Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts.
2026/07/11 23:44:58 parsed 1 programs
2026/07/11 23:44:58 serving rpc on tcp://43929
[ 67.645416][ T4196] cgroup: Unknown subsys name 'net'
[ 67.773316][ T4196] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 69.290837][ T4196] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 71.271742][ T4221] chnl_net:caif_netlink_parms(): no params data found
[ 71.314627][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.322170][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.330345][ T4221] device bridge_slave_0 entered promiscuous mode
[ 71.339235][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.346416][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.355220][ T4221] device bridge_slave_1 entered promiscuous mode
[ 71.376492][ T4221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 71.387956][ T4221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 71.410276][ T4221] team0: Port device team_slave_0 added
[ 71.418122][ T4221] team0: Port device team_slave_1 added
[ 71.436524][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 71.443732][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.470401][ T4221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 71.485652][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 71.492714][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 71.518772][ T4221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 71.550630][ T4221] device hsr_slave_0 entered promiscuous mode
[ 71.559401][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.566015][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.573017][ T4221] device hsr_slave_1 entered promiscuous mode
[ 71.722538][ T4221] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 71.735368][ T4221] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 71.747008][ T4221] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 71.758174][ T4221] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 71.790356][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.797648][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.805642][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.812799][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.880201][ T4221] 8021q: adding VLAN 0 to HW filter on device bond0
[ 71.909677][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 71.922908][ T444] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.934367][ T444] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.952620][ T4221] 8021q: adding VLAN 0 to HW filter on device team0
[ 71.966812][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 71.976397][ T444] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.983703][ T444] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 72.008783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 72.019722][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.027293][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 72.050516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 72.062236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 72.072524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 72.089599][ T4221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 72.102209][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 72.110552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 72.120616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 72.129543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 72.286019][ T4221] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 72.295128][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 72.303841][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 72.327483][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 72.337791][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 72.362086][ T4221] device veth0_vlan entered promiscuous mode
[ 72.369809][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 72.380027][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 72.389610][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 72.397678][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 72.411076][ T4221] device veth1_vlan entered promiscuous mode
[ 72.443120][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 72.453794][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 72.462677][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 72.471824][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 72.483636][ T4221] device veth0_macvtap entered promiscuous mode
[ 72.494987][ T4221] device veth1_macvtap entered promiscuous mode
