity change from 0 to 32768 [ 113.117036][ T5551] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.140690][ T5551] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.152679][ T5551] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 113.178027][ T5360] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 113.191195][ T5360] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 113.257289][ T5360] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 66ms [ 113.262171][ T5360] gfs2: fsid=syz:syz.0: jid=0: Done [ 113.264511][ T5551] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.307341][ T5551] gfs2: fsid=syz:syz.0: found 1 quota changes [ 113.589751][ T47] Bluetooth: hci0: command tx timeout [ 113.730285][ T5558] loop0: detected capacity change from 0 to 32768 [ 113.744463][ T5558] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.748152][ T5558] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.765615][ T5558] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 113.779254][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 113.782322][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 113.855741][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 73ms [ 113.860579][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 113.862892][ T5558] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.900314][ T5558] gfs2: fsid=syz:syz.0: found 1 quota changes [ 114.269839][ T5565] loop0: detected capacity change from 0 to 32768 [ 114.282229][ T5565] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 114.285638][ T5565] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 114.301183][ T5565] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 114.311630][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 114.314363][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 114.378980][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 114.384170][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 114.386409][ T5565] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 114.426928][ T5565] gfs2: fsid=syz:syz.0: found 1 quota changes [ 114.792040][ T5572] loop0: detected capacity change from 0 to 32768 [ 114.821031][ T5572] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 114.829988][ T5572] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 114.849835][ T5572] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 114.854207][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 114.857315][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 114.911402][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 54ms [ 114.916218][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 114.917984][ T5572] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 114.956536][ T5572] gfs2: fsid=syz:syz.0: found 1 quota changes [ 115.444814][ T5579] loop0: detected capacity change from 0 to 32768 [ 115.484265][ T5579] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.487726][ T5579] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.530983][ T5579] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 115.538277][ T51] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 115.549488][ T51] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 115.669490][ T47] Bluetooth: hci0: command tx timeout [ 115.675653][ T51] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 115.689800][ T51] gfs2: fsid=syz:syz.0: jid=0: Done [ 115.692478][ T5579] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 115.762841][ T5579] gfs2: fsid=syz:syz.0: found 1 quota changes [ 115.783475][ T5584] ------------[ cut here ]------------ [ 115.786194][ T5584] DEBUG_RWSEMS_WARN_ON((rwsem_owner(sem) != current) && !rwsem_test_oflags(sem, RWSEM_NONSPINNABLE)): count = 0x0, magic = 0xffff888046a449b8, owner = 0x0, curr 0xffff888035fb8000, list empty [ 115.794276][ T5584] WARNING: kernel/locking/rwsem.c:1381 at up_write+0x2d6/0x410, CPU#0: syz.0.25/5584 [ 115.798874][ T5584] Modules linked in: [ 115.801254][ T5584] CPU: 0 UID: 0 PID: 5584 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 115.805181][ T5584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.809628][ T5584] RIP: 0010:up_write+0x388/0x410 [ 115.811866][ T5584] Code: ac 8b 49 c7 c2 a0 e6 ac 8b 4c 0f 44 d0 48 8b 7c 24 08 48 c7 c6 00 e9 ac 8b 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 10 41 52 <67> 48 0f b9 3a 48 83 c4 08 e8 9a 16 ff 02 e9 67 fd ff ff 48 c7 c1 [ 115.820470][ T5584] RSP: 0018:ffffc90002cd7d80 EFLAGS: 00010246 [ 115.823085][ T5584] RAX: ffffffff8bace680 RBX: ffff888046a449b8 RCX: ffff888046a449b8 [ 115.826506][ T5584] RDX: 0000000000000000 RSI: ffffffff8bace900 RDI: ffffffff8ff28780 [ 115.830076][ T5584] RBP: ffff888046a44a10 R08: 0000000000000000 R09: ffff888035fb8000 [ 