Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts.
2026/01/19 06:28:21 parsed 1 programs
[ 70.963758][ T4196] cgroup: Unknown subsys name 'net'
[ 71.095046][ T4196] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 72.497140][ T4196] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 74.740184][ T4225] syz-executor (4225) used greatest stack depth: 21136 bytes left
[ 74.806067][ T4229] chnl_net:caif_netlink_parms(): no params data found
[ 74.871864][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.879532][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.887671][ T4229] device bridge_slave_0 entered promiscuous mode
[ 74.898521][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.905895][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.915240][ T4229] device bridge_slave_1 entered promiscuous mode
[ 74.941567][ T4229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.954164][ T4229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.981818][ T4229] team0: Port device team_slave_0 added
[ 74.991491][ T4229] team0: Port device team_slave_1 added
[ 75.013456][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.020671][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.047859][ T4229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.062118][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.069340][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.096304][ T4229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.132273][ T4229] device hsr_slave_0 entered promiscuous mode
[ 75.139256][ T4229] device hsr_slave_1 entered promiscuous mode
[ 75.261246][ T4229] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.272578][ T4229] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.282667][ T4229] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.292303][ T4229] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.323023][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.330269][ T4229] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.337972][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.345220][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.400837][ T4229] 8021q: adding VLAN 0 to HW filter on device bond0
[ 75.416651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 75.426667][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.436059][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.449889][ T4229] 8021q: adding VLAN 0 to HW filter on device team0
[ 75.462641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 75.471652][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.478720][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 75.499756][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 75.509395][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.516639][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.525022][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 75.533839][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 75.554076][ T4229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 75.565777][ T4229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 75.581300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 75.590327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 75.599517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 75.607802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 75.731422][ T4229] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.739105][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 75.747420][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 75.765326][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 75.774458][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 75.792870][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 75.801197][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 75.810714][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 75.818335][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 75.828731][ T4229] device veth0_vlan entered promiscuous mode
[ 75.842458][ T4229] device veth1_vlan entered promiscuous mode
[ 75.894416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 75.903572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 75.911842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 75.921004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 75.932115][ T4229] device veth0_macvtap entered promiscuous mode
[ 75.949934][ T4229] device veth1_macvtap entered promiscuous mode
