[ 58.791021][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 58.806747][ T9] device veth1_macvtap left promiscuous mode
[ 58.813770][ T9] device veth0_macvtap left promiscuous mode
[ 58.821830][ T9] device veth1_vlan left promiscuous mode
[ 58.828618][ T9] device veth0_vlan left promiscuous mode
[ 59.046074][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 59.071682][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 59.086968][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 59.104327][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 59.177625][ T9] bond0 (unregistering): Released all slaves
Warning: Permanently added '10.128.0.179' (ECDSA) to the list of known hosts.
2023/01/11 11:22:41 ignoring optional flag "sandboxArg"="0"
2023/01/11 11:22:41 parsed 1 programs
2023/01/11 11:22:41 executed programs: 0
[ 74.839437][ T4388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 74.847486][ T4388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 74.856030][ T4388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 74.863607][ T4388] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 74.871046][ T4388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 74.961344][ T5528] chnl_net:caif_netlink_parms(): no params data found
[ 74.996692][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.004358][ T5528] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.012349][ T5528] device bridge_slave_0 entered promiscuous mode
[ 75.020582][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.027985][ T5528] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.035866][ T5528] device bridge_slave_1 entered promiscuous mode
[ 75.054548][ T5528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.065469][ T5528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.086674][ T5528] team0: Port device team_slave_0 added
[ 75.094014][ T5528] team0: Port device team_slave_1 added
[ 75.110733][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 75.118324][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.147777][ T5528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 75.160946][ T5528] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 75.168520][ T5528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 75.195340][ T5528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 75.221905][ T5528] device hsr_slave_0 entered promiscuous mode
[ 75.229726][ T5528] device hsr_slave_1 entered promiscuous mode
[ 75.915636][ T5528] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 75.928047][ T5528] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 75.938536][ T5528] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 75.948675][ T5528] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 75.972024][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.979385][ T5528] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 75.986942][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.994098][ T5528] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.014412][ T22] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.022298][ T22] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.076461][ T5528] 8021q: adding VLAN 0 to HW filter on device bond0
[ 76.092774][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 76.101984][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 76.114193][ T5528] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.126425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 76.136165][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 76.145656][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.149315][ T26] cfg80211: failed to load regulatory.db
