Warning: Permanently added '10.128.0.104' (ED25519) to the list of known hosts.
2026/04/03 14:05:28 parsed 1 programs
[ 62.624728][ T4188] cgroup: Unknown subsys name 'net'
[ 62.740207][ T4188] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 64.095287][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 65.531111][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 65.540512][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 65.551828][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 65.572849][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 65.581593][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 65.589889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 66.246632][ T4217] chnl_net:caif_netlink_parms(): no params data found
[ 66.320833][ T4217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.331441][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state
[ 66.345150][ T4217] device bridge_slave_0 entered promiscuous mode
[ 66.358935][ T4217] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.369046][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.383552][ T4217] device bridge_slave_1 entered promiscuous mode
[ 66.428032][ T4217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 66.446687][ T4217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 66.489617][ T4217] team0: Port device team_slave_0 added
[ 66.501346][ T4217] team0: Port device team_slave_1 added
[ 66.528023][ T4217] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 66.537203][ T4217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 66.569156][ T4217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 66.586416][ T4217] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 66.594110][ T4217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 66.627716][ T4217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 66.673971][ T4217] device hsr_slave_0 entered promiscuous mode
[ 66.682938][ T4217] device hsr_slave_1 entered promiscuous mode
[ 66.831197][ T4217] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 66.848642][ T4217] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 66.861799][ T4217] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 66.873786][ T4217] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 66.973510][ T4217] 8021q: adding VLAN 0 to HW filter on device bond0
[ 66.990146][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 67.007558][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 67.021268][ T4217] 8021q: adding VLAN 0 to HW filter on device team0
[ 67.034584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 67.044362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 67.055784][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.063349][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.076962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 67.086233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 67.097037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 67.110216][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.118718][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.144796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 67.156915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 67.167911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 67.178785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 67.189747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 67.199869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 67.211998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 67.224438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 67.239284][ T4217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 67.252429][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 67.261998][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 67.394134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 67.402427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 67.416950][ T4217] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 67.433622][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 67.453257][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 67.463751][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 67.472527][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 67.483674][ T4217] device veth0_vlan entered promiscuous mode
[ 67.496581][ T4217] device veth1_vlan entered promiscuous mode
[ 67.524468][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 67.534247][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 67.543941][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 67.567354][ T4217] device veth0_macvtap entered promiscuous mode
[ 67.578586][ T4217] device veth1_macvtap entered promiscuous mode
[ 67.589085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 67.605924][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 67.613643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 67.623658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 67.646154][ T4217] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 67.656020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 67.666085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 67.678492][ T4217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.690027][ T4217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.701004][ T4217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.713389][ T4217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 69.952985][ T455] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/04/03 14:05:37 executed programs: 0