[ 75.970335][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.978655][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 75.986883][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 75.994835][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 76.003889][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 76.015061][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.023347][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 76.031985][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 76.043403][ T4229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.052437][ T4229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.061519][ T4229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.070422][ T4229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.165130][ T4229] syz-executor (4229) used greatest stack depth: 20504 bytes left
[ 76.953064][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.970310][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.986399][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 76.986697][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.003496][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.017433][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/01/19 06:28:31 executed programs: 0
[ 78.127725][ T4291] chnl_net:caif_netlink_parms(): no params data found
[ 78.175550][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.204269][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.211715][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.219763][ T4291] device bridge_slave_0 entered promiscuous mode
[ 78.227476][ T4291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.234816][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.242602][ T4291] device bridge_slave_1 entered promiscuous mode
[ 78.261391][ T4291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.272830][ T4291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.294103][ T4291] team0: Port device team_slave_0 added
[ 78.302431][ T4291] team0: Port device team_slave_1 added
[ 78.318217][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.325245][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.351415][ T4291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.363596][ T4291] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.370972][ T4291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.396949][ T4291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.425528][ T4291] device hsr_slave_0 entered promiscuous mode
[ 78.432234][ T4291] device hsr_slave_1 entered promiscuous mode
[ 78.439455][ T4291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 78.447238][ T4291] Cannot create hsr debugfs directory
[ 80.029884][ T4241] Bluetooth: hci0: command 0x0409 tx timeout
[ 81.095708][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.153497][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.216853][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.422214][ T2859] cfg80211: failed to load regulatory.db
[ 82.109060][ T4250] Bluetooth: hci0: command 0x041b tx timeout
[ 82.171095][ T4291] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.180711][ T4291] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.190990][ T4291] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.202938][ T4291] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.274905][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0
[ 82.288387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 82.298402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 82.309534][ T4291] 8021q: adding VLAN 0 to HW filter on device team0
[ 82.320146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 82.332509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 82.341034][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.348187][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.357503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 82.419020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 82.428127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 82.441258][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.448348][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.458593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 82.470461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 82.482293][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 82.494112][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 82.503305][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 82.526889][ T4291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 82.540119][ T4291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 82.553340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 82.563715][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 82.574615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 82.585225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 82.595937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 82.605430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 82.635667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 82.751778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 82.759449][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 82.771653][ T4291] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.787784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 82.796737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 82.821563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 82.830110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 82.840136][ T4291] device veth0_vlan entered promiscuous mode
