Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts.
2026/06/13 16:22:07 parsed 1 programs
[ 71.559756][ T4202] cgroup: Unknown subsys name 'net'
[ 71.694076][ T4202] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 73.231454][ T4202] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 74.652785][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.660993][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.674351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 74.695387][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 74.703856][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 74.711867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 76.645205][ T4257] chnl_net:caif_netlink_parms(): no params data found
[ 76.712018][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.720014][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.728580][ T4257] device bridge_slave_0 entered promiscuous mode
[ 76.738816][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.745991][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.754287][ T4257] device bridge_slave_1 entered promiscuous mode
[ 76.778459][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.790496][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.819744][ T4257] team0: Port device team_slave_0 added
[ 76.829559][ T4257] team0: Port device team_slave_1 added
[ 76.853109][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.860421][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.886425][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.900055][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.907065][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.933260][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.973208][ T4257] device hsr_slave_0 entered promiscuous mode
[ 76.980981][ T4257] device hsr_slave_1 entered promiscuous mode
[ 77.119688][ T4257] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.131142][ T4257] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.142305][ T4257] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.155006][ T4257] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.222861][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.234781][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.246304][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.253518][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.368482][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.388257][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.397000][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.412549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 77.423927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 77.432448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 77.444267][ T4257] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.457166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 77.465792][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.472961][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.489124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.497772][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.504846][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.545136][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 77.554147][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.569904][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 77.580604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 77.615407][ T1233] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 77.626302][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.749580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.757174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.773351][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.806876][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 77.815824][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.834337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 77.844342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.853567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 77.861535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 77.873281][ T4257] device veth0_vlan entered promiscuous mode
[ 77.903281][ T4257] device veth1_vlan entered promiscuous mode
[ 77.924254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 77.932799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 77.942463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 77.951821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 77.963867][ T4257] device veth0_macvtap entered promiscuous mode
[ 77.994673][ T4257] device veth1_macvtap entered promiscuous mode
