Warning: Permanently added '10.128.1.215' (ED25519) to the list of known hosts. Setting up swapspace version 1, size = 127995904 bytes [ 63.681665][ T4180] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.778765][ T1236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.786874][ T1236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.802061][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.815439][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 63.824696][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.833295][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.043450][ T4185] loop0: detected capacity change from 0 to 32768 [ 64.092884][ T4185] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 64.106804][ T4185] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 64.125794][ T4185] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 64.136797][ T4186] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 64.144717][ T4186] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 64.191886][ T4186] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 64.200530][ T4186] gfs2: fsid=syz:syz.0: jid=0: Done [ 64.206757][ T4185] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 64.288377][ T4185] gfs2: fsid=syz:syz.0: found 1 quota changes [ 64.326045][ T4185] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 64.326045][ T4185] inode = 11 2339 [ 64.326045][ T4185] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 64.346901][ T4185] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 64.368776][ T4185] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 64.382895][ T4185] CPU: 1 PID: 4185 Comm: syz-executor365 Not tainted syzkaller #0 [ 64.390748][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.400858][ T4185] Call Trace: [ 64.404179][ T4185] [ 64.407122][ T4185] dump_stack_lvl+0x168/0x230 [ 64.411829][ T4185] ? show_regs_print_info+0x20/0x20 [ 64.417034][ T4185] ? load_image+0x3b0/0x3b0 [ 64.421540][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 64.426673][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 64.431872][ T4185] gfs2_assert_warn_i+0x18f/0x2c0 [ 64.436913][ T4185] gfs2_quota_cleanup+0x4b4/0x6a0 [ 64.441945][ T4185] gfs2_make_fs_ro+0x237/0x5d0 [ 64.446713][ T4185] ? gfs2_dinode_out+0xb00/0xb00 [ 64.451650][ T4185] ? _raw_spin_unlock+0x24/0x40 [ 64.456507][ T4185] ? gfs2_glock_nq+0xcb0/0x1550 [ 64.461379][ T4185] gfs2_withdraw+0x5f9/0x1460 [ 64.466103][ T4185] ? gfs2_lm+0x220/0x220 [ 64.470353][ T4185] ? __schedule+0x11c3/0x4390 [ 64.475068][ T4185] ? gfs2_freeze_lock+0x52/0xc0 [ 64.479966][ T4185] ? gfs2_consist_inode_i+0xc0/0xe0 [ 64.485205][ T4185] gfs2_inode_refresh+0xb5e/0xfe0 [ 64.490252][ T4185] ? do_promote+0x71a/0xab0 [ 64.494795][ T4185] ? gfs2_inode_metasync+0xf0/0xf0 [ 64.500021][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 64.505066][ T4185] inode_go_lock+0x127/0x470 [ 64.509699][ T4185] do_promote+0x741/0xab0 [ 64.514045][ T4185] finish_xmote+0x514/0xb70 [ 64.518563][ T4185] do_xmote+0x7b6/0x1120 [ 64.522822][ T4185] gfs2_glock_nq+0xc7a/0x1550 [ 64.527714][ T4185] do_sync+0x486/0xc00 [ 64.531834][ T4185] ? slot_put+0x1e0/0x1e0 [ 64.536179][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 64.541207][ T4185] ? do_raw_spin_lock+0x11d/0x280 [ 64.546236][ T4185] ? do_sync+0x47e/0xc00 [ 64.550502][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 64.555705][ T4185] gfs2_quota_sync+0x32c/0x6f0 [ 64.560498][ T4185] gfs2_sync_fs+0x48/0xb0 [ 64.564832][ T4185] sync_filesystem+0xe6/0x220 [ 64.569544][ T4185] generic_shutdown_super+0x6b/0x300 [ 64.574839][ T4185] kill_block_super+0x7c/0xe0 [ 64.579540][ T4185] deactivate_locked_super+0x93/0xf0 [ 64.584858][ T4185] cleanup_mnt+0x418/0x4d0 [ 64.589281][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 64.594483][ T4185] task_work_run+0x125/0x1a0 [ 64.599166][ T4185] do_exit+0x61e/0x20a0 [ 64.603346][ T4185] ? put_task_struct+0x80/0x80 [ 64.608115][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 64.614098][ T4185] ? lock_chain_count+0x20/0x20 [ 64.618973][ T4185] do_group_exit+0x12e/0x300 [ 64.623593][ T4185] __x64_sys_exit_group+0x3b/0x40 [ 64.628632][ T4185] do_syscall_64+0x4c/0xa0 [ 64.633182][ T4185] ? clear_bhb_loop+0x30/0x80 [ 64.637871][ T4185] ? clear_bhb_loop+0x30/0x80 [ 64.642559][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.648490][ T4185] RIP: 0033:0x7f620f0506e9 [ 64.652912][ T4185] Code: Unable to access opcode bytes at RIP 0x7f620f0506bf. [ 64.660275][ T4185] RSP: 002b:00007ffc439fc998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 64.668706][ T4185] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f620f0506e9 [ 64.676686][ T4185] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 64.684751][ T4185] RBP: 00007f620f0e6390 R08: ffffffffffffffb0 R09: 0000000000012585 [ 64.692725][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f620f0e6390 [ 64.700696][ T4185] R13: 0000000000000000 R14: 00007f620f0e8160 R15: 00007f620f013590 [ 64.708678][ T4185] [ 64.712859][ T4185] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 64.721804][ T4185] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 64.728867][ T4185] gfs2: fsid=syz:syz.0: File system withdrawn [ 64.737590][ T4185] CPU: 0 PID: 4185 Comm: syz-executor365 Not tainted syzkaller #0 [ 64.745440][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 64.755527][ T4185] Call Trace: [ 64.758829][ T4185] [ 64.761765][ T4185] dump_stack_lvl+0x168/0x230 [ 64.766445][ T4185] ? kobject_uevent_env+0x371/0x890 [ 64.771646][ T4185] ? show_regs_print_info+0x20/0x20 [ 64.776864][ T4185] ? load_image+0x3b0/0x3b0 [ 64.781378][ T4185] ? kobject_uevent_env+0x371/0x890 [ 64.786722][ T4185] ? lockref_put_or_lock+0x6e/0xb0 [ 64.791857][ T4185] gfs2_withdraw+0x111b/0x1460 [ 64.796661][ T4185] ? gfs2_lm+0x220/0x220 [ 64.800931][ T4185] ? __schedule+0x11c3/0x4390 [ 64.805656][ T4185] ? gfs2_consist_inode_i+0xc0/0xe0 [ 64.810876][ T4185] gfs2_inode_refresh+0xb5e/0xfe0 [ 64.815923][ T4185] ? do_promote+0x71a/0xab0 [ 64.820424][ T4185] ? gfs2_inode_metasync+0xf0/0xf0 [ 64.825534][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 64.830577][ T4185] inode_go_lock+0x127/0x470 [ 64.835180][ T4185] do_promote+0x741/0xab0 [ 64.839533][ T4185] finish_xmote+0x514/0xb70 [ 64.844047][ T4185] do_xmote+0x7b6/0x1120 [ 64.848306][ T4185] gfs2_glock_nq+0xc7a/0x1550 [ 64.853022][ T4185] do_sync+0x486/0xc00 [ 64.857129][ T4185] ? slot_put+0x1e0/0x1e0 [ 64.861476][ T4185] ? __lock_acquire+0x7c60/0x7c60 [ 64.866811][ T4185] ? do_raw_spin_lock+0x11d/0x280 [ 64.871881][ T4185] ? do_sync+0x47e/0xc00 [ 64.876166][ T4185] ? do_raw_spin_unlock+0x11d/0x230 [ 64.881483][ T4185] gfs2_quota_sync+0x32c/0x6f0 [ 64.886257][ T4185] gfs2_sync_fs+0x48/0xb0 [ 64.890587][ T4185] sync_filesystem+0xe6/0x220 [ 64.895273][ T4185] generic_shutdown_super+0x6b/0x300 [ 64.900570][ T4185] kill_block_super+0x7c/0xe0 [ 64.905329][ T4185] deactivate_locked_super+0x93/0xf0 [ 64.910640][ T4185] cleanup_mnt+0x418/0x4d0 [ 64.915085][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 64.920305][ T4185] task_work_run+0x125/0x1a0 [ 64.924911][ T4185] do_exit+0x61e/0x20a0 [ 64.929098][ T4185] ? put_task_struct+0x80/0x80 [ 64.933868][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 64.939865][ T4185] ? lock_chain_count+0x20/0x20 [ 64.944738][ T4185] do_group_exit+0x12e/0x300 [ 64.949511][ T4185] __x64_sys_exit_group+0x3b/0x40 [ 64.954557][ T4185] do_syscall_64+0x4c/0xa0 [ 64.959032][ T4185] ? clear_bhb_loop+0x30/0x80 [ 64.963721][ T4185] ? clear_bhb_loop+0x30/0x80 [ 64.968533][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.974447][ T4185] RIP: 0033:0x7f620f0506e9 [ 64.978875][ T4185] Code: Unable to access opcode bytes at RIP 0x7f620f0506bf. [ 64.986243][ T4185] RSP: 002b:00007ffc439fc998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 64.994850][ T4185] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f620f0506e9 [ 65.003352][ T4185] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 65.011326][ T4185] RBP: 00007f620f0e6390 R08: ffffffffffffffb0 R09: 0000000000012585 [ 65.019308][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f620f0e6390 [ 65.027282][ T4185] R13: 0000000000000000 R14: 00007f620f0e8160 R15: 00007f620f013590 [ 65.035268][ T4185] [ 65.039749][ T4185] ================================================================== [ 65.048210][ T4185] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 65.054929][ T4185] Read of size 8 at addr ffff888072398090 by task syz-executor365/4185 [ 65.063191][ T4185] [ 65.065621][ T4185] CPU: 0 PID: 4185 Comm: syz-executor365 Not tainted syzkaller #0 [ 65.073516][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.083574][ T4185] Call Trace: [ 65.086856][ T4185] [ 65.089789][ T4185] dump_stack_lvl+0x168/0x230 [ 65.094560][ T4185] ? show_regs_print_info+0x20/0x20 [ 65.099865][ T4185] ? _printk+0xcc/0x110 [ 65.104215][ T4185] ? qd_unlock+0x30/0x2d0 [ 65.108572][ T4185] ? load_image+0x3b0/0x3b0 [ 65.113093][ T4185] print_address_description+0x60/0x2d0 [ 65.118784][ T4185] ? qd_unlock+0x30/0x2d0 [ 65.123131][ T4185] kasan_report+0xdf/0x130 [ 65.127549][ T4185] ? qd_unlock+0x30/0x2d0 [ 65.131882][ T4185] kasan_check_range+0x27b/0x290 [ 65.136830][ T4185] qd_unlock+0x30/0x2d0 [ 65.141002][ T4185] gfs2_quota_sync+0x5bf/0x6f0 [ 65.145801][ T4185] gfs2_sync_fs+0x48/0xb0 [ 65.150231][ T4185] sync_filesystem+0xe6/0x220 [ 65.154906][ T4185] generic_shutdown_super+0x6b/0x300 [ 65.160190][ T4185] kill_block_super+0x7c/0xe0 [ 65.164867][ T4185] deactivate_locked_super+0x93/0xf0 [ 65.170150][ T4185] cleanup_mnt+0x418/0x4d0 [ 65.174668][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 65.179869][ T4185] task_work_run+0x125/0x1a0 [ 65.184461][ T4185] do_exit+0x61e/0x20a0 [ 65.188637][ T4185] ? put_task_struct+0x80/0x80 [ 65.193405][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 65.199390][ T4185] ? lock_chain_count+0x20/0x20 [ 65.204244][ T4185] do_group_exit+0x12e/0x300 [ 65.208856][ T4185] __x64_sys_exit_group+0x3b/0x40 [ 65.213882][ T4185] do_syscall_64+0x4c/0xa0 [ 65.218296][ T4185] ? clear_bhb_loop+0x30/0x80 [ 65.222976][ T4185] ? clear_bhb_loop+0x30/0x80 [ 65.227676][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.233580][ T4185] RIP: 0033:0x7f620f0506e9 [ 65.238002][ T4185] Code: Unable to access opcode bytes at RIP 0x7f620f0506bf. [ 65.245363][ T4185] RSP: 002b:00007ffc439fc998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 65.253928][ T4185] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f620f0506e9 [ 65.261910][ T4185] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 65.269902][ T4185] RBP: 00007f620f0e6390 R08: ffffffffffffffb0 R09: 0000000000012585 [ 65.277887][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f620f0e6390 [ 65.285872][ T4185] R13: 0000000000000000 R14: 00007f620f0e8160 R15: 00007f620f013590 [ 65.293869][ T4185] [ 65.296890][ T4185] [ 65.299211][ T4185] Allocated by task 4185: [ 65.303533][ T4185] __kasan_slab_alloc+0x9c/0xd0 [ 65.308402][ T4185] slab_post_alloc_hook+0x4c/0x380 [ 65.313510][ T4185] kmem_cache_alloc+0x100/0x290 [ 65.318361][ T4185] qd_alloc+0x50/0x260 [ 65.322427][ T4185] gfs2_quota_init+0x730/0xe80 [ 65.327188][ T4185] gfs2_make_fs_rw+0x3f5/0x560 [ 65.331948][ T4185] gfs2_fill_super+0x188a/0x1f50 [ 65.336886][ T4185] get_tree_bdev+0x3f1/0x610 [ 65.341481][ T4185] gfs2_get_tree+0x4d/0x1e0 [ 65.345986][ T4185] vfs_get_tree+0x88/0x270 [ 65.350406][ T4185] do_new_mount+0x24a/0xa40 [ 65.354924][ T4185] __se_sys_mount+0x2d6/0x3c0 [ 65.359790][ T4185] do_syscall_64+0x4c/0xa0 [ 65.364206][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.370122][ T4185] [ 65.372444][ T4185] Freed by task 0: [ 65.376252][ T4185] kasan_set_track+0x4b/0x70 [ 65.380865][ T4185] kasan_set_free_info+0x1f/0x40 [ 65.385813][ T4185] ____kasan_slab_free+0xd5/0x110 [ 65.390848][ T4185] slab_free_freelist_hook+0xea/0x170 [ 65.396238][ T4185] kmem_cache_free+0x8f/0x210 [ 65.400918][ T4185] rcu_core+0x962/0x15d0 [ 65.405159][ T4185] handle_softirqs+0x328/0x820 [ 65.409932][ T4185] __irq_exit_rcu+0x12f/0x220 [ 65.414676][ T4185] irq_exit_rcu+0x5/0x20 [ 65.418927][ T4185] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 65.424568][ T4185] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 65.430555][ T4185] [ 65.432884][ T4185] Last potentially related work creation: [ 65.438868][ T4185] kasan_save_stack+0x35/0x60 [ 65.443554][ T4185] kasan_record_aux_stack+0xb8/0x100 [ 65.448850][ T4185] call_rcu+0x182/0x930 [ 65.453006][ T4185] gfs2_quota_cleanup+0x43c/0x6a0 [ 65.458033][ T4185] gfs2_make_fs_ro+0x237/0x5d0 [ 65.462796][ T4185] gfs2_withdraw+0x5f9/0x1460 [ 65.467470][ T4185] gfs2_inode_refresh+0xb5e/0xfe0 [ 65.472492][ T4185] inode_go_lock+0x127/0x470 [ 65.477077][ T4185] do_promote+0x741/0xab0 [ 65.481401][ T4185] finish_xmote+0x514/0xb70 [ 65.485900][ T4185] do_xmote+0x7b6/0x1120 [ 65.490226][ T4185] gfs2_glock_nq+0xc7a/0x1550 [ 65.494904][ T4185] do_sync+0x486/0xc00 [ 65.498984][ T4185] gfs2_quota_sync+0x32c/0x6f0 [ 65.503745][ T4185] gfs2_sync_fs+0x48/0xb0 [ 65.508073][ T4185] sync_filesystem+0xe6/0x220 [ 65.512746][ T4185] generic_shutdown_super+0x6b/0x300 [ 65.518145][ T4185] kill_block_super+0x7c/0xe0 [ 65.523118][ T4185] deactivate_locked_super+0x93/0xf0 [ 65.528409][ T4185] cleanup_mnt+0x418/0x4d0 [ 65.532831][ T4185] task_work_run+0x125/0x1a0 [ 65.537426][ T4185] do_exit+0x61e/0x20a0 [ 65.541587][ T4185] do_group_exit+0x12e/0x300 [ 65.546182][ T4185] __x64_sys_exit_group+0x3b/0x40 [ 65.551208][ T4185] do_syscall_64+0x4c/0xa0 [ 65.555620][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.561516][ T4185] [ 65.563835][ T4185] The buggy address belongs to the object at ffff888072398000 [ 65.563835][ T4185] which belongs to the cache gfs2_quotad of size 272 [ 65.577884][ T4185] The buggy address is located 144 bytes inside of [ 65.577884][ T4185] 272-byte region [ffff888072398000, ffff888072398110) [ 65.591180][ T4185] The buggy address belongs to the page: [ 65.597013][ T4185] page:ffffea0001c8e600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72398 [ 65.607254][ T4185] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 65.614809][ T4185] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801dd4da00 [ 65.623518][ T4185] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 65.632107][ T4185] page dumped because: kasan: bad access detected [ 65.638526][ T4185] page_owner tracks the page as allocated [ 65.644244][ T4185] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x12c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 4185, ts 64279955971, free_ts 22053793894 [ 65.661867][ T4185] get_page_from_freelist+0x1b77/0x1c60 [ 65.667421][ T4185] __alloc_pages+0x1e1/0x470 [ 65.672019][ T4185] new_slab+0xc0/0x4b0 [ 65.676084][ T4185] ___slab_alloc+0x81e/0xdf0 [ 65.680668][ T4185] kmem_cache_alloc+0x195/0x290 [ 65.685513][ T4185] qd_alloc+0x50/0x260 [ 65.689580][ T4185] gfs2_quota_init+0x730/0xe80 [ 65.694350][ T4185] gfs2_make_fs_rw+0x3f5/0x560 [ 65.699130][ T4185] gfs2_fill_super+0x188a/0x1f50 [ 65.704158][ T4185] get_tree_bdev+0x3f1/0x610 [ 65.708745][ T4185] gfs2_get_tree+0x4d/0x1e0 [ 65.713241][ T4185] vfs_get_tree+0x88/0x270 [ 65.717651][ T4185] do_new_mount+0x24a/0xa40 [ 65.722149][ T4185] __se_sys_mount+0x2d6/0x3c0 [ 65.726822][ T4185] do_syscall_64+0x4c/0xa0 [ 65.731244][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.737148][ T4185] page last free stack trace: [ 65.741811][ T4185] free_unref_page_prepare+0x637/0x6c0 [ 65.747271][ T4185] free_unref_page+0x94/0x280 [ 65.751949][ T4185] free_contig_range+0x96/0xf0 [ 65.756726][ T4185] destroy_args+0x100/0xa20 [ 65.761233][ T4185] debug_vm_pgtable+0x318/0x370 [ 65.766085][ T4185] do_one_initcall+0x1ee/0x680 [ 65.770855][ T4185] do_initcall_level+0x137/0x1f0 [ 65.775795][ T4185] do_initcalls+0x4b/0x90 [ 65.780118][ T4185] kernel_init_freeable+0x3ce/0x560 [ 65.785312][ T4185] kernel_init+0x19/0x1b0 [ 65.789640][ T4185] ret_from_fork+0x1f/0x30 [ 65.791912][ T2302] Bluetooth: hci0: command 0x0409 tx timeout [ 65.794057][ T4185] [ 65.794077][ T4185] Memory state around the buggy address: [ 65.794089][ T4185] ffff888072397f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.816435][ T4185] ffff888072398000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.824526][ T4185] >ffff888072398080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.832616][ T4185] ^ [ 65.837309][ T4185] ffff888072398100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.845405][ T4185] ffff888072398180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.853467][ T4185] ================================================================== [ 65.861525][ T4185] Disabling lock debugging due to kernel taint [ 65.868169][ T4185] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.875930][ T4185] CPU: 0 PID: 4185 Comm: syz-executor365 Tainted: G B syzkaller #0 [ 65.885344][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 65.895444][ T4185] Call Trace: [ 65.898824][ T4185] [ 65.901778][ T4185] dump_stack_lvl+0x168/0x230 [ 65.906471][ T4185] ? show_regs_print_info+0x20/0x20 [ 65.911681][ T4185] ? load_image+0x3b0/0x3b0 [ 65.916201][ T4185] panic+0x2c9/0x7f0 [ 65.920125][ T4185] ? bpf_jit_dump+0xd0/0xd0 [ 65.924639][ T4185] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 65.930535][ T4185] ? _raw_spin_unlock+0x40/0x40 [ 65.935387][ T4185] ? print_memory_metadata+0x314/0x400 [ 65.940860][ T4185] ? qd_unlock+0x30/0x2d0 [ 65.945192][ T4185] check_panic_on_warn+0x80/0xa0 [ 65.950124][ T4185] ? qd_unlock+0x30/0x2d0 [ 65.954446][ T4185] end_report+0x6d/0xf0 [ 65.958699][ T4185] kasan_report+0x102/0x130 [ 65.963196][ T4185] ? qd_unlock+0x30/0x2d0 [ 65.967526][ T4185] kasan_check_range+0x27b/0x290 [ 65.972464][ T4185] qd_unlock+0x30/0x2d0 [ 65.976617][ T4185] gfs2_quota_sync+0x5bf/0x6f0 [ 65.981383][ T4185] gfs2_sync_fs+0x48/0xb0 [ 65.985710][ T4185] sync_filesystem+0xe6/0x220 [ 65.990385][ T4185] generic_shutdown_super+0x6b/0x300 [ 65.995667][ T4185] kill_block_super+0x7c/0xe0 [ 66.000437][ T4185] deactivate_locked_super+0x93/0xf0 [ 66.005724][ T4185] cleanup_mnt+0x418/0x4d0 [ 66.010141][ T4185] ? lockdep_hardirqs_on+0x94/0x140 [ 66.015336][ T4185] task_work_run+0x125/0x1a0 [ 66.019924][ T4185] do_exit+0x61e/0x20a0 [ 66.024081][ T4185] ? put_task_struct+0x80/0x80 [ 66.028842][ T4185] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 66.034823][ T4185] ? lock_chain_count+0x20/0x20 [ 66.039669][ T4185] do_group_exit+0x12e/0x300 [ 66.044261][ T4185] __x64_sys_exit_group+0x3b/0x40 [ 66.049283][ T4185] do_syscall_64+0x4c/0xa0 [ 66.053693][ T4185] ? clear_bhb_loop+0x30/0x80 [ 66.058370][ T4185] ? clear_bhb_loop+0x30/0x80 [ 66.063045][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.068947][ T4185] RIP: 0033:0x7f620f0506e9 [ 66.073357][ T4185] Code: Unable to access opcode bytes at RIP 0x7f620f0506bf. [ 66.080720][ T4185] RSP: 002b:00007ffc439fc998 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 66.089216][ T4185] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f620f0506e9 [ 66.097184][ T4185] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 66.105154][ T4185] RBP: 00007f620f0e6390 R08: ffffffffffffffb0 R09: 0000000000012585 [ 66.113128][ T4185] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f620f0e6390 [ 66.121268][ T4185] R13: 0000000000000000 R14: 00007f620f0e8160 R15: 00007f620f013590 [ 66.129244][ T4185] [ 66.132479][ T4185] Kernel Offset: disabled [ 66.136824][ T4185] Rebooting in 86400 seconds..