Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. 2026/03/09 08:35:52 parsed 1 programs syzkaller login: [ 65.029276][ T4187] cgroup: Unknown subsys name 'net' [ 65.220981][ T4187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.604208][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.176615][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.186490][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.197984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.217202][ T4206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.225089][ T4206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.232588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.189276][ T4244] chnl_net:caif_netlink_parms(): no params data found [ 70.279157][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.290477][ T4244] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.298635][ T4244] device bridge_slave_0 entered promiscuous mode [ 70.307360][ T4244] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.314453][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.322438][ T4244] device bridge_slave_1 entered promiscuous mode [ 70.343326][ T4244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.354029][ T4244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.376119][ T4244] team0: Port device team_slave_0 added [ 70.383140][ T4244] team0: Port device team_slave_1 added [ 70.399770][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.407269][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.433233][ T4244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.446136][ T4244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.453118][ T4244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.479342][ T4244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.509090][ T4244] device hsr_slave_0 entered promiscuous mode [ 70.515746][ T4244] device hsr_slave_1 entered promiscuous mode [ 70.628092][ T4244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.638906][ T4244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.649500][ T4244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.678956][ T4244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.753721][ T4244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.766073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.774420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.785799][ T4244] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.797793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.806724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.816761][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.823924][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.832810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.860095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.868677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.877331][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.884393][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.897342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.909131][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.941222][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.950171][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.959136][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.967713][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.976343][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.985578][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.993883][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.005974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.014371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.026561][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.149055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.156615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.187568][ T4244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.190571][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.201670][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.215723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.226174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.259047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.271891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.281498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.289951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.299153][ T4244] device veth0_vlan entered promiscuous mode [ 71.327899][ T4244] device veth1_vlan entered promiscuous mode [ 