[ 72.514051][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 72.523662][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 72.533334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 72.542089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 72.552672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 72.565576][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 72.578159][ T4221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.588645][ T4221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.599183][ T4221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.609841][ T4221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 72.621780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 72.632143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 73.039963][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 73.900456][ T444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 73.913113][ T444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 73.924429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 73.942372][ T444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 73.950505][ T444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 73.959128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/07/11 23:45:06 executed programs: 0
[ 74.725915][ T4290] chnl_net:caif_netlink_parms(): no params data found
[ 74.767354][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.775085][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.783064][ T4290] device bridge_slave_0 entered promiscuous mode
[ 74.791181][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.798463][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.806310][ T4290] device bridge_slave_1 entered promiscuous mode
[ 74.826455][ T4290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.838100][ T4290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.860684][ T4290] team0: Port device team_slave_0 added
[ 74.868141][ T4290] team0: Port device team_slave_1 added
[ 74.884060][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.891139][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.917393][ T4290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.929331][ T4290] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.936295][ T4290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.962682][ T4290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.990352][ T4290] device hsr_slave_0 entered promiscuous mode
[ 74.999552][ T4290] device hsr_slave_1 entered promiscuous mode
[ 75.006413][ T4290] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 75.014302][ T4290] Cannot create hsr debugfs directory
[ 75.813754][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.678166][ T1111] Bluetooth: hci0: command 0x0409 tx timeout
[ 78.021880][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.075690][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 78.757187][ T4261] Bluetooth: hci0: command 0x041b tx timeout
[ 78.866290][ T4290] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 78.875872][ T4290] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 78.885441][ T4290] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 78.894526][ T4290] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 78.945550][ T4290] 8021q: adding VLAN 0 to HW filter on device bond0
[ 78.958496][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 78.966607][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 78.988110][ T4290] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.997931][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 79.006845][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 79.016282][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.023422][ T4231] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.032720][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 79.059879][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 79.068729][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 79.079737][ T4231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.086844][ T4231] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.101508][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 79.111130][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 79.139024][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 79.149452][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 79.160011][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 79.184546][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 79.193489][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 79.204946][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 79.213865][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 79.225953][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 79.234912][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 79.245849][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 79.314798][ T9] device hsr_slave_0 left promiscuous mode