[ 82.870024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 82.877840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 82.886984][ T4291] device veth1_vlan entered promiscuous mode
[ 82.928594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 82.937256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 82.945807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 82.955823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 82.967825][ T4291] device veth0_macvtap entered promiscuous mode
[ 83.000995][ T4291] device veth1_macvtap entered promiscuous mode
[ 83.016015][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 83.027012][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 83.038606][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.046023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 83.054770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 83.063004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 83.071841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 83.084043][ T4291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 83.094805][ T4291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 83.105541][ T4291] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.113753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 83.124185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 83.135604][ T4291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.144418][ T4291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.153761][ T4291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.166569][ T4291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.232457][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.241546][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.250400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/01/19 06:28:36 executed programs: 2
[ 83.291772][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.300160][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.308521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 83.513966][ T154] device hsr_slave_0 left promiscuous mode
[ 83.523133][ T154] device hsr_slave_1 left promiscuous mode
[ 83.530898][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 83.538345][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 83.554165][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 83.561795][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 83.579607][ T154] device bridge_slave_1 left promiscuous mode
[ 83.586655][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.606661][ T154] device bridge_slave_0 left promiscuous mode
[ 83.612969][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.643131][ T154] device veth1_macvtap left promiscuous mode
[ 83.649910][ T154] device veth0_macvtap left promiscuous mode
[ 83.656007][ T154] device veth1_vlan left promiscuous mode
[ 83.665081][ T154] device veth0_vlan left promiscuous mode
[ 83.687027][ T4371] loop0: detected capacity change from 0 to 32768
[ 83.717041][ T4371] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 83.726107][ T4371] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 83.762936][ T4371] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 83.784788][ T4250] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 83.798257][ T4250] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 83.856804][ T4250] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 58ms
[ 83.870632][ T4250] gfs2: fsid=syz:syz.0: jid=0: Done
[ 83.876412][ T4371] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 83.991054][ T4371] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 83.991873][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 84.018094][ T4291] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 84.018094][ T4291] inode = 11 2339
[ 84.018094][ T4291] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[ 84.037544][ T4291] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 84.054444][ T4291] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 84.069474][ T4291] CPU: 0 PID: 4291 Comm: syz-executor Not tainted syzkaller #0
[ 84.077049][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 84.080496][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 84.087148][ T4291] Call Trace:
[ 84.097553][ T4291]
[ 84.100497][ T4291] dump_stack_lvl+0x188/0x250
[ 84.105226][ T4291] ? show_regs_print_info+0x20/0x20
[ 84.110458][ T4291] ? load_image+0x400/0x400
[ 84.115021][ T4291] ? do_raw_spin_unlock+0x11d/0x230
[ 84.120250][ T4291] gfs2_assert_warn_i+0x18f/0x2c0
