no interfaces have a carrier [ 38.087539][ T3853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.103394][ T3853] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. 2026/04/20 06:38:36 parsed 1 programs syzkaller login: [ 66.662264][ T4188] cgroup: Unknown subsys name 'net' [ 66.795560][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.305530][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.513424][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.520917][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.530462][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.539149][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.553214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.582025][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.591651][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.600897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.938938][ T496] ODEBUG: Out of memory. ODEBUG disabled [ 72.438214][ T4280] chnl_net:caif_netlink_parms(): no params data found [ 72.482479][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.490489][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.498610][ T4280] device bridge_slave_0 entered promiscuous mode [ 72.508618][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.516139][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.525424][ T4280] device bridge_slave_1 entered promiscuous mode [ 72.547573][ T4280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.559321][ T4280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.580363][ T4280] team0: Port device team_slave_0 added [ 72.588087][ T4280] team0: Port device team_slave_1 added [ 72.604689][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.612479][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.643210][ T4280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.657769][ T4280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.665449][ T4280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.693620][ T4280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.722867][ T4280] device hsr_slave_0 entered promiscuous mode [ 72.731037][ T4280] device hsr_slave_1 entered promiscuous mode [ 72.833904][ T4280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.844516][ T4280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.853826][ T4280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.865827][ T4280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.931911][ T4280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.964289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 72.975690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.985138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.995899][ T4280] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.025346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.037058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.048655][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.057247][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.067337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.110978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.122196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.133150][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.141361][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.150638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.161005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.172997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.186424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.200116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.232545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.244984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.256092][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.351719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.360819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.375096][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.407913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.428131][ T4280] device veth0_vlan entered promiscuous mode [ 73.437356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.447235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.456841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.471766][ T4280] device veth1_vlan entered promiscuous mode [ 