[ 70.188114][ T4283] chnl_net:caif_netlink_parms(): no params data found
[ 70.238895][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.249375][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.265479][ T4283] device bridge_slave_0 entered promiscuous mode
[ 70.275728][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.287770][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.302436][ T4283] device bridge_slave_1 entered promiscuous mode
[ 70.325554][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.343158][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.383390][ T4283] team0: Port device team_slave_0 added
[ 70.394419][ T4283] team0: Port device team_slave_1 added
[ 70.423420][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.432708][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.468954][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.489218][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.498112][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.538950][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 70.570411][ T4283] device hsr_slave_0 entered promiscuous mode
[ 70.579555][ T4283] device hsr_slave_1 entered promiscuous mode
[ 70.589679][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 70.599718][ T4283] Cannot create hsr debugfs directory
[ 71.588095][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.595775][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.156992][ T4227] Bluetooth: hci0: command 0x0409 tx timeout
[ 72.653655][ T455] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 72.721473][ T455] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 72.804213][ T455] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 73.626183][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 73.640984][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 73.651033][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 73.663783][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 73.803868][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.819792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 73.828246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 73.858915][ T4283] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.872558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 73.887293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 73.897320][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.905473][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.914562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 73.948718][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 73.958180][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 73.968000][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.975991][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.998942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 74.008588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 74.020962][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 74.032790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 74.043651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 74.073821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 74.086261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 74.103843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 74.115193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 74.135641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 74.147459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 74.187060][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 74.225092][ T4226] Bluetooth: hci0: command 0x041b tx timeout
[ 74.292608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 74.300898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 74.337093][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 74.356647][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 74.367745][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 74.409480][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 74.419288][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 74.428766][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 74.438018][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 74.447657][ T4283] device veth0_vlan entered promiscuous mode
[ 74.462632][ T455] device hsr_slave_0 left promiscuous mode
[ 74.469948][ T455] device hsr_slave_1 left promiscuous mode
[ 74.477188][ T455] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 74.485243][ T455] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 74.495407][ T455] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 74.503742][ T455] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 74.512114][ T455] device bridge_slave_1 left promiscuous mode
[ 74.519907][ T455] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.533521][ T455] device bridge_slave_0 left promiscuous mode