[ 84.125314][ T4291] gfs2_quota_cleanup+0x4b4/0x6a0
[ 84.130379][ T4291] gfs2_make_fs_ro+0x440/0x620
[ 84.135180][ T4291] ? __might_sleep+0xf0/0xf0
[ 84.139794][ T4291] ? gfs2_dinode_out+0xb00/0xb00
[ 84.144754][ T4291] ? _raw_spin_unlock+0x24/0x40
[ 84.149623][ T4291] ? gfs2_glock_nq+0xcb0/0x1550
[ 84.154536][ T4291] gfs2_withdraw+0x610/0x1490
[ 84.159249][ T4291] ? gfs2_lm+0x240/0x240
[ 84.163513][ T4291] ? __schedule+0x11f7/0x43c0
[ 84.168232][ T4291] ? gfs2_freeze_lock+0x52/0xc0
[ 84.173112][ T4291] ? gfs2_consist_inode_i+0xc0/0xe0
[ 84.178327][ T4291] gfs2_inode_refresh+0xb64/0xff0
[ 84.183390][ T4291] ? do_promote+0x71a/0xab0
[ 84.187922][ T4291] ? gfs2_inode_metasync+0xf0/0xf0
[ 84.193064][ T4291] ? __lock_acquire+0x7d10/0x7d10
[ 84.198118][ T4291] inode_go_lock+0x127/0x470
[ 84.202784][ T4291] do_promote+0x741/0xab0
[ 84.207148][ T4291] finish_xmote+0x4df/0xb00
[ 84.211684][ T4291] do_xmote+0x7b6/0x1120
[ 84.215970][ T4291] gfs2_glock_nq+0xc7a/0x1550
[ 84.220681][ T4291] do_sync+0x4ab/0xc40
[ 84.224794][ T4291] ? slot_put+0x1e0/0x1e0
[ 84.229160][ T4291] ? __lock_acquire+0x7d10/0x7d10
[ 84.229464][ T4252] Bluetooth: hci0: command 0x040f tx timeout
[ 84.234206][ T4291] ? do_raw_spin_lock+0x128/0x2f0
[ 84.234231][ T4291] ? do_sync+0x4a3/0xc40
[ 84.249484][ T4291] ? do_raw_spin_unlock+0x11d/0x230
[ 84.254718][ T4291] gfs2_quota_sync+0x32c/0x700
[ 84.259574][ T4291] gfs2_sync_fs+0x48/0xb0
[ 84.263929][ T4291] sync_filesystem+0xe6/0x220
[ 84.268623][ T4291] generic_shutdown_super+0x6b/0x300
[ 84.273911][ T4291] kill_block_super+0x7c/0xe0
[ 84.278581][ T4291] deactivate_locked_super+0x93/0xf0
[ 84.283869][ T4291] cleanup_mnt+0x42d/0x4e0
[ 84.288301][ T4291] ? lockdep_hardirqs_on+0x94/0x140
[ 84.293503][ T4291] task_work_run+0x125/0x1a0
[ 84.298095][ T4291] exit_to_user_mode_loop+0x10f/0x130
[ 84.303461][ T4291] exit_to_user_mode_prepare+0xee/0x180
[ 84.309011][ T4291] syscall_exit_to_user_mode+0x16/0x40
[ 84.314468][ T4291] do_syscall_64+0x58/0xa0
[ 84.318908][ T4291] ? clear_bhb_loop+0x30/0x80
[ 84.323604][ T4291] ? clear_bhb_loop+0x30/0x80
[ 84.328275][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.334176][ T4291] RIP: 0033:0x7f3c68f13f17
[ 84.338605][ T4291] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 84.358201][ T4291] RSP: 002b:00007ffe2a51dd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 84.366608][ T4291] RAX: 0000000000000000 RBX: 00007f3c68f7c71f RCX: 00007f3c68f13f17
[ 84.374574][ T4291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2a51de10
[ 84.382538][ T4291] RBP: 00007ffe2a51de10 R08: 00007ffe2a51ee10 R09: 00000000ffffffff
[ 84.390519][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2a51eea0
[ 84.398482][ T4291] R13: 00007f3c68f7c71f R14: 0000000000014800 R15: 00007ffe2a51eee0
[ 84.406471][ T4291]
[ 84.411097][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 84.423833][ T4291] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 84.432784][ T4291] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 84.440769][ T4291] gfs2: fsid=syz:syz.0: File system withdrawn
[ 84.446861][ T4291] CPU: 0 PID: 4291 Comm: syz-executor Not tainted syzkaller #0
[ 84.454413][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 84.464471][ T4291] Call Trace:
[ 84.467767][ T4291]
[ 84.470687][ T4291] dump_stack_lvl+0x188/0x250
[ 84.475350][ T4291] ? kobject_uevent_env+0x371/0x890
[ 84.480542][ T4291] ? show_regs_print_info+0x20/0x20
[ 84.485741][ T4291] ? load_image+0x400/0x400
[ 84.490241][ T4291] ? kobject_uevent_env+0x371/0x890
[ 84.495446][ T4291] ? lockref_put_or_lock+0x6e/0xb0
[ 84.500675][ T4291] gfs2_withdraw+0x1149/0x1490
[ 84.505466][ T4291] ? gfs2_lm+0x240/0x240
[ 84.509708][ T4291] ? __schedule+0x11f7/0x43c0
[ 84.514383][ T4291] ? gfs2_consist_inode_i+0xc0/0xe0
[ 84.519574][ T4291] gfs2_inode_refresh+0xb64/0xff0
[ 84.524593][ T4291] ? do_promote+0x71a/0xab0
[ 84.529089][ T4291] ? gfs2_inode_metasync+0xf0/0xf0
[ 84.534195][ T4291] ? __lock_acquire+0x7d10/0x7d10
[ 84.539220][ T4291] inode_go_lock+0x127/0x470
[ 84.543806][ T4291] do_promote+0x741/0xab0
[ 84.548193][ T4291] finish_xmote+0x4df/0xb00
[ 84.552707][ T4291] do_xmote+0x7b6/0x1120
[ 84.556964][ T4291] gfs2_glock_nq+0xc7a/0x1550
[ 84.561642][ T4291] do_sync+0x4ab/0xc40
[ 84.565713][ T4291] ? slot_put+0x1e0/0x1e0
[ 84.570048][ T4291] ? __lock_acquire+0x7d10/0x7d10
[ 84.575057][ T4291] ? do_raw_spin_lock+0x128/0x2f0
[ 84.580069][ T4291] ? do_sync+0x4a3/0xc40
[ 84.584304][ T4291] ? do_raw_spin_unlock+0x11d/0x230
[ 84.589495][ T4291] gfs2_quota_sync+0x32c/0x700
[ 84.594253][ T4291] gfs2_sync_fs+0x48/0xb0
[ 84.598569][ T4291] sync_filesystem+0xe6/0x220
[ 84.603255][ T4291] generic_shutdown_super+0x6b/0x300
[ 84.608559][ T4291] kill_block_super+0x7c/0xe0
[ 84.613245][ T4291] deactivate_locked_super+0x93/0xf0
[ 84.618525][ T4291] cleanup_mnt+0x42d/0x4e0
[ 84.622963][ T4291] ? lockdep_hardirqs_on+0x94/0x140
