Warning: Permanently added '10.128.15.198' (ECDSA) to the list of known hosts.
2023/01/04 08:42:46 ignoring optional flag "sandboxArg"="0"
2023/01/04 08:42:46 parsed 1 programs
2023/01/04 08:42:46 executed programs: 0
[ 75.853438][ T4389] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 75.862483][ T4389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 75.870528][ T4389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 75.878933][ T4389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 75.886800][ T4389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 75.894276][ T4389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 75.998171][ T5531] chnl_net:caif_netlink_parms(): no params data found
[ 76.036501][ T5531] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.043728][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.051450][ T5531] device bridge_slave_0 entered promiscuous mode
[ 76.059735][ T5531] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.067489][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.075300][ T5531] device bridge_slave_1 entered promiscuous mode
[ 76.096842][ T5531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 76.107870][ T5531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 76.130781][ T5531] team0: Port device team_slave_0 added
[ 76.138296][ T5531] team0: Port device team_slave_1 added
[ 76.156505][ T5531] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.163470][ T5531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.189506][ T5531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.202061][ T5531] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.209540][ T5531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.235915][ T5531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.266529][ T5531] device hsr_slave_0 entered promiscuous mode
[ 76.273132][ T5531] device hsr_slave_1 entered promiscuous mode
[ 76.375257][ T2435] cfg80211: failed to load regulatory.db
[ 77.050182][ T5531] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.060889][ T5531] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.071938][ T5531] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.082200][ T5531] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.162191][ T5531] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.178257][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 77.187195][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 77.198794][ T5531] 8021q: adding VLAN 0 to HW filter on device team0
[ 77.209720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 77.219897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 77.229009][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.236548][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.256315][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 77.265305][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 77.275283][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 77.283991][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.291108][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.298881][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 77.307925][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 77.325926][ T5083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 77.348290][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 77.356612][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 77.367201][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 77.376720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 77.386584][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 77.395219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 