[ 76.612111][ T1130] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.52' (ECDSA) to the list of known hosts.
2023/01/04 08:04:06 ignoring optional flag "sandboxArg"="0"
2023/01/04 08:04:06 parsed 1 programs
2023/01/04 08:04:06 executed programs: 0
[ 81.091123][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.100063][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.107655][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 81.116256][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 81.124006][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 81.132665][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 81.236526][ T5542] chnl_net:caif_netlink_parms(): no params data found
[ 81.280419][ T5542] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.287894][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.296444][ T5542] device bridge_slave_0 entered promiscuous mode
[ 81.305368][ T5542] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.313190][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.321095][ T5542] device bridge_slave_1 entered promiscuous mode
[ 81.341397][ T5542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 81.352629][ T5542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 81.376957][ T5542] team0: Port device team_slave_0 added
[ 81.386389][ T5542] team0: Port device team_slave_1 added
[ 81.404799][ T5542] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 81.411830][ T5542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.437864][ T5542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 81.450202][ T5542] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 81.457169][ T5542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 81.484358][ T5542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 81.512539][ T5542] device hsr_slave_0 entered promiscuous mode
[ 81.519988][ T5542] device hsr_slave_1 entered promiscuous mode
[ 82.218560][ T5542] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.231469][ T5542] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.243961][ T5542] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.254630][ T5542] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.353362][ T5542] 8021q: adding VLAN 0 to HW filter on device bond0
[ 82.371466][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 82.380695][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 82.393066][ T5542] 8021q: adding VLAN 0 to HW filter on device team0
[ 82.405959][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 82.417256][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 82.426179][ T14] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.433357][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.453283][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 82.462167][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 82.472992][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 82.481778][ T897] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.489080][ T897] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.499608][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 82.508674][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 82.535770][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 82.546217][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 82.556386][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 82.566483][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 82.575689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 