syzkaller login: [ 97.176017][ T53] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:3938' (ED25519) to the list of known hosts. 2026/06/24 20:27:26 parsed 1 programs 2026/06/24 20:27:26 serving rpc on tcp://42201 [ 227.843524][ T5322] cgroup: Unknown subsys name 'net' [ 227.916419][ T5322] cgroup: Unknown subsys name 'cpuset' [ 227.925726][ T5322] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.738657][ T5322] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 238.339295][ T5341] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 247.614258][ T5385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.627392][ T5385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.633747][ T5385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.641512][ T5385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.645967][ T5385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.722575][ T4651] Bluetooth: hci0: command tx timeout [ 250.093839][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.121057][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.145243][ T5342] bridge_slave_0: entered allmulticast mode [ 250.180594][ T5342] bridge_slave_0: entered promiscuous mode [ 250.223885][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.234836][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.244588][ T5342] bridge_slave_1: entered allmulticast mode [ 250.264350][ T5342] bridge_slave_1: entered promiscuous mode [ 251.287730][ T5342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.346593][ T5342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.542387][ T5342] team0: Port device team_slave_0 added [ 251.656404][ T5342] team0: Port device team_slave_1 added [ 252.242655][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.260626][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.300605][ T5342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.368702][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.383934][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.393204][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.406321][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.427686][ T5342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.730000][ T5342] hsr_slave_0: entered promiscuous mode [ 252.741208][ T5342] hsr_slave_1: entered promiscuous mode [ 252.760041][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.774078][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.452981][ T5342] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.490713][ T5342] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 253.499673][ T5342] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.519920][ T5342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 253.531478][ T5342] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.554282][ T5342] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 253.562873][ T5342] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.588210][ T5342] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 253.842582][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.888293][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.918323][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.922396][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.965757][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.968889][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.836914][ T5342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.381097][ T5342] veth0_vlan: entered promiscuous mode [ 255.412711][ T5342] veth1_vlan: entered promiscuous mode [ 255.496067][ T5342] veth0_macvtap: entered promiscuous mode [ 255.504011][ T5342] veth1_macvtap: entered promiscuous mode [ 255.525774][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.537866][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.557945][ T177] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.572915][ T177] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.586035][ T177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.607403][ T177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/06/24 20:27:57 executed programs: 0 [ 256.285481][ T5385] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.297788][ T5385] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.304962][ T5385] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.310179][ T5385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.316021][ T5385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.352503][ T5342] syz-executor (5342) used greatest stack depth: 17264 bytes left [ 256.421323][ T44] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.430959][ T44] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.435913][ T44] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.444908][ T44] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.453693][ T44] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.459933][ T44] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.469595][ T44] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.475078][ T44] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.488176][ T44] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.491582][ T5467] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.499527][ T5467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.510092][ T4651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.519489][ T4651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.529317][ T4651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.546194][ T5467] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.569617][ T5461] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.587556][ T5467] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.595592][ T5467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.606483][ T5467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.611864][ T5467] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.810756][ T4651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 256.817666][ T4651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 256.830124][ T4651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 256.841772][ T4651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 256.850863][ T4651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.894882][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.274063][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.362480][ T5461] Bluetooth: hci0: command tx timeout [ 258.602090][ T5461] Bluetooth: hci3: command tx timeout [ 258.605863][ T4651] Bluetooth: hci1: command tx timeout [ 258.668373][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.681352][ T5461] Bluetooth: hci2: command tx timeout [ 258.841423][ T5461] Bluetooth: hci4: command tx timeout [ 258.920470][ T5461] Bluetooth: hci5: command tx timeout [ 