77.406010][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 77.606346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 77.614544][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 77.627011][ T5531] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 77.651671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 77.663327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 77.685958][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 77.694577][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 77.706048][ T5531] device veth0_vlan entered promiscuous mode
[ 77.715192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 77.723890][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 77.735445][ T5531] device veth1_vlan entered promiscuous mode
[ 77.762832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 77.772822][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 77.782370][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 77.792624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 77.804385][ T5531] device veth0_macvtap entered promiscuous mode
[ 77.815853][ T5531] device veth1_macvtap entered promiscuous mode
[ 77.835519][ T5531] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 77.842924][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 77.853068][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 77.861624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 77.872122][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 77.884680][ T5531] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 77.895588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 77.904939][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 77.922412][ T5531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.935205][ T5531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.944498][ T5531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.953245][ T5531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 77.965323][ T5073] Bluetooth: hci0: command 0x0409 tx timeout
[ 78.033513][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.060307][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.060630][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.073963][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.078958][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 78.096059][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 78.516260][ T5588] loop0: detected capacity change from 0 to 32768
[ 78.539068][ T5588] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 78.547645][ T5588] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 78.568595][ T5588] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 78.580641][ T5084] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 78.587979][ T5084] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 78.656562][ T5084] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms
[ 78.667307][ T5084] gfs2: fsid=syz:syz.0: jid=0: Done
[ 78.674044][ T5588] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 78.860088][ T5588] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 78.914426][ T5531] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 78.914426][ T5531] inode = 11 2340
[ 78.914426][ T5531] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 460
[ 78.933481][ T5531] gfs2: fsid=syz:syz.0: G: s:EX n:2/924 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[ 78.943440][ T5531] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5531 [syz-executor.0] gfs2_quota_sync+0x3da/0x8b0
[ 78.954810][ T5531] gfs2: fsid=syz:syz.0: I: n:11/2340 t:8 f:0x00 d:0x00000201 s:176 p:0
[ 78.963237][ T5531] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 78.977926][ T5531] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1474
