Warning: Permanently added '[localhost]:64587' (ED25519) to the list of known hosts. 2026/08/07 01:11:37 parsed 1 programs 2026/08/07 01:11:37 serving rpc on tcp://40583 syzkaller login: [ 53.513162][ T5616] cgroup: Unknown subsys name 'net' [ 53.623744][ T5616] cgroup: Unknown subsys name 'cpuset' [ 53.628897][ T5616] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.980006][ T5616] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.337455][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.352716][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.358929][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.408806][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.418241][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.586834][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.592061][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.595158][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.598357][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.601475][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.384685][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.390438][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.399038][ T5689] bridge_slave_0: entered allmulticast mode [ 59.401886][ T5689] bridge_slave_0: entered promiscuous mode [ 59.406826][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.409114][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.411790][ T5689] bridge_slave_1: entered allmulticast mode [ 59.414358][ T5689] bridge_slave_1: entered promiscuous mode [ 59.430198][ T5689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.434375][ T5689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.457114][ T5689] team0: Port device team_slave_0 added [ 59.461288][ T5689] team0: Port device team_slave_1 added [ 59.476931][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.479496][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.490046][ T5689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.496067][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.498686][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.508219][ T5689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.541193][ T5689] hsr_slave_0: entered promiscuous mode [ 59.543891][ T5689] hsr_slave_1: entered promiscuous mode [ 59.648142][ T5689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.654201][ T5689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.657133][ T5689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.661396][ T5689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.664044][ T5689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.667650][ T5689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.670819][ T5689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.676115][ T5689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.697249][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.700139][ T5689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.702857][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.705293][ T5689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.758035][ T5689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.766065][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.769654][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.778070][ T5689] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.786535][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.789429][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.796570][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.798741][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.021903][ T5689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.067198][ T5689] veth0_vlan: entered promiscuous mode [ 60.077339][ T5689] veth1_vlan: entered promiscuous mode [ 60.104323][ T5689] veth0_macvtap: entered promiscuous mode [ 60.109491][ T5689] veth1_macvtap: entered promiscuous mode [ 60.126273][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.135272][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.144387][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.148054][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.153340][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.156735][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/07 01:11:46 executed programs: 0 [ 60.260476][ T5641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.265278][ T5641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.271863][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.278047][ T5002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.281742][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.285430][ T5002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.285887][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.292189][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.308500][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.312033][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.325845][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.331524][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.334079][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.338300][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.341553][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.351976][ T5662] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.426025][ T5662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.484609][ T5662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.579604][ T5662] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.924464][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.926935][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.929284][ T5744] bridge_slave_0: entered allmulticast mode [ 60.933048][ T5744] bridge_slave_0: entered promiscuous mode [ 60.958952][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.961344][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.963597][ T5744] bridge_slave_1: entered allmulticast mode [ 60.966156][ T5744] bridge_slave_1: entered promiscuous mode [ 60.990335][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.993228][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.995793][ T5742] bridge_slave_0: entered allmulticast mode [ 60.998295][ T5742] bridge_slave_0: entered promiscuous mode [ 61.001335][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.003841][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.006292][ T5748] bridge_slave_0: entered allmulticast mode [ 61.009097][ T5748] bridge_slave_0: entered promiscuous mode [ 61.012899][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.015619][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.018254][ T5748] bridge_slave_1: entered allmulticast mode [ 61.021423][ T5748] bridge_slave_1: entered promiscuous mode [ 61.025510][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.030368][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.033220][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.035821][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.038294][ T5742] bridge_slave_1: entered allmulticast mode [ 61.041331][ T5742] bridge_slave_1: entered promiscuous mode [ 61.076209][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.102356][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.121290][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.127542][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.132234][ T5744] team0: Port device team_slave_0 added [ 61.135460][ T5744] team0: Port device team_slave_1 added [ 61.183745][ T5742] team0: Port device team_slave_0 added [ 61.200816][ T5748] team0: Port device team_slave_0 added [ 61.204099][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.206823][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.216876][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.223418][ T5742] team0: Port device team_slave_1 added [ 61.228593][ T5748] team0: Port device team_slave_1 added [ 61.242222][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.245179][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.254812][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.295962][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.299133][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.308883][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.314290][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.316999][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.326887][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.333918][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.336610][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.346330][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.352922][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.355617][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.365623][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.419114][ T5744] hsr_slave_0: entered promiscuous mode [ 61.421866][ T5744] hsr_slave_1: entered promiscuous mode [ 61.424477][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 61.426275][ T5744] Cannot create hsr debugfs directory [ 61.441825][ T5742] hsr_slave_0: entered promiscuous mode [ 61.444389][ T5742] hsr_slave_1: entered promiscuous mode [ 61.446586][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 61.448454][ T5742] Cannot create hsr debugfs directory [ 61.473679][ T5748] hsr_slave_0: entered promiscuous mode [ 61.475914][ T5748] hsr_slave_1: entered promiscuous mode [ 61.478206][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 61.480558][ T5748] Cannot create hsr debugfs directory [ 61.727952][ T5744] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.733920][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.736883][ T5744] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.741372][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.744003][ T5744] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.747740][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.750941][ T5744] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.755205][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.806062][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.819330][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.827983][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.830316][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.838648][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.841569][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.083822][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.115833][ T5744] veth0_vlan: entered promiscuous mode [ 62.122981][ T5744] veth1_vlan: entered promiscuous mode [ 62.141930][ T5744] veth0_macvtap: entered promiscuous mode [ 62.145896][ T5744] veth1_macvtap: entered promiscuous mode [ 62.156768][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.163110][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.169477][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.175331][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.183252][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.186946][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.229171][ T307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.233417][ T307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.251279][ T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.254014][ T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.286276][ T5815] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.360426][ T5641] Bluetooth: hci0: command tx timeout [ 62.370931][ T5002] Bluetooth: hci1: command tx timeout [ 62.373717][ T5641] Bluetooth: hci2: command tx timeout [ 62.662916][ T5818] ================================================================== [ 62.665999][ T5818] BUG: KASAN: null-ptr-deref in swap_entry_backend_has_flag+0xfe/0x220 [ 62.669198][ T5818] Read of size 8 at addr 0000000000000000 by task syz.2.20/5818 [ 62.672849][ T5818] [ 62.673762][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 62.673776][ T5818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 62.673784][ T5818] Call Trace: [ 62.673790][ T5818] [ 62.673794][ T5818] dump_stack_lvl+0xe8/0x150 [ 62.673813][ T5818] ? swap_entry_backend_has_flag+0xfe/0x220 [ 62.673826][ T5818] kasan_report+0x117/0x150 [ 62.673839][ T5818] ? swap_entry_backend_has_flag+0xfe/0x220 [ 62.673851][ T5818] kasan_check_range+0x264/0x2c0 [ 62.673864][ T5818] swap_entry_backend_has_flag+0xfe/0x220 [ 62.673876][ T5818] do_swap_page+0x3c0/0x5620 [ 62.673889][ T5818] ? lock_acquire+0x115/0x350 [ 62.673906][ T5818] ? do_swap_page+0x12c/0x5620 [ 62.673916][ T5818] ? rcu_is_watching+0x15/0xb0 [ 62.673927][ T5818] ? __pfx_do_swap_page+0x10/0x10 [ 62.673938][ T5818] ? pte_offset_map_ro_nolock+0xdd/0x160 [ 62.673950][ T5818] collapse_single_pmd+0x24c6/0x3da0 [ 62.673967][ T5818] ? collapse_single_pmd+0x1c1e/0x3da0 [ 62.673979][ T5818] ? __pfx_collapse_single_pmd+0x10/0x10 [ 62.673990][ T5818] ? __pfx_mt_find+0x10/0x10 [ 62.674009][ T5818] ? hugepage_vma_revalidate+0x38e/0x580 [ 62.674021][ T5818] madvise_collapse+0x2cf/0x790 [ 62.674035][ T5818] madvise_vma_behavior+0x115f/0x4170 [ 62.674050][ T5818] ? __lock_acquire+0x6df/0x2e50 [ 62.674063][ T5818] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 62.674080][ T5818] ? __lock_acquire+0x6df/0x2e50 [ 62.674097][ T5818] ? do_raw_spin_lock+0x12b/0x2f0 [ 62.674111][ T5818] ? rcu_is_watching+0x15/0xb0 [ 62.674120][ T5818] ? trace_hrtimer_start+0x82/0x200 [ 62.674134][ T5818] ? hrtimer_start_range_ns_common+0x83b/0xb90 [ 62.674148][ T5818] ? finish_task_switch+0x412/0xc60 [ 62.674160][ T5818] ? lockdep_hardirqs_on+0x7a/0x110 [ 62.674177][ T5818] ? rcu_is_watching+0x15/0xb0 [ 62.674187][ T5818] ? trace_sched_exit_tp+0x3a/0x130 [ 62.674198][ T5818] ? __lock_acquire+0x6df/0x2e50 [ 62.674214][ T5818] ? mas_prev_slot+0xb76/0xbf0 [ 62.674227][ T5818] ? find_vma_prev+0x123/0x1b0 [ 62.674240][ T5818] ? __pfx_find_vma_prev+0x10/0x10 [ 62.674250][ T5818] ? futex_unqueue+0x22/0x240 [ 62.674268][ T5818] ? __futex_wait+0x358/0x400 [ 62.674280][ T5818] madvise_walk_vmas+0x576/0xb00 [ 62.674298][ T5818] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 62.674314][ T5818] ? blk_start_plug+0x6e/0x1b0 [ 62.674326][ T5818] madvise_do_behavior+0x385/0x540 [ 62.674342][ T5818] ? __pfx_madvise_do_behavior+0x10/0x10 [ 62.674357][ T5818] ? down_read+0x2be/0x330 [ 62.674369][ T5818] do_madvise+0x327/0x3a0 [ 62.674384][ T5818] ? __pfx_do_madvise+0x10/0x10 [ 62.674401][ T5818] ? __se_sys_futex+0x3a8/0x450 [ 62.674414][ T5818] ? rcu_is_watching+0x15/0xb0 [ 62.674425][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.674437][ T5818] __x64_sys_madvise+0xa6/0xc0 [ 62.674458][ T5818] do_syscall_64+0x174/0x580 [ 62.674469][ T5818] ? trace_irq_disable+0x3b/0x140 [ 62.674483][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.674494][ T5818] RIP: 0033:0x7fbcad79e019 [ 62.674505][ T5818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.674514][ T5818] RSP: 002b:00007fbcae5c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 62.674525][ T5818] RAX: ffffffffffffffda RBX: 00007fbcada25fa0 RCX: 00007fbcad79e019 [ 62.674533][ T5818] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 62.674539][ T5818] RBP: 00007fbcad83500c R08: 0000000000000000 R09: 0000000000000000 [ 62.674545][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.674551][ T5818] R13: 00007fbcada26038 R14: 00007fbcada25fa0 R15: 00007fff095fa0b8 [ 62.674562][ T5818] [ 62.674565][ T5818] ================================================================== [ 62.815438][ T5818] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 62.818182][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT(full) [ 62.821541][ T5818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 62.825323][ T5818] Call Trace: [ 62.826624][ T5818] [ 62.827771][ T5818] vpanic+0x56c/0xa60 [ 62.829308][ T5818] ? __pfx_vpanic+0x10/0x10 [ 62.831072][ T5818] panic+0xc5/0xd0 [ 62.832508][ T5818] ? __pfx_panic+0x10/0x10 [ 62.834256][ T5818] ? swap_entry_backend_has_flag+0xfe/0x220 [ 62.836520][ T5818] ? swap_entry_backend_has_flag+0xfe/0x220 [ 62.838758][ T5818] check_panic_on_warn+0x89/0xb0 [ 62.840583][ T5818] ? swap_entry_backend_has_flag+0xfe/0x220 [ 62.842727][ T5818] end_report+0x73/0x170 [ 62.844290][ T5818] ? swap_entry_backend_has_flag+0xfe/0x220 [ 62.846436][ T5818] kasan_report+0x128/0x150 [ 62.848142][ T5818] ? swap_entry_backend_has_flag+0xfe/0x220 [ 62.850316][ T5818] kasan_check_range+0x264/0x2c0 [ 62.852166][ T5818] swap_entry_backend_has_flag+0xfe/0x220 [ 62.854292][ T5818] do_swap_page+0x3c0/0x5620 [ 62.856066][ T5818] ? lock_acquire+0x115/0x350 [ 62.857871][ T5818] ? do_swap_page+0x12c/0x5620 [ 62.859661][ T5818] ? rcu_is_watching+0x15/0xb0 [ 62.861496][ T5818] ? __pfx_do_swap_page+0x10/0x10 [ 62.863462][ T5818] ? pte_offset_map_ro_nolock+0xdd/0x160 [ 62.865614][ T5818] collapse_single_pmd+0x24c6/0x3da0 [ 62.867607][ T5818] ? collapse_single_pmd+0x1c1e/0x3da0 [ 62.869666][ T5818] ? __pfx_collapse_single_pmd+0x10/0x10 [ 62.871808][ T5818] ? __pfx_mt_find+0x10/0x10 [ 62.873538][ T5818] ? hugepage_vma_revalidate+0x38e/0x580 [ 62.875634][ T5818] madvise_collapse+0x2cf/0x790 [ 62.877496][ T5818] madvise_vma_behavior+0x115f/0x4170 [ 62.879508][ T5818] ? __lock_acquire+0x6df/0x2e50 [ 62.881375][ T5818] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 62.883515][ T5818] ? __lock_acquire+0x6df/0x2e50 [ 62.885441][ T5818] ? do_raw_spin_lock+0x12b/0x2f0 [ 62.887390][ T5818] ? rcu_is_watching+0x15/0xb0 [ 62.889244][ T5818] ? trace_hrtimer_start+0x82/0x200 [ 62.891199][ T5818] ? hrtimer_start_range_ns_common+0x83b/0xb90 [ 62.893403][ T5818] ? finish_task_switch+0x412/0xc60 [ 62.895284][ T5818] ? lockdep_hardirqs_on+0x7a/0x110 [ 62.897270][ T5818] ? rcu_is_watching+0x15/0xb0 [ 62.899089][ T5818] ? trace_sched_exit_tp+0x3a/0x130 [ 62.901057][ T5818] ? __lock_acquire+0x6df/0x2e50 [ 62.902951][ T5818] ? mas_prev_slot+0xb76/0xbf0 [ 62.904784][ T5818] ? find_vma_prev+0x123/0x1b0 [ 62.906569][ T5818] ? __pfx_find_vma_prev+0x10/0x10 [ 62.908486][ T5818] ? futex_unqueue+0x22/0x240 [ 62.910296][ T5818] ? __futex_wait+0x358/0x400 [ 62.912098][ T5818] madvise_walk_vmas+0x576/0xb00 [ 62.913988][ T5818] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 62.916056][ T5818] ? blk_start_plug+0x6e/0x1b0 [ 62.917879][ T5818] madvise_do_behavior+0x385/0x540 [ 62.919810][ T5818] ? __pfx_madvise_do_behavior+0x10/0x10 [ 62.921916][ T5818] ? down_read+0x2be/0x330 [ 62.923631][ T5818] do_madvise+0x327/0x3a0 [ 62.925329][ T5818] ? __pfx_do_madvise+0x10/0x10 [ 62.927207][ T5818] ? __se_sys_futex+0x3a8/0x450 [ 62.929090][ T5818] ? rcu_is_watching+0x15/0xb0 [ 62.930923][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.933225][ T5818] __x64_sys_madvise+0xa6/0xc0 [ 62.935144][ T5818] do_syscall_64+0x174/0x580 [ 62.936921][ T5818] ? trace_irq_disable+0x3b/0x140 [ 62.938778][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.940999][ T5818] RIP: 0033:0x7fbcad79e019 [ 62.942730][ T5818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.950040][ T5818] RSP: 002b:00007fbcae5c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 62.953221][ T5818] RAX: ffffffffffffffda RBX: 00007fbcada25fa0 RCX: 00007fbcad79e019 [ 62.956245][ T5818] RDX: 0000000000000019 RSI: 0000000000c00000 RDI: 0000200000000000 [ 62.959185][ T5818] RBP: 00007fbcad83500c R08: 0000000000000000 R09: 0000000000000000 [ 62.962041][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.964906][ T5818] R13: 00007fbcada26038 R14: 00007fbcada25fa0 R15: 00007fff095fa0b8 [ 62.967875][ T5818] [ 62.969839][ T5818] Kernel Offset: disabled [ 62.971515][ T5818] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:11:49 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff81bae18d RBX=dffffc0000000000 RCX=ffff8881073ebc00 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000421fb88 RSP=ffffc9000421fa38 R8 =ffffffff9057a637 R9 =1ffffffff20af4c6 R10=dffffc0000000000 R11=fffffbfff20af4c7 R12=1ffff110478c81e1 R13=ffff88812103c4c8 R14=ffff88823c640f08 R15=0000000000000001 RIP=ffffffff81c6febc RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbcae5a36c0 ffffffff 00c00000 GS =0000 ffff88818d943000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbcae5a2ff8 CR3=000000017073e000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525 XMM02=00007fbcad9f25e8 00007fbcad9f2618 XMM03=0000000000000000 0000000000000000 XMM04=0000000000000000 00000000000000ff XMM05=00007fbcad9f25d0 00007fbcad9f2610 XMM06=00007fbcad9f25f8 00007fbcad9f25c8 XMM07=00007fbcad9f2600 00007fbcad9f25e0 XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003d2e850 R8 =ffff888169f70237 R9 =1ffff1102d3ee046 R10=dffffc0000000000 R11=ffffffff8568b0a0 R12=dffffc0000000000 R13=ffffffff9aae8160 R14=ffffffff9aae81a0 R15=0000000000000000 RIP=ffffffff8568b11c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbcae5c46c0 ffffffff 00c00000 GS =0000 ffff8882a8f43000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00001ece26fe2000 CR3=000000017073e000 CR4=000006f0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffff00 XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffff00 XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000 XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000 XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000 XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000 XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000 XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000