[ 84.628160][ T4291] task_work_run+0x125/0x1a0
[ 84.632750][ T4291] exit_to_user_mode_loop+0x10f/0x130
[ 84.638113][ T4291] exit_to_user_mode_prepare+0xee/0x180
[ 84.643652][ T4291] syscall_exit_to_user_mode+0x16/0x40
[ 84.649117][ T4291] do_syscall_64+0x58/0xa0
[ 84.653555][ T4291] ? clear_bhb_loop+0x30/0x80
[ 84.658252][ T4291] ? clear_bhb_loop+0x30/0x80
[ 84.662926][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.668812][ T4291] RIP: 0033:0x7f3c68f13f17
[ 84.673225][ T4291] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 84.692819][ T4291] RSP: 002b:00007ffe2a51dd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 84.701230][ T4291] RAX: 0000000000000000 RBX: 00007f3c68f7c71f RCX: 00007f3c68f13f17
[ 84.709305][ T4291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2a51de10
[ 84.717286][ T4291] RBP: 00007ffe2a51de10 R08: 00007ffe2a51ee10 R09: 00000000ffffffff
[ 84.725267][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2a51eea0
[ 84.733237][ T4291] R13: 00007f3c68f7c71f R14: 0000000000014800 R15: 00007ffe2a51eee0
[ 84.741219][ T4291]
[ 84.744612][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 84.819206][ T154] bond0 (unregistering): Released all slaves
[ 85.176228][ T4374] loop0: detected capacity change from 0 to 32768
[ 85.196699][ T4374] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 85.205305][ T4374] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 85.220322][ T4374] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 85.239881][ T4241] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 85.246664][ T4241] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 85.320026][ T4241] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 73ms
[ 85.329550][ T4241] gfs2: fsid=syz:syz.0: jid=0: Done
[ 85.335178][ T4374] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 85.439113][ T4374] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 85.452103][ T4291] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 85.452103][ T4291] inode = 11 2339
[ 85.452103][ T4291] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[ 85.479722][ T4291] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 85.495866][ T4291] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 85.512047][ T4291] CPU: 0 PID: 4291 Comm: syz-executor Not tainted syzkaller #0
[ 85.519639][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 85.529790][ T4291] Call Trace:
[ 85.533083][ T4291]
[ 85.536024][ T4291] dump_stack_lvl+0x188/0x250
[ 85.540731][ T4291] ? show_regs_print_info+0x20/0x20
[ 85.545955][ T4291] ? load_image+0x400/0x400
[ 85.550485][ T4291] ? do_raw_spin_unlock+0x11d/0x230
[ 85.555707][ T4291] gfs2_assert_warn_i+0x18f/0x2c0
[ 85.560759][ T4291] gfs2_quota_cleanup+0x4b4/0x6a0
[ 85.565960][ T4291] gfs2_make_fs_ro+0x440/0x620
[ 85.570756][ T4291] ? __might_sleep+0xf0/0xf0
[ 85.575361][ T4291] ? gfs2_dinode_out+0xb00/0xb00
[ 85.580306][ T4291] ? _raw_spin_unlock+0x24/0x40
[ 85.585167][ T4291] ? gfs2_glock_nq+0xcb0/0x1550
[ 85.590059][ T4291] gfs2_withdraw+0x610/0x1490
[ 85.594756][ T4291] ? gfs2_lm+0x240/0x240
[ 85.599015][ T4291] ? __schedule+0x11f7/0x43c0
[ 85.603726][ T4291] ? gfs2_freeze_lock+0x52/0xc0
[ 85.608603][ T4291] ? gfs2_consist_inode_i+0xc0/0xe0
[ 85.613864][ T4291] gfs2_inode_refresh+0xb64/0xff0
[ 85.618915][ T4291] ? do_promote+0x71a/0xab0
[ 85.623431][ T4291] ? gfs2_inode_metasync+0xf0/0xf0
[ 85.628561][ T4291] ? __lock_acquire+0x7d10/0x7d10
[ 85.633612][ T4291] inode_go_lock+0x127/0x470
[ 85.638371][ T4291] do_promote+0x741/0xab0
[ 85.642727][ T4291] finish_xmote+0x4df/0xb00
[ 85.647266][ T4291] do_xmote+0x7b6/0x1120
[ 85.651543][ T4291] gfs2_glock_nq+0xc7a/0x1550
[ 85.656268][ T4291] do_sync+0x4ab/0xc40
[ 85.660382][ T4291] ? slot_put+0x1e0/0x1e0
[ 85.664774][ T4291] ? __lock_acquire+0x7d10/0x7d10
[ 85.669824][ T4291] ? do_raw_spin_lock+0x128/0x2f0
[ 85.674882][ T4291] ? do_sync+0x4a3/0xc40
[ 85.679157][ T4291] ? do_raw_spin_unlock+0x11d/0x230
[ 85.684380][ T4291] gfs2_quota_sync+0x32c/0x700
[ 85.689191][ T4291] gfs2_sync_fs+0x48/0xb0
[ 85.693560][ T4291] sync_filesystem+0xe6/0x220
[ 85.698262][ T4291] generic_shutdown_super+0x6b/0x300
[ 85.703580][ T4291] kill_block_super+0x7c/0xe0
[ 85.708309][ T4291] deactivate_locked_super+0x93/0xf0
[ 85.713620][ T4291] cleanup_mnt+0x42d/0x4e0
[ 85.718053][ T4291] ? lockdep_hardirqs_on+0x94/0x140
[ 85.723289][ T4291] task_work_run+0x125/0x1a0
[ 85.727913][ T4291] exit_to_user_mode_loop+0x10f/0x130
[ 85.733341][ T4291] exit_to_user_mode_prepare+0xee/0x180
[ 85.738914][ T4291] syscall_exit_to_user_mode+0x16/0x40
[ 85.744407][ T4291] do_syscall_64+0x58/0xa0
[ 85.748861][ T4291] ? clear_bhb_loop+0x30/0x80
[ 85.753560][ T4291] ? clear_bhb_loop+0x30/0x80
[ 85.758269][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 85.764180][ T4291] RIP: 0033:0x7f3c68f13f17