[ 76.152958][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.186116][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 76.201363][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 76.210719][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.217958][ T5082] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.227332][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 76.238978][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 76.262306][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 76.273988][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 76.283700][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 76.294280][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 76.303247][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 76.313567][ T898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 76.324276][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 76.335480][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 76.534342][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 76.543008][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 76.557023][ T5528] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.582090][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 76.593708][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 76.617315][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 76.628083][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 76.639150][ T5528] device veth0_vlan entered promiscuous mode
[ 76.651871][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 76.661042][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 76.673946][ T5528] device veth1_vlan entered promiscuous mode
[ 76.700234][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 76.710803][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 76.720507][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 76.731026][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 76.743465][ T5528] device veth0_macvtap entered promiscuous mode
[ 76.758610][ T5528] device veth1_macvtap entered promiscuous mode
[ 76.779203][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.786676][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 76.797893][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 76.806558][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 76.817257][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 76.830057][ T5528] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.840164][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 76.849765][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 76.862319][ T5528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.873242][ T5528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.882533][ T5528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.892070][ T5528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.949109][ T4388] Bluetooth: hci0: command 0x0409 tx timeout
[ 76.961775][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.981203][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.989081][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.992128][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 76.997287][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.013804][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 77.399161][ T5598] loop0: detected capacity change from 0 to 32768
[ 77.414977][ T5598] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 77.425708][ T5598] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 77.444787][ T5598] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 77.455804][ T26] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 77.464121][ T26] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 77.530921][ T26] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 66ms
