Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. 2025/12/23 11:41:09 parsed 1 programs [ 69.695004][ T4188] cgroup: Unknown subsys name 'net' [ 69.800972][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.255121][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.261651][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.274334][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.712014][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.720025][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.730862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.751906][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.759845][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.768468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.247267][ T4273] chnl_net:caif_netlink_parms(): no params data found [ 75.312185][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.319397][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.327839][ T4273] device bridge_slave_0 entered promiscuous mode [ 75.337534][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.344915][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.353459][ T4273] device bridge_slave_1 entered promiscuous mode [ 75.377520][ T4273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.405486][ T4273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.430007][ T4273] team0: Port device team_slave_0 added [ 75.438007][ T4273] team0: Port device team_slave_1 added [ 75.473062][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.480029][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.506585][ T4273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.519506][ T4273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.526820][ T4273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.554511][ T4273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.602055][ T4273] device hsr_slave_0 entered promiscuous mode [ 75.609321][ T4273] device hsr_slave_1 entered promiscuous mode [ 75.737443][ T4273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.749524][ T4273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.759255][ T4273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.770322][ T4273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.859948][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.875569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.887240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.902920][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.914597][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.924616][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.934105][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.941550][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.953916][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.973853][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.982803][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.992763][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.999840][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.025561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.034906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.045924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.056788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.067115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.077485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.096910][ T4273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.108495][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.120638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.132093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.140527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.150614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.159512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.173977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.288603][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.306318][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.324169][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.345221][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.355276][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.377061][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.386490][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.400392][ T4273] device veth0_vlan entered promiscuous mode [ 76.408205][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.417769][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.434444][ T4273] device veth1_vlan entered promiscuous mode [ 76.457978][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.467291][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.476605][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.485470][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.496262][ T4273] device veth0_macvtap entered promiscuous mode [ 76.507915][ T4273] device veth1_macvtap entered promiscuous mode [ 