syzkaller login: [ 118.424814][ T10] cfg80211: failed to load regulatory.db Warning: Permanently added '[localhost]:27220' (ED25519) to the list of known hosts. 2026/07/06 09:29:37 parsed 1 programs 2026/07/06 09:29:37 serving rpc on tcp://35463 [ 124.183357][ T5608] =================================================== [ 124.185853][ T5608] DEPT: Circular dependency has been detected. [ 124.188032][ T5608] syzkaller #0 Not tainted [ 124.189573][ T5608] --------------------------------------------------- [ 124.191918][ T5608] summary [ 124.192978][ T5608] --------------------------------------------------- [ 124.195419][ T5608] *** DEADLOCK *** [ 124.195419][ T5608] [ 124.197518][ T5608] context A [ 124.198635][ T5608] [S] lock(&ei->i_data_sem:0) [ 124.200137][ T5608] [W] dept_page_wait_on_bit(pg_locked_map:0) [ 124.202247][ T5608] [E] unlock(&ei->i_data_sem:0) [ 124.204000][ T5608] [ 124.204920][ T5608] context B [ 124.206043][ T5608] [S] (unknown)(pg_locked_map:0) [ 124.207746][ T5608] [W] lock(&ei->i_data_sem:0) [ 124.209497][ T5608] [E] dept_page_clear_bit(pg_locked_map:0) [ 124.211665][ T5608] [ 124.212586][ T5608] [S]: start of the event context [ 124.214342][ T5608] [W]: the wait blocked [ 124.215800][ T5608] [E]: the event not reachable [ 124.217439][ T5608] --------------------------------------------------- [ 124.219868][ T5608] context A's detail [ 124.221130][ T5608] --------------------------------------------------- [ 124.223541][ T5608] context A [ 124.224725][ T5608] [S] lock(&ei->i_data_sem:0) [ 124.226377][ T5608] [W] dept_page_wait_on_bit(pg_locked_map:0) [ 124.228232][ T5608] [E] unlock(&ei->i_data_sem:0) [ 124.229711][ T5608] [ 124.230509][ T5608] [S] lock(&ei->i_data_sem:0): [ 124.232180][ T5608] [] ext4_map_blocks+0x7cc/0x1240 [ 124.234167][ T5608] stacktrace: [ 124.235420][ T5608] ext4_map_blocks+0x7cc/0x1240 [ 124.237240][ T5608] ext4_getblk+0x1c3/0x7c0 [ 124.238960][ T5608] ext4_bread+0x2a/0x180 [ 124.240578][ T5608] ext4_append+0x2b6/0x560 [ 124.242283][ T5608] ext4_init_new_dir+0x11f/0x1c0 [ 124.244057][ T5608] ext4_mkdir+0x4f7/0xc70 [ 124.245849][ T5608] vfs_mkdir+0x407/0x620 [ 124.247574][ T5608] filename_mkdirat+0x291/0x530 [ 124.249421][ T5608] __se_sys_mkdirat+0x35/0x150 [ 124.251231][ T5608] do_syscall_64+0x175/0xf80 [ 124.253048][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.255271][ T5608] [ 124.256141][ T5608] [W] dept_page_wait_on_bit(pg_locked_map:0): [ 124.258206][ T5608] [] find_get_block_common+0x2ce/0xd70 [ 124.260659][ T5608] stacktrace: [ 124.261900][ T5608] find_get_block_common+0x2ce/0xd70 [ 124.263917][ T5608] bdev_getblk+0x55/0x5b0 [ 124.265630][ T5608] ext4_read_block_bitmap_nowait+0x219/0x9d0 [ 124.267910][ T5608] ext4_read_block_bitmap+0x1e/0x80 [ 124.269915][ T5608] ext4_mb_mark_context+0x114/0xec0 [ 124.271760][ T5608] ext4_mb_mark_diskspace_used+0x338/0x760 [ 124.273814][ T5608] ext4_mb_new_blocks+0x106f/0x45f0 [ 124.275755][ T5608] ext4_ext_map_blocks+0x1540/0x5980 [ 124.277705][ T5608] ext4_map_create_blocks+0x116/0x530 [ 124.279718][ T5608] ext4_map_blocks+0x7e4/0x1240 [ 124.281533][ T5608] ext4_getblk+0x1c3/0x7c0 [ 124.283259][ T5608] ext4_bread+0x2a/0x180 [ 124.284945][ T5608] ext4_append+0x2b6/0x560 [ 124.286689][ T5608] ext4_init_new_dir+0x11f/0x1c0 [ 124.288626][ T5608] ext4_mkdir+0x4f7/0xc70 [ 124.290284][ T5608] vfs_mkdir+0x407/0x620 [ 124.291702][ T5608] [ 124.292444][ T5608] [E] unlock(&ei->i_data_sem:0): [ 124.294123][ T5608] (N/A) [ 124.295079][ T5608] --------------------------------------------------- [ 124.297364][ T5608] context B's detail [ 124.298825][ T5608] --------------------------------------------------- [ 124.301299][ T5608] context B [ 124.302445][ T5608] [S] (unknown)(pg_locked_map:0) [ 124.304236][ T5608] [W] lock(&ei->i_data_sem:0) [ 124.305874][ T5608] [E] dept_page_clear_bit(pg_locked_map:0) [ 124.308054][ T5608] [ 124.308924][ T5608] [S] (unknown)(pg_locked_map:0): [ 124.310612][ T5608] (N/A) [ 124.311487][ T5608] [ 124.312262][ T5608] [W] lock(&ei->i_data_sem:0): [ 124.314018][ T5608] [] ext4_da_get_block_prep+0x361/0x1320 [ 124.316626][ T5608] stacktrace: [ 124.317807][ T5608] ext4_da_get_block_prep+0x361/0x1320 [ 124.319644][ T5608] ext4_block_write_begin+0xb09/0x1950 [ 124.321465][ T5608] ext4_da_write_begin+0x85a/0xd90 [ 124.323153][ T5608] generic_perform_write+0x2d8/0x8f0 [ 124.325160][ T5608] ext4_buffered_write_iter+0xd0/0x3a0 [ 124.327047][ T5608] ext4_file_write_iter+0x939/0x1c30 [ 124.329233][ T5608] vfs_write+0x61e/0xbb0 [ 124.331054][ T5608] ksys_write+0x156/0x270 [ 124.332818][ T5608] do_syscall_64+0x175/0xf80 [ 124.334350][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.336291][ T5608] [ 124.337057][ T5608] [E] dept_page_clear_bit(pg_locked_map:0): [ 124.338855][ T5608] [] ext4_da_write_end+0x832/0xd00 [ 124.340910][ T5608] stacktrace: [ 124.341957][ T5608] ext4_da_write_end+0x832/0xd00 [ 124.343594][ T5608] generic_perform_write+0x615/0x8f0 [ 124.345334][ T5608] ext4_buffered_write_iter+0xd0/0x3a0 [ 124.347164][ T5608] ext4_file_write_iter+0x939/0x1c30 [ 124.348930][ T5608] vfs_write+0x61e/0xbb0 [ 124.350416][ T5608] ksys_write+0x156/0x270 [ 124.351894][ T5608] do_syscall_64+0x175/0xf80 [ 124.353466][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.355374][ T5608] --------------------------------------------------- [ 124.357436][ T5608] information that might be helpful [ 124.359037][ T5608] --------------------------------------------------- [ 124.361113][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 124.361122][ T5608] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 124.361127][ T5608] Call Trace: [ 124.361131][ T5608] [ 124.361134][ T5608] dump_stack_lvl+0xed/0x160 [ 124.361147][ T5608] cb_check_dl+0x231b/0x2390 [ 124.361159][ T5608] bfs+0x46a/0x5e0 [ 124.361167][ T5608] ? __pfx_bfs+0x10/0x10 [ 124.361175][ T5608] ? add_dep+0x38b/0x770 [ 124.361184][ T5608] add_dep+0x3d4/0x770 [ 124.361192][ T5608] ? __pfx_llist_del_first+0x10/0x10 [ 124.361201][ T5608] ? __pfx_bfs_init_check_dl+0x10/0x10 [ 124.361209][ T5608] ? __pfx_bfs_extend_dep+0x10/0x10 [ 124.361218][ T5608] ? __pfx_bfs_dequeue_dep+0x10/0x10 [ 124.361225][ T5608] ? __pfx_cb_check_dl+0x10/0x10 [ 124.361233][ T5608] ? __pfx_add_dep+0x10/0x10 [ 124.361241][ T5608] ? from_pool+0x1e5/0x610 [ 124.361248][ T5608] ? __pfx_from_pool+0x10/0x10 [ 124.361257][ T5608] __dept_wait+0xff2/0x1b70 [ 124.361265][ T5608] ? __pfx_llist_del_first+0x10/0x10 [ 124.361274][ T5608] ? find_get_block_common+0x2ce/0xd70 [ 124.361283][ T5608] ? __pfx_from_pool+0x10/0x10 [ 124.361291][ T5608] ? __pfx___dept_wait+0x10/0x10 [ 124.361299][ T5608] dept_wait+0x135/0x1a0 [ 124.361306][ T5608] ? find_get_block_common+0x2ce/0xd70 [ 124.361314][ T5608] folio_lock+0x1e3/0x420 [ 124.361322][ T5608] ? __pfx_folio_lock+0x10/0x10 [ 124.361329][ T5608] ? dept_task+0x5/0x20 [ 124.361334][ T5608] ? dept_on+0x1b/0x30 [ 124.361341][ T5608] ? dept_exit+0x16b/0x250 [ 124.361348][ T5608] find_get_block_common+0x2ce/0xd70 [ 124.361357][ T5608] bdev_getblk+0x55/0x5b0 [ 124.361364][ T5608] ? ext4_get_group_desc+0x434/0x4e0 [ 124.361371][ T5608] ? ext4_get_group_desc+0x10e/0x4e0 [ 124.361378][ T5608] ext4_read_block_bitmap_nowait+0x219/0x9d0 [ 124.361386][ T5608] ext4_read_block_bitmap+0x1e/0x80 [ 124.361419][ T5608] ext4_mb_mark_context+0x114/0xec0 [ 124.361433][ T5608] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 124.361440][ T5608] ? ext4_sb_block_valid+0x16d/0x560 [ 124.361448][ T5608] ? ext4_sb_block_valid+0x484/0x560 [ 124.361456][ T5608] ext4_mb_mark_diskspace_used+0x338/0x760 [ 124.361466][ T5608] ext4_mb_new_blocks+0x106f/0x45f0 [ 124.361474][ T5608] ? rcu_is_watching+0x15/0xb0 [ 124.361484][ T5608] ? trace_kmalloc+0x2a/0x110 [ 124.361491][ T5608] ? __kmalloc_noprof+0x379/0x750 [ 124.361498][ T5608] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 124.361506][ T5608] ? ext4_inode_to_goal_block+0x319/0x460 [ 124.361514][ T5608] ext4_ext_map_blocks+0x1540/0x5980 [ 124.361523][ T5608] ? __bfs+0x153/0x290 [ 124.361531][ T5608] ? __pfx_hlock_conflict+0x10/0x10 [ 124.361543][ T5608] ? lockdep_unlock+0x5d/0xd0 [ 124.361551][ T5608] ? __lock_acquire+0x13e8/0x2cd0 [ 124.361561][ T5608] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 124.361573][ T5608] ? down_write+0x1c0/0x250 [ 124.361582][ T5608] ext4_map_create_blocks+0x116/0x530 [ 124.361591][ T5608] ext4_map_blocks+0x7e4/0x1240 [ 124.361598][ T5608] ? __up_read+0x295/0x6d0 [ 124.361604][ T5608] ? __pfx_ext4_map_blocks+0x10/0x10 [ 124.361611][ T5608] ? ext4_map_blocks+0x454/0x1240 [ 124.361619][ T5608] ext4_getblk+0x1c3/0x7c0 [ 124.361626][ T5608] ? __pfx_ext4_getblk+0x10/0x10 [ 124.361634][ T5608] ext4_bread+0x2a/0x180 [ 124.361641][ T5608] ext4_append+0x2b6/0x560 [ 124.361652][ T5608] ? __pfx_ext4_append+0x10/0x10 [ 124.361662][ T5608] ? set_nlink+0x5f/0x170 [ 124.361671][ T5608] ext4_init_new_dir+0x11f/0x1c0 [ 124.361682][ T5608] ext4_mkdir+0x4f7/0xc70 [ 124.361689][ T5608] ? __pfx_ext4_mkdir+0x10/0x10 [ 124.361696][ T5608] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 124.361706][ T5608] vfs_mkdir+0x407/0x620 [ 124.361716][ T5608] filename_mkdirat+0x291/0x530 [ 124.361724][ T5608] ? __pfx_filename_mkdirat+0x10/0x10 [ 124.361732][ T5608] ? do_getname+0x151/0x250 [ 124.361740][ T5608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.361747][ T5608] __se_sys_mkdirat+0x35/0x150 [ 124.361755][ T5608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.361761][ T5608] do_syscall_64+0x175/0xf80 [ 124.361769][ T5608] ? trace_irq_disable+0x3b/0x150 [ 124.361778][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.361785][ T5608] RIP: 0033:0x7f519979bcc7 [ 124.361794][ T5608] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.361799][ T5608] RSP: 002b:00007ffcb9be66a8 EFLAGS: 00000203 ORIG_RAX: 0000000000000102 [ 124.361808][ T5608] RAX: ffffffffffffffda RBX: 00005555888eddf8 RCX: 00007f519979bcc7 [ 124.361813][ T5608] RDX: 00000000000001ff RSI: 00007f5199832aab RDI: 00000000ffffff9c [ 124.361818][ T5608] RBP: 00007ffcb9be6a10 R08: 0000000000000000 R09: 0000000000000000 [ 124.361822][ T5608] R10: 0000000000000000 R11: 0000000000000203 R12: 00007ffcb9be6808 [ 124.361827][ T5608] R13: 00005555888edf90 R14: ffffffffffffffff R15: 0000000000000000 [ 124.361834][ T5608] [ 124.561281][ T5608] cgroup: Unknown subsys name 'net' [ 124.676327][ T5608] cgroup: Unknown subsys name 'cpuset' [ 124.689583][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 127.860851][ T952] =================================================== [ 127.863642][ T952] DEPT: Circular dependency has been detected. [ 127.866124][ T952] syzkaller #0 Not tainted [ 127.867938][ T952] --------------------------------------------------- [ 127.870670][ T952] summary [ 127.871896][ T952] --------------------------------------------------- [ 127.874596][ T952] *** DEADLOCK *** [ 127.874596][ T952] [ 127.876990][ T952] context A [ 127.878289][ T952] [S] lock(&lg->lg_mutex:0) [ 127.880229][ T952] [W] dept_page_wait_on_bit(pg_locked_map:0) [ 127.882770][ T952] [E] unlock(&lg->lg_mutex:0) [ 127.884804][ T952] [ 127.885799][ T952] context B [ 127.887100][ T952] [S] lock(&ei->i_data_sem:0) [ 127.889128][ T952] [W] lock(&lg->lg_mutex:0) [ 127.891074][ T952] [E] unlock(&ei->i_data_sem:0) [ 127.892739][ T952] [ 127.893474][ T952] context C [ 127.894561][ T952] [S] (unknown)(pg_locked_map:0) [ 127.896645][ T952] [W] lock(&ei->i_data_sem:0) [ 127.898601][ T952] [E] dept_page_clear_bit(pg_locked_map:0) [ 127.901049][ T952] [ 127.902045][ T952] [S]: start of the event context [ 127.904076][ T952] [W]: the wait blocked [ 127.905749][ T952] [E]: the event not reachable [ 127.907677][ T952] --------------------------------------------------- [ 127.910400][ T952] context A's detail [ 127.911991][ T952] --------------------------------------------------- [ 127.914402][ T952] context A [ 127.915340][ T952] [S] lock(&lg->lg_mutex:0) [ 127.916846][ T952] [W] dept_page_wait_on_bit(pg_locked_map:0) [ 127.919302][ T952] [E] unlock(&lg->lg_mutex:0) [ 127.921323][ T952] [ 127.922319][ T952] [S] lock(&lg->lg_mutex:0): [ 127.924201][ T952] [] ext4_mb_initialize_context+0x854/0xc20 [ 127.927232][ T952] stacktrace: [ 127.928613][ T952] ext4_mb_initialize_context+0x854/0xc20 [ 127.931105][ T952] ext4_mb_new_blocks+0x55f/0x45f0 [ 127.932894][ T952] ext4_ext_map_blocks+0x1540/0x5980 [ 127.934646][ T952] ext4_map_create_blocks+0x116/0x530 [ 127.936410][ T952] ext4_map_blocks+0x7e4/0x1240 [ 127.938425][ T952] ext4_do_writepages+0x241d/0x4830 [ 127.940698][ T952] ext4_writepages+0x241/0x3b0 [ 127.942823][ T952] do_writepages+0x338/0x560 [ 127.944902][ T952] __writeback_single_inode+0x12e/0x1060 [ 127.947379][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 127.949651][ T952] __writeback_inodes_wb+0x114/0x240 [ 127.951976][ T952] wb_writeback+0x439/0xb40 [ 127.953978][ T952] wb_workfn+0xb52/0xf60 [ 127.955895][ T952] process_scheduled_works+0xae7/0x1540 [ 127.958316][ T952] worker_thread+0xa6a/0xfd0 [ 127.960374][ T952] kthread+0x388/0x470 [ 127.962207][ T952] [ 127.963196][ T952] [W] dept_page_wait_on_bit(pg_locked_map:0): [ 127.965640][ T952] [] find_get_block_common+0x2ce/0xd70 [ 127.968480][ T952] stacktrace: [ 127.969858][ T952] find_get_block_common+0x2ce/0xd70 [ 127.972155][ T952] bdev_getblk+0x55/0x5b0 [ 127.974118][ T952] ext4_read_block_bitmap_nowait+0x219/0x9d0 [ 127.976711][ T952] ext4_read_block_bitmap+0x1e/0x80 [ 127.978988][ T952] ext4_mb_mark_context+0x114/0xec0 [ 127.981246][ T952] ext4_mb_mark_diskspace_used+0x338/0x760 [ 127.983774][ T952] ext4_mb_new_blocks+0x106f/0x45f0 [ 127.986050][ T952] ext4_ext_map_blocks+0x1540/0x5980 [ 127.988376][ T952] ext4_map_create_blocks+0x116/0x530 [ 127.990738][ T952] ext4_map_blocks+0x7e4/0x1240 [ 127.992919][ T952] ext4_do_writepages+0x241d/0x4830 [ 127.995165][ T952] ext4_writepages+0x241/0x3b0 [ 127.997302][ T952] do_writepages+0x338/0x560 [ 127.999374][ T952] __writeback_single_inode+0x12e/0x1060 [ 128.001834][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 128.004136][ T952] __writeback_inodes_wb+0x114/0x240 [ 128.006480][ T952] [ 128.007480][ T952] [E] unlock(&lg->lg_mutex:0): [ 128.009445][ T952] (N/A) [ 128.010587][ T952] --------------------------------------------------- [ 128.013309][ T952] context B's detail [ 128.014928][ T952] --------------------------------------------------- [ 128.017607][ T952] context B [ 128.018919][ T952] [S] lock(&ei->i_data_sem:0) [ 128.020924][ T952] [W] lock(&lg->lg_mutex:0) [ 128.022821][ T952] [E] unlock(&ei->i_data_sem:0) [ 128.024912][ T952] [ 128.025898][ T952] [S] lock(&ei->i_data_sem:0): [ 128.027857][ T952] [] ext4_map_blocks+0x7cc/0x1240 [ 128.030512][ T952] stacktrace: [ 128.031888][ T952] ext4_map_blocks+0x7cc/0x1240 [ 128.034050][ T952] ext4_do_writepages+0x241d/0x4830 [ 128.036288][ T952] ext4_writepages+0x241/0x3b0 [ 128.038417][ T952] do_writepages+0x338/0x560 [ 128.040457][ T952] __writeback_single_inode+0x12e/0x1060 [ 128.042918][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 128.045219][ T952] __writeback_inodes_wb+0x114/0x240 [ 128.047519][ T952] wb_writeback+0x439/0xb40 [ 128.049543][ T952] wb_workfn+0xb52/0xf60 [ 128.051471][ T952] process_scheduled_works+0xae7/0x1540 [ 128.053879][ T952] worker_thread+0xa6a/0xfd0 [ 128.055914][ T952] kthread+0x388/0x470 [ 128.057756][ T952] ret_from_fork+0x543/0xbb0 [ 128.059793][ T952] ret_from_fork_asm+0x1a/0x30 [ 128.061922][ T952] [ 128.062919][ T952] [W] lock(&lg->lg_mutex:0): [ 128.064794][ T952] [] ext4_mb_initialize_context+0x854/0xc20 [ 128.067793][ T952] stacktrace: [ 128.069154][ T952] ext4_mb_initialize_context+0x854/0xc20 [ 128.071670][ T952] ext4_mb_new_blocks+0x55f/0x45f0 [ 128.073916][ T952] ext4_ext_map_blocks+0x1540/0x5980 [ 128.076214][ T952] ext4_map_create_blocks+0x116/0x530 [ 128.078572][ T952] ext4_map_blocks+0x7e4/0x1240 [ 128.080711][ T952] ext4_do_writepages+0x241d/0x4830 [ 128.082975][ T952] ext4_writepages+0x241/0x3b0 [ 128.085080][ T952] do_writepages+0x338/0x560 [ 128.087119][ T952] __writeback_single_inode+0x12e/0x1060 [ 128.089566][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 128.091795][ T952] __writeback_inodes_wb+0x114/0x240 [ 128.094105][ T952] wb_writeback+0x439/0xb40 [ 128.096097][ T952] wb_workfn+0xb52/0xf60 [ 128.098019][ T952] process_scheduled_works+0xae7/0x1540 [ 128.100429][ T952] worker_thread+0xa6a/0xfd0 [ 128.102459][ T952] kthread+0x388/0x470 [ 128.104300][ T952] [ 128.105300][ T952] [E] unlock(&ei->i_data_sem:0): [ 128.107296][ T952] (N/A) [ 128.108462][ T952] --------------------------------------------------- [ 128.111150][ T952] context C's detail [ 128.112774][ T952] --------------------------------------------------- [ 128.115490][ T952] context C [ 128.116782][ T952] [S] (unknown)(pg_locked_map:0) [ 128.118728][ T952] [W] lock(&ei->i_data_sem:0) [ 128.120747][ T952] [E] dept_page_clear_bit(pg_locked_map:0) [ 128.123090][ T952] [ 128.123853][ T952] [S] (unknown)(pg_locked_map:0): [ 128.125580][ T952] (N/A) [ 128.126729][ T952] [ 128.127726][ T952] [W] lock(&ei->i_data_sem:0): [ 128.129707][ T952] [] ext4_da_get_block_prep+0x361/0x1320 [ 128.132607][ T952] stacktrace: [ 128.133982][ T952] ext4_da_get_block_prep+0x361/0x1320 [ 128.136395][ T952] ext4_block_write_begin+0xb09/0x1950 [ 128.138765][ T952] ext4_da_write_begin+0x85a/0xd90 [ 128.141009][ T952] generic_perform_write+0x2d8/0x8f0 [ 128.143371][ T952] ext4_buffered_write_iter+0xd0/0x3a0 [ 128.145749][ T952] ext4_file_write_iter+0x939/0x1c30 [ 128.148057][ T952] vfs_write+0x61e/0xbb0 [ 128.149987][ T952] ksys_write+0x156/0x270 [ 128.151944][ T952] do_syscall_64+0x175/0xf80 [ 128.153974][ T952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.156548][ T952] [ 128.157542][ T952] [E] dept_page_clear_bit(pg_locked_map:0): [ 128.159951][ T952] [] ext4_da_write_end+0x832/0xd00 [ 128.162637][ T952] stacktrace: [ 128.164008][ T952] ext4_da_write_end+0x832/0xd00 [ 128.166183][ T952] generic_perform_write+0x615/0x8f0 [ 128.168510][ T952] ext4_buffered_write_iter+0xd0/0x3a0 [ 128.170916][ T952] ext4_file_write_iter+0x939/0x1c30 [ 128.173236][ T952] vfs_write+0x61e/0xbb0 [ 128.175160][ T952] ksys_write+0x156/0x270 [ 128.177121][ T952] do_syscall_64+0x175/0xf80 [ 128.179093][ T952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.181544][ T952] --------------------------------------------------- [ 128.184150][ T952] information that might be helpful [ 128.186267][ T952] --------------------------------------------------- [ 