[ 76.489448][ T14] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.187' (ECDSA) to the list of known hosts.
2023/01/13 04:41:39 ignoring optional flag "sandboxArg"="0"
2023/01/13 04:41:39 parsed 1 programs
2023/01/13 04:41:39 executed programs: 0
[ 77.905313][ T4389] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 77.914282][ T4389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 77.922659][ T4389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 77.931546][ T4389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.939409][ T4389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 77.946811][ T4389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.043868][ T5532] chnl_net:caif_netlink_parms(): no params data found
[ 78.081519][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.089278][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.098960][ T5532] device bridge_slave_0 entered promiscuous mode
[ 78.107826][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.114949][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.123655][ T5532] device bridge_slave_1 entered promiscuous mode
[ 78.176208][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.195537][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.220574][ T5532] team0: Port device team_slave_0 added
[ 78.228794][ T5532] team0: Port device team_slave_1 added
[ 78.245487][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.252794][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.279031][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.291152][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.298369][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.325492][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.354336][ T5532] device hsr_slave_0 entered promiscuous mode
[ 78.361293][ T5532] device hsr_slave_1 entered promiscuous mode
[ 79.060682][ T5532] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.071331][ T5532] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 79.084088][ T5532] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.094935][ T5532] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.167836][ T5532] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.183322][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 79.193528][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 79.204917][ T5532] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.217028][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 79.225791][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 79.235347][ T14] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.242869][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.252227][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 79.278426][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 79.287730][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 79.296227][ T4774] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.303416][ T4774] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.311263][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 79.320501][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 79.331165][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 79.340997][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 79.351264][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 79.360509][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 79.373546][ T5532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 79.389272][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 79.398512][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 