Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. 2025/11/08 22:20:23 parsed 1 programs syzkaller login: [ 60.434032][ T4188] cgroup: Unknown subsys name 'net' [ 60.547822][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.933683][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.507292][ T800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.515533][ T800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.534016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.546718][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.554716][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.563422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.842636][ T4214] chnl_net:caif_netlink_parms(): no params data found [ 63.892595][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.900427][ T4214] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.908630][ T4214] device bridge_slave_0 entered promiscuous mode [ 63.918289][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.925595][ T4214] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.933414][ T4214] device bridge_slave_1 entered promiscuous mode [ 63.956685][ T4214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.969165][ T4214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.002355][ T4214] team0: Port device team_slave_0 added [ 64.010163][ T4214] team0: Port device team_slave_1 added [ 64.033600][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.040675][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.066980][ T4214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.080458][ T4214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.087690][ T4214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.114412][ T4214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.152687][ T4214] device hsr_slave_0 entered promiscuous mode [ 64.159634][ T4214] device hsr_slave_1 entered promiscuous mode [ 64.283980][ T4214] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.297504][ T4214] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.307111][ T4214] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.317664][ T4214] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.349992][ T4214] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.357285][ T4214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.365091][ T4214] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.372199][ T4214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.435444][ T4214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.452765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.463962][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.472418][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.486916][ T4214] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.500164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.508991][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.516097][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.538312][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.548323][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.557807][ T800] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.564930][ T800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.575629][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.584834][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.596854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.606361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.617765][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.632895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.643300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.651837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.661235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.677896][ T4214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.689348][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.698473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.708927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.822693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.830590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.844921][ T4214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.866321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.876036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.897390][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.915837][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.926426][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.934602][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.945149][ T4214] device veth0_vlan entered promiscuous mode [ 64.957368][ T4214] device veth1_vlan entered promiscuous mode [ 64.979449][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.988755][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.004349][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.020884][ T800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.033128][ T4214] device veth0_macvtap entered promiscuous mode [ 65.053383][ T4214] device veth1_macvtap entered promiscuous mode [ 65.072922][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.080414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.090419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.099050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.108123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.120117][ T4214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.131439][ T4214] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.140425][ T4214] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.149434][ T4214] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.159362][ T4214] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.170050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.179554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.355202][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.798237][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.798172][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.849515][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.156769][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.163395][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.343006][ T144] device hsr_slave_0 left promiscuous mode [ 71.350178][ T144] device hsr_slave_1 left promiscuous mode [ 71.376036][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.394877][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.413834][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.421268][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.441777][ T144] device bridge_slave_1 left promiscuous mode [ 71.449645][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.463980][ T144] device bridge_slave_0 left promiscuous mode [ 71.470302][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.487926][ T144] device veth1_macvtap left promiscuous mode [ 71.494307][ T144] device veth0_macvtap left promiscuous mode [ 71.500341][ T144] device veth1_vlan left promiscuous mode [ 71.506302][ T144] device veth0_vlan left promiscuous mode [ 71.643409][ T144] team0 (unregistering): Port device team_slave_1 removed [ 71.656603][ T144] team0 (unregistering): Port device team_slave_0 removed [ 71.669331][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.683677][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.733813][ T144] bond0 (unregistering): Released all slaves 2025/11/08 22:20:37 executed programs: 0 [ 72.475010][ T4348] chnl_net:caif_netlink_parms(): no params data found [ 72.593560][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.600657][ T4348] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.623702][ T4348] device bridge_slave_0 entered promiscuous mode [ 72.643149][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.662222][ T4348] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.670350][ T4348] device bridge_slave_1 entered promiscuous mode [ 72.726144][ T4348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.754260][ T4348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.798179][ T4348] team0: Port device team_slave_0 added [ 72.808406][ T4348] team0: Port device team_slave_1 added [ 72.840324][ T4348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.848442][ T4348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.876336][ T4348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.890216][ T4348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.898474][ T4348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.926341][ T4348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.968296][ T4348] device hsr_slave_0 entered promiscuous mode [ 72.984015][ T4348] device hsr_slave_1 entered promiscuous mode [ 73.568198][ T4348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.577762][ T4348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.588527][ T4348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.605561][ T4348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.755674][ T4348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.769520][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.779231][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.791299][ T4348] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.805068][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.814428][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.825635][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.832766][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.853166][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.861642][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.872510][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.880986][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.888121][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.899950][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.909562][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.933255][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.945824][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.965344][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.003636][ T4348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.022013][ T4348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.048791][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.064116][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.085490][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.097452][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.107568][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.116223][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.126429][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.303482][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.311073][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.327165][ T4348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.367852][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.383631][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.417413][ T4348] device veth0_vlan entered promiscuous mode [ 74.431839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.447965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.468283][ T4348] device veth1_vlan entered promiscuous mode [ 74.476237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.484819][ T4447] Bluetooth: hci0: command 0x0409 tx timeout [ 74.497945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.507143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.537564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.545965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.554943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.566963][ T4348] device veth0_macvtap entered promiscuous mode [ 74.577031][ T4348] device veth1_macvtap entered promiscuous mode [ 74.606166][ T4348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.615134][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.625909][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.634887][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.645188][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.658468][ T4348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.668548][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.677882][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.687835][ T4348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697974][ T4348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.707884][ T4348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.717601][ T4348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.782106][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.790083][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.810638][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.826875][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.836579][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.848614][ T1226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.268395][ T4462] loop0: detected capacity change from 0 to 32768 [ 75.371705][ T4462] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 75.410745][ T4462] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 75.452758][ T4462] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 75.476691][ T4444] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 75.487072][ T4444] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 75.519459][ T4444] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 32ms [ 75.530249][ T4444] gfs2: fsid=syz:syz.0: jid=0: Done [ 75.536499][ T4462] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 75.706790][ T4462] gfs2: fsid=syz:syz.0: found 1 quota changes [ 75.744047][ T4348] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 75.744047][ T4348] inode = 11 2339 [ 75.744047][ T4348] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 75.763189][ T4348] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 75.781353][ T4348] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 75.797945][ T4348] CPU: 1 PID: 4348 Comm: syz-executor Not tainted syzkaller #0 [ 75.805528][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.815609][ T4348] Call Trace: [ 75.818897][ T4348] [ 75.821842][ T4348] dump_stack_lvl+0x168/0x230 [ 75.826555][ T4348] ? show_regs_print_info+0x20/0x20 [ 75.831772][ T4348] ? load_image+0x3b0/0x3b0 [ 75.836295][ T4348] ? __lock_acquire+0x7c60/0x7c60 [ 75.841349][ T4348] ? do_raw_spin_unlock+0x11d/0x230 [ 75.846570][ T4348] gfs2_assert_warn_i+0x18f/0x2c0 [ 75.851619][ T4348] gfs2_quota_cleanup+0x4b4/0x6a0 [ 75.856669][ T4348] gfs2_make_fs_ro+0x237/0x5d0 [ 75.861456][ T4348] ? gfs2_dinode_out+0xb00/0xb00 [ 75.866418][ T4348] ? _raw_spin_unlock+0x24/0x40 [ 75.871303][ T4348] ? gfs2_glock_nq+0xcb0/0x1550 [ 75.876205][ T4348] gfs2_withdraw+0x5f9/0x1460 [ 75.880911][ T4348] ? gfs2_lm+0x220/0x220 [ 75.885169][ T4348] ? __schedule+0x11c3/0x4390 [ 75.889870][ T4348] ? gfs2_freeze_lock+0x52/0xc0 [ 75.894756][ T4348] ? gfs2_consist_inode_i+0xc0/0xe0 [ 75.899978][ T4348] gfs2_inode_refresh+0xb5e/0xfe0 [ 75.905029][ T4348] ? do_promote+0x71a/0xab0 [ 75.909560][ T4348] ? gfs2_inode_metasync+0xf0/0xf0 [ 75.914708][ T4348] ? __lock_acquire+0x7c60/0x7c60 [ 75.919757][ T4348] inode_go_lock+0x127/0x470 [ 75.924371][ T4348] do_promote+0x741/0xab0 [ 75.928732][ T4348] finish_xmote+0x514/0xb70 [ 75.933305][ T4348] do_xmote+0x7b6/0x1120 [ 75.937589][ T4348] gfs2_glock_nq+0xc7a/0x1550 [ 75.942301][ T4348] do_sync+0x486/0xc00 [ 75.946394][ T4348] ? slot_put+0x1e0/0x1e0 [ 75.950761][ T4348] ? do_sync+0x47e/0xc00 [ 75.955043][ T4348] ? do_raw_spin_unlock+0x11d/0x230 [ 75.960264][ T4348] gfs2_quota_sync+0x32c/0x6f0 [ 75.965062][ T4348] gfs2_sync_fs+0x48/0xb0 [ 75.969413][ T4348] sync_filesystem+0xe6/0x220 [ 75.974115][ T4348] generic_shutdown_super+0x6b/0x300 [ 75.979430][ T4348] kill_block_super+0x7c/0xe0 [ 75.984137][ T4348] deactivate_locked_super+0x93/0xf0 [ 75.989441][ T4348] cleanup_mnt+0x418/0x4d0 [ 75.993876][ T4348] ? lockdep_hardirqs_on+0x94/0x140 [ 75.999100][ T4348] task_work_run+0x125/0x1a0 [ 76.003717][ T4348] exit_to_user_mode_loop+0x10f/0x130 [ 76.009114][ T4348] exit_to_user_mode_prepare+0xee/0x180 [ 76.014684][ T4348] syscall_exit_to_user_mode+0x16/0x40 [ 76.020164][ T4348] do_syscall_64+0x58/0xa0 [ 76.024595][ T4348] ? clear_bhb_loop+0x30/0x80 [ 76.029298][ T4348] ? clear_bhb_loop+0x30/0x80 [ 76.034003][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.039930][ T4348] RIP: 0033:0x7fbfa6d769f7 [ 76.044381][ T4348] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 76.064010][ T4348] RSP: 002b:00007ffe2af14608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.072448][ T4348] RAX: 0000000000000000 RBX: 00007fbfa6df7d7d RCX: 00007fbfa6d769f7 [ 76.080441][ T4348] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2af146c0 [ 76.088431][ T4348] RBP: 00007ffe2af146c0 R08: 0000000000000000 R09: 0000000000000000 [ 76.096417][ T4348] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2af15750 [ 76.104522][ T4348] R13: 00007fbfa6df7d7d R14: 0000000000012472 R15: 00007ffe2af15790 [ 76.112528][ T4348] [ 76.117407][ T4348] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 76.130146][ T4348] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 76.157056][ T4348] gfs2: fsid=syz:syz.0: File system withdrawn [ 76.167505][ T4348] CPU: 1 PID: 4348 Comm: syz-executor Not tainted syzkaller #0 [ 76.175180][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.185245][ T4348] Call Trace: [ 76.188537][ T4348] [ 76.191473][ T4348] dump_stack_lvl+0x168/0x230 [ 76.196159][ T4348] ? kobject_uevent_env+0x371/0x890 [ 76.201364][ T4348] ? show_regs_print_info+0x20/0x20 [ 76.206577][ T4348] ? load_image+0x3b0/0x3b0 [ 76.211086][ T4348] ? kobject_uevent_env+0x371/0x890 [ 76.216293][ T4348] ? lockref_put_or_lock+0x6e/0xb0 [ 76.221429][ T4348] gfs2_withdraw+0x111b/0x1460 [ 76.226210][ T4348] ? gfs2_lm+0x220/0x220 [ 76.230462][ T4348] ? __schedule+0x11c3/0x4390 [ 76.235153][ T4348] ? gfs2_consist_inode_i+0xc0/0xe0 [ 76.240354][ T4348] gfs2_inode_refresh+0xb5e/0xfe0 [ 76.245387][ T4348] ? do_promote+0x71a/0xab0 [ 76.249911][ T4348] ? gfs2_inode_metasync+0xf0/0xf0 [ 76.255032][ T4348] ? __lock_acquire+0x7c60/0x7c60 [ 76.260075][ T4348] inode_go_lock+0x127/0x470 [ 76.264676][ T4348] do_promote+0x741/0xab0 [ 76.269034][ T4348] finish_xmote+0x514/0xb70 [ 76.273568][ T4348] do_xmote+0x7b6/0x1120 [ 76.277842][ T4348] gfs2_glock_nq+0xc7a/0x1550 [ 76.282539][ T4348] do_sync+0x486/0xc00 [ 76.286619][ T4348] ? slot_put+0x1e0/0x1e0 [ 76.290976][ T4348] ? do_sync+0x47e/0xc00 [ 76.295232][ T4348] ? do_raw_spin_unlock+0x11d/0x230 [ 76.300449][ T4348] gfs2_quota_sync+0x32c/0x6f0 [ 76.305232][ T4348] gfs2_sync_fs+0x48/0xb0 [ 76.309586][ T4348] sync_filesystem+0xe6/0x220 [ 76.314586][ T4348] generic_shutdown_super+0x6b/0x300 [ 76.319916][ T4348] kill_block_super+0x7c/0xe0 [ 76.324606][ T4348] deactivate_locked_super+0x93/0xf0 [ 76.329897][ T4348] cleanup_mnt+0x418/0x4d0 [ 76.334328][ T4348] ? lockdep_hardirqs_on+0x94/0x140 [ 76.339555][ T4348] task_work_run+0x125/0x1a0 [ 76.344179][ T4348] exit_to_user_mode_loop+0x10f/0x130 [ 76.349575][ T4348] exit_to_user_mode_prepare+0xee/0x180 [ 76.355136][ T4348] syscall_exit_to_user_mode+0x16/0x40 [ 76.360609][ T4348] do_syscall_64+0x58/0xa0 [ 76.365035][ T4348] ? clear_bhb_loop+0x30/0x80 [ 76.369735][ T4348] ? clear_bhb_loop+0x30/0x80 [ 76.374430][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.380334][ T4348] RIP: 0033:0x7fbfa6d769f7 [ 76.384760][ T4348] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 76.404382][ T4348] RSP: 002b:00007ffe2af14608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.412848][ T4348] RAX: 0000000000000000 RBX: 00007fbfa6df7d7d RCX: 00007fbfa6d769f7 [ 76.420838][ T4348] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2af146c0 [ 76.428821][ T4348] RBP: 00007ffe2af146c0 R08: 0000000000000000 R09: 0000000000000000 [ 76.436806][ T4348] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2af15750 [ 76.444788][ T4348] R13: 00007fbfa6df7d7d R14: 0000000000012472 R15: 00007ffe2af15790 [ 76.452785][ T4348] [ 76.464513][ T4348] ================================================================== [ 76.472816][ T4348] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 76.479509][ T4348] Read of size 8 at addr ffff88807095a090 by task syz-executor/4348 [ 76.487485][ T4348] [ 76.489817][ T4348] CPU: 1 PID: 4348 Comm: syz-executor Not tainted syzkaller #0 [ 76.497366][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.507432][ T4348] Call Trace: [ 76.510723][ T4348] [ 76.513661][ T4348] dump_stack_lvl+0x168/0x230 [ 76.518355][ T4348] ? show_regs_print_info+0x20/0x20 [ 76.523297][ T4447] Bluetooth: hci0: command 0x041b tx timeout [ 76.523565][ T4348] ? _printk+0xcc/0x110 [ 76.533700][ T4348] ? load_image+0x3b0/0x3b0 [ 76.538237][ T4348] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 76.543644][ T4348] print_address_description+0x60/0x2d0 [ 76.549198][ T4348] ? qd_unlock+0x30/0x2d0 [ 76.553543][ T4348] kasan_report+0xdf/0x130 [ 76.557971][ T4348] ? qd_unlock+0x30/0x2d0 [ 76.562313][ T4348] kasan_check_range+0x27b/0x290 [ 76.567260][ T4348] qd_unlock+0x30/0x2d0 [ 76.571432][ T4348] gfs2_quota_sync+0x5bf/0x6f0 [ 76.576218][ T4348] gfs2_sync_fs+0x48/0xb0 [ 76.580562][ T4348] sync_filesystem+0xe6/0x220 [ 76.585260][ T4348] generic_shutdown_super+0x6b/0x300 [ 76.590567][ T4348] kill_block_super+0x7c/0xe0 [ 76.595283][ T4348] deactivate_locked_super+0x93/0xf0 [ 76.600577][ T4348] cleanup_mnt+0x418/0x4d0 [ 76.605001][ T4348] ? lockdep_hardirqs_on+0x94/0x140 [ 76.610210][ T4348] task_work_run+0x125/0x1a0 [ 76.614824][ T4348] exit_to_user_mode_loop+0x10f/0x130 [ 76.620207][ T4348] exit_to_user_mode_prepare+0xee/0x180 [ 76.625765][ T4348] syscall_exit_to_user_mode+0x16/0x40 [ 76.631238][ T4348] do_syscall_64+0x58/0xa0 [ 76.635659][ T4348] ? clear_bhb_loop+0x30/0x80 [ 76.640343][ T4348] ? clear_bhb_loop+0x30/0x80 [ 76.645028][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.650927][ T4348] RIP: 0033:0x7fbfa6d769f7 [ 76.655354][ T4348] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 76.674970][ T4348] RSP: 002b:00007ffe2af14608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.683395][ T4348] RAX: 0000000000000000 RBX: 00007fbfa6df7d7d RCX: 00007fbfa6d769f7 [ 