128.188990][ T952] CPU: 1 UID: 0 PID: 952 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) [ 128.189005][ T952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 128.189014][ T952] Workqueue: writeback wb_workfn (flush-8:0) [ 128.189033][ T952] Call Trace: [ 128.189039][ T952] [ 128.189044][ T952] dump_stack_lvl+0xed/0x160 [ 128.189063][ T952] cb_check_dl+0x231b/0x2390 [ 128.189084][ T952] bfs+0x46a/0x5e0 [ 128.189099][ T952] ? __pfx_bfs+0x10/0x10 [ 128.189112][ T952] ? add_dep+0x38b/0x770 [ 128.189127][ T952] add_dep+0x3d4/0x770 [ 128.189141][ T952] ? __pfx_llist_del_first+0x10/0x10 [ 128.189158][ T952] ? __pfx_bfs_init_check_dl+0x10/0x10 [ 128.189170][ T952] ? __pfx_bfs_extend_dep+0x10/0x10 [ 128.189183][ T952] ? __pfx_bfs_dequeue_dep+0x10/0x10 [ 128.189196][ T952] ? __pfx_cb_check_dl+0x10/0x10 [ 128.189209][ T952] ? __pfx_add_dep+0x10/0x10 [ 128.189223][ T952] ? from_pool+0x1e5/0x610 [ 128.189236][ T952] ? __pfx_from_pool+0x10/0x10 [ 128.189252][ T952] __dept_wait+0xff2/0x1b70 [ 128.189266][ T952] ? __pfx_llist_del_first+0x10/0x10 [ 128.189283][ T952] ? find_get_block_common+0x2ce/0xd70 [ 128.189298][ T952] ? __pfx_from_pool+0x10/0x10 [ 128.189311][ T952] ? __pfx___dept_wait+0x10/0x10 [ 128.189325][ T952] dept_wait+0x135/0x1a0 [ 128.189337][ T952] ? find_get_block_common+0x2ce/0xd70 [ 128.189375][ T952] folio_lock+0x1e3/0x420 [ 128.189390][ T952] ? __pfx_folio_lock+0x10/0x10 [ 128.189401][ T952] ? dept_task+0x5/0x20 [ 128.189411][ T952] ? dept_on+0x1b/0x30 [ 128.189422][ T952] ? dept_exit+0x16b/0x250 [ 128.189435][ T952] find_get_block_common+0x2ce/0xd70 [ 128.189450][ T952] bdev_getblk+0x55/0x5b0 [ 128.189462][ T952] ? ext4_get_group_desc+0x434/0x4e0 [ 128.189475][ T952] ? ext4_get_group_desc+0x10e/0x4e0 [ 128.189488][ T952] ext4_read_block_bitmap_nowait+0x219/0x9d0 [ 128.189503][ T952] ext4_read_block_bitmap+0x1e/0x80 [ 128.189515][ T952] ext4_mb_mark_context+0x114/0xec0 [ 128.189532][ T952] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 128.189544][ T952] ? ext4_sb_block_valid+0x16d/0x560 [ 128.189558][ T952] ? ext4_sb_block_valid+0x484/0x560 [ 128.189571][ T952] ext4_mb_mark_diskspace_used+0x338/0x760 [ 128.189589][ T952] ext4_mb_new_blocks+0x106f/0x45f0 [ 128.189603][ T952] ? rcu_is_watching+0x15/0xb0 [ 128.189620][ T952] ? trace_kmalloc+0x2a/0x110 [ 128.189632][ T952] ? __kmalloc_noprof+0x379/0x750 [ 128.189645][ T952] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 128.189658][ T952] ? ext4_inode_to_goal_block+0x319/0x460 [ 128.189672][ T952] ext4_ext_map_blocks+0x1540/0x5980 [ 128.189687][ T952] ? __bfs+0x153/0x290 [ 128.189702][ T952] ? __pfx_hlock_conflict+0x10/0x10 [ 128.189723][ T952] ? lockdep_unlock+0x5d/0xd0 [ 128.189736][ T952] ? __lock_acquire+0x13e8/0x2cd0 [ 128.189754][ T952] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 128.189775][ T952] ? down_write+0x1c0/0x250 [ 128.189791][ T952] ext4_map_create_blocks+0x116/0x530 [ 128.189804][ T952] ext4_map_blocks+0x7e4/0x1240 [ 128.189819][ T952] ? __pfx_ext4_map_blocks+0x10/0x10 [ 128.189832][ T952] ? ext4_inode_journal_mode+0x376/0x470 [ 128.189848][ T952] ext4_do_writepages+0x241d/0x4830 [ 128.189874][ T952] ? lock_release+0x4b/0x3d0 [ 128.189894][ T952] ? __pfx_ext4_do_writepages+0x10/0x10 [ 128.189907][ T952] ? __lock_acquire+0x683/0x2cd0 [ 128.189922][ T952] ? arch_stack_walk+0x11b/0x150 [ 128.189935][ T952] ? ret_from_fork_asm+0x1a/0x30 [ 128.189948][ T952] ? stack_trace_save+0xa9/0x100 [ 128.189968][ T952] ext4_writepages+0x241/0x3b0 [ 128.189985][ T952] ? __pfx_ext4_writepages+0x10/0x10 [ 128.190004][ T952] ? do_writepages+0x2b1/0x560 [ 128.190018][ T952] ? do_raw_spin_unlock+0x4d/0x210 [ 128.190030][ T952] ? __pfx_ext4_writepages+0x10/0x10 [ 128.190046][ T952] do_writepages+0x338/0x560 [ 128.190061][ T952] ? __pfx_to_pool+0x10/0x10 [ 128.190075][ T952] ? pop_ecxt+0x3c0/0x520 [ 128.190086][ T952] ? writeback_sb_inodes+0x848/0x1b30 [ 128.190103][ T952] __writeback_single_inode+0x12e/0x1060 [ 128.190118][ T952] ? do_raw_spin_unlock+0x4d/0x210 [ 128.190131][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 128.190146][ T952] ? unwind_next_frame+0x95/0x2380 [ 128.190161][ T952] ? __lock_acquire+0x683/0x2cd0 [ 128.190177][ T952] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 128.190200][ T952] ? __pfx_down_read_trylock+0x10/0x10 [ 128.190216][ T952] __writeback_inodes_wb+0x114/0x240 [ 128.190233][ T952] wb_writeback+0x439/0xb40 [ 128.190247][ T952] ? queue_io+0x1f1/0x4a0 [ 128.190263][ T952] ? __pfx_wb_writeback+0x10/0x10 [ 128.190282][ T952] wb_workfn+0xb52/0xf60 [ 128.190294][ T952] ? __pfx_llist_del_first+0x10/0x10 [ 128.190313][ T952] ? __pfx_wb_workfn+0x10/0x10 [ 128.190325][ T952] ? to_pool+0x1fa/0x2e0 [ 128.190339][ T952] ? __pfx_to_pool+0x10/0x10 [ 128.190383][ T952] ? rcu_is_watching+0x15/0xb0 [ 128.190400][ T952] ? process_scheduled_works+0xa7e/0x1540 [ 128.190416][ T952] process_scheduled_works+0xae7/0x1540 [ 128.190438][ T952] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.190456][ T952] ? assign_work+0x3cf/0x5d0 [ 128.190471][ T952] worker_thread+0xa6a/0xfd0 [ 128.190494][ T952] kthread+0x388/0x470 [ 128.190506][ T952] ? __pfx_worker_thread+0x10/0x10 [ 128.190521][ T952] ? __pfx_kthread+0x10/0x10 [ 128.190533][ T952] ret_from_fork+0x543/0xbb0 [ 128.190551][ T952] ? __pfx_ret_from_fork+0x10/0x10 [ 128.190566][ T952] ? __switch_to+0xc7d/0x1470 [ 128.190581][ T952] ? __pfx_kthread+0x10/0x10 [ 128.190592][ T952] ret_from_fork_asm+0x1a/0x30 [ 128.190608][ T952] [ 128.416194][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 128.430520][ T952] =================================================== [ 128.432820][ T952] DEPT: Circular dependency has been detected. [ 128.435174][ T952] syzkaller #0 Not tainted [ 128.436682][ T952] --------------------------------------------------- [ 128.438892][ T952] summary [ 128.439797][ T952] --------------------------------------------------- [ 128.441814][ T952] *** DEADLOCK *** [ 128.441814][ T952] [ 128.443601][ T952] context A [ 128.444589][ T952] [S] (unknown)(pg_locked_map:0) [ 128.446172][ T952] [W] lock(&lg->lg_mutex:0) [ 128.447624][ T952] [E] dept_page_clear_bit(pg_locked_map:0) [ 128.449465][ T952] [ 128.450203][ T952] context B [ 128.451183][ T952] [S] lock(&lg->lg_mutex:0) [ 128.452650][ T952] [W] dept_page_wait_on_bit(pg_locked_map:0) [ 128.454535][ T952] [E] unlock(&lg->lg_mutex:0) [ 128.456033][ T952] [ 128.456780][ T952] [S]: start of the event context [ 128.458483][ T952] [W]: the wait blocked [ 128.459746][ T952] [E]: the event not reachable [ 128.461190][ T952] --------------------------------------------------- [ 128.463220][ T952] context A's detail [ 128.464423][ T952] --------------------------------------------------- [ 128.466469][ T952] context A [ 128.467668][ T952] [S] (unknown)(pg_locked_map:0) [ 128.469487][ T952] [W] lock(&lg->lg_mutex:0) [ 128.470935][ T952] [E] dept_page_clear_bit(pg_locked_map:0) [ 128.472768][ T952] [ 128.473516][ T952] [S] (unknown)(pg_locked_map:0): [ 128.475054][ T952] (N/A) [ 128.475922][ T952] [ 128.476675][ T952] [W] lock(&lg->lg_mutex:0): [ 128.478231][ T952] [] ext4_mb_initialize_context+0x854/0xc20 [ 128.480482][ T952] stacktrace: [ 128.481509][ T952] ext4_mb_initialize_context+0x854/0xc20 [ 128.483366][ T952] ext4_mb_new_blocks+0x55f/0x45f0 [ 128.485043][ T952] ext4_ext_map_blocks+0x1540/0x5980 [ 128.486771][ T952] ext4_map_create_blocks+0x116/0x530 [ 128.488534][ T952] ext4_map_blocks+0x7e4/0x1240 [ 128.490128][ T952] ext4_do_writepages+0x241d/0x4830 [ 128.491821][ T952] ext4_writepages+0x241/0x3b0 [ 128.493421][ T952] do_writepages+0x338/0x560 [ 128.494964][ T952] __writeback_single_inode+0x12e/0x1060 [ 128.496814][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 128.498902][ T952] __writeback_inodes_wb+0x114/0x240 [ 128.500629][ T952] wb_writeback+0x439/0xb40 [ 128.502143][ T952] wb_workfn+0xb52/0xf60 [ 128.503581][ T952] process_scheduled_works+0xae7/0x1540 [ 128.505363][ T952] worker_thread+0xa6a/0xfd0 [ 128.506934][ T952] kthread+0x388/0x470 [ 128.508419][ T952] [ 128.509156][ T952] [E] dept_page_clear_bit(pg_locked_map:0): [ 128.510953][ T952] [] ext4_do_writepages+0x2206/0x4830 [ 128.513033][ T952] stacktrace: [ 128.514056][ T952] ext4_do_writepages+0x2206/0x4830 [ 128.515755][ T952] ext4_writepages+0x241/0x3b0 [ 128.517337][ T952] do_writepages+0x338/0x560 [ 128.518933][ T952] __writeback_single_inode+0x12e/0x1060 [ 128.520743][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 128.522404][ T952] __writeback_inodes_wb+0x114/0x240 [ 128.524065][ T952] wb_writeback+0x439/0xb40 [ 128.525610][ T952] wb_workfn+0xb52/0xf60 [ 128.527048][ T952] process_scheduled_works+0xae7/0x1540 [ 128.528847][ T952] worker_thread+0xa6a/0xfd0 [ 128.530383][ T952] kthread+0x388/0x470 [ 128.531758][ T952] ret_from_fork+0x543/0xbb0 [ 128.533278][ T952] ret_from_fork_asm+0x1a/0x30 [ 128.534861][ T952] --------------------------------------------------- [ 128.536898][ T952] context B's detail [ 128.538099][ T952] --------------------------------------------------- [ 128.540114][ T952] context B [ 128.541100][ T952] [S] lock(&lg->lg_mutex:0) [ 128.542550][ T952] [W] dept_page_wait_on_bit(pg_locked_map:0) [ 128.544426][ T952] [E] unlock(&lg->lg_mutex:0) [ 