71.346704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.355082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.363013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.371770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.383019][ T4244] device veth0_macvtap entered promiscuous mode [ 71.402209][ T4244] device veth1_macvtap entered promiscuous mode [ 71.426181][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.433525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.442031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.450977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.459953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.476663][ T4244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.489290][ T4244] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.499114][ T4244] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.509777][ T4244] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.518813][ T4244] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.529452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.538304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/03/09 08:36:02 executed programs: 0 [ 72.765040][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 72.821457][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.828760][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.836936][ T4295] device bridge_slave_0 entered promiscuous mode [ 72.845738][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.852808][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.861500][ T4295] device bridge_slave_1 entered promiscuous mode [ 72.886294][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.898550][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.922349][ T4295] team0: Port device team_slave_0 added [ 72.930366][ T4295] team0: Port device team_slave_1 added [ 72.950856][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.958121][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.984307][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.999281][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.006506][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.034215][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.072524][ T4295] device hsr_slave_0 entered promiscuous mode [ 73.079494][ T4295] device hsr_slave_1 entered promiscuous mode [ 73.086208][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.094130][ T4295] Cannot create hsr debugfs directory [ 73.184325][ T4295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.705680][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 76.332330][ T4295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.509628][ T4295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.572438][ T4295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.670379][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.680090][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.689382][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.698801][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.761371][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.787373][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.795141][ T4305] Bluetooth: hci0: command 0x041b tx timeout [ 76.801100][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.811924][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.822144][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.831069][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.839945][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.847082][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.857139][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.873851][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.882613][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.891051][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.898131][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.909118][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.920437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.944494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.954535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.964017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.978555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.987286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.995873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.005033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.032548][ T4295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.043775][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.053670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.062270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.158797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.166394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.190621][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.208626][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.218107][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.231512][ T741] device hsr_slave_0 left promiscuous mode [ 77.238176][ T741] device hsr_slave_1 left promiscuous mode [ 77.244909][ T741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.252339][ T741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.261140][ T741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.268675][ T741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.276411][ T741] device bridge_slave_1 left promiscuous mode [ 77.283277][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.298459][ T741] device bridge_slave_0 left promiscuous mode [ 77.304769][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.321087][ T741] device veth1_macvtap left promiscuous mode [ 77.327655][ T741] device veth0_macvtap left promiscuous mode [ 77.333714][ T741] device veth1_vlan left promiscuous mode [ 77.339695][ T741] device veth0_vlan left promiscuous mode [ 77.495721][ T741] team0 (unregistering): Port device team_slave_1 removed [ 77.510745][ T741] team0 (unregistering): Port device team_slave_0 removed [ 77.527410][ T741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.542061][ T741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.599210][ T741] bond0 (unregistering): Released all slaves [ 77.693017][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.701418][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.709947][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.718160][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.729319][ T4295] device veth0_vlan entered promiscuous mode [ 77.741609][ T4295] device veth1_vlan entered promiscuous mode [ 77.766299][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.774476][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.782684][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.791811][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.803589][ T4295] device veth0_macvtap entered promiscuous mode [ 77.820451][ T4295] device veth1_macvtap entered promiscuous mode [ 77.840696][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.848244][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.856941][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.867769][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.876884][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.886709][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.897562][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.907584][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.916460][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.925825][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.990299][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.001173][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.011173][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.033655][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.041649][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.049610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.421866][ T4314] loop0: detected capacity change from 0 to 32768 [ 78.505558][ T4314] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 78.514043][ T4314] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 78.540276][ T4314] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 78.558649][ T4307] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 78.566272][ T4307] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 78.590522][ T4307] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms [ 78.601252][ T4307] gfs2: fsid=syz:syz.0: jid=0: Done [ 78.607312][ T4314] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 78.765413][ T4314] gfs2: fsid=syz:syz.0: found 1 quota changes [ 78.845133][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 78.845133][ T4295] inode = 11 2339 [ 78.845133][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 78.875086][ T4307] Bluetooth: hci0: command 0x040f tx timeout [ 78.885672][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 78.926926][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 78.954648][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 78.962249][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.972323][ T4295] Call Trace: [ 78.975615][ T4295] [ 78.978556][ T4295] dump_stack_lvl+0x188/0x250 [ 78.983274][ T4295] ? show_regs_print_info+0x20/0x20 [ 78.988505][ T4295] ? load_image+0x400/0x400 [ 78.993111][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 78.998367][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 79.003420][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 79.008493][ T4295] gfs2_make_fs_ro+0x440/0x620 [ 79.013270][ T4295] ? __might_sleep+0xf0/0xf0 [ 79.017876][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 79.022832][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 79.027710][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 79.032606][ T4295] gfs2_withdraw+0x610/0x1490 [ 79.037323][ T4295] ? gfs2_lm+0x240/0x240 [ 79.041585][ T4295] ? __schedule+0x11f7/0x43c0 [ 79.046299][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 79.051180][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 79.056403][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 79.061457][ T4295] ? do_promote+0x71a/0xab0 [ 79.066073][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 79.071202][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 79.076277][ T4295] inode_go_lock+0x127/0x470 [ 79.080885][ T4295] do_promote+0x741/0xab0 [ 79.085242][ T4295] finish_xmote+0x4df/0xb00 [ 79.089811][ T4295] do_xmote+0x7b6/0x1120 [ 79.094094][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 79.098830][ T4295] do_sync+0x4ab/0xc40 [ 79.102950][ T4295] ? slot_put+0x1e0/0x1e0 [ 79.107316][ T4295] ? do_sync+0x4a3/0xc40 [ 79.111587][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 79.116809][ T4295] gfs2_quota_sync+0x32c/0x700 [ 79.121596][ T4295] gfs2_sync_fs+0x48/0xb0 [ 79.125960][ T4295] sync_filesystem+0xe6/0x220 [ 79.130661][ T4295] generic_shutdown_super+0x6b/0x300 [ 79.135973][ T4295] kill_block_super+0x7c/0xe0 [ 79.140676][ T4295] deactivate_locked_super+0x93/0xf0 [ 79.145985][ T4295] cleanup_mnt+0x42d/0x4e0 [ 79.150459][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 79.155674][ T4295] task_work_run+0x125/0x1a0 [ 79.160385][ T4295] do_exit+0x626/0x20c0 [ 79.164564][ T4295] ? put_task_struct+0x80/0x80 [ 79.169359][ T4295] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 79.175366][ T4295] ? lock_chain_count+0x20/0x20 [ 79.180238][ T4295] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.185287][ T4295] do_group_exit+0x12e/0x300 [ 79.189894][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 79.195115][ T4295] get_signal+0x6ca/0x12c0 [ 79.199563][ T4295] arch_do_signal_or_restart+0xe7/0x12c0 [ 79.205222][ T4295] ? file_end_write+0x250/0x250 [ 79.210106][ T4295] ? get_sigframe_size+0x10/0x10 [ 79.215076][ T4295] ? ksys_write+0x1ed/0x260 [ 79.219592][ T4295] ? exit_to_user_mode_loop+0x3b/0x130 [ 79.225067][ T4295] exit_to_user_mode_loop+0x9e/0x130 [ 79.230384][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 79.235935][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 79.241404][ T4295] do_syscall_64+0x58/0xa0 [ 79.245827][ T4295] ? clear_bhb_loop+0x30/0x80 [ 79.250510][ T4295] ? clear_bhb_loop+0x30/0x80 [ 79.255197][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.261114][ T4295] RIP: 0033:0x7fac052abfce [ 79.265550][ T4295] Code: Unable to access opcode bytes at RIP 0x7fac052abfa4. [ 79.272925][ T4295] RSP: 002b:00007fff08a08688 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.281351][ T4295] RAX: 0000000000000004 RBX: 0000555562369500 RCX: 00007fac052abfce [ 79.289335][ T4295] RDX: 0000000000000004 RSI: 00007fff08a08780 RDI: 00000000000000f8 [ 79.297318][ T4295] RBP: 00007fff08a0872c R08: 0000000000000000 R09: 0000000000000000 [ 79.305328][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.313322][ T4295] R13: 00000000000927c0 R14: 0000000000013393 R15: 00007fff08a08780 [ 79.321322][ T4295] [ 79.334982][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 79.343777][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 79.353183][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 79.360780][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 79.368350][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.378422][ T4295] Call Trace: [ 79.381726][ T4295] [ 79.384710][ T4295] dump_stack_lvl+0x188/0x250 [ 79.389415][ T4295] ? kobject_uevent_env+0x371/0x890 [ 79.394645][ T4295] ? show_regs_print_info+0x20/0x20 [ 79.399871][ T4295] ? load_image+0x400/0x400 [ 79.404389][ T4295] ? kobject_uevent_env+0x371/0x890 [ 79.409655][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 79.414800][ T4295] gfs2_withdraw+0x1149/0x1490 [ 79.419627][ T4295] ? gfs2_lm+0x240/0x240 [ 79.423896][ T4295] ? __schedule+0x11f7/0x43c0 [ 79.428618][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 79.433855][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 79.438936][ T4295] ? do_promote+0x71a/0xab0 [ 79.443465][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 79.448600][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 79.453676][ T4295] inode_go_lock+0x127/0x470 [ 79.458319][ T4295] do_promote+0x741/0xab0 [ 79.462679][ T4295] finish_xmote+0x4df/0xb00 [ 79.467212][ T4295] do_xmote+0x7b6/0x1120 [ 79.471495][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 79.476247][ T4295] do_sync+0x4ab/0xc40 [ 79.480348][ T4295] ? slot_put+0x1e0/0x1e0 [ 79.484717][ T4295] ? do_sync+0x4a3/0xc40 [ 79.488991][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 79.494224][ T4295] gfs2_quota_sync+0x32c/0x700 [ 79.499053][ T4295] gfs2_sync_fs+0x48/0xb0 [ 79.503583][ T4295] sync_filesystem+0xe6/0x220 [ 79.508296][ T4295] generic_shutdown_super+0x6b/0x300 [ 79.513609][ T4295] kill_block_super+0x7c/0xe0 [ 79.518311][ T4295] deactivate_locked_super+0x93/0xf0 [ 79.523634][ T4295] cleanup_mnt+0x42d/0x4e0 [ 79.528080][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 79.533304][ T4295] task_work_run+0x125/0x1a0 [ 79.537924][ T4295] do_exit+0x626/0x20c0 [ 79.542112][ T4295] ? put_task_struct+0x80/0x80 [ 79.546901][ T4295] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 79.552914][ T4295] ? lock_chain_count+0x20/0x20 [ 79.557789][ T4295] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.562850][ T4295] do_group_exit+0x12e/0x300 [ 79.567483][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 79.572711][ T4295] get_signal+0x6ca/0x12c0 [ 79.577173][ T4295] arch_do_signal_or_restart+0xe7/0x12c0 [ 79.582854][ T4295] ? file_end_write+0x250/0x250 [ 79.587760][ T4295] ? get_sigframe_size+0x10/0x10 [ 79.592735][ T4295] ? ksys_write+0x1ed/0x260 [ 79.597264][ T4295] ? exit_to_user_mode_loop+0x3b/0x130 [ 79.602750][ T4295] exit_to_user_mode_loop+0x9e/0x130 [ 79.608059][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 79.613632][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 79.619108][ T4295] do_syscall_64+0x58/0xa0 [ 79.623542][ T4295] ? clear_bhb_loop+0x30/0x80 [ 79.628261][ T4295] ? clear_bhb_loop+0x30/0x80 [ 79.632954][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.638858][ T4295] RIP: 0033:0x7fac052abfce [ 79.643321][ T4295] Code: Unable to access opcode bytes at RIP 0x7fac052abfa4. [ 79.650976][ T4295] RSP: 002b:00007fff08a08688 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.659415][ T4295] RAX: 0000000000000004 RBX: 0000555562369500 RCX: 00007fac052abfce [ 79.667407][ T4295] RDX: 0000000000000004 RSI: 00007fff08a08780 RDI: 00000000000000f8 [ 79.675570][ T4295] RBP: 00007fff08a0872c R08: 0000000000000000 R09: 0000000000000000 [ 79.683564][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.691577][ T4295] R13: 00000000000927c0 R14: 0000000000013393 R15: 00007fff08a08780 [ 79.699586][ T4295] [ 79.706759][ T4295] ================================================================== [ 79.715061][ T4295] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 79.721761][ T4295] Read of size 8 at addr ffff88806e76e090 by task syz-executor/4295 [ 79.729740][ T4295] [ 79.732075][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 79.739621][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.749691][ T4295] Call Trace: [ 79.753069][ T4295] [ 79.756020][ T4295] dump_stack_lvl+0x188/0x250 [ 79.760717][ T4295] ? show_regs_print_info+0x20/0x20 [ 79.765940][ T4295] ? load_image+0x400/0x400 [ 79.770561][ T4295] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 79.776048][ T4295] print_address_description+0x60/0x2d0 [ 79.781611][ T4295] ? qd_unlock+0x30/0x2d0 [ 79.785975][ T4295] kasan_report+0xdf/0x130 [ 79.790414][ T4295] ? qd_unlock+0x30/0x2d0 [ 79.794777][ T4295] kasan_check_range+0x235/0x290 [ 79.799739][ T4295] qd_unlock+0x30/0x2d0 [ 79.803924][ T4295] gfs2_quota_sync+0x5cf/0x700 [ 79.808720][ T4295] gfs2_sync_fs+0x48/0xb0 [ 79.813065][ T4295] sync_filesystem+0xe6/0x220 [ 79.817758][ T4295] generic_shutdown_super+0x6b/0x300 [ 79.823076][ T4295] kill_block_super+0x7c/0xe0 [ 79.827782][ T4295] deactivate_locked_super+0x93/0xf0 [ 79.833093][ T4295] cleanup_mnt+0x42d/0x4e0 [ 79.837529][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 79.842755][ T4295] task_work_run+0x125/0x1a0 [ 79.847379][ T4295] do_exit+0x626/0x20c0 [ 79.851558][ T4295] ? put_task_struct+0x80/0x80 [ 79.856328][ T4295] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 79.862321][ T4295] ? lock_chain_count+0x20/0x20 [ 79.867189][ T4295] ? _raw_spin_lock_irq+0xb7/0xf0 [ 79.872251][ T4295] do_group_exit+0x12e/0x300 [ 79.876864][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 79.882088][ T4295] get_signal+0x6ca/0x12c0 [ 79.886532][ T4295] arch_do_signal_or_restart+0xe7/0x12c0 [ 79.892191][ T4295] ? file_end_write+0x250/0x250 [ 79.897075][ T4295] ? get_sigframe_size+0x10/0x10 [ 79.902154][ T4295] ? ksys_write+0x1ed/0x260 [ 79.906677][ T4295] ? exit_to_user_mode_loop+0x3b/0x130 [ 79.912176][ T4295] exit_to_user_mode_loop+0x9e/0x130 [ 79.917482][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 79.923058][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 79.928541][ T4295] do_syscall_64+0x58/0xa0 [ 79.932966][ T4295] ? clear_bhb_loop+0x30/0x80 [ 79.937673][ T4295] ? clear_bhb_loop+0x30/0x80 [ 79.942386][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.948296][ T4295] RIP: 0033:0x7fac052abfce [ 79.952729][ T4295] Code: Unable to access opcode bytes at RIP 0x7fac052abfa4. [ 79.960094][ T4295] RSP: 002b:00007fff08a08688 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 79.968517][ T4295] RAX: 0000000000000004 RBX: 0000555562369500 RCX: 00007fac052abfce [ 79.976510][ T4295] RDX: 0000000000000004 RSI: 00007fff08a08780 RDI: 00000000000000f8 [ 79.984507][ T4295] RBP: 00007fff08a0872c R08: 0000000000000000 R09: 0000000000000000 [ 79.992494][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.000477][ T4295] R13: 00000000000927c0 R14: 0000000000013393 R15: 00007fff08a08780 [ 80.008474][ T4295] [ 80.011506][ T4295] [ 80.013835][ T4295] Allocated by task 4314: [ 80.018167][ T4295] __kasan_slab_alloc+0x9c/0xd0 [ 80.023081][ T4295] slab_post_alloc_hook+0x4c/0x380 [ 80.028225][ T4295] kmem_cache_alloc+0x100/0x290 [ 80.033113][ T4295] qd_alloc+0x50/0x260 [ 80.037196][ T4295] gfs2_quota_init+0x74e/0xea0 [ 80.041979][ T4295] gfs2_make_fs_rw+0x414/0x580 [ 80.046777][ T4295] gfs2_fill_super+0x1837/0x1f00 [ 80.051736][ T4295] get_tree_bdev+0x3f1/0x610 [ 80.056334][ T4295] gfs2_get_tree+0x4d/0x1e0 [ 80.060879][ T4295] vfs_get_tree+0x88/0x270 [ 80.065308][ T4295] do_new_mount+0x24a/0xa40 [ 80.069839][ T4295] __se_sys_mount+0x2e3/0x3d0 [ 80.074528][ T4295] do_syscall_64+0x4c/0xa0 [ 80.078954][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.084886][ T4295] [ 80.087221][ T4295] Freed by task 20: [ 80.091042][ T4295] kasan_set_track+0x4b/0x70 [ 80.095638][ T4295] kasan_set_free_info+0x1f/0x40 [ 80.100599][ T4295] ____kasan_slab_free+0xd5/0x110 [ 80.105652][ T4295] slab_free_freelist_hook+0xea/0x170 [ 80.111043][ T4295] kmem_cache_free+0x8f/0x210 [ 80.116012][ T4295] rcu_core+0x9d2/0x1670 [ 80.120275][ T4295] handle_softirqs+0x339/0x830 [ 80.125055][ T4295] run_ksoftirqd+0xa4/0x100 [ 80.129583][ T4295] smpboot_thread_fn+0x4f6/0x970 [ 80.134548][ T4295] kthread+0x436/0x520 [ 80.138642][ T4295] ret_from_fork+0x1f/0x30 [ 80.143075][ T4295] [ 80.145434][ T4295] Last potentially related work creation: [ 80.151151][ T4295] kasan_save_stack+0x35/0x60 [ 80.155935][ T4295] kasan_record_aux_stack+0xb8/0x100 [ 80.161243][ T4295] call_rcu+0x189/0x950 [ 80.165418][ T4295] gfs2_quota_cleanup+0x43c/0x6a0 [ 80.170484][ T4295] gfs2_make_fs_ro+0x440/0x620 [ 80.175262][ T4295] gfs2_withdraw+0x610/0x1490 [ 80.179956][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 80.185003][ T4295] inode_go_lock+0x127/0x470 [ 80.189623][ T4295] do_promote+0x741/0xab0 [ 80.193979][ T4295] finish_xmote+0x4df/0xb00 [ 80.198487][ T4295] do_xmote+0x7b6/0x1120 [ 80.202737][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 80.207542][ T4295] do_sync+0x4ab/0xc40 [ 80.211635][ T4295] gfs2_quota_sync+0x32c/0x700 [ 80.216415][ T4295] gfs2_sync_fs+0x48/0xb0 [ 80.220769][ T4295] sync_filesystem+0xe6/0x220 [ 80.225458][ T4295] generic_shutdown_super+0x6b/0x300 [ 80.230757][ T4295] kill_block_super+0x7c/0xe0 [ 80.235452][ T4295] deactivate_locked_super+0x93/0xf0 [ 80.240745][ T4295] cleanup_mnt+0x42d/0x4e0 [ 80.245174][ T4295] task_work_run+0x125/0x1a0 [ 80.249775][ T4295] do_exit+0x626/0x20c0 [ 80.253947][ T4295] do_group_exit+0x12e/0x300 [ 80.258573][ T4295] get_signal+0x6ca/0x12c0 [ 80.263002][ T4295] arch_do_signal_or_restart+0xe7/0x12c0 [ 80.268651][ T4295] exit_to_user_mode_loop+0x9e/0x130 [ 80.273951][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 80.279513][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 80.284998][ T4295] do_syscall_64+0x58/0xa0 [ 80.289419][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.295321][ T4295] [ 80.297645][ T4295] The buggy address belongs to the object at ffff88806e76e000 [ 80.297645][ T4295] which belongs to the cache gfs2_quotad of size 272 [ 80.311704][ T4295] The buggy address is located 144 bytes inside of [ 80.311704][ T4295] 272-byte region [ffff88806e76e000, ffff88806e76e110) [ 80.324986][ T4295] The buggy address belongs to the page: [ 80.330619][ T4295] page:ffffea0001b9db80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6e76e [ 80.340772][ T4295] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 80.348356][ T4295] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801e4da3c0 [ 80.356943][ T4295] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 80.365540][ T4295] page dumped because: kasan: bad access detected [ 80.372044][ T4295] page_owner tracks the page as allocated [ 80.377756][ T4295] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4314, ts 78756001854, free_ts 20681273010 [ 80.396780][ T4295] get_page_from_freelist+0x1bbd/0x1ca0 [ 80.402333][ T4295] __alloc_pages+0x1ee/0x480 [ 80.406947][ T4295] new_slab+0xc0/0x4b0 [ 80.411030][ T4295] ___slab_alloc+0x80a/0xdd0 [ 80.415614][ T4295] kmem_cache_alloc+0x195/0x290 [ 80.420464][ T4295] qd_alloc+0x50/0x260 [ 80.424531][ T4295] gfs2_quota_init+0x74e/0xea0 [ 80.429333][ T4295] gfs2_make_fs_rw+0x414/0x580 [ 80.434103][ T4295] gfs2_fill_super+0x1837/0x1f00 [ 80.439056][ T4295] get_tree_bdev+0x3f1/0x610 [ 80.443656][ T4295] gfs2_get_tree+0x4d/0x1e0 [ 80.448171][ T4295] vfs_get_tree+0x88/0x270 [ 80.452593][ T4295] do_new_mount+0x24a/0xa40 [ 80.457132][ T4295] __se_sys_mount+0x2e3/0x3d0 [ 80.461821][ T4295] do_syscall_64+0x4c/0xa0 [ 80.466241][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.472136][ T4295] page last free stack trace: [ 80.476825][ T4295] free_unref_page_prepare+0x637/0x6c0 [ 80.482295][ T4295] free_unref_page+0x8f/0x2a0 [ 80.486976][ T4295] free_contig_range+0x96/0xf0 [ 80.491756][ T4295] destroy_args+0xf0/0xa00 [ 80.496182][ T4295] debug_vm_pgtable+0x321/0x380 [ 80.501049][ T4295] do_one_initcall+0x272/0x730 [ 80.505845][ T4295] do_initcall_level+0x137/0x1f0 [ 80.510805][ T4295] do_initcalls+0x4b/0x90 [ 80.515140][ T4295] kernel_init_freeable+0x3e9/0x570 [ 80.520340][ T4295] kernel_init+0x19/0x1b0 [ 80.524672][ T4295] ret_from_fork+0x1f/0x30 [ 80.529096][ T4295] [ 80.531416][ T4295] Memory state around the buggy address: [ 80.537062][ T4295] ffff88806e76df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.545136][ T4295] ffff88806e76e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.553195][ T4295] >ffff88806e76e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.561257][ T4295] ^ [ 80.565874][ T4295] ffff88806e76e100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.573965][ T4295] ffff88806e76e180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.582038][ T4295] ================================================================== [ 80.590102][ T4295] Disabling lock debugging due to kernel taint [ 80.612453][ T4295] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.619761][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Tainted: G B syzkaller #0 [ 80.628747][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.638811][ T4295] Call Trace: [ 80.642103][ T4295] [ 80.645048][ T4295] dump_stack_lvl+0x188/0x250 [ 80.649747][ T4295] ? show_regs_print_info+0x20/0x20 [ 80.654957][ T4295] ? load_image+0x400/0x400 [ 80.659476][ T4295] panic+0x2e5/0x810 [ 80.663406][ T4295] ? bpf_jit_dump+0xd0/0xd0 [ 80.667943][ T4295] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 80.673953][ T4295] ? _raw_spin_unlock+0x40/0x40 [ 80.678818][ T4295] ? qd_unlock+0x30/0x2d0 [ 80.683172][ T4295] check_panic_on_warn+0x80/0xa0 [ 80.688140][ T4295] ? qd_unlock+0x30/0x2d0 [ 80.692506][ T4295] end_report+0x6d/0xf0 [ 80.696681][ T4295] kasan_report+0x102/0x130 [ 80.701202][ T4295] ? qd_unlock+0x30/0x2d0 [ 80.705549][ T4295] kasan_check_range+0x235/0x290 [ 80.710500][ T4295] qd_unlock+0x30/0x2d0 [ 80.714679][ T4295] gfs2_quota_sync+0x5cf/0x700 [ 80.719472][ T4295] gfs2_sync_fs+0x48/0xb0 [ 80.723820][ T4295] sync_filesystem+0xe6/0x220 [ 80.728531][ T4295] generic_shutdown_super+0x6b/0x300 [ 80.733839][ T4295] kill_block_super+0x7c/0xe0 [ 80.738539][ T4295] deactivate_locked_super+0x93/0xf0 [ 80.743839][ T4295] cleanup_mnt+0x42d/0x4e0 [ 80.748323][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 80.753551][ T4295] task_work_run+0x125/0x1a0 [ 80.758170][ T4295] do_exit+0x626/0x20c0 [ 80.762358][ T4295] ? put_task_struct+0x80/0x80 [ 80.767139][ T4295] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 80.773150][ T4295] ? lock_chain_count+0x20/0x20 [ 80.778019][ T4295] ? _raw_spin_lock_irq+0xb7/0xf0 [ 80.783063][ T4295] do_group_exit+0x12e/0x300 [ 80.787671][ T4295] ? lockdep_hardirqs_o