82.584954][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 82.597177][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 82.609716][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 82.820492][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 82.828201][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 82.843288][ T5542] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 82.865816][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 82.875891][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 82.898231][ T5542] device veth0_vlan entered promiscuous mode
[ 82.906374][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 82.915637][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 82.929057][ T5542] device veth1_vlan entered promiscuous mode
[ 82.937748][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 82.947146][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 82.955755][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 82.984693][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 82.993729][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 83.003595][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 83.015666][ T5542] device veth0_macvtap entered promiscuous mode
[ 83.031671][ T5542] device veth1_macvtap entered promiscuous mode
[ 83.051829][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.060028][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 83.068454][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 83.077303][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 83.086468][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 83.099031][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.108481][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 83.118106][ T5094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 83.129621][ T5542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.138433][ T5542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.149596][ T5542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.158356][ T5542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.168238][ T48] Bluetooth: hci0: command 0x0409 tx timeout
[ 83.218291][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.237104][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.248161][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.249628][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 83.257626][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.280852][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 83.687143][ T5596] loop0: detected capacity change from 0 to 32768
[ 83.707158][ T5596] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 83.717395][ T5596] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 83.738196][ T5596] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 83.749055][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 83.757923][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 83.817465][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 59ms
[ 83.828868][ T22] gfs2: fsid=syz:syz.0: jid=0: Done
[ 83.835572][ T5596] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 84.046520][ T5596] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 84.077367][ T5542] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 84.077367][ T5542] inode = 11 2340
[ 84.077367][ T5542] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 460
[ 84.099360][ T5542] gfs2: fsid=syz:syz.0: G: s:EX n:2/924 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[ 84.108637][ T5542] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5542 [syz-executor.0] gfs2_quota_sync+0x3da/0x8b0