[ 85.768654][ T4291] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 85.788289][ T4291] RSP: 002b:00007ffe2a51dd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 85.796733][ T4291] RAX: 0000000000000000 RBX: 00007f3c68f7c71f RCX: 00007f3c68f13f17
[ 85.804728][ T4291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2a51de10
[ 85.812714][ T4291] RBP: 00007ffe2a51de10 R08: 00007ffe2a51ee10 R09: 00000000ffffffff
[ 85.820708][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2a51eea0
[ 85.828739][ T4291] R13: 00007f3c68f7c71f R14: 0000000000014da0 R15: 00007ffe2a51eee0
[ 85.836768][ T4291]
[ 85.846938][ T4291] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 85.855838][ T4291] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 85.863018][ T4291] gfs2: fsid=syz:syz.0: File system withdrawn
[ 85.870783][ T4291] CPU: 0 PID: 4291 Comm: syz-executor Not tainted syzkaller #0
[ 85.878352][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 85.888435][ T4291] Call Trace:
[ 85.891740][ T4291]
[ 85.894690][ T4291] dump_stack_lvl+0x188/0x250
[ 85.899390][ T4291] ? kobject_uevent_env+0x371/0x890
[ 85.904617][ T4291] ? show_regs_print_info+0x20/0x20
[ 85.909835][ T4291] ? load_image+0x400/0x400
[ 85.914355][ T4291] ? kobject_uevent_env+0x371/0x890
[ 85.919575][ T4291] ? lockref_put_or_lock+0x6e/0xb0
[ 85.924720][ T4291] gfs2_withdraw+0x1149/0x1490
[ 85.929523][ T4291] ? gfs2_lm+0x240/0x240
[ 85.933783][ T4291] ? __schedule+0x11f7/0x43c0
[ 85.938490][ T4291] ? gfs2_consist_inode_i+0xc0/0xe0
[ 85.943713][ T4291] gfs2_inode_refresh+0xb64/0xff0
[ 85.948773][ T4291] ? do_promote+0x71a/0xab0
[ 85.953392][ T4291] ? gfs2_inode_metasync+0xf0/0xf0
[ 85.958525][ T4291] ? __lock_acquire+0x7d10/0x7d10
[ 85.963577][ T4291] inode_go_lock+0x127/0x470
[ 85.968195][ T4291] do_promote+0x741/0xab0
[ 85.972566][ T4291] finish_xmote+0x4df/0xb00
[ 85.977117][ T4291] do_xmote+0x7b6/0x1120
[ 85.981430][ T4291] gfs2_glock_nq+0xc7a/0x1550
[ 85.986156][ T4291] do_sync+0x4ab/0xc40
[ 85.990261][ T4291] ? slot_put+0x1e0/0x1e0
[ 85.994619][ T4291] ? __lock_acquire+0x7d10/0x7d10
[ 85.999668][ T4291] ? do_raw_spin_lock+0x128/0x2f0
[ 86.004733][ T4291] ? do_sync+0x4a3/0xc40
[ 86.009025][ T4291] ? do_raw_spin_unlock+0x11d/0x230
[ 86.014252][ T4291] gfs2_quota_sync+0x32c/0x700
[ 86.019052][ T4291] gfs2_sync_fs+0x48/0xb0
[ 86.023413][ T4291] sync_filesystem+0xe6/0x220
[ 86.028131][ T4291] generic_shutdown_super+0x6b/0x300
[ 86.033452][ T4291] kill_block_super+0x7c/0xe0
[ 86.038157][ T4291] deactivate_locked_super+0x93/0xf0
[ 86.043484][ T4291] cleanup_mnt+0x42d/0x4e0
[ 86.047927][ T4291] ? lockdep_hardirqs_on+0x94/0x140
[ 86.053186][ T4291] task_work_run+0x125/0x1a0
[ 86.057802][ T4291] exit_to_user_mode_loop+0x10f/0x130
[ 86.063202][ T4291] exit_to_user_mode_prepare+0xee/0x180
[ 86.068802][ T4291] syscall_exit_to_user_mode+0x16/0x40
[ 86.074287][ T4291] do_syscall_64+0x58/0xa0
[ 86.078721][ T4291] ? clear_bhb_loop+0x30/0x80
[ 86.083415][ T4291] ? clear_bhb_loop+0x30/0x80
[ 86.088163][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.094094][ T4291] RIP: 0033:0x7f3c68f13f17
[ 86.098532][ T4291] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 86.118533][ T4291] RSP: 002b:00007ffe2a51dd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 86.126977][ T4291] RAX: 0000000000000000 RBX: 00007f3c68f7c71f RCX: 00007f3c68f13f17
[ 86.134968][ T4291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2a51de10
[ 86.142964][ T4291] RBP: 00007ffe2a51de10 R08: 00007ffe2a51ee10 R09: 00000000ffffffff
[ 86.150970][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2a51eea0
[ 86.158966][ T4291] R13: 00007f3c68f7c71f R14: 0000000000014da0 R15: 00007ffe2a51eee0
[ 86.166991][ T4291]
[ 86.180712][ T4291] ==================================================================
[ 86.189020][ T4291] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 86.195720][ T4291] Read of size 8 at addr ffff88805fe71090 by task syz-executor/4291
[ 86.203705][ T4291]
[ 86.206042][ T4291] CPU: 0 PID: 4291 Comm: syz-executor Not tainted syzkaller #0
[ 86.213600][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 86.223753][ T4291] Call Trace:
[ 86.227045][ T4291]
[ 86.229993][ T4291] dump_stack_lvl+0x188/0x250
[ 86.234698][ T4291] ? show_regs_print_info+0x20/0x20
[ 86.239911][ T4291] ? _printk+0xda/0x130
[ 86.244087][ T4291] ? qd_unlock+0x30/0x2d0
[ 86.248444][ T4291] ? load_image+0x400/0x400
[ 86.252968][ T4291] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 86.258454][ T4291] print_address_description+0x60/0x2d0
[ 86.264018][ T4291] ? qd_unlock+0x30/0x2d0
[ 86.268387][ T4291] kasan_report+0xdf/0x130
[ 86.272826][ T4291] ? qd_unlock+0x30/0x2d0
[ 86.277191][ T4291] kasan_check_range+0x235/0x290
[ 86.282151][ T4291] qd_unlock+0x30/0x2d0
[ 86.286321][ T4291] gfs2_quota_sync+0x5cf/0x700
[ 86.289798][ T4252] Bluetooth: hci0: command 0x0419 tx timeout
[ 86.291113][ T4291] gfs2_sync_fs+0x48/0xb0