128.545952][ T952] [ 128.546669][ T952] [S] lock(&lg->lg_mutex:0): [ 128.548066][ T952] [] ext4_mb_initialize_context+0x854/0xc20 [ 128.550321][ T952] stacktrace: [ 128.551362][ T952] ext4_mb_initialize_context+0x854/0xc20 [ 128.553220][ T952] ext4_mb_new_blocks+0x55f/0x45f0 [ 128.554909][ T952] ext4_ext_map_blocks+0x1540/0x5980 [ 128.556654][ T952] ext4_map_create_blocks+0x116/0x530 [ 128.558418][ T952] ext4_map_blocks+0x7e4/0x1240 [ 128.560047][ T952] ext4_do_writepages+0x241d/0x4830 [ 128.561747][ T952] ext4_writepages+0x241/0x3b0 [ 128.563320][ T952] do_writepages+0x338/0x560 [ 128.564870][ T952] __writeback_single_inode+0x12e/0x1060 [ 128.566698][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 128.568655][ T952] __writeback_inodes_wb+0x114/0x240 [ 128.570503][ T952] wb_writeback+0x439/0xb40 [ 128.572259][ T952] wb_workfn+0xb52/0xf60 [ 128.573738][ T952] process_scheduled_works+0xae7/0x1540 [ 128.575618][ T952] worker_thread+0xa6a/0xfd0 [ 128.577150][ T952] kthread+0x388/0x470 [ 128.578528][ T952] [ 128.579265][ T952] [W] dept_page_wait_on_bit(pg_locked_map:0): [ 128.581104][ T952] [] find_get_block_common+0x2ce/0xd70 [ 128.583229][ T952] stacktrace: [ 128.584271][ T952] find_get_block_common+0x2ce/0xd70 [ 128.586042][ T952] bdev_getblk+0x55/0x5b0 [ 128.587511][ T952] ext4_read_block_bitmap_nowait+0x219/0x9d0 [ 128.589464][ T952] ext4_read_block_bitmap+0x1e/0x80 [ 128.591162][ T952] ext4_mb_mark_context+0x114/0xec0 [ 128.592885][ T952] ext4_mb_mark_diskspace_used+0x338/0x760 [ 128.594768][ T952] ext4_mb_new_blocks+0x106f/0x45f0 [ 128.596491][ T952] ext4_ext_map_blocks+0x1540/0x5980 [ 128.598216][ T952] ext4_map_create_blocks+0x116/0x530 [ 128.599981][ T952] ext4_map_blocks+0x7e4/0x1240 [ 128.601580][ T952] ext4_do_writepages+0x241d/0x4830 [ 128.603296][ T952] ext4_writepages+0x241/0x3b0 [ 128.604908][ T952] do_writepages+0x338/0x560 [ 128.606466][ T952] __writeback_single_inode+0x12e/0x1060 [ 128.608335][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 128.610067][ T952] __writeback_inodes_wb+0x114/0x240 [ 128.611797][ T952] [ 128.612550][ T952] [E] unlock(&lg->lg_mutex:0): [ 128.614016][ T952] (N/A) [ 128.614892][ T952] --------------------------------------------------- [ 128.616945][ T952] information that might be helpful [ 128.618548][ T952] --------------------------------------------------- [ 128.620586][ T952] CPU: 1 UID: 0 PID: 952 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) [ 128.620595][ T952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 128.620600][ T952] Workqueue: writeback wb_workfn (flush-8:0) [ 128.620613][ T952] Call Trace: [ 128.620617][ T952] [ 128.620620][ T952] dump_stack_lvl+0xed/0x160 [ 128.620632][ T952] cb_check_dl+0x231b/0x2390 [ 128.620643][ T952] bfs+0x46a/0x5e0 [ 128.620652][ T952] ? __pfx_bfs+0x10/0x10 [ 128.620660][ T952] ? add_dep+0x38b/0x770 [ 128.620668][ T952] add_dep+0x3d4/0x770 [ 128.620677][ T952] ? __pfx_bfs_init_check_dl+0x10/0x10 [ 128.620684][ T952] ? __pfx_bfs_extend_dep+0x10/0x10 [ 128.620692][ T952] ? __pfx_bfs_dequeue_dep+0x10/0x10 [ 128.620699][ T952] ? __pfx_cb_check_dl+0x10/0x10 [ 128.620707][ T952] ? __pfx_add_dep+0x10/0x10 [ 128.620715][ T952] ? put_ecxt+0xa2/0x2e0 [ 128.620724][ T952] __dept_event+0xcd4/0x13b0 [ 128.620733][ T952] dept_event+0x14e/0x230 [ 128.620740][ T952] ? ext4_do_writepages+0x2206/0x4830 [ 128.620749][ T952] folio_unlock+0x102/0x200 [ 128.620759][ T952] ext4_do_writepages+0x2206/0x4830 [ 128.620773][ T952] ? __pfx_ext4_do_writepages+0x10/0x10 [ 128.620787][ T952] ext4_writepages+0x241/0x3b0 [ 128.620796][ T952] ? unwind_next_frame+0x95/0x2380 [ 128.620803][ T952] ? __pfx_ext4_writepages+0x10/0x10 [ 128.620814][ T952] ? to_pool+0x1fa/0x2e0 [ 128.620822][ T952] ? __pfx_to_pool+0x10/0x10 [ 128.620830][ T952] ? __pfx_ext4_writepages+0x10/0x10 [ 128.620839][ T952] do_writepages+0x338/0x560 [ 128.620848][ T952] ? __pfx_to_pool+0x10/0x10 [ 128.620855][ T952] ? pop_ecxt+0x3c0/0x520 [ 128.620866][ T952] ? writeback_sb_inodes+0x848/0x1b30 [ 128.620875][ T952] __writeback_single_inode+0x12e/0x1060 [ 128.620885][ T952] ? do_raw_spin_unlock+0x4d/0x210 [ 128.620893][ T952] writeback_sb_inodes+0x9eb/0x1b30 [ 128.620902][ T952] ? unwind_next_frame+0x95/0x2380 [ 128.620909][ T952] ? __lock_acquire+0x683/0x2cd0 [ 128.620919][ T952] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 128.620932][ T952] ? __pfx_down_read_trylock+0x10/0x10 [ 128.620938][ T952] ? stack_trace_save+0xa9/0x100 [ 128.620947][ T952] ? __pfx_stack_trace_save+0x10/0x10 [ 128.620958][ T952] __writeback_inodes_wb+0x114/0x240 [ 128.620968][ T952] wb_writeback+0x439/0xb40 [ 128.620976][ T952] ? queue_io+0x1f1/0x4a0 [ 128.620985][ T952] ? __pfx_wb_writeback+0x10/0x10 [ 128.620996][ T952] wb_workfn+0xb52/0xf60 [ 128.621002][ T952] ? __pfx_llist_del_first+0x10/0x10 [ 128.621014][ T952] ? __pfx_wb_workfn+0x10/0x10 [ 128.621021][ T952] ? to_pool+0x1fa/0x2e0 [ 128.621029][ T952] ? __pfx_to_pool+0x10/0x10 [ 128.621039][ T952] ? rcu_is_watching+0x15/0xb0 [ 128.621049][ T952] ? process_scheduled_works+0xa7e/0x1540 [ 128.621058][ T952] process_scheduled_works+0xae7/0x1540 [ 128.621071][ T952] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.621081][ T952] ? assign_work+0x3cf/0x5d0 [ 128.621090][ T952] worker_thread+0xa6a/0xfd0 [ 128.621103][ T952] kthread+0x388/0x470 [ 128.621110][ T952] ? __pfx_worker_thread+0x10/0x10 [ 128.621119][ T952] ? __pfx_kthread+0x10/0x10 [ 128.621125][ T952] ret_from_fork+0x543/0xbb0 [ 128.621136][ T952] ? __pfx_ret_from_fork+0x10/0x10 [ 128.621145][ T952] ? __switch_to+0xc7d/0x1470 [ 128.621153][ T952] ? __pfx_kthread+0x10/0x10 [ 128.621160][ T952] ret_from_fork_asm+0x1a/0x30 [ 128.621169][ T952] [ 134.495019][ T10] DEPT_INFO: Dept object(dep) just got refilled successfully. [ 135.062006][ T5619] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 136.662698][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.666684][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.675961][ T5626] bridge_slave_0: entered allmulticast mode [ 136.687238][ T5626] bridge_slave_0: entered promiscuous mode [ 136.723849][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.727015][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.732272][ T5626] bridge_slave_1: entered allmulticast mode [ 136.740298][ T5626] bridge_slave_1: entered promiscuous mode [ 137.108034][ T952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.111147][ T952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.124956][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.181170][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.273182][ T5626] team0: Port device team_slave_0 added [ 137.277690][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.291969][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.322094][ T5626] team0: Port device team_slave_1 added [ 137.435210][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.447366][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.460111][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.492565][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.495485][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.519258][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.291452][ T5626] hsr_slave_0: entered promiscuous mode [ 138.298423][ T5626] hsr_slave_1: entered promiscuous mode [ 138.835580][ T1095] =================================================== [ 138.838242][ T1095] DEPT: Circular dependency has been detected. [ 138.840482][ T1095] syzkaller #0 Not tainted [ 138.841881][ T1095] --------------------------------------------------- [ 138.843977][ T1095] summary [ 138.844928][ T1095] --------------------------------------------------- [ 138.847014][ T1095] *** AA DEADLOCK *** [ 138.847014][ T1095] [ 138.848941][ T1095] context A [ 138.849954][ T1095] [S] (unknown)(pg_locked_map:0) [ 138.851607][ T1095] [W] dept_page_wait_on_bit(pg_locked_map:0) [ 138.853554][ T1095] [E] dept_page_clear_bit(pg_locked_map:0) [ 138.855457][ T1095] [ 138.856208][ T1095] [S]: start of the event context [ 138.857809][ T1095] [W]: the wait blocked [ 138.859381][ T1095] [E]: the event not reachable [ 138.861151][ T1095] --------------------------------------------------- [ 138.863772][ T1095] context A's detail [ 138.865310][ T1095] --------------------------------------------------- [ 138.867888][ T1095] context A [ 138.869124][ T1095] [S] (unknown)(pg_locked_map:0) [ 138.871162][ T1095] [W] dept_page_wait_on_bit(pg_locked_map:0) [ 138.873288][ T1095] [E] dept_page_clear_bit(pg_locked_map:0) [ 138.875203][ T1095] [ 138.875980][ T1095] [S] (unknown)(pg_locked_map:0): [ 138.877578][ T1095] (N/A) [ 138.878520][ T1095] [ 138.879305][ T1095] [W] dept_page_wait_on_bit(pg_locked_map:0): [ 138.881306][ T1095] [] mpage_prepare_extent_to_map+0x787/0x16c0 [ 138.883722][ T1095] stacktrace: [ 138.884920][ T1095] mpage_prepare_extent_to_map+0x787/0x16c0 [ 138.886903][ T1095] ext4_do_writepages+0x1185/0x4830 [ 138.888664][ T1095] ext4_writepages+0x241/0x3b0 [ 138.890436][ T1095] do_writepages+0x338/0x560 [ 138.892004][ T1095] __writeback_single_inode+0x12e/0x1060 [ 138.893902][ T1095] writeback_sb_inodes+0x9eb/0x1b30 [ 138.895660][ T1095] __writeback_inodes_wb+0x114/0x240 [ 