79.408036][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 79.417415][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 79.615313][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 79.624012][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 79.638547][ T5532] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.660043][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 79.671578][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 79.694122][ T5532] device veth0_vlan entered promiscuous mode
[ 79.705209][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 79.716336][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 79.732168][ T5532] device veth1_vlan entered promiscuous mode
[ 79.742021][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 79.751752][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 79.760511][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 79.788483][ T5532] device veth0_macvtap entered promiscuous mode
[ 79.795795][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 79.804544][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 79.813801][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 79.824617][ T5532] device veth1_macvtap entered promiscuous mode
[ 79.833650][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 79.843039][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 79.860602][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.871912][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 79.881813][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 79.894107][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.903600][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 79.913040][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 79.924328][ T5532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.934852][ T5532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.944153][ T5532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.954494][ T5532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.017318][ T4389] Bluetooth: hci0: command 0x0409 tx timeout
[ 80.027079][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.035157][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.048345][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 80.080701][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.089962][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.101258][ T901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 80.492955][ T5595] loop0: detected capacity change from 0 to 32768
[ 80.509750][ T5595] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 80.519725][ T5595] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 80.540055][ T5595] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 80.552425][ T901] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 80.561116][ T901] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 80.626776][ T901] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 65ms
[ 80.635373][ T901] gfs2: fsid=syz:syz.0: jid=0: Done
[ 80.642799][ T5595] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 80.800272][ T5595] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 80.863506][ T5532] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 80.863506][ T5532] inode = 11 2340
[ 80.863506][ T5532] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 460
[ 80.886032][ T5532] gfs2: fsid=syz:syz.0: G: s:EX n:2/924 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[ 80.896933][ T5532] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5532 [syz-executor.0] gfs2_quota_sync+0x3da/0x8b0
