Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts.
2026/10/05 22:01:23 parsed 1 programs
2026/10/05 22:01:23 serving rpc on tcp://44815
[ 66.014088][ T4198] cgroup: Unknown subsys name 'net'
[ 66.146369][ T4198] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 67.613870][ T4198] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 69.700266][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.708377][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.736753][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 69.753851][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.762901][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.771193][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 70.229668][ T4240] chnl_net:caif_netlink_parms(): no params data found
[ 70.294422][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.302309][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.311013][ T4240] device bridge_slave_0 entered promiscuous mode
[ 70.321108][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.328280][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.336802][ T4240] device bridge_slave_1 entered promiscuous mode
[ 70.362900][ T4240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 70.374602][ T4240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 70.406635][ T4240] team0: Port device team_slave_0 added
[ 70.416133][ T4240] team0: Port device team_slave_1 added
[ 70.440510][ T4240] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 70.447516][ T4240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.473729][ T4240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 70.487812][ T4240] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 70.495021][ T4240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 70.521257][ T4240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 70.560898][ T4240] device hsr_slave_0 entered promiscuous mode
[ 70.567875][ T4240] device hsr_slave_1 entered promiscuous mode
[ 70.704818][ T4240] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 70.718081][ T4240] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 70.728408][ T4240] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 70.738995][ T4240] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 70.768686][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.775975][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.784251][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.791387][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.855988][ T4240] 8021q: adding VLAN 0 to HW filter on device bond0
[ 70.875056][ T4240] 8021q: adding VLAN 0 to HW filter on device team0
[ 70.883668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 70.894920][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.903220][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.912266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 70.940528][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 70.949283][ T1235] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.956423][ T1235] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.965123][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 70.977432][ T1235] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.984555][ T1235] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.003652][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 71.013139][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 71.031016][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 71.039415][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 71.048934][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 71.060611][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 71.187018][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 71.194768][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 71.208802][ T4240] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 71.229248][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 71.239289][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 71.253759][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.260359][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.271827][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 71.284292][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 71.307415][ T4240] device veth0_vlan entered promiscuous mode