[ 84.123538][ T5542] gfs2: fsid=syz:syz.0: I: n:11/2340 t:8 f:0x00 d:0x00000201 s:176 p:0
[ 84.132775][ T5542] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 84.146851][ T5542] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1475
[ 84.161743][ T5542] CPU: 1 PID: 5542 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 84.171016][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 84.181456][ T5542] Call Trace:
[ 84.184774][ T5542]
[ 84.187914][ T5542] dump_stack_lvl+0x1b1/0x290
[ 84.192643][ T5542] ? nf_tcp_handle_invalid+0x630/0x630
[ 84.198157][ T5542] ? panic+0x710/0x710
[ 84.202262][ T5542] ? do_raw_spin_unlock+0x134/0x8a0
[ 84.207517][ T5542] gfs2_assert_warn_i+0x19a/0x2e0
[ 84.212588][ T5542] gfs2_quota_cleanup+0x4c6/0x6b0
[ 84.217674][ T5542] gfs2_make_fs_ro+0x517/0x610
[ 84.222754][ T5542] ? __might_sleep+0xc0/0xc0
[ 84.227395][ T5542] ? gfs2_dinode_out+0xad0/0xad0
[ 84.232396][ T5542] ? gfs2_glock_nq+0xdaa/0x1700
[ 84.237580][ T5542] ? gfs2_instantiate+0x207/0x220
[ 84.242647][ T5542] ? gfs2_glock_wait+0x213/0x2a0
[ 84.247723][ T5542] gfs2_withdraw+0x609/0x1540
[ 84.252542][ T5542] ? gfs2_lm+0x220/0x220
[ 84.256905][ T5542] ? make_kgid+0x1fe/0x710
[ 84.261367][ T5542] ? gfs2_withdraw+0x5cc/0x1540
[ 84.266291][ T5542] ? gfs2_consist_inode_i+0xf3/0x110
[ 84.271616][ T5542] gfs2_inode_refresh+0xb2d/0xf60
[ 84.276662][ T5542] ? gfs2_inode_metasync+0xf0/0xf0
[ 84.281807][ T5542] ? _raw_spin_unlock+0x24/0x40
[ 84.286839][ T5542] ? gfs2_glock_nq+0xdaa/0x1700
[ 84.292044][ T5542] ? do_raw_spin_unlock+0x134/0x8a0
[ 84.297261][ T5542] gfs2_instantiate+0x15e/0x220
[ 84.302116][ T5542] gfs2_glock_wait+0x1d9/0x2a0
[ 84.306919][ T5542] do_sync+0x485/0xc80
[ 84.310993][ T5542] ? gfs2_quota_sync+0x3da/0x8b0
[ 84.315939][ T5542] ? slot_put+0x1f0/0x1f0
[ 84.320273][ T5542] ? do_raw_spin_lock+0x147/0x3a0
[ 84.325298][ T5542] ? __lock_acquire+0x1f60/0x1f60
[ 84.330324][ T5542] ? gfs2_quota_sync+0x3da/0x8b0
[ 84.336071][ T5542] ? do_raw_spin_unlock+0x134/0x8a0
[ 84.341498][ T5542] ? qd_check_sync+0xba/0x3f0
[ 84.346178][ T5542] gfs2_quota_sync+0x3da/0x8b0
[ 84.351048][ T5542] gfs2_sync_fs+0x49/0xb0
[ 84.355380][ T5542] sync_filesystem+0xe8/0x220
[ 84.360063][ T5542] generic_shutdown_super+0x6b/0x310
[ 84.365355][ T5542] kill_block_super+0x79/0xd0
[ 84.370027][ T5542] deactivate_locked_super+0xa7/0xf0
[ 84.375409][ T5542] cleanup_mnt+0x494/0x520
[ 84.379824][ T5542] ? lockdep_hardirqs_on+0x8d/0x130
[ 84.385114][ T5542] task_work_run+0x243/0x300
[ 84.389794][ T5542] ? task_work_cancel+0x290/0x290
[ 84.394825][ T5542] ? exit_to_user_mode_loop+0x42/0x150
[ 84.400292][ T5542] exit_to_user_mode_loop+0x124/0x150
[ 84.405877][ T5542] exit_to_user_mode_prepare+0xb2/0x140
[ 84.411603][ T5542] syscall_exit_to_user_mode+0x26/0x60
[ 84.417492][ T5542] do_syscall_64+0x49/0xb0
[ 84.422002][ T5542] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 84.427898][ T5542] RIP: 0033:0x7f594a08d517
[ 84.432668][ T5542] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 84.453485][ T5542] RSP: 002b:00007ffceddd2d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 84.462316][ T5542] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f594a08d517
[ 84.470462][ T5542] RDX: 00007ffceddd2e69 RSI: 000000000000000a RDI: 00007ffceddd2e60
[ 84.478514][ T5542] RBP: 00007ffceddd2e60 R08: 00000000ffffffff R09: 00007ffceddd2c30
[ 84.486961][ T5542] R10: 00005555568038b3 R11: 0000000000000246 R12: 00007f594a0e6b24