[ 79.324549][ T9] device hsr_slave_1 left promiscuous mode
[ 79.332329][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 79.340496][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 79.352911][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 79.360999][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 79.369235][ T9] device bridge_slave_1 left promiscuous mode
[ 79.376237][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.391597][ T9] device bridge_slave_0 left promiscuous mode
[ 79.398367][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.416346][ T9] device veth1_macvtap left promiscuous mode
[ 79.422858][ T9] device veth0_macvtap left promiscuous mode
[ 79.429746][ T9] device veth1_vlan left promiscuous mode
[ 79.435699][ T9] device veth0_vlan left promiscuous mode
[ 79.580230][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 79.594530][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 79.606757][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 79.622270][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 79.683896][ T9] bond0 (unregistering): Released all slaves
[ 79.753978][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 79.761663][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 79.773535][ T4290] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.790504][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 79.800446][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 79.825313][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 79.839245][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 79.848976][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 79.856700][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 79.866424][ T4290] device veth0_vlan entered promiscuous mode
[ 79.877558][ T4290] device veth1_vlan entered promiscuous mode
[ 79.901211][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 79.911956][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 79.921035][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 79.929663][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 79.940969][ T4290] device veth0_macvtap entered promiscuous mode
[ 79.950766][ T4290] device veth1_macvtap entered promiscuous mode
[ 79.970895][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.981718][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 79.990180][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 79.999044][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 80.007859][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 80.019942][ T4290] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 80.028740][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 80.037832][ T4231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 80.048790][ T4290] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.057876][ T4290] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.066668][ T4290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.075634][ T4290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.143854][ T4231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.157860][ T4231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.175681][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/07/11 23:45:12 executed programs: 2
[ 80.193366][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.206035][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.215117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 80.616411][ T4340] loop0: detected capacity change from 0 to 32768
[ 80.693247][ T4340] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 80.717882][ T4340] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 80.781580][ T4340] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 80.808084][ T4310] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 80.815033][ T4310] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 80.852367][ T4311] Bluetooth: hci0: command 0x040f tx timeout
[ 80.865679][ T4310] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 50ms
[ 80.879961][ T4310] gfs2: fsid=syz:syz.0: jid=0: Done
[ 80.887026][ T4340] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 81.032768][ T4340] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 81.069005][ T4290] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 81.069005][ T4290] inode = 11 2339
[ 81.069005][ T4290] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414
[ 81.107605][ T4290] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 81.138591][ T4290] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 81.153483][ T4290] CPU: 0 PID: 4290 Comm: syz-executor Not tainted syzkaller #0