[ 71.322823][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 71.331014][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 71.343694][ T4240] device veth1_vlan entered promiscuous mode
[ 71.368940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 71.391705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 71.401033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 71.415522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 71.426971][ T4240] device veth0_macvtap entered promiscuous mode
[ 71.447149][ T4240] device veth1_macvtap entered promiscuous mode
[ 71.474307][ T4240] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 71.483168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 71.491886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 71.501657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 71.512499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 71.524486][ T4240] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 71.532305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 71.541960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 71.561084][ T4240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.570150][ T4240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.579052][ T4240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.588131][ T4240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/10/05 22:01:32 executed programs: 0
[ 73.293449][ T4288] chnl_net:caif_netlink_parms(): no params data found
[ 73.356150][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.363396][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.371673][ T4288] device bridge_slave_0 entered promiscuous mode
[ 73.380408][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.387564][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.395824][ T4288] device bridge_slave_1 entered promiscuous mode
[ 73.422367][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 73.434039][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 73.462830][ T4288] team0: Port device team_slave_0 added
[ 73.470878][ T4288] team0: Port device team_slave_1 added
[ 73.493885][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 73.500929][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.526991][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 73.540279][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 73.547269][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 73.573563][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 73.612444][ T4288] device hsr_slave_0 entered promiscuous mode
[ 73.619325][ T4288] device hsr_slave_1 entered promiscuous mode
[ 73.626028][ T4288] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 73.634099][ T4288] Cannot create hsr debugfs directory
[ 73.728486][ T4288] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 75.240137][ T4303] Bluetooth: hci0: command 0x0409 tx timeout
[ 77.136309][ T4288] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.196078][ T4288] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.266827][ T4288] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.320286][ T4303] Bluetooth: hci0: command 0x041b tx timeout
[ 77.389092][ T4288] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.416302][ T4288] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.425371][ T4288] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.435282][ T4288] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.528092][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.541131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 77.549000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 77.559034][ T4288] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.585479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 77.594536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 77.603411][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.610558][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.618541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 77.632525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 77.644713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.654246][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.661355][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.672439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 77.684606][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 77.709862][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 77.718710][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 77.728886][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.742539][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 77.752212][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 77.761035][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 77.769320][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 77.782089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 77.790899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 77.801930][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.819883][ T155] device hsr_slave_0 left promiscuous mode