[ 84.495114][ T5542] R13: 00007ffceddd3f20 R14: 0000555556803810 R15: 00007ffceddd3f60
[ 84.503096][ T5542]
[ 84.534063][ T5542] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 84.544859][ T5542] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 84.554931][ T5542] gfs2: fsid=syz:syz.0: File system withdrawn
[ 84.564545][ T5542] CPU: 1 PID: 5542 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 84.573971][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 84.584424][ T5542] Call Trace:
[ 84.587726][ T5542]
[ 84.590662][ T5542] dump_stack_lvl+0x1b1/0x290
[ 84.595438][ T5542] ? nf_tcp_handle_invalid+0x630/0x630
[ 84.600903][ T5542] ? panic+0x710/0x710
[ 84.604978][ T5542] ? kobject_uevent_env+0x46b/0x8e0
[ 84.610189][ T5542] gfs2_withdraw+0xf33/0x1540
[ 84.614921][ T5542] ? gfs2_lm+0x220/0x220
[ 84.619207][ T5542] ? make_kgid+0x1fe/0x710
[ 84.623825][ T5542] ? gfs2_consist_inode_i+0xf3/0x110
[ 84.629130][ T5542] gfs2_inode_refresh+0xb2d/0xf60
[ 84.634724][ T5542] ? gfs2_inode_metasync+0xf0/0xf0
[ 84.639967][ T5542] ? _raw_spin_unlock+0x24/0x40
[ 84.645319][ T5542] ? gfs2_glock_nq+0xdaa/0x1700
[ 84.650264][ T5542] ? do_raw_spin_unlock+0x134/0x8a0
[ 84.655486][ T5542] gfs2_instantiate+0x15e/0x220
[ 84.660431][ T5542] gfs2_glock_wait+0x1d9/0x2a0
[ 84.665196][ T5542] do_sync+0x485/0xc80
[ 84.669406][ T5542] ? gfs2_quota_sync+0x3da/0x8b0
[ 84.674457][ T5542] ? slot_put+0x1f0/0x1f0
[ 84.678860][ T5542] ? do_raw_spin_lock+0x147/0x3a0
[ 84.684080][ T5542] ? __lock_acquire+0x1f60/0x1f60
[ 84.689350][ T5542] ? gfs2_quota_sync+0x3da/0x8b0
[ 84.694641][ T5542] ? do_raw_spin_unlock+0x134/0x8a0
[ 84.699866][ T5542] ? qd_check_sync+0xba/0x3f0
[ 84.704555][ T5542] gfs2_quota_sync+0x3da/0x8b0
[ 84.709482][ T5542] gfs2_sync_fs+0x49/0xb0
[ 84.713825][ T5542] sync_filesystem+0xe8/0x220
[ 84.718600][ T5542] generic_shutdown_super+0x6b/0x310
[ 84.723900][ T5542] kill_block_super+0x79/0xd0
[ 84.728575][ T5542] deactivate_locked_super+0xa7/0xf0
[ 84.733890][ T5542] cleanup_mnt+0x494/0x520
[ 84.738343][ T5542] ? lockdep_hardirqs_on+0x8d/0x130
[ 84.743561][ T5542] task_work_run+0x243/0x300
[ 84.748175][ T5542] ? task_work_cancel+0x290/0x290
[ 84.753253][ T5542] ? exit_to_user_mode_loop+0x42/0x150
[ 84.758720][ T5542] exit_to_user_mode_loop+0x124/0x150
[ 84.764192][ T5542] exit_to_user_mode_prepare+0xb2/0x140
[ 84.769848][ T5542] syscall_exit_to_user_mode+0x26/0x60
[ 84.775342][ T5542] do_syscall_64+0x49/0xb0
[ 84.779870][ T5542] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 84.785785][ T5542] RIP: 0033:0x7f594a08d517
[ 84.790552][ T5542] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 84.810178][ T5542] RSP: 002b:00007ffceddd2d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 84.818716][ T5542] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f594a08d517
[ 84.826697][ T5542] RDX: 00007ffceddd2e69 RSI: 000000000000000a RDI: 00007ffceddd2e60
[ 84.834786][ T5542] RBP: 00007ffceddd2e60 R08: 00000000ffffffff R09: 00007ffceddd2c30
[ 84.842855][ T5542] R10: 00005555568038b3 R11: 0000000000000246 R12: 00007f594a0e6b24
[ 84.850923][ T5542] R13: 00007ffceddd3f20 R14: 0000555556803810 R15: 00007ffceddd3f60
[ 84.859174][ T5542]
[ 84.871596][ T5542] ==================================================================
[ 84.880143][ T5542] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 84.888056][ T5542] Read of size 8 at addr ffff888072eb6090 by task syz-executor.0/5542
[ 84.896221][ T5542]
[ 84.898628][ T5542] CPU: 0 PID: 5542 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 84.907820][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 84.917865][ T5542] Call Trace:
