Warning: Permanently added '10.128.1.61' (ECDSA) to the list of known hosts.
2023/01/12 18:01:07 ignoring optional flag "sandboxArg"="0"
2023/01/12 18:01:07 parsed 1 programs
2023/01/12 18:01:07 executed programs: 0
[ 75.514899][ T4390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.523090][ T4390] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.530585][ T4390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.539014][ T4390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.547075][ T4390] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 75.554713][ T4390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 75.646891][ T5539] chnl_net:caif_netlink_parms(): no params data found
[ 75.683745][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.690962][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.698992][ T5539] device bridge_slave_0 entered promiscuous mode
[ 75.706902][ T5539] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.714235][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.722111][ T5539] device bridge_slave_1 entered promiscuous mode
[ 75.741184][ T5539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.752402][ T5539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.773479][ T5539] team0: Port device team_slave_0 added
[ 75.780956][ T5539] team0: Port device team_slave_1 added
[ 75.798079][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.805125][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.831943][ T5539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.844047][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.850990][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.877446][ T5539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.905196][ T5539] device hsr_slave_0 entered promiscuous mode
[ 75.912116][ T5539] device hsr_slave_1 entered promiscuous mode
[ 76.153174][ T7] cfg80211: failed to load regulatory.db
[ 76.595641][ T5539] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.606815][ T5539] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 76.616988][ T5539] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 76.628423][ T5539] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 76.710028][ T5539] 8021q: adding VLAN 0 to HW filter on device bond0
[ 76.736670][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 76.746785][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 76.758499][ T5539] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.772237][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 76.784124][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 76.793120][ T2443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.800411][ T2443] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.824195][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 76.832327][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 76.840911][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 76.850621][ T2443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.857773][ T2443] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.865536][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 76.874710][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 76.883438][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 76.893134][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 76.912061][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 76.921020][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 76.932605][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 