76.527223][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.536259][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.545264][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.553422][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.562714][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.575566][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.583880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.594579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.606249][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.615992][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.628192][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.637691][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.784706][ T4273] syz-executor (4273) used greatest stack depth: 21120 bytes left 2025/12/23 11:41:19 executed programs: 0 [ 77.512174][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 77.562253][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.569425][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.577782][ T4295] device bridge_slave_0 entered promiscuous mode [ 77.586267][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.593387][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.604971][ T4295] device bridge_slave_1 entered promiscuous mode [ 77.625510][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.649366][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.660813][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.686361][ T4295] team0: Port device team_slave_0 added [ 77.693843][ T4295] team0: Port device team_slave_1 added [ 77.712854][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.719819][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.746865][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.760365][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.767984][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.794136][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.832800][ T4295] device hsr_slave_0 entered promiscuous mode [ 77.839655][ T4295] device hsr_slave_1 entered promiscuous mode [ 77.846435][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.854316][ T4295] Cannot create hsr debugfs directory [ 79.412092][ T2301] Bluetooth: hci0: command 0x0409 tx timeout [ 80.058388][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.511222][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 81.808642][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.900081][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.828916][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.838131][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.848218][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.859417][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.945890][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.972971][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.981691][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.992049][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.003826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.012736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.022292][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.029449][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.037834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.065426][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.074850][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.084105][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.091268][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.105806][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.114517][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.128711][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.138670][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.162878][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.173929][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.182717][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.192313][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.200711][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.209436][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.217979][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.236331][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.294359][ T144] device hsr_slave_0 left promiscuous mode [ 83.300939][ T144] device hsr_slave_1 left promiscuous mode [ 83.308767][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.316285][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.324740][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.332393][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.339999][ T144] device bridge_slave_1 left promiscuous mode [ 83.347716][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.360492][ T144] device bridge_slave_0 left promiscuous mode [ 83.366816][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.384868][ T144] device veth1_macvtap left promiscuous mode [ 83.391379][ T144] device veth0_macvtap left promiscuous mode [ 83.397457][ T144] device veth1_vlan left promiscuous mode [ 83.404119][ T144] device veth0_vlan left promiscuous mode [ 83.557840][ T144] team0 (unregistering): Port device team_slave_1 removed [ 83.570489][ T144] team0 (unregistering): Port device team_slave_0 removed [ 83.577839][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 