[ 77.542698][ T26] gfs2: fsid=syz:syz.0: jid=0: Done
[ 77.548788][ T5598] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 77.721736][ T5598] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 77.780617][ T5528] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 77.780617][ T5528] inode = 11 2340
[ 77.780617][ T5528] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 460
[ 77.800544][ T5528] gfs2: fsid=syz:syz.0: G: s:EX n:2/924 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[ 77.810949][ T5528] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5528 [syz-executor.0] gfs2_quota_sync+0x3da/0x8b0
[ 77.821741][ T5528] gfs2: fsid=syz:syz.0: I: n:11/2340 t:8 f:0x00 d:0x00000201 s:176 p:0
[ 77.831143][ T5528] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 77.844832][ T5528] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1476
[ 77.859136][ T5528] CPU: 1 PID: 5528 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 77.868479][ T5528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 77.878632][ T5528] Call Trace:
[ 77.882050][ T5528]
[ 77.885061][ T5528] dump_stack_lvl+0x1b1/0x290
[ 77.890609][ T5528] ? nf_tcp_handle_invalid+0x630/0x630
[ 77.896165][ T5528] ? panic+0x710/0x710
[ 77.900227][ T5528] ? do_raw_spin_unlock+0x134/0x8a0
[ 77.905428][ T5528] gfs2_assert_warn_i+0x19a/0x2e0
[ 77.910543][ T5528] gfs2_quota_cleanup+0x4c6/0x6b0
[ 77.915587][ T5528] gfs2_make_fs_ro+0x517/0x610
[ 77.920346][ T5528] ? __might_sleep+0xc0/0xc0
[ 77.924990][ T5528] ? gfs2_dinode_out+0xad0/0xad0
[ 77.929919][ T5528] ? gfs2_glock_nq+0xdaa/0x1700
[ 77.934768][ T5528] ? gfs2_instantiate+0x207/0x220
[ 77.939881][ T5528] ? gfs2_glock_wait+0x213/0x2a0
[ 77.944906][ T5528] gfs2_withdraw+0x609/0x1540
[ 77.949589][ T5528] ? gfs2_lm+0x220/0x220
[ 77.953834][ T5528] ? make_kgid+0x1fe/0x710
[ 77.958425][ T5528] ? gfs2_withdraw+0x5cc/0x1540
[ 77.963275][ T5528] ? gfs2_consist_inode_i+0xf3/0x110
[ 77.968559][ T5528] gfs2_inode_refresh+0xb2d/0xf60
[ 77.973630][ T5528] ? gfs2_inode_metasync+0xf0/0xf0
[ 77.978758][ T5528] ? _raw_spin_unlock+0x24/0x40
[ 77.983698][ T5528] ? gfs2_glock_nq+0xdaa/0x1700
[ 77.988554][ T5528] ? do_raw_spin_unlock+0x134/0x8a0
[ 77.993748][ T5528] gfs2_instantiate+0x15e/0x220
[ 77.998610][ T5528] gfs2_glock_wait+0x1d9/0x2a0
[ 78.003381][ T5528] do_sync+0x485/0xc80
[ 78.007470][ T5528] ? gfs2_quota_sync+0x3da/0x8b0
[ 78.012570][ T5528] ? slot_put+0x1f0/0x1f0
[ 78.016911][ T5528] ? do_raw_spin_lock+0x147/0x3a0
[ 78.022022][ T5528] ? __lock_acquire+0x1f60/0x1f60
[ 78.027053][ T5528] ? gfs2_quota_sync+0x3da/0x8b0
[ 78.031986][ T5528] ? do_raw_spin_unlock+0x134/0x8a0
[ 78.037183][ T5528] ? qd_check_sync+0xba/0x3f0
[ 78.041862][ T5528] gfs2_quota_sync+0x3da/0x8b0
[ 78.046633][ T5528] gfs2_sync_fs+0x49/0xb0
[ 78.050954][ T5528] sync_filesystem+0xe8/0x220
[ 78.055631][ T5528] generic_shutdown_super+0x6b/0x310
[ 78.060914][ T5528] kill_block_super+0x79/0xd0
[ 78.065579][ T5528] deactivate_locked_super+0xa7/0xf0
[ 78.070865][ T5528] cleanup_mnt+0x494/0x520
[ 78.075664][ T5528] ? lockdep_hardirqs_on+0x8d/0x130
[ 78.080856][ T5528] task_work_run+0x243/0x300
[ 78.085448][ T5528] ? task_work_cancel+0x290/0x290
[ 78.090564][ T5528] ? exit_to_user_mode_loop+0x42/0x150
[ 78.096021][ T5528] exit_to_user_mode_loop+0x124/0x150
[ 78.101415][ T5528] exit_to_user_mode_prepare+0xb2/0x140
[ 78.106974][ T5528] syscall_exit_to_user_mode+0x26/0x60
[ 78.112596][ T5528] do_syscall_64+0x49/0xb0
[ 78.117005][ T5528] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.123068][ T5528] RIP: 0033:0x7fc0c0c8d517