138.897862][ T1095] wb_writeback+0x439/0xb40 [ 138.899465][ T1095] wb_workfn+0xb52/0xf60 [ 138.901100][ T1095] process_scheduled_works+0xae7/0x1540 [ 138.902985][ T1095] worker_thread+0xa6a/0xfd0 [ 138.904589][ T1095] kthread+0x388/0x470 [ 138.906022][ T1095] ret_from_fork+0x543/0xbb0 [ 138.907614][ T1095] ret_from_fork_asm+0x1a/0x30 [ 138.909270][ T1095] [ 138.910125][ T1095] [E] dept_page_clear_bit(pg_locked_map:0): [ 138.911948][ T1095] [] ext4_do_writepages+0x2206/0x4830 [ 138.914090][ T1095] stacktrace: [ 138.915122][ T1095] ext4_do_writepages+0x2206/0x4830 [ 138.916811][ T1095] ext4_writepages+0x241/0x3b0 [ 138.918446][ T1095] do_writepages+0x338/0x560 [ 138.920083][ T1095] __writeback_single_inode+0x12e/0x1060 [ 138.921970][ T1095] writeback_sb_inodes+0x9eb/0x1b30 [ 138.923708][ T1095] __writeback_inodes_wb+0x114/0x240 [ 138.925497][ T1095] wb_writeback+0x439/0xb40 [ 138.927040][ T1095] wb_workfn+0xb52/0xf60 [ 138.928522][ T1095] process_scheduled_works+0xae7/0x1540 [ 138.930616][ T1095] worker_thread+0xa6a/0xfd0 [ 138.932354][ T1095] kthread+0x388/0x470 [ 138.933778][ T1095] ret_from_fork+0x543/0xbb0 [ 138.935382][ T1095] ret_from_fork_asm+0x1a/0x30 [ 138.936985][ T1095] --------------------------------------------------- [ 138.939056][ T1095] information that might be helpful [ 138.940681][ T1095] --------------------------------------------------- [ 138.942765][ T1095] CPU: 1 UID: 0 PID: 1095 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) [ 138.942775][ T1095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 138.942780][ T1095] Workqueue: writeback wb_workfn (flush-8:0) [ 138.942793][ T1095] Call Trace: [ 138.942797][ T1095] [ 138.942803][ T1095] dump_stack_lvl+0xed/0x160 [ 138.942815][ T1095] cb_check_dl+0x231b/0x2390 [ 138.942826][ T1095] bfs+0x373/0x5e0 [ 138.942835][ T1095] ? __pfx_bfs+0x10/0x10 [ 138.942843][ T1095] ? add_dep+0x38b/0x770 [ 138.942851][ T1095] add_dep+0x3d4/0x770 [ 138.942860][ T1095] ? __pfx_bfs_init_check_dl+0x10/0x10 [ 138.942868][ T1095] ? __pfx_bfs_extend_dep+0x10/0x10 [ 138.942875][ T1095] ? __pfx_bfs_dequeue_dep+0x10/0x10 [ 138.942882][ T1095] ? __pfx_cb_check_dl+0x10/0x10 [ 138.942890][ T1095] ? __pfx_add_dep+0x10/0x10 [ 138.942898][ T1095] ? put_ecxt+0xa2/0x2e0 [ 138.942907][ T1095] __dept_event+0xcd4/0x13b0 [ 138.942916][ T1095] dept_event+0x14e/0x230 [ 138.942924][ T1095] ? ext4_do_writepages+0x2206/0x4830 [ 138.942932][ T1095] folio_unlock+0x102/0x200 [ 138.942943][ T1095] ext4_do_writepages+0x2206/0x4830 [ 138.942957][ T1095] ? __pfx_ext4_do_writepages+0x10/0x10 [ 138.942971][ T1095] ext4_writepages+0x241/0x3b0 [ 138.942980][ T1095] ? unwind_next_frame+0x95/0x2380 [ 138.942987][ T1095] ? __pfx_ext4_writepages+0x10/0x10 [ 138.942998][ T1095] ? to_pool+0x1fa/0x2e0 [ 138.943005][ T1095] ? __pfx_to_pool+0x10/0x10 [ 138.943013][ T1095] ? __pfx_ext4_writepages+0x10/0x10 [ 138.943022][ T1095] do_writepages+0x338/0x560 [ 138.943032][ T1095] ? __pfx_to_pool+0x10/0x10 [ 138.943039][ T1095] ? pop_ecxt+0x3c0/0x520 [ 138.943046][ T1095] ? writeback_sb_inodes+0x848/0x1b30 [ 138.943055][ T1095] __writeback_single_inode+0x12e/0x1060 [ 138.943064][ T1095] ? do_raw_spin_unlock+0x4d/0x210 [ 138.943073][ T1095] writeback_sb_inodes+0x9eb/0x1b30 [ 138.943083][ T1095] ? __lock_acquire+0x683/0x2cd0 [ 138.943093][ T1095] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 138.943106][ T1095] ? __pfx_down_read_trylock+0x10/0x10 [ 138.943115][ T1095] __writeback_inodes_wb+0x114/0x240 [ 138.943124][ T1095] wb_writeback+0x439/0xb40 [ 138.943133][ T1095] ? queue_io+0x1f1/0x4a0 [ 138.943142][ T1095] ? __pfx_wb_writeback+0x10/0x10 [ 138.943153][ T1095] wb_workfn+0xb52/0xf60 [ 138.943159][ T1095] ? __pfx_llist_del_first+0x10/0x10 [ 138.943171][ T1095] ? __pfx_wb_workfn+0x10/0x10 [ 138.943178][ T1095] ? to_pool+0x1fa/0x2e0 [ 138.943186][ T1095] ? __pfx_to_pool+0x10/0x10 [ 138.943196][ T1095] ? rcu_is_watching+0x15/0xb0 [ 138.943206][ T1095] ? process_scheduled_works+0xa7e/0x1540 [ 138.943239][ T1095] process_scheduled_works+0xae7/0x1540 [ 138.943259][ T1095] ? __pfx_process_scheduled_works+0x10/0x10 [ 138.943271][ T1095] ? assign_work+0x3cf/0x5d0 [ 138.943280][ T1095] worker_thread+0xa6a/0xfd0 [ 138.943293][ T1095] kthread+0x388/0x470 [ 138.943306][ T1095] ? __pfx_worker_thread+0x10/0x10 [ 138.943314][ T1095] ? __pfx_kthread+0x10/0x10 [ 138.943321][ T1095] ret_from_fork+0x543/0xbb0 [ 138.943331][ T1095] ? __pfx_ret_from_fork+0x10/0x10 [ 138.943340][ T1095] ? __switch_to+0xc7d/0x1470 [ 138.943349][ T1095] ? __pfx_kthread+0x10/0x10 [ 138.943355][ T1095] ret_from_fork_asm+0x1a/0x30 [ 138.943364][ T1095] [ 140.216331][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.524943][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.589442][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.609337][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.181108][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.187275][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.195528][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.202244][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.209327][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.224801][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.309047][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.848419][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.850821][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.856825][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.859367][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.609678][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.700885][ T5626] veth0_vlan: entered promiscuous mode [ 143.715787][ T5626] veth1_vlan: entered promiscuous mode [ 143.775797][ T5626] veth0_macvtap: entered promiscuous mode [ 143.784412][ T5626] veth1_macvtap: entered promiscuous mode [ 143.812016][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.826912][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.845770][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.853289][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.856615][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.866427][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/07/06 09:30:01 executed programs: 0 [ 144.914703][ T4983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.921671][ T4983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.928378][ T4983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.934054][ T4983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.949714][ T4983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.094449][ T4983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.099481][ T4983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.103735][ T4983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.110026][ T4983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.115682][ T4983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.164051][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.168797][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.173114][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.182769][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.192418][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.538712][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.976185][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.075706][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.236289][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.853539][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.856783][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.863752][ T5735] bridge_slave_0: entered allmulticast mode [ 146.870349][ T5735] bridge_slave_0: entered promiscuous mode [ 146.877146][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.881450][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.885030][ T5735] bridge_slave_1: entered allmulticast mode [ 146.890042][ T5735] bridge_slave_1: entered promiscuous mode [ 147.060289][ T54] Bluetooth: hci0: command tx timeout [ 147.146849][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.184315][ T12] bridge_slave_1: left allmulticast mode [ 147.186189][ T12] bridge_slave_1: left promiscuous mode [ 147.189201][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.199582][ T12] bridge_slave_0: left allmulticast mode [ 147.201347][ T12] bridge_slave_0: left promiscuous mode [ 147.203581][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.218572][ T54] Bluetooth: hci2: command tx timeout [ 147.218654][ T4983] Bluetooth: hci1: command tx timeout [ 147.639160][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.647526][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.654756][ T12] bond0 (unregistering): Released all slaves [ 147.669931][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.864197][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.867557][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.871491][ T5731] bridge_slave_0: entered allmulticast mode [ 147.879237][ T5731] bridge_slave_0: entered promiscuous mode [ 147.911301][ T12] hsr_slave_0: left promiscuous mode [ 147.918412][ T12] hsr_slave_1: left promiscuous mode [ 