[ 57.076004][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.095458][ T9] device veth1_macvtap left promiscuous mode [ 57.102013][ T9] device veth0_macvtap left promiscuous mode [ 57.110004][ T9] device veth1_vlan left promiscuous mode [ 57.116134][ T9] device veth0_vlan left promiscuous mode [ 57.346694][ T9] team0 (unregistering): Port device team_slave_1 removed [ 57.369234][ T9] team0 (unregistering): Port device team_slave_0 removed [ 57.385386][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.398384][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.446627][ T9] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.47' (ECDSA) to the list of known hosts. 2023/01/12 08:58:35 ignoring optional flag "sandboxArg"="0" 2023/01/12 08:58:35 parsed 1 programs 2023/01/12 08:58:35 executed programs: 0 [ 74.552109][ T4389] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.560653][ T4389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.569033][ T4389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.576969][ T4389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.585338][ T4389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.592808][ T4389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.697211][ T5541] chnl_net:caif_netlink_parms(): no params data found [ 74.736889][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.745322][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.753285][ T5541] device bridge_slave_0 entered promiscuous mode [ 74.762374][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.769813][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.778044][ T5541] device bridge_slave_1 entered promiscuous mode [ 74.798045][ T5541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.809240][ T5541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.833019][ T5541] team0: Port device team_slave_0 added [ 74.840704][ T5541] team0: Port device team_slave_1 added [ 74.859724][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.866790][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.892910][ T5541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.905370][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.912395][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.938326][ T5541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.967777][ T5541] device hsr_slave_0 entered promiscuous mode [ 74.974451][ T5541] device hsr_slave_1 entered promiscuous mode [ 75.572023][ T5541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.582921][ T5541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.593780][ T5541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.604886][ T5541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.630774][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.637981][ T5541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.645380][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.652968][ T5541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.669095][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.677332][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.731011][ T5541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.745659][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.755699][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.768520][ T5541] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.791455][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.801211][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.811476][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.818671][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.838406][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.847212][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.856553][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.864386][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.873802][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.882949][ T5090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.903903][ T5541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.915799][ T5541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.931053][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.941613][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.950997][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.961251][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.970303][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.980577][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.993559][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.005081][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.207062][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.216739][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.226491][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.250549][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.259944][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.282176][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.294768][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.306450][ T5541] device veth0_vlan entered promiscuous mode [ 76.315980][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.324473][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.336180][ T5541] device veth1_vlan entered promiscuous mode [ 76.363092][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.374212][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.382747][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.392854][ T1127] cfg80211: failed to load regulatory.db [ 76.403303][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.418023][ T5541] device veth0_macvtap entered promiscuous mode [ 76.429114][ T5541] device veth1_macvtap entered promiscuous mode [ 76.456315][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.464038][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.473472][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.482495][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.491588][ T1127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.504013][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.514320][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.523543][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.535174][ T5541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.546999][ T5541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.556785][ T5541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.566086][ T5541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.628114][ T4389] Bluetooth: hci0: command 0x0409 tx timeout [ 76.636432][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.649964][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.673366][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.688622][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.696655][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.707709][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.130583][ T5600] loop0: detected capacity change from 0 to 32768 [ 77.149157][ T5600] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.157967][ T5600] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.178384][ T5600] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 77.191933][ T1127] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 77.199210][ T1127] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 77.271887][ T1127] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 77.282772][ T1127] gfs2: fsid=syz:syz.0: jid=0: Done [ 77.289212][ T5600] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 77.480930][ T5600] gfs2: fsid=syz:syz.0: found 1 quota changes [ 77.530223][ T5541] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 77.530223][ T5541] inode = 11 2340 [ 77.530223][ T5541] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 460 [ 77.551352][ T5541] gfs2: fsid=syz:syz.0: G: s:EX n:2/924 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 77.561349][ T5541] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5541 [syz-executor.0] gfs2_quota_sync+0x3da/0x8b0 [ 77.575934][ T5541] gfs2: fsid=syz:syz.0: I: n:11/2340 t:8 f:0x00 d:0x00000201 s:176 p:0 [ 77.584740][ T5541] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 77.601498][ T5541] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1476 [ 77.616177][ T5541] CPU: 0 PID: 5541 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 