[ 77.826849][ T155] device hsr_slave_1 left promiscuous mode
[ 77.834580][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 77.842693][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 77.852797][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 77.860540][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 77.868307][ T155] device bridge_slave_1 left promiscuous mode
[ 77.875821][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.893319][ T155] device bridge_slave_0 left promiscuous mode
[ 77.899842][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.923774][ T155] device veth1_macvtap left promiscuous mode
[ 77.930308][ T155] device veth0_macvtap left promiscuous mode
[ 77.936380][ T155] device veth1_vlan left promiscuous mode
[ 77.942381][ T155] device veth0_vlan left promiscuous mode
[ 78.113370][ T155] team0 (unregistering): Port device team_slave_1 removed
[ 78.127317][ T155] team0 (unregistering): Port device team_slave_0 removed
[ 78.142371][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 78.156820][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 78.217178][ T155] bond0 (unregistering): Released all slaves
[ 78.296477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 78.304141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 78.317279][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.335047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 78.344178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 78.372537][ T4288] device veth0_vlan entered promiscuous mode
[ 78.385476][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 78.394732][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 78.403827][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 78.411816][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 78.422333][ T4288] device veth1_vlan entered promiscuous mode
[ 78.442327][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 78.451142][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 78.459278][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 78.468218][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 78.478231][ T4288] device veth0_macvtap entered promiscuous mode
[ 78.488591][ T4288] device veth1_macvtap entered promiscuous mode
[ 78.506055][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.513992][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 78.522816][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 78.531729][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 78.540494][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 78.552471][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.562682][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 78.571754][ T1235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 78.582803][ T4288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.591936][ T4288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.601138][ T4288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.610439][ T4288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.667284][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.681466][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.699671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 78.714536][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.723198][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.732833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 79.106561][ T4316] loop0: detected capacity change from 0 to 32768
[ 79.224064][ T4316] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 79.247332][ T4316] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 79.281694][ T4316] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 79.301723][ T1324] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 79.308695][ T1324] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 79.355471][ T1324] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms
[ 79.376536][ T1324] gfs2: fsid=syz:syz.0: jid=0: Done
[ 79.382489][ T4316] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 79.400378][ T4303] Bluetooth: hci0: command 0x040f tx timeout
[ 79.518439][ T4316] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 79.548288][ T4288] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 79.548288][ T4288] inode = 11 2339
[ 79.548288][ T4288] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414
[ 79.569182][ T4288] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 79.590338][ T4288] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 79.620780][ T4288] CPU: 1 PID: 4288 Comm: syz-executor Not tainted syzkaller #0
[ 79.628378][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 79.638480][ T4288] Call Trace:
[ 79.641827][ T4288]
[ 79.644784][ T4288] dump_stack_lvl+0x188/0x250
[ 79.649508][ T4288] ? show_regs_print_info+0x20/0x20
[ 79.654739][ T4288] ? load_image+0x410/0x410
[ 79.659274][ T4288] ? do_raw_spin_unlock+0x11d/0x230
[ 79.664520][ T4288] gfs2_assert_warn_i+0x187/0x2c0
[ 79.669584][ T4288] gfs2_quota_cleanup+0x48c/0x670
[ 79.674649][ T4288] gfs2_make_fs_ro+0x440/0x620
[ 79.679477][ T4288] ? __might_sleep+0xf0/0xf0
[ 79.684122][ T4288] ? gfs2_dinode_out+0xb00/0xb00
[ 79.689101][ T4288] ? _raw_spin_unlock+0x24/0x40
[ 79.693986][ T4288] ? gfs2_glock_nq+0xcaa/0x1510
[ 79.698911][ T4288] gfs2_withdraw+0x660/0x14e0
[ 79.703634][ T4288] ? gfs2_meta_new+0x160/0x160
[ 79.708424][ T4288] ? gfs2_lm+0x240/0x240
[ 79.712703][ T4288] ? gfs2_freeze_lock+0x52/0xc0
[ 79.717591][ T4288] ? gfs2_consist_inode_i+0xc0/0xe0
[ 79.722819][ T4288] gfs2_inode_refresh+0xb2d/0x11a0
[ 79.727971][ T4288] ? gfs2_inode_metasync+0xf0/0xf0
[ 79.733140][ T4288] inode_go_lock+0x127/0x450
[ 79.737769][ T4288] do_promote+0x75b/0xb20
[ 79.742238][ T4288] finish_xmote+0x4c2/0xaf0
[ 79.746792][ T4288] do_xmote+0x752/0x10a0
[ 79.751096][ T4288] gfs2_glock_nq+0xc6b/0x1510
[ 79.755821][ T4288] do_sync+0x49c/0xba0
[ 79.759925][ T4288] ? slot_put+0x1e0/0x1e0
[ 79.764300][ T4288] ? do_sync+0x494/0xba0
[ 79.768572][ T4288] ? do_raw_spin_unlock+0x11d/0x230
[ 79.773820][ T4288] gfs2_quota_sync+0x355/0x780
[ 79.778632][ T4288] gfs2_sync_fs+0x48/0xb0
[ 79.783013][ T4288] sync_filesystem+0xe6/0x220
[ 79.787731][ T4288] generic_shutdown_super+0x6b/0x300
[ 79.793196][ T4288] kill_block_super+0x7c/0xe0
[ 79.797916][ T4288] deactivate_locked_super+0x93/0xf0
[ 79.803261][ T4288] cleanup_mnt+0x426/0x4d0
[ 79.807720][ T4288] task_work_run+0x125/0x1a0
[ 79.812343][ T4288] exit_to_user_mode_loop+0x10f/0x130
[ 79.817757][ T4288] exit_to_user_mode_prepare+0xee/0x180
[ 79.823330][ T4288] syscall_exit_to_user_mode+0x16/0x40
[ 79.828812][ T4288] do_syscall_64+0x58/0xa0
[ 79.833255][ T4288] ? clear_bhb_loop+0x30/0x80
[ 79.837977][ T4288] ? clear_bhb_loop+0x30/0x80
[ 79.842694][ T4288] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 79.848625][ T4288] RIP: 0033:0x7f336b6cd3d7
[ 79.853101][ T4288] Code: a2 c7 05 1c 53 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 79.872767][ T4288] RSP: 002b:00007fff9b22e2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.881219][ T4288] RAX: 0000000000000000 RBX: 00007f336b7624fb RCX: 00007f336b6cd3d7
[ 79.889269][ T4288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9b22e390
[ 79.897281][ T4288] RBP: 00007fff9b22e390 R08: 00007fff9b22f390 R09: 00000000ffffffff
[ 79.905294][ T4288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9b22f420
[ 79.913297][ T4288] R13: 00007f336b7624fb R14: 000000000001338e R15: 00007fff9b22f460
[ 79.921323][ T4288]
[ 80.259907][ T4288] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 80.269407][ T4288] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 80.293550][ T4288] gfs2: fsid=syz:syz.0: File system withdrawn
[ 80.312185][ T4288] CPU: 1 PID: 4288 Comm: syz-executor Not tainted syzkaller #0
[ 80.319787][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 80.329874][ T4288] Call Trace:
[ 80.333180][ T4288]
[ 80.336140][ T4288] dump_stack_lvl+0x188/0x250
[ 80.340853][ T4288] ? show_regs_print_info+0x20/0x20
[ 80.346086][ T4288] ? load_image+0x410/0x410
[ 80.350630][ T4288] ? lockref_put_or_lock+0x6e/0xb0
[ 80.355784][ T4288] gfs2_withdraw+0xb9a/0x14e0
[ 80.360498][ T4288] ? gfs2_meta_new+0x160/0x160
[ 80.365311][ T4288] ? gfs2_lm+0x240/0x240
[ 80.369596][ T4288] ? gfs2_consist_inode_i+0xc0/0xe0
[ 80.374968][ T4288] gfs2_inode_refresh+0xb2d/0x11a0