73.506638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.517398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.527182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.541028][ T4280] device veth0_macvtap entered promiscuous mode [ 73.553152][ T4280] device veth1_macvtap entered promiscuous mode [ 73.562759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.595107][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.604371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.614822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.629684][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.641526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.652474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.675306][ T4280] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.685582][ T4280] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.696885][ T4280] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.707415][ T4280] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.832799][ T4280] syz-executor (4280) used greatest stack depth: 20272 bytes left 2026/04/20 06:38:45 executed programs: 0 [ 74.665011][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 74.728542][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.737433][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.747638][ T4298] device bridge_slave_0 entered promiscuous mode [ 74.758150][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.767167][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.777208][ T4298] device bridge_slave_1 entered promiscuous mode [ 74.815613][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.831807][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.863958][ T4298] team0: Port device team_slave_0 added [ 74.877187][ T4298] team0: Port device team_slave_1 added [ 74.904240][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.913225][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.944515][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.965587][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.973739][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.005082][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.046700][ T4298] device hsr_slave_0 entered promiscuous mode [ 75.054612][ T4298] device hsr_slave_1 entered promiscuous mode [ 75.064699][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.074249][ T4298] Cannot create hsr debugfs directory [ 75.164908][ T4298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.550690][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 78.545787][ T4298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.629920][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 79.004208][ T4298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.087045][ T4298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.178455][ T4298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.188114][ T4298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.202468][ T4298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.212736][ T4298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.264843][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.277975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.286014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.304720][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.315093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.324812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.333966][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.341543][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.353551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.362046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.371476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.380650][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.388266][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.408850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.423180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.436082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.446114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.455154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.474327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.485397][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.496068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.505301][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.525541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.534808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.547577][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.565693][ T496] device hsr_slave_0 left promiscuous mode [ 79.573522][ T496] device hsr_slave_1 left promiscuous mode [ 79.583771][ T496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.592573][ T496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.604885][ T496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.613061][ T496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.621247][ T496] device bridge_slave_1 left promiscuous mode [ 79.629601][ T496] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.643740][ T496] device bridge_slave_0 left promiscuous mode [ 79.650644][ T496] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.665996][ T496] device veth1_macvtap left promiscuous mode [ 79.673105][ T496] device veth0_macvtap left promiscuous mode [ 79.680062][ T496] device veth1_vlan left promiscuous mode [ 79.686414][ T496] device veth0_vlan left promiscuous mode [ 79.816167][ T496] team0 (unregistering): Port device team_slave_1 removed [ 79.828985][ T496] team0 (unregistering): Port device team_slave_0 removed [ 79.843663][ T496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.857385][ T496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.905692][ T496] bond0 (unregistering): Released all slaves [ 80.026289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.035703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.048644][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.067548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.077406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.095549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.104597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.117667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.127214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.137634][ T4298] device veth0_vlan entered promiscuous mode [ 80.154847][ T4298] device veth1_vlan entered promiscuous mode [ 80.178530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.187382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.196370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.205647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.219115][ T4298] device veth0_macvtap entered promiscuous mode [ 80.234572][ T4298] device veth1_macvtap entered promiscuous mode [ 80.249757][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.257661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.266437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.275305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.283948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.296965][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.307751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.316682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.327278][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.336454][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.346168][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.355469][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.431273][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.445670][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.464002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/04/20 06:38:51 executed programs: 2 [ 80.480175][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.488561][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.498239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.709473][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 80.909544][ T4310] loop0: detected capacity change from 0 to 32768 [ 81.024458][ T4310] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 81.058730][ T4310] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 81.114699][ T4310] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 81.129104][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 81.142944][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 81.190637][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 81.210738][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 81.217609][ T4310] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 81.338786][ T4310] gfs2: fsid=syz:syz.0: found 1 quota changes [ 81.371094][ T4298] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 81.371094][ T4298] inode = 11 2339 [ 81.371094][ T4298] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 