[ 84.921235][ T5542]
[ 84.924222][ T5542] dump_stack_lvl+0x1b1/0x290
[ 84.928987][ T5542] ? nf_tcp_handle_invalid+0x630/0x630
[ 84.934472][ T5542] ? __wake_up_klogd+0xcd/0x100
[ 84.939358][ T5542] ? panic+0x710/0x710
[ 84.943433][ T5542] ? _printk+0xc0/0x100
[ 84.947870][ T5542] ? _raw_spin_lock_irqsave+0x8e/0x100
[ 84.953345][ T5542] print_address_description+0x74/0x340
[ 84.959259][ T5542] print_report+0x107/0x1f0
[ 84.963786][ T5542] ? __virt_addr_valid+0x21b/0x2d0
[ 84.969000][ T5542] ? __phys_addr+0xb5/0x160
[ 84.973596][ T5542] ? qd_unlock+0x30/0x2d0
[ 84.978171][ T5542] kasan_report+0xcd/0x100
[ 84.982620][ T5542] ? qd_unlock+0x30/0x2d0
[ 84.987045][ T5542] kasan_check_range+0x2a7/0x2e0
[ 84.992090][ T5542] qd_unlock+0x30/0x2d0
[ 84.996271][ T5542] gfs2_quota_sync+0x768/0x8b0
[ 85.001042][ T5542] gfs2_sync_fs+0x49/0xb0
[ 85.005452][ T5542] sync_filesystem+0xe8/0x220
[ 85.010127][ T5542] generic_shutdown_super+0x6b/0x310
[ 85.015411][ T5542] kill_block_super+0x79/0xd0
[ 85.020076][ T5542] deactivate_locked_super+0xa7/0xf0
[ 85.025362][ T5542] cleanup_mnt+0x494/0x520
[ 85.029785][ T5542] ? lockdep_hardirqs_on+0x8d/0x130
[ 85.035240][ T5542] task_work_run+0x243/0x300
[ 85.040001][ T5542] ? task_work_cancel+0x290/0x290
[ 85.045201][ T5542] ? exit_to_user_mode_loop+0x42/0x150
[ 85.050752][ T5542] exit_to_user_mode_loop+0x124/0x150
[ 85.056131][ T5542] exit_to_user_mode_prepare+0xb2/0x140
[ 85.061674][ T5542] syscall_exit_to_user_mode+0x26/0x60
[ 85.067228][ T5542] do_syscall_64+0x49/0xb0
[ 85.071667][ T5542] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 85.077709][ T5542] RIP: 0033:0x7f594a08d517
[ 85.082337][ T5542] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 85.102033][ T5542] RSP: 002b:00007ffceddd2d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 85.110439][ T5542] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f594a08d517
[ 85.118426][ T5542] RDX: 00007ffceddd2e69 RSI: 000000000000000a RDI: 00007ffceddd2e60
[ 85.126838][ T5542] RBP: 00007ffceddd2e60 R08: 00000000ffffffff R09: 00007ffceddd2c30
[ 85.134833][ T5542] R10: 00005555568038b3 R11: 0000000000000246 R12: 00007f594a0e6b24
[ 85.142823][ T5542] R13: 00007ffceddd3f20 R14: 0000555556803810 R15: 00007ffceddd3f60
[ 85.150809][ T5542]
[ 85.153825][ T5542]
[ 85.156185][ T5542] Allocated by task 5596:
[ 85.160589][ T5542] kasan_set_track+0x3d/0x60
[ 85.165256][ T5542] __kasan_slab_alloc+0x65/0x70
[ 85.170215][ T5542] kmem_cache_alloc+0x1b3/0x350
[ 85.175154][ T5542] qd_alloc+0x51/0x250
[ 85.179216][ T5542] gfs2_quota_init+0x7c4/0x10e0
[ 85.184350][ T5542] gfs2_make_fs_rw+0x48e/0x590
[ 85.189318][ T5542] gfs2_fill_super+0x2357/0x2700
[ 85.194523][ T5542] get_tree_bdev+0x400/0x620
[ 85.199110][ T5542] gfs2_get_tree+0x50/0x210
[ 85.203694][ T5542] vfs_get_tree+0x88/0x270
[ 85.208095][ T5542] do_new_mount+0x289/0xad0
[ 85.212591][ T5542] __se_sys_mount+0x2d3/0x3c0
[ 85.217271][ T5542] do_syscall_64+0x3d/0xb0
[ 85.221677][ T5542] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 85.227571][ T5542]
[ 85.229879][ T5542] Freed by task 21:
[ 85.234205][ T5542] kasan_set_track+0x3d/0x60
[ 85.239694][ T5542] kasan_save_free_info+0x27/0x40
[ 85.244819][ T5542] ____kasan_slab_free+0xd6/0x120
[ 85.249852][ T5542] slab_free_freelist_hook+0x12e/0x1a0
[ 85.255454][ T5542] kmem_cache_free+0x94/0x1d0
[ 85.260251][ T5542] rcu_core+0x9c1/0x1690
[ 85.264490][ T5542] __do_softirq+0x277/0x738
[ 85.268998][ T5542]