[ 74.541734][ T455] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.561047][ T455] device veth1_macvtap left promiscuous mode
[ 74.568373][ T455] device veth0_macvtap left promiscuous mode
[ 74.576252][ T455] device veth1_vlan left promiscuous mode
[ 74.582929][ T455] device veth0_vlan left promiscuous mode
[ 74.742817][ T455] team0 (unregistering): Port device team_slave_1 removed
[ 74.756471][ T455] team0 (unregistering): Port device team_slave_0 removed
[ 74.769614][ T455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 74.783208][ T455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 74.837743][ T455] bond0 (unregistering): Released all slaves
[ 74.900723][ T4283] device veth1_vlan entered promiscuous mode
[ 74.909491][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 74.934896][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 74.960431][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 74.972988][ T4283] device veth0_macvtap entered promiscuous mode
[ 74.983295][ T4283] device veth1_macvtap entered promiscuous mode
[ 75.001871][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.017466][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.027095][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 75.036111][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 75.045301][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 75.054062][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 75.063746][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 75.073168][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 75.086710][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.096059][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.106596][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.116475][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.201209][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.212945][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.222308][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 75.240184][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 75.249710][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 75.261260][ T3072] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 75.619251][ T4352] loop0: detected capacity change from 0 to 32768
[ 75.761160][ T4352] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 75.788090][ T4352] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 75.842785][ T4352] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 75.858858][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 75.869705][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 75.911213][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms
[ 75.930053][ T21] gfs2: fsid=syz:syz.0: jid=0: Done
[ 75.945381][ T4352] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 76.082467][ T4352] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 76.109237][ T4283] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 76.109237][ T4283] inode = 11 2339
[ 76.109237][ T4283] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[ 76.134866][ T4283] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 76.167638][ T4283] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 76.194696][ T4283] CPU: 1 PID: 4283 Comm: syz-executor Not tainted syzkaller #0
[ 76.202662][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 76.213355][ T4283] Call Trace:
[ 76.217080][ T4283]
[ 76.220198][ T4283] dump_stack_lvl+0x188/0x250
[ 76.225268][ T4283] ? show_regs_print_info+0x20/0x20
[ 76.231189][ T4283] ? load_image+0x400/0x400
[ 76.235974][ T4283] ? do_raw_spin_unlock+0x11d/0x230
[ 76.241438][ T4283] gfs2_assert_warn_i+0x18f/0x2c0
[ 76.246891][ T4283] gfs2_quota_cleanup+0x4b4/0x6a0
[ 76.252395][ T4283] gfs2_make_fs_ro+0x440/0x620
[ 76.257535][ T4283] ? __might_sleep+0xf0/0xf0
[ 76.262337][ T4283] ? gfs2_dinode_out+0xb00/0xb00
[ 76.267547][ T4283] ? _raw_spin_unlock+0x24/0x40
[ 76.272808][ T4283] ? gfs2_glock_nq+0xcb0/0x1550
[ 76.278220][ T4283] gfs2_withdraw+0x610/0x1490
[ 76.283503][ T4283] ? gfs2_lm+0x240/0x240
[ 76.288060][ T4283] ? __schedule+0x11f7/0x43c0
[ 76.292938][ T4283] ? gfs2_freeze_lock+0x52/0xc0
[ 76.298261][ T4283] ? gfs2_consist_inode_i+0xc0/0xe0
[ 76.303844][ T4283] gfs2_inode_refresh+0xb64/0xff0
[ 76.305600][ T4226] Bluetooth: hci0: command 0x040f tx timeout
[ 76.309154][ T4283] ? do_promote+0x71a/0xab0
[ 76.320017][ T4283] ? gfs2_inode_metasync+0xf0/0xf0
[ 76.325673][ T4283] ? __lock_acquire+0x7d10/0x7d10
[ 76.332564][ T4283] inode_go_lock+0x127/0x470
[ 76.337549][ T4283] do_promote+0x741/0xab0
[ 76.342213][ T4283] finish_xmote+0x4df/0xb00
[ 76.347283][ T4283] do_xmote+0x7b6/0x1120
[ 76.352376][ T4283] gfs2_glock_nq+0xc7a/0x1550
[ 76.357541][ T4283] do_sync+0x4ab/0xc40
[ 76.362001][ T4283] ? slot_put+0x1e0/0x1e0
[ 76.366525][ T4283] ? __lock_acquire+0x7d10/0x7d10
[ 76.372003][ T4283] ? do_raw_spin_lock+0x128/0x2f0
[ 76.377313][ T4283] ? do_sync+0x4a3/0xc40
[ 76.383098][ T4283] ? do_raw_spin_unlock+0x11d/0x230
[ 76.388787][ T4283] gfs2_quota_sync+0x32c/0x700
[ 76.393910][ T4283] gfs2_sync_fs+0x48/0xb0
[ 76.398246][ T4283] sync_filesystem+0xe6/0x220
[ 76.403206][ T4283] generic_shutdown_super+0x6b/0x300
[ 76.408681][ T4283] kill_block_super+0x7c/0xe0
[ 76.413613][ T4283] deactivate_locked_super+0x93/0xf0