77.625332][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 77.635589][ T5541] Call Trace: [ 77.638901][ T5541] [ 77.642006][ T5541] dump_stack_lvl+0x1b1/0x290 [ 77.646757][ T5541] ? nf_tcp_handle_invalid+0x630/0x630 [ 77.652255][ T5541] ? panic+0x710/0x710 [ 77.656354][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 77.661607][ T5541] gfs2_assert_warn_i+0x19a/0x2e0 [ 77.666670][ T5541] gfs2_quota_cleanup+0x4c6/0x6b0 [ 77.671831][ T5541] gfs2_make_fs_ro+0x517/0x610 [ 77.676806][ T5541] ? __might_sleep+0xc0/0xc0 [ 77.681432][ T5541] ? gfs2_dinode_out+0xad0/0xad0 [ 77.686499][ T5541] ? gfs2_glock_nq+0xdaa/0x1700 [ 77.691395][ T5541] ? gfs2_instantiate+0x207/0x220 [ 77.696461][ T5541] ? gfs2_glock_wait+0x213/0x2a0 [ 77.701440][ T5541] gfs2_withdraw+0x609/0x1540 [ 77.706169][ T5541] ? gfs2_lm+0x220/0x220 [ 77.710439][ T5541] ? make_kgid+0x1fe/0x710 [ 77.714892][ T5541] ? gfs2_withdraw+0x5cc/0x1540 [ 77.719776][ T5541] ? gfs2_consist_inode_i+0xf3/0x110 [ 77.725122][ T5541] gfs2_inode_refresh+0xb2d/0xf60 [ 77.730202][ T5541] ? gfs2_inode_metasync+0xf0/0xf0 [ 77.735351][ T5541] ? _raw_spin_unlock+0x24/0x40 [ 77.740246][ T5541] ? gfs2_glock_nq+0xdaa/0x1700 [ 77.745131][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 77.750366][ T5541] gfs2_instantiate+0x15e/0x220 [ 77.755261][ T5541] gfs2_glock_wait+0x1d9/0x2a0 [ 77.760073][ T5541] do_sync+0x485/0xc80 [ 77.764172][ T5541] ? gfs2_quota_sync+0x3da/0x8b0 [ 77.769235][ T5541] ? slot_put+0x1f0/0x1f0 [ 77.773685][ T5541] ? do_raw_spin_lock+0x147/0x3a0 [ 77.779002][ T5541] ? __lock_acquire+0x1f60/0x1f60 [ 77.784069][ T5541] ? gfs2_quota_sync+0x3da/0x8b0 [ 77.789044][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 77.795732][ T5541] ? qd_check_sync+0xba/0x3f0 [ 77.800464][ T5541] gfs2_quota_sync+0x3da/0x8b0 [ 77.806507][ T5541] gfs2_sync_fs+0x49/0xb0 [ 77.810887][ T5541] sync_filesystem+0xe8/0x220 [ 77.816057][ T5541] generic_shutdown_super+0x6b/0x310 [ 77.821386][ T5541] kill_block_super+0x79/0xd0 [ 77.826120][ T5541] deactivate_locked_super+0xa7/0xf0 [ 77.831447][ T5541] cleanup_mnt+0x494/0x520 [ 77.835896][ T5541] ? lockdep_hardirqs_on+0x8d/0x130 [ 77.841129][ T5541] task_work_run+0x243/0x300 [ 77.845763][ T5541] ? task_work_cancel+0x290/0x290 [ 77.850835][ T5541] ? exit_to_user_mode_loop+0x42/0x150 [ 77.856339][ T5541] exit_to_user_mode_loop+0x124/0x150 [ 77.861757][ T5541] exit_to_user_mode_prepare+0xb2/0x140 [ 77.867344][ T5541] syscall_exit_to_user_mode+0x26/0x60 [ 77.872837][ T5541] do_syscall_64+0x49/0xb0 [ 77.877300][ T5541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.883230][ T5541] RIP: 0033:0x7f4262e8d517 [ 77.887757][ T5541] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.907391][ T5541] RSP: 002b:00007fff7ed62468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.915922][ T5541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4262e8d517 [ 77.923926][ T5541] RDX: 00007fff7ed62539 RSI: 000000000000000a RDI: 00007fff7ed62530 [ 77.931931][ T5541] RBP: 00007fff7ed62530 R08: 00000000ffffffff R09: 00007fff7ed62300 [ 77.940023][ T5541] R10: 0000555555c988b3 R11: 0000000000000246 R12: 00007f4262ee6b24 [ 77.948031][ T5541] R13: 00007fff7ed635f0 R14: 0000555555c98810 R15: 00007fff7ed63630 [ 77.956239][ T5541] [ 77.986515][ T5541] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 77.997374][ T5541] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 78.005160][ T5541] gfs2: fsid=syz:syz.0: File system withdrawn [ 78.013156][ T5541] CPU: 0 PID: 5541 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 78.022310][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 78.032577][ T5541] Call Trace: [ 78.035891][ T5541] [ 78.038839][ T5541] dump_stack_lvl+0x1b1/0x290 [ 78.043559][ T5541] ? nf_tcp_handle_invalid+0x630/0x630 [ 78.049061][ T5541] ? panic+0x710/0x710 [ 78.053176][ T5541] ? kobject_uevent_env+0x46b/0x8e0 [ 78.058421][ T5541] gfs2_withdraw+0xf33/0x1540 [ 78.063248][ T5541] ? gfs2_lm+0x220/0x220 [ 78.067522][ T5541] ? make_kgid+0x1fe/0x710 [ 78.071971][ T5541] ? gfs2_consist_inode_i+0xf3/0x110 [ 78.077276][ T5541] gfs2_inode_refresh+0xb2d/0xf60 [ 78.082318][ T5541] ? gfs2_inode_metasync+0xf0/0xf0 [ 78.087522][ T5541] ? _raw_spin_unlock+0x24/0x40 [ 78.092464][ T5541] ? gfs2_glock_nq+0xdaa/0x1700 [ 78.097316][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 78.102529][ T5541] gfs2_instantiate+0x15e/0x220 [ 78.107385][ T5541] gfs2_glock_wait+0x1d9/0x2a0 [ 78.112159][ T5541] do_sync+0x485/0xc80 [ 78.116491][ T5541] ? gfs2_quota_sync+0x3da/0x8b0 [ 78.121464][ T5541] ? slot_put+0x1f0/0x1f0 [ 78.125806][ T5541] ? do_raw_spin_lock+0x147/0x3a0 [ 78.130846][ T5541] ? __lock_acquire+0x1f60/0x1f60 [ 78.135960][ T5541] ? gfs2_quota_sync+0x3da/0x8b0 [ 78.140900][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 78.146190][ T5541] ? qd_check_sync+0xba/0x3f0 [ 78.151051][ T5541] gfs2_quota_sync+0x3da/0x8b0 [ 78.155826][ T5541] gfs2_sync_fs+0x49/0xb0 [ 78.160153][ T5541] sync_filesystem+0xe8/0x220 [ 78.164838][ T5541] generic_shutdown_super+0x6b/0x310 [ 78.170130][ T5541] kill_block_super+0x79/0xd0 [ 78.174806][ T5541] deactivate_locked_super+0xa7/0xf0 [ 78.180139][ T5541] cleanup_mnt+0x494/0x520 [ 78.184552][ T5541] ? lockdep_hardirqs_on+0x8d/0x130 [ 78.189749][ T5541] task_work_run+0x243/0x300 [ 78.194346][ T5541] ? task_work_cancel+0x290/0x290 [ 78.199471][ T5541] ? exit_to_user_mode_loop+0x42/0x150 [ 78.204944][ T5541] exit_to_user_mode_loop+0x124/0x150 [ 78.210409][ T5541] exit_to_user_mode_prepare+0xb2/0x140 [ 78.215961][ T5541] syscall_exit_to_user_mode+0x26/0x60 [ 78.221419][ T5541] do_syscall_64+0x49/0xb0 [ 78.225872][ T5541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.231766][ T5541] RIP: 0033:0x7f4262e8d517 [ 78.236180][ T5541] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.255969][ T5541] RSP: 002b:00007fff7ed62468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.264394][ T5541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4262e8d517 [ 78.272371][ T5541] RDX: 00007fff7ed62539 RSI: 000000000000000a RDI: 00007fff7ed62530 [ 78.280427][ T5541] RBP: 00007fff7ed62530 R08: 00000000ffffffff R09: 00007fff7ed62300 [ 78.288581][ T5541] R10: 0000555555c988b3 R11: 0000000000000246 R12: 00007f4262ee6b24 [ 78.296634][ T5541] R13: 00007fff7ed635f0 R14: 0000555555c98810 R15: 00007fff7ed63630 [ 78.304706][ T5541] [ 78.707485][ T4389] Bluetooth: hci0: command 0x041b tx timeout [ 78.833495][ T5643] loop0: detected capacity change from 0 to 32768 [ 78.843267][ T5643] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 78.853552][ T5643] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 78.864824][ T5643] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 78.876845][ T898] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 78.884369][ T898] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 78.953987][ T898] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 69ms [ 78.962128][ T898] gfs2: fsid=syz:syz.0: jid=0: Done [ 78.969347][ T5643] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 79.141900][ T5643] gfs2: fsid=syz:syz.0: found 1 quota changes [ 79.162964][ T5541] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 79.162964][ T5541] inode = 11 2340 [ 79.162964][ T5541] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 460 [ 79.182502][ T5541] gfs2: fsid=syz:syz.0: G: s:EX n:2/924 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 79.194062][ T5541] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5541 [syz-executor.0] gfs2_quota_sync+0x3da/0x8b0 [ 79.205713][ T5541] gfs2: fsid=syz:syz.0: I: n:11/2340 t:8 f:0x00 d:0x00000201 s:176 p:0 [ 79.214666][ T5541] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 79.227505][ T5541] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1476 [ 79.242343][ T5541] CPU: 0 PID: 5541 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 79.251665][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 79.262074][ T5541] Call Trace: [ 79.265354][ T5541] [ 79.268674][ T5541] dump_stack_lvl+0x1b1/0x290 [ 79.273661][ T5541] ? nf_tcp_handle_invalid+0x630/0x630 [ 79.279146][ T5541] ? panic+0x710/0x710 [ 79.283425][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 79.288656][ T5541] gfs2_assert_warn_i+0x19a/0x2e0 [ 79.293882][ T5541] gfs2_quota_cleanup+0x4c6/0x6b0 [ 79.298970][ T5541] gfs2_make_fs_ro+0x517/0x610 [ 79.303829][ T5541] ? __might_sleep+0xc0/0xc0 [ 79.308533][ T5541] ? gfs2_dinode_out+0xad0/0xad0 [ 79.313670][ T5541] ? gfs2_glock_nq+0xdaa/0x1700 [ 79.318543][ T5541] ? gfs2_instantiate+0x207/0x220 [ 79.323589][ T5541] ? gfs2_glock_wait+0x213/0x2a0 [ 79.328623][ T5541] gfs2_withdraw+0x609/0x1540 [ 79.333404][ T5541] ? gfs2_lm+0x220/0x220 [ 79.337646][ T5541] ? make_kgid+0x1fe/0x710 [ 79.342091][ T5541] ? gfs2_withdraw+0x5cc/0x1540 [ 79.346955][ T5541] ? gfs2_consist_inode_i+0xf3/0x110 [ 79.352250][ T5541] gfs2_inode_refresh+0xb2d/0xf60 [ 79.357373][ T5541] ? gfs2_inode_metasync+0xf0/0xf0 [ 79.362487][ T5541] ? _raw_spin_unlock+0x24/0x40 [ 79.367519][ T5541] ? gfs2_glock_nq+0xdaa/0x1700 [ 79.372373][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 79.377665][ T5541] gfs2_instantiate+0x15e/0x220 [ 79.382519][ T5541] gfs2_glock_wait+0x1d9/0x2a0 [ 79.387289][ T5541] do_sync+0x485/0xc80 [ 79.391361][ T5541] ? gfs2_quota_sync+0x3da/0x8b0 [ 79.396307][ T5541] ? slot_put+0x1f0/0x1f0 [ 79.400641][ T5541] ? do_raw_spin_lock+0x147/0x3a0 [ 79.405667][ T5541] ? __lock_acquire+0x1f60/0x1f60 [ 79.410693][ T5541] ? gfs2_quota_sync+0x3da/0x8b0 [ 79.416010][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 79.421210][ T5541] ? qd_check_sync+0xba/0x3f0 [ 79.425998][ T5541] gfs2_quota_sync+0x3da/0x8b0 [ 79.430789][ T5541] gfs2_sync_fs+0x49/0xb0 [ 79.435126][ T5541] sync_filesystem+0xe8/0x220 [ 79.440117][ T5541] generic_shutdown_super+0x6b/0x310 [ 79.445417][ T5541] kill_block_super+0x79/0xd0 [ 79.450105][ T5541] deactivate_locked_super+0xa7/0xf0 [ 79.455399][ T5541] cleanup_mnt+0x494/0x520 [ 79.459821][ T5541] ? lockdep_hardirqs_on+0x8d/0x130 [ 79.465022][ T5541] task_work_run+0x243/0x300 [ 79.469623][ T5541] ? task_work_cancel+0x290/0x290 [ 79.474653][ T5541] ? exit_to_user_mode_loop+0x42/0x150 [ 79.480117][ T5541] exit_to_user_mode_loop+0x124/0x150 [ 79.485491][ T5541] exit_to_user_mode_prepare+0xb2/0x140 [ 79.491058][ T5541] syscall_exit_to_user_mode+0x26/0x60 [ 79.496519][ T5541] do_syscall_64+0x49/0xb0 [ 79.500944][ T5541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.506852][ T5541] RIP: 0033:0x7f4262e8d517 [ 79.511263][ T5541] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.531038][ T5541] RSP: 002b:00007fff7ed62468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.539455][ T5541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4262e8d517 [ 79.547424][ T5541] RDX: 00007fff7ed62539 RSI: 000000000000000a RDI: 00007fff7ed62530 [ 79.555390][ T5541] RBP: 00007fff7ed62530 R08: 00000000ffffffff R09: 00007fff7ed62300 [ 79.563368][ T5541] R10: 0000555555c988b3 R11: 0000000000000246 R12: 00007f4262ee6b24 [ 79.571337][ T5541] R13: 00007fff7ed635f0 R14: 0000555555c98810 R15: 00007fff7ed63630 [ 79.579320][ T5541] [ 79.591096][ T5541] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 79.600095][ T5541] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 79.609981][ T5541] gfs2: fsid=syz:syz.0: File system withdrawn [ 79.616184][ T5541] CPU: 1 PID: 5541 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 79.625505][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 79.635584][ T5541] Call Trace: [ 79.638883][ T5541] [ 79.641829][ T5541] dump_stack_lvl+0x1b1/0x290 [ 79.646549][ T5541] ? nf_tcp_handle_invalid+0x630/0x630 [ 79.652056][ T5541] ? panic+0x710/0x710 [ 79.656158][ T5541] ? kobject_uevent_env+0x46b/0x8e0 [ 79.661402][ T5541] gfs2_withdraw+0xf33/0x1540 [ 79.666131][ T5541] ? gfs2_lm+0x220/0x220 [ 79.670399][ T5541] ? make_kgid+0x1fe/0x710 [ 79.674877][ T5541] ? gfs2_consist_inode_i+0xf3/0x110 [ 79.680199][ T5541] gfs2_inode_refresh+0xb2d/0xf60 [ 79.685292][ T5541] ? gfs2_inode_metasync+0xf0/0xf0 [ 79.690436][ T5541] ? _raw_spin_unlock+0x24/0x40 [ 79.695322][ T5541] ? gfs2_glock_nq+0xdaa/0x1700 [ 79.700295][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 79.705541][ T5541] gfs2_instantiate+0x15e/0x220 [ 79.710594][ T5541] gfs2_glock_wait+0x1d9/0x2a0 [ 79.715370][ T5541] do_sync+0x485/0xc80 [ 79.719443][ T5541] ? gfs2_quota_sync+0x3da/0x8b0 [ 79.724391][ T5541] ? slot_put+0x1f0/0x1f0 [ 79.728725][ T5541] ? do_raw_spin_lock+0x147/0x3a0 [ 79.733848][ T5541] ? __lock_acquire+0x1f60/0x1f60 [ 79.738966][ T5541] ? gfs2_quota_sync+0x3da/0x8b0 [ 79.743918][ T5541] ? do_raw_spin_unlock+0x134/0x8a0 [ 79.749296][ T5541] ? qd_check_sync+0xba/0x3f0 [ 79.754075][ T5541] gfs2_quota_sync+0x3da/0x8b0 [ 79.758853][ T5541] gfs2_sync_fs+0x49/0xb0 [ 79.763189][ T5541] sync_filesystem+0xe8/0x220 [ 79.767877][ T5541] generic_shutdown_super+0x6b/0x310 [ 79.773170][ T5541] kill_block_super+0x79/0xd0 [ 79.777842][ T5541] deactivate_locked_super+0xa7/0xf0 [ 79.783220][ T5541] cleanup_mnt+0x494/0x520 [ 79.787633][ T5541] ? lockdep_hardirqs_on+0x8d/0x130 [ 79.792851][ T5541] task_work_run+0x243/0x300 [ 79.797462][ T5541] ? task_work_cancel+0x290/0x290 [ 79.802508][ T5541] ? exit_to_user_mode_loop+0x42/0x150 [ 79.807972][ T5541] exit_to_user_mode_loop+0x124/0x150 [ 79.813348][ T5541] exit_to_user_mode_prepare+0xb2/0x140 [ 79.819072][ T5541] syscall_exit_to_user_mode+0x26/0x60 [ 79.824810][ T5541] do_syscall_64+0x49/0xb0 [ 79.829233][ T5541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.835144][ T5541] RIP: 0033:0x7f4262e8d517 [ 79.839556][ T5541] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 79.859263][ T5541] RSP: 002b:00007fff7ed62468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.867673][ T5541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4262e8d517 [ 79.875727][ T5541] RDX: 00007fff7ed62539 RSI: 000000000000000a RDI: 00007fff7ed62530 [ 79.883781][ T5541] RBP: 00007fff7ed62530 R08: 00000000ffffffff R09: 00007fff7ed62300 [ 79.891835][ T5541] R10: 0000555555c988b3 R11: 0000000000000246 R12: 00007f4262ee6b24 [ 79.900028][ T5541] R13: 00007fff7ed635f0 R14: 0000555555c98810 R15: 00007fff7ed63630 [ 79.908097][ T5541] [ 79.918515][ T5541] ================================================================== [ 79.926614][ T5541] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 79.933313][ T5541] Read of size 8 at addr ffff888072eee090 by task syz-executor.0/5541 [ 79.941481][ T5541] [ 79.943813][ T5541] CPU: 0 PID: 5541 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 79.952933][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 79.962998][ T5541] Call Trace: [ 79.966292][ T5541] [ 79.969228][ T5541] dump_stack_lvl+0x1b1/0x290 [ 79.974018][ T5541] ? nf_tcp_handle_invalid+0x630/0x630 [ 79.979494][ T5541] ? __wake_up_klogd+0xcd/0x100 [ 79.984363][ T5541] ? panic+0x710/0x710 [ 79.988443][ T5541] ? _printk+0xc0/0x100 [ 79.992610][ T5541] ? _raw_spin_lock_irqsave+0x8e/0x100 [ 79.998139][ T5541] print_address_description+0x74/0x340 [ 80.003897][ T5541] print_report+0x107/0x1f0 [ 80.008421][ T5541] ? __virt_addr_valid+0x21b/0x2d0 [ 80.013551][ T5541] ? __phys_addr+0xb5/0x160 [ 80.018096][ T5541] ? qd_unlock+0x30/0x2d0 [ 80.022530][ T5541] kasan_report+0xcd/0x100 [ 80.027053][ T5541] ? qd_unlock+0x30/0x2d0 [ 80.031399][ T5541] kasan_check_range+0x2a7/0x2e0 [ 80.036359][ T5541] qd_unlock+0x30/0x2d0 [ 80.040528][ T5541] gfs2_quota_sync+0x768/0x8b0 [ 80.045315][ T5541] gfs2_sync_fs+0x49/0xb0 [ 80.049670][ T5541] sync_filesystem+0xe8/0x220 [ 80.054452][ T5541] generic_shutdown_super+0x6b/0x310 [ 80.059847][ T5541] kill_block_super+0x79/0xd0 [ 80.064539][ T5541] deactivate_locked_super+0xa7/0xf0 [ 80.069843][ T5541] cleanup_mnt+0x494/0x520 [ 80.074272][ T5541] ? lockdep_hardirqs_on+0x8d/0x130 [ 80.079482][ T5541] task_work_run+0x243/0x300 [ 80.084093][ T5541] ? task_work_cancel+0x290/0x290 [ 80.089140][ T5541] ? exit_to_user_mode_loop+0x42/0x150 [ 80.094621][ T5541] exit_to_user_mode_loop+0x124/0x150 [ 80.100103][ T5541] exit_to_user_mode_prepare+0xb2/0x140 [ 80.105672][ T5541] syscall_exit_to_user_mode+0x26/0x60 [ 80.111148][ T5541] do_syscall_64+0x49/0xb0 [ 80.115675][ T5541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.121589][ T5541] RIP: 0033:0x7f4262e8d517 [ 80.126029][ T5541] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.145823][ T5541] RSP: 002b:00007fff7ed62468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.154263][ T5541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4262e8d517 [ 80.162248][ T5541] RDX: 00007fff7ed62539 RSI: 000000000000000a RDI: 00007fff7ed62530 [ 80.170235][ T5541] RBP: 00007fff7ed62530 R08: 00000000ffffffff R09: 00007fff7ed62300 [ 80.178426][ T5541] R10: 0000555555c988b3 R11: 0000000000000246 R12: 00007f4262ee6b24 [ 80.186420][ T5541] R13: 00007fff7ed635f0 R14: 0000555555c98810 R15: 00007fff7ed63630 [ 80.194635][ T5541] [ 80.197666][ T5541] [ 80.200015][ T5541] Allocated by task 5643: [ 80.204356][ T5541] kasan_set_track+0x3d/0x60 [ 80.208990][ T5541] __kasan_slab_alloc+0x65/0x70 [ 80.213873][ T5541] kmem_cache_alloc+0x1b3/0x350 [ 80.218848][ T5541] qd_alloc+0x51/0x250 [ 80.222948][ T5541] gfs2_quota_init+0x7c4/0x10e0 [ 80.227826][ T5541] gfs2_make_fs_rw+0x48e/0x590 [ 80.232609][ T5541] gfs2_fill_super+0x2357/0x2700 [ 80.237566][ T5541] get_tree_bdev+0x400/0x620 [ 80.242181][ T5541] gfs2_get_tree+0x50/0x210 [ 80.246705][ T5541] vfs_get_tree+0x88/0x270 [ 80.251132][ T5541] do_new_mount+0x289/0xad0 [ 80.255651][ T5541] __se_sys_mount+0x2d3/0x3c0 [ 80.260339][ T5541] do_syscall_64+0x3d/0xb0 [ 80.264792][ T5541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.270707][ T5541] [ 80.273032][ T5541] Freed by task 21: [ 80.276839][ T5541] kasan_set_track+0x3d/0x60 [ 80.281616][ T5541] kasan_save_free_info+0x27/0x40 [ 80.286746][ T5541] ____kasan_slab_free+0xd6/0x120 [ 80.291789][ T5541] slab_free_freelist_hook+0x12e/0x1a0 [ 80.297262][ T5541] kmem_cache_free+0x94/0x1d0 [ 80.301950][ T5541] rcu_core+0x9c1/0x1690 [ 80.306212][ T5541] __do_softirq+0x277/0x738 [ 80.310817][ T5541] [ 80.313142][ T5541] Last potentially related work creation: [ 80.318862][ T5541] kasan_save_stack+0x2b/0x50 [ 80.323561][ T5541] __kasan_record_aux_stack+0xb0/0xc0 [ 80.328952][ T5541] call_rcu+0x163/0xa70 [ 80.333137][ T5541] gfs2_quota_cleanup+0x457/0x6b0 [ 80.338189][ T5541] gfs2_make_fs_ro+0x517/0x610 [ 80.343054][ T5541] gfs2_withdraw+0x609/0x1540 [ 80.347834][ T5541] gfs2_inode_refresh+0xb2d/0xf60 [ 80.352874][ T5541] gfs2_instantiate+0x15e/0x220 [ 80.357747][ T5541] gfs2_glock_wait+0x1d9/0x2a0 [ 80.362528][ T5541] do_sync+0x485/0xc80 [ 80.366707][ T5541] gfs2_quota_sync+0x3da/0x8b0 [ 80.371488][ T5541] gfs2_sync_fs+0x49/0xb0 [ 80.375920][ T5541] sync_filesystem+0xe8/0x220 [ 80.380615][ T5541] generic_shutdown_super+0x6b/0x310 [ 80.385917][ T5541] kill_block_super+0x79/0xd0 [ 80.390608][ T5541] deactivate_locked_super+0xa7/0xf0 [ 80.395915][ T5541] cleanup_mnt+0x494/0x520 [ 80.400350][ T5541] task_work_run+0x243/0x300 [ 80.404962][ T5541] exit_to_user_mode_loop+0x124/0x150 [ 80.410444][ T5541] exit_to_user_mode_prepare+0xb2/0x140 [ 80.416098][ T5541] syscall_exit_to_user_mode+0x26/0x60 [ 80.421752][ T5541] do_syscall_64+0x49/0xb0 [ 80.426190][ T5541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.432103][ T5541] [ 80.434430][ T5541] The buggy address belongs to the object at ffff888072eee000 [ 80.434430][ T5541] which belongs to the cache gfs2_quotad of size 272 [ 80.448502][ T5541] The buggy address is located 144 bytes inside of [ 80.448502][ T5541] 272-byte region [ffff888072eee000, ffff888072eee110) [ 80.461794][ T5541] [ 80.464208][ T5541] The buggy address belongs to the physical page: [ 80.470630][ T5541] page:ffffea0001cbbb80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72eee [ 80.480801][ T5541] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 80.488379][ T5541] raw: 00fff00000000200 ffff8881461448c0 dead000000000122 0000000000000000 [ 80.497066][ T5541] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 80.505673][ T5541] page dumped because: kasan: bad access detected [ 80.512111][ T5541] page_owner tracks the page as allocated [ 80.517840][ T5541] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5643, tgid 5642 (syz-executor.0), ts 79105278630, free_ts 77434449998 [ 80.539495][ T5541] get_page_from_freelist+0x742/0x7c0 [ 80.544921][ T5541] __alloc_pages+0x259/0x560 [ 80.549552][ T5541] alloc_slab_page+0xbd/0x190 [ 80.554435][ T5541] allocate_slab+0x5e/0x3c0 [ 80.558958][ T5541] ___slab_alloc+0x782/0xe20 [ 80.563568][ T5541] kmem_cache_alloc+0x268/0x350 [ 80.568441][ T5541] qd_alloc+0x51/0x250 [ 80.572651][ T5541] gfs2_quota_init+0x7c4/0x10e0 [ 80.577640][ T5541] gfs2_make_fs_rw+0x48e/0x590 [ 80.582511][ T5541] gfs2_fill_super+0x2357/0x2700 [ 80.587465][ T5541] get_tree_bdev+0x400/0x620 [ 80.592085][ T5541] gfs2_get_tree+0x50/0x210 [ 80.596654][ T5541] vfs_get_tree+0x88/0x270 [ 80.601608][ T5541] do_new_mount+0x289/0xad0 [ 80.606120][ T5541] __se_sys_mount+0x2d3/0x3c0 [ 80.610839][ T5541] do_syscall_64+0x3d/0xb0 [ 80.615536][ T5541] page last free stack trace: [ 