Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. 2026/01/19 05:17:50 parsed 1 programs [ 54.694724][ T4186] cgroup: Unknown subsys name 'net' [ 54.837678][ T4186] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.077485][ T4186] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 57.846085][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.867544][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.884918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.904017][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.912941][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.922038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.571016][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 59.610864][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.618564][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.627477][ T4279] device bridge_slave_0 entered promiscuous mode [ 59.636148][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.643353][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.651226][ T4279] device bridge_slave_1 entered promiscuous mode [ 59.685910][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.696771][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.716090][ T4279] team0: Port device team_slave_0 added [ 59.725482][ T4279] team0: Port device team_slave_1 added [ 59.741587][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.748600][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.774619][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.804500][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.811460][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.837793][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.863034][ T4279] device hsr_slave_0 entered promiscuous mode [ 59.869663][ T4279] device hsr_slave_1 entered promiscuous mode [ 59.991547][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.002191][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.011272][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.020230][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.085729][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.121936][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.130827][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.140856][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.169726][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.179202][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.188446][ T484] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.195694][ T484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.223476][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.231444][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.240471][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.249013][ T484] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.256164][ T484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.265343][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.275949][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.301559][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.310949][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.320350][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.330472][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.339985][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.352531][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.360948][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.388110][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.399939][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.408137][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.418116][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.545112][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.552751][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.566770][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.584330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.594049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.614053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.625193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.633377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.643789][ T4279] device veth0_vlan entered promiscuous mode [ 60.666547][ T4279] device veth1_vlan entered promiscuous mode [ 