259.022822][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.009542][ T13] bridge_slave_1: left allmulticast mode [ 260.016528][ T13] bridge_slave_1: left promiscuous mode [ 260.033121][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.046733][ T13] bridge_slave_0: left allmulticast mode [ 260.051123][ T13] bridge_slave_0: left promiscuous mode [ 260.060866][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.284803][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.291925][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.298207][ T13] bond0 (unregistering): Released all slaves [ 260.442128][ T5461] Bluetooth: hci0: command tx timeout [ 260.680486][ T5461] Bluetooth: hci3: command tx timeout [ 260.683035][ T5461] Bluetooth: hci1: command tx timeout [ 260.765899][ T4651] Bluetooth: hci2: command tx timeout [ 260.920919][ T4651] Bluetooth: hci4: command tx timeout [ 261.000910][ T4651] Bluetooth: hci5: command tx timeout [ 261.543251][ T4997] 8021q: adding VLAN 0 to HW filter on device eth2 [ 261.846831][ T13] hsr_slave_0: left promiscuous mode [ 261.856350][ T13] hsr_slave_1: left promiscuous mode [ 261.871374][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.874601][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.890072][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.897521][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.916559][ T13] veth1_macvtap: left promiscuous mode [ 261.920155][ T13] veth0_macvtap: left promiscuous mode [ 261.924500][ T13] veth1_vlan: left promiscuous mode [ 261.927218][ T13] veth0_vlan: left promiscuous mode [ 262.195340][ T13] team0 (unregistering): Port device team_slave_1 removed [ 262.207938][ T13] team0 (unregistering): Port device team_slave_0 removed [ 262.520514][ T4651] Bluetooth: hci0: command tx timeout [ 262.760763][ T4651] Bluetooth: hci1: command tx timeout [ 262.763845][ T4651] Bluetooth: hci3: command tx timeout [ 262.841161][ T5461] Bluetooth: hci2: command tx timeout [ 263.000823][ T5461] Bluetooth: hci4: command tx timeout [ 263.038876][ T5454] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.048497][ T5454] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.065139][ T5454] bridge_slave_0: entered allmulticast mode [ 263.077547][ T5454] bridge_slave_0: entered promiscuous mode [ 263.081838][ T5461] Bluetooth: hci5: command tx timeout [ 263.152246][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.167356][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.178839][ T5462] bridge_slave_0: entered allmulticast mode [ 263.192799][ T5462] bridge_slave_0: entered promiscuous mode [ 263.263523][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.271207][ T5454] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.281703][ T5454] bridge_slave_1: entered allmulticast mode [ 263.295694][ T5454] bridge_slave_1: entered promiscuous mode [ 263.398508][ T5462] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.415107][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.429113][ T5462] bridge_slave_1: entered allmulticast mode [ 263.448757][ T5462] bridge_slave_1: entered promiscuous mode [ 263.465137][ T5458] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.473924][ T5458] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.477160][ T5458] bridge_slave_0: entered allmulticast mode [ 263.483422][ T5458] bridge_slave_0: entered promiscuous mode [ 263.537410][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.551429][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.556030][ T5459] bridge_slave_0: entered allmulticast mode [ 263.562928][ T5459] bridge_slave_0: entered promiscuous mode [ 263.599565][ T4997] 8021q: adding VLAN 0 to HW filter on device eth3 [ 263.607455][ T5458] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.614897][ T5458] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.618336][ T5458] bridge_slave_1: entered allmulticast mode [ 263.623762][ T5458] bridge_slave_1: entered promiscuous mode [ 263.655105][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.658714][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.662637][ T5459] bridge_slave_1: entered allmulticast mode [ 263.667707][ T5459] bridge_slave_1: entered promiscuous mode [ 263.696448][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.700576][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.703698][ T5456] bridge_slave_0: entered allmulticast mode [ 263.707742][ T5456] bridge_slave_0: entered promiscuous mode [ 263.718055][ T5454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.747117][ T5462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.763377][ T5456] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.767761][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.771613][ T5456] bridge_slave_1: entered allmulticast mode [ 263.775646][ T5456] bridge_slave_1: entered promiscuous mode [ 263.783191][ T5454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.810052][ T5462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.816902][ T5458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.857040][ T5459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.878766][ T5458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.928416][ T5454] team0: Port device team_slave_0 added [ 263.934209][ T5459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.975215][ T5456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.996027][ T5454] team0: Port device team_slave_1 added [ 264.010937][ T5462] team0: Port device team_slave_0 added [ 264.019210][ T5458] team0: Port device team_slave_0 added [ 264.033226][ T5458] team0: Port device team_slave_1 added [ 264.039367][ T5456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.165552][ T5462] team0: Port device team_slave_1 added [ 264.296280][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.305626][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.320104][ T5471] bridge_slave_0: entered allmulticast mode [ 264.328690][ T5471] bridge_slave_0: entered promiscuous mode [ 264.341722][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.345294][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.352223][ T5471] bridge_slave_1: entered allmulticast mode [ 264.361520][ T5471] bridge_slave_1: entered promiscuous mode [ 264.374116][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.377702][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.402532][ T5454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.423167][ T5454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.426414][ T5454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.451037][ T5454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.464997][ T5459] team0: Port device team_slave_0 added [ 264.472271][ T5459] team0: Port device team_slave_1 added [ 264.486239][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.489070][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.502142][ T5458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.509035][ T5456] team0: Port device team_slave_0 added [ 264.525986][ T4997] 8021q: adding VLAN 0 to HW filter on device eth4 [ 264.556532][ T5458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.561101][ T5458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.573790][ T5458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.580978][ T5456] team0: Port device team_slave_1 added [ 264.600604][ T5461] Bluetooth: hci0: command tx timeout [ 264.614808][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.618726][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.633827][ T5462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.676710][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.686021][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.690138][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.702293][ T5459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.707839][ T5462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.711771][ T5462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.725871][ T5462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.762685][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.768725][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.772883][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.785098][ T5459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.800752][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.804244][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.815948][ T5456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.829731][ T5454] hsr_slave_0: entered promiscuous mode [ 264.833332][ T5454] hsr_slave_1: entered promiscuous mode [ 264.840800][ T5461] Bluetooth: hci3: command tx timeout [ 264.843337][ T4651] Bluetooth: hci1: command tx timeout [ 264.891276][ T5456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.894707][ T5456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.907804][ T5456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.921170][ T4651] Bluetooth: hci2: command tx timeout [ 264.984853][ T5471] team0: Port device team_slave_0 added [ 265.004694][ T5458] hsr_slave_0: entered promiscuous mode [ 265.008207][ T5458] hsr_slave_1: entered promiscuous mode [ 265.012631][ T5458] debugfs: 'hsr0' already exists in 'hsr' [ 265.015645][ T5458] Cannot create hsr debugfs directory [ 265.023661][ T5462] hsr_slave_0: entered promiscuous mode [ 265.027783][ T5462] hsr_slave_1: entered promiscuous mode [ 265.032137][ T5462] debugfs: 'hsr0' already exists in 'hsr' [ 265.034675][ T5462] Cannot create hsr debugfs directory [ 265.080563][ T4651] Bluetooth: hci4: command tx timeout [ 265.088901][ T5471] team0: Port device team_slave_1 added [ 265.161014][ T4651] Bluetooth: hci5: command tx timeout [ 265.194637][ T5459] hsr_slave_0: entered promiscuous mode [ 265.202387][ T5459] hsr_slave_1: entered promiscuous mode [ 265.211382][ T5459] debugfs: 'hsr0' already exists in 'hsr' [ 265.215765][ T5459] Cannot create hsr debugfs directory [ 265.345685][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.349552][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.373981][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.499524][ T5456] hsr_slave_0: entered promiscuous mode [ 265.509065][ T5456] hsr_slave_1: entered promiscuous mode [ 265.514469][ T5456] debugfs: 'hsr0' already exists in 'hsr' [ 265.517652][ T5456] Cannot create hsr debugfs directory [ 265.534700][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.538914][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.551437][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.579807][ T4997] 8021q: adding VLAN 0 to HW filter on device eth5 [ 266.032825][ T5471] hsr_slave_0: entered promiscuous mode [ 266.042845][ T5471] hsr_slave_1: entered promiscuous mode [ 266.051496][ T5471] debugfs: 'hsr0' already exists in 'hsr' [ 266.063172][ T5471] Cannot create hsr debugfs directory [ 266.123898][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.126769][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.530042][ T5454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.536655][ T5454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.540172][ T5454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.546629][ T5454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.553665][ T5454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.563657][ T5454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.569309][ T5454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.576070][ T5454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.693609][ T5456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.704464][ T5456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.712736][ T5456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.720147][ T5456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.745757][ T5456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.756437][ T5456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.771991][ T5456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.782982][ T5456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.930631][ T5459] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.946141][ T5459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.970817][ T5459] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.987744][ T5459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.997744][ T5459] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.009150][ T5459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.027573][ T5454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.033295][ T5459] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.039930][ T5459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.182424][ T5454] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.238175][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.241505][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.300550][ T5462] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.309169][ T5462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.327361][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.330465][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.353672][ T5462] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.362884][ T5462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.528640][ T5462] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.558459][ T5462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.583910][ T5462] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.603174][ T5462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 268.073067][ T5456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.294605][ T5456] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.429809][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.433462][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.502495][ T5459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.533275][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.536485][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.885781][ T5459] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.932533][ T5471] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.962258][ T5471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.979223][ T5471] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.007991][ T5471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.052267][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.055279][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.075929][ T5471] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.092367][ T5471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.104858][ T5471] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.118850][ T5471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.317290][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.320701][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.482175][ T5462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.689817][ T5458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.715729][ T5458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.735726][ T5458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.775788][ T5458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.847792][ T5458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.874205][ T5458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.888993][ T5458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.913971][ T5458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.945343][ T5462] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.105943][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.109175][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.268323][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.271566][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.382981][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.969292][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.124099][ T5454] veth0_vlan: entered promiscuous mode [ 271.269971][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.359734][ T5454] veth1_vlan: entered promiscuous mode [ 271.421778][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.425106][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.465647][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.534564][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.537764][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.783376][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.945093][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.948805][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.056583][ T5454] veth0_macvtap: entered promiscuous mode [ 272.091674][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.094916][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.144839][ T5456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.184011][ T5454] veth1_macvtap: entered promiscuous mode [ 272.478286][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.632505][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.951980][ T1090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.977103][ T1090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.017294][ T5459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.039750][ T1090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.085242][ T5456] veth0_vlan: entered promiscuous mode [ 273.129674][ T1090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.335068][ T5456] veth1_vlan: entered promiscuous mode [ 273.846606][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.873845][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.909491][ T5462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.197687][ T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.202975][ T5459] veth0_vlan: entered promiscuous mode [ 274.228963][ T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.236510][ T5456] veth0_macvtap: entered promiscuous mode [ 274.337156][ T5456] veth1_macvtap: entered promiscuous mode [ 274.365671][ T5459] veth1_vlan: entered promiscuous mode [ 274.582269][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.677347][ T5456] batman_adv: batadv0: Interface activated: batadv_slave_1 2026/06/24 20:28:15 executed programs: 12 [ 274.815886][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.839927][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.893514][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.914491][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.948152][ T5459] veth0_macvtap: entered promiscuous mode [ 274.981038][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.032148][ T5459] veth1_macvtap: entered promiscuous mode [ 275.348908][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.532097][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.556832][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.588564][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.656283][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.678260][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.744734][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.759818][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.844235][ T5458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.856011][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.869212][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.279485][ T5462] veth0_vlan: entered promiscuous mode [ 276.349613][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.377179][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.421346][ T5462] veth1_vlan: entered promiscuous mode [ 276.692900][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.715009][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.778020][ T5458] veth0_vlan: entered promiscuous mode [ 276.824964][ T5746] loop0: detected capacity change from 0 to 32768 [ 277.029056][ T5458] veth1_vlan: entered promiscuous mode [ 277.084477][ T5462] veth0_macvtap: entered promiscuous mode [ 277.119634][ T5471] veth0_vlan: entered promiscuous mode [ 277.231993][ T5462] veth1_macvtap: entered promiscuous mode [ 277.263317][ T5746] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 277.301784][ T5746] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 277.329183][ T5471] veth1_vlan: entered promiscuous mode [ 277.570534][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.615885][ T5746] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 277.636225][ T5458] veth0_macvtap: entered promiscuous mode [ 277.659261][ T1060] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 277.700830][ T1060] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 277.711739][ T5458] veth1_macvtap: entered promiscuous mode [ 277.765532][ T5462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.924353][ T1090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.951706][ T1090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.008340][ T1090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.046779][ T1090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.091174][ T5471] veth0_macvtap: entered promiscuous mode [ 278.152947][ T5471] veth1_macvtap: entered promiscuous mode [ 278.207558][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.327259][ T1060] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 626ms [ 278.330856][ T5458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.412125][ T1060] gfs2: fsid=syz:syz.0: jid=0: Done [ 278.431905][ T5746] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 278.488696][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.657940][ T1090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.691525][ T1090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.791587][ T1090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.825321][ T1090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.875402][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.157270][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.188325][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.242321][ T182] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.275311][ T182] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.411032][ T182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.444563][ T182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.603696][ T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.635921][ T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.973853][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.020165][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/24 20:28:21 executed programs: 17 [ 280.330150][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.369232][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.732767][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.767062][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.258041][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.294175][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/06/24 20:28:28 executed programs: 22 2026/06/24 20:28:33 executed programs: 35 2026/06/24 20:28:39 executed programs: 44 [ 303.093408][ T5836] loop0: detected capacity change from 0 to 32768 [ 303.233149][ T5836] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 303.282940][ T5836] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... 2026/06/24 20:28:44 executed programs: 53 [ 303.487754][ T5836] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 7ms [ 303.585993][ T5611] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 303.609917][ T5611] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 305.453877][ T5611] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1843ms [ 305.476990][ T5611] gfs2: fsid=syz:syz.0: jid=0: Done [ 305.504776][ T5836] gfs2: fsid=syz:syz.0: first mount done, others may mount 2026/06/24 20:28:51 executed programs: 60 2026/06/24 20:28:58 executed programs: 72 [ 321.095758][ T5901] loop0: detected capacity change from 0 to 32768 [ 321.201408][ T5901] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 321.252864][ T5901] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 321.457926][ T5901] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 321.502767][ T1060] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 321.536185][ T1060] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 322.025016][ T1060] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 488ms [ 322.075690][ T1060] gfs2: fsid=syz:syz.0: jid=0: Done [ 322.110486][ T5901] gfs2: fsid=syz:syz.0: first mount done, others may mount 2026/06/24 20:29:05 executed programs: 78 [ 327.566999][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.573075][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.773776][ T5929] loop0: detected capacity change from 0 to 32768 [ 329.871664][ T5929] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 329.914757][ T5929] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 330.034879][ T5929] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 330.082581][ T5611] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 330.118249][ T5611] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... 2026/06/24 20:29:11 executed programs: 95 [ 331.309711][ T5611] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1191ms [ 331.329864][ T5611] gfs2: fsid=syz:syz.0: jid=0: Done [ 331.345800][ T5929] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 334.445261][ T5952] loop0: detected capacity change from 0 to 32768 [ 334.513943][ T5952] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 334.560919][ T5952] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 334.667867][ T5952] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 334.713440][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 334.739002][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 335.264709][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 525ms [ 335.297708][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 335.323008][ T5952] gfs2: fsid=syz:syz.0: first mount done, others may mount 2026/06/24 20:29:17 executed programs: 103 [ 338.936797][ T5971] loop0: detected capacity change from 0 to 32768 [ 339.035999][ T5971] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 339.077248][ T5971] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 339.169411][ T5971] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 339.216571][ T5647] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 339.247692][ T5647] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 339.664867][ T5647] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 417ms [ 339.696031][ T5647] gfs2: fsid=syz:syz.0: jid=0: Done [ 339.723888][ T5971] gfs2: fsid=syz:syz.0: first mount done, others may mount 2026/06/24 20:29:22 executed programs: 113 [ 342.964396][ T5989] loop0: detected capacity change from 0 to 32768 [ 343.063668][ T5989] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 343.101398][ T5989] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 343.199888][ T5989] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 343.262207][ T5611] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 343.286226][ T5611] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 343.819825][ T5611] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 533ms [ 343.853282][ T5611] gfs2: fsid=syz:syz.0: jid=0: Done [ 343.881112][ T5989] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 347.413246][ T6005] loop0: detected capacity change from 0 to 32768 [ 347.539446][ T6005] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" 2026/06/24 20:29:28 executed programs: 123 [ 347.587473][ T6005] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 347.678992][ T6005] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 347.741790][ T1060] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 347.763408][ T1060] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 348.301745][ T1060] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 538ms [ 348.333157][ T1060] gfs2: fsid=syz:syz.0: jid=0: Done [ 348.363243][ T6005] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 351.539347][ T6023] loop0: detected capacity change from 0 to 32768 [ 351.589565][ T6023] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 351.635880][ T6023] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 351.739739][ T6023] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 351.798224][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 351.834392][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 352.398783][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 564ms [ 352.428854][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 352.469018][ T6023] gfs2: fsid=syz:syz.0: first mount done, others may mount 2026/06/24 20:29:33 executed programs: 133 [ 355.936009][ T6039] loop0: detected capacity change from 0 to 32768 [ 356.002866][ T6039] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 356.046814][ T6039] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 356.135094][ T6039] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms [ 356.179876][ T5404] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 356.205450][ T5404] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 357.616185][ T5404] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1410ms [ 357.649563][ T5404] gfs2: fsid=syz:syz.0: jid=0: Done [ 357.669811][ T6039] gfs2: fsid=syz:syz.0: first mount done, others may mount 2026/06/24 20:29:40 executed programs: 140 [ 364.347590][ T6068] loop0: detected capacity change from 0 to 32768 [ 364.452932][ T6068] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 364.491703][ T6068] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 364.674145][ T6068] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 364.738495][ T1060] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 364.777126][ T1060] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... 2026/06/24 20:29:46 executed programs: 152 [ 367.408310][ T1060] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 2631ms [ 367.440813][ T1060] gfs2: fsid=syz:syz.0: jid=0: Done [ 367.469739][ T6068] gfs2: fsid=syz:syz.0: first mount done, others may mount 2026/06/24 20:29:53 executed programs: 159 2026/06/24 20:29:59 executed programs: 171 [ 380.869940][ T4651] Bluetooth: hci0: command 0x0406 tx timeout [ 380.873059][ T4651] Bluetooth: hci1: command 0x0406 tx timeout [ 380.875556][ T6125] Bluetooth: hci3: command 0x0406 tx timeout [ 380.879366][ T6125] Bluetooth: hci2: command 0x0406 tx timeout [ 380.888359][ T4651] Bluetooth: hci4: command 0x0406 tx timeout [ 380.896039][ T6125] Bluetooth: hci5: command 0x0406 tx timeout 2026/06/24 20:30:04 executed programs: 177 [ 389.006582][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.013842][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 2026/06/24 20:30:10 executed programs: 187 [ 391.179174][ T6165] loop0: detected capacity change from 0 to 32768 [ 391.233893][ T6165] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 391.253970][ T6165] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 391.327008][ T6165] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 391.357045][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 391.371587][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 391.652944][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 281ms [ 391.677735][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 391.695414][ T6165] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 391.768691][ T6165] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 391.793862][ T6165] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 391.833804][ T6165] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 391.874992][ T6165] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6165 [syz.0.195] __gfs2_lookup+0xac/0x2b0 [ 391.900455][ T6178] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 391.917926][ T6178] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 391.970660][ T6165] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6178 [syz.0.195] __gfs2_lookup+0xac/0x2b0 [ 392.024908][ T6165] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 392.069743][ T6178] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 392.106444][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 392.106467][ T6165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.106475][ T6165] Call Trace: [ 392.106481][ T6165] [ 392.106488][ T6165] dump_stack_lvl+0xe8/0x150 [ 392.106510][ T6165] gfs2_withdraw+0xc3/0x1b0 [ 392.106528][ T6165] gfs2_dirent_scan+0x54d/0x690 [ 392.106544][ T6165] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 392.106560][ T6165] gfs2_dirent_search+0x358/0x8e0 [ 392.106583][ T6165] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 392.106597][ T6165] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 392.106611][ T6165] ? __pfx_gfs2_permission+0x10/0x10 [ 392.106632][ T6165] gfs2_dir_search+0x4c/0x220 [ 392.106648][ T6165] gfs2_lookupi+0x45b/0x640 [ 392.106667][ T6165] ? __pfx_gfs2_lookupi+0x10/0x10 [ 392.106681][ T6165] ? d_alloc_parallel+0x152b/0x16a0 [ 392.106696][ T6165] ? __gfs2_lookup+0xac/0x2b0 [ 392.106746][ T6165] __gfs2_lookup+0xac/0x2b0 [ 392.106767][ T6165] ? __pfx___gfs2_lookup+0x10/0x10 [ 392.106783][ T6165] ? lookup_slow+0x46/0x70 [ 392.106803][ T6165] ? lock_acquire+0x221/0x350 [ 392.106820][ T6165] __lookup_slow+0x1fb/0x2f0 [ 392.106839][ T6165] lookup_slow+0x53/0x70 [ 392.106857][ T6165] path_lookupat+0x3f5/0x8c0 [ 392.106903][ T6165] filename_lookup+0x265/0x5d0 [ 392.106932][ T6165] ? __pfx_filename_lookup+0x10/0x10 [ 392.106963][ T6165] ? strncpy_from_user+0x150/0x2c0 [ 392.106979][ T6165] ? do_getname+0x151/0x250 [ 392.106995][ T6165] user_path_at+0x40/0x160 [ 392.107016][ T6165] __se_sys_mount+0x2dc/0x420 [ 392.107036][ T6165] ? __pfx___se_sys_mount+0x10/0x10 [ 392.107056][ T6165] ? __x64_sys_mount+0x20/0xc0 [ 392.107072][ T6165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.107085][ T6165] do_syscall_64+0x174/0x580 [ 392.107178][ T6165] ? trace_irq_disable+0x3b/0x140 [ 392.107192][ T6165] ? clear_bhb_loop+0x40/0x90 [ 392.107208][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.107220][ T6165] RIP: 0033:0x7fe91079ce59 [ 392.107233][ T6165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.107244][ T6165] RSP: 002b:00007fe911710028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.107259][ T6165] RAX: ffffffffffffffda RBX: 00007fe910a15fa0 RCX: 00007fe91079ce59 [ 392.107267][ T6165] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 392.107274][ T6165] RBP: 00007fe910832e6f R08: 0000000000000000 R09: 0000000000000000 [ 392.107281][ T6165] R10: 0000000000081000 R11: 0000000000000246 R12: 0000000000000000 [ 392.107289][ T6165] R13: 00007fe910a16038 R14: 00007fe910a15fa0 R15: 00007ffdc9f53e38 [ 392.107307][ T6165] [ 392.236282][ T6165] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 392.260387][ T6178] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:6165 [syz.0.195] __gfs2_lookup+0xac/0x2b0 [ 392.315959][ T1060] gfs2: fsid=syz:syz.0: file system withdrawn [ 392.324457][ T6178] ================================================================== [ 392.327844][ T6178] BUG: KASAN: vmalloc-out-of-bounds in gfs2_dump_glock+0x14af/0x1a70 [ 392.331159][ T6178] Read of size 8 at addr ffffc9000242f8c0 by task syz.0.195/6178 [ 392.335544][ T6178] [ 392.336657][ T6178] CPU: 0 UID: 0 PID: 6178 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 392.336674][ T6178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 392.336682][ T6178] Call Trace: [ 392.336690][ T6178] [ 392.336696][ T6178] dump_stack_lvl+0xe8/0x150 [ 392.336716][ T6178] print_address_description+0x55/0x1e0 [ 392.336730][ T6178] ? gfs2_dump_glock+0x14af/0x1a70 [ 392.336744][ T6178] print_report+0x58/0x70 [ 392.336755][ T6178] kasan_report+0x117/0x150 [ 392.336774][ T6178] ? gfs2_dump_glock+0x14af/0x1a70 [ 392.336789][ T6178] gfs2_dump_glock+0x14af/0x1a70 [ 392.336802][ T6178] ? gfs2_dump_glock+0xd84/0x1a70 [ 392.336816][ T6178] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 392.336831][ T6178] ? __pfx__printk+0x10/0x10 [ 392.336855][ T6178] ? __pfx__printk+0x10/0x10 [ 392.336872][ T6178] gfs2_consist_inode_i+0xf5/0x110 [ 392.336888][ T6178] gfs2_dirent_scan+0x54d/0x690 [ 392.336902][ T6178] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 392.336916][ T6178] gfs2_dirent_search+0x358/0x8e0 [ 392.336929][ T6178] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 392.336942][ T6178] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 392.336955][ T6178] ? __pfx_gfs2_permission+0x10/0x10 [ 392.336972][ T6178] gfs2_dir_search+0x4c/0x220 [ 392.336986][ T6178] gfs2_lookupi+0x45b/0x640 [ 392.337001][ T6178] ? __pfx_gfs2_lookupi+0x10/0x10 [ 392.337014][ T6178] ? d_alloc_parallel+0x152b/0x16a0 [ 392.337027][ T6178] ? __gfs2_lookup+0xac/0x2b0 [ 392.337045][ T6178] __gfs2_lookup+0xac/0x2b0 [ 392.337060][ T6178] ? __pfx___gfs2_lookup+0x10/0x10 [ 392.337073][ T6178] ? lookup_slow+0x46/0x70 [ 392.337091][ T6178] ? lookup_slow+0x46/0x70 [ 392.337110][ T6178] __lookup_slow+0x1fb/0x2f0 [ 392.337127][ T6178] lookup_slow+0x53/0x70 [ 392.337143][ T6178] link_path_walk+0xd2a/0x1910 [ 392.337165][ T6178] path_lookupat+0xe4/0x8c0 [ 392.337184][ T6178] do_o_path+0x9f/0x210 [ 392.337202][ T6178] ? __pfx_do_o_path+0x10/0x10 [ 392.337222][ T6178] path_openat+0x309a/0x3830 [ 392.337233][ T6178] ? page_table_check_set+0x126/0x510 [ 392.337249][ T6178] ? kasan_save_track+0x4f/0x80 [ 392.337264][ T6178] ? kasan_save_track+0x3e/0x80 [ 392.337278][ T6178] ? __kasan_slab_alloc+0x6c/0x80 [ 392.337293][ T6178] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 392.337308][ T6178] ? do_getname+0x2e/0x250 [ 392.337321][ T6178] ? do_sys_openat2+0xcc/0x200 [ 392.337336][ T6178] ? __x64_sys_openat+0x138/0x170 [ 392.337351][ T6178] ? do_syscall_64+0x174/0x580 [ 392.337367][ T6178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.337385][ T6178] do_file_open+0x23e/0x4a0 [ 392.337397][ T6178] ? __pfx_do_file_open+0x10/0x10 [ 392.337413][ T6178] ? _raw_spin_unlock+0x28/0x50 [ 392.337426][ T6178] ? alloc_fd+0x651/0x6c0 [ 392.337444][ T6178] do_sys_openat2+0x115/0x200 [ 392.337457][ T6178] ? _raw_spin_unlock_irq+0x2e/0x50 [ 392.337470][ T6178] ? __pfx_do_sys_openat2+0x10/0x10 [ 392.337494][ T6178] ? rcu_is_watching+0x15/0xb0 [ 392.337510][ T6178] __x64_sys_openat+0x138/0x170 [ 392.337526][ T6178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.337538][ T6178] do_syscall_64+0x174/0x580 [ 392.337553][ T6178] ? trace_irq_disable+0x3b/0x140 [ 392.337564][ T6178] ? clear_bhb_loop+0x40/0x90 [ 392.337578][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.337590][ T6178] RIP: 0033:0x7fe91079ce59 [ 392.337604][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.337614][ T6178] RSP: 002b:00007fe9116ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 392.337629][ T6178] RAX: ffffffffffffffda RBX: 00007fe910a16090 RCX: 00007fe91079ce59 [ 392.337638][ T6178] RDX: 0000000000200002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 392.337645][ T6178] RBP: 00007fe910832e6f R08: 0000000000000000 R09: 0000000000000000 [ 392.337653][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.337660][ T6178] R13: 00007fe910a16128 R14: 00007fe910a16090 R15: 00007ffdc9f53e38 [ 392.337673][ T6178] [ 392.337677][ T6178] [ 392.520077][ T6178] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90002428000 allocated at copy_process+0x81b/0x42e0 [ 392.525573][ T6178] The buggy address belongs to the physical page: [ 392.528308][ T6178] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x55fe pfn:0x55c9f [ 392.532323][ T6178] memcg:ffff8880350b0682 [ 392.534374][ T6178] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 392.537727][ T6178] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 392.541318][ T6178] raw: 00000000000055fe 0000000000000000 00000001ffffffff ffff8880350b0682 [ 392.544972][ T6178] page dumped because: kasan: bad access detected [ 392.547895][ T6178] page_owner tracks the page as allocated [ 392.550976][ T6178] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 6164, tgid 6164 (syz.0.195), ts 388929961593, free_ts 388907668295 [ 392.559961][ T6178] post_alloc_hook+0x1f9/0x250 [ 392.562122][ T6178] get_page_from_freelist+0x21fa/0x2270 [ 392.564469][ T6178] __alloc_pages_slowpath+0x383/0xcc0 [ 392.566844][ T6178] __alloc_frozen_pages_noprof+0x31f/0x380 [ 392.569630][ T6178] alloc_pages_mpol+0x212/0x380 [ 392.572440][ T6178] alloc_pages_noprof+0xac/0x2a0 [ 392.575235][ T6178] __vmalloc_node_range_noprof+0x795/0x1730 [ 392.577939][ T6178] __vmalloc_node_noprof+0xc2/0x100 [ 392.580243][ T6178] dup_task_struct+0x28e/0x850 [ 392.582377][ T6178] copy_process+0x81b/0x42e0 [ 392.584396][ T6178] kernel_clone+0x2d7/0x940 [ 392.586374][ T6178] __se_sys_clone3+0x33c/0x360 [ 392.588613][ T6178] do_syscall_64+0x174/0x580 [ 392.590757][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.593697][ T6178] page last free pid 5322 tgid 5322 stack trace: [ 392.596325][ T6178] __free_frozen_pages+0xc1e/0xd10 [ 