[ 78.127475][ T5528] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 78.147437][ T5528] RSP: 002b:00007ffc60235f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 78.155844][ T5528] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0c0c8d517
[ 78.163895][ T5528] RDX: 00007ffc60236069 RSI: 000000000000000a RDI: 00007ffc60236060
[ 78.172140][ T5528] RBP: 00007ffc60236060 R08: 00000000ffffffff R09: 00007ffc60235e30
[ 78.180282][ T5528] R10: 00005555573cc8b3 R11: 0000000000000246 R12: 00007fc0c0ce6b24
[ 78.188331][ T5528] R13: 00007ffc60237120 R14: 00005555573cc810 R15: 00007ffc60237160
[ 78.196306][ T5528]
[ 78.213078][ T5528] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 78.222406][ T5528] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 78.234421][ T5528] gfs2: fsid=syz:syz.0: File system withdrawn
[ 78.241351][ T5528] CPU: 1 PID: 5528 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 78.250607][ T5528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 78.261037][ T5528] Call Trace:
[ 78.264446][ T5528]
[ 78.267400][ T5528] dump_stack_lvl+0x1b1/0x290
[ 78.272296][ T5528] ? nf_tcp_handle_invalid+0x630/0x630
[ 78.277792][ T5528] ? panic+0x710/0x710
[ 78.282013][ T5528] ? kobject_uevent_env+0x46b/0x8e0
[ 78.287247][ T5528] gfs2_withdraw+0xf33/0x1540
[ 78.291966][ T5528] ? gfs2_lm+0x220/0x220
[ 78.296237][ T5528] ? make_kgid+0x1fe/0x710
[ 78.300694][ T5528] ? gfs2_consist_inode_i+0xf3/0x110
[ 78.306034][ T5528] gfs2_inode_refresh+0xb2d/0xf60
[ 78.311418][ T5528] ? gfs2_inode_metasync+0xf0/0xf0
[ 78.316575][ T5528] ? _raw_spin_unlock+0x24/0x40
[ 78.321454][ T5528] ? gfs2_glock_nq+0xdaa/0x1700
[ 78.326416][ T5528] ? do_raw_spin_unlock+0x134/0x8a0
[ 78.331642][ T5528] gfs2_instantiate+0x15e/0x220
[ 78.336695][ T5528] gfs2_glock_wait+0x1d9/0x2a0
[ 78.341705][ T5528] do_sync+0x485/0xc80
[ 78.345806][ T5528] ? gfs2_quota_sync+0x3da/0x8b0
[ 78.350785][ T5528] ? slot_put+0x1f0/0x1f0
[ 78.355233][ T5528] ? do_raw_spin_lock+0x147/0x3a0
[ 78.360263][ T5528] ? __lock_acquire+0x1f60/0x1f60
[ 78.365490][ T5528] ? gfs2_quota_sync+0x3da/0x8b0
[ 78.370427][ T5528] ? do_raw_spin_unlock+0x134/0x8a0
[ 78.375624][ T5528] ? qd_check_sync+0xba/0x3f0
[ 78.380298][ T5528] gfs2_quota_sync+0x3da/0x8b0
[ 78.385068][ T5528] gfs2_sync_fs+0x49/0xb0
[ 78.389391][ T5528] sync_filesystem+0xe8/0x220
[ 78.394156][ T5528] generic_shutdown_super+0x6b/0x310
[ 78.399553][ T5528] kill_block_super+0x79/0xd0
[ 78.404309][ T5528] deactivate_locked_super+0xa7/0xf0
[ 78.409589][ T5528] cleanup_mnt+0x494/0x520
[ 78.414004][ T5528] ? lockdep_hardirqs_on+0x8d/0x130
[ 78.419195][ T5528] task_work_run+0x243/0x300
[ 78.423884][ T5528] ? task_work_cancel+0x290/0x290
[ 78.428907][ T5528] ? exit_to_user_mode_loop+0x42/0x150
[ 78.434362][ T5528] exit_to_user_mode_loop+0x124/0x150
[ 78.439815][ T5528] exit_to_user_mode_prepare+0xb2/0x140
[ 78.445703][ T5528] syscall_exit_to_user_mode+0x26/0x60
[ 78.451358][ T5528] do_syscall_64+0x49/0xb0
[ 78.456292][ T5528] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.462268][ T5528] RIP: 0033:0x7fc0c0c8d517
[ 78.466680][ T5528] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 78.494437][ T5528] RSP: 002b:00007ffc60235f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 78.503034][ T5528] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0c0c8d517
[ 78.511088][ T5528] RDX: 00007ffc60236069 RSI: 000000000000000a RDI: 00007ffc60236060
[ 78.519317][ T5528] RBP: 00007ffc60236060 R08: 00000000ffffffff R09: 00007ffc60235e30
[ 78.528160][ T5528] R10: 00005555573cc8b3 R11: 0000000000000246 R12: 00007fc0c0ce6b24
[ 78.536316][ T5528] R13: 00007ffc60237120 R14: 00005555573cc810 R15: 00007ffc60237160
[ 78.544501][ T5528]
[ 78.565145][ T5528] ==================================================================