60.699183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.707426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.716375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.727955][ T4279] device veth0_macvtap entered promiscuous mode [ 60.739382][ T4279] device veth1_macvtap entered promiscuous mode [ 60.759325][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.767737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.776174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.785160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.802464][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.812252][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.821937][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.831083][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.840022][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.851400][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.861662][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.954293][ T4279] syz-executor (4279) used greatest stack depth: 20112 bytes left 2026/01/19 05:17:58 executed programs: 0 [ 61.533100][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 61.587104][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.594893][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.604111][ T4301] device bridge_slave_0 entered promiscuous mode [ 61.613518][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.620620][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.628431][ T4301] device bridge_slave_1 entered promiscuous mode [ 61.650952][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.661959][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.696473][ T4301] team0: Port device team_slave_0 added [ 61.705414][ T4301] team0: Port device team_slave_1 added [ 61.728710][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.735874][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.762422][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.777393][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.785138][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.811935][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.843687][ T4301] device hsr_slave_0 entered promiscuous mode [ 61.850284][ T4301] device hsr_slave_1 entered promiscuous mode [ 61.857417][ T4301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.865318][ T4301] Cannot create hsr debugfs directory [ 61.959327][ T4301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.433194][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 64.849194][ T4301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.512502][ T4219] Bluetooth: hci0: command 0x041b tx timeout [ 66.328475][ T4301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.409504][ T4301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.557495][ T4301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.567221][ T4301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.587990][ T4301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.597413][ T4301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.653394][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.666294][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.674250][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.691909][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.701754][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.710524][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.720223][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.727319][ T459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.736765][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.751056][ T154] device hsr_slave_0 left promiscuous mode [ 66.757748][ T154] device hsr_slave_1 left promiscuous mode [ 66.764302][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.771702][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.781303][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.788760][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.796484][ T154] device bridge_slave_1 left promiscuous mode [ 66.802886][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.817381][ T154] device bridge_slave_0 left promiscuous mode [ 66.823800][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.839837][ T154] device veth1_macvtap left promiscuous mode [ 66.846128][ T154] device veth0_macvtap left promiscuous mode [ 66.852145][ T154] device veth1_vlan left promiscuous mode [ 66.858658][ T154] device veth0_vlan left promiscuous