[ 80.908078][ T5532] gfs2: fsid=syz:syz.0: I: n:11/2340 t:8 f:0x00 d:0x00000201 s:176 p:0
[ 80.917012][ T5532] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 80.931175][ T5532] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1475
[ 80.945762][ T5532] CPU: 1 PID: 5532 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 80.955001][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 80.965610][ T5532] Call Trace:
[ 80.969016][ T5532]
[ 80.971975][ T5532] dump_stack_lvl+0x1b1/0x290
[ 80.976791][ T5532] ? nf_tcp_handle_invalid+0x630/0x630
[ 80.982373][ T5532] ? panic+0x710/0x710
[ 80.986512][ T5532] ? do_raw_spin_unlock+0x134/0x8a0
[ 80.991909][ T5532] gfs2_assert_warn_i+0x19a/0x2e0
[ 80.996990][ T5532] gfs2_quota_cleanup+0x4c6/0x6b0
[ 81.002408][ T5532] gfs2_make_fs_ro+0x517/0x610
[ 81.007182][ T5532] ? __might_sleep+0xc0/0xc0
[ 81.011774][ T5532] ? gfs2_dinode_out+0xad0/0xad0
[ 81.016890][ T5532] ? gfs2_glock_nq+0xdaa/0x1700
[ 81.021757][ T5532] ? gfs2_instantiate+0x207/0x220
[ 81.026871][ T5532] ? gfs2_glock_wait+0x213/0x2a0
[ 81.031991][ T5532] gfs2_withdraw+0x609/0x1540
[ 81.036771][ T5532] ? gfs2_lm+0x220/0x220
[ 81.041026][ T5532] ? make_kgid+0x1fe/0x710
[ 81.045438][ T5532] ? gfs2_withdraw+0x5cc/0x1540
[ 81.050286][ T5532] ? gfs2_consist_inode_i+0xf3/0x110
[ 81.055784][ T5532] gfs2_inode_refresh+0xb2d/0xf60
[ 81.060832][ T5532] ? gfs2_inode_metasync+0xf0/0xf0
[ 81.065944][ T5532] ? _raw_spin_unlock+0x24/0x40
[ 81.071147][ T5532] ? gfs2_glock_nq+0xdaa/0x1700
[ 81.076340][ T5532] ? do_raw_spin_unlock+0x134/0x8a0
[ 81.081629][ T5532] gfs2_instantiate+0x15e/0x220
[ 81.086482][ T5532] gfs2_glock_wait+0x1d9/0x2a0
[ 81.091546][ T5532] do_sync+0x485/0xc80
[ 81.095649][ T5532] ? gfs2_quota_sync+0x3da/0x8b0
[ 81.100590][ T5532] ? slot_put+0x1f0/0x1f0
[ 81.104916][ T5532] ? do_raw_spin_lock+0x147/0x3a0
[ 81.110197][ T5532] ? __lock_acquire+0x1f60/0x1f60
[ 81.115305][ T5532] ? gfs2_quota_sync+0x3da/0x8b0
[ 81.120244][ T5532] ? do_raw_spin_unlock+0x134/0x8a0
[ 81.125986][ T5532] ? qd_check_sync+0xba/0x3f0
[ 81.130960][ T5532] gfs2_quota_sync+0x3da/0x8b0
[ 81.135835][ T5532] gfs2_sync_fs+0x49/0xb0
[ 81.140171][ T5532] sync_filesystem+0xe8/0x220
[ 81.145723][ T5532] generic_shutdown_super+0x6b/0x310
[ 81.151101][ T5532] kill_block_super+0x79/0xd0
[ 81.155779][ T5532] deactivate_locked_super+0xa7/0xf0
[ 81.161329][ T5532] cleanup_mnt+0x494/0x520
[ 81.165752][ T5532] ? lockdep_hardirqs_on+0x8d/0x130
[ 81.171034][ T5532] task_work_run+0x243/0x300
[ 81.175630][ T5532] ? task_work_cancel+0x290/0x290
[ 81.180928][ T5532] ? exit_to_user_mode_loop+0x42/0x150
[ 81.186385][ T5532] exit_to_user_mode_loop+0x124/0x150
[ 81.191760][ T5532] exit_to_user_mode_prepare+0xb2/0x140
[ 81.197401][ T5532] syscall_exit_to_user_mode+0x26/0x60
[ 81.202953][ T5532] do_syscall_64+0x49/0xb0
[ 81.207382][ T5532] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.213534][ T5532] RIP: 0033:0x7f60d0e8d517
[ 81.218035][ T5532] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 81.238716][ T5532] RSP: 002b:00007fff45264528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 81.247339][ T5532] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f60d0e8d517
[ 81.255660][ T5532] RDX: 00007fff452645f9 RSI: 000000000000000a RDI: 00007fff452645f0
[ 81.263714][ T5532] RBP: 00007fff452645f0 R08: 00000000ffffffff R09: 00007fff452643c0
[ 81.272114][ T5532] R10: 00005555557138b3 R11: 0000000000000246 R12: 00007f60d0ee6b24
[ 81.280511][ T5532] R13: 00007fff452656b0 R14: 0000555555713810 R15: 00007fff452656f0
[ 81.288545][ T5532]