[ 78.573264][ T5528] BUG: KASAN: use-after-free in qd_unlock+0x39/0x2e0
[ 78.579970][ T5528] Read of size 8 at addr ffff88807375f090 by task syz-executor.0/5528
[ 78.588241][ T5528]
[ 78.591107][ T5528] CPU: 1 PID: 5528 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 78.600581][ T5528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 78.610996][ T5528] Call Trace:
[ 78.614285][ T5528]
[ 78.617223][ T5528] dump_stack_lvl+0x1b1/0x290
[ 78.621924][ T5528] ? nf_tcp_handle_invalid+0x630/0x630
[ 78.627523][ T5528] ? __wake_up_klogd+0xcd/0x100
[ 78.632448][ T5528] ? panic+0x710/0x710
[ 78.636707][ T5528] ? _printk+0xc0/0x100
[ 78.640867][ T5528] ? _raw_spin_lock_irqsave+0x8e/0x100
[ 78.646428][ T5528] print_address_description+0x74/0x340
[ 78.652079][ T5528] print_report+0x107/0x1f0
[ 78.656603][ T5528] ? __virt_addr_valid+0x21b/0x2d0
[ 78.661824][ T5528] ? __phys_addr+0xb5/0x160
[ 78.666349][ T5528] ? qd_unlock+0x39/0x2e0
[ 78.670696][ T5528] kasan_report+0xcd/0x100
[ 78.675391][ T5528] ? qd_unlock+0x39/0x2e0
[ 78.679823][ T5528] kasan_check_range+0x2a7/0x2e0
[ 78.684781][ T5528] qd_unlock+0x39/0x2e0
[ 78.689226][ T5528] gfs2_quota_sync+0x768/0x8b0
[ 78.694026][ T5528] gfs2_sync_fs+0x49/0xb0
[ 78.698364][ T5528] sync_filesystem+0xe8/0x220
[ 78.703055][ T5528] generic_shutdown_super+0x6b/0x310
[ 78.709137][ T5528] kill_block_super+0x79/0xd0
[ 78.713912][ T5528] deactivate_locked_super+0xa7/0xf0
[ 78.719331][ T5528] cleanup_mnt+0x494/0x520
[ 78.723770][ T5528] ? lockdep_hardirqs_on+0x8d/0x130
[ 78.728982][ T5528] task_work_run+0x243/0x300
[ 78.733682][ T5528] ? task_work_cancel+0x290/0x290
[ 78.738727][ T5528] ? exit_to_user_mode_loop+0x42/0x150
[ 78.744200][ T5528] exit_to_user_mode_loop+0x124/0x150
[ 78.749675][ T5528] exit_to_user_mode_prepare+0xb2/0x140
[ 78.755246][ T5528] syscall_exit_to_user_mode+0x26/0x60
[ 78.760715][ T5528] do_syscall_64+0x49/0xb0
[ 78.765144][ T5528] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.771076][ T5528] RIP: 0033:0x7fc0c0c8d517
[ 78.775526][ T5528] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 78.795318][ T5528] RSP: 002b:00007ffc60235f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 78.803844][ T5528] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0c0c8d517
[ 78.812183][ T5528] RDX: 00007ffc60236069 RSI: 000000000000000a RDI: 00007ffc60236060
[ 78.820167][ T5528] RBP: 00007ffc60236060 R08: 00000000ffffffff R09: 00007ffc60235e30
[ 78.828148][ T5528] R10: 00005555573cc8b3 R11: 0000000000000246 R12: 00007fc0c0ce6b24
[ 78.836124][ T5528] R13: 00007ffc60237120 R14: 00005555573cc810 R15: 00007ffc60237160
[ 78.844468][ T5528]
[ 78.847493][ T5528]
[ 78.849819][ T5528] Allocated by task 5598:
[ 78.854148][ T5528] kasan_set_track+0x3d/0x60
[ 78.858752][ T5528] __kasan_slab_alloc+0x65/0x70
[ 78.863698][ T5528] kmem_cache_alloc+0x1b3/0x350
[ 78.868557][ T5528] qd_alloc+0x51/0x250
[ 78.872636][ T5528] gfs2_quota_init+0x7c4/0x10e0
[ 78.877513][ T5528] gfs2_make_fs_rw+0x48e/0x590
[ 78.882369][ T5528] gfs2_fill_super+0x2357/0x2700
[ 78.887404][ T5528] get_tree_bdev+0x400/0x620
[ 78.892089][ T5528] gfs2_get_tree+0x50/0x210
[ 78.896597][ T5528] vfs_get_tree+0x88/0x270
[ 78.901108][ T5528] do_new_mount+0x289/0xad0
[ 78.905612][ T5528] __se_sys_mount+0x2d3/0x3c0
[ 78.910293][ T5528] do_syscall_64+0x3d/0xb0
[ 78.914894][ T5528] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 78.920981][ T5528]
[ 78.923303][ T5528] Freed by task 5528:
[ 78.927288][ T5528] kasan_set_track+0x3d/0x60
[ 78.931886][ T5528] kasan_save_free_info+0x27/0x40
[ 78.936914][ T5528] ____kasan_slab_free+0xd6/0x120
[ 78.941956][ T5528] slab_free_freelist_hook+0x12e/0x1a0
[ 78.947517][ T5528] kmem_cache_free+0x94/0x1d0