mode [ 66.983352][ T154] team0 (unregistering): Port device team_slave_1 removed [ 66.997053][ T154] team0 (unregistering): Port device team_slave_0 removed [ 67.009776][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.022615][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.071524][ T154] bond0 (unregistering): Released all slaves [ 67.138349][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.147782][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.156409][ T484] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.163505][ T484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.174477][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.184417][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.205909][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.215794][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.225464][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.235068][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.245423][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.257973][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.266581][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.279171][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.287960][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.298127][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.378842][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.387345][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.400822][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.415822][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.424856][ T459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.441958][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.450324][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.459173][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.467086][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.477261][ T4301] device veth0_vlan entered promiscuous mode [ 67.489676][ T4301] device veth1_vlan entered promiscuous mode [ 67.509212][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.534205][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.543262][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.551816][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.563946][ T4301] device veth0_macvtap entered promiscuous mode [ 67.576398][ T4301] device veth1_macvtap entered promiscuous mode [ 67.592705][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.600044][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.607878][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 67.617368][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.626120][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.635007][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.648317][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.657595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.666333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.678507][ T4301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.688097][ T4301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.697131][ T4301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.706303][ T4301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.769450][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.787822][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.807410][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/01/19 05:18:05 executed programs: 2 [ 67.819624][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.827977][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.837933][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.184996][ T4319] loop0: detected capacity change from 0 to 32768 [ 68.204247][ T4319] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 68.219319][ T4319] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 68.252338][ T4319] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 68.269184][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 68.276439][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 68.308095][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms [ 68.317829][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 68.324708][ T4319] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 68.425973][ T4319] gfs2: fsid=syz:syz.0: found 1 quota changes [ 68.451485][ T4301] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 68.451485][ T4301] inode = 11 2339 [ 68.451485][ T4301] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 68.475653][ T4301] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 68.509341][ T4301] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 68.530031][ T4301] CPU: 1 PID: 4301 Comm: syz-executor Not tainted syzkaller #0 [ 68.537608][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.547659][ T4301] Call Trace: [ 68.550921][ T4301] [ 68.553837][ T4301] dump_stack_lvl+0x188/0x250 [ 68.558512][ T4301] ? show_regs_print_info+0x20/0x20 [ 68.563710][ T4301] ? load_image+0x400/0x400 [ 68.568200][ T4301] ? do_raw_spin_unlock+0x11d/0x230 [ 68.573380][ T4301] gfs2_assert_warn_i+0x18f/0x2c0 [ 68.578389][ T4301] gfs2_quota_cleanup+0x4b4/0x6a0 [ 68.583402][ T4301] gfs2_make_fs_ro+0x440/0x620 [ 68.588155][ T4301] ? rcu_is_watching+0x11/0xa0 [ 68.592902][ T4301] ? gfs2_dinode_out+0xb00/0xb00 [ 68.597875][ T4301] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.604016][ T4301] ? lockdep_hardirqs_on+0x94/0x140 [ 68.609200][ T4301] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.615344][ T4301] ? gfs2_withdraw+0x5f5/0x1490 [ 68.620177][ T4301] gfs2_withdraw+0x610/0x1490 [ 68.624842][ T4301] ? gfs2_lm+0x240/0x240 [ 68.629064][ T4301] ? __schedule+0x11f7/0x43c0 [ 68.633731][ T4301] ? gfs2_freeze_lock+0x52/0xc0 [ 68.638571][ T4301] ? gfs2_consist_inode_i+0xc0/0xe0 [ 68.643749][ T4301] gfs2_inode_refresh+0xb64/0xff0 [ 68.648760][ T4301] ? do_promote+0x71a/0xab0 [ 68.653267][ T4301] ? gfs2_inode_metasync+0xf0/0xf0 [ 68.658360][ T4301] ? __lock_acquire+0x7d10/0x7d10 [ 68.663371][ T4301] inode_go_lock+0x127/0x470 [ 68.667948][ T4301] do_promote+0x741/0xab0 [ 68.672263][ T4301] finish_xmote+0x4df/0xb00 [ 68.676759][ T4301] do_xmote+0x7b6/0x1120 [ 68.680987][ T4301] gfs2_glock_nq+0xc7a/0x1550 [ 68.685650][ T4301] do_sync+0x4ab/0xc40 [ 68.689713][ T4301] ? slot_put+0x1e0/0x1e0 [ 68.694024][ T4301] ? __lock_acquire+0x7d10/0x7d10 [ 68.699029][ T4301] ? do_raw_spin_lock+0x128/0x2f0 [ 68.704032][ T4301] ? do_sync+0x4a3/0xc40 [ 68.708261][ T4301] ? do_raw_spin_unlock+0x11d/0x230 [ 68.713470][ T4301] gfs2_quota_sync+0x32c/0x700 [ 68.718248][ T4301] gfs2_sync_fs+0x48/0xb0 [ 68.722567][ T4301] sync_filesystem+0xe6/0x220 [ 68.727225][ T4301] generic_shutdown_super+0x6b/0x300 [ 68.732500][ T4301] kill_block_super+0x7c/0xe0 [ 68.737192][ T4301] deactivate_locked_super+0x93/0xf0 [ 68.742463][ T4301] cleanup_mnt+0x42d/0x4e0 [ 68.746866][ T4301] ? lockdep_hardirqs_on+0x94/0x140 [ 68.752045][ T4301] task_work_run+0x125/0x1a0 [ 68.756617][ T4301] exit_to_user_mode_loop+0x10f/0x130 [ 68.761970][ T4301] exit_to_user_mode_prepare+0xee/0x180 [ 68.767498][ T4301] syscall_exit_to_user_mode+0x16/0x40 [ 68.772941][ T4301] do_syscall_64+0x58/0xa0 [ 68.777337][ T4301] ? clear_bhb_loop+0x30/0x80 [ 68.781993][ T4301] ? clear_bhb_loop+0x30/0x80 [ 68.786652][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.792539][ T4301] RIP: 0033:0x7f0b3c984f17 [ 68.796951][ T4301] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 68.816547][ T4301] RSP: 002b:00007ffd12e33248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 68.824956][ T4301] RAX: 0000000000000000 RBX: 00007f0b3c9ed71f RCX: 00007f0b3c984f17 [ 68.832927][ T4301] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd12e33300 [ 68.840883][ T4301] RBP: 00007ffd12e33300 R08: 00007ffd12e34300 R09: 00000000ffffffff [ 68.848838][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd12e34390 [ 68.856828][ T4301] R13: 00007f0b3c9ed71f R14: 0000000000010b31 R15: 00007ffd12e343d0 [ 68.864927][ T4301] [ 68.877188][ T4301] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 68.886858][ T4301] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 68.897031][ T4301] gfs2: fsid=syz:syz.0: File system withdrawn [ 68.903922][ T4301] CPU: 0 PID: 4301 Comm: syz-executor Not tainted syzkaller #0 [ 68.911488][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.921538][ T4301] Call Trace: [ 68.924807][ T4301] [ 68.927724][ T4301] dump_stack_lvl+0x188/0x250 [ 68.932381][ T4301] ? kobject_uevent_env+0x371/0x890 [ 68.937563][ T4301] ? show_regs_print_info+0x20/0x20 [ 68.942741][ T4301] ? load_image+0x400/0x400 [ 68.947231][ T4301] ? kobject_uevent_env+0x371/0x890 [ 68.952416][ T4301] ? lockref_put_or_lock+0x6e/0xb0 [ 68.957522][ T4301] gfs2_withdraw+0x1149/0x1490 [ 68.962290][ T4301] ? gfs2_lm+0x240/0x240 [ 68.966537][ T4301] ? __schedule+0x11f7/0x43c0 [ 68.971233][ T4301] ? gfs2_consist_inode_i+0xc0/0xe0 [ 68.976421][ T4301] gfs2_inode_refresh+0xb64/0xff0 [ 68.981433][ T4301] ? do_promote+0x71a/0xab0 [ 68.985920][ T4301] ? gfs2_inode_metasync+0xf0/0xf0 [ 68.991014][ T4301] ? __lock_acquire+0x7d10/0x7d10 [ 68.996033][ T4301] inode_go_lock+0x127/0x470 [ 69.000620][ T4301] do_promote+0x741/0xab0 [ 69.004951][ T4301] finish_xmote+0x4df/0xb00 [ 69.009443][ T4301] do_xmote+0x7b6/0x1120 [ 69.013685][ T4301] gfs2_glock_nq+0xc7a/0x1550 [ 69.018394][ T4301] do_sync+0x4ab/0xc40 [ 69.022459][ T4301] ? slot_put+0x1e0/0x1e0 [ 69.026773][ T4301] ? __lock_acquire+0x7d10/0x7d10 [ 69.031850][ T4301] ? do_raw_spin_lock+0x128/0x2f0 [ 69.036889][ T4301] ? do_sync+0x4a3/0xc40 [ 69.041116][ T4301] ? do_raw_spin_unlock+0x11d/0x230 [ 69.046299][ T4301] gfs2_quota_sync+0x32c/0x700 [ 69.051049][ T4301] gfs2_sync_fs+0x48/0xb0 [ 69.055363][ T4301] sync_filesystem+0xe6/0x220 [ 69.060024][ T4301] generic_shutdown_super+0x6b/0x300 [ 69.065307][ T4301] kill_block_super+0x7c/0xe0 [ 69.069996][ T4301] deactivate_locked_super+0x93/0xf0 [ 69.075266][ T4301] cleanup_mnt+0x42d/0x4e0 [ 69.079693][ T4301] ? lockdep_hardirqs_on+0x94/0x140 [ 69.084923][ T4301] task_work_run+0x125/0x1a0 [ 69.089508][ T4301] exit_to_user_mode_loop+0x10f/0x130 [ 69.094872][ T4301] exit_to_user_mode_prepare+0xee/0x180 [ 69.100398][ T4301] syscall_exit_to_user_mode+0x16/0x40 [ 69.105839][ T4301] do_syscall_64+0x58/0xa0 [ 69.110233][ T4301] ? clear_bhb_loop+0x30/0x80 [ 69.114897][ T4301] ? clear_bhb_loop+0x30/0x80 [ 69.119598][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.125495][ T4301] RIP: 0033:0x7f0b3c984f17 [ 69.129901][ T4301] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 69.149489][ T4301] RSP: 002b:00007ffd12e33248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 69.157899][ T4301] RAX: 0000000000000000 RBX: 00007f0b3c9ed71f RCX: 00007f0b3c984f17 [ 69.165868][ T4301] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd12e33300 [ 69.173840][ T4301] RBP: 00007ffd12e33300 R08: 00007ffd12e34300 R09: 00000000ffffffff [ 69.181819][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd12e34390 [ 69.189818][ T4301] R13: 00007f0b3c9ed71f R14: 0000000000010b31 R15: 00007ffd12e343d0 [ 69.197798][ T4301] [ 69.208308][ T4301] ================================================================== [ 69.216616][ T4301] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 69.223305][ T4301] Read of size 8 at addr ffff88807139f090 by task syz-executor/4301 [ 69.231272][ T4301] [ 69.233583][ T4301] CPU: 0 PID: 4301 Comm: syz-executor Not tainted syzkaller #0 [ 69.241112][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.251157][ T4301] Call Trace: [ 69.254429][ T4301] [ 69.257350][ T4301] dump_stack_lvl+0x188/0x250 [ 69.262023][ T4301] ? show_regs_print_info+0x20/0x20 [ 69.267209][ T4301] ? _printk+0xda/0x130 [ 69.271353][ T4301] ? qd_unlock+0x30/0x2d0 [ 69.275679][ T4301] ? load_image+0x400/0x400 [ 69.280171][ T4301] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 69.285625][ T4301] print_address_description+0x60/0x2d0 [ 69.291168][ T4301] ? qd_unlock+0x30/0x2d0 [ 69.295491][ T4301] kasan_report+0xdf/0x130 [ 69.299899][ T4301] ? qd_unlock+0x30/0x2d0 [ 69.304224][ T4301] kasan_check_range+0x235/0x290 [ 69.309158][ T4301] qd_unlock+0x30/0x2d0 [ 69.313313][ T4301] gfs2_quota_sync+0x5cf/0x700 [ 69.318075][ T4301] gfs2_sync_fs+0x48/0xb0 [ 69.322394][ T4301] sync_filesystem+0xe6/0x220 [ 69.327064][ T4301] generic_shutdown_super+0x6b/0x300 [ 69.332339][ T4301] kill_block_super+0x7c/0xe0 [ 69.337007][ T4301] deactivate_locked_super+0x93/0xf0 [ 69.342286][ T4301] cleanup_mnt+0x42d/0x4e0 [ 69.346695][ T4301] ? lockdep_hardirqs_on+0x94/0x140 [ 69.351885][ T4301] task_work_run+0x125/0x1a0 [ 69.356471][ T4301] exit_to_user_mode_loop+0x10f/0x130 [ 69.361837][ T4301] exit_to_user_mode_prepare+0xee/0x180 [ 69.367376][ T4301] syscall_exit_to_user_mode+0x16/0x40 [ 69.372861][ T4301] do_syscall_64+0x58/0xa0 [ 69.377268][ T4301] ? clear_bhb_loop+0x30/0x80 [ 69.381932][ T4301] ? clear_bhb_loop+0x30/0x80 [ 69.386595][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.392474][ T4301] RIP: 0033:0x7f0b3c984f17 [ 69.396880][ T4301] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 69.416475][ T4301] RSP: 002b:00007ffd12e33248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 69.424880][ T4301] RAX: 0000000000000000 RBX: 00007f0b3c9ed71f RCX: 00007f0b3c984f17 [ 69.432845][ T4301] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd12e33300 [ 69.440806][ T4301] RBP: 00007ffd12e33300 R08: 00007ffd12e34300 R09: 00000000ffffffff [ 69.448770][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd12e34390 [ 69.456733][ T4301] R13: 00007f0b3c9ed71f R14: 0000000000010b31 R15: 00007ffd12e343d0 [ 69.464708][ T4301] [ 69.467718][ T4301] [ 69.470025][ T4301] Allocated by task 4319: [ 69.474329][ T4301] __kasan_slab_alloc+0x9c/0xd0 [ 69.479170][ T4301] slab_post_alloc_hook+0x4c/0x380 [ 69.484264][ T4301] kmem_cache_alloc+0x100/0x290 [ 69.489095][ T4301] qd_alloc+0x50/0x260 [ 69.493151][ T4301] gfs2_quota_init+0x74e/0xea0 [ 69.497902][ T4301] gfs2_make_fs_rw+0x414/0x580 [ 69.502650][ T4301] gfs2_fill_super+0x1837/0x1f00 [ 69.507572][ T4301] get_tree_bdev+0x3f1/0x610 [ 69.512149][ T4301] gfs2_get_tree+0x4d/0x1e0 [ 69.516638][ T4301] vfs_get_tree+0x88/0x270 [ 69.521044][ T4301] do_new_mount+0x24a/0xa40 [ 69.525533][ T4301] __se_sys_mount+0x2e3/0x3d0 [ 69.530196][ T4301] do_syscall_64+0x4c/0xa0 [ 69.534638][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.540516][ T4301] [ 69.542821][ T4301] Freed by task 7: [ 69.546519][ T4301] kasan_set_track+0x4b/0x70 [ 69.551096][ T4301] kasan_set_free_info+0x1f/0x40 [ 69.556018][ T4301] ____kasan_slab_free+0xd5/0x110 [ 69.561028][ T4301] slab_free_freelist_hook+0xea/0x170 [ 69.566384][ T4301] kmem_cache_free+0x8f/0x210 [ 69.571041][ T4301] rcu_core+0x9d2/0x1670 [ 69.575271][ T4301] handle_softirqs+0x339/0x830 [ 69.580019][ T4301] do_softirq+0x142/0x210 [ 69.584333][ T4301] __local_bh_enable_ip+0x180/0x1c0 [ 69.589515][ T4301] addrconf_dad_work+0x2b1/0x1540 [ 69.594523][ T4301] process_one_work+0x85f/0x1010 [ 69.599445][ T4301] worker_thread+0xaa6/0x1290 [ 69.604106][ T4301] kthread+0x436/0x520 [ 69.608160][ T4301] ret_from_fork+0x1f/0x30 [ 69.612559][ T4301] [ 69.614865][ T4301] Last potentially related work creation: [ 69.620559][ T4301] kasan_save_stack+0x35/0x60 [ 69.625223][ T4301] kasan_record_aux_stack+0xb8/0x100 [ 69.630490][ T4301] call_rcu+0x189/0x950 [ 69.634630][ T4301] gfs2_quota_cleanup+0x43c/0x6a0 [ 69.639643][ T4301] gfs2_make_fs_ro+0x440/0x620 [ 69.644390][ T4301] gfs2_withdraw+0x610/0x1490 [ 69.649050][ T4301] gfs2_inode_refresh+0xb64/0xff0 [ 69.654071][ T4301] inode_go_lock+0x127/0x470 [ 69.658644][ T4301] do_promote+0x741/0xab0 [ 69.662959][ T4301] finish_xmote+0x4df/0xb00 [ 69.667444][ T4301] do_xmote+0x7b6/0x1120 [ 69.671669][ T4301] gfs2_glock_nq+0xc7a/0x1550 [ 69.676332][ T4301] do_sync+0x4ab/0xc40 [ 69.680385][ T4301] gfs2_quota_sync+0x32c/0x700 [ 69.685136][ T4301] gfs2_sync_fs+0x48/0xb0 [ 69.689448][ T4301] sync_filesystem+0xe6/0x220 [ 69.694110][ T4301] generic_shutdown_super+0x6b/0x300 [ 69.699378][ T4301] kill_block_super+0x7c/0xe0 [ 69.704042][ T4301] deactivate_locked_super+0x93/0xf0 [ 69.709317][ T4301] cleanup_mnt+0x42d/0x4e0 [ 69.713720][ T4301] task_work_run+0x125/0x1a0 [ 69.718331][ T4301] exit_to_user_mode_loop+0x10f/0x130 [ 69.723690][ T4301] exit_to_user_mode_prepare+0xee/0x180 [ 69.729221][ T4301] syscall_exit_to_user_mode+0x16/0x40 [ 69.734670][ T4301] do_syscall_64+0x58/0xa0 [ 69.739069][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.744947][ T4301] [ 69.747252][ T4301] The buggy address belongs to the object at ffff88807139f000 [ 69.747252][ T4301] which belongs to the cache gfs2_quotad of size 272 [ 69.761285][ T4301] The buggy address is located 144 bytes inside of [ 69.761285][ T4301] 272-byte region [ffff88807139f000, ffff88807139f110) [ 69.774545][ T4301] The buggy address belongs to the page: [ 69.780169][ T4301] page:ffffea0001c4e7c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7139f [ 69.790302][ T4301] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 69.797846][ T4301] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff8881468aa8c0 [ 69.806415][ T4301] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 69.814981][ T4301] page dumped because: kasan: bad access detected [ 69.821382][ T4301] page_owner tracks the page as allocated [ 69.827077][ T4301] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4319, ts 68413449018, free_ts 12270666709 [ 69.846071][ T4301] get_page_from_freelist+0x1bbd/0x1ca0 [ 69.851608][ T4301] __alloc_pages+0x1ee/0x480 [ 69.856185][ T4301] new_slab+0xc0/0x4b0 [ 69.860235][ T4301] ___slab_alloc+0x80a/0xdd0 [ 69.864805][ T4301] kmem_cache_alloc+0x195/0x290 [ 69.869644][ T4301] qd_alloc+0x50/0x260 [ 69.873699][ T4301] gfs2_quota_init+0x74e/0xea0 [ 69.878443][ T4301] gfs2_make_fs_rw+0x414/0x580 [ 69.883188][ T4301] gfs2_fill_super+0x1837/0x1f00 [ 69.888106][ T4301] get_tree_bdev+0x3f1/0x610 [ 69.892678][ T4301] gfs2_get_tree+0x4d/0x1e0 [ 69.897161][ T4301] vfs_get_tree+0x88/0x270 [ 69.901557][ T4301] do_new_mount+0x24a/0xa40 [ 69.906040][ T4301] __se_sys_mount+0x2e3/0x3d0 [ 69.910701][ T4301] do_syscall_64+0x4c/0xa0 [ 69.915098][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.920975][ T4301] page last free stack trace: [ 69.925625][ T4301] free_unref_page_prepare+0x637/0x6c0 [ 69.931071][ T4301] free_unref_page+0x8f/0x2a0 [ 69.935733][ T4301] free_contig_range+0x96/0xf0 [ 69.940482][ T4301] destroy_args+0xf0/0xa00 [ 69.944886][ T4301] debug_vm_pgtable+0x321/0x380 [ 69.949722][ T4301] do_one_initcall+0x272/0x730 [ 69.954476][ T4301] do_initcall_level+0x137/0x1f0 [ 69.959414][ T4301] do_initcalls+0x4b/0x90 [ 69.963729][ T4301] kernel_init_freeable+0x3e9/0x570 [ 69.968914][ T4301] kernel_init+0x19/0x1b0 [ 69.973223][ T4301] ret_from_fork+0x1f/0x30 [ 69.977624][ T4301] [ 69.979928][ T4301] Memory state around the buggy address: [ 69.985541][ T4301] ffff88807139ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.993590][ T4301] ffff88807139f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.001632][ T4301] >ffff88807139f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 70.009671][ T4301] ^ [ 70.014240][ T4301] ffff88807139f100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.022287][ T4301] ffff88807139f180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.030327][ T4301] ================================================================== [ 70.038364][ T4301] Disabling lock debugging due to kernel taint [ 70.046554][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 70.059948][ T4301] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.067162][ T4301] CPU: 1 PID: 4301 Comm: syz-executor Tainted: G B syzkaller #0 [ 70.076093][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.086142][ T4301] Call Trace: [ 70.089404][ T4301] [ 70.092315][ T4301] dump_stack_lvl+0x188/0x250 [ 70.096983][ T4301] ? show_regs_print_info+0x20/0x20 [ 70.102154][ T4301] ? load_image+0x400/0x400 [ 70.106631][ T4301] panic+0x2e5/0x810 [ 70.110502][ T4301] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 70.116629][ T4301] ? bpf_jit_dump+0xd0/0xd0 [ 70.121110][ T4301] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 70.127063][ T4301] ? _raw_spin_unlock+0x40/0x40 [ 70.131889][ T4301] ? qd_unlock+0x30/0x2d0 [ 70.136193][ T4301] check_panic_on_warn+0x80/0xa0 [ 70.141108][ T4301] ? qd_unlock+0x30/0x2d0 [ 70.145542][ T4301] end_report+0x6d/0xf0 [ 70.149730][ T4301] kasan_report+0x102/0x130 [ 70.154214][ T4301] ? qd_unlock+0x30/0x2d0 [ 70.158525][ T4301] kasan_check_range+0x235/0x290 [ 70.163442][ T4301] qd_unlock+0x30/0x2d0 [ 70.167583][ T4301] gfs2_quota_sync+0x5cf/0x700 [ 70.172328][ T4301] gfs2_sync_fs+0x48/0xb0 [ 70.176633][ T4301] sync_filesystem+0xe6/0x220 [ 70.181285][ T4301] generic_shutdown_super+0x6b/0x300 [ 70.186544][ T4301] kill_block_super+0x7c/0xe0 [ 70.191200][ T4301] deactivate_locked_super+0x93/0xf0 [ 70.196459][ T4301] cleanup_mnt+0x42d/0x4e0 [ 70.200857][ T4301] ? lockdep_hardirqs_on+0x94/0x140 [ 70.206033][ T4301] task_work_run+0x125/0x1a0 [ 70.210602][ T4301] exit_to_user_mode_loop+0x10f/0x130 [ 70.215949][ T4301] exit_to_user_mode_prepare+0xee/0x180 [ 70.221470][ T4301] syscall_exit_to_user_mode+0x16/0x40 [ 70.226908][ T4301] do_syscall_64+0x58/0xa0 [ 70.231304][ T4301] ? clear_bhb_loop+0x30/0x80 [ 70.235955][ T4301] ? clear_bhb_loop+0x30/0x80 [ 70.240606][ T4301] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.246478][ T4301] RIP: 0033:0x7f0b3c984f17 [ 70.250876][ T4301] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 70.270459][ T4301] RSP: 002b:00007ffd12e33248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 70.278855][ T4301] RAX: 0000000000000000 RBX: 00007f0b3c9ed71f RCX: 00007f0b3c984f17 [ 70.286805][ T4301] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd12e33300 [ 70.294752][ T4301] RBP: 00007ffd12e33300 R08: 00007ffd12e34300 R09: 00000000ffffffff [ 70.302700][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd12e34390 [ 70.310648][ T4301] R13: 00007f0b3c9ed71f R14: 0000000000010b31 R15: 00007ffd12e343d0 [ 70.318603][ T4301] [ 70.321930][ T4301] Kernel Offset: disabled [ 70.326244][ T4301] Rebooting in 86400 seconds..