80.620666][ T5541] free_pcp_prepare+0x751/0x780 [ 80.625536][ T5541] free_unref_page+0x19/0x4c0 [ 80.630314][ T5541] __unfreeze_partials+0x1a5/0x1e0 [ 80.635537][ T5541] put_cpu_partial+0x106/0x170 [ 80.640438][ T5541] qlist_free_all+0x2b/0x70 [ 80.645135][ T5541] kasan_quarantine_reduce+0x156/0x170 [ 80.651046][ T5541] __kasan_slab_alloc+0x1f/0x70 [ 80.656008][ T5541] __kmem_cache_alloc_node+0x1e0/0x340 [ 80.661497][ T5541] kmalloc_trace+0x26/0x60 [ 80.665933][ T5541] ext4_readdir+0x1edb/0x3800 [ 80.670628][ T5541] iterate_dir+0x257/0x5f0 [ 80.675058][ T5541] __se_sys_getdents64+0x1db/0x4c0 [ 80.680186][ T5541] do_syscall_64+0x3d/0xb0 [ 80.684618][ T5541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.690527][ T5541] [ 80.692951][ T5541] Memory state around the buggy address: [ 80.698671][ T5541] ffff888072eedf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.706744][ T5541] ffff888072eee000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.714957][ T5541] >ffff888072eee080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.723126][ T5541] ^ [ 80.727726][ T5541] ffff888072eee100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.735926][ T5541] ffff888072eee180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.744007][ T5541] ================================================================== [ 80.778288][ T5541] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 80.786072][ T5541] CPU: 0 PID: 5541 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0 [ 80.795368][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 80.805445][ T5541] Call Trace: [ 80.808735][ T5541] [ 80.811671][ T5541] dump_stack_lvl+0x1b1/0x290 [ 80.816367][ T5541] ? nf_tcp_handle_invalid+0x630/0x630 [ 80.821855][ T5541] ? panic+0x710/0x710 [ 80.826028][ T5541] ? lock_release+0x81/0x820 [ 80.830935][ T5541] ? vscnprintf+0x59/0x80 [ 80.836167][ T5541] panic+0x2d6/0x710 [ 80.837495][ T4389] Bluetooth: hci0: command 0x040f tx timeout [ 80.846042][ T5541] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 80.852219][ T5541] ? check_panic_on_warn+0x1d/0xa0 [ 80.857485][ T5541] ? memcpy_page_flushcache+0x100/0x100 [ 80.863061][ T5541] ? _raw_spin_unlock_irqrestore+0x110/0x120 [ 80.869073][ T5541] ? _raw_spin_unlock+0x40/0x40 [ 80.873952][ T5541] ? print_report+0x1b4/0x1f0 [ 80.878661][ T5541] check_panic_on_warn+0x80/0xa0 [ 80.883619][ T5541] ? qd_unlock+0x30/0x2d0 [ 80.887970][ T5541] end_report+0x47/0x90 [ 80.892135][ T5541] kasan_report+0xda/0x100 [ 80.896637][ T5541] ? qd_unlock+0x30/0x2d0 [ 80.900978][ T5541] kasan_check_range+0x2a7/0x2e0 [ 80.905981][ T5541] qd_unlock+0x30/0x2d0 [ 80.910222][ T5541] gfs2_quota_sync+0x768/0x8b0 [ 80.915424][ T5541] gfs2_sync_fs+0x49/0xb0 [ 80.919845][ T5541] sync_filesystem+0xe8/0x220 [ 80.924617][ T5541] generic_shutdown_super+0x6b/0x310 [ 80.929897][ T5541] kill_block_super+0x79/0xd0 [ 80.934572][ T5541] deactivate_locked_super+0xa7/0xf0 [ 80.939868][ T5541] cleanup_mnt+0x494/0x520 [ 80.944280][ T5541] ? lockdep_hardirqs_on+0x8d/0x130 [ 80.949476][ T5541] task_work_run+0x243/0x300 [ 80.954152][ T5541] ? task_work_cancel+0x290/0x290 [ 80.959171][ T5541] ? exit_to_user_mode_loop+0x42/0x150 [ 80.964627][ T5541] exit_to_user_mode_loop+0x124/0x150 [ 80.970002][ T5541] exit_to_user_mode_prepare+0xb2/0x140 [ 80.975544][ T5541] syscall_exit_to_user_mode+0x26/0x60 [ 80.981008][ T5541] do_syscall_64+0x49/0xb0 [ 80.985421][ T5541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.991512][ T5541] RIP: 0033:0x7f4262e8d517 [ 80.995930][ T5541] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.015541][ T5541] RSP: 002b:00007fff7ed62468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.023952][ T5541] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4262e8d517 [ 81.031936][ T5541] RDX: 00007fff7ed62539 RSI: 000000000000000a RDI: 00007fff7ed62530 [ 81.039924][ T5541] RBP: 00007fff7ed62530 R08: 00000000ffffffff R09: 00007fff7ed62300 [ 81.047896][ T5541] R10: 0000555555c988b3 R11: 0000000000000246 R12: 00007f4262ee6b24 [ 81.055873][ T5541] R13: 00007fff7ed635f0 R14: 0000555555c98810 R15: 00007fff7ed63630 [ 81.063943][ T5541] [ 81.067116][ T5541] Kernel Offset: disabled [ 81.071432][ T5541] Rebooting in 86400 seconds..