[ 81.302574][ T5532] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 81.326061][ T5532] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 81.335332][ T5532] gfs2: fsid=syz:syz.0: File system withdrawn
[ 81.343764][ T5532] CPU: 0 PID: 5532 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 81.353095][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 81.363253][ T5532] Call Trace:
[ 81.366563][ T5532]
[ 81.369522][ T5532] dump_stack_lvl+0x1b1/0x290
[ 81.374407][ T5532] ? nf_tcp_handle_invalid+0x630/0x630
[ 81.380040][ T5532] ? panic+0x710/0x710
[ 81.384238][ T5532] ? kobject_uevent_env+0x46b/0x8e0
[ 81.389474][ T5532] gfs2_withdraw+0xf33/0x1540
[ 81.394508][ T5532] ? gfs2_lm+0x220/0x220
[ 81.398841][ T5532] ? make_kgid+0x1fe/0x710
[ 81.403362][ T5532] ? gfs2_consist_inode_i+0xf3/0x110
[ 81.408647][ T5532] gfs2_inode_refresh+0xb2d/0xf60
[ 81.413682][ T5532] ? gfs2_inode_metasync+0xf0/0xf0
[ 81.418820][ T5532] ? _raw_spin_unlock+0x24/0x40
[ 81.423701][ T5532] ? gfs2_glock_nq+0xdaa/0x1700
[ 81.428644][ T5532] ? do_raw_spin_unlock+0x134/0x8a0
[ 81.434028][ T5532] gfs2_instantiate+0x15e/0x220
[ 81.439143][ T5532] gfs2_glock_wait+0x1d9/0x2a0
[ 81.443913][ T5532] do_sync+0x485/0xc80
[ 81.448250][ T5532] ? gfs2_quota_sync+0x3da/0x8b0
[ 81.453231][ T5532] ? slot_put+0x1f0/0x1f0
[ 81.457566][ T5532] ? do_raw_spin_lock+0x147/0x3a0
[ 81.462676][ T5532] ? __lock_acquire+0x1f60/0x1f60
[ 81.467792][ T5532] ? gfs2_quota_sync+0x3da/0x8b0
[ 81.472791][ T5532] ? do_raw_spin_unlock+0x134/0x8a0
[ 81.479128][ T5532] ? qd_check_sync+0xba/0x3f0
[ 81.483820][ T5532] gfs2_quota_sync+0x3da/0x8b0
[ 81.488708][ T5532] gfs2_sync_fs+0x49/0xb0
[ 81.493051][ T5532] sync_filesystem+0xe8/0x220
[ 81.497753][ T5532] generic_shutdown_super+0x6b/0x310
[ 81.503137][ T5532] kill_block_super+0x79/0xd0
[ 81.507991][ T5532] deactivate_locked_super+0xa7/0xf0
[ 81.513363][ T5532] cleanup_mnt+0x494/0x520
[ 81.517774][ T5532] ? lockdep_hardirqs_on+0x8d/0x130
[ 81.523675][ T5532] task_work_run+0x243/0x300
[ 81.528377][ T5532] ? task_work_cancel+0x290/0x290
[ 81.533432][ T5532] ? exit_to_user_mode_loop+0x42/0x150
[ 81.538917][ T5532] exit_to_user_mode_loop+0x124/0x150
[ 81.544353][ T5532] exit_to_user_mode_prepare+0xb2/0x140
[ 81.550176][ T5532] syscall_exit_to_user_mode+0x26/0x60
[ 81.555660][ T5532] do_syscall_64+0x49/0xb0
[ 81.560170][ T5532] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.566323][ T5532] RIP: 0033:0x7f60d0e8d517
[ 81.570735][ T5532] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 81.590898][ T5532] RSP: 002b:00007fff45264528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 81.599417][ T5532] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f60d0e8d517
[ 81.607607][ T5532] RDX: 00007fff452645f9 RSI: 000000000000000a RDI: 00007fff452645f0
[ 81.615702][ T5532] RBP: 00007fff452645f0 R08: 00000000ffffffff R09: 00007fff452643c0
[ 81.623796][ T5532] R10: 00005555557138b3 R11: 0000000000000246 R12: 00007f60d0ee6b24
[ 81.631960][ T5532] R13: 00007fff452656b0 R14: 0000555555713810 R15: 00007fff452656f0
[ 81.640137][ T5532]
[ 81.648750][ T5532] ==================================================================
[ 81.656948][ T5532] BUG: KASAN: use-after-free in qd_unlock+0x43/0x2f0
[ 81.663736][ T5532] Read of size 8 at addr ffff888072eda090 by task syz-executor.0/5532
[ 81.672166][ T5532]
[ 81.674584][ T5532] CPU: 1 PID: 5532 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 81.683699][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 81.693857][ T5532] Call Trace:
[ 81.697160][ T5532]
[ 81.700099][ T5532] dump_stack_lvl+0x1b1/0x290