76.941156][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 76.951189][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 76.962110][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.151892][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.159397][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.172080][ T5539] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.192231][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 77.200953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.223579][ T5539] device veth0_vlan entered promiscuous mode
[ 77.230413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 77.240233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.253591][ T5539] device veth1_vlan entered promiscuous mode
[ 77.262886][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 77.270711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 77.279436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 77.300509][ T5539] device veth0_macvtap entered promiscuous mode
[ 77.310011][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 77.319557][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 77.329634][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 77.339065][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 77.350566][ T5539] device veth1_macvtap entered promiscuous mode
[ 77.371760][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.379146][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 77.389768][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 77.400459][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 77.418660][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.426511][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 77.436147][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 77.447372][ T5539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.456555][ T5539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.465767][ T5539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.475224][ T5539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.535864][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.550024][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.571218][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.573081][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 77.592250][ T5081] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.592267][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.599511][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 77.976021][ T5596] loop0: detected capacity change from 0 to 32768
[ 77.991215][ T5596] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 78.001248][ T5596] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 78.018702][ T5596] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 78.030408][ T2443] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 78.038001][ T2443] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 78.077181][ T2443] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms
[ 78.085778][ T2443] gfs2: fsid=syz:syz.0: jid=0: Done
[ 78.091678][ T5596] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 78.266788][ T5596] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 78.294993][ T5539] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 78.294993][ T5539] inode = 11 2340
[ 78.294993][ T5539] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 460
[ 78.318420][ T5539] gfs2: fsid=syz:syz.0: G: s:EX n:2/924 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[ 78.335394][ T5539] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5539 [syz-executor.0] gfs2_quota_sync+0x3da/0x8b0