[ 78.952201][ T5528] rcu_core+0x9c1/0x1690
[ 78.956620][ T5528] __do_softirq+0x277/0x738
[ 78.961219][ T5528]
[ 78.963541][ T5528] Last potentially related work creation:
[ 78.969351][ T5528] kasan_save_stack+0x2b/0x50
[ 78.974054][ T5528] __kasan_record_aux_stack+0xb0/0xc0
[ 78.979533][ T5528] call_rcu+0x163/0xa70
[ 78.984061][ T5528] gfs2_quota_cleanup+0x457/0x6b0
[ 78.989102][ T5528] gfs2_make_fs_ro+0x517/0x610
[ 78.994045][ T5528] gfs2_withdraw+0x609/0x1540
[ 78.998902][ T5528] gfs2_inode_refresh+0xb2d/0xf60
[ 79.004027][ T5528] gfs2_instantiate+0x15e/0x220
[ 79.008968][ T5528] gfs2_glock_wait+0x1d9/0x2a0
[ 79.013740][ T5528] do_sync+0x485/0xc80
[ 79.017819][ T5528] gfs2_quota_sync+0x3da/0x8b0
[ 79.022592][ T5528] gfs2_sync_fs+0x49/0xb0
[ 79.027010][ T5528] sync_filesystem+0xe8/0x220
[ 79.031715][ T5528] generic_shutdown_super+0x6b/0x310
[ 79.037027][ T5528] kill_block_super+0x79/0xd0
[ 79.041805][ T5528] deactivate_locked_super+0xa7/0xf0
[ 79.047133][ T5528] cleanup_mnt+0x494/0x520
[ 79.051562][ T5528] task_work_run+0x243/0x300
[ 79.056343][ T5528] exit_to_user_mode_loop+0x124/0x150
[ 79.061822][ T5528] exit_to_user_mode_prepare+0xb2/0x140
[ 79.067391][ T5528] syscall_exit_to_user_mode+0x26/0x60
[ 79.068873][ T4388] Bluetooth: hci0: command 0x041b tx timeout
[ 79.072844][ T5528] do_syscall_64+0x49/0xb0
[ 79.083754][ T5528] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.089928][ T5528]
[ 79.092360][ T5528] The buggy address belongs to the object at ffff88807375f000
[ 79.092360][ T5528] which belongs to the cache gfs2_quotad of size 272
[ 79.107400][ T5528] The buggy address is located 144 bytes inside of
[ 79.107400][ T5528] 272-byte region [ffff88807375f000, ffff88807375f110)
[ 79.120974][ T5528]
[ 79.123306][ T5528] The buggy address belongs to the physical page:
[ 79.129838][ T5528] page:ffffea0001cdd7c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7375f
[ 79.140443][ T5528] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 79.148785][ T5528] raw: 00fff00000000200 ffff88814617c3c0 dead000000000122 0000000000000000
[ 79.157560][ T5528] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 79.166458][ T5528] page dumped because: kasan: bad access detected
[ 79.173048][ T5528] page_owner tracks the page as allocated
[ 79.179034][ T5528] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5598, tgid 5597 (syz-executor.0), ts 77686641655, free_ts 77389531737
[ 79.200754][ T5528] get_page_from_freelist+0x742/0x7c0
[ 79.206230][ T5528] __alloc_pages+0x259/0x560
[ 79.210836][ T5528] alloc_slab_page+0xbd/0x190
[ 79.215541][ T5528] allocate_slab+0x5e/0x3c0
[ 79.220062][ T5528] ___slab_alloc+0x782/0xe20
[ 79.224754][ T5528] kmem_cache_alloc+0x268/0x350
[ 79.230482][ T5528] qd_alloc+0x51/0x250
[ 79.234578][ T5528] gfs2_quota_init+0x7c4/0x10e0
[ 79.239609][ T5528] gfs2_make_fs_rw+0x48e/0x590
[ 79.244378][ T5528] gfs2_fill_super+0x2357/0x2700
[ 79.249434][ T5528] get_tree_bdev+0x400/0x620
[ 79.254035][ T5528] gfs2_get_tree+0x50/0x210
[ 79.258630][ T5528] vfs_get_tree+0x88/0x270
[ 79.263390][ T5528] do_new_mount+0x289/0xad0
[ 79.267981][ T5528] __se_sys_mount+0x2d3/0x3c0
[ 79.272746][ T5528] do_syscall_64+0x3d/0xb0
[ 79.277273][ T5528] page last free stack trace:
[ 79.281939][ T5528] free_pcp_prepare+0x751/0x780
[ 79.286801][ T5528] free_unref_page+0x19/0x4c0
[ 79.291489][ T5528] __unfreeze_partials+0x1a5/0x1e0
[ 79.296613][ T5528] put_cpu_partial+0x106/0x170
[ 79.301410][ T5528] qlist_free_all+0x2b/0x70
[ 79.306096][ T5528] kasan_quarantine_reduce+0x156/0x170
[ 79.311654][ T5528] __kasan_slab_alloc+0x1f/0x70
[ 79.316512][ T5528] kmem_cache_alloc_lru+0x183/0x320
[ 79.321718][ T5528] new_inode_pseudo+0x81/0x1d0
[ 79.326488][ T5528] create_pipe_files+0x4b/0x6e0