[ 78.013481][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.021427][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 78.030895][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 78.041341][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 78.050149][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 78.063357][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.083925][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 78.093429][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 78.104822][ T4257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.114177][ T4257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.123398][ T4257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.132495][ T4257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.262426][ T4257] syz-executor (4257) used greatest stack depth: 20912 bytes left
2026/06/13 16:22:17 executed programs: 0
[ 79.940874][ T4305] chnl_net:caif_netlink_parms(): no params data found
[ 79.993467][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.022478][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.031154][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.040926][ T4305] device bridge_slave_0 entered promiscuous mode
[ 80.049942][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.057124][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.065252][ T4305] device bridge_slave_1 entered promiscuous mode
[ 80.086437][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.098437][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.123937][ T4305] team0: Port device team_slave_0 added
[ 80.131500][ T4305] team0: Port device team_slave_1 added
[ 80.151140][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.158199][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.184165][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.196453][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.203543][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.229966][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.261990][ T4305] device hsr_slave_0 entered promiscuous mode
[ 80.269744][ T4305] device hsr_slave_1 entered promiscuous mode
[ 80.276454][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 80.285051][ T4305] Cannot create hsr debugfs directory
[ 81.868326][ T7] Bluetooth: hci0: command 0x0409 tx timeout
[ 83.236902][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.293996][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.336900][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 83.947993][ T23] Bluetooth: hci0: command 0x041b tx timeout
[ 84.247162][ T4305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.258106][ T4305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.267851][ T4305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.278772][ T4305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.366453][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.383056][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 84.392129][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 84.423665][ T4305] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.435305][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 84.445147][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 84.455049][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.462432][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.472292][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 84.500208][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 84.509420][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 84.519689][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.526797][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.543046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 84.554487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 84.570433][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 84.580851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 84.589839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 84.616092][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 84.625259][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 84.639103][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 84.650614][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 84.667006][ T154] device hsr_slave_0 left promiscuous mode
[ 84.673868][ T154] device hsr_slave_1 left promiscuous mode
[ 84.681439][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 84.689277][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 84.699829][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 84.707655][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 84.715569][ T154] device bridge_slave_1 left promiscuous mode
[ 84.723661][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.739455][ T154] device bridge_slave_0 left promiscuous mode
[ 84.745733][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.767164][ T154] device veth1_macvtap left promiscuous mode
[ 84.773842][ T154] device veth0_macvtap left promiscuous mode
[ 84.780023][ T154] device veth1_vlan left promiscuous mode