[ 78.350563][ T5539] gfs2: fsid=syz:syz.0: I: n:11/2340 t:8 f:0x00 d:0x00000201 s:176 p:0
[ 78.359497][ T5539] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 78.373487][ T5539] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1475
[ 78.387802][ T5539] CPU: 0 PID: 5539 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 78.396943][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 78.407107][ T5539] Call Trace:
[ 78.410399][ T5539]
[ 78.413344][ T5539] dump_stack_lvl+0x1b1/0x290
[ 78.418052][ T5539] ? nf_tcp_handle_invalid+0x630/0x630
[ 78.423542][ T5539] ? panic+0x710/0x710
[ 78.427636][ T5539] ? do_raw_spin_unlock+0x134/0x8a0
[ 78.432876][ T5539] gfs2_assert_warn_i+0x19a/0x2e0
[ 78.438286][ T5539] gfs2_quota_cleanup+0x4c6/0x6b0
[ 78.443360][ T5539] gfs2_make_fs_ro+0x517/0x610
[ 78.448252][ T5539] ? __might_sleep+0xc0/0xc0
[ 78.452865][ T5539] ? gfs2_dinode_out+0xad0/0xad0
[ 78.457827][ T5539] ? gfs2_glock_nq+0xdaa/0x1700
[ 78.462718][ T5539] ? gfs2_instantiate+0x207/0x220
[ 78.467771][ T5539] ? gfs2_glock_wait+0x213/0x2a0
[ 78.472743][ T5539] gfs2_withdraw+0x609/0x1540
[ 78.477488][ T5539] ? gfs2_lm+0x220/0x220
[ 78.481754][ T5539] ? make_kgid+0x1fe/0x710
[ 78.486197][ T5539] ? gfs2_withdraw+0x5cc/0x1540
[ 78.491082][ T5539] ? gfs2_consist_inode_i+0xf3/0x110
[ 78.496430][ T5539] gfs2_inode_refresh+0xb2d/0xf60
[ 78.501500][ T5539] ? gfs2_inode_metasync+0xf0/0xf0
[ 78.506755][ T5539] ? _raw_spin_unlock+0x24/0x40
[ 78.511657][ T5539] ? gfs2_glock_nq+0xdaa/0x1700
[ 78.516538][ T5539] ? do_raw_spin_unlock+0x134/0x8a0
[ 78.521773][ T5539] gfs2_instantiate+0x15e/0x220
[ 78.526739][ T5539] gfs2_glock_wait+0x1d9/0x2a0
[ 78.531621][ T5539] do_sync+0x485/0xc80
[ 78.535804][ T5539] ? gfs2_quota_sync+0x3da/0x8b0
[ 78.540771][ T5539] ? slot_put+0x1f0/0x1f0
[ 78.545133][ T5539] ? do_raw_spin_lock+0x147/0x3a0
[ 78.550182][ T5539] ? __lock_acquire+0x1f60/0x1f60
[ 78.555245][ T5539] ? gfs2_quota_sync+0x3da/0x8b0
[ 78.560208][ T5539] ? do_raw_spin_unlock+0x134/0x8a0
[ 78.565524][ T5539] ? qd_check_sync+0xba/0x3f0
[ 78.570320][ T5539] gfs2_quota_sync+0x3da/0x8b0
[ 78.575130][ T5539] gfs2_sync_fs+0x49/0xb0
[ 78.579489][ T5539] sync_filesystem+0xe8/0x220
[ 78.584205][ T5539] generic_shutdown_super+0x6b/0x310
[ 78.589522][ T5539] kill_block_super+0x79/0xd0
[ 78.594230][ T5539] deactivate_locked_super+0xa7/0xf0
[ 78.599551][ T5539] cleanup_mnt+0x494/0x520
[ 78.604161][ T5539] ? lockdep_hardirqs_on+0x8d/0x130
[ 78.609380][ T5539] task_work_run+0x243/0x300
[ 78.614016][ T5539] ? task_work_cancel+0x290/0x290
[ 78.619076][ T5539] ? exit_to_user_mode_loop+0x42/0x150
[ 78.624581][ T5539] exit_to_user_mode_loop+0x124/0x150
[ 78.630006][ T5539] exit_to_user_mode_prepare+0xb2/0x140
[ 78.635583][ T5539] syscall_exit_to_user_mode+0x26/0x60
[ 78.641071][ T5539] do_syscall_64+0x49/0xb0
[ 78.645514][ T5539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.651436][ T5539] RIP: 0033:0x7fa664c8d517
[ 78.655960][ T5539] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 78.675680][ T5539] RSP: 002b:00007ffd476b3eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 78.684126][ T5539] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa664c8d517
[ 78.692208][ T5539] RDX: 00007ffd476b3f89 RSI: 000000000000000a RDI: 00007ffd476b3f80
[ 78.700292][ T5539] RBP: 00007ffd476b3f80 R08: 00000000ffffffff R09: 00007ffd476b3d50
[ 78.708377][ T5539] R10: 00005555569498b3 R11: 0000000000000246 R12: 00007fa664ce6b24