[ 81.161079][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 81.171189][ T4290] Call Trace:
[ 81.174487][ T4290]
[ 81.177433][ T4290] dump_stack_lvl+0x188/0x250
[ 81.182150][ T4290] ? show_regs_print_info+0x20/0x20
[ 81.187486][ T4290] ? load_image+0x410/0x410
[ 81.192038][ T4290] ? do_raw_spin_unlock+0x11d/0x230
[ 81.197267][ T4290] gfs2_assert_warn_i+0x187/0x2c0
[ 81.202328][ T4290] gfs2_quota_cleanup+0x48c/0x670
[ 81.207386][ T4290] gfs2_make_fs_ro+0x440/0x620
[ 81.212180][ T4290] ? __might_sleep+0xf0/0xf0
[ 81.216887][ T4290] ? gfs2_dinode_out+0xb00/0xb00
[ 81.221879][ T4290] ? _raw_spin_unlock+0x24/0x40
[ 81.226768][ T4290] ? gfs2_glock_nq+0xcaa/0x1510
[ 81.231686][ T4290] gfs2_withdraw+0x660/0x14e0
[ 81.236530][ T4290] ? gfs2_meta_new+0x160/0x160
[ 81.241343][ T4290] ? gfs2_lm+0x240/0x240
[ 81.245803][ T4290] ? gfs2_freeze_lock+0x52/0xc0
[ 81.250680][ T4290] ? gfs2_consist_inode_i+0xc0/0xe0
[ 81.255907][ T4290] gfs2_inode_refresh+0xb2d/0x11a0
[ 81.261043][ T4290] ? gfs2_inode_metasync+0xf0/0xf0
[ 81.266267][ T4290] inode_go_lock+0x127/0x450
[ 81.270883][ T4290] do_promote+0x75b/0xb20
[ 81.275326][ T4290] finish_xmote+0x4c2/0xaf0
[ 81.280010][ T4290] do_xmote+0x752/0x10a0
[ 81.284329][ T4290] gfs2_glock_nq+0xc6b/0x1510
[ 81.289028][ T4290] do_sync+0x49c/0xba0
[ 81.293494][ T4290] ? slot_put+0x1e0/0x1e0
[ 81.297946][ T4290] ? do_sync+0x494/0xba0
[ 81.302223][ T4290] ? do_raw_spin_unlock+0x11d/0x230
[ 81.307435][ T4290] gfs2_quota_sync+0x355/0x780
[ 81.312222][ T4290] gfs2_sync_fs+0x48/0xb0
[ 81.316609][ T4290] sync_filesystem+0xe6/0x220
[ 81.321318][ T4290] generic_shutdown_super+0x6b/0x300
[ 81.326620][ T4290] kill_block_super+0x7c/0xe0
[ 81.331411][ T4290] deactivate_locked_super+0x93/0xf0
[ 81.336819][ T4290] cleanup_mnt+0x426/0x4d0
[ 81.341267][ T4290] task_work_run+0x125/0x1a0
[ 81.346089][ T4290] exit_to_user_mode_loop+0x10f/0x130
[ 81.351482][ T4290] exit_to_user_mode_prepare+0xee/0x180
[ 81.357219][ T4290] syscall_exit_to_user_mode+0x16/0x40
[ 81.362789][ T4290] do_syscall_64+0x58/0xa0
[ 81.367712][ T4290] ? clear_bhb_loop+0x30/0x80
[ 81.372410][ T4290] ? clear_bhb_loop+0x30/0x80
[ 81.377580][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.383526][ T4290] RIP: 0033:0x7fc2ad0f9097
[ 81.388034][ T4290] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 81.408093][ T4290] RSP: 002b:00007ffe7b1481b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 81.416692][ T4290] RAX: 0000000000000000 RBX: 00007fc2ad18d2ca RCX: 00007fc2ad0f9097
[ 81.424842][ T4290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7b148270
[ 81.432929][ T4290] RBP: 00007ffe7b148270 R08: 00007ffe7b149270 R09: 00000000ffffffff
[ 81.440910][ T4290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b149300
[ 81.449158][ T4290] R13: 00007fc2ad18d2ca R14: 000000000001395e R15: 00007ffe7b149340
[ 81.457677][ T4290]
[ 81.466260][ T4290] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 81.475788][ T4290] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 81.487639][ T4290] gfs2: fsid=syz:syz.0: File system withdrawn
[ 81.493770][ T4290] CPU: 1 PID: 4290 Comm: syz-executor Not tainted syzkaller #0
[ 81.501345][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 81.511831][ T4290] Call Trace:
[ 81.515538][ T4290]
[ 81.518499][ T4290] dump_stack_lvl+0x188/0x250
[ 81.523222][ T4290] ? show_regs_print_info+0x20/0x20
[ 81.528448][ T4290] ? load_image+0x410/0x410
[ 81.532969][ T4290] ? lockref_put_or_lock+0x6e/0xb0
[ 81.538090][ T4290] gfs2_withdraw+0xb9a/0x14e0
[ 81.543022][ T4290] ? gfs2_meta_new+0x160/0x160
[ 81.547925][ T4290] ? gfs2_lm+0x240/0x240
[ 81.552369][ T4290] ? gfs2_consist_inode_i+0xc0/0xe0
[ 81.557595][ T4290] gfs2_inode_refresh+0xb2d/0x11a0
[ 81.562723][ T4290] ? gfs2_inode_metasync+0xf0/0xf0
[ 81.567942][ T4290] inode_go_lock+0x127/0x450
[ 81.572545][ T4290] do_promote+0x75b/0xb20
[ 81.576897][ T4290] finish_xmote+0x4c2/0xaf0
[ 81.581547][ T4290] do_xmote+0x752/0x10a0
[ 81.585997][ T4290] gfs2_glock_nq+0xc6b/0x1510
[ 81.590801][ T4290] do_sync+0x49c/0xba0
[ 81.595189][ T4290] ? slot_put+0x1e0/0x1e0
[ 81.599588][ T4290] ? do_sync+0x494/0xba0
[ 81.603869][ T4290] ? do_raw_spin_unlock+0x11d/0x230
[ 81.609632][ T4290] gfs2_quota_sync+0x355/0x780
[ 81.614541][ T4290] gfs2_sync_fs+0x48/0xb0
[ 81.619315][ T4290] sync_filesystem+0xe6/0x220
[ 81.624935][ T4290] generic_shutdown_super+0x6b/0x300
[ 81.630268][ T4290] kill_block_super+0x7c/0xe0
[ 81.635183][ T4290] deactivate_locked_super+0x93/0xf0
[ 81.640650][ T4290] cleanup_mnt+0x426/0x4d0
[ 81.645085][ T4290] task_work_run+0x125/0x1a0
[ 81.649684][ T4290] exit_to_user_mode_loop+0x10f/0x130