[ 76.418989][ T4283] cleanup_mnt+0x42d/0x4e0
[ 76.423394][ T4283] ? lockdep_hardirqs_on+0x94/0x140
[ 76.428962][ T4283] task_work_run+0x125/0x1a0
[ 76.433975][ T4283] exit_to_user_mode_loop+0x10f/0x130
[ 76.439615][ T4283] exit_to_user_mode_prepare+0xee/0x180
[ 76.445343][ T4283] syscall_exit_to_user_mode+0x16/0x40
[ 76.451157][ T4283] do_syscall_64+0x58/0xa0
[ 76.455789][ T4283] ? clear_bhb_loop+0x30/0x80
[ 76.460691][ T4283] ? clear_bhb_loop+0x30/0x80
[ 76.466133][ T4283] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 76.472675][ T4283] RIP: 0033:0x7fea5b488a57
[ 76.477852][ T4283] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 76.498820][ T4283] RSP: 002b:00007fffbe9baea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 76.507418][ T4283] RAX: 0000000000000000 RBX: 00007fea5b51d048 RCX: 00007fea5b488a57
[ 76.515558][ T4283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbe9baf60
[ 76.523982][ T4283] RBP: 00007fffbe9baf60 R08: 00007fffbe9bbf60 R09: 00000000ffffffff
[ 76.532045][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffbe9bbff0
[ 76.540361][ T4283] R13: 00007fea5b51d048 R14: 00000000000125fb R15: 00007fffbe9bc030
[ 76.548646][ T4283]
[ 76.570930][ T4283] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 76.580417][ T4283] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 76.590200][ T4283] gfs2: fsid=syz:syz.0: File system withdrawn
[ 76.598293][ T4283] CPU: 0 PID: 4283 Comm: syz-executor Not tainted syzkaller #0
[ 76.606124][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 76.616625][ T4283] Call Trace:
[ 76.620098][ T4283]
[ 76.623265][ T4283] dump_stack_lvl+0x188/0x250
[ 76.628230][ T4283] ? kobject_uevent_env+0x371/0x890
[ 76.633842][ T4283] ? show_regs_print_info+0x20/0x20
[ 76.639417][ T4283] ? load_image+0x400/0x400
[ 76.644361][ T4283] ? kobject_uevent_env+0x371/0x890
[ 76.649656][ T4283] ? lockref_put_or_lock+0x6e/0xb0
[ 76.655190][ T4283] gfs2_withdraw+0x1149/0x1490
[ 76.660096][ T4283] ? gfs2_lm+0x240/0x240
[ 76.664456][ T4283] ? __schedule+0x11f7/0x43c0
[ 76.669832][ T4283] ? gfs2_consist_inode_i+0xc0/0xe0
[ 76.675942][ T4283] gfs2_inode_refresh+0xb64/0xff0
[ 76.681281][ T4283] ? do_promote+0x71a/0xab0
[ 76.686680][ T4283] ? gfs2_inode_metasync+0xf0/0xf0
[ 76.692205][ T4283] ? __lock_acquire+0x7d10/0x7d10
[ 76.697379][ T4283] inode_go_lock+0x127/0x470
[ 76.702105][ T4283] do_promote+0x741/0xab0
[ 76.706808][ T4283] finish_xmote+0x4df/0xb00
[ 76.711666][ T4283] do_xmote+0x7b6/0x1120
[ 76.715949][ T4283] gfs2_glock_nq+0xc7a/0x1550
[ 76.720837][ T4283] do_sync+0x4ab/0xc40
[ 76.724945][ T4283] ? slot_put+0x1e0/0x1e0
[ 76.729372][ T4283] ? __lock_acquire+0x7d10/0x7d10
[ 76.734694][ T4283] ? do_raw_spin_lock+0x128/0x2f0
[ 76.740078][ T4283] ? do_sync+0x4a3/0xc40
[ 76.744812][ T4283] ? do_raw_spin_unlock+0x11d/0x230
[ 76.750213][ T4283] gfs2_quota_sync+0x32c/0x700
[ 76.755378][ T4283] gfs2_sync_fs+0x48/0xb0
[ 76.759995][ T4283] sync_filesystem+0xe6/0x220
[ 76.764930][ T4283] generic_shutdown_super+0x6b/0x300
[ 76.770332][ T4283] kill_block_super+0x7c/0xe0
[ 76.775104][ T4283] deactivate_locked_super+0x93/0xf0
[ 76.780508][ T4283] cleanup_mnt+0x42d/0x4e0
[ 76.785110][ T4283] ? lockdep_hardirqs_on+0x94/0x140
[ 76.790423][ T4283] task_work_run+0x125/0x1a0
[ 76.795306][ T4283] exit_to_user_mode_loop+0x10f/0x130
[ 76.800864][ T4283] exit_to_user_mode_prepare+0xee/0x180
[ 76.807056][ T4283] syscall_exit_to_user_mode+0x16/0x40
[ 76.813065][ T4283] do_syscall_64+0x58/0xa0
[ 76.818033][ T4283] ? clear_bhb_loop+0x30/0x80
[ 76.823167][ T4283] ? clear_bhb_loop+0x30/0x80
[ 76.828163][ T4283] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 76.834425][ T4283] RIP: 0033:0x7fea5b488a57
[ 76.839385][ T4283] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 76.860858][ T4283] RSP: 002b:00007fffbe9baea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 76.870310][ T4283] RAX: 0000000000000000 RBX: 00007fea5b51d048 RCX: 00007fea5b488a57
[ 76.879256][ T4283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbe9baf60
[ 76.888022][ T4283] RBP: 00007fffbe9baf60 R08: 00007fffbe9bbf60 R09: 00000000ffffffff
[ 76.897210][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffbe9bbff0
[ 76.905915][ T4283] R13: 00007fea5b51d048 R14: 00000000000125fb R15: 00007fffbe9bc030
[ 76.914253][ T4283]
[ 76.927987][ T4283] ==================================================================
[ 76.936632][ T4283] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 76.943531][ T4283] Read of size 8 at addr ffff888072486090 by task syz-executor/4283
[ 76.951701][ T4283]
[ 76.954220][ T4283] CPU: 0 PID: 4283 Comm: syz-executor Not tainted syzkaller #0
[ 76.963078][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 76.974842][ T4283] Call Trace:
[ 76.978694][ T4283]
[ 76.982015][ T4283] dump_stack_lvl+0x188/0x250
[ 76.987084][ T4283] ? show_regs_print_info+0x20/0x20
[ 76.992927][ T4283] ? _printk+0xda/0x130
[ 76.998153][ T4283] ? qd_unlock+0x30/0x2d0
[ 77.002971][ T4283] ? load_image+0x400/0x400
[ 77.007617][ T4283] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 77.013681][ T4283] print_address_description+0x60/0x2d0
[ 77.020036][ T4283] ? qd_unlock+0x30/0x2d0
[ 77.025093][ T4283] kasan_report+0xdf/