[ 78.716548][ T5539] R13: 00007ffd476b5040 R14: 0000555556949810 R15: 00007ffd476b5080
[ 78.724650][ T5539]
[ 78.743570][ T5539] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 78.752596][ T5539] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 78.762426][ T5539] gfs2: fsid=syz:syz.0: File system withdrawn
[ 78.768930][ T5539] CPU: 0 PID: 5539 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 78.778579][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 78.788827][ T5539] Call Trace:
[ 78.792120][ T5539]
[ 78.795157][ T5539] dump_stack_lvl+0x1b1/0x290
[ 78.799965][ T5539] ? nf_tcp_handle_invalid+0x630/0x630
[ 78.805452][ T5539] ? panic+0x710/0x710
[ 78.809547][ T5539] ? kobject_uevent_env+0x46b/0x8e0
[ 78.814776][ T5539] gfs2_withdraw+0xf33/0x1540
[ 78.819497][ T5539] ? gfs2_lm+0x220/0x220
[ 78.823812][ T5539] ? make_kgid+0x1fe/0x710
[ 78.828278][ T5539] ? gfs2_consist_inode_i+0xf3/0x110
[ 78.834035][ T5539] gfs2_inode_refresh+0xb2d/0xf60
[ 78.839105][ T5539] ? gfs2_inode_metasync+0xf0/0xf0
[ 78.844333][ T5539] ? _raw_spin_unlock+0x24/0x40
[ 78.849306][ T5539] ? gfs2_glock_nq+0xdaa/0x1700
[ 78.854186][ T5539] ? do_raw_spin_unlock+0x134/0x8a0
[ 78.859422][ T5539] gfs2_instantiate+0x15e/0x220
[ 78.864301][ T5539] gfs2_glock_wait+0x1d9/0x2a0
[ 78.869107][ T5539] do_sync+0x485/0xc80
[ 78.873196][ T5539] ? gfs2_quota_sync+0x3da/0x8b0
[ 78.878142][ T5539] ? slot_put+0x1f0/0x1f0
[ 78.882556][ T5539] ? do_raw_spin_lock+0x147/0x3a0
[ 78.887627][ T5539] ? __lock_acquire+0x1f60/0x1f60
[ 78.892672][ T5539] ? gfs2_quota_sync+0x3da/0x8b0
[ 78.897608][ T5539] ? do_raw_spin_unlock+0x134/0x8a0
[ 78.902806][ T5539] ? qd_check_sync+0xba/0x3f0
[ 78.907481][ T5539] gfs2_quota_sync+0x3da/0x8b0
[ 78.912258][ T5539] gfs2_sync_fs+0x49/0xb0
[ 78.916581][ T5539] sync_filesystem+0xe8/0x220
[ 78.921265][ T5539] generic_shutdown_super+0x6b/0x310
[ 78.926664][ T5539] kill_block_super+0x79/0xd0
[ 78.931340][ T5539] deactivate_locked_super+0xa7/0xf0
[ 78.936629][ T5539] cleanup_mnt+0x494/0x520
[ 78.941039][ T5539] ? lockdep_hardirqs_on+0x8d/0x130
[ 78.946255][ T5539] task_work_run+0x243/0x300
[ 78.950848][ T5539] ? task_work_cancel+0x290/0x290
[ 78.955961][ T5539] ? exit_to_user_mode_loop+0x42/0x150
[ 78.961420][ T5539] exit_to_user_mode_loop+0x124/0x150
[ 78.966795][ T5539] exit_to_user_mode_prepare+0xb2/0x140
[ 78.972341][ T5539] syscall_exit_to_user_mode+0x26/0x60
[ 78.977885][ T5539] do_syscall_64+0x49/0xb0
[ 78.982298][ T5539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.988210][ T5539] RIP: 0033:0x7fa664c8d517
[ 78.992629][ T5539] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.012227][ T5539] RSP: 002b:00007ffd476b3eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.020654][ T5539] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa664c8d517
[ 79.028616][ T5539] RDX: 00007ffd476b3f89 RSI: 000000000000000a RDI: 00007ffd476b3f80
[ 79.036582][ T5539] RBP: 00007ffd476b3f80 R08: 00000000ffffffff R09: 00007ffd476b3d50
[ 79.044550][ T5539] R10: 00005555569498b3 R11: 0000000000000246 R12: 00007fa664ce6b24
[ 79.052515][ T5539] R13: 00007ffd476b5040 R14: 0000555556949810 R15: 00007ffd476b5080
[ 79.060578][ T5539]
[ 79.071961][ T5539] ==================================================================
[ 79.080061][ T5539] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 79.086759][ T5539] Read of size 8 at addr ffff8880732e5090 by task syz-executor.0/5539
[ 79.094900][ T5539]
[ 79.097207][ T5539] CPU: 0 PID: 5539 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 79.106472][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 79.116517][ T5539] Call Trace:
[ 79.119780][ T5539]
[ 79.122706][ T5539] dump_stack_lvl+0x1b1/0x290
[ 79.127374][ T5539] ? nf_tcp_handle_invalid+0x630/0x630
[ 79.132824][ T5539] ? __wake_up_klogd+0xcd/0x100
[ 79.137662][ T5539] ? panic+0x710/0x710
[ 79.141713][ T5539] ? _printk+0xc0/0x100
[ 79.145855][ T5539] ? _raw_spin_lock_irqsave+0x8e/0x100
[ 79.151305][ T5539] print_address_description+0x74/0x340
[ 79.156852][ T5539] print_report+0x107/0x1f0
[ 79.161443][ T5539] ? __virt_addr_valid+0x21b/0x2d0
[ 79.166638][ T5539] ? __phys_addr+0xb5/0x160
[ 79.171132][ T5539] ? qd_unlock+0x30/0x2d0
[ 79.175449][ T5539] kasan_report+0xcd/0x100
[ 79.179853][ T5539] ? qd_unlock+0x30/0x2d0
[ 79.184178][ T5539] kasan_check_range+0x2a7/0x2e0
[ 79.189192][ T5539] qd_unlock+0x30/0x2d0
[ 79.193367][ T5539] gfs2_quota_sync+0x768/0x8b0
[ 79.198125][ T5539] gfs2_sync_fs+0x49/0xb0
[ 79.202529][ T5539] sync_filesystem+0xe8/0x220
[ 79.207198][ T5539] generic_shutdown_super+0x6b/0x310
[ 79.212472][ T5539] kill_block_super+0x79/0xd0
[ 79.217138][ T5539] deactivate_locked_super+0xa7/0xf0
[ 79.222679][ T5539] cleanup_mnt+0x494/0x520
[ 79.227174][ T5539] ? lockdep_hardirqs_on+0x8d/0x130
[ 79.232364][ T5539] task_work_run+0x243/0x300
[ 79.236952][ T5539] ? task_work_cancel+0x290/0x290
[ 79.241983][ T5539] ? exit_to_user_mode_loop+0x42/0x150
[ 79.247445][ T5539] exit_to_user_mode_loop+0x124/0x150
[ 79.252816][ T5539] exit_to_user_mode_prepare+0xb2/0x140
[ 79.258355][ T5539] syscall_exit_to_user_mode+0x26/0x60
[ 79.263800][ T5539] do_syscall_64+0x49/0xb0
[ 79.268212][ T5539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.274097][ T5539] RIP: 0033:0x7fa664c8d517
[ 79.278504][ T5539] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.299156][ T5539] RSP: 002b:00007ffd476b3eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.307554][ T5539] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa664c8d517
[ 79.315508][ T5539] RDX: 00007ffd476b3f89 RSI: 000000000000000a RDI: 00007ffd476b3f80
[ 79.323467][ T5539] RBP: 00007ffd476b3f80 R08: 00000000ffffffff R09: 00007ffd476b3d50
[ 79.331426][ T5539] R10: 00005555569498b3 R11: 0000000000000246 R12: 00007fa664ce6b24
[ 79.339386][ T5539] R13: 00007ffd476b5040 R14: 0000555556949810 R15: 00007ffd476b5080
[ 79.347446][ T5539]
[ 79.350450][ T5539]
[ 79.352756][ T5539] Allocated by task 5596:
[ 79.357152][ T5539] kasan_set_track+0x3d/0x60
[ 79.361746][ T5539] __kasan_slab_alloc+0x65/0x70
[ 79.366757][ T5539] kmem_cache_alloc+0x1b3/0x350
[ 79.371592][ T5539] qd_alloc+0x51/0x250
[ 79.375657][ T5539] gfs2_quota_init+0x7c4/0x10e0
[ 79.380492][ T5539] gfs2_make_fs_rw+0x48e/0x590
[ 79.385333][ T5539] gfs2_fill_super+0x2357/0x2700
[ 79.390290][ T5539] get_tree_bdev+0x400/0x620
[ 79.394970][ T5539] gfs2_get_tree+0x50/0x210
[ 79.399544][ T5539] vfs_get_tree+0x88/0x270
[ 79.404031][ T5539] do_new_mount+0x289/0xad0
[ 79.408519][ T5539] __se_sys_mount+0x2d3/0x3c0
[ 79.413266][ T5539] do_syscall_64+0x3d/0xb0
[ 79.417667][ T5539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.423728][ T5539]
[ 79.426123][ T5539] Freed by task 7:
[ 79.430168][ T5539] kasan_set_track+0x3d/0x60
[ 79.434743][ T5539] kasan_save_free_info+0x27/0x40
[ 79.439760][ T5539] ____kasan_slab_free+0xd6/0x120
[ 79.444857][ T5539] slab_free_freelist_hook+0x12e/0x1a0
[ 79.450475][ T5539] kmem_cache_free+0x94/0x1d0
[ 79.455135][ T5539] rcu_core+0x9c1/0x1690
[ 79.459359][ T5539] __do_softirq+0x277/0x738
[ 79.463852][ T5539]
[ 79.466178][ T5539] Last potentially related work creation:
[ 79.471957][ T5539] kasan_save_stack+0x2b/0x50
[ 79.476616][ T5539] __kasan_record_aux_stack+0xb0/0xc0
[ 79.481969][ T5539] call_rcu+0x163/0xa70
[ 79.486116][ T5539] gfs2_quota_cleanup+0x457/0x6b0
[ 79.491227][ T5539] gfs2_make_fs_ro+0x517/0x610
[ 79.495970][ T5539] gfs2_withdraw+0x609/0x1540
[ 79.500630][ T5539] gfs2_inode_refresh+0xb2d/0xf60
[ 79.505639][ T5539] gfs2_instantiate+0x15e/0x220
[ 79.510473][ T5539] gfs2_glock_wait+0x1d9/0x2a0
[ 79.515220][ T5539] do_sync+0x485/0xc80
[ 79.519283][ T5539] gfs2_quota_sync+0x3da/0x8b0
[ 79.524030][ T5539] gfs2_sync_fs+0x49/0xb0
[ 79.528341][ T5539] sync_filesystem+0xe8/0x220
[ 79.533116][ T5539] generic_shutdown_super+0x6b/0x310
[ 79.538559][ T5539] kill_block_super+0x79/0xd0
[ 79.543302][ T5539] deactivate_locked_super+0xa7/0xf0
[ 79.548838][ T5539] cleanup_mnt+0x494/0x520
[ 79.553409][ T5539] task_work_run+0x243/0x300
[ 79.558071][ T5539] exit_to_user_mode_loop+0x124/0x150
[ 79.563438][ T5539] exit_to_user_mode_prepare+0xb2/0x140
[ 79.568985][ T5539] syscall_exit_to_user_mode+0x26/0x60
[ 79.574422][ T5539] do_syscall_64+0x49/0xb0
[ 79.578827][ T5539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.584707][ T5539]
[ 79.587012][ T5539] The buggy address belongs to the object at ffff8880732e5000
[ 79.587012][ T5539] which belongs to the cache gfs2_quotad of size 272
[ 79.601218][ T5539] The buggy address is located 144 bytes inside of
[ 79.601218][ T5539] 272-byte region [ffff8880732e5000, ffff8880732e5110)
[ 79.614742][ T5539]
[ 79.617050][ T5539] The buggy address belongs to the physical page:
[ 79.623449][ T5539] page:ffffea0001ccb940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x732e5
[ 79.633666][ T5539] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 79.641467][ T5539] raw: 00fff00000000200 ffff88801c4213c0 dead000000000122 0000000000000000
[ 79.650033][ T5539] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 79.658594][ T5539] page dumped because: kasan: bad access detected
[ 79.664984][ T5539] page_owner tracks the page as allocated
[ 79.670678][ T5539] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5596, tgid 5595 (syz-executor.0), ts 78220417177, free_ts 78158756508
[ 79.692101][ T5539] get_page_from_freelist+0x742/0x7c0
[ 79.697460][ T5539] __alloc_pages+0x259/0x560
[ 79.702033][ T5539] alloc_slab_page+0xbd/0x190
[ 79.706699][ T5539] allocate_slab+0x5e/0x3c0
[ 79.711187][ T5539] ___slab_alloc+0x782/0xe20
[ 79.715761][ T5539] kmem_cache_alloc+0x268/0x350
[ 79.720593][ T5539] qd_alloc+0x51/0x250
[ 79.724648][ T5539] gfs2_quota_init+0x7c4/0x10e0
[ 79.729484][ T5539] gfs2_make_fs_rw+0x48e/0x590
[ 79.734227][ T5539] gfs2_fill_super+0x2357/0x2700
[ 79.739149][ T5539] get_tree_bdev+0x400/0x620
[ 79.743725][ T5539] gfs2_get_tree+0x50/0x210
[ 79.748298][ T5539] vfs_get_tree+0x88/0x270
[ 79.752780][ T5539] do_new_mount+0x289/0xad0
[ 79.757350][ T5539] __se_sys_mount+0x2d3/0x3c0
[ 79.762008][ T5539] do_syscall_64+0x3d/0xb0
[ 79.766412][ T5539] page last free stack trace:
[ 79.771066][ T5539] free_pcp_prepare+0x751/0x780
[ 79.775903][ T5539] free_unref_page+0x19/0x4c0
[ 79.780566][ T5539] __unfreeze_partials+0x1a5/0x1e0
[ 79.785843][ T5539] put_cpu_partial+0x106/0x170
[ 79.790615][ T5539] qlist_free_all+0x2b/0x70
[ 79.795293][ T5539] kasan_quarantine_reduce+0x156/0x170
[ 79.800741][ T5539] __kasan_slab_alloc+0x1f/0x70
[ 79.805597][ T5539] kmem_cache_alloc+0x1b3/0x350
[ 79.810462][ T5539] getname_flags+0xb8/0x4e0
[ 79.814967][ T5539] __se_sys_newfstatat+0xcb/0x7d0
[ 79.820000][ T5539] do_syscall_64+0x3d/0xb0