115.833657][ T5584] R10: ffffffff8bace680 R11: ffffed1008d48939 R12: 0000000000000000 [ 115.837086][ T5584] R13: dffffc0000000000 R14: ffff888046a449b8 R15: 1ffff11008d48938 [ 115.840506][ T5584] FS: 00007f62d55fe6c0(0000) GS:ffff88808cce8000(0000) knlGS:0000000000000000 [ 115.844017][ T5584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.846713][ T5584] CR2: 00007f62d55fdff8 CR3: 0000000055677000 CR4: 0000000000352ef0 [ 115.850059][ T5584] Call Trace: [ 115.851582][ T5584] [ 115.853041][ T5584] do_mkdirat+0x2fb/0x4b0 [ 115.855228][ T5584] ? __pfx_do_mkdirat+0x10/0x10 [ 115.857755][ T5584] ? strncpy_from_user+0x150/0x2b0 [ 115.860385][ T5584] ? getname_flags+0x1e4/0x540 [ 115.862473][ T5584] __x64_sys_mkdir+0x6c/0x80 [ 115.864511][ T5584] do_syscall_64+0xe2/0xf80 [ 115.866895][ T5584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.869662][ T5584] ? trace_irq_disable+0x37/0x100 [ 115.871894][ T5584] ? clear_bhb_loop+0x60/0xb0 [ 115.873868][ T5584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.876461][ T5584] RIP: 0033:0x7f62d5f9af79 [ 115.878421][ T5584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.886719][ T5584] RSP: 002b:00007f62d55fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 115.890349][ T5584] RAX: ffffffffffffffda RBX: 00007f62d6216090 RCX: 00007f62d5f9af79 [ 115.893494][ T5584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 115.896975][ T5584] RBP: 00007f62d60316e0 R08: 0000000000000000 R09: 0000000000000000 [ 115.900506][ T5584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.903853][ T5584] R13: 00007f62d6216128 R14: 00007f62d6216090 R15: 00007fffbed45998 [ 115.907236][ T5584] [ 115.908585][ T5584] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 115.911565][ T5584] CPU: 0 UID: 0 PID: 5584 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 115.915468][ T5584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.919832][ T5584] Call Trace: [ 115.921309][ T5584] [ 115.922575][ T5584] vpanic+0x1e0/0x670 [ 115.924375][ T5584] panic+0xc5/0xd0 [ 115.926164][ T5584] ? __pfx_panic+0x10/0x10 [ 115.928229][ T5584] __warn+0x315/0x4a0 [ 115.929973][ T5584] ? up_write+0x2d6/0x410 [ 115.931831][ T5584] ? up_write+0x2d6/0x410 [ 115.933750][ T5584] __report_bug+0x29a/0x540 [ 115.935814][ T5584] ? up_write+0x2d6/0x410 [ 115.937736][ T5584] ? __pfx___report_bug+0x10/0x10 [ 115.939942][ T5584] ? gfs2_glock_dq_uninit+0x67/0xb0 [ 115.942182][ T5584] report_bug_entry+0x19a/0x290 [ 115.944298][ T5584] ? up_write+0x388/0x410 [ 115.946398][ T5584] ? up_write+0x38d/0x410 [ 115.948264][ T5584] handle_bug+0xca/0x200 [ 115.950026][ T5584] exc_invalid_op+0x1a/0x50 [ 115.952064][ T5584] asm_exc_invalid_op+0x1a/0x20 [ 115.954218][ T5584] RIP: 0010:up_write+0x388/0x410 [ 115.956811][ T5584] Code: ac 8b 49 c7 c2 a0 e6 ac 8b 4c 0f 44 d0 48 8b 7c 24 08 48 c7 c6 00 e9 ac 8b 48 8b 14 24 4c 89 f1 4d 89 e0 4c 8b 4c 24 10 41 52 <67> 48 0f b9 3a 48 83 c4 08 e8 9a 16 ff 02 e9 67 fd ff ff 48 c7 c1 [ 115.966107][ T5584] RSP: 0018:ffffc90002cd7d80 EFLAGS: 00010246 [ 115.969484][ T5584] RAX: ffffffff8bace680 RBX: ffff888046a449b8 RCX: ffff888046a449b8 [ 115.973438][ T5584] RDX: 0000000000000000 RSI: ffffffff8bace900 RDI: ffffffff8ff28780 [ 115.976745][ T5584] RBP: ffff888046a44a10 R08: 0000000000000000 R09: ffff888035fb8000 [ 115.980127][ T5584] R10: ffffffff8bace680 R11: ffffed1008d48939 R12: 0000000000000000 [ 115.983396][ T5584] R13: dffffc0000000000 R14: ffff888046a449b8 R15: 1ffff11008d48938 [ 115.986648][ T5584] do_mkdirat+0x2fb/0x4b0 [ 115.988502][ T5584] ? __pfx_do_mkdirat+0x10/0x10 [ 115.990550][ T5584] ? strncpy_from_user+0x150/0x2b0 [ 115.992854][ T5584] ? getname_flags+0x1e4/0x540 [ 115.994835][ T5584] __x64_sys_mkdir+0x6c/0x80 [ 115.996943][ T5584] do_syscall_64+0xe2/0xf80 [ 115.999033][ T5584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.001713][ T5584] ? trace_irq_disable+0x37/0x100 [ 116.003962][ T5584] ? clear_bhb_loop+0x60/0xb0 [ 116.006120][ T5584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.008890][ T5584] RIP: 0033:0x7f62d5f9af79 [ 116.010893][ T5584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.019198][ T5584] RSP: 002b:00007f62d55fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 116.022981][ T5584] RAX: ffffffffffffffda RBX: 00007f62d6216090 RCX: 00007f62d5f9af79 [ 116.026426][ T5584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 116.029765][ T5584] RBP: 00007f62d60316e0 R08: 0000000000000000 R09: 0000000000000000 [ 116.033152][ T5584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.036286][ T5584] R13: 00007f62d6216128 R14: 00007f62d6216090 R15: 00007fffbed45998 [ 116.039468][ T5584] [ 116.041063][ T5584] Kernel Offset: disabled [ 116.042934][ T5584] Rebooting in 86400 seconds..