81.404985][ T4298] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 81.424492][ T4298] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 81.443628][ T4298] CPU: 0 PID: 4298 Comm: syz-executor Not tainted syzkaller #0 [ 81.451240][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 81.461944][ T4298] Call Trace: [ 81.465390][ T4298] [ 81.468499][ T4298] dump_stack_lvl+0x188/0x250 [ 81.473501][ T4298] ? show_regs_print_info+0x20/0x20 [ 81.479182][ T4298] ? load_image+0x400/0x400 [ 81.484313][ T4298] ? do_raw_spin_unlock+0x11d/0x230 [ 81.489817][ T4298] gfs2_assert_warn_i+0x18f/0x2c0 [ 81.495522][ T4298] gfs2_quota_cleanup+0x4b4/0x6a0 [ 81.501103][ T4298] gfs2_make_fs_ro+0x440/0x620 [ 81.506071][ T4298] ? __might_sleep+0xf0/0xf0 [ 81.511116][ T4298] ? gfs2_dinode_out+0xb00/0xb00 [ 81.516419][ T4298] ? _raw_spin_unlock+0x24/0x40 [ 81.529310][ T4298] ? gfs2_glock_nq+0xcb0/0x1550 [ 81.534621][ T4298] gfs2_withdraw+0x610/0x1490 [ 81.539730][ T4298] ? gfs2_lm+0x240/0x240 [ 81.544248][ T4298] ? __schedule+0x11f7/0x43c0 [ 81.549280][ T4298] ? gfs2_freeze_lock+0x52/0xc0 [ 81.554451][ T4298] ? gfs2_consist_inode_i+0xc0/0xe0 [ 81.559772][ T4298] gfs2_inode_refresh+0xb64/0xff0 [ 81.565573][ T4298] ? do_promote+0x71a/0xab0 [ 81.570394][ T4298] ? gfs2_inode_metasync+0xf0/0xf0 [ 81.575623][ T4298] ? __lock_acquire+0x7d10/0x7d10 [ 81.581039][ T4298] inode_go_lock+0x127/0x470 [ 81.585812][ T4298] do_promote+0x741/0xab0 [ 81.590268][ T4298] finish_xmote+0x4df/0xb00 [ 81.595669][ T4298] do_xmote+0x7b6/0x1120 [ 81.599928][ T4298] gfs2_glock_nq+0xc7a/0x1550 [ 81.604643][ T4298] do_sync+0x4ab/0xc40 [ 81.608911][ T4298] ? slot_put+0x1e0/0x1e0 [ 81.613509][ T4298] ? __lock_acquire+0x7d10/0x7d10 [ 81.618801][ T4298] ? do_raw_spin_lock+0x128/0x2f0 [ 81.623834][ T4298] ? do_sync+0x4a3/0xc40 [ 81.628756][ T4298] ? do_raw_spin_unlock+0x11d/0x230 [ 81.634922][ T4298] gfs2_quota_sync+0x32c/0x700 [ 81.640174][ T4298] gfs2_sync_fs+0x48/0xb0 [ 81.645046][ T4298] sync_filesystem+0xe6/0x220 [ 81.650282][ T4298] generic_shutdown_super+0x6b/0x300 [ 81.656115][ T4298] kill_block_super+0x7c/0xe0 [ 81.661414][ T4298] deactivate_locked_super+0x93/0xf0 [ 81.667011][ T4298] cleanup_mnt+0x42d/0x4e0 [ 81.671925][ T4298] ? lockdep_hardirqs_on+0x94/0x140 [ 81.677746][ T4298] task_work_run+0x125/0x1a0 [ 81.683770][ T4298] exit_to_user_mode_loop+0x10f/0x130 [ 81.689798][ T4298] exit_to_user_mode_prepare+0xee/0x180 [ 81.696218][ T4298] syscall_exit_to_user_mode+0x16/0x40 [ 81.702048][ T4298] do_syscall_64+0x58/0xa0 [ 81.706658][ T4298] ? clear_bhb_loop+0x30/0x80 [ 81.712099][ T4298] ? clear_bhb_loop+0x30/0x80 [ 81.717229][ T4298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.723132][ T4298] RIP: 0033:0x7fc769f27a57 [ 81.727794][ T4298] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 81.748996][ T4298] RSP: 002b:00007ffeb1de9b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.757599][ T4298] RAX: 0000000000000000 RBX: 00007fc769fbc048 RCX: 00007fc769f27a57 [ 81.766099][ T4298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb1de9c40 [ 81.774343][ T4298] RBP: 00007ffeb1de9c40 R08: 00007ffeb1deac40 R09: 00000000ffffffff [ 81.782855][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb1deacd0 [ 81.791060][ T4298] R13: 00007fc769fbc048 R14: 0000000000013a71 R15: 00007ffeb1dead10 [ 81.799554][ T4298] [ 81.805382][ T1111] cfg80211: failed to load regulatory.db [ 81.820122][ T4298] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 81.839619][ T4298] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 81.848988][ T4298] gfs2: fsid=syz:syz.0: File system withdrawn [ 81.861344][ T4298] CPU: 1 PID: 4298 Comm: syz-executor Not tainted syzkaller #0 [ 81.870536][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 81.881497][ T4298] Call Trace: [ 81.885072][ T4298] [ 81.888161][ T4298] dump_stack_lvl+0x188/0x250 [ 81.893337][ T4298] ? kobject_uevent_env+0x371/0x890 [ 81.898741][ T4298] ? show_regs_print_info+0x20/0x20 [ 81.904508][ T4298] ? load_image+0x400/0x400 [ 81.909524][ T4298] ? kobject_uevent_env+0x371/0x890 [ 81.914922][ T4298] ? lockref_put_or_lock+0x6e/0xb0 [ 81.920858][ T4298] gfs2_withdraw+0x1149/0x1490 [ 81.926028][ T4298] ? gfs2_lm+0x240/0x240 [ 81.931059][ T4298] ? __schedule+0x11f7/0x43c0 [ 81.936501][ T4298] ? gfs2_consist_inode_i+0xc0/0xe0 [ 81.942540][ T4298] gfs2_inode_refresh+0xb64/0xff0 [ 81.947697][ T4298] ? do_promote+0x71a/0xab0 [ 81.953416][ T4298] ? gfs2_inode_metasync+0xf0/0xf0 [ 81.959434][ T4298] ? __lock_acquire+0x7d10/0x7d10 [ 81.965306][ T4298] inode_go_lock+0x127/0x470 [ 81.970594][ T4298] do_promote+0x741/0xab0 [ 81.975939][ T4298] finish_xmote+0x4df/0xb00 [ 81.981592][ T4298] do_xmote+0x7b6/0x1120 [ 81.986514][ T4298] gfs2_glock_nq+0xc7a/0x1550 [ 81.991609][ T4298] do_sync+0x4ab/0xc40 [ 81.996319][ T4298] ? slot_put+0x1e0/0x1e0 [ 82.000783][ T4298] ? __lock_acquire+0x7d10/0x7d10 [ 82.006181][ T4298] ? do_raw_spin_lock+0x128/0x2f0 [ 82.012134][ T4298] ? do_sync+0x4a3/0xc40 [ 82.017023][ T4298] ? do_raw_spin_unlock+0x11d/0x230 [ 82.022708][ T4298] gfs2_quota_sync+0x32c/0x700 [ 82.028066][ T4298] gfs2_sync_fs+0x48/0xb0 [ 82.033312][ T4298] sync_filesystem+0xe6/0x220 [ 82.038669][ T4298] generic_shutdown_super+0x6b/0x300 [ 82.044069][ T4298] kill_block_super+0x7c/0xe0 [ 82.049404][ T4298] deactivate_locked_super+0x93/0xf0 [ 82.055015][ T4298] cleanup_mnt+0x42d/0x4e0 [ 82.059470][ T4298] ? lockdep_hardirqs_on+0x94/0x140 [ 82.065246][ T4298] task_work_run+0x125/0x1a0 [ 82.070140][ T4298] exit_to_user_mode_loop+0x10f/0x130 [ 82.075922][ T4298] exit_to_user_mode_prepare+0xee/0x180 [ 82.082229][ T4298] syscall_exit_to_user_mode+0x16/0x40 [ 82.088319][ T4298] do_syscall_64+0x58/0xa0 [ 82.092784][ T4298] ? clear_bhb_loop+0x30/0x80 [ 82.097769][ T4298] ? clear_bhb_loop+0x30/0x80 [ 82.103504][ T4298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.109720][ T4298] RIP: 0033:0x7fc769f27a57 [ 82.114459][ T4298] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 82.135541][ T4298] RSP: 002b:00007ffeb1de9b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.146066][ T4298] RAX: 0000000000000000 RBX: 00007fc769fbc048 RCX: 00007fc769f27a57 [ 82.154611][ T4298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb1de9c40 [ 82.163466][ T4298] RBP: 00007ffeb1de9c40 R08: 00007ffeb1deac40 R09: 00000000ffffffff [ 82.172579][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb1deacd0 [ 82.180845][ T4298] R13: 00007fc769fbc048 R14: 0000000000013a71 R15: 00007ffeb1dead10 [ 82.189660][ T4298] [ 82.203204][ T4298] ================================================================== [ 82.212134][ T4298] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 82.219292][ T4298] Read of size 8 at addr ffff88806f2d7090 by task syz-executor/4298 [ 82.228169][ T4298] [ 82.230702][ T4298] CPU: 1 PID: 4298 Comm: syz-executor Not tainted syzkaller #0 [ 82.238964][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 82.249566][ T4298] Call Trace: [ 82.252866][ T4298] [ 82.256177][ T4298] dump_stack_lvl+0x188/0x250 [ 82.261721][ T4298] ? show_regs_print_info+0x20/0x20 [ 82.267859][ T4298] ? _printk+0xda/0x130 [ 82.272311][ T4298] ? qd_unlock+0x30/0x2d0 [ 82.276857][ T4298] ? load_image+0x400/0x400 [ 82.282095][ T4298] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 82.287947][ T4298] print_address_description+0x60/0x2d0 [ 82.293907][ T4298] ? qd_unlock+0x30/0x2d0 [ 82.298623][ T4298] kasan_report+0xdf/0x130 [ 82.303510][ T4298] ? qd_unlock+0x30/0x2d0 [ 82.308239][ T4298] kasan_check_range+0x235/0x290 [ 82.313469][ T4298] qd_unlock+0x30/0x2d0 [ 82.317745][ T4298] gfs2_quota_sync+0x5cf/0x700 [ 82.322539][ T4298] gfs2_sync_fs+0x48/0xb0 [ 82.327793][ T4298] sync_filesystem+0xe6/0x220 [ 82.333471][ T4298] generic_shutdown_super+0x6b/0x300 [ 82.339190][ T4298] kill_block_super+0x7c/0xe0 [ 82.344179][ T4298] deactivate_locked_super+0x93/0xf0 [ 82.349686][ T4298] cleanup_mnt+0x42d/0x4e0 [ 82.354541][ T4298] ? lockdep_hardirqs_on+0x94/0x140 [ 82.360504][ T4298] task_work_run+0x125/0x1a0 [ 82.365233][ T4298] exit_to_user_mode_loop+0x10f/0x130 [ 82.371029][ T4298] exit_to_user_mode_prepare+0xee/0x180 [ 82.377077][ T4298] syscall_exit_to_user_mode+0x16/0x40 [ 82.383500][ T4298] do_syscall_64+0x58/0xa0 [ 82.388551][ T4298] ? clear_bhb_loop+0x30/0x80 [ 82.393599][ T4298] ? clear_bhb_loop+0x30/0x80 [ 82.399602][ T4298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.406418][ T4298] RIP: 0033:0x7fc769f27a57 [ 82.411100][ T4298] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 82.433167][ T4298] RSP: 002b:00007ffeb1de9b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.442285][ T4298] RAX: 0000000000000000 RBX: 00007fc769fbc048 RCX: 00007fc769f27a57 [ 82.451140][ T4298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb1de9c40 [ 82.460076][ T4298] RBP: 00007ffeb1de9c40 R08: 00007ffeb1deac40 R09: 00000000ffffffff [ 82.468823][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb1deacd0 [ 82.478359][ T4298] R13: 00007fc769fbc048 R14: 0000000000013a71 R15: 00007ffeb1dead10 [ 82.487046][ T4298] [ 82.490631][ T4298] [ 82.493307][ T4298] Allocated by task 4310: [ 82.498136][ T4298] __kasan_slab_alloc+0x9c/0xd0 [ 82.503257][ T4298] slab_post_alloc_hook+0x4c/0x380 [ 82.508698][ T4298] kmem_cache_alloc+0x100/0x290 [ 82.514812][ T4298] qd_alloc+0x50/0x260 [ 82.519525][ T4298] gfs2_quota_init+0x74e/0xea0 [ 82.524903][ T4298] gfs2_make_fs_rw+0x414/0x580 [ 82.530042][ T4298] gfs2_fill_super+0x1837/0x1f00 [ 82.535725][ T4298] get_tree_bdev+0x3f1/0x610 [ 82.540715][ T4298] gfs2_get_tree+0x4d/0x1e0 [ 82.545461][ T4298] vfs_get_tree+0x88/0x270 [ 82.550198][ T4298] do_new_mount+0x24a/0xa40 [ 82.554924][ T4298] __se_sys_mount+0x2e3/0x3d0 [ 82.560273][ T4298] do_syscall_64+0x4c/0xa0 [ 82.565515][ T4298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.572489][ T4298] [ 82.574920][ T4298] Freed by task 23: [ 82.579526][ T4298] kasan_set_track+0x4b/0x70 [ 82.584818][ T4298] kasan_set_free_info+0x1f/0x40 [ 82.590518][ T4298] ____kasan_slab_free+0xd5/0x110 [ 82.595981][ T4298] slab_free_freelist_hook+0xea/0x170 [ 82.601998][ T4298] kmem_cache_free+0x8f/0x210 [ 82.607703][ T4298] rcu_core+0x9d2/0x1670 [ 82.612387][ T4298] handle_softirqs+0x339/0x830 [ 82.618486][ T4298] do_softirq+0x142/0x210 [ 82.623295][ T4298] __local_bh_enable_ip+0x180/0x1c0 [ 82.629002][ T4298] ipv6_get_lladdr+0x27d/0x3b0 [ 82.634736][ T4298] mld_newpack+0x3cd/0xb90 [ 82.639767][ T4298] add_grhead+0x5a/0x240 [ 82.644809][ T4298] add_grec+0x1341/0x15d0 [ 82.649426][ T4298] mld_send_initial_cr+0xed/0x240 [ 82.654803][ T4298] mld_dad_work+0x41/0x270 [ 82.659786][ T4298] process_one_work+0x85f/0x1010 [ 82.665674][ T4298] worker_thread+0xaa6/0x1290 [ 82.670646][ T4298] kthread+0x436/0x520 [ 82.674857][ T4298] ret_from_fork+0x1f/0x30 [ 82.679277][ T4298] [ 82.681927][ T4298] Last potentially related work creation: [ 82.687655][ T4298] kasan_save_stack+0x35/0x60 [ 82.692775][ T4298] kasan_record_aux_stack+0xb8/0x100 [ 82.698509][ T4298] call_rcu+0x189/0x950 [ 82.703213][ T4298] gfs2_quota_cleanup+0x43c/0x6a0 [ 82.709339][ T4298] gfs2_make_fs_ro+0x440/0x620 [ 82.714299][ T4298] gfs2_withdraw+0x610/0x1490 [ 82.718980][ T4298] gfs2_inode_refresh+0xb64/0xff0 [ 82.724789][ T4298] inode_go_lock+0x127/0x470 [ 82.732022][ T4298] do_promote+0x741/0xab0 [ 82.738018][ T4298] finish_xmote+0x4df/0xb00 [ 82.744456][ T4298] do_xmote+0x7b6/0x1120 [ 82.749738][ T4298] gfs2_glock_nq+0xc7a/0x1550 [ 82.754746][ T4298] do_sync+0x4ab/0xc40 [ 82.759302][ T4298] gfs2_quota_sync+0x32c/0x700 [ 82.764348][ T4298] gfs2_sync_fs+0x48/0xb0 [ 82.769259][ T4298] sync_filesystem+0xe6/0x220 [ 82.774262][ T4298] generic_shutdown_super+0x6b/0x300 [ 82.779744][ T4298] kill_block_super+0x7c/0xe0 [ 82.784897][ T4298] deactivate_locked_super+0x93/0xf0 [ 82.790739][ T4298] cleanup_mnt+0x42d/0x4e0 [ 82.795832][ T4298] task_work_run+0x125/0x1a0 [ 82.800761][ T4298] exit_to_user_mode_loop+0x10f/0x130 [ 82.807483][ T4298] exit_to_user_mode_prepare+0xee/0x180 [ 82.809670][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 82.814485][ T4298] syscall_exit_to_user_mode+0x16/0x40 [ 82.830235][ T4298] do_syscall_64+0x58/0xa0 [ 82.835312][ T4298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.841974][ T4298] [ 82.845390][ T4298] The buggy address belongs to the object at ffff88806f2d7000 [ 82.845390][ T4298] which belongs to the cache gfs2_quotad of size 272 [ 82.865445][ T4298] The buggy address is located 144 bytes inside of [ 82.865445][ T4298] 272-byte region [ffff88806f2d7000, ffff88806f2d7110) [ 82.880395][ T4298] The buggy address belongs to the page: [ 82.886421][ T4298] page:ffffea0001bcb5c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6f2d7 [ 82.897738][ T4298] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 82.905630][ T4298] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801e082a00 [ 82.914791][ T4298] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 82.924091][ T4298] page dumped because: kasan: bad access detected [ 82.931194][ T4298] page_owner tracks the page as allocated [ 82.938290][ T4298] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4310, ts 81323037338, free_ts 20313652749 [ 82.958230][ T4298] get_page_from_freelist+0x1bbd/0x1ca0 [ 82.964562][ T4298] __alloc_pages+0x1ee/0x480 [ 82.969674][ T4298] new_slab+0xc0/0x4b0 [ 82.975680][ T4298] ___slab_alloc+0x80a/0xdd0 [ 82.980624][ T4298] kmem_cache_alloc+0x195/0x290 [ 82.985867][ T4298] qd_alloc+0x50/0x260 [ 82.990091][ T4298] gfs2_quota_init+0x74e/0xea0 [ 82.995424][ T4298] gfs2_make_fs_rw+0x414/0x580 [ 83.000478][ T4298] gfs2_fill_super+0x1837/0x1f00 [ 83.005594][ T4298] get_tree_bdev+0x3f1/0x610 [ 83.010541][ T4298] gfs2_get_tree+0x4d/0x1e0 [ 83.015650][ T4298] vfs_get_tree+0x88/0x270 [ 83.020161][ T4298] do_new_mount+0x24a/0xa40 [ 83.025846][ T4298] __se_sys_mount+0x2e3/0x3d0 [ 83.030800][ T4298] do_syscall_64+0x4c/0xa0 [ 83.035518][ T4298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.041700][ T4298] page last free stack trace: [ 83.046754][ T4298] free_unref_page_prepare+0x637/0x6c0 [ 83.052732][ T4298] free_unref_page+0x8f/0x2a0 [ 83.058032][ T4298] free_contig_range+0x96/0xf0 [ 83.062833][ T4298] destroy_args+0xf0/0xa00 [ 83.067629][ T4298] debug_vm_pgtable+0x321/0x380 [ 83.072758][ T4298] do_one_initcall+0x272/0x730 [ 83.077822][ T4298] do_initcall_level+0x137/0x1f0 [ 83.083164][ T4298] do_initcalls+0x4b/0x90 [ 83.087899][ T4298] kernel_init_freeable+0x3e9/0x570 [ 83.093674][ T4298] kernel_init+0x19/0x1b0 [ 83.098778][ T4298] ret_from_fork+0x1f/0x30 [ 83.103314][ T4298] [ 83.105766][ T4298] Memory state around the buggy address: [ 83.111509][ T4298] ffff88806f2d6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.120016][ T4298] ffff88806f2d7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.129360][ T4298] >ffff88806f2d7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.138662][ T4298] ^ [ 83.143636][ T4298] ffff88806f2d7100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.154377][ T4298] ffff88806f2d7180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.162689][ T4298] ================================================================== [ 83.171703][ T4298] Disabling lock debugging due to kernel taint [ 83.185148][ T4298] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 83.192941][ T4298] CPU: 1 PID: 4298 Comm: syz-executor Tainted: G B syzkaller #0 [ 83.202425][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 83.213971][ T4298] Call Trace: [ 83.217812][ T4298] [ 83.221144][ T4298] dump_stack_lvl+0x188/0x250 [ 83.226146][ T4298] ? show_regs_print_info+0x20/0x20 [ 83.231688][ T4298] ? load_image+0x400/0x400 [ 83.236308][ T4298] panic+0x2e5/0x810 [ 83.240485][ T4298] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.247198][ T4298] ? bpf_jit_dump+0xd0/0xd0 [ 83.251976][ T4298] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 83.258250][ T4298] ? _raw_spin_unlock+0x40/0x40 [ 83.263740][ T4298] ? qd_unlock+0x30/0x2d0 [ 83.270381][ T4298] check_panic_on_warn+0x80/0xa0 [ 83.276727][ T4298] ? qd_unlock+0x30/0x2d0 [ 83.282456][ T4298] end_report+0x6d/0xf0 [ 83.287173][ T4298] kasan_report+0x102/0x130 [ 83.292288][ T4298] ? qd_unlock+0x30/0x2d0 [ 83.297201][ T4298] kasan_check_range+0x235/0x290 [ 83.303298][ T4298] qd_unlock+0x30/0x2d0 [ 83.307681][ T4298] gfs2_quota_sync+0x5cf/0x700 [ 83.313438][ T4298] gfs2_sync_fs+0x48/0xb0 [ 83.317891][ T4298] sync_filesystem+0xe6/0x220 [ 83.323062][ T4298] generic_shutdown_super+0x6b/0x300 [ 83.329260][ T4298] kill_block_super+0x7c/0xe0 [ 83.334200][ T4298] deactivate_locked_super+0x93/0xf0 [ 83.339951][ T4298] cleanup_mnt+0x42d/0x4e0 [ 83.344661][ T4298] ? lockdep_hardirqs_on+0x94/0x140 [ 83.350570][ T4298] task_work_run+0x125/0x1a0 [ 83.355996][ T4298] exit_to_user_mode_loop+0x10f/0x130 [ 83.362123][ T4298] exit_to_user_mode_prepare+0xee/0x180 [ 83.368564][ T4298] syscall_exit_to_user_mode+0x16/0x40 [ 83.374805][ T4298] do_syscall_64+0x58/0xa0 [ 83.380377][ T4298] ? clear_bhb_loop+0x30/0x80 [ 83.385696][ T4298] ? clear_bhb_loop+0x30/0x80 [ 83.391181][ T4298] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.397344][ T4298] RIP: 0033:0x7fc769f27a57 [ 83.402157][ T4298] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 83.422949][ T4298] RSP: 002b:00007ffeb1de9b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.431873][ T4298] RAX: 0000000000000000 RBX: 00007fc769fbc048 RCX: 00007fc769f27a57 [ 83.440910][ T4298] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb1de9c40 [ 83.449894][ T4298] RBP: 00007ffeb1de9c40 R08: 00007ffeb1deac40 R09: 00000000ffffffff [ 83.458301][ T4298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb1deacd0 [ 83.467252][ T4298] R13: 00007fc769fbc048 R14: 0000000000013a71 R15: 00007ffeb1dead10 [ 83.476343][ T4298] [ 83.480466][ T4298] Kernel Offset: disabled [ 83.484904][ T4298] Rebooting in 86400 seconds..