[ 80.380211][ T4288] ? gfs2_inode_metasync+0xf0/0xf0
[ 80.385370][ T4288] inode_go_lock+0x127/0x450
[ 80.390003][ T4288] do_promote+0x75b/0xb20
[ 80.394383][ T4288] finish_xmote+0x4c2/0xaf0
[ 80.398936][ T4288] do_xmote+0x752/0x10a0
[ 80.403250][ T4288] gfs2_glock_nq+0xc6b/0x1510
[ 80.407985][ T4288] do_sync+0x49c/0xba0
[ 80.412098][ T4288] ? slot_put+0x1e0/0x1e0
[ 80.416476][ T4288] ? do_sync+0x494/0xba0
[ 80.420854][ T4288] ? do_raw_spin_unlock+0x11d/0x230
[ 80.426095][ T4288] gfs2_quota_sync+0x355/0x780
[ 80.430903][ T4288] gfs2_sync_fs+0x48/0xb0
[ 80.435347][ T4288] sync_filesystem+0xe6/0x220
[ 80.440060][ T4288] generic_shutdown_super+0x6b/0x300
[ 80.445377][ T4288] kill_block_super+0x7c/0xe0
[ 80.450083][ T4288] deactivate_locked_super+0x93/0xf0
[ 80.455402][ T4288] cleanup_mnt+0x426/0x4d0
[ 80.459855][ T4288] task_work_run+0x125/0x1a0
[ 80.464483][ T4288] exit_to_user_mode_loop+0x10f/0x130
[ 80.469877][ T4288] exit_to_user_mode_prepare+0xee/0x180
[ 80.475453][ T4288] syscall_exit_to_user_mode+0x16/0x40
[ 80.480942][ T4288] do_syscall_64+0x58/0xa0
[ 80.485413][ T4288] ? clear_bhb_loop+0x30/0x80
[ 80.490124][ T4288] ? clear_bhb_loop+0x30/0x80
[ 80.494850][ T4288] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 80.500783][ T4288] RIP: 0033:0x7f336b6cd3d7
[ 80.505226][ T4288] Code: a2 c7 05 1c 53 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 80.524894][ T4288] RSP: 002b:00007fff9b22e2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 80.533350][ T4288] RAX: 0000000000000000 RBX: 00007f336b7624fb RCX: 00007f336b6cd3d7
[ 80.541382][ T4288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9b22e390
[ 80.549385][ T4288] RBP: 00007fff9b22e390 R08: 00007fff9b22f390 R09: 00000000ffffffff
[ 80.557459][ T4288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9b22f420
[ 80.565464][ T4288] R13: 00007f336b7624fb R14: 000000000001338e R15: 00007fff9b22f460
[ 80.573490][ T4288]
[ 80.632484][ T4288] ==================================================================
[ 80.640827][ T4288] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 80.647543][ T4288] Read of size 8 at addr ffff8880684dc090 by task syz-executor/4288
[ 80.655547][ T4288]
[ 80.657893][ T4288] CPU: 1 PID: 4288 Comm: syz-executor Not tainted syzkaller #0
[ 80.665463][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 80.675549][ T4288] Call Trace:
[ 80.678854][ T4288]
[ 80.681809][ T4288] dump_stack_lvl+0x188/0x250
[ 80.686525][ T4288] ? show_regs_print_info+0x20/0x20
[ 80.691762][ T4288] ? load_image+0x410/0x410
[ 80.696307][ T4288] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 80.701815][ T4288] print_address_description+0x60/0x2d0
[ 80.707488][ T4288] ? qd_unlock+0x30/0x2d0
[ 80.711891][ T4288] kasan_report+0xdf/0x130
[ 80.716440][ T4288] ? qd_unlock+0x30/0x2d0
[ 80.720810][ T4288] kasan_check_range+0x235/0x290
[ 80.725785][ T4288] qd_unlock+0x30/0x2d0
[ 80.729980][ T4288] gfs2_quota_sync+0x63b/0x780
[ 80.734819][ T4288] gfs2_sync_fs+0x48/0xb0
[ 80.739204][ T4288] sync_filesystem+0xe6/0x220
[ 80.743944][ T4288] generic_shutdown_super+0x6b/0x300
[ 80.749270][ T4288] kill_block_super+0x7c/0xe0
[ 80.753991][ T4288] deactivate_locked_super+0x93/0xf0
[ 80.759312][ T4288] cleanup_mnt+0x426/0x4d0
[ 80.763767][ T4288] task_work_run+0x125/0x1a0
[ 80.768411][ T4288] exit_to_user_mode_loop+0x10f/0x130
[ 80.773819][ T4288] exit_to_user_mode_prepare+0xee/0x180
[ 80.779397][ T4288] syscall_exit_to_user_mode+0x16/0x40
[ 80.784889][ T4288] do_syscall_64+0x58/0xa0
[ 80.789362][ T4288] ? clear_bhb_loop+0x30/0x80
[ 80.794086][ T4288] ? clear_bhb_loop+0x30/0x80
[ 80.798812][ T4288] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 80.804743][ T4288] RIP: 0033:0x7f336b6cd3d7
[ 80.809183][ T4288] Code: a2 c7 05 1c 53 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 80.828833][ T4288] RSP: 002b:00007fff9b22e2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 80.837281][ T4288] RAX: 0000000000000000 RBX: 00007f336b7624fb RCX: 00007f336b6cd3d7
[ 80.845278][ T4288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9b22e390
[ 80.853280][ T4288] RBP: 00007fff9b22e390 R08: 00007fff9b22f390 R09: 00000000ffffffff
[ 80.861286][ T4288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9b22f420
[ 80.869290][ T4288] R13: 00007f336b7624fb R14: 000000000001338e R15: 00007fff9b22f460
[ 80.877439][ T4288]
[ 80.880501][ T4288]
[ 80.882851][ T4288] Allocated by task 4316:
[ 80.887220][ T4288] __kasan_slab_alloc+0x92/0xc0