[ 78.993836][ T5531] CPU: 0 PID: 5531 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 79.002995][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 79.013076][ T5531] Call Trace:
[ 79.016379][ T5531]
[ 79.019340][ T5531] dump_stack_lvl+0x1b1/0x290
[ 79.024057][ T5531] ? nf_tcp_handle_invalid+0x630/0x630
[ 79.029598][ T5531] ? panic+0x710/0x710
[ 79.033707][ T5531] ? do_raw_spin_unlock+0x134/0x8a0
[ 79.038990][ T5531] gfs2_assert_warn_i+0x19a/0x2e0
[ 79.044063][ T5531] gfs2_quota_cleanup+0x4c6/0x6b0
[ 79.049132][ T5531] gfs2_make_fs_ro+0x517/0x610
[ 79.053919][ T5531] ? __might_sleep+0xc0/0xc0
[ 79.058542][ T5531] ? gfs2_dinode_out+0xad0/0xad0
[ 79.063506][ T5531] ? gfs2_glock_nq+0xdaa/0x1700
[ 79.068395][ T5531] ? gfs2_instantiate+0x207/0x220
[ 79.073453][ T5531] ? gfs2_glock_wait+0x213/0x2a0
[ 79.078437][ T5531] gfs2_withdraw+0x609/0x1540
[ 79.083173][ T5531] ? gfs2_lm+0x220/0x220
[ 79.087440][ T5531] ? make_kgid+0x1fe/0x710
[ 79.091897][ T5531] ? gfs2_withdraw+0x5cc/0x1540
[ 79.096843][ T5531] ? gfs2_consist_inode_i+0xf3/0x110
[ 79.102166][ T5531] gfs2_inode_refresh+0xb2d/0xf60
[ 79.107247][ T5531] ? gfs2_inode_metasync+0xf0/0xf0
[ 79.112398][ T5531] ? _raw_spin_unlock+0x24/0x40
[ 79.117289][ T5531] ? gfs2_glock_nq+0xdaa/0x1700
[ 79.122170][ T5531] ? do_raw_spin_unlock+0x134/0x8a0
[ 79.127407][ T5531] gfs2_instantiate+0x15e/0x220
[ 79.132303][ T5531] gfs2_glock_wait+0x1d9/0x2a0
[ 79.137104][ T5531] do_sync+0x485/0xc80
[ 79.141218][ T5531] ? gfs2_quota_sync+0x3da/0x8b0
[ 79.146200][ T5531] ? slot_put+0x1f0/0x1f0
[ 79.150565][ T5531] ? do_raw_spin_lock+0x147/0x3a0
[ 79.155622][ T5531] ? __lock_acquire+0x1f60/0x1f60
[ 79.160682][ T5531] ? gfs2_quota_sync+0x3da/0x8b0
[ 79.165808][ T5531] ? do_raw_spin_unlock+0x134/0x8a0
[ 79.171040][ T5531] ? qd_check_sync+0xba/0x3f0
[ 79.175756][ T5531] gfs2_quota_sync+0x3da/0x8b0
[ 79.180569][ T5531] gfs2_sync_fs+0x49/0xb0
[ 79.184932][ T5531] sync_filesystem+0xe8/0x220
[ 79.189683][ T5531] generic_shutdown_super+0x6b/0x310
[ 79.195001][ T5531] kill_block_super+0x79/0xd0
[ 79.199704][ T5531] deactivate_locked_super+0xa7/0xf0
[ 79.205022][ T5531] cleanup_mnt+0x494/0x520
[ 79.209480][ T5531] ? lockdep_hardirqs_on+0x8d/0x130
[ 79.214808][ T5531] task_work_run+0x243/0x300
[ 79.219450][ T5531] ? task_work_cancel+0x290/0x290
[ 79.224518][ T5531] ? exit_to_user_mode_loop+0x42/0x150
[ 79.230021][ T5531] exit_to_user_mode_loop+0x124/0x150
[ 79.235439][ T5531] exit_to_user_mode_prepare+0xb2/0x140
[ 79.241029][ T5531] syscall_exit_to_user_mode+0x26/0x60
[ 79.246521][ T5531] do_syscall_64+0x49/0xb0
[ 79.250986][ T5531] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.256915][ T5531] RIP: 0033:0x7f8c1448d517
[ 79.261357][ T5531] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.280993][ T5531] RSP: 002b:00007fffddc212f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.289448][ T5531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8c1448d517
[ 79.297457][ T5531] RDX: 00007fffddc213c9 RSI: 000000000000000a RDI: 00007fffddc213c0
[ 79.305634][ T5531] RBP: 00007fffddc213c0 R08: 00000000ffffffff R09: 00007fffddc21190
[ 79.313720][ T5531] R10: 0000555556fcf8b3 R11: 0000000000000246 R12: 00007f8c144e6b24
[ 79.321721][ T5531] R13: 00007fffddc22480 R14: 0000555556fcf810 R15: 00007fffddc224c0
[ 79.329747][ T5531]
[ 79.364066][ T5531] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 79.373319][ T5531] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 79.381736][ T5531] gfs2: fsid=syz:syz.0: File system withdrawn
[ 79.388669][ T5531] CPU: 1 PID: 5531 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 79.397822][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 79.407906][ T5531] Call Trace:
[ 79.411216][ T5531]
[ 79.414167][ T5531] dump_stack_lvl+0x1b1/0x290
[ 79.418882][ T5531] ? nf_tcp_handle_invalid+0x630/0x630
[ 79.424396][ T5531] ? panic+0x710/0x710
[ 79.428506][ T5531] ? kobject_uevent_env+0x46b/0x8e0
[ 79.433743][ T5531] gfs2_withdraw+0xf33/0x1540
[ 79.438474][ T5531] ? gfs2_lm+0x220/0x220
[ 79.442769][ T5531] ? make_kgid+0x1fe/0x710
[ 79.447238][ T5531] ? gfs2_consist_inode_i+0xf3/0x110
[ 79.452563][ T5531] gfs2_inode_refresh+0xb2d/0xf60
[ 79.457640][ T5531] ? gfs2_inode_metasync+0xf0/0xf0
[ 79.462792][ T5531] ? _raw_spin_unlock+0x24/0x40
[ 79.467679][ T5531] ? gfs2_glock_nq+0xdaa/0x1700
[ 79.472566][ T5531] ? do_raw_spin_unlock+0x134/0x8a0
[ 79.477806][ T5531] gfs2_instantiate+0x15e/0x220
[ 79.482786][ T5531] gfs2_glock_wait+0x1d9/0x2a0
[ 79.487593][ T5531] do_sync+0x485/0xc80
[ 79.491961][ T5531] ? gfs2_quota_sync+0x3da/0x8b0
[ 79.496943][ T5531] ? slot_put+0x1f0/0x1f0
[ 79.501300][ T5531] ? do_raw_spin_lock+0x147/0x3a0
[ 79.506356][ T5531] ? __lock_acquire+0x1f60/0x1f60
[ 79.511418][ T5531] ? gfs2_quota_sync+0x3da/0x8b0
[ 79.516393][ T5531] ? do_raw_spin_unlock+0x134/0x8a0
[ 79.521625][ T5531] ? qd_check_sync+0xba/0x3f0
[ 79.526377][ T5531] gfs2_quota_sync+0x3da/0x8b0
[ 79.531209][ T5531] gfs2_sync_fs+0x49/0xb0
[ 79.535570][ T5531] sync_filesystem+0xe8/0x220
[ 79.540283][ T5531] generic_shutdown_super+0x6b/0x310
[ 79.545605][ T5531] kill_block_super+0x79/0xd0
[ 79.550310][ T5531] deactivate_locked_super+0xa7/0xf0
[ 79.555633][ T5531] cleanup_mnt+0x494/0x520
[ 79.560350][ T5531] ? lockdep_hardirqs_on+0x8d/0x130
[ 79.565586][ T5531] task_work_run+0x243/0x300
[ 79.570215][ T5531] ? task_work_cancel+0x290/0x290
[ 79.575298][ T5531] ? exit_to_user_mode_loop+0x42/0x150
[ 79.580796][ T5531] exit_to_user_mode_loop+0x124/0x150
[ 79.586224][ T5531] exit_to_user_mode_prepare+0xb2/0x140
[ 79.591808][ T5531] syscall_exit_to_user_mode+0x26/0x60
[ 79.597328][ T5531] do_syscall_64+0x49/0xb0
[ 79.601789][ T5531] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.607812][ T5531] RIP: 0033:0x7f8c1448d517
[ 79.612261][ T5531] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.632156][ T5531] RSP: 002b:00007fffddc212f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.640612][ T5531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8c1448d517
[ 79.648696][ T5531] RDX: 00007fffddc213c9 RSI: 000000000000000a RDI: 00007fffddc213c0
[ 79.656692][ T5531] RBP: 00007fffddc213c0 R08: 00000000ffffffff R09: 00007fffddc21190
[ 79.664694][ T5531] R10: 0000555556fcf8b3 R11: 0000000000000246 R12: 00007f8c144e6b24
[ 79.672779][ T5531] R13: 00007fffddc22480 R14: 0000555556fcf810 R15: 00007fffddc224c0
[ 79.681497][ T5531]
[ 79.694742][ T5531] ==================================================================
[ 79.702838][ T5531] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 79.709534][ T5531] Read of size 8 at addr ffff888073716090 by task syz-executor.0/5531
[ 79.717697][ T5531]
[ 79.720112][ T5531] CPU: 0 PID: 5531 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 79.729226][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 79.739291][ T5531] Call Trace:
[ 79.742577][ T5531]
[ 79.745517][ T5531] dump_stack_lvl+0x1b1/0x290
[ 79.750215][ T5531] ? nf_tcp_handle_invalid+0x630/0x630
[ 79.755695][ T5531] ? __wake_up_klogd+0xcd/0x100
[ 79.760570][ T5531] ? panic+0x710/0x710
[ 79.764655][ T5531] ? _printk+0xc0/0x100
[ 79.768828][ T5531] ? _raw_spin_lock_irqsave+0x8e/0x100
[ 79.774405][ T5531] print_address_description+0x74/0x340
[ 79.779975][ T5531] print_report+0x107/0x1f0
[ 79.784849][ T5531] ? __virt_addr_valid+0x21b/0x2d0
[ 79.789987][ T5531] ? __phys_addr+0xb5/0x160