[ 81.655441][ T4290] exit_to_user_mode_prepare+0xee/0x180
[ 81.661022][ T4290] syscall_exit_to_user_mode+0x16/0x40
[ 81.666508][ T4290] do_syscall_64+0x58/0xa0
[ 81.670946][ T4290] ? clear_bhb_loop+0x30/0x80
[ 81.675656][ T4290] ? clear_bhb_loop+0x30/0x80
[ 81.680345][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.686240][ T4290] RIP: 0033:0x7fc2ad0f9097
[ 81.690659][ T4290] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 81.710354][ T4290] RSP: 002b:00007ffe7b1481b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 81.718791][ T4290] RAX: 0000000000000000 RBX: 00007fc2ad18d2ca RCX: 00007fc2ad0f9097
[ 81.726808][ T4290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7b148270
[ 81.734814][ T4290] RBP: 00007ffe7b148270 R08: 00007ffe7b149270 R09: 00000000ffffffff
[ 81.742809][ T4290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b149300
[ 81.750798][ T4290] R13: 00007fc2ad18d2ca R14: 000000000001395e R15: 00007ffe7b149340
[ 81.758879][ T4290]
[ 82.270807][ T4343] loop0: detected capacity change from 0 to 32768
[ 82.360740][ T4343] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 82.369388][ T4343] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 82.390576][ T4343] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 82.418029][ T4358] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 82.424874][ T4358] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 82.466027][ T4358] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms
[ 82.475527][ T4358] gfs2: fsid=syz:syz.0: jid=0: Done
[ 82.482314][ T4343] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 82.603713][ T4343] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 82.618831][ T4290] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 82.618831][ T4290] inode = 11 2339
[ 82.618831][ T4290] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414
[ 82.640842][ T4290] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 82.656408][ T4290] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 82.678104][ T4290] CPU: 0 PID: 4290 Comm: syz-executor Not tainted syzkaller #0
[ 82.685724][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 82.695902][ T4290] Call Trace:
[ 82.699208][ T4290]
[ 82.702418][ T4290] dump_stack_lvl+0x188/0x250
[ 82.707140][ T4290] ? show_regs_print_info+0x20/0x20
[ 82.712364][ T4290] ? load_image+0x410/0x410
[ 82.716909][ T4290] ? do_raw_spin_unlock+0x11d/0x230
[ 82.722137][ T4290] gfs2_assert_warn_i+0x187/0x2c0
[ 82.727195][ T4290] gfs2_quota_cleanup+0x48c/0x670
[ 82.732253][ T4290] gfs2_make_fs_ro+0x440/0x620
[ 82.737039][ T4290] ? __might_sleep+0xf0/0xf0
[ 82.741659][ T4290] ? gfs2_dinode_out+0xb00/0xb00
[ 82.746717][ T4290] ? _raw_spin_unlock+0x24/0x40
[ 82.751587][ T4290] ? gfs2_glock_nq+0xcaa/0x1510
[ 82.756471][ T4290] gfs2_withdraw+0x660/0x14e0
[ 82.761186][ T4290] ? gfs2_meta_new+0x160/0x160
[ 82.766189][ T4290] ? gfs2_lm+0x240/0x240
[ 82.770459][ T4290] ? gfs2_freeze_lock+0x52/0xc0
[ 82.775354][ T4290] ? gfs2_consist_inode_i+0xc0/0xe0
[ 82.780721][ T4290] gfs2_inode_refresh+0xb2d/0x11a0
[ 82.785891][ T4290] ? gfs2_inode_metasync+0xf0/0xf0
[ 82.791114][ T4290] inode_go_lock+0x127/0x450
[ 82.796150][ T4290] do_promote+0x75b/0xb20
[ 82.800551][ T4290] finish_xmote+0x4c2/0xaf0
[ 82.805105][ T4290] do_xmote+0x752/0x10a0
[ 82.809383][ T4290] gfs2_glock_nq+0xc6b/0x1510
[ 82.814110][ T4290] do_sync+0x49c/0xba0
[ 82.818218][ T4290] ? slot_put+0x1e0/0x1e0
[ 82.822569][ T4290] ? do_sync+0x494/0xba0
[ 82.826821][ T4290] ? do_raw_spin_unlock+0x11d/0x230
[ 82.832492][ T4290] gfs2_quota_sync+0x355/0x780
[ 82.837323][ T4290] gfs2_sync_fs+0x48/0xb0
[ 82.841713][ T4290] sync_filesystem+0xe6/0x220
[ 82.846435][ T4290] generic_shutdown_super+0x6b/0x300
[ 82.851769][ T4290] kill_block_super+0x7c/0xe0
[ 82.856484][ T4290] deactivate_locked_super+0x93/0xf0
[ 82.862181][ T4290] cleanup_mnt+0x426/0x4d0
[ 82.866661][ T4290] task_work_run+0x125/0x1a0
[ 82.871308][ T4290] exit_to_user_mode_loop+0x10f/0x130
[ 82.876823][ T4290] exit_to_user_mode_prepare+0xee/0x180
[ 82.882414][ T4290] syscall_exit_to_user_mode+0x16/0x40
[ 82.888300][ T4290] do_syscall_64+0x58/0xa0
[ 82.893005][ T4290] ? clear_bhb_loop+0x30/0x80
[ 82.898004][ T4290] ? clear_bhb_loop+0x30/0x80
[ 82.903161][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 82.909098][ T4290] RIP: 0033:0x7fc2ad0f9097
[ 82.913543][ T4290] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 82.933842][ T4290] RSP: 002b:00007ffe7b1481b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 82.942447][ T4290] RAX: 0000000000000000 RBX: 00007fc2ad18d2ca RCX: 00007fc2ad0f9097
[ 82.950533][ T4290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7b148270