[ 79.824447][ T5539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.830339][ T5539]
[ 79.832659][ T5539] Memory state around the buggy address:
[ 79.838539][ T5539] ffff8880732e4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.846581][ T5539] ffff8880732e5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.854649][ T5539] >ffff8880732e5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.862705][ T5539] ^
[ 79.867287][ T5539] ffff8880732e5100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.875521][ T5539] ffff8880732e5180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.883561][ T5539] ==================================================================
[ 79.893537][ T4390] Bluetooth: hci0: command 0x041b tx timeout
[ 79.921700][ T5539] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 79.928940][ T5539] CPU: 1 PID: 5539 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 79.938232][ T5539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 79.948471][ T5539] Call Trace:
[ 79.951766][ T5539]
[ 79.954704][ T5539] dump_stack_lvl+0x1b1/0x290
[ 79.959406][ T5539] ? nf_tcp_handle_invalid+0x630/0x630
[ 79.965055][ T5539] ? panic+0x710/0x710
[ 79.969119][ T5539] ? lock_release+0x81/0x820
[ 79.973714][ T5539] ? vscnprintf+0x59/0x80
[ 79.978031][ T5539] panic+0x2d6/0x710
[ 79.981915][ T5539] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 79.988067][ T5539] ? check_panic_on_warn+0x1d/0xa0
[ 79.993185][ T5539] ? memcpy_page_flushcache+0x100/0x100
[ 79.998732][ T5539] ? _raw_spin_unlock_irqrestore+0x110/0x120
[ 80.004733][ T5539] ? _raw_spin_unlock+0x40/0x40
[ 80.009574][ T5539] ? print_report+0x1b4/0x1f0
[ 80.014244][ T5539] check_panic_on_warn+0x80/0xa0
[ 80.019167][ T5539] ? qd_unlock+0x30/0x2d0
[ 80.023500][ T5539] end_report+0x47/0x90
[ 80.027755][ T5539] kasan_report+0xda/0x100
[ 80.032163][ T5539] ? qd_unlock+0x30/0x2d0
[ 80.036485][ T5539] kasan_check_range+0x2a7/0x2e0
[ 80.041413][ T5539] qd_unlock+0x30/0x2d0
[ 80.045564][ T5539] gfs2_quota_sync+0x768/0x8b0
[ 80.050321][ T5539] gfs2_sync_fs+0x49/0xb0
[ 80.054639][ T5539] sync_filesystem+0xe8/0x220
[ 80.059398][ T5539] generic_shutdown_super+0x6b/0x310
[ 80.064681][ T5539] kill_block_super+0x79/0xd0
[ 80.069347][ T5539] deactivate_locked_super+0xa7/0xf0
[ 80.074627][ T5539] cleanup_mnt+0x494/0x520
[ 80.079030][ T5539] ? lockdep_hardirqs_on+0x8d/0x130
[ 80.084212][ T5539] task_work_run+0x243/0x300
[ 80.088809][ T5539] ? task_work_cancel+0x290/0x290
[ 80.093823][ T5539] ? exit_to_user_mode_loop+0x42/0x150
[ 80.099275][ T5539] exit_to_user_mode_loop+0x124/0x150
[ 80.104724][ T5539] exit_to_user_mode_prepare+0xb2/0x140
[ 80.110257][ T5539] syscall_exit_to_user_mode+0x26/0x60
[ 80.115899][ T5539] do_syscall_64+0x49/0xb0
[ 80.120396][ T5539] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.126363][ T5539] RIP: 0033:0x7fa664c8d517
[ 80.130766][ T5539] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 80.150443][ T5539] RSP: 002b:00007ffd476b3eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 80.158946][ T5539] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fa664c8d517
[ 80.166912][ T5539] RDX: 00007ffd476b3f89 RSI: 000000000000000a RDI: 00007ffd476b3f80
[ 80.174902][ T5539] RBP: 00007ffd476b3f80 R08: 00000000ffffffff R09: 00007ffd476b3d50
[ 80.182890][ T5539] R10: 00005555569498b3 R11: 0000000000000246 R12: 00007fa664ce6b24
[ 80.190942][ T5539] R13: 00007ffd476b5040 R14: 0000555556949810 R15: 00007ffd476b5080
[ 80.198921][ T5539]
[ 80.202063][ T5539] Kernel Offset: disabled
[ 80.206466][ T5539] Rebooting in 86400 seconds..