392.598493][ T6178] __folio_put+0x4b3/0x590 [ 392.600436][ T6178] skb_release_data+0x573/0xab0 [ 392.602616][ T6178] __kfree_skb+0x5d/0x210 [ 392.604407][ T6178] skb_attempt_defer_free+0x533/0x7c0 [ 392.606975][ T6178] tcp_recvmsg_locked+0x22ef/0x3800 [ 392.609986][ T6178] tcp_recvmsg+0x203/0x7f0 [ 392.612169][ T6178] sock_recvmsg+0x166/0x1e0 [ 392.614017][ T6178] sock_read_iter+0x22a/0x2f0 [ 392.615915][ T6178] vfs_read+0x595/0xa80 [ 392.617598][ T6178] ksys_read+0x150/0x270 [ 392.619320][ T6178] do_syscall_64+0x174/0x580 [ 392.621154][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.623660][ T6178] [ 392.624763][ T6178] Memory state around the buggy address: [ 392.627394][ T6178] ffffc9000242f780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.631711][ T6178] ffffc9000242f800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.635393][ T6178] >ffffc9000242f880: 00 00 00 00 f1 f1 f1 f1 f8 f8 f8 f2 f2 f2 f2 f2 [ 392.638921][ T6178] ^ [ 392.641714][ T6178] ffffc9000242f900: 00 00 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.646567][ T6178] ffffc9000242f980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 392.650825][ T6178] ================================================================== 2026/06/24 20:30:15 executed programs: 199 [ 394.797524][ T6178] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 394.800723][ T6178] CPU: 0 UID: 0 PID: 6178 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT(full) [ 394.804455][ T6178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 394.808795][ T6178] Call Trace: [ 394.810677][ T6178] [ 394.812545][ T6178] vpanic+0x56c/0xa60 [ 394.814560][ T6178] ? __pfx_vpanic+0x10/0x10 [ 394.816468][ T6178] panic+0xc5/0xd0 [ 394.817994][ T6178] ? __pfx_panic+0x10/0x10 [ 394.819997][ T6178] ? preempt_schedule_thunk+0x16/0x40 [ 394.822216][ T6178] ? gfs2_dump_glock+0x14af/0x1a70 [ 394.824369][ T6178] ? preempt_schedule_thunk+0x16/0x40 [ 394.826669][ T6178] ? gfs2_dump_glock+0x14af/0x1a70 [ 394.829044][ T6178] check_panic_on_warn+0x89/0xb0 [ 394.831417][ T6178] ? gfs2_dump_glock+0x14af/0x1a70 [ 394.833592][ T6178] end_report+0x73/0x170 [ 394.835357][ T6178] ? gfs2_dump_glock+0x14af/0x1a70 [ 394.837298][ T6178] kasan_report+0x128/0x150 [ 394.839223][ T6178] ? gfs2_dump_glock+0x14af/0x1a70 [ 394.841700][ T6178] gfs2_dump_glock+0x14af/0x1a70 [ 394.844353][ T6178] ? gfs2_dump_glock+0xd84/0x1a70 [ 394.846774][ T6178] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 394.849043][ T6178] ? __pfx__printk+0x10/0x10 [ 394.850934][ T6178] ? __pfx__printk+0x10/0x10 [ 394.852740][ T6178] gfs2_consist_inode_i+0xf5/0x110 [ 394.854746][ T6178] gfs2_dirent_scan+0x54d/0x690 [ 394.856839][ T6178] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 394.859541][ T6178] gfs2_dirent_search+0x358/0x8e0 [ 394.862168][ T6178] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 394.864530][ T6178] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 394.866955][ T6178] ? __pfx_gfs2_permission+0x10/0x10 [ 394.869294][ T6178] gfs2_dir_search+0x4c/0x220 [ 394.871338][ T6178] gfs2_lookupi+0x45b/0x640 [ 394.873291][ T6178] ? __pfx_gfs2_lookupi+0x10/0x10 [ 394.876380][ T6178] ? d_alloc_parallel+0x152b/0x16a0 [ 394.879789][ T6178] ? __gfs2_lookup+0xac/0x2b0 [ 394.881892][ T6178] __gfs2_lookup+0xac/0x2b0 [ 394.883851][ T6178] ? __pfx___gfs2_lookup+0x10/0x10 [ 394.885789][ T6178] ? lookup_slow+0x46/0x70 [ 394.887602][ T6178] ? lookup_slow+0x46/0x70 [ 394.889118][ T6178] __lookup_slow+0x1fb/0x2f0 [ 394.890763][ T6178] lookup_slow+0x53/0x70 [ 394.892259][ T6178] link_path_walk+0xd2a/0x1910 [ 394.894027][ T6178] path_lookupat+0xe4/0x8c0 [ 394.895989][ T6178] do_o_path+0x9f/0x210 [ 394.898221][ T6178] ? __pfx_do_o_path+0x10/0x10 [ 394.900434][ T6178] path_openat+0x309a/0x3830 [ 394.902495][ T6178] ? page_table_check_set+0x126/0x510 [ 394.904867][ T6178] ? kasan_save_track+0x4f/0x80 [ 394.906994][ T6178] ? kasan_save_track+0x3e/0x80 [ 394.909133][ T6178] ? __kasan_slab_alloc+0x6c/0x80 [ 394.911420][ T6178] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 394.914635][ T6178] ? do_getname+0x2e/0x250 [ 394.916637][ T6178] ? do_sys_openat2+0xcc/0x200 [ 394.919146][ T6178] ? __x64_sys_openat+0x138/0x170 [ 394.921881][ T6178] ? do_syscall_64+0x174/0x580 [ 394.924422][ T6178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.927725][ T6178] do_file_open+0x23e/0x4a0 [ 394.930106][ T6178] ? __pfx_do_file_open+0x10/0x10 [ 394.932747][ T6178] ? _raw_spin_unlock+0x28/0x50 [ 394.934758][ T6178] ? alloc_fd+0x651/0x6c0 [ 394.936554][ T6178] do_sys_openat2+0x115/0x200 [ 394.938593][ T6178] ? _raw_spin_unlock_irq+0x2e/0x50 [ 394.940735][ T6178] ? __pfx_do_sys_openat2+0x10/0x10 [ 394.942934][ T6178] ? rcu_is_watching+0x15/0xb0 [ 394.945121][ T6178] __x64_sys_openat+0x138/0x170 [ 394.947312][ T6178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.949866][ T6178] do_syscall_64+0x174/0x580 [ 394.951713][ T6178] ? trace_irq_disable+0x3b/0x140 [ 394.953642][ T6178] ? clear_bhb_loop+0x40/0x90 [ 394.955624][ T6178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.958139][ T6178] RIP: 0033:0x7fe91079ce59 [ 394.960132][ T6178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.969168][ T6178] RSP: 002b:00007fe9116ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 394.972507][ T6178] RAX: ffffffffffffffda RBX: 00007fe910a16090 RCX: 00007fe91079ce59 [ 394.975916][ T6178] RDX: 0000000000200002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 394.979205][ T6178] RBP: 00007fe910832e6f R08: 0000000000000000 R09: 0000000000000000 [ 394.982607][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.986963][ T6178] R13: 00007fe910a16128 R14: 00007fe910a16090 R15: 00007ffdc9f53e38 [ 394.991675][ T6178] [ 394.993282][ T6178] Kernel Offset: disabled [ 394.995199][ T6178] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:30:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002926a30 R8 =ffff888034228237 R9 =1ffff11006845046 R10=dffffc0000000000 R11=ffffffff854c4b40 R12=dffffc0000000000 R13=ffffffff9a80c200 R14=ffffffff9a80c240 R15=0000000000000000 RIP=ffffffff854c4bbc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe9116ef6c0 ffffffff 00c00000 GS =0000 ffff88808c81f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000010bcad537000 CR3=00000000553b7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc9f54326 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc9f54326 00007ffdc9f5432c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe910833452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe910833492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9108335f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe910833484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000190 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 0000000000000190 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000