[ 86.301429][ T4291] sync_filesystem+0xe6/0x220
[ 86.306137][ T4291] generic_shutdown_super+0x6b/0x300
[ 86.311446][ T4291] kill_block_super+0x7c/0xe0
[ 86.316155][ T4291] deactivate_locked_super+0x93/0xf0
[ 86.321550][ T4291] cleanup_mnt+0x42d/0x4e0
[ 86.325994][ T4291] ? lockdep_hardirqs_on+0x94/0x140
[ 86.331216][ T4291] task_work_run+0x125/0x1a0
[ 86.335833][ T4291] exit_to_user_mode_loop+0x10f/0x130
[ 86.341233][ T4291] exit_to_user_mode_prepare+0xee/0x180
[ 86.346816][ T4291] syscall_exit_to_user_mode+0x16/0x40
[ 86.352401][ T4291] do_syscall_64+0x58/0xa0
[ 86.356854][ T4291] ? clear_bhb_loop+0x30/0x80
[ 86.361554][ T4291] ? clear_bhb_loop+0x30/0x80
[ 86.366264][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.372178][ T4291] RIP: 0033:0x7f3c68f13f17
[ 86.376613][ T4291] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 86.396231][ T4291] RSP: 002b:00007ffe2a51dd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 86.404666][ T4291] RAX: 0000000000000000 RBX: 00007f3c68f7c71f RCX: 00007f3c68f13f17
[ 86.412654][ T4291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2a51de10
[ 86.420645][ T4291] RBP: 00007ffe2a51de10 R08: 00007ffe2a51ee10 R09: 00000000ffffffff
[ 86.428630][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2a51eea0
[ 86.436619][ T4291] R13: 00007f3c68f7c71f R14: 0000000000014da0 R15: 00007ffe2a51eee0
[ 86.444636][ T4291]
[ 86.447672][ T4291]
[ 86.450038][ T4291] Allocated by task 4374:
[ 86.454373][ T4291] __kasan_slab_alloc+0x9c/0xd0
[ 86.459236][ T4291] slab_post_alloc_hook+0x4c/0x380
[ 86.464358][ T4291] kmem_cache_alloc+0x100/0x290
[ 86.469224][ T4291] qd_alloc+0x50/0x260
[ 86.473309][ T4291] gfs2_quota_init+0x74e/0xea0
[ 86.478088][ T4291] gfs2_make_fs_rw+0x414/0x580
[ 86.482866][ T4291] gfs2_fill_super+0x1837/0x1f00
[ 86.487824][ T4291] get_tree_bdev+0x3f1/0x610
[ 86.492435][ T4291] gfs2_get_tree+0x4d/0x1e0
[ 86.496985][ T4291] vfs_get_tree+0x88/0x270
[ 86.501419][ T4291] do_new_mount+0x24a/0xa40
[ 86.505938][ T4291] __se_sys_mount+0x2e3/0x3d0
[ 86.510745][ T4291] do_syscall_64+0x4c/0xa0
[ 86.515264][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.521199][ T4291]
[ 86.523539][ T4291] Freed by task 4291:
[ 86.527536][ T4291] kasan_set_track+0x4b/0x70
[ 86.532168][ T4291] kasan_set_free_info+0x1f/0x40
[ 86.537115][ T4291] ____kasan_slab_free+0xd5/0x110
[ 86.542162][ T4291] slab_free_freelist_hook+0xea/0x170
[ 86.547565][ T4291] kmem_cache_free+0x8f/0x210
[ 86.552257][ T4291] rcu_core+0x9d2/0x1670
[ 86.556512][ T4291] handle_softirqs+0x339/0x830
[ 86.561311][ T4291] __irq_exit_rcu+0x13b/0x230
[ 86.566017][ T4291] irq_exit_rcu+0x5/0x20
[ 86.570269][ T4291] sysvec_apic_timer_interrupt+0xa0/0xc0
[ 86.575922][ T4291] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 86.581922][ T4291]
[ 86.584256][ T4291] Last potentially related work creation:
[ 86.589971][ T4291] kasan_save_stack+0x35/0x60
[ 86.594662][ T4291] kasan_record_aux_stack+0xb8/0x100
[ 86.599973][ T4291] call_rcu+0x189/0x950
[ 86.604288][ T4291] gfs2_quota_cleanup+0x43c/0x6a0
[ 86.609396][ T4291] gfs2_make_fs_ro+0x440/0x620
[ 86.614184][ T4291] gfs2_withdraw+0x610/0x1490
[ 86.618868][ T4291] gfs2_inode_refresh+0xb64/0xff0
[ 86.623914][ T4291] inode_go_lock+0x127/0x470
[ 86.628530][ T4291] do_promote+0x741/0xab0
[ 86.632903][ T4291] finish_xmote+0x4df/0xb00
[ 86.637445][ T4291] do_xmote+0x7b6/0x1120
[ 86.641701][ T4291] gfs2_glock_nq+0xc7a/0x1550
[ 86.646400][ T4291] do_sync+0x4ab/0xc40
[ 86.650479][ T4291] gfs2_quota_sync+0x32c/0x700
[ 86.655253][ T4291] gfs2_sync_fs+0x48/0xb0
[ 86.659591][ T4291] sync_filesystem+0xe6/0x220
[ 86.664282][ T4291] generic_shutdown_super+0x6b/0x300
[ 86.669586][ T4291] kill_block_super+0x7c/0xe0
[ 86.674289][ T4291] deactivate_locked_super+0x93/0xf0
[ 86.679592][ T4291] cleanup_mnt+0x42d/0x4e0
[ 86.684018][ T4291] task_work_run+0x125/0x1a0
[ 86.688620][ T4291] exit_to_user_mode_loop+0x10f/0x130
[ 86.694016][ T4291] exit_to_user_mode_prepare+0xee/0x180
[ 86.699583][ T4291] syscall_exit_to_user_mode+0x16/0x40
[ 86.705056][ T4291] do_syscall_64+0x58/0xa0
[ 86.709479][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.715392][ T4291]
[ 86.717721][ T4291] The buggy address belongs to the object at ffff88805fe71000
[ 86.717721][ T4291] which belongs to the cache gfs2_quotad of size 272
[ 86.731785][ T4291] The buggy address is located 144 bytes inside of
[ 86.731785][ T4291] 272-byte region [ffff88805fe71000, ffff88805fe71110)
[ 86.745090][ T4291] The buggy address belongs to the page:
[ 86.750753][ T4291] page:ffffea00017f9c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fe71
[ 86.760964][ T4291] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 86.768550][ T4291] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888146b93500
[ 86.777150][ T4291] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 86.785742][ T4291] page dumped because: kasan: bad access detected