[ 82.958637][ T4290] RBP: 00007ffe7b148270 R08: 00007ffe7b149270 R09: 00000000ffffffff
[ 82.966934][ T4290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b149300
[ 82.975225][ T4290] R13: 00007fc2ad18d2ca R14: 000000000001400b R15: 00007ffe7b149340
[ 82.983661][ T4290]
[ 82.987562][ T4290] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 82.988903][ T4310] Bluetooth: hci0: command 0x0419 tx timeout
[ 82.996761][ T4290] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 83.014593][ T4290] gfs2: fsid=syz:syz.0: File system withdrawn
[ 83.021067][ T4290] CPU: 1 PID: 4290 Comm: syz-executor Not tainted syzkaller #0
[ 83.028779][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 83.038836][ T4290] Call Trace:
[ 83.042210][ T4290]
[ 83.045136][ T4290] dump_stack_lvl+0x188/0x250
[ 83.049813][ T4290] ? show_regs_print_info+0x20/0x20
[ 83.055008][ T4290] ? load_image+0x410/0x410
[ 83.060153][ T4290] ? lockref_put_or_lock+0x6e/0xb0
[ 83.065563][ T4290] gfs2_withdraw+0xb9a/0x14e0
[ 83.070352][ T4290] ? gfs2_meta_new+0x160/0x160
[ 83.075457][ T4290] ? gfs2_lm+0x240/0x240
[ 83.079874][ T4290] ? gfs2_consist_inode_i+0xc0/0xe0
[ 83.085266][ T4290] gfs2_inode_refresh+0xb2d/0x11a0
[ 83.090559][ T4290] ? gfs2_inode_metasync+0xf0/0xf0
[ 83.095841][ T4290] inode_go_lock+0x127/0x450
[ 83.100724][ T4290] do_promote+0x75b/0xb20
[ 83.105112][ T4290] finish_xmote+0x4c2/0xaf0
[ 83.109809][ T4290] do_xmote+0x752/0x10a0
[ 83.114086][ T4290] gfs2_glock_nq+0xc6b/0x1510
[ 83.118949][ T4290] do_sync+0x49c/0xba0
[ 83.123060][ T4290] ? slot_put+0x1e0/0x1e0
[ 83.127503][ T4290] ? do_sync+0x494/0xba0
[ 83.131784][ T4290] ? do_raw_spin_unlock+0x11d/0x230
[ 83.137015][ T4290] gfs2_quota_sync+0x355/0x780
[ 83.141806][ T4290] gfs2_sync_fs+0x48/0xb0
[ 83.146153][ T4290] sync_filesystem+0xe6/0x220
[ 83.150848][ T4290] generic_shutdown_super+0x6b/0x300
[ 83.156125][ T4290] kill_block_super+0x7c/0xe0
[ 83.160796][ T4290] deactivate_locked_super+0x93/0xf0
[ 83.166074][ T4290] cleanup_mnt+0x426/0x4d0
[ 83.170587][ T4290] task_work_run+0x125/0x1a0
[ 83.175209][ T4290] exit_to_user_mode_loop+0x10f/0x130
[ 83.180625][ T4290] exit_to_user_mode_prepare+0xee/0x180
[ 83.186587][ T4290] syscall_exit_to_user_mode+0x16/0x40
[ 83.192212][ T4290] do_syscall_64+0x58/0xa0
[ 83.196687][ T4290] ? clear_bhb_loop+0x30/0x80
[ 83.201500][ T4290] ? clear_bhb_loop+0x30/0x80
[ 83.206320][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.212271][ T4290] RIP: 0033:0x7fc2ad0f9097
[ 83.216708][ T4290] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 83.236503][ T4290] RSP: 002b:00007ffe7b1481b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 83.244934][ T4290] RAX: 0000000000000000 RBX: 00007fc2ad18d2ca RCX: 00007fc2ad0f9097
[ 83.252915][ T4290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7b148270
[ 83.261062][ T4290] RBP: 00007ffe7b148270 R08: 00007ffe7b149270 R09: 00000000ffffffff
[ 83.269147][ T4290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b149300
[ 83.278258][ T4290] R13: 00007fc2ad18d2ca R14: 000000000001400b R15: 00007ffe7b149340
[ 83.286275][ T4290]
[ 83.291346][ T4290] ==================================================================
[ 83.299662][ T4290] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 83.306351][ T4290] Read of size 8 at addr ffff88805b4c51e0 by task syz-executor/4290
[ 83.314499][ T4290]
[ 83.316827][ T4290] CPU: 1 PID: 4290 Comm: syz-executor Not tainted syzkaller #0
[ 83.324379][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 83.334496][ T4290] Call Trace:
[ 83.337923][ T4290]
[ 83.340867][ T4290] dump_stack_lvl+0x188/0x250
[ 83.345559][ T4290] ? show_regs_print_info+0x20/0x20
[ 83.350784][ T4290] ? load_image+0x410/0x410
[ 83.355407][ T4290] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 83.360883][ T4290] print_address_description+0x60/0x2d0
[ 83.366442][ T4290] ? qd_unlock+0x30/0x2d0
[ 83.370890][ T4290] kasan_report+0xdf/0x130
[ 83.375439][ T4290] ? qd_unlock+0x30/0x2d0
[ 83.379781][ T4290] kasan_check_range+0x235/0x290
[ 83.384722][ T4290] qd_unlock+0x30/0x2d0
[ 83.388874][ T4290] gfs2_quota_sync+0x63b/0x780
[ 83.393658][ T4290] gfs2_sync_fs+0x48/0xb0
[ 83.398013][ T4290] sync_filesystem+0xe6/0x220
[ 83.402719][ T4290] generic_shutdown_super+0x6b/0x300
[ 83.408015][ T4290] kill_block_super+0x7c/0xe0
[ 83.412713][ T4290] deactivate_locked_super+0x93/0xf0
[ 83.418008][ T4290] cleanup_mnt+0x426/0x4d0
[ 83.422470][ T4290] task_work_run+0x125/0x1a0
[ 83.427081][ T4290] exit_to_user_mode_loop+0x10f/0x130
[ 83.432726][ T4290] exit_to_user_mode_prepare+0xee/0x180
[ 83.438397][ T4290] syscall_exit_to_user_mode+0x16/0x40
[ 83.444113][ T4290] do_syscall_64+0x58/0xa0
[ 83.448992][ T4290] ? clear_bhb_loop+0x30/0x80