83.597072][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.610858][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.669208][ T144] bond0 (unregistering): Released all slaves [ 83.778391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.788179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.804253][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.836493][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.845773][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.858530][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.866792][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.875629][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.883509][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.893781][ T4295] device veth0_vlan entered promiscuous mode [ 83.909666][ T4295] device veth1_vlan entered promiscuous mode [ 83.934879][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.943319][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.951769][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.960210][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.971230][ T4295] device veth0_macvtap entered promiscuous mode [ 83.983685][ T4295] device veth1_macvtap entered promiscuous mode [ 83.998640][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.009142][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.020954][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.029139][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.038915][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.049940][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.058408][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.067672][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.078871][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.088094][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.097180][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.105975][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.157478][ T1216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.174210][ T1216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.188255][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.190014][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/12/23 11:41:26 executed programs: 2 [ 84.209857][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.222233][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.609076][ T4357] loop0: detected capacity change from 0 to 32768 [ 84.799325][ T4357] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 84.809050][ T4357] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 84.856721][ T4357] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 84.882381][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 84.889877][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 84.925205][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 35ms [ 84.936900][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 84.943397][ T4357] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 85.099912][ T4357] gfs2: fsid=syz:syz.0: found 1 quota changes [ 85.117653][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 85.117653][ T4295] inode = 11 2339 [ 85.117653][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 85.139924][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 85.161596][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 85.192326][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 85.199934][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.210034][ T4295] Call Trace: [ 85.213336][ T4295] [ 85.216289][ T4295] dump_stack_lvl+0x168/0x230 [ 85.221017][ T4295] ? show_regs_print_info+0x20/0x20 [ 85.226248][ T4295] ? load_image+0x3b0/0x3b0 [ 85.230783][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 85.235841][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 85.241069][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 85.246130][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 85.251194][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 85.255989][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 85.260980][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 85.265861][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 85.270750][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 85.275470][ T4295] ? gfs2_lm+0x220/0x220 [ 85.279727][ T4295] ? __schedule+0x11c3/0x4390 [ 85.284428][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 85.289303][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 85.294529][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 85.299606][ T4295] ? do_promote+0x71a/0xab0 [ 85.304133][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 85.309282][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 85.314361][ T4295] inode_go_lock+0x127/0x470 [ 85.318985][ T4295] do_promote+0x741/0xab0 [ 85.323349][ T4295] finish_xmote+0x514/0xb70 [ 85.327884][ T4295] do_xmote+0x7b6/0x1120 [ 85.332164][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 85.336902][ T4295] do_sync+0x486/0xc00 [ 85.341011][ T4295] ? slot_put+0x1e0/0x1e0 [ 85.345373][ T4295] ? do_sync+0x47e/0xc00 [ 85.349644][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 