[ 84.786049][ T154] device veth0_vlan left promiscuous mode
[ 84.969427][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 84.984439][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 85.000734][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 85.018828][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 85.081955][ T154] bond0 (unregistering): Released all slaves
[ 85.152550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.161587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.173615][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.293394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 85.301689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 85.317670][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.334803][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 85.346232][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 85.368223][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 85.376947][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 85.395126][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 85.403447][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 85.413391][ T4305] device veth0_vlan entered promiscuous mode
[ 85.428104][ T4305] device veth1_vlan entered promiscuous mode
[ 85.453101][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 85.462061][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 85.473331][ T4305] device veth0_macvtap entered promiscuous mode
[ 85.483791][ T4305] device veth1_macvtap entered promiscuous mode
[ 85.510234][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.521790][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.529641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 85.540049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 85.548505][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 85.559778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 85.568826][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 85.579903][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 85.591165][ T4305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.600238][ T4305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.609319][ T4305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.618619][ T4305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.692953][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.714930][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.729740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 85.753214][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.762904][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.771330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 86.037822][ T23] Bluetooth: hci0: command 0x040f tx timeout
[ 86.172398][ T4351] loop0: detected capacity change from 0 to 32768
[ 86.215849][ T4351] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 86.237350][ T4351] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 86.301037][ T4351] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 1ms
[ 86.317825][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 86.325092][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 86.361726][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms
[ 86.372677][ T7] gfs2: fsid=syz:syz.0: jid=0: Done
[ 86.379125][ T4351] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 86.514906][ T4351] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 86.559635][ T4305] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 86.559635][ T4305] inode = 11 2339
[ 86.559635][ T4305] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414
[ 86.578782][ T4305] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 86.598791][ T4305] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 86.618600][ T4305] CPU: 0 PID: 4305 Comm: syz-executor Not tainted syzkaller #0
[ 86.626319][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 86.636679][ T4305] Call Trace:
[ 86.640009][ T4305]
[ 86.642983][ T4305] dump_stack_lvl+0x188/0x250
[ 86.647721][ T4305] ? schedule_preempt_disabled+0x20/0x20
[ 86.653415][ T4305] ? show_regs_print_info+0x20/0x20
[ 86.659230][ T4305] ? load_image+0x400/0x400
[ 86.663774][ T4305] ? preempt_schedule_thunk+0x16/0x18
[ 86.669206][ T4305] gfs2_assert_warn_i+0x18f/0x2c0
[ 86.675058][ T4305] gfs2_quota_cleanup+0x4b4/0x6a0
[ 86.680159][ T4305] gfs2_make_fs_ro+0x440/0x620
[ 86.684976][ T4305] ? __might_sleep+0xf0/0xf0
[ 86.689704][ T4305] ? gfs2_dinode_out+0xb00/0xb00
[ 86.694788][ T4305] ? _raw_spin_unlock+0x24/0x40
[ 86.699692][ T4305] ? gfs2_glock_nq+0xcb0/0x1550
[ 86.704698][ T4305] gfs2_withdraw+0x610/0x13d0
[ 86.709945][ T4305] ? gfs2_freeze_unlock+0x50/0x50
[ 86.715018][ T4305] ? gfs2_lm+0x240/0x240
[ 86.719303][ T4305] ? gfs2_freeze_lock+0x52/0xc0
[ 86.724290][ T4305] ? gfs2_consist_inode_i+0xc0/0xe0
[ 86.730130][ T4305] gfs2_inode_refresh+0xc2d/0x1160