147.922779][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.925847][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.934090][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.937093][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.969608][ T12] veth1_macvtap: left promiscuous mode [ 147.971770][ T12] veth0_macvtap: left promiscuous mode [ 147.973647][ T12] veth1_vlan: left promiscuous mode [ 147.975456][ T12] veth0_vlan: left promiscuous mode [ 148.543930][ T12] team0 (unregistering): Port device team_slave_1 removed [ 148.574245][ T12] team0 (unregistering): Port device team_slave_0 removed [ 148.886461][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.889417][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.891781][ T5731] bridge_slave_1: entered allmulticast mode [ 148.895847][ T5731] bridge_slave_1: entered promiscuous mode [ 148.959353][ T5735] team0: Port device team_slave_0 added [ 148.977286][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.982787][ T5007] DEPT_INFO: Dept object(stack) just got refilled successfully. [ 148.990950][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.995751][ T5735] team0: Port device team_slave_1 added [ 149.093178][ T5731] team0: Port device team_slave_0 added [ 149.138940][ T4983] Bluetooth: hci0: command tx timeout [ 149.146077][ T5731] team0: Port device team_slave_1 added [ 149.216837][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.229650][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.260839][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.270648][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.273603][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.288796][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.297312][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.310491][ T4983] Bluetooth: hci2: command tx timeout [ 149.312908][ T4983] Bluetooth: hci1: command tx timeout [ 149.320646][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.347977][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.435572][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.439478][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.468287][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.621248][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.624881][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.628799][ T5737] bridge_slave_0: entered allmulticast mode [ 149.643185][ T5737] bridge_slave_0: entered promiscuous mode [ 149.715702][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.718573][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.721482][ T5737] bridge_slave_1: entered allmulticast mode [ 149.726143][ T5737] bridge_slave_1: entered promiscuous mode [ 149.751698][ T5735] hsr_slave_0: entered promiscuous mode [ 149.755253][ T5735] hsr_slave_1: entered promiscuous mode [ 149.841839][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.850060][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.889929][ T5731] hsr_slave_0: entered promiscuous mode [ 149.894621][ T5731] hsr_slave_1: entered promiscuous mode [ 149.901254][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 149.903810][ T5731] Cannot create hsr debugfs directory [ 149.977371][ T5737] team0: Port device team_slave_0 added [ 150.032797][ T5737] team0: Port device team_slave_1 added [ 150.146601][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.149383][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.158457][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.228802][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.231792][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.243597][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.757050][ T5737] hsr_slave_0: entered promiscuous mode [ 150.762203][ T5737] hsr_slave_1: entered promiscuous mode [ 150.765872][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 150.770139][ T5737] Cannot create hsr debugfs directory [ 151.232651][ T4983] Bluetooth: hci0: command tx timeout [ 151.361378][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 151.378400][ T4983] Bluetooth: hci2: command tx timeout [ 151.388602][ T4983] Bluetooth: hci1: command tx timeout [ 151.399717][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 151.415636][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 151.453223][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 151.554902][ T5731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.585505][ T5731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.604926][ T5731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.636098][ T5731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.784357][ T5737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 151.819770][ T5737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 151.830661][ T5737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 151.869296][ T5737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.962846][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.132403][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.175636][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.224131][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.226840][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.255794][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.294288][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.296509][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.304313][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.306937][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.380489][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.382933][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.637066][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.724116][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.749413][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.752219][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.784807][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.787132][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.164887][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.257122][ T5735] veth0_vlan: entered promiscuous mode [ 153.283188][ T5735] veth1_vlan: entered promiscuous mode [ 153.308918][ T4983] Bluetooth: hci0: command tx timeout [ 153.345106][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.427137][ T5735] veth0_macvtap: entered promiscuous mode [ 153.451722][ T5735] veth1_macvtap: entered promiscuous mode [ 153.468442][ T4983] Bluetooth: hci1: command tx timeout [ 153.470386][ T4983] Bluetooth: hci2: command tx timeout [ 153.496761][ T5731] veth0_vlan: entered promiscuous mode [ 153.515694][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.532103][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.542664][ T5731] veth1_vlan: entered promiscuous mode [ 153.547549][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.571259][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.576016][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.581061][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.583936][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.626576][ T5731] veth0_macvtap: entered promiscuous mode [ 153.644604][ T5731] veth1_macvtap: entered promiscuous mode [ 153.699812][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.729944][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.760751][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.763516][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.787623][ T5658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.791651][ T5658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.813295][ T5658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.825190][ T5658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.832689][ T5737] veth0_vlan: entered promiscuous mode [ 153.876007][ T5737] veth1_vlan: entered promiscuous mode [ 153.919957][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.923310][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.963472][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.966000][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.040005][ T5737] veth0_macvtap: entered promiscuous mode [ 154.076238][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/07/06 09:30:10 executed programs: 6 [ 154.089389][ T5737] veth1_macvtap: entered promiscuous mode [ 154.093868][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.172583][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.220466][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.256380][ T5658] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.261171][ T1364] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.261288][ T1364] ieee802154 phy1 wpan1: encryption failed: -22 [ 154.277199][ T5658] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.299907][ T5658] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.302645][ T5658] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.430172][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.432526][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.492852][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.495928][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.804537][ T5874] loop1: detected