[ 81.706357][ T5532] ? nf_tcp_handle_invalid+0x630/0x630
[ 81.711890][ T5532] ? __wake_up_klogd+0xcd/0x100
[ 81.716855][ T5532] ? panic+0x710/0x710
[ 81.721021][ T5532] ? _printk+0xc0/0x100
[ 81.725193][ T5532] ? _raw_spin_lock_irqsave+0x8e/0x100
[ 81.730693][ T5532] print_address_description+0x74/0x340
[ 81.736262][ T5532] print_report+0x107/0x1f0
[ 81.740877][ T5532] ? __virt_addr_valid+0x21b/0x2d0
[ 81.746272][ T5532] ? __phys_addr+0xb5/0x160
[ 81.751227][ T5532] ? qd_unlock+0x43/0x2f0
[ 81.755577][ T5532] kasan_report+0xcd/0x100
[ 81.760012][ T5532] ? qd_unlock+0x43/0x2f0
[ 81.764618][ T5532] kasan_check_range+0x2a7/0x2e0
[ 81.769571][ T5532] qd_unlock+0x43/0x2f0
[ 81.773745][ T5532] gfs2_quota_sync+0x768/0x8b0
[ 81.778529][ T5532] gfs2_sync_fs+0x49/0xb0
[ 81.782967][ T5532] sync_filesystem+0xe8/0x220
[ 81.787673][ T5532] generic_shutdown_super+0x6b/0x310
[ 81.793336][ T5532] kill_block_super+0x79/0xd0
[ 81.798071][ T5532] deactivate_locked_super+0xa7/0xf0
[ 81.804434][ T5532] cleanup_mnt+0x494/0x520
[ 81.808883][ T5532] ? lockdep_hardirqs_on+0x8d/0x130
[ 81.814535][ T5532] task_work_run+0x243/0x300
[ 81.819164][ T5532] ? task_work_cancel+0x290/0x290
[ 81.824483][ T5532] ? exit_to_user_mode_loop+0x42/0x150
[ 81.830053][ T5532] exit_to_user_mode_loop+0x124/0x150
[ 81.835443][ T5532] exit_to_user_mode_prepare+0xb2/0x140
[ 81.841011][ T5532] syscall_exit_to_user_mode+0x26/0x60
[ 81.846487][ T5532] do_syscall_64+0x49/0xb0
[ 81.851021][ T5532] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.856939][ T5532] RIP: 0033:0x7f60d0e8d517
[ 81.861449][ T5532] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 81.881327][ T5532] RSP: 002b:00007fff45264528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 81.890020][ T5532] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f60d0e8d517
[ 81.898006][ T5532] RDX: 00007fff452645f9 RSI: 000000000000000a RDI: 00007fff452645f0
[ 81.906013][ T5532] RBP: 00007fff452645f0 R08: 00000000ffffffff R09: 00007fff452643c0
[ 81.914624][ T5532] R10: 00005555557138b3 R11: 0000000000000246 R12: 00007f60d0ee6b24
[ 81.923342][ T5532] R13: 00007fff452656b0 R14: 0000555555713810 R15: 00007fff452656f0
[ 81.931683][ T5532]
[ 81.934714][ T5532]
[ 81.937040][ T5532] Allocated by task 5595:
[ 81.941368][ T5532] kasan_set_track+0x3d/0x60
[ 81.945974][ T5532] __kasan_slab_alloc+0x65/0x70
[ 81.950962][ T5532] kmem_cache_alloc+0x1b3/0x350
[ 81.955831][ T5532] qd_alloc+0x51/0x250
[ 81.960097][ T5532] gfs2_quota_init+0x7c4/0x10e0
[ 81.964969][ T5532] gfs2_make_fs_rw+0x48e/0x590
[ 81.970090][ T5532] gfs2_fill_super+0x2357/0x2700
[ 81.975042][ T5532] get_tree_bdev+0x400/0x620
[ 81.979652][ T5532] gfs2_get_tree+0x50/0x210
[ 81.984182][ T5532] vfs_get_tree+0x88/0x270
[ 81.988693][ T5532] do_new_mount+0x289/0xad0
[ 81.993395][ T5532] __se_sys_mount+0x2d3/0x3c0
[ 81.998261][ T5532] do_syscall_64+0x3d/0xb0
[ 82.002869][ T5532] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 82.008786][ T5532]
[ 82.011112][ T5532] Freed by task 15:
[ 82.014935][ T5532] kasan_set_track+0x3d/0x60
[ 82.019643][ T5532] kasan_save_free_info+0x27/0x40
[ 82.024971][ T5532] ____kasan_slab_free+0xd6/0x120
[ 82.030114][ T5532] slab_free_freelist_hook+0x12e/0x1a0
[ 82.035613][ T5532] kmem_cache_free+0x94/0x1d0
[ 82.040338][ T5532] rcu_core+0x9c1/0x1690
[ 82.044597][ T5532] __do_softirq+0x277/0x738
[ 82.049117][ T5532]
[ 82.051446][ T5532] Last potentially related work creation:
[ 82.057167][ T5532] kasan_save_stack+0x2b/0x50
[ 82.061871][ T5532] __kasan_record_aux_stack+0xb0/0xc0
[ 82.067552][ T5532] call_rcu+0x163/0xa70