[ 86.792191][ T4291] page_owner tracks the page as allocated
[ 86.797931][ T4291] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4374, ts 85425628151, free_ts 72930485425
[ 86.816961][ T4291] get_page_from_freelist+0x1bbd/0x1ca0
[ 86.822533][ T4291] __alloc_pages+0x1ee/0x480
[ 86.827147][ T4291] new_slab+0xc0/0x4b0
[ 86.831234][ T4291] ___slab_alloc+0x80a/0xdd0
[ 86.835844][ T4291] kmem_cache_alloc+0x195/0x290
[ 86.840746][ T4291] qd_alloc+0x50/0x260
[ 86.844834][ T4291] gfs2_quota_init+0x74e/0xea0
[ 86.849616][ T4291] gfs2_make_fs_rw+0x414/0x580
[ 86.854397][ T4291] gfs2_fill_super+0x1837/0x1f00
[ 86.859362][ T4291] get_tree_bdev+0x3f1/0x610
[ 86.863971][ T4291] gfs2_get_tree+0x4d/0x1e0
[ 86.868489][ T4291] vfs_get_tree+0x88/0x270
[ 86.872932][ T4291] do_new_mount+0x24a/0xa40
[ 86.877460][ T4291] __se_sys_mount+0x2e3/0x3d0
[ 86.882157][ T4291] do_syscall_64+0x4c/0xa0
[ 86.886594][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.892517][ T4291] page last free stack trace:
[ 86.897195][ T4291] free_unref_page_prepare+0x637/0x6c0
[ 86.902675][ T4291] free_unref_page_list+0x119/0x820
[ 86.907911][ T4291] release_pages+0x186c/0x1be0
[ 86.912715][ T4291] tlb_finish_mmu+0x176/0x300
[ 86.917587][ T4291] unmap_region+0x344/0x3b0
[ 86.922123][ T4291] __do_munmap+0x9f8/0xdf0
[ 86.926549][ T4291] __vm_munmap+0x140/0x240
[ 86.930984][ T4291] __x64_sys_munmap+0x67/0x70
[ 86.935681][ T4291] do_syscall_64+0x4c/0xa0
[ 86.940117][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.946045][ T4291]
[ 86.948382][ T4291] Memory state around the buggy address:
[ 86.954028][ T4291] ffff88805fe70f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.962096][ T4291] ffff88805fe71000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.970179][ T4291] >ffff88805fe71080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 86.978244][ T4291] ^
[ 86.982843][ T4291] ffff88805fe71100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.990941][ T4291] ffff88805fe71180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 86.999016][ T4291] ==================================================================
[ 87.007094][ T4291] Disabling lock debugging due to kernel taint
[ 87.018980][ T4291] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 87.026210][ T4291] CPU: 1 PID: 4291 Comm: syz-executor Tainted: G B syzkaller #0
[ 87.035169][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 87.045261][ T4291] Call Trace:
[ 87.048554][ T4291]
[ 87.051499][ T4291] dump_stack_lvl+0x188/0x250
[ 87.056202][ T4291] ? show_regs_print_info+0x20/0x20
[ 87.061424][ T4291] ? load_image+0x400/0x400
[ 87.065949][ T4291] panic+0x2e5/0x810
[ 87.069867][ T4291] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 87.076053][ T4291] ? bpf_jit_dump+0xd0/0xd0
[ 87.080578][ T4291] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 87.086626][ T4291] ? _raw_spin_unlock+0x40/0x40
[ 87.091507][ T4291] ? qd_unlock+0x30/0x2d0
[ 87.095862][ T4291] check_panic_on_warn+0x80/0xa0
[ 87.100827][ T4291] ? qd_unlock+0x30/0x2d0
[ 87.105228][ T4291] end_report+0x6d/0xf0
[ 87.109407][ T4291] kasan_report+0x102/0x130
[ 87.113932][ T4291] ? qd_unlock+0x30/0x2d0
[ 87.118290][ T4291] kasan_check_range+0x235/0x290
[ 87.123246][ T4291] qd_unlock+0x30/0x2d0
[ 87.127517][ T4291] gfs2_quota_sync+0x5cf/0x700
[ 87.132322][ T4291] gfs2_sync_fs+0x48/0xb0
[ 87.136669][ T4291] sync_filesystem+0xe6/0x220
[ 87.141365][ T4291] generic_shutdown_super+0x6b/0x300
[ 87.146676][ T4291] kill_block_super+0x7c/0xe0
[ 87.151379][ T4291] deactivate_locked_super+0x93/0xf0
[ 87.156704][ T4291] cleanup_mnt+0x42d/0x4e0
[ 87.161142][ T4291] ? lockdep_hardirqs_on+0x94/0x140
[ 87.166352][ T4291] task_work_run+0x125/0x1a0
[ 87.170960][ T4291] exit_to_user_mode_loop+0x10f/0x130
[ 87.176348][ T4291] exit_to_user_mode_prepare+0xee/0x180
[ 87.181907][ T4291] syscall_exit_to_user_mode+0x16/0x40
[ 87.187378][ T4291] do_syscall_64+0x58/0xa0
[ 87.191803][ T4291] ? clear_bhb_loop+0x30/0x80
[ 87.196491][ T4291] ? clear_bhb_loop+0x30/0x80
[ 87.201183][ T4291] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.207093][ T4291] RIP: 0033:0x7f3c68f13f17
[ 87.211524][ T4291] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 87.231231][ T4291] RSP: 002b:00007ffe2a51dd58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 87.239655][ T4291] RAX: 0000000000000000 RBX: 00007f3c68f7c71f RCX: 00007f3c68f13f17
[ 87.247641][ T4291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2a51de10
[ 87.255620][ T4291] RBP: 00007ffe2a51de10 R08: 00007ffe2a51ee10 R09: 00000000ffffffff
[ 87.263599][ T4291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2a51eea0
[ 87.271580][ T4291] R13: 00007f3c68f7c71f R14: 0000000000014da0 R15: 00007ffe2a51eee0
[ 87.279565][ T4291]
[ 87.282875][ T4291] Kernel Offset: disabled
[ 87.287211][ T4291] Rebooting in 86400 seconds..