capacity change from 0 to 32768 [ 154.873608][ T5874] XFS (loop1): Mounting V5 filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb in no-recovery mode. Filesystem will be inconsistent. [ 154.893172][ T5874] XFS (loop1): please mount without quota. [ 154.918297][ C1] ================================================================== [ 154.921463][ C1] BUG: KASAN: slab-use-after-free in __dept_wait+0xe66/0x1b70 [ 154.924371][ C1] Read of size 8 at addr ffff8881a7a30190 by task syz.1.18/5874 [ 154.927994][ C1] [ 154.928880][ C1] CPU: 1 UID: 0 PID: 5874 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 154.928896][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 154.928904][ C1] Call Trace: [ 154.928909][ C1] [ 154.928914][ C1] dump_stack_lvl+0xed/0x160 [ 154.928935][ C1] print_report+0xbe/0x230 [ 154.928952][ C1] ? __dept_wait+0xe66/0x1b70 [ 154.928964][ C1] kasan_report+0x117/0x150 [ 154.928979][ C1] ? __dept_wait+0xe66/0x1b70 [ 154.928993][ C1] __dept_wait+0xe66/0x1b70 [ 154.929008][ C1] ? debug_object_active_state+0x77/0x390 [ 154.929055][ C1] ? __pfx___dept_wait+0x10/0x10 [ 154.929067][ C1] ? __pfx_to_pool+0x10/0x10 [ 154.929083][ C1] dept_wait+0x135/0x1a0 [ 154.929095][ C1] ? debug_object_active_state+0x77/0x390 [ 154.929112][ C1] ? debug_object_active_state+0x77/0x390 [ 154.929127][ C1] _raw_spin_lock_irqsave+0x5b/0xc0 [ 154.929140][ C1] ? rcu_core+0x70f/0xff0 [ 154.929154][ C1] debug_object_active_state+0x77/0x390 [ 154.929172][ C1] ? __pfx_xfs_inode_free_callback+0x10/0x10 [ 154.929187][ C1] ? rcu_core+0x70f/0xff0 [ 154.929201][ C1] rcu_core+0x6f9/0xff0 [ 154.929220][ C1] ? __pfx_rcu_core+0x10/0x10 [ 154.929235][ C1] ? dept_task+0x5/0x20 [ 154.929245][ C1] ? dept_on+0x1b/0x30 [ 154.929257][ C1] ? dept_exit+0x16b/0x250 [ 154.929267][ C1] ? dept_enirq+0x41c/0x490 [ 154.929280][ C1] handle_softirqs+0x231/0x890 [ 154.929297][ C1] ? __irq_exit_rcu+0x66/0x150 [ 154.929315][ C1] __irq_exit_rcu+0x66/0x150 [ 154.929329][ C1] irq_exit_rcu+0x9/0x30 [ 154.929343][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 154.929356][ C1] [ 154.929360][ C1] [ 154.929364][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 154.929377][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 154.929393][ C1] Code: e9 30 ff ff ff e8 c5 62 fd 09 f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 d1 2e 84 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 6e 8d 82 [ 154.929403][ C1] RSP: 0018:ffffc900041e74a8 EFLAGS: 00000282 [ 154.929416][ C1] RAX: e0efb026e1546b00 RBX: 0000000000000246 RCX: 0000000000000046 [ 154.929424][ C1] RDX: 00000000279c9488 RSI: ffffffff8e150025 RDI: ffffffff8c281c40 [ 154.929432][ C1] RBP: 0000000000000000 R08: ffffffff81764955 R09: 0000000000000000 [ 154.929440][ C1] R10: 0000000000000000 R11: ffffffff8e7da2a0 R12: 0000000000000002 [ 154.929448][ C1] R13: ffffffff8e7da2a0 R14: 0000000000000000 R15: 0000000000000000 [ 154.929458][ C1] ? unwind_next_frame+0x95/0x2380 [ 154.929472][ C1] ? arch_stack_walk+0xe3/0x150 [ 154.929484][ C1] ? unwind_next_frame+0x95/0x2380 [ 154.929496][ C1] unwind_next_frame+0xb2/0x2380 [ 154.929507][ C1] ? unwind_next_frame+0x95/0x2380 [ 154.929520][ C1] ? __unwind_start+0xed/0x640 [ 154.929531][ C1] ? unwind_next_frame+0x95/0x2380 [ 154.929544][ C1] __unwind_start+0x4f2/0x640 [ 154.929557][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 154.929574][ C1] arch_stack_walk+0xe3/0x150 [ 154.929594][ C1] ? arch_stack_walk+0xe3/0x150 [ 154.929607][ C1] stack_trace_save+0xa9/0x100 [ 154.929622][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 154.929637][ C1] ? llist_del_first+0x113/0x180 [ 154.929656][ C1] kasan_save_track+0x3e/0x80 [ 154.929681][ C1] kasan_save_free_info+0x40/0x50 [ 154.929697][ C1] __kasan_slab_free+0x5c/0x80 [ 154.929710][ C1] kfree+0x1c5/0x640 [ 154.929726][ C1] ? xfs_mountfs+0x1458/0x2350 [ 154.929738][ C1] xfs_mountfs+0x1458/0x2350 [ 154.929748][ C1] ? dept_on+0x1b/0x30 [ 154.929760][ C1] ? dept_exit+0x16b/0x250 [ 154.929774][ C1] ? __pfx_xfs_mountfs+0x10/0x10 [ 154.929787][ C1] ? trace_xfs_inode_timestamp_range+0x84/0x230 [ 154.929805][ C1] xfs_fs_fill_super+0x11a2/0x15f0 [ 154.929823][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 154.929837][ C1] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 154.929853][ C1] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 154.929868][ C1] vfs_get_tree+0x92/0x2a0 [ 154.929881][ C1] do_new_mount+0x319/0xdd0 [ 154.929899][ C1] ? __pfx_do_new_mount+0x10/0x10 [ 154.929912][ C1] ? security_capable+0x7e/0x2c0 [ 154.929926][ C1] ? ns_capable+0x89/0xe0 [ 154.929941][ C1] ? path_mount+0x647/0x1090 [ 154.929957][ C1] ? user_path_at+0xd4/0x160 [ 154.929969][ C1] __se_sys_mount+0x31d/0x420 [ 154.929986][ C1] ? __pfx___se_sys_mount+0x10/0x10 [ 154.930003][ C1] ? dept_on+0x1b/0x30 [ 154.930039][ C1] ? dept_exit+0x16b/0x250 [ 154.930051][ C1] ? __x64_sys_mount+0x20/0xc0 [ 154.930066][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.930077][ C1] do_syscall_64+0x175/0xf80 [ 154.930090][ C1] ? trace_irq_disable+0x3b/0x150 [ 154.930106][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.930118][ C1] RIP: 0033:0x7f6977f9e0ca [ 154.930128][ C1] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.930138][ C1] RSP: 002b:00007f6978ec5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.930150][ C1] RAX: ffffffffffffffda RBX: 00007f6978ec5ee0 RCX: 00007f6977f9e0ca [ 154.930159][ C1] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 00007f6978ec5ea0 [ 154.930167][ C1] RBP: 0000200000000040 R08: 00007f6978ec5ee0 R09: 0000000000000001 [ 154.930176][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00002000000000c0 [ 154.930183][ C1] R13: 00007f6978ec5ea0 R14: 0000000000009888 R15: 0000200000000080 [ 154.930193][ C1] [ 154.930196][ C1] [ 155.105513][ C1] Allocated by task 5874: [ 155.106744][ C1] kasan_save_track+0x3e/0x80 [ 155.108183][ C1] __kasan_slab_alloc+0x6c/0x80 [ 155.110007][ C1] kmem_cache_alloc_lru_noprof+0x2b4/0x640 [ 155.112201][ C1] xfs_inode_alloc+0x7e/0x710 [ 155.113964][ C1] xfs_iget+0xa6b/0x2ef0 [ 155.115574][ C1] xfs_mountfs+0x1165/0x2350 [ 155.117285][ C1] xfs_fs_fill_super+0x11a2/0x15f0 [ 155.119198][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 155.121045][ C1] vfs_get_tree+0x92/0x2a0 [ 155.122436][ C1] do_new_mount+0x319/0xdd0 [ 155.123980][ C1] __se_sys_mount+0x31d/0x420 [ 155.125710][ C1] do_syscall_64+0x175/0xf80 [ 155.127441][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.129624][ C1] [ 155.130540][ C1] Freed by task 5874: [ 155.132033][ C1] kasan_save_track+0x3e/0x80 [ 155.133783][ C1] kasan_save_free_info+0x40/0x50 [ 155.135662][ C1] __kasan_slab_free+0x5c/0x80 [ 155.137451][ C1] kmem_cache_free+0x18c/0x630 [ 155.139228][ C1] rcu_core+0x794/0xff0 [ 155.140748][ C1] handle_softirqs+0x231/0x890 [ 155.142503][ C1] __irq_exit_rcu+0x66/0x150 [ 155.144212][ C1] irq_exit_rcu+0x9/0x30 [ 155.145724][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 155.147431][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.149162][ C1] [ 155.149829][ C1] Last potentially related work creation: [ 155.151399][ C1] kasan_save_stack+0x3e/0x60 [ 155.152921][ C1] kasan_record_aux_stack+0xcb/0xe0 [ 155.154415][ C1] call_rcu+0xf7/0x890 [ 155.155568][ C1] xfs_icwalk_ag+0x1204/0x18c0 [ 155.156891][ C1] xfs_reclaim_inodes+0x1b6/0x2b0 [ 155.158311][ C1] xfs_unmount_flush_inodes+0xb1/0xd0 [ 155.159767][ C1] xfs_mountfs+0x1325/0x2350 [ 155.161100][ C1] xfs_fs_fill_super+0x11a2/0x15f0 [ 155.162625][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 155.164062][ C1] vfs_get_tree+0x92/0x2a0 [ 155.165373][ C1] do_new_mount+0x319/0xdd0 [ 155.166637][ C1] __se_sys_mount+0x31d/0x420 [ 155.167933][ C1] do_syscall_64+0x175/0xf80 [ 155.169244][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.170877][ C1] [ 155.171563][ C1] The buggy address belongs to the object at ffff8881a7a30000 [ 155.171563][ C1] which belongs to the cache xfs_inode of size 2672 [ 155.175418][ C1] The buggy address is located 400 bytes inside of [ 155.175418][ C1] freed 2672-byte region [ffff8881a7a30000, ffff8881a7a30a70) [ 155.179221][ C1] [ 155.179887][ C1] The buggy address belongs to the physical page: [ 155.181660][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881a7a30b00 pfn:0x1a7a30 [ 155.184555][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 155.186876][ C1] memcg:ffff8881a7a37901 [ 155.188052][ C1] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff) [ 155.190381][ C1] page_type: f5(slab) [ 155.191490][ C1] raw: 057ff00000000240 ffff8881604168c0 ffff888163eabc88 ffff888163eabc88 [ 155.193942][ C1] raw: ffff8881a7a30b00 00000008000b0001 00000000f5000000 ffff8881a7a37901 [ 155.196446][ C1] raw: 0000000000000000 0000000000000000 [ 155.198097][ C1] head: 057ff00000000240 ffff8881604168c0 ffff888163eabc88 ffff888163eabc88 [ 155.200826][ C1] head: ffff8881a7a30b00 00000008000b0001 00000000f5000000 ffff8881a7a37901 [ 155.203914][ C1] head: 0000000000000000 0000000000000000 057ff00000000003 ffffea0008462f01 [ 155.206982][ C1] head: 00000000ffffffff 00000000ffffffff ffffffffffffffff 0000000000000000 [ 155.210132][ C1] head: 00000000ffffffff 0000000000000008 0000000000000000 0000000000000000 [ 155.213239][ C1] page dumped because: kasan: bad access detected [ 155.215607][ C1] page_owner tracks the page as allocated [ 155.217564][ C1] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5874, tgid 5873 (syz.1.18), ts 154889839111, free_ts 140490269358 [ 155.225328][ C1] post_alloc_hook+0x239/0x290 [ 155.227062][ C1] get_page_from_freelist+0x2541/0x25e0 [ 155.229174][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 155.231322][ C1] allocate_slab+0x77/0x6a0 [ 155.232856][ C1] refill_objects+0x331/0x3c0 [ 155.234519][ C1] __pcs_replace_empty_main+0x428/0x760 [ 155.236358][ C1] kmem_cache_alloc_lru_noprof+0x372/0x640 [ 155.238402][ C1] xfs_inode_alloc+0x7e/0x710 [ 155.240039][ C1] xfs_iget+0xa6b/0x2ef0 [ 155.241523][ C1] xfs_mountfs+0x1165/0x2350 [ 155.243137][ C1] xfs_fs_fill_super+0x11a2/0x15f0 [ 155.244920][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 155.246645][ C1] vfs_get_tree+0x92/0x2a0 [ 155.248187][ C1] do_new_mount+0x319/0xdd0 [ 155.249725][ C1] __se_sys_mount+0x31d/0x420 [ 155.251300][ C1] do_syscall_64+0x175/0xf80 [ 155.252871][ C1] page last free pid 5668 tgid 5668 stack trace: [ 155.255083][ C1] __free_frozen_pages+0xc81/0xe10 [ 155.256831][ C1] vfree+0x25b/0x400 [ 155.258205][ C1] kcov_close+0x2e/0x60 [ 155.259636][ C1] __fput+0x440/0xa80 [ 155.260986][ C1] task_work_run+0x1d9/0x270 [ 155.262549][ C1] do_exit+0x73a/0x2470 [ 155.263965][ C1] do_group_exit+0x22d/0x2f0 [ 155.265570][ C1] get_signal+0x121b/0x12c0 [ 155.267154][ C1] arch_do_signal_or_restart+0xbb/0x810 [ 155.268963][ C1] exit_to_user_mode_loop+0xa8/0x5f0 [ 155.270805][ C1] do_syscall_64+0x37e/0xf80 [ 155.272429][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.274428][ C1] [ 155.275268][ C1] Memory state around the buggy address: [ 155.277163][ C1] ffff8881a7a30080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.279788][ C1] ffff8881a7a30100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.282481][ C1] >ffff8881a7a30180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.285105][ C1] ^ [ 155.286697][ C1] ffff8881a7a30200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.289431][ C1] ffff8881a7a30280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.292128][ C1] ================================================================== [ 155.294821][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.297268][ C1] CPU: 1 UID: 0 PID: 5874 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 155.300282][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 155.303718][ C1] Call Trace: [ 155.304889][ C1] [ 155.305910][ C1] vpanic+0x571/0xa60 [ 155.307331][ C1] ? __pfx_vpanic+0x10/0x10 [ 155.308897][ C1] panic+0xc5/0xd0 [ 155.310222][ C1] ? __pfx_panic+0x10/0x10 [ 155.311765][ C1] ? rcu_is_watching+0x15/0xb0 [ 155.313421][ C1] ? do_raw_spin_unlock+0x4d/0x210 [ 155.315115][ C1] ? __dept_wait+0xe66/0x1b70 [ 155.316707][ C1] check_panic_on_warn+0x89/0xb0 [ 155.318373][ C1] ? __dept_wait+0xe66/0x1b70 [ 155.319956][ C1] end_report+0x73/0x180 [ 155.321445][ C1] ? __dept_wait+0xe66/0x1b70 [ 155.323097][ C1] kasan_report+0x128/0x150 [ 155.324676][ C1] ? __dept_wait+0xe66/0x1b70 [ 155.326320][ C1] __dept_wait+0xe66/0x1b70 [ 155.327826][ C1] ? debug_object_active_state+0x77/0x390 [ 155.329716][ C1] ? __pfx___dept_wait+0x10/0x10 [ 155.331390][ C1] ? __pfx_to_pool+0x10/0x10 [ 155.332925][ C1] dept_wait+0x135/0x1a0 [ 155.334427][ C1] ? debug_object_active_state+0x77/0x390 [ 155.336340][ C1] ? debug_object_active_state+0x77/0x390 [ 155.338175][ C1] _raw_spin_lock_irqsave+0x5b/0xc0 [ 155.339898][ C1] ? rcu_core+0x70f/0xff0 [ 155.341380][ C1] debug_object_active_state+0x77/0x390 [ 155.343241][ C1] ? __pfx_xfs_inode_free_callback+0x10/0x10 [ 155.345266][ C1] ? rcu_core+0x70f/0xff0 [ 155.346713][ C1] rcu_core+0x6f9/0xff0 [ 155.348104][ C1] ? __pfx_rcu_core+0x10/0x10 [ 155.349632][ C1] ? dept_task+0x5/0x20 [ 155.351033][ C1] ? dept_on+0x1b/0x30 [ 155.352415][ C1] ? dept_exit+0x16b/0x250 [ 155.353937][ C1] ? dept_enirq+0x41c/0x490 [ 155.355478][ C1] handle_softirqs+0x231/0x890 [ 155.357085][ C1] ? __irq_exit_rcu+0x66/0x150 [ 155.358621][ C1] __irq_exit_rcu+0x66/0x150 [ 155.360107][ C1] irq_exit_rcu+0x9/0x30 [ 155.361512][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 155.363398][ C1] [ 155.364404][ C1] [ 155.365384][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.367350][ C1] RIP: 0010:lock_acquire+0x20b/0x2e0 [ 155.369110][ C1] Code: e9 30 ff ff ff e8 c5 62 fd 09 f7 c3 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 d1 2e 84 11 48 3b 44 24 30 75 33 fb 48 83 c4 38 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 6e 8d 82 [ 155.375482][ C1] RSP: 0018:ffffc900041e74a8 EFLAGS: 00000282 [ 155.377547][ C1] RAX: e0efb026e1546b00 RBX: 0000000000000246 RCX: 0000000000000046 [ 155.380101][ C1] RDX: 00000000279c9488 RSI: ffffffff8e150025 RDI: ffffffff8c281c40 [ 155.382668][ C1] RBP: 0000000000000000 R08: ffffffff81764955 R09: 0000000000000000 [ 155.385333][ C1] R10: 0000000000000000 R11: ffffffff8e7da2a0 R12: 0000000000000002 [ 155.387916][ C1] R13: ffffffff8e7da2a0 R14: 0000000000000000 R15: 0000000000000000 [ 155.390512][ C1] ? unwind_next_frame+0x95/0x2380 [ 155.392220][ C1] ? arch_stack_walk+0xe3/0x150 [ 155.393897][ C1] ? unwind_next_frame+0x95/0x2380 [ 155.395591][ C1] unwind_next_frame+0xb2/0x2380 [ 155.397225][ C1] ? unwind_next_frame+0x95/0x2380 [ 155.398926][ C1] ? __unwind_start+0xed/0x640 [ 155.400533][ C1] ? unwind_next_frame+0x95/0x2380 [ 155.402212][ C1] __unwind_start+0x4f2/0x640 [ 155.403793][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.405871][ C1] arch_stack_walk+0xe3/0x150 [ 155.407420][ C1] ? arch_stack_walk+0xe3/0x150 [ 155.409109][ C1] stack_trace_save+0xa9/0x100 [ 155.410730][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 155.412511][ C1] ? llist_del_first+0x113/0x180 [ 155.414226][ C1] kasan_save_track+0x3e/0x80 [ 155.415839][ C1] kasan_save_free_info+0x40/0x50 [ 155.417546][ C1] __kasan_slab_free+0x5c/0x80 [ 155.419160][ C1] kfree+0x1c5/0x640 [ 155.420499][ C1] ? xfs_mountfs+0x1458/0x2350 [ 155.422140][ C1] xfs_mountfs+0x1458/0x2350 [ 155.423754][ C1] ? dept_on+0x1b/0x30 [ 155.425161][ C1] ? dept_exit+0x16b/0x250 [ 155.426629][ C1] ? __pfx_xfs_mountfs+0x10/0x10 [ 155.428294][ C1] ? trace_xfs_inode_timestamp_range+0x84/0x230 [ 155.430410][ C1] xfs_fs_fill_super+0x11a2/0x15f0 [ 155.432079][ C1] get_tree_bdev_flags+0x430/0x4f0 [ 155.433768][ C1] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 155.435621][ C1] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 155.437550][ C1] vfs_get_tree+0x92/0x2a0 [ 155.439143][ C1] do_new_mount+0x319/0xdd0 [ 155.440593][ C1] ? __pfx_do_new_mount+0x10/0x10 [ 155.442444][ C1] ? security_capable+0x7e/0x2c0 [ 155.444184][ C1] ? ns_capable+0x89/0xe0 [ 155.445663][ C1] ? path_mount+0x647/0x1090 [ 155.447285][ C1] ? user_path_at+0xd4/0x160 [ 155.448873][ C1] __se_sys_mount+0x31d/0x420 [ 155.450509][ C1] ? __pfx___se_sys_mount+0x10/0x10 [ 155.452290][ C1] ? dept_on+0x1b/0x30 [ 155.453682][ C1] ? dept_exit+0x16b/0x250 [ 155.455194][ C1] ? __x64_sys_mount+0x20/0xc0 [ 155.456828][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.458842][ C1] do_syscall_64+0x175/0xf80 [ 155.460416][ C1] ? trace_irq_disable+0x3b/0x150 [ 155.462096][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.463832][ C1] RIP: 0033:0x7f6977f9e0ca [ 155.465300][ C1] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.471041][ C1] RSP: 002b:00007f6978ec5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.473434][ C1] RAX: ffffffffffffffda RBX: 00007f6978ec5ee0 RCX: 00007f6977f9e0ca [ 155.475878][ C1] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 00007f6978ec5ea0 [ 155.478070][ C1] RBP: 0000200000000040 R08: 00007f6978ec5ee0 R09: 0000000000000001 [ 155.480287][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00002000000000c0 [ 155.482755][ C1] R13: 00007f6978ec5ea0 R14: 0000000000009888 R15: 0000200000000080 [ 155.485531][ C1] [ 155.487365][ C1] Kernel Offset: disabled [ 155.488931][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:30:11 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff81b044e9 RBX=ffffffff00000000 RCX=ffff8881122a0000 RDX=0000000000000000 RSI=0000000000000002 RDI=0000000000000031 RBP=ffff88815fffb640 RSP=ffffc900041c7360 R8 =0000000000000000 R9 =1ffffffff36054bc R10=dffffc0000000000 R11=fffffbfff36054bd R12=0000000200000000 R13=ffff8881122a14a8 R14=0000000000000002 R15=ffff8881122a14a8 RIP=ffffffff81c6319e RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f39235896c0 ffffffff 00c00000 GS =0000 ffff8881915d3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564bb0346340 CR3=0000000012428000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000a084f0 R8 =ffff8881613a03b7 R9 =1ffff1102c274076 R10=dffffc0000000000 R11=ffffffff85440a40 R12=dffffc0000000000 R13=ffffffff9a34fb9b R14=ffffffff9bab0980 R15=0000000000000000 RIP=ffffffff85440abc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6978ec66c0 ffffffff 00c00000 GS =0000 ffff8882ac9d3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000564bb031f210 CR3=000000010428c000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff XMM02=ffffffffffffffff ffffffffffffff00 XMM03=ffffffffffffff00 ffffffffffffff00 XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000