[ 85.271307][ T5542] Last potentially related work creation:
[ 85.277445][ T5542] kasan_save_stack+0x2b/0x50
[ 85.282226][ T5542] __kasan_record_aux_stack+0xb0/0xc0
[ 85.287707][ T5542] call_rcu+0x163/0xa70
[ 85.291890][ T5542] gfs2_quota_cleanup+0x457/0x6b0
[ 85.297205][ T5542] gfs2_make_fs_ro+0x517/0x610
[ 85.302068][ T5542] gfs2_withdraw+0x609/0x1540
[ 85.306756][ T5542] gfs2_inode_refresh+0xb2d/0xf60
[ 85.311787][ T5542] gfs2_instantiate+0x15e/0x220
[ 85.316661][ T5542] gfs2_glock_wait+0x1d9/0x2a0
[ 85.321598][ T5542] do_sync+0x485/0xc80
[ 85.325857][ T5542] gfs2_quota_sync+0x3da/0x8b0
[ 85.330717][ T5542] gfs2_sync_fs+0x49/0xb0
[ 85.335240][ T5542] sync_filesystem+0xe8/0x220
[ 85.340143][ T5542] generic_shutdown_super+0x6b/0x310
[ 85.345531][ T5542] kill_block_super+0x79/0xd0
[ 85.350560][ T5542] deactivate_locked_super+0xa7/0xf0
[ 85.356216][ T5542] cleanup_mnt+0x494/0x520
[ 85.360629][ T5542] task_work_run+0x243/0x300
[ 85.365398][ T5542] exit_to_user_mode_loop+0x124/0x150
[ 85.371223][ T5542] exit_to_user_mode_prepare+0xb2/0x140
[ 85.376978][ T5542] syscall_exit_to_user_mode+0x26/0x60
[ 85.382797][ T5542] do_syscall_64+0x49/0xb0
[ 85.387245][ T5542] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 85.393137][ T5542]
[ 85.395455][ T5542] The buggy address belongs to the object at ffff888072eb6000
[ 85.395455][ T5542] which belongs to the cache gfs2_quotad of size 272
[ 85.409585][ T5542] The buggy address is located 144 bytes inside of
[ 85.409585][ T5542] 272-byte region [ffff888072eb6000, ffff888072eb6110)
[ 85.422970][ T5542]
[ 85.425303][ T5542] The buggy address belongs to the physical page:
[ 85.431720][ T5542] page:ffffea0001cbad80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72eb6
[ 85.441879][ T5542] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 85.449461][ T5542] raw: 00fff00000000200 ffff888146703b40 dead000000000122 0000000000000000
[ 85.458128][ T5542] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 85.466717][ T5542] page dumped because: kasan: bad access detected
[ 85.473144][ T5542] page_owner tracks the page as allocated
[ 85.478870][ T5542] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5596, tgid 5595 (syz-executor.0), ts 83979809029, free_ts 14216827191
[ 85.500502][ T5542] get_page_from_freelist+0x742/0x7c0
[ 85.506051][ T5542] __alloc_pages+0x259/0x560
[ 85.510633][ T5542] alloc_slab_page+0xbd/0x190
[ 85.515563][ T5542] allocate_slab+0x5e/0x3c0
[ 85.520086][ T5542] ___slab_alloc+0x782/0xe20
[ 85.524667][ T5542] kmem_cache_alloc+0x268/0x350
[ 85.529592][ T5542] qd_alloc+0x51/0x250
[ 85.533692][ T5542] gfs2_quota_init+0x7c4/0x10e0
[ 85.538574][ T5542] gfs2_make_fs_rw+0x48e/0x590
[ 85.543365][ T5542] gfs2_fill_super+0x2357/0x2700
[ 85.548401][ T5542] get_tree_bdev+0x400/0x620
[ 85.552991][ T5542] gfs2_get_tree+0x50/0x210
[ 85.557667][ T5542] vfs_get_tree+0x88/0x270
[ 85.562074][ T5542] do_new_mount+0x289/0xad0
[ 85.566566][ T5542] __se_sys_mount+0x2d3/0x3c0
[ 85.571232][ T5542] do_syscall_64+0x3d/0xb0
[ 85.575665][ T5542] page last free stack trace:
[ 85.580330][ T5542] free_pcp_prepare+0x751/0x780
[ 85.585252][ T5542] free_unref_page+0x19/0x4c0
[ 85.589945][ T5542] free_contig_range+0xa3/0x160
[ 85.594803][ T5542] destroy_args+0xfe/0x940
[ 85.599229][ T5542] debug_vm_pgtable+0x43d/0x4a0
[ 85.604071][ T5542] do_one_initcall+0x1d1/0x410
[ 85.608926][ T5542] do_initcall_level+0x168/0x220
[ 85.614030][ T5542] do_initcalls+0x43/0x90
[ 85.618524][ T5542] kernel_init_freeable+0x428/0x5e0
[ 85.623803][ T5542] kernel_init+0x19/0x2b0