[ 82.071725][ T5532] gfs2_quota_cleanup+0x457/0x6b0
[ 82.076768][ T5532] gfs2_make_fs_ro+0x517/0x610
[ 82.081630][ T5532] gfs2_withdraw+0x609/0x1540
[ 82.086321][ T5532] gfs2_inode_refresh+0xb2d/0xf60
[ 82.091713][ T5532] gfs2_instantiate+0x15e/0x220
[ 82.096755][ T5532] gfs2_glock_wait+0x1d9/0x2a0
[ 82.101532][ T5532] do_sync+0x485/0xc80
[ 82.105699][ T5532] gfs2_quota_sync+0x3da/0x8b0
[ 82.110483][ T5532] gfs2_sync_fs+0x49/0xb0
[ 82.114827][ T5532] sync_filesystem+0xe8/0x220
[ 82.119523][ T5532] generic_shutdown_super+0x6b/0x310
[ 82.124859][ T5532] kill_block_super+0x79/0xd0
[ 82.129644][ T5532] deactivate_locked_super+0xa7/0xf0
[ 82.135214][ T5532] cleanup_mnt+0x494/0x520
[ 82.139727][ T5532] task_work_run+0x243/0x300
[ 82.144440][ T5532] exit_to_user_mode_loop+0x124/0x150
[ 82.149833][ T5532] exit_to_user_mode_prepare+0xb2/0x140
[ 82.155655][ T5532] syscall_exit_to_user_mode+0x26/0x60
[ 82.161124][ T5532] do_syscall_64+0x49/0xb0
[ 82.165549][ T5532] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 82.171452][ T5532]
[ 82.173780][ T5532] The buggy address belongs to the object at ffff888072eda000
[ 82.173780][ T5532] which belongs to the cache gfs2_quotad of size 272
[ 82.193009][ T5532] The buggy address is located 144 bytes inside of
[ 82.193009][ T5532] 272-byte region [ffff888072eda000, ffff888072eda110)
[ 82.207013][ T5532]
[ 82.209437][ T5532] The buggy address belongs to the physical page:
[ 82.215853][ T5532] page:ffffea0001cbb680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72eda
[ 82.226188][ T5532] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 82.233752][ T5532] raw: 00fff00000000200 ffff8880194e2dc0 dead000000000122 0000000000000000
[ 82.242349][ T5532] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 82.251026][ T5532] page dumped because: kasan: bad access detected
[ 82.257489][ T5532] page_owner tracks the page as allocated
[ 82.263392][ T5532] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5595, tgid 5594 (syz-executor.0), ts 80763567012, free_ts 80559789999
[ 82.285025][ T5532] get_page_from_freelist+0x742/0x7c0
[ 82.290637][ T5532] __alloc_pages+0x259/0x560
[ 82.295249][ T5532] alloc_slab_page+0xbd/0x190
[ 82.299933][ T5532] allocate_slab+0x5e/0x3c0
[ 82.304800][ T5532] ___slab_alloc+0x782/0xe20
[ 82.309405][ T5532] kmem_cache_alloc+0x268/0x350
[ 82.314268][ T5532] qd_alloc+0x51/0x250
[ 82.318449][ T5532] gfs2_quota_init+0x7c4/0x10e0
[ 82.323363][ T5532] gfs2_make_fs_rw+0x48e/0x590
[ 82.328438][ T5532] gfs2_fill_super+0x2357/0x2700
[ 82.333474][ T5532] get_tree_bdev+0x400/0x620
[ 82.338078][ T5532] gfs2_get_tree+0x50/0x210
[ 82.342589][ T5532] vfs_get_tree+0x88/0x270
[ 82.347109][ T5532] do_new_mount+0x289/0xad0
[ 82.351799][ T5532] __se_sys_mount+0x2d3/0x3c0
[ 82.356933][ T5532] do_syscall_64+0x3d/0xb0
[ 82.361463][ T5532] page last free stack trace:
[ 82.366147][ T5532] free_pcp_prepare+0x751/0x780
[ 82.371203][ T5532] free_unref_page+0x19/0x4c0
[ 82.375904][ T5532] __unfreeze_partials+0x1a5/0x1e0
[ 82.381060][ T5532] put_cpu_partial+0x106/0x170
[ 82.385935][ T5532] qlist_free_all+0x2b/0x70
[ 82.390532][ T5532] kasan_quarantine_reduce+0x156/0x170
[ 82.396094][ T5532] __kasan_slab_alloc+0x1f/0x70
[ 82.401159][ T5532] kmem_cache_alloc+0x1b3/0x350
[ 82.406194][ T5532] mas_alloc_nodes+0x1fd/0x650
[ 82.411004][ T5532] mas_preallocate+0x133/0x340
[ 82.415878][ T5532] __vma_adjust+0x865/0x21b0
[ 82.420493][ T5532] setup_arg_pages+0x855/0xba0
[ 82.425368][ T5532] load_elf_binary+0xba2/0x2830
[ 82.430413][ T5532] bprm_execve+0x8dc/0x1590
[ 82.434941][ T5532] do_execveat_common+0x598/0x750
