Warning: Permanently added '[localhost]:48122' (ED25519) to the list of known hosts. 2026/05/11 16:55:34 parsed 1 programs syzkaller login: [ 70.639513][ T5614] cgroup: Unknown subsys name 'net' [ 70.765642][ T5614] cgroup: Unknown subsys name 'cpuset' [ 70.772124][ T5614] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.032768][ T5614] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.309874][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.847552][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.855965][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.912322][ T1414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.918670][ T1414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.023778][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.027971][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 78.382095][ T4998] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.387118][ T4998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.390237][ T4998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.396576][ T4998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.399073][ T4998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.074521][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.077402][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.079681][ T5682] bridge_slave_0: entered allmulticast mode [ 79.082737][ T5682] bridge_slave_0: entered promiscuous mode [ 79.088099][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.090195][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.093908][ T5682] bridge_slave_1: entered allmulticast mode [ 79.100059][ T5682] bridge_slave_1: entered promiscuous mode [ 79.138478][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.145327][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.189849][ T5682] team0: Port device team_slave_0 added [ 79.195931][ T5682] team0: Port device team_slave_1 added [ 79.230778][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.237319][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.247941][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.265775][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.268356][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.277109][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.303342][ T5682] hsr_slave_0: entered promiscuous mode [ 79.306955][ T5682] hsr_slave_1: entered promiscuous mode [ 79.463005][ T5682] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.473871][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.478620][ T5682] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.484065][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.487034][ T5682] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.492607][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.495199][ T5682] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.499452][ T5682] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.526957][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.529732][ T5682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.532768][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.535027][ T5682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.584073][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.595199][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.598546][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.614029][ T5682] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.625596][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.628523][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.639738][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.642421][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.945441][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.000174][ T5682] veth0_vlan: entered promiscuous mode [ 80.010419][ T5682] veth1_vlan: entered promiscuous mode [ 80.044720][ T5682] veth0_macvtap: entered promiscuous mode [ 80.054189][ T5682] veth1_macvtap: entered promiscuous mode [ 80.073646][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.083564][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.097752][ T5444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.104164][ T5444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.114332][ T5444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.121921][ T5444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/11 16:55:46 executed programs: 0 [ 80.326701][ T4998] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.333198][ T4998] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.336642][ T4998] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.345060][ T4998] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.349119][ T4998] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.403860][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.407691][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.417514][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.424269][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.427157][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.439310][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.444557][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.448882][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.462099][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.465576][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.738220][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.843952][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.993873][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.463737][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.466937][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.470061][ T5742] bridge_slave_0: entered allmulticast mode [ 81.474529][ T5742] bridge_slave_0: entered promiscuous mode [ 81.507034][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.510871][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.516780][ T5742] bridge_slave_1: entered allmulticast mode [ 81.520893][ T5742] bridge_slave_1: entered promiscuous mode [ 81.589094][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.592163][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.595164][ T5740] bridge_slave_0: entered allmulticast mode [ 81.599048][ T5740] bridge_slave_0: entered promiscuous mode [ 81.606628][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.620446][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.623954][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.627107][ T5743] bridge_slave_0: entered allmulticast mode [ 81.631227][ T5743] bridge_slave_0: entered promiscuous mode [ 81.635338][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.638169][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.641861][ T5740] bridge_slave_1: entered allmulticast mode [ 81.647024][ T5740] bridge_slave_1: entered promiscuous mode [ 81.653264][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.682933][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.686735][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.689608][ T5743] bridge_slave_1: entered allmulticast mode [ 81.693542][ T5743] bridge_slave_1: entered promiscuous mode [ 81.714063][ T5742] team0: Port device team_slave_0 added [ 81.744667][ T5742] team0: Port device team_slave_1 added [ 81.761927][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.783404][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.790471][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.810455][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.849105][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.852681][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.863132][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.883206][ T5740] team0: Port device team_slave_0 added [ 81.886101][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.889038][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.898942][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.914741][ T5743] team0: Port device team_slave_0 added [ 81.919532][ T5740] team0: Port device team_slave_1 added [ 81.947307][ T5743] team0: Port device team_slave_1 added [ 81.953224][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.955947][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.965516][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.971520][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.974233][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.985556][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.036628][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.041500][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.050566][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.056819][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.059565][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.069769][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.124227][ T5742] hsr_slave_0: entered promiscuous mode [ 82.127292][ T5742] hsr_slave_1: entered promiscuous mode [ 82.130203][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 82.133343][ T5742] Cannot create hsr debugfs directory [ 82.144722][ T5740] hsr_slave_0: entered promiscuous mode [ 82.147852][ T5740] hsr_slave_1: entered promiscuous mode [ 82.150716][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 82.153238][ T5740] Cannot create hsr debugfs directory [ 82.250740][ T5743] hsr_slave_0: entered promiscuous mode [ 82.254234][ T5743] hsr_slave_1: entered promiscuous mode [ 82.257294][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 82.259641][ T5743] Cannot create hsr debugfs directory [ 82.383308][ T4998] Bluetooth: hci1: command tx timeout [ 82.384788][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.541400][ T5699] Bluetooth: hci2: command tx timeout [ 82.544220][ T4998] Bluetooth: hci3: command tx timeout [ 82.603936][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.610132][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.615690][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.620924][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.625323][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.631566][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.635349][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.640934][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.730049][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.753694][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.762679][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.765539][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.776265][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.779064][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.101243][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.152739][ T5742] veth0_vlan: entered promiscuous mode [ 83.160924][ T5742] veth1_vlan: entered promiscuous mode [ 83.197625][ T5742] veth0_macvtap: entered promiscuous mode [ 83.205204][ T5742] veth1_macvtap: entered promiscuous mode [ 83.223998][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.236155][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.246492][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.249745][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.254920][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.258146][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.336002][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.342104][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.372794][ T186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.376179][ T186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.407696][ T5813] loop2: detected capacity change from 0 to 512 [ 83.443000][ T5813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.447592][ T5813] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.459291][ T5813] ======================================================= [ 83.459291][ T5813] WARNING: The mand mount option has been deprecated and [ 83.459291][ T5813] and is ignored by this kernel. Remove the mand [ 83.459291][ T5813] option from the mount to silence this warning. [ 83.459291][ T5813] ======================================================= [ 83.482418][ T5813] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 83.494184][ T5742] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.497157][ T5742] ================================================================== [ 83.499635][ T5742] BUG: KASAN: null-ptr-deref in write_dirty_buffer+0x37/0x190 [ 83.501859][ T5742] Write of size 8 at addr 0000000000000000 by task syz-executor/5742 [ 83.505384][ T5742] [ 83.506122][ T5742] CPU: 1 UID: 0 PID: 5742 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 83.506132][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 83.506138][ T5742] Call Trace: [ 83.506144][ T5742] [ 83.506148][ T5742] dump_stack_lvl+0xe8/0x150 [ 83.506160][ T5742] ? write_dirty_buffer+0x37/0x190 [ 83.506172][ T5742] kasan_report+0x117/0x150 [ 83.506184][ T5742] ? write_dirty_buffer+0x37/0x190 [ 83.506196][ T5742] kasan_check_range+0x264/0x2c0 [ 83.506208][ T5742] write_dirty_buffer+0x37/0x190 [ 83.506219][ T5742] mmb_sync+0x74c/0xed0 [ 83.506231][ T5742] ? dax_break_layout_final+0x100/0x360 [ 83.506241][ T5742] ? __pfx_mmb_sync+0x10/0x10 [ 83.506253][ T5742] ? write_inode_now+0x1c2/0x290 [ 83.506260][ T5742] ext4_evict_inode+0x2fa/0x1040 [ 83.506272][ T5742] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 83.506283][ T5742] ? do_raw_spin_lock+0x12b/0x2f0 [ 83.506294][ T5742] ? __pfx_ext4_evict_inode+0x10/0x10 [ 83.506305][ T5742] ? do_raw_spin_unlock+0x4d/0x210 [ 83.506315][ T5742] ? __pfx_ext4_evict_inode+0x10/0x10 [ 83.506325][ T5742] evict+0x61e/0xb10 [ 83.506338][ T5742] ? __pfx_evict+0x10/0x10 [ 83.506348][ T5742] ? do_raw_spin_unlock+0x4d/0x210 [ 83.506359][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 83.506389][ T5742] ? iput+0xb25/0xe80 [ 83.506399][ T5742] ext4_quota_off+0x470/0x580 [ 83.506412][ T5742] ext4_put_super+0xdf/0xd80 [ 83.506423][ T5742] ? __pfx_ext4_put_super+0x10/0x10 [ 83.506433][ T5742] generic_shutdown_super+0x13d/0x2d0 [ 83.506444][ T5742] kill_block_super+0x44/0x90 [ 83.506455][ T5742] ext4_kill_sb+0x68/0xb0 [ 83.506464][ T5742] deactivate_locked_super+0xbc/0x130 [ 83.506473][ T5742] cleanup_mnt+0x437/0x4d0 [ 83.506488][ T5742] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.506498][ T5742] task_work_run+0x1d9/0x270 [ 83.506509][ T5742] ? __pfx_task_work_run+0x10/0x10 [ 83.506521][ T5742] exit_to_user_mode_loop+0xf3/0x4d0 [ 83.506529][ T5742] ? rcu_is_watching+0x15/0xb0 [ 83.506538][ T5742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.506545][ T5742] do_syscall_64+0x33e/0xf80 [ 83.506556][ T5742] ? trace_irq_disable+0x3b/0x140 [ 83.506569][ T5742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.506576][ T5742] RIP: 0033:0x7fd8d1b9e017 [ 83.506586][ T5742] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 83.506592][ T5742] RSP: 002b:00007ffef04ebf88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.506601][ T5742] RAX: 0000000000000000 RBX: 00007fd8d1c32120 RCX: 00007fd8d1b9e017 [ 83.506606][ T5742] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef04ec040 [ 83.506610][ T5742] RBP: 00007ffef04ec040 R08: 00007ffef04ed040 R09: 00000000ffffffff [ 83.506615][ T5742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef04ed0d0 [ 83.506620][ T5742] R13: 00007fd8d1c32120 R14: 0000000000014595 R15: 00007ffef04ed110 [ 83.506628][ T5742] [ 83.506631][ T5742] ================================================================== [ 83.603188][ T5742] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.605327][ T5742] CPU: 1 UID: 