[ 85.628299][ T5542] ret_from_fork+0x1f/0x30
[ 85.632707][ T5542]
[ 85.635036][ T5542] Memory state around the buggy address:
[ 85.640690][ T5542] ffff888072eb5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 85.649045][ T5542] ffff888072eb6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.657122][ T5542] >ffff888072eb6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.665290][ T5542] ^
[ 85.669876][ T5542] ffff888072eb6100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 85.677927][ T5542] ffff888072eb6180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 85.686061][ T5542] ==================================================================
[ 85.694832][ T48] Bluetooth: hci0: command 0x041b tx timeout
[ 85.719342][ T5542] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.726588][ T5542] CPU: 1 PID: 5542 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 85.735722][ T5542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 85.745887][ T5542] Call Trace:
[ 85.749293][ T5542]
[ 85.752251][ T5542] dump_stack_lvl+0x1b1/0x290
[ 85.756968][ T5542] ? nf_tcp_handle_invalid+0x630/0x630
[ 85.762571][ T5542] ? panic+0x710/0x710
[ 85.766865][ T5542] ? lock_release+0x81/0x820
[ 85.771503][ T5542] ? vscnprintf+0x59/0x80
[ 85.776048][ T5542] panic+0x2d6/0x710
[ 85.780058][ T5542] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 85.786247][ T5542] ? check_panic_on_warn+0x1d/0xa0
[ 85.791565][ T5542] ? memcpy_page_flushcache+0x100/0x100
[ 85.797161][ T5542] ? _raw_spin_unlock_irqrestore+0x110/0x120
[ 85.803211][ T5542] ? _raw_spin_unlock+0x40/0x40
[ 85.808361][ T5542] ? print_report+0x1b4/0x1f0
[ 85.813160][ T5542] check_panic_on_warn+0x80/0xa0
[ 85.818123][ T5542] ? qd_unlock+0x30/0x2d0
[ 85.822490][ T5542] end_report+0x47/0x90
[ 85.826672][ T5542] kasan_report+0xda/0x100
[ 85.831212][ T5542] ? qd_unlock+0x30/0x2d0
[ 85.835673][ T5542] kasan_check_range+0x2a7/0x2e0
[ 85.840923][ T5542] qd_unlock+0x30/0x2d0
[ 85.845425][ T5542] gfs2_quota_sync+0x768/0x8b0
[ 85.850671][ T5542] gfs2_sync_fs+0x49/0xb0
[ 85.855126][ T5542] sync_filesystem+0xe8/0x220
[ 85.859940][ T5542] generic_shutdown_super+0x6b/0x310
[ 85.865264][ T5542] kill_block_super+0x79/0xd0
[ 85.870170][ T5542] deactivate_locked_super+0xa7/0xf0
[ 85.875501][ T5542] cleanup_mnt+0x494/0x520
[ 85.880215][ T5542] ? lockdep_hardirqs_on+0x8d/0x130
[ 85.885535][ T5542] task_work_run+0x243/0x300
[ 85.890343][ T5542] ? task_work_cancel+0x290/0x290
[ 85.895409][ T5542] ? exit_to_user_mode_loop+0x42/0x150
[ 85.900992][ T5542] exit_to_user_mode_loop+0x124/0x150
[ 85.906406][ T5542] exit_to_user_mode_prepare+0xb2/0x140
[ 85.912077][ T5542] syscall_exit_to_user_mode+0x26/0x60
[ 85.917560][ T5542] do_syscall_64+0x49/0xb0
[ 85.922011][ T5542] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 85.927936][ T5542] RIP: 0033:0x7f594a08d517
[ 85.932373][ T5542] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 85.952186][ T5542] RSP: 002b:00007ffceddd2d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 85.960983][ T5542] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f594a08d517
[ 85.969173][ T5542] RDX: 00007ffceddd2e69 RSI: 000000000000000a RDI: 00007ffceddd2e60
[ 85.977345][ T5542] RBP: 00007ffceddd2e60 R08: 00000000ffffffff R09: 00007ffceddd2c30
[ 85.985478][ T5542] R10: 00005555568038b3 R11: 0000000000000246 R12: 00007f594a0e6b24
[ 85.993925][ T5542] R13: 00007ffceddd3f20 R14: 0000555556803810 R15: 00007ffceddd3f60
[ 86.002020][ T5542]
[ 86.005113][ T5542] Kernel Offset: disabled
[ 86.009521][ T5542] Rebooting in 86400 seconds..