[ 82.440073][ T5532] __x64_sys_execve+0x8e/0xa0
[ 82.444766][ T5532]
[ 82.447270][ T5532] Memory state around the buggy address:
[ 82.452902][ T5532] ffff888072ed9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 82.461348][ T5532] ffff888072eda000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 82.469685][ T5532] >ffff888072eda080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 82.477861][ T5532] ^
[ 82.482461][ T5532] ffff888072eda100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 82.490660][ T5532] ffff888072eda180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 82.499517][ T5532] ==================================================================
[ 82.516620][ T4389] Bluetooth: hci0: command 0x041b tx timeout
[ 82.535376][ T5532] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 82.544791][ T5532] CPU: 1 PID: 5532 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 82.554697][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 82.564768][ T5532] Call Trace:
[ 82.568060][ T5532]
[ 82.571003][ T5532] dump_stack_lvl+0x1b1/0x290
[ 82.575795][ T5532] ? nf_tcp_handle_invalid+0x630/0x630
[ 82.581372][ T5532] ? panic+0x710/0x710
[ 82.585808][ T5532] ? lock_release+0x81/0x820
[ 82.590874][ T5532] ? vscnprintf+0x59/0x80
[ 82.595570][ T5532] panic+0x2d6/0x710
[ 82.599482][ T5532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 82.605829][ T5532] ? check_panic_on_warn+0x1d/0xa0
[ 82.610961][ T5532] ? memcpy_page_flushcache+0x100/0x100
[ 82.616611][ T5532] ? _raw_spin_unlock_irqrestore+0x110/0x120
[ 82.622967][ T5532] ? _raw_spin_unlock+0x40/0x40
[ 82.627835][ T5532] ? print_report+0x1b4/0x1f0
[ 82.632623][ T5532] check_panic_on_warn+0x80/0xa0
[ 82.637752][ T5532] ? qd_unlock+0x43/0x2f0
[ 82.642209][ T5532] end_report+0x47/0x90
[ 82.646432][ T5532] kasan_report+0xda/0x100
[ 82.650945][ T5532] ? qd_unlock+0x43/0x2f0
[ 82.655273][ T5532] kasan_check_range+0x2a7/0x2e0
[ 82.660210][ T5532] qd_unlock+0x43/0x2f0
[ 82.664399][ T5532] gfs2_quota_sync+0x768/0x8b0
[ 82.669259][ T5532] gfs2_sync_fs+0x49/0xb0
[ 82.674103][ T5532] sync_filesystem+0xe8/0x220
[ 82.678770][ T5532] generic_shutdown_super+0x6b/0x310
[ 82.684141][ T5532] kill_block_super+0x79/0xd0
[ 82.688983][ T5532] deactivate_locked_super+0xa7/0xf0
[ 82.694262][ T5532] cleanup_mnt+0x494/0x520
[ 82.698692][ T5532] ? lockdep_hardirqs_on+0x8d/0x130
[ 82.704058][ T5532] task_work_run+0x243/0x300
[ 82.708648][ T5532] ? task_work_cancel+0x290/0x290
[ 82.713671][ T5532] ? exit_to_user_mode_loop+0x42/0x150
[ 82.719207][ T5532] exit_to_user_mode_loop+0x124/0x150
[ 82.724744][ T5532] exit_to_user_mode_prepare+0xb2/0x140
[ 82.730363][ T5532] syscall_exit_to_user_mode+0x26/0x60
[ 82.736079][ T5532] do_syscall_64+0x49/0xb0
[ 82.740572][ T5532] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 82.746456][ T5532] RIP: 0033:0x7f60d0e8d517
[ 82.750858][ T5532] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 82.770626][ T5532] RSP: 002b:00007fff45264528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 82.779111][ T5532] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f60d0e8d517
[ 82.787244][ T5532] RDX: 00007fff452645f9 RSI: 000000000000000a RDI: 00007fff452645f0
[ 82.795199][ T5532] RBP: 00007fff452645f0 R08: 00000000ffffffff R09: 00007fff452643c0
[ 82.803259][ T5532] R10: 00005555557138b3 R11: 0000000000000246 R12: 00007f60d0ee6b24
[ 82.811217][ T5532] R13: 00007fff452656b0 R14: 0000555555713810 R15: 00007fff452656f0
[ 82.819273][ T5532]
[ 82.822532][ T5532] Kernel Offset: disabled
[ 82.826842][ T5532] Rebooting in 86400 seconds..