[ 79.331343][ T5528] __do_pipe_flags+0x46/0x200
[ 79.336204][ T5528] do_pipe2+0x8f/0x2b0
[ 79.340371][ T5528] __x64_sys_pipe+0x36/0x40
[ 79.344970][ T5528] do_syscall_64+0x3d/0xb0
[ 79.349393][ T5528] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.355298][ T5528]
[ 79.357625][ T5528] Memory state around the buggy address:
[ 79.363341][ T5528] ffff88807375ef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.372022][ T5528] ffff88807375f000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.380184][ T5528] >ffff88807375f080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 79.388384][ T5528] ^
[ 79.393065][ T5528] ffff88807375f100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.401306][ T5528] ffff88807375f180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 79.409631][ T5528] ==================================================================
[ 79.422407][ T5528] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 79.429891][ T5528] CPU: 1 PID: 5528 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 79.438986][ T5528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 79.449112][ T5528] Call Trace:
[ 79.452377][ T5528]
[ 79.455468][ T5528] dump_stack_lvl+0x1b1/0x290
[ 79.460251][ T5528] ? nf_tcp_handle_invalid+0x630/0x630
[ 79.465725][ T5528] ? panic+0x710/0x710
[ 79.469798][ T5528] ? lock_release+0x81/0x820
[ 79.474387][ T5528] ? vscnprintf+0x59/0x80
[ 79.478878][ T5528] panic+0x2d6/0x710
[ 79.482841][ T5528] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 79.488988][ T5528] ? check_panic_on_warn+0x1d/0xa0
[ 79.494087][ T5528] ? memcpy_page_flushcache+0x100/0x100
[ 79.499705][ T5528] ? _raw_spin_unlock_irqrestore+0x110/0x120
[ 79.505850][ T5528] ? _raw_spin_unlock+0x40/0x40
[ 79.510865][ T5528] ? print_report+0x1b4/0x1f0
[ 79.515551][ T5528] check_panic_on_warn+0x80/0xa0
[ 79.520474][ T5528] ? qd_unlock+0x39/0x2e0
[ 79.524830][ T5528] end_report+0x47/0x90
[ 79.529067][ T5528] kasan_report+0xda/0x100
[ 79.533564][ T5528] ? qd_unlock+0x39/0x2e0
[ 79.537886][ T5528] kasan_check_range+0x2a7/0x2e0
[ 79.542811][ T5528] qd_unlock+0x39/0x2e0
[ 79.547040][ T5528] gfs2_quota_sync+0x768/0x8b0
[ 79.551882][ T5528] gfs2_sync_fs+0x49/0xb0
[ 79.556465][ T5528] sync_filesystem+0xe8/0x220
[ 79.561319][ T5528] generic_shutdown_super+0x6b/0x310
[ 79.566680][ T5528] kill_block_super+0x79/0xd0
[ 79.571510][ T5528] deactivate_locked_super+0xa7/0xf0
[ 79.576883][ T5528] cleanup_mnt+0x494/0x520
[ 79.581327][ T5528] ? lockdep_hardirqs_on+0x8d/0x130
[ 79.587388][ T5528] task_work_run+0x243/0x300
[ 79.592063][ T5528] ? task_work_cancel+0x290/0x290
[ 79.597086][ T5528] ? exit_to_user_mode_loop+0x42/0x150
[ 79.602625][ T5528] exit_to_user_mode_loop+0x124/0x150
[ 79.608087][ T5528] exit_to_user_mode_prepare+0xb2/0x140
[ 79.613630][ T5528] syscall_exit_to_user_mode+0x26/0x60
[ 79.619072][ T5528] do_syscall_64+0x49/0xb0
[ 79.623567][ T5528] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.629534][ T5528] RIP: 0033:0x7fc0c0c8d517
[ 79.633932][ T5528] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.654217][ T5528] RSP: 002b:00007ffc60235f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.662810][ T5528] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0c0c8d517
[ 79.670863][ T5528] RDX: 00007ffc60236069 RSI: 000000000000000a RDI: 00007ffc60236060
[ 79.678904][ T5528] RBP: 00007ffc60236060 R08: 00000000ffffffff R09: 00007ffc60235e30
[ 79.686861][ T5528] R10: 00005555573cc8b3 R11: 0000000000000246 R12: 00007fc0c0ce6b24
[ 79.694901][ T5528] R13: 00007ffc60237120 R14: 00005555573cc810 R15: 00007ffc60237160
[ 79.702954][ T5528]
[ 79.706249][ T5528] Kernel Offset: disabled
[ 79.710559][ T5528] Rebooting in 86400 seconds..