85.355013][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 85.360025][ T4295] gfs2_sync_fs+0x48/0xb0 [ 85.364429][ T4295] sync_filesystem+0xe6/0x220 [ 85.369156][ T4295] generic_shutdown_super+0x6b/0x300 [ 85.374501][ T4295] kill_block_super+0x7c/0xe0 [ 85.379340][ T4295] deactivate_locked_super+0x93/0xf0 [ 85.384662][ T4295] cleanup_mnt+0x418/0x4d0 [ 85.389113][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 85.394347][ T4295] task_work_run+0x125/0x1a0 [ 85.398974][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 85.404385][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 85.409968][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 85.415471][ T4295] do_syscall_64+0x58/0xa0 [ 85.419910][ T4295] ? clear_bhb_loop+0x30/0x80 [ 85.424608][ T4295] ? clear_bhb_loop+0x30/0x80 [ 85.429311][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.435245][ T4295] RIP: 0033:0x7ff93b2d2a77 [ 85.439686][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 85.459370][ T4295] RSP: 002b:00007ffeea782b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.467815][ T4295] RAX: 0000000000000000 RBX: 00007ff93b355d7d RCX: 00007ff93b2d2a77 [ 85.476021][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeea782be0 [ 85.484022][ T4295] RBP: 00007ffeea782be0 R08: 0000000000000000 R09: 0000000000000000 [ 85.492192][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeea783c70 [ 85.500192][ T4295] R13: 00007ff93b355d7d R14: 00000000000148fe R15: 00007ffeea783cb0 [ 85.508247][ T4295] [ 85.522669][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 85.532817][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 85.541675][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 85.548043][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 85.555881][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.566201][ T4295] Call Trace: [ 85.569513][ T4295] [ 85.572467][ T4295] dump_stack_lvl+0x168/0x230 [ 85.577288][ T4295] ? kobject_uevent_env+0x371/0x890 [ 85.582533][ T4295] ? show_regs_print_info+0x20/0x20 [ 85.587785][ T4295] ? load_image+0x3b0/0x3b0 [ 85.592337][ T4295] ? kobject_uevent_env+0x371/0x890 [ 85.597567][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 85.602732][ T4295] gfs2_withdraw+0x111b/0x1460 [ 85.607551][ T4295] ? gfs2_lm+0x220/0x220 [ 85.611828][ T4295] ? __schedule+0x11c3/0x4390 [ 85.616544][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 85.621808][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 85.626866][ T4295] ? do_promote+0x71a/0xab0 [ 85.631387][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 85.636521][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 85.641572][ T4295] inode_go_lock+0x127/0x470 [ 85.646202][ T4295] do_promote+0x741/0xab0 [ 85.650695][ T4295] finish_xmote+0x514/0xb70 [ 85.655243][ T4295] do_xmote+0x7b6/0x1120 [ 85.659533][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 85.664248][ T4295] do_sync+0x486/0xc00 [ 85.668497][ T4295] ? slot_put+0x1e0/0x1e0 [ 85.672870][ T4295] ? do_sync+0x47e/0xc00 [ 85.677155][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 85.682383][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 85.687203][ T4295] gfs2_sync_fs+0x48/0xb0 [ 85.691556][ T4295] sync_filesystem+0xe6/0x220 [ 85.696257][ T4295] generic_shutdown_super+0x6b/0x300 [ 85.701590][ T4295] kill_block_super+0x7c/0xe0 [ 85.706297][ T4295] deactivate_locked_super+0x93/0xf0 [ 85.711601][ T4295] cleanup_mnt+0x418/0x4d0 [ 85.716059][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 85.721286][ T4295] task_work_run+0x125/0x1a0 [ 85.725899][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 85.731411][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 85.736997][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 85.742495][ T4295] do_syscall_64+0x58/0xa0 [ 85.746933][ T4295] ? clear_bhb_loop+0x30/0x80 [ 85.751630][ T4295] ? clear_bhb_loop+0x30/0x80 [ 85.756339][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.762258][ T4295] RIP: 0033:0x7ff93b2d2a77 [ 85.766706][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 85.786340][ T4295] RSP: 002b:00007ffeea782b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.794779][ T4295] RAX: 0000000000000000 RBX: 00007ff93b355d7d RCX: 00007ff93b2d2a77 [ 85.802770][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeea782be0 [ 85.810758][ T4295] RBP: 00007ffeea782be0 R08: 0000000000000000 R09: 0000000000000000 [ 85.818901][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeea783c70 [ 85.826903][ T4295] R13: 00007ff93b355d7d R14: 00000000000148fe R15: 00007ffeea783cb0 [ 85.834917][ T4295] [ 85.842242][ T4322] Bluetooth: hci0: command 0x0419 tx timeout [ 85.854746][ T4295] ================================================================== [ 85.863436][ T4295] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 85.870163][ T4295] Read of size 8 at addr ffff88806ff30090 by task syz-executor/4295 [ 85.878357][ T4295] [ 85.880707][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 85.888279][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.898361][ T4295] Call Trace: [ 85.901702][ T4295] [ 85.904660][ T4295] dump_stack_lvl+0x168/0x230 [ 85.909376][ T4295] ? show_regs_print_info+0x20/0x20 [ 85.914591][ T4295] ? _printk+0xcc/0x110 [ 85.918778][ T4295] ? load_image+0x3b0/0x3b0 [ 85.923307][ T4295] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 85.928724][ T4295] print_address_description+0x60/0x2d0 [ 85.934305][ T4295] ? qd_unlock+0x30/0x2d0 [ 85.938769][ T4295] kasan_report+0xdf/0x130 [ 85.943233][ T4295] ? qd_unlock+0x30/0x2d0 [ 85.947609][ T4295] kasan_check_range+0x27b/0x290 [ 85.952587][ T4295] qd_unlock+0x30/0x2d0 [ 85.956787][ T4295] gfs2_quota_sync+0x5bf/0x6f0 [ 85.961609][ T4295] gfs2_sync_fs+0x48/0xb0 [ 85.965986][ T4295] sync_filesystem+0xe6/0x220 [ 85.970711][ T4295] generic_shutdown_super+0x6b/0x300 [ 85.976059][ T4295] kill_block_super+0x7c/0xe0 [ 85.980779][ T4295] deactivate_locked_super+0x93/0xf0 [ 85.986096][ T4295] cleanup_mnt+0x418/0x4d0 [ 85.990572][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 85.995815][ T4295] task_work_run+0x125/0x1a0 [ 86.000448][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 86.005858][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 86.011448][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 86.016940][ T4295] do_syscall_64+0x58/0xa0 [ 86.021393][ T4295] ? clear_bhb_loop+0x30/0x80 [ 86.026119][ T4295] ? clear_bhb_loop+0x30/0x80 [ 86.030822][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.036915][ T4295] RIP: 0033:0x7ff93b2d2a77 [ 86.041376][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 86.061105][ T4295] RSP: 002b:00007ffeea782b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.069561][ T4295] RAX: 0000000000000000 RBX: 00007ff93b355d7d RCX: 00007ff93b2d2a77 [ 86.077557][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeea782be0 [ 86.085555][ T4295] RBP: 00007ffeea782be0 R08: 0000000000000000 R09: 0000000000000000 [ 86.093558][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeea783c70 [ 86.101560][ T4295] R13: 00007ff93b355d7d R14: 00000000000148fe R15: 00007ffeea783cb0 [ 86.109577][ T4295] [ 86.112614][ T4295] [ 86.114965][ T4295] Allocated by task 4357: [ 86.119314][ T4295] __kasan_slab_alloc+0x9c/0xd0 [ 86.124196][ T4295] slab_post_alloc_hook+0x4c/0x380 [ 86.129415][ T4295] kmem_cache_alloc+0x100/0x290 [ 86.134281][ T4295] qd_alloc+0x50/0x260 [ 86.138370][ T4295] gfs2_quota_init+0x730/0xe80 [ 86.143160][ T4295] gfs2_make_fs_rw+0x3f5/0x560 [ 86.147965][ T4295] gfs2_fill_super+0x188a/0x1f50 [ 86.152943][ T4295] get_tree_bdev+0x3f1/0x610 [ 86.157574][ T4295] gfs2_get_tree+0x4d/0x1e0 [ 86.162151][ T4295] vfs_get_tree+0x88/0x270 [ 86.166600][ T4295] do_new_mount+0x24a/0xa40 [ 86.171127][ T4295] __se_sys_mount+0x2d6/0x3c0 [ 86.175825][ T4295] do_syscall_64+0x4c/0xa0 [ 86.180277][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.186200][ T4295] [ 86.188547][ T4295] Freed by task 14: [ 86.192364][ T4295] kasan_set_track+0x4b/0x70 [ 86.196984][ T4295] kasan_set_free_info+0x1f/0x40 [ 86.201950][ T4295] ____kasan_slab_free+0xd5/0x110 [ 86.206995][ T4295] slab_free_freelist_hook+0xea/0x170 [ 86.212392][ T4295] kmem_cache_free+0x8f/0x210 [ 86.217101][ T4295] rcu_core+0x962/0x15d0 [ 86.221375][ T4295] handle_softirqs+0x328/0x820 [ 86.226140][ T4295] run_ksoftirqd+0x98/0xf0 [ 86.230550][ T4295] smpboot_thread_fn+0x4f6/0x970 [ 86.235483][ T4295] kthread+0x436/0x520 [ 86.239712][ T4295] ret_from_fork+0x1f/0x30 [ 86.244407][ T4295] [ 86.246744][ T4295] Last potentially related work creation: [ 86.252466][ T4295] kasan_save_stack+0x35/0x60 [ 86.257211][ T4295] kasan_record_aux_stack+0xb8/0x100 [ 86.262514][ T4295] call_rcu+0x182/0x930 [ 86.266675][ T4295] gfs2_quota_cleanup+0x43c/0x6a0 [ 86.271717][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 86.276506][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 86.281197][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 86.286263][ T4295] inode_go_lock+0x127/0x470 [ 86.290858][ T4295] do_promote+0x741/0xab0 [ 86.295195][ T4295] finish_xmote+0x514/0xb70 [ 86.299709][ T4295] do_xmote+0x7b6/0x1120 [ 86.303953][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 86.308635][ T4295] do_sync+0x486/0xc00 [ 86.312715][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 86.317518][ T4295] gfs2_sync_fs+0x48/0xb0 [ 86.321866][ T4295] sync_filesystem+0xe6/0x220 [ 86.326567][ T4295] generic_shutdown_super+0x6b/0x300 [ 86.331869][ T4295] kill_block_super+0x7c/0xe0 [ 86.336571][ T4295] deactivate_locked_super+0x93/0xf0 [ 86.341864][ T4295] cleanup_mnt+0x418/0x4d0 [ 86.346290][ T4295] task_work_run+0x125/0x1a0 [ 86.350888][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 86.356276][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 86.361856][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 86.367323][ T4295] do_syscall_64+0x58/0xa0 [ 86.371754][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.377675][ T4295] [ 86.380109][ T4295] The buggy address belongs to the object at ffff88806ff30000 [ 86.380109][ T4295] which belongs to the cache gfs2_quotad of size 272 [ 86.394171][ T4295] The buggy address is located 144 bytes inside of [ 86.394171][ T4295] 272-byte region [ffff88806ff30000, ffff88806ff30110) [ 86.407493][ T4295] The buggy address belongs to the page: [ 86.413139][ T4295] page:ffffea0001bfcc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6ff30 [ 86.423310][ T4295] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 86.430864][ T4295] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801d94fdc0 [ 86.439475][ T4295] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 86.448057][ T4295] page dumped because: kasan: bad access detected [ 86.454482][ T4295] page_owner tracks the page as allocated [ 86.460215][ T4295] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4357, ts 85083926395, free_ts 21663588066 [ 86.479241][ T4295] get_page_from_freelist+0x1b77/0x1c60 [ 86.484800][ T4295] __alloc_pages+0x1e1/0x470 [ 86.489394][ T4295] new_slab+0xc0/0x4b0 [ 86.493469][ T4295] ___slab_alloc+0x81e/0xdf0 [ 86.498078][ T4295] kmem_cache_alloc+0x195/0x290 [ 86.503061][ T4295] qd_alloc+0x50/0x260 [ 86.507350][ T4295] gfs2_quota_init+0x730/0xe80 [ 86.512131][ T4295] gfs2_make_fs_rw+0x3f5/0x560 [ 86.516922][ T4295] gfs2_fill_super+0x188a/0x1f50 [ 86.521866][ T4295] get_tree_bdev+0x3f1/0x610 [ 86.526468][ T4295] gfs2_get_tree+0x4d/0x1e0 [ 86.530987][ T4295] vfs_get_tree+0x88/0x270 [ 86.535411][ T4295] do_new_mount+0x24a/0xa40 [ 86.540034][ T4295] __se_sys_mount+0x2d6/0x3c0 [ 86.544727][ T4295] do_syscall_64+0x4c/0xa0 [ 86.549250][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.555166][ T4295] page last free stack trace: [ 86.559845][ T4295] free_unref_page_prepare+0x637/0x6c0 [ 86.565333][ T4295] free_unref_page+0x94/0x280 [ 86.570141][ T4295] free_contig_range+0x96/0xf0 [ 86.574949][ T4295] destroy_args+0x100/0xa20 [ 86.579685][ T4295] debug_vm_pgtable+0x318/0x370 [ 86.584576][ T4295] do_one_initcall+0x1ee/0x680 [ 86.589355][ T4295] do_initcall_level+0x137/0x1f0 [ 86.594310][ T4295] do_initcalls+0x4b/0x90 [ 86.598669][ T4295] kernel_init_freeable+0x3ce/0x560 [ 86.603872][ T4295] kernel_init+0x19/0x1b0 [ 86.608213][ T4295] ret_from_fork+0x1f/0x30 [ 86.612645][ T4295] [ 86.614994][ T4295] Memory state around the buggy address: [ 86.620637][ T4295] ffff88806ff2ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.628897][ T4295] ffff88806ff30000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.637002][ T4295] >ffff88806ff30080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.645364][ T4295] ^ [ 86.649962][ T4295] ffff88806ff30100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.658031][ T4295] ffff88806ff30180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.666092][ T4295] ================================================================== [ 86.674170][ T4295] Disabling lock debugging due to kernel taint [ 86.681306][ T4295] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.681847][ T23] cfg80211: failed to load regulatory.db [ 86.688545][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Tainted: G B syzkaller #0 [ 86.703126][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.713197][ T4295] Call Trace: [ 86.716488][ T4295] [ 86.719439][ T4295] dump_stack_lvl+0x168/0x230 [ 86.724135][ T4295] ? show_regs_print_info+0x20/0x20 [ 86.729345][ T4295] ? load_image+0x3b0/0x3b0 [ 86.733865][ T4295] panic+0x2c9/0x7f0 [ 86.737776][ T4295] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 86.743958][ T4295] ? bpf_jit_dump+0xd0/0xd0 [ 86.748501][ T4295] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 86.754428][ T4295] ? _raw_spin_unlock+0x40/0x40 [ 86.759568][ T4295] ? qd_unlock+0x30/0x2d0 [ 86.763925][ T4295] check_panic_on_warn+0x80/0xa0 [ 86.768891][ T4295] ? qd_unlock+0x30/0x2d0 [ 86.773266][ T4295] end_report+0x6d/0xf0 [ 86.777443][ T4295] kasan_report+0x102/0x130 [ 86.781965][ T4295] ? qd_unlock+0x30/0x2d0 [ 86.786322][ T4295] kasan_check_range+0x27b/0x290 [ 86.791283][ T4295] qd_unlock+0x30/0x2d0 [ 86.795455][ T4295] gfs2_quota_sync+0x5bf/0x6f0 [ 86.800232][ T4295] gfs2_sync_fs+0x48/0xb0 [ 86.804572][ T4295] sync_filesystem+0xe6/0x220 [ 86.809263][ T4295] generic_shutdown_super+0x6b/0x300 [ 86.814557][ T4295] kill_block_super+0x7c/0xe0 [ 86.819253][ T4295] deactivate_locked_super+0x93/0xf0 [ 86.824550][ T4295] cleanup_mnt+0x418/0x4d0 [ 86.828979][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 86.834195][ T4295] task_work_run+0x125/0x1a0 [ 86.838806][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 86.844185][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 86.849852][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 86.855322][ T4295] do_syscall_64+0x58/0xa0 [ 86.859752][ T4295] ? clear_bhb_loop+0x30/0x80 [ 86.864450][ T4295] ? clear_bhb_loop+0x30/0x80 [ 86.869145][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.875118][ T4295] RIP: 0033:0x7ff93b2d2a77 [ 86.879554][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 86.899187][ T4295] RSP: 002b:00007ffeea782b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.907632][ T4295] RAX: 0000000000000000 RBX: 00007ff93b355d7d RCX: 00007ff93b2d2a77 [ 86.915624][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeea782be0 [ 86.923602][ T4295] RBP: 00007ffeea782be0 R08: 0000000000000000 R09: 0000000000000000 [ 86.931589][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeea783c70 [ 86.939573][ T4295] R13: 00007ff93b355d7d R14: 00000000000148fe R15: 00007ffeea783cb0 [ 86.947568][ T4295] [ 86.950902][ T4295] Kernel Offset: disabled [ 86.955249][ T4295] Rebooting in 86400 seconds..