0 PID: 5742 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 83.608039][ T5742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 83.610931][ T5742] Call Trace: [ 83.611917][ T5742] [ 83.612782][ T5742] vpanic+0x56c/0xa60 [ 83.613953][ T5742] ? __pfx_vpanic+0x10/0x10 [ 83.615258][ T5742] panic+0xc5/0xd0 [ 83.616389][ T5742] ? __pfx_panic+0x10/0x10 [ 83.617674][ T5742] ? preempt_schedule_thunk+0x16/0x30 [ 83.619206][ T5742] ? write_dirty_buffer+0x37/0x190 [ 83.620641][ T5742] ? preempt_schedule_thunk+0x16/0x30 [ 83.622159][ T5742] ? write_dirty_buffer+0x37/0x190 [ 83.623637][ T5742] check_panic_on_warn+0x89/0xb0 [ 83.625066][ T5742] ? write_dirty_buffer+0x37/0x190 [ 83.626570][ T5742] end_report+0x73/0x170 [ 83.627814][ T5742] ? write_dirty_buffer+0x37/0x190 [ 83.629311][ T5742] kasan_report+0x128/0x150 [ 83.630653][ T5742] ? write_dirty_buffer+0x37/0x190 [ 83.632127][ T5742] kasan_check_range+0x264/0x2c0 [ 83.633570][ T5742] write_dirty_buffer+0x37/0x190 [ 83.635001][ T5742] mmb_sync+0x74c/0xed0 [ 83.636260][ T5742] ? dax_break_layout_final+0x100/0x360 [ 83.637858][ T5742] ? __pfx_mmb_sync+0x10/0x10 [ 83.639213][ T5742] ? write_inode_now+0x1c2/0x290 [ 83.640650][ T5742] ext4_evict_inode+0x2fa/0x1040 [ 83.642089][ T5742] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 83.643847][ T5742] ? do_raw_spin_lock+0x12b/0x2f0 [ 83.645317][ T5742] ? __pfx_ext4_evict_inode+0x10/0x10 [ 83.646874][ T5742] ? do_raw_spin_unlock+0x4d/0x210 [ 83.648552][ T5742] ? __pfx_ext4_evict_inode+0x10/0x10 [ 83.650601][ T5742] evict+0x61e/0xb10 [ 83.652045][ T5742] ? __pfx_evict+0x10/0x10 [ 83.653406][ T5742] ? do_raw_spin_unlock+0x4d/0x210 [ 83.654898][ T5742] ? _raw_spin_unlock+0x28/0x50 [ 83.656319][ T5742] ? iput+0xb25/0xe80 [ 83.657509][ T5742] ext4_quota_off+0x470/0x580 [ 83.658855][ T5742] ext4_put_super+0xdf/0xd80 [ 83.660165][ T5742] ? __pfx_ext4_put_super+0x10/0x10 [ 83.661675][ T5742] generic_shutdown_super+0x13d/0x2d0 [ 83.663187][ T5742] kill_block_super+0x44/0x90 [ 83.664565][ T5742] ext4_kill_sb+0x68/0xb0 [ 83.665825][ T5742] deactivate_locked_super+0xbc/0x130 [ 83.667270][ T5742] cleanup_mnt+0x437/0x4d0 [ 83.668462][ T5742] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.669923][ T5742] task_work_run+0x1d9/0x270 [ 83.671250][ T5742] ? __pfx_task_work_run+0x10/0x10 [ 83.672736][ T5742] exit_to_user_mode_loop+0xf3/0x4d0 [ 83.674258][ T5742] ? rcu_is_watching+0x15/0xb0 [ 83.675671][ T5742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.677436][ T5742] do_syscall_64+0x33e/0xf80 [ 83.678774][ T5742] ? trace_irq_disable+0x3b/0x140 [ 83.680203][ T5742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.682095][ T5742] RIP: 0033:0x7fd8d1b9e017 [ 83.683468][ T5742] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 83.688919][ T5742] RSP: 002b:00007ffef04ebf88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.691252][ T5742] RAX: 0000000000000000 RBX: 00007fd8d1c32120 RCX: 00007fd8d1b9e017 [ 83.693443][ T5742] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef04ec040 [ 83.695921][ T5742] RBP: 00007ffef04ec040 R08: 00007ffef04ed040 R09: 00000000ffffffff [ 83.698392][ T5742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef04ed0d0 [ 83.700787][ T5742] R13: 00007fd8d1c32120 R14: 0000000000014595 R15: 00007ffef04ed110 [ 83.703583][ T5742] [ 83.705207][ T5742] Kernel Offset: disabled [ 83.706496][ T5742] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:55:50 Registers: info registers vcpu 0 CPU#0 RAX=00000000000d1bc3 RBX=ffffffff819a93ba RCX=0000000080000001 RDX=0000000000000001 RSI=ffffffff8dfa691a RDI=ffffffff8c28aee0 RBP=ffffffff8e607eb0 RSP=ffffffff8e607dc0 R8 =ffff8881210339db R9 =1ffff1102420673b R10=dffffc0000000000 R11=ffffed102420673c R12=0000000000000000 R13=1ffffffff1cd25d8 R14=0000000000000000 R15=1ffffffff1cd25d8 RIP=ffffffff8ba8b12f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88818dc8d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000200000001000 CR3=0000000173ca4000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=00000000000000ff 0000000000000000 XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000 XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003cdf1d0 R8 =ffff888104ee0237 R9 =1ffff110209dc046 R10=dffffc0000000000 R11=ffffffff8544d340 R12=dffffc0000000000 R13=ffffffff9a4899f7 R14=ffffffff9a7a2880 R15=0000000000000000 RIP=ffffffff8544d3bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555593e500 ffffffff 00c00000 GS =0000 ffff8882a928d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555959a28 CR3=000000011044e000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffff 00000000000000ff XMM01=0000000000000000 8080808080808002 XMM02=6161616161616161 6161616161616161 XMM03=6161616161616161 6161616161616161 XMM04=6161616161616161 6161616161616161 XMM05=6161616161616161 6161616161616161 XMM06=6161616161616161 6161616161616161 XMM07=3d80040f80040401 59cc006161616161 XMM08=6161616161616161 6161616161616161 XMM09=6161616161616161 6161616161616161 XMM10=6161616161616161 6161616161616161 XMM11=3d80040f80040401 59cc006161616161 XMM12=736d01ffffffffff fffffff308068003 XMM13=fffffffffffffffb 0804800300736f64 XMM14=1000048004068004 0e0177ac002e01ff XMM15=0000000000000000 0000000000000000