[ 83.454199][ T4290] ? clear_bhb_loop+0x30/0x80
[ 83.459949][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.466079][ T4290] RIP: 0033:0x7fc2ad0f9097
[ 83.470534][ T4290] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 83.490680][ T4290] RSP: 002b:00007ffe7b1481b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 83.499109][ T4290] RAX: 0000000000000000 RBX: 00007fc2ad18d2ca RCX: 00007fc2ad0f9097
[ 83.507181][ T4290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7b148270
[ 83.515346][ T4290] RBP: 00007ffe7b148270 R08: 00007ffe7b149270 R09: 00000000ffffffff
[ 83.523356][ T4290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b149300
[ 83.531345][ T4290] R13: 00007fc2ad18d2ca R14: 000000000001400b R15: 00007ffe7b149340
[ 83.539329][ T4290]
[ 83.542366][ T4290]
[ 83.544696][ T4290] Allocated by task 4343:
[ 83.549225][ T4290] __kasan_slab_alloc+0x92/0xc0
[ 83.554334][ T4290] slab_post_alloc_hook+0x4c/0x380
[ 83.559586][ T4290] kmem_cache_alloc+0x15d/0x280
[ 83.564454][ T4290] qd_alloc+0x50/0x260
[ 83.568560][ T4290] gfs2_quota_init+0x74d/0xe80
[ 83.573357][ T4290] gfs2_make_fs_rw+0x41c/0x590
[ 83.578252][ T4290] gfs2_fill_super+0x17d1/0x1ea0
[ 83.583226][ T4290] get_tree_bdev+0x3e6/0x610
[ 83.587830][ T4290] gfs2_get_tree+0x4d/0x1e0
[ 83.592341][ T4290] vfs_get_tree+0x88/0x270
[ 83.596762][ T4290] do_new_mount+0x247/0xa40
[ 83.601277][ T4290] __se_sys_mount+0x2e3/0x3d0
[ 83.605988][ T4290] do_syscall_64+0x4c/0xa0
[ 83.610501][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.616403][ T4290]
[ 83.619143][ T4290] Freed by task 4357:
[ 83.623283][ T4290] kasan_set_track+0x4b/0x70
[ 83.628082][ T4290] kasan_set_free_info+0x1f/0x40
[ 83.633022][ T4290] ____kasan_slab_free+0xd5/0x110
[ 83.638046][ T4290] slab_free_freelist_hook+0xec/0x170
[ 83.643640][ T4290] kmem_cache_free+0x8f/0x210
[ 83.648318][ T4290] rcu_core+0x96e/0x1650
[ 83.652557][ T4290] handle_softirqs+0x336/0x830
[ 83.657333][ T4290] do_softirq+0x142/0x210
[ 83.661845][ T4290] __local_bh_enable_ip+0x180/0x1c0
[ 83.667164][ T4290] update_defense_level+0x8b0/0xdc0
[ 83.672371][ T4290] defense_work_handler+0x29/0xd0
[ 83.677402][ T4290] process_one_work+0x867/0xff0
[ 83.682248][ T4290] worker_thread+0xad7/0x12a0
[ 83.686954][ T4290] kthread+0x42e/0x520
[ 83.691135][ T4290] ret_from_fork+0x1f/0x30
[ 83.695582][ T4290]
[ 83.697922][ T4290] Last potentially related work creation:
[ 83.703925][ T4290] kasan_save_stack+0x35/0x60
[ 83.708640][ T4290] kasan_record_aux_stack+0xb8/0x100
[ 83.713933][ T4290] call_rcu+0x189/0x900
[ 83.718277][ T4290] gfs2_quota_cleanup+0x414/0x670
[ 83.723357][ T4290] gfs2_make_fs_ro+0x440/0x620
[ 83.728139][ T4290] gfs2_withdraw+0x660/0x14e0
[ 83.733056][ T4290] gfs2_inode_refresh+0xb2d/0x11a0
[ 83.738305][ T4290] inode_go_lock+0x127/0x450
[ 83.742959][ T4290] do_promote+0x75b/0xb20
[ 83.747303][ T4290] finish_xmote+0x4c2/0xaf0
[ 83.751832][ T4290] do_xmote+0x752/0x10a0
[ 83.756246][ T4290] gfs2_glock_nq+0xc6b/0x1510
[ 83.760937][ T4290] do_sync+0x49c/0xba0
[ 83.765147][ T4290] gfs2_quota_sync+0x355/0x780
[ 83.769945][ T4290] gfs2_sync_fs+0x48/0xb0
[ 83.774366][ T4290] sync_filesystem+0xe6/0x220
[ 83.779151][ T4290] generic_shutdown_super+0x6b/0x300
[ 83.784517][ T4290] kill_block_super+0x7c/0xe0
[ 83.789340][ T4290] deactivate_locked_super+0x93/0xf0
[ 83.794633][ T4290] cleanup_mnt+0x426/0x4d0
[ 83.799125][ T4290] task_work_run+0x125/0x1a0
[ 83.803734][ T4290] exit_to_user_mode_loop+0x10f/0x130
[ 83.809117][ T4290] exit_to_user_mode_prepare+0xee/0x180
[ 83.814665][ T4290] syscall_exit_to_user_mode+0x16/0x40
[ 83.820127][ T4290] do_syscall_64+0x58/0xa0
[ 83.824537][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.830508][ T4290]
[ 83.832950][ T4290] The buggy address belongs to the object at ffff88805b4c5150
[ 83.832950][ T4290] which belongs to the cache gfs2_quotad of size 272
[ 83.847096][ T4290] The buggy address is located 144 bytes inside of
[ 83.847096][ T4290] 272-byte region [ffff88805b4c5150, ffff88805b4c5260)
[ 83.860399][ T4290] The buggy address belongs to the page:
[ 83.866153][ T4290] page:ffffea00016d3140 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b4c5
[ 83.876576][ T4290] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 83.884128][ T4290] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888146b1a500
[ 83.892807][ T4290] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 83.901563][ T4290] page dumped because: kasan: bad access detected
[ 83.908015][ T4290] page_owner tracks the page as allocated
[ 83.913736][ T4290] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4340, ts 81024735405, free_ts 73884328304
[ 83.932977][ T4290] get_page_from_freelist+0x24f6/0x2670
[ 83.938628][ T4290] __alloc_pages+0x1ee/0x480