[ 86.735302][ T4305] ? do_promote+0x71a/0xab0
[ 86.739859][ T4305] ? gfs2_inode_metasync+0xf0/0xf0
[ 86.745011][ T4305] ? __lock_acquire+0x7d10/0x7d10
[ 86.750095][ T4305] inode_go_lock+0x127/0x470
[ 86.754743][ T4305] do_promote+0x741/0xab0
[ 86.759154][ T4305] finish_xmote+0x4df/0xb00
[ 86.763770][ T4305] do_xmote+0x7b6/0x1120
[ 86.768372][ T4305] gfs2_glock_nq+0xc7a/0x1550
[ 86.773138][ T4305] do_sync+0x4ab/0xc40
[ 86.777326][ T4305] ? slot_put+0x1e0/0x1e0
[ 86.782158][ T4305] ? __lock_acquire+0x7d10/0x7d10
[ 86.787234][ T4305] ? do_raw_spin_lock+0x128/0x2f0
[ 86.792345][ T4305] ? do_sync+0x4a3/0xc40
[ 86.796661][ T4305] ? do_raw_spin_unlock+0x11d/0x230
[ 86.802271][ T4305] gfs2_quota_sync+0x32c/0x700
[ 86.807106][ T4305] gfs2_sync_fs+0x48/0xb0
[ 86.811583][ T4305] sync_filesystem+0xe6/0x220
[ 86.816540][ T4305] generic_shutdown_super+0x6b/0x300
[ 86.822095][ T4305] kill_block_super+0x7c/0xe0
[ 86.826841][ T4305] deactivate_locked_super+0x93/0xf0
[ 86.832531][ T4305] cleanup_mnt+0x42d/0x4e0
[ 86.838127][ T4305] ? lockdep_hardirqs_on+0x94/0x140
[ 86.843667][ T4305] task_work_run+0x125/0x1a0
[ 86.848326][ T4305] exit_to_user_mode_loop+0x10f/0x130
[ 86.853753][ T4305] exit_to_user_mode_prepare+0xee/0x180
[ 86.859343][ T4305] syscall_exit_to_user_mode+0x16/0x40
[ 86.864852][ T4305] do_syscall_64+0x58/0xa0
[ 86.869426][ T4305] ? clear_bhb_loop+0x30/0x80
[ 86.874196][ T4305] ? clear_bhb_loop+0x30/0x80
[ 86.878915][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.884863][ T4305] RIP: 0033:0x7f35bea7e097
[ 86.889321][ T4305] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 86.909857][ T4305] RSP: 002b:00007ffc8391f8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 86.918458][ T4305] RAX: 0000000000000000 RBX: 00007f35beb121ca RCX: 00007f35bea7e097
[ 86.926487][ T4305] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8391f980
[ 86.934634][ T4305] RBP: 00007ffc8391f980 R08: 00007ffc83920980 R09: 00000000ffffffff
[ 86.942839][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc83920a10
[ 86.950852][ T4305] R13: 00007f35beb121ca R14: 0000000000014f11 R15: 00007ffc83920a50
[ 86.959024][ T4305]
[ 86.974214][ T13] cfg80211: failed to load regulatory.db
[ 87.087411][ T4305] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 87.096384][ T4305] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 87.131369][ T4305] gfs2: fsid=syz:syz.0: File system withdrawn
[ 87.157396][ T4305] CPU: 1 PID: 4305 Comm: syz-executor Not tainted syzkaller #0
[ 87.165495][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 87.176013][ T4305] Call Trace:
[ 87.179345][ T4305]
[ 87.182309][ T4305] dump_stack_lvl+0x188/0x250
[ 87.187027][ T4305] ? kobject_uevent_env+0x371/0x890
[ 87.192266][ T4305] ? show_regs_print_info+0x20/0x20
[ 87.197514][ T4305] ? load_image+0x400/0x400
[ 87.202060][ T4305] ? kobject_uevent_env+0x371/0x890
[ 87.207310][ T4305] ? lockref_put_or_lock+0x6e/0xb0
[ 87.212701][ T4305] gfs2_withdraw+0xba3/0x13d0
[ 87.217430][ T4305] ? gfs2_freeze_unlock+0x50/0x50
[ 87.222631][ T4305] ? gfs2_lm+0x240/0x240
[ 87.226941][ T4305] ? gfs2_consist_inode_i+0xc0/0xe0
[ 87.232239][ T4305] gfs2_inode_refresh+0xc2d/0x1160
[ 87.237440][ T4305] ? do_promote+0x71a/0xab0
[ 87.242115][ T4305] ? gfs2_inode_metasync+0xf0/0xf0
[ 87.247376][ T4305] ? __lock_acquire+0x7d10/0x7d10
[ 87.252451][ T4305] inode_go_lock+0x127/0x470
[ 87.257089][ T4305] do_promote+0x741/0xab0
[ 87.261473][ T4305] finish_xmote+0x4df/0xb00
[ 87.266049][ T4305] do_xmote+0x7b6/0x1120
[ 87.270439][ T4305] gfs2_glock_nq+0xc7a/0x1550
[ 87.275178][ T4305] do_sync+0x4ab/0xc40
[ 87.279302][ T4305] ? slot_put+0x1e0/0x1e0
[ 87.283698][ T4305] ? __lock_acquire+0x7d10/0x7d10
[ 87.288793][ T4305] ? do_raw_spin_lock+0x128/0x2f0
[ 87.293889][ T4305] ? do_sync+0x4a3/0xc40
[ 87.298187][ T4305] ? do_raw_spin_unlock+0x11d/0x230
[ 87.303453][ T4305] gfs2_quota_sync+0x32c/0x700
[ 87.308388][ T4305] gfs2_sync_fs+0x48/0xb0
[ 87.312758][ T4305] sync_filesystem+0xe6/0x220
[ 87.318284][ T4305] generic_shutdown_super+0x6b/0x300
[ 87.323642][ T4305] kill_block_super+0x7c/0xe0
[ 87.328716][ T4305] deactivate_locked_super+0x93/0xf0
[ 87.334060][ T4305] cleanup_mnt+0x42d/0x4e0
[ 87.338529][ T4305] ? lockdep_hardirqs_on+0x94/0x140
[ 87.343795][ T4305] task_work_run+0x125/0x1a0
[ 87.348445][ T4305] exit_to_user_mode_loop+0x10f/0x130
[ 87.353862][ T4305] exit_to_user_mode_prepare+0xee/0x180
[ 87.359445][ T4305] syscall_exit_to_user_mode+0x16/0x40
[ 87.364948][ T4305] do_syscall_64+0x58/0xa0
[ 87.369407][ T4305] ? clear_bhb_loop+0x30/0x80
[ 87.374235][ T4305] ? clear_bhb_loop+0x30/0x80
[ 87.378958][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.384899][ T4305] RIP: 0033:0x7f35bea7e097
[ 87.389354][ T4305] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 87.409185][ T4305] RSP: 002b:00007ffc8391f8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 87.417657][ T4305] RAX: 0000000000000000 RBX: 00007f35beb121ca RCX: 00007f35bea7e097