[ 80.892107][ T4288] slab_post_alloc_hook+0x4c/0x380
[ 80.897248][ T4288] kmem_cache_alloc+0x15d/0x280
[ 80.902144][ T4288] qd_alloc+0x50/0x260
[ 80.906248][ T4288] gfs2_quota_init+0x74d/0xe80
[ 80.911047][ T4288] gfs2_make_fs_rw+0x41c/0x590
[ 80.915945][ T4288] gfs2_fill_super+0x17d1/0x1ea0
[ 80.920912][ T4288] get_tree_bdev+0x3e6/0x610
[ 80.925531][ T4288] gfs2_get_tree+0x4d/0x1e0
[ 80.930069][ T4288] vfs_get_tree+0x88/0x270
[ 80.934537][ T4288] do_new_mount+0x247/0xa40
[ 80.939066][ T4288] __se_sys_mount+0x2e3/0x3d0
[ 80.943765][ T4288] do_syscall_64+0x4c/0xa0
[ 80.948212][ T4288] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 80.954137][ T4288]
[ 80.956479][ T4288] Freed by task 155:
[ 80.960393][ T4288] kasan_set_track+0x4b/0x70
[ 80.965019][ T4288] kasan_set_free_info+0x1f/0x40
[ 80.969986][ T4288] ____kasan_slab_free+0xd5/0x110
[ 80.975041][ T4288] slab_free_freelist_hook+0xec/0x170
[ 80.980443][ T4288] kmem_cache_free+0x8f/0x210
[ 80.985147][ T4288] rcu_core+0x96e/0x1650
[ 80.989416][ T4288] handle_softirqs+0x336/0x830
[ 80.994203][ T4288] __irq_exit_rcu+0x13b/0x230
[ 80.998910][ T4288] irq_exit_rcu+0x5/0x20
[ 81.003176][ T4288] sysvec_apic_timer_interrupt+0xa0/0xc0
[ 81.008842][ T4288] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 81.014900][ T4288]
[ 81.017270][ T4288] Last potentially related work creation:
[ 81.022999][ T4288] kasan_save_stack+0x35/0x60
[ 81.027705][ T4288] kasan_record_aux_stack+0xb8/0x100
[ 81.033020][ T4288] call_rcu+0x189/0x900
[ 81.037198][ T4288] gfs2_quota_cleanup+0x414/0x670
[ 81.042255][ T4288] gfs2_make_fs_ro+0x440/0x620
[ 81.047056][ T4288] gfs2_withdraw+0x660/0x14e0
[ 81.051775][ T4288] gfs2_inode_refresh+0xb2d/0x11a0
[ 81.056940][ T4288] inode_go_lock+0x127/0x450
[ 81.061567][ T4288] do_promote+0x75b/0xb20
[ 81.066006][ T4288] finish_xmote+0x4c2/0xaf0
[ 81.070548][ T4288] do_xmote+0x752/0x10a0
[ 81.074818][ T4288] gfs2_glock_nq+0xc6b/0x1510
[ 81.079524][ T4288] do_sync+0x49c/0xba0
[ 81.083617][ T4288] gfs2_quota_sync+0x355/0x780
[ 81.088402][ T4288] gfs2_sync_fs+0x48/0xb0
[ 81.092752][ T4288] sync_filesystem+0xe6/0x220
[ 81.097455][ T4288] generic_shutdown_super+0x6b/0x300
[ 81.102871][ T4288] kill_block_super+0x7c/0xe0
[ 81.107571][ T4288] deactivate_locked_super+0x93/0xf0
[ 81.112883][ T4288] cleanup_mnt+0x426/0x4d0
[ 81.117331][ T4288] task_work_run+0x125/0x1a0
[ 81.121944][ T4288] exit_to_user_mode_loop+0x10f/0x130
[ 81.127342][ T4288] exit_to_user_mode_prepare+0xee/0x180
[ 81.132915][ T4288] syscall_exit_to_user_mode+0x16/0x40
[ 81.138489][ T4288] do_syscall_64+0x58/0xa0
[ 81.142958][ T4288] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.148883][ T4288]
[ 81.151237][ T4288] The buggy address belongs to the object at ffff8880684dc000
[ 81.151237][ T4288] which belongs to the cache gfs2_quotad of size 272
[ 81.165308][ T4288] The buggy address is located 144 bytes inside of
[ 81.165308][ T4288] 272-byte region [ffff8880684dc000, ffff8880684dc110)
[ 81.178691][ T4288] The buggy address belongs to the page:
[ 81.184363][ T4288] page:ffffea0001a13700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x684dc
[ 81.194541][ T4288] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 81.202137][ T4288] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801ecb5500
[ 81.210753][ T4288] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 81.219355][ T4288] page dumped because: kasan: bad access detected
[ 81.225805][ T4288] page_owner tracks the page as allocated
[ 81.231538][ T4288] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4316, ts 79503288410, free_ts 24758650286
[ 81.250688][ T4288] get_page_from_freelist+0x24f6/0x2670
[ 81.256380][ T4288] __alloc_pages+0x1ee/0x480
[ 81.261006][ T4288] new_slab+0xc0/0x4b0
[ 81.265100][ T4288] ___slab_alloc+0x807/0xdd0
[ 81.269716][ T4288] kmem_cache_alloc+0xf0/0x280
[ 81.274502][ T4288] qd_alloc+0x50/0x260
[ 81.278598][ T4288] gfs2_quota_init+0x74d/0xe80
[ 81.283391][ T4288] gfs2_make_fs_rw+0x41c/0x590
[ 81.288181][ T4288] gfs2_fill_super+0x17d1/0x1ea0
[ 81.293143][ T4288] get_tree_bdev+0x3e6/0x610
[ 81.297765][ T4288] gfs2_get_tree+0x4d/0x1e0
[ 81.302292][ T4288] vfs_get_tree+0x88/0x270
[ 81.306752][ T4288] do_new_mount+0x247/0xa40
[ 81.311282][ T4288] __se_sys_mount+0x2e3/0x3d0
[ 81.316091][ T4288] do_syscall_64+0x4c/0xa0
[ 81.320533][ T4288] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.326458][ T4288] page last free stack trace:
[ 81.331149][ T4288] free_unref_page_prepare+0x63