[ 83.943305][ T4290] new_slab+0xc0/0x4b0
[ 83.947391][ T4290] ___slab_alloc+0x807/0xdd0
[ 83.952487][ T4290] kmem_cache_alloc+0xf0/0x280
[ 83.957725][ T4290] qd_alloc+0x50/0x260
[ 83.961987][ T4290] gfs2_quota_init+0x74d/0xe80
[ 83.966779][ T4290] gfs2_make_fs_rw+0x41c/0x590
[ 83.971729][ T4290] gfs2_fill_super+0x17d1/0x1ea0
[ 83.976793][ T4290] get_tree_bdev+0x3e6/0x610
[ 83.981444][ T4290] gfs2_get_tree+0x4d/0x1e0
[ 83.985947][ T4290] vfs_get_tree+0x88/0x270
[ 83.990366][ T4290] do_new_mount+0x247/0xa40
[ 83.994894][ T4290] __se_sys_mount+0x2e3/0x3d0
[ 83.999597][ T4290] do_syscall_64+0x4c/0xa0
[ 84.004033][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.009972][ T4290] page last free stack trace:
[ 84.014649][ T4290] free_unref_page_prepare+0x637/0x6c0
[ 84.020109][ T4290] free_unref_page+0x8f/0x2a0
[ 84.024787][ T4290] __vunmap+0x8e0/0xa80
[ 84.028954][ T4290] kcov_close+0x27/0x50
[ 84.033127][ T4290] __fput+0x212/0x8c0
[ 84.037226][ T4290] task_work_run+0x125/0x1a0
[ 84.041859][ T4290] do_exit+0x635/0x2110
[ 84.046007][ T4290] do_group_exit+0x12c/0x2f0
[ 84.050604][ T4290] get_signal+0x7eb/0x12e0
[ 84.055056][ T4290] arch_do_signal_or_restart+0xe6/0x12a0
[ 84.060804][ T4290] exit_to_user_mode_loop+0x9e/0x130
[ 84.066203][ T4290] exit_to_user_mode_prepare+0xee/0x180
[ 84.072039][ T4290] syscall_exit_to_user_mode+0x16/0x40
[ 84.077879][ T4290] do_syscall_64+0x58/0xa0
[ 84.082305][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.088317][ T4290]
[ 84.090638][ T4290] Memory state around the buggy address:
[ 84.096264][ T4290] ffff88805b4c5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.104357][ T4290] ffff88805b4c5100: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb
[ 84.112579][ T4290] >ffff88805b4c5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 84.120744][ T4290] ^
[ 84.128118][ T4290] ffff88805b4c5200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 84.136644][ T4290] ffff88805b4c5280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 84.144722][ T4290] ==================================================================
[ 84.153026][ T4290] Disabling lock debugging due to kernel taint
[ 84.161216][ T4290] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 84.168463][ T4290] CPU: 1 PID: 4290 Comm: syz-executor Tainted: G B syzkaller #0
[ 84.177766][ T4290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 84.188079][ T4290] Call Trace:
[ 84.191365][ T4290]
[ 84.194296][ T4290] dump_stack_lvl+0x188/0x250
[ 84.199110][ T4290] ? show_regs_print_info+0x20/0x20
[ 84.204399][ T4290] ? load_image+0x410/0x410
[ 84.208916][ T4290] panic+0x2f8/0x850
[ 84.212903][ T4290] ? bpf_jit_dump+0xd0/0xd0
[ 84.217425][ T4290] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 84.223436][ T4290] ? _raw_spin_unlock+0x40/0x40
[ 84.228388][ T4290] ? qd_unlock+0x30/0x2d0
[ 84.232723][ T4290] check_panic_on_warn+0x80/0xa0
[ 84.237666][ T4290] ? qd_unlock+0x30/0x2d0
[ 84.242000][ T4290] end_report+0x6d/0xf0
[ 84.246161][ T4290] kasan_report+0x102/0x130
[ 84.250681][ T4290] ? qd_unlock+0x30/0x2d0
[ 84.255045][ T4290] kasan_check_range+0x235/0x290
[ 84.259986][ T4290] qd_unlock+0x30/0x2d0
[ 84.264158][ T4290] gfs2_quota_sync+0x63b/0x780
[ 84.268968][ T4290] gfs2_sync_fs+0x48/0xb0
[ 84.273308][ T4290] sync_filesystem+0xe6/0x220
[ 84.277999][ T4290] generic_shutdown_super+0x6b/0x300
[ 84.283307][ T4290] kill_block_super+0x7c/0xe0
[ 84.287979][ T4290] deactivate_locked_super+0x93/0xf0
[ 84.293438][ T4290] cleanup_mnt+0x426/0x4d0
[ 84.298303][ T4290] task_work_run+0x125/0x1a0
[ 84.303220][ T4290] exit_to_user_mode_loop+0x10f/0x130
[ 84.308726][ T4290] exit_to_user_mode_prepare+0xee/0x180
[ 84.314283][ T4290] syscall_exit_to_user_mode+0x16/0x40
[ 84.319893][ T4290] do_syscall_64+0x58/0xa0
[ 84.324319][ T4290] ? clear_bhb_loop+0x30/0x80
[ 84.329018][ T4290] ? clear_bhb_loop+0x30/0x80
[ 84.333700][ T4290] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 84.339610][ T4290] RIP: 0033:0x7fc2ad0f9097
[ 84.344095][ T4290] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 84.364113][ T4290] RSP: 002b:00007ffe7b1481b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 84.372560][ T4290] RAX: 0000000000000000 RBX: 00007fc2ad18d2ca RCX: 00007fc2ad0f9097
[ 84.380592][ T4290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7b148270
[ 84.388595][ T4290] RBP: 00007ffe7b148270 R08: 00007ffe7b149270 R09: 00000000ffffffff
[ 84.396583][ T4290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b149300
[ 84.404564][ T4290] R13: 00007fc2ad18d2ca R14: 000000000001400b R15: 00007ffe7b149340
[ 84.412551][ T4290]
[ 84.415686][ T4290] Kernel Offset: disabled
[ 84.420029][ T4290] Rebooting in 86400 seconds..