[ 87.425673][ T4305] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8391f980
[ 87.433704][ T4305] RBP: 00007ffc8391f980 R08: 00007ffc83920980 R09: 00000000ffffffff
[ 87.441833][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc83920a10
[ 87.450354][ T4305] R13: 00007f35beb121ca R14: 0000000000014f11 R15: 00007ffc83920a50
[ 87.458403][ T4305]
[ 87.797743][ T4305] ==================================================================
[ 87.806173][ T4305] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 87.812911][ T4305] Read of size 8 at addr ffff888074aea090 by task syz-executor/4305
[ 87.820933][ T4305]
[ 87.823317][ T4305] CPU: 1 PID: 4305 Comm: syz-executor Not tainted syzkaller #0
[ 87.830900][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 87.841001][ T4305] Call Trace:
[ 87.844315][ T4305]
[ 87.847274][ T4305] dump_stack_lvl+0x188/0x250
[ 87.851999][ T4305] ? show_regs_print_info+0x20/0x20
[ 87.857237][ T4305] ? _printk+0xda/0x130
[ 87.861427][ T4305] ? qd_unlock+0x30/0x2d0
[ 87.865937][ T4305] ? load_image+0x400/0x400
[ 87.870489][ T4305] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 87.876010][ T4305] print_address_description+0x60/0x2d0
[ 87.881606][ T4305] ? qd_unlock+0x30/0x2d0
[ 87.885985][ T4305] kasan_report+0xdf/0x130
[ 87.890446][ T4305] ? qd_unlock+0x30/0x2d0
[ 87.894823][ T4305] kasan_check_range+0x235/0x290
[ 87.899809][ T4305] qd_unlock+0x30/0x2d0
[ 87.904013][ T4305] gfs2_quota_sync+0x5cf/0x700
[ 87.908839][ T4305] gfs2_sync_fs+0x48/0xb0
[ 87.913207][ T4305] sync_filesystem+0xe6/0x220
[ 87.917929][ T4305] generic_shutdown_super+0x6b/0x300
[ 87.923256][ T4305] kill_block_super+0x7c/0xe0
[ 87.927988][ T4305] deactivate_locked_super+0x93/0xf0
[ 87.933319][ T4305] cleanup_mnt+0x42d/0x4e0
[ 87.937829][ T4305] ? lockdep_hardirqs_on+0x94/0x140
[ 87.943099][ T4305] task_work_run+0x125/0x1a0
[ 87.947752][ T4305] exit_to_user_mode_loop+0x10f/0x130
[ 87.953346][ T4305] exit_to_user_mode_prepare+0xee/0x180
[ 87.958929][ T4305] syscall_exit_to_user_mode+0x16/0x40
[ 87.964433][ T4305] do_syscall_64+0x58/0xa0
[ 87.968896][ T4305] ? clear_bhb_loop+0x30/0x80
[ 87.973609][ T4305] ? clear_bhb_loop+0x30/0x80
[ 87.978327][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.984705][ T4305] RIP: 0033:0x7f35bea7e097
[ 87.989171][ T4305] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 88.008826][ T4305] RSP: 002b:00007ffc8391f8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 88.017302][ T4305] RAX: 0000000000000000 RBX: 00007f35beb121ca RCX: 00007f35bea7e097
[ 88.025353][ T4305] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8391f980
[ 88.033363][ T4305] RBP: 00007ffc8391f980 R08: 00007ffc83920980 R09: 00000000ffffffff
[ 88.041535][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc83920a10
[ 88.049645][ T4305] R13: 00007f35beb121ca R14: 0000000000014f11 R15: 00007ffc83920a50
[ 88.057679][ T4305]
[ 88.060907][ T4305]
[ 88.063260][ T4305] Allocated by task 4351:
[ 88.067676][ T4305] __kasan_slab_alloc+0x9c/0xd0
[ 88.072693][ T4305] slab_post_alloc_hook+0x4c/0x380
[ 88.077849][ T4305] kmem_cache_alloc+0x100/0x290
[ 88.082736][ T4305] qd_alloc+0x50/0x260
[ 88.086846][ T4305] gfs2_quota_init+0x74e/0xea0
[ 88.091655][ T4305] gfs2_make_fs_rw+0x414/0x580
[ 88.096455][ T4305] gfs2_fill_super+0x1837/0x1f00
[ 88.101694][ T4305] get_tree_bdev+0x3f1/0x610
[ 88.106320][ T4305] gfs2_get_tree+0x4d/0x1e0
[ 88.110864][ T4305] vfs_get_tree+0x88/0x270
[ 88.115313][ T4305] do_new_mount+0x24a/0xa40
[ 88.119860][ T4305] __se_sys_mount+0x2e3/0x3d0
[ 88.124571][ T4305] do_syscall_64+0x4c/0xa0
[ 88.129023][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 88.134959][ T4305]
[ 88.137310][ T4305] Freed by task 4277:
[ 88.141400][ T4305] kasan_set_track+0x4b/0x70
[ 88.146123][ T4305] kasan_set_free_info+0x1f/0x40
[ 88.151112][ T4305] ____kasan_slab_free+0xd5/0x110
[ 88.156168][ T4305] slab_free_freelist_hook+0xea/0x170
[ 88.161612][ T4305] kmem_cache_free+0x8f/0x210
[ 88.166325][ T4305] rcu_core+0x9d2/0x1670
[ 88.170866][ T4305] handle_softirqs+0x339/0x830
[ 88.175673][ T4305] __irq_exit_rcu+0x13b/0x230
[ 88.180385][ T4305] irq_exit_rcu+0x5/0x20
[ 88.184660][ T4305] sysvec_apic_timer_interrupt+0xa0/0xc0
[ 88.190334][ T4305] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 88.196539][ T4305]
[ 88.198891][ T4305] Last potentially related work creation:
[ 88.204806][ T4305] kasan_save_stack+0x35/0x60
[ 88.209539][ T4305] kasan_record_aux_stack+0xb8/0x100
[ 88.214867][ T4305] call_rcu+0x189/0x950
[ 88.219065][ T4305] gfs2_quota_cleanup+0x43c/0x6a0
[ 88.224137][ T4305] gfs2_make_fs_ro+0x440/0x620
[ 88.228934][ T4305] gfs2_withdraw+0x610/0x13d0
[ 88.233646][ T4305] gfs2_inode_refresh+0xc2d/0x1160
[ 88.238896][ T4305] inode_go_lock+0x127/0x470
[ 88.243517][ T4305] do_promote+0x741/0xab0
[ 88.247887][ T4305]