76.691389][ T4348] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2af146c0 [ 76.699484][ T4348] RBP: 00007ffe2af146c0 R08: 0000000000000000 R09: 0000000000000000 [ 76.707459][ T4348] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2af15750 [ 76.715440][ T4348] R13: 00007fbfa6df7d7d R14: 0000000000012472 R15: 00007ffe2af15790 [ 76.723439][ T4348] [ 76.726487][ T4348] [ 76.728806][ T4348] Allocated by task 4462: [ 76.733130][ T4348] __kasan_slab_alloc+0x9c/0xd0 [ 76.737991][ T4348] slab_post_alloc_hook+0x4c/0x380 [ 76.743120][ T4348] kmem_cache_alloc+0x100/0x290 [ 76.747984][ T4348] qd_alloc+0x50/0x260 [ 76.752058][ T4348] gfs2_quota_init+0x730/0xe80 [ 76.756822][ T4348] gfs2_make_fs_rw+0x3f5/0x560 [ 76.761585][ T4348] gfs2_fill_super+0x188a/0x1f50 [ 76.766526][ T4348] get_tree_bdev+0x3f1/0x610 [ 76.771116][ T4348] gfs2_get_tree+0x4d/0x1e0 [ 76.775623][ T4348] vfs_get_tree+0x88/0x270 [ 76.780064][ T4348] do_new_mount+0x24a/0xa40 [ 76.784573][ T4348] __se_sys_mount+0x2d6/0x3c0 [ 76.789261][ T4348] do_syscall_64+0x4c/0xa0 [ 76.793688][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.799598][ T4348] [ 76.801930][ T4348] Freed by task 14: [ 76.805740][ T4348] kasan_set_track+0x4b/0x70 [ 76.810348][ T4348] kasan_set_free_info+0x1f/0x40 [ 76.815308][ T4348] ____kasan_slab_free+0xd5/0x110 [ 76.820337][ T4348] slab_free_freelist_hook+0xea/0x170 [ 76.825720][ T4348] kmem_cache_free+0x8f/0x210 [ 76.830521][ T4348] rcu_core+0x962/0x15d0 [ 76.834795][ T4348] handle_softirqs+0x328/0x820 [ 76.839580][ T4348] run_ksoftirqd+0x98/0xf0 [ 76.844008][ T4348] smpboot_thread_fn+0x4f6/0x970 [ 76.848958][ T4348] kthread+0x436/0x520 [ 76.853028][ T4348] ret_from_fork+0x1f/0x30 [ 76.857449][ T4348] [ 76.859772][ T4348] Last potentially related work creation: [ 76.865483][ T4348] kasan_save_stack+0x35/0x60 [ 76.870164][ T4348] kasan_record_aux_stack+0xb8/0x100 [ 76.875480][ T4348] call_rcu+0x182/0x930 [ 76.879651][ T4348] gfs2_quota_cleanup+0x43c/0x6a0 [ 76.884679][ T4348] gfs2_make_fs_ro+0x237/0x5d0 [ 76.889448][ T4348] gfs2_withdraw+0x5f9/0x1460 [ 76.894136][ T4348] gfs2_inode_refresh+0xb5e/0xfe0 [ 76.899171][ T4348] inode_go_lock+0x127/0x470 [ 76.903777][ T4348] do_promote+0x741/0xab0 [ 76.908115][ T4348] finish_xmote+0x514/0xb70 [ 76.912625][ T4348] do_xmote+0x7b6/0x1120 [ 76.916875][ T4348] gfs2_glock_nq+0xc7a/0x1550 [ 76.921554][ T4348] do_sync+0x486/0xc00 [ 76.925631][ T4348] gfs2_quota_sync+0x32c/0x6f0 [ 76.930411][ T4348] gfs2_sync_fs+0x48/0xb0 [ 76.934742][ T4348] sync_filesystem+0xe6/0x220 [ 76.939428][ T4348] generic_shutdown_super+0x6b/0x300 [ 76.944721][ T4348] kill_block_super+0x7c/0xe0 [ 76.949401][ T4348] deactivate_locked_super+0x93/0xf0 [ 76.954689][ T4348] cleanup_mnt+0x418/0x4d0 [ 76.959108][ T4348] task_work_run+0x125/0x1a0 [ 76.963711][ T4348] exit_to_user_mode_loop+0x10f/0x130 [ 76.969091][ T4348] exit_to_user_mode_prepare+0xee/0x180 [ 76.974642][ T4348] syscall_exit_to_user_mode+0x16/0x40 [ 76.980112][ T4348] do_syscall_64+0x58/0xa0 [ 76.984547][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.990500][ T4348] [ 76.992859][ T4348] The buggy address belongs to the object at ffff88807095a000 [ 76.992859][ T4348] which belongs to the cache gfs2_quotad of size 272 [ 77.006927][ T4348] The buggy address is located 144 bytes inside of [ 77.006927][ T4348] 272-byte region [ffff88807095a000, ffff88807095a110) [ 77.020222][ T4348] The buggy address belongs to the page: [ 77.025874][ T4348] page:ffffea0001c25680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7095a [ 77.036037][ T4348] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 77.043601][ T4348] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801def8dc0 [ 77.052203][ T4348] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 77.060788][ T4348] page dumped because: kasan: bad access detected [ 77.067210][ T4348] page_owner tracks the page as allocated [ 77.072923][ T4348] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4462, ts 75696553699, free_ts 74521400509 [ 77.091952][ T4348] get_page_from_freelist+0x1b77/0x1c60 [ 77.097516][ T4348] __alloc_pages+0x1e1/0x470 [ 77.102114][ T4348] new_slab+0xc0/0x4b0 [ 77.106193][ T4348] ___slab_alloc+0x81e/0xdf0 [ 77.110783][ T4348] kmem_cache_alloc+0x195/0x290 [ 77.115629][ T4348] qd_alloc+0x50/0x260 [ 77.119703][ T4348] gfs2_quota_init+0x730/0xe80 [ 77.124489][ T4348] gfs2_make_fs_rw+0x3f5/0x560 [ 77.129261][ T4348] gfs2_fill_super+0x188a/0x1f50 [ 77.134211][ T4348] get_tree_bdev+0x3f1/0x610 [ 77.138806][ T4348] gfs2_get_tree+0x4d/0x1e0 [ 77.143315][ T4348] vfs_get_tree+0x88/0x270 [ 77.147748][ T4348] do_new_mount+0x24a/0xa40 [ 77.152383][ T4348] __se_sys_mount+0x2d6/0x3c0 [ 77.157064][ T4348] do_syscall_64+0x4c/0xa0 [ 77.161501][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.167423][ T4348] page last free stack trace: [ 77.172103][ T4348] free_unref_page_prepare+0x637/0x6c0 [ 77.177583][ T4348] free_unref_page+0x94/0x280 [ 77.182275][ T4348] __unfreeze_partials+0x1a5/0x200 [ 77.187390][ T4348] put_cpu_partial+0x12d/0x190 [ 77.192160][ T4348] qlist_free_all+0x35/0x90 [ 77.196666][ T4348] kasan_quarantine_reduce+0x150/0x160 [ 77.202132][ T4348] __kasan_slab_alloc+0x2f/0xd0 [ 77.206992][ T4348] slab_post_alloc_hook+0x4c/0x380 [ 77.212110][ T4348] kmem_cache_alloc+0x100/0x290 [ 77.216969][ T4348] vm_area_dup+0x1e/0xb0 [ 77.221217][ T4348] __split_vma+0xb1/0x410 [ 77.225559][ T4348] __do_munmap+0x3eb/0xdc0 [ 77.229989][ T4348] mmap_region+0x8bb/0x1660 [ 77.234508][ T4348] do_mmap+0x81f/0xea0 [ 77.238591][ T4348] vm_mmap_pgoff+0x1b2/0x2b0 [ 77.243194][ T4348] ksys_mmap_pgoff+0x542/0x780 [ 77.247971][ T4348] [ 77.250299][ T4348] Memory state around the buggy address: [ 77.255930][ T4348] ffff888070959f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.263993][ T4348] ffff88807095a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.272061][ T4348] >ffff88807095a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.280127][ T4348] ^ [ 77.284746][ T4348] ffff88807095a100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.292819][ T4348] ffff88807095a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.300878][ T4348] ================================================================== [ 77.308935][ T4348] Disabling lock debugging due to kernel taint [ 77.338333][ T4348] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.345568][ T4348] CPU: 1 PID: 4348 Comm: syz-executor Tainted: G B syzkaller #0 [ 77.354538][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.364609][ T4348] Call Trace: [ 77.367900][ T4348] [ 77.370834][ T4348] dump_stack_lvl+0x168/0x230 [ 77.375536][ T4348] ? show_regs_print_info+0x20/0x20 [ 77.380753][ T4348] ? load_image+0x3b0/0x3b0 [ 77.385287][ T4348] panic+0x2c9/0x7f0 [ 77.389198][ T4348] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 77.395431][ T4348] ? bpf_jit_dump+0xd0/0xd0 [ 77.399961][ T4348] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 77.405865][ T4348] ? _raw_spin_unlock+0x40/0x40 [ 77.410747][ T4348] ? qd_unlock+0x30/0x2d0 [ 77.415095][ T4348] check_panic_on_warn+0x80/0xa0 [ 77.420060][ T4348] ? qd_unlock+0x30/0x2d0 [ 77.424430][ T4348] end_report+0x6d/0xf0 [ 77.428601][ T4348] kasan_report+0x102/0x130 [ 77.433127][ T4348] ? qd_unlock+0x30/0x2d0 [ 77.437485][ T4348] kasan_check_range+0x27b/0x290 [ 77.442455][ T4348] qd_unlock+0x30/0x2d0 [ 77.446626][ T4348] gfs2_quota_sync+0x5bf/0x6f0 [ 77.451421][ T4348] gfs2_sync_fs+0x48/0xb0 [ 77.455777][ T4348] sync_filesystem+0xe6/0x220 [ 77.460466][ T4348] generic_shutdown_super+0x6b/0x300 [ 77.465766][ T4348] kill_block_super+0x7c/0xe0 [ 77.470464][ T4348] deactivate_locked_super+0x93/0xf0 [ 77.475772][ T4348] cleanup_mnt+0x418/0x4d0 [ 77.480211][ T4348] ? lockdep_hardirqs_on+0x94/0x140 [ 77.485432][ T4348] task_work_run+0x125/0x1a0 [ 77.490041][ T4348] exit_to_user_mode_loop+0x10f/0x130 [ 77.495440][ T4348] exit_to_user_mode_prepare+0xee/0x180 [ 77.501002][ T4348] syscall_exit_to_user_mode+0x16/0x40 [ 77.506482][ T4348] do_syscall_64+0x58/0xa0 [ 77.510926][ T4348] ? clear_bhb_loop+0x30/0x80 [ 77.515629][ T4348] ? clear_bhb_loop+0x30/0x80 [ 77.520330][ T4348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.526235][ T4348] RIP: 0033:0x7fbfa6d769f7 [ 77.530659][ T4348] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 77.550447][ T4348] RSP: 002b:00007ffe2af14608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.558875][ T4348] RAX: 0000000000000000 RBX: 00007fbfa6df7d7d RCX: 00007fbfa6d769f7 [ 77.566859][ T4348] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2af146c0 [ 77.574844][ T4348] RBP: 00007ffe2af146c0 R08: 0000000000000000 R09: 0000000000000000 [ 77.582911][ T4348] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2af15750 [ 77.590893][ T4348] R13: 00007fbfa6df7d7d R14: 0000000000012472 R15: 00007ffe2af15790 [ 77.598892][ T4348] [ 77.602254][ T4348] Kernel Offset: disabled [ 77.606600][ T4348] Rebooting in 86400 seconds..