[ 79.794515][ T5531] ? qd_unlock+0x30/0x2d0
[ 79.798880][ T5531] kasan_report+0xcd/0x100
[ 79.803407][ T5531] ? qd_unlock+0x30/0x2d0
[ 79.807757][ T5531] kasan_check_range+0x2a7/0x2e0
[ 79.812717][ T5531] qd_unlock+0x30/0x2d0
[ 79.816901][ T5531] gfs2_quota_sync+0x768/0x8b0
[ 79.821694][ T5531] gfs2_sync_fs+0x49/0xb0
[ 79.826043][ T5531] sync_filesystem+0xe8/0x220
[ 79.830749][ T5531] generic_shutdown_super+0x6b/0x310
[ 79.836072][ T5531] kill_block_super+0x79/0xd0
[ 79.840762][ T5531] deactivate_locked_super+0xa7/0xf0
[ 79.846091][ T5531] cleanup_mnt+0x494/0x520
[ 79.850530][ T5531] ? lockdep_hardirqs_on+0x8d/0x130
[ 79.855747][ T5531] task_work_run+0x243/0x300
[ 79.860373][ T5531] ? task_work_cancel+0x290/0x290
[ 79.865423][ T5531] ? exit_to_user_mode_loop+0x42/0x150
[ 79.870915][ T5531] exit_to_user_mode_loop+0x124/0x150
[ 79.876312][ T5531] exit_to_user_mode_prepare+0xb2/0x140
[ 79.881882][ T5531] syscall_exit_to_user_mode+0x26/0x60
[ 79.887359][ T5531] do_syscall_64+0x49/0xb0
[ 79.891797][ T5531] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.897708][ T5531] RIP: 0033:0x7f8c1448d517
[ 79.902164][ T5531] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.921881][ T5531] RSP: 002b:00007fffddc212f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.930398][ T5531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8c1448d517
[ 79.938390][ T5531] RDX: 00007fffddc213c9 RSI: 000000000000000a RDI: 00007fffddc213c0
[ 79.946377][ T5531] RBP: 00007fffddc213c0 R08: 00000000ffffffff R09: 00007fffddc21190
[ 79.954366][ T5531] R10: 0000555556fcf8b3 R11: 0000000000000246 R12: 00007f8c144e6b24
[ 79.962960][ T5531] R13: 00007fffddc22480 R14: 0000555556fcf810 R15: 00007fffddc224c0
[ 79.971042][ T5531]
[ 79.974070][ T5531]
[ 79.976393][ T5531] Allocated by task 5588:
[ 79.980718][ T5531] kasan_set_track+0x3d/0x60
[ 79.985327][ T5531] __kasan_slab_alloc+0x65/0x70
[ 79.990283][ T5531] kmem_cache_alloc+0x1b3/0x350
[ 79.995147][ T5531] qd_alloc+0x51/0x250
[ 79.999239][ T5531] gfs2_quota_init+0x7c4/0x10e0
[ 80.004101][ T5531] gfs2_make_fs_rw+0x48e/0x590
[ 80.008884][ T5531] gfs2_fill_super+0x2357/0x2700
[ 80.013836][ T5531] get_tree_bdev+0x400/0x620
[ 80.018444][ T5531] gfs2_get_tree+0x50/0x210
[ 80.022962][ T5531] vfs_get_tree+0x88/0x270
[ 80.027388][ T5531] do_new_mount+0x289/0xad0
[ 80.031901][ T5531] __se_sys_mount+0x2d3/0x3c0
[ 80.036777][ T5531] do_syscall_64+0x3d/0xb0
[ 80.041204][ T5531] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.045142][ T5073] Bluetooth: hci0: command 0x041b tx timeout
[ 80.047093][ T5531]
[ 80.047097][ T5531] Freed by task 4647:
[ 80.047105][ T5531] kasan_set_track+0x3d/0x60
[ 80.064950][ T5531] kasan_save_free_info+0x27/0x40
[ 80.070338][ T5531] ____kasan_slab_free+0xd6/0x120
[ 80.075398][ T5531] slab_free_freelist_hook+0x12e/0x1a0
[ 80.080875][ T5531] kmem_cache_free+0x94/0x1d0
[ 80.085564][ T5531] rcu_core+0x9c1/0x1690
[ 80.089819][ T5531] __do_softirq+0x277/0x738
[ 80.094339][ T5531]
[ 80.096665][ T5531] Last potentially related work creation:
[ 80.102380][ T5531] kasan_save_stack+0x2b/0x50
[ 80.107089][ T5531] __kasan_record_aux_stack+0xb0/0xc0
[ 80.112470][ T5531] call_rcu+0x163/0xa70
[ 80.116640][ T5531] gfs2_quota_cleanup+0x457/0x6b0
[ 80.121681][ T5531] gfs2_make_fs_ro+0x517/0x610
[ 80.126452][ T5531] gfs2_withdraw+0x609/0x1540
[ 80.131147][ T5531] gfs2_inode_refresh+0xb2d/0xf60
[ 80.136186][ T5531] gfs2_instantiate+0x15e/0x220
[ 80.141181][ T5531] gfs2_glock_wait+0x1d9/0x2a0
[ 80.145960][ T5531] do_sync+0x485/0xc80
[ 80.150055][ T5531] gfs2_quota_sync+0x3da/0x8b0
[ 80.154833][ T5531] gfs2_sync_fs+0x49/0xb0
[ 80.159173][ T5531] sync_filesystem+0xe8/0x220
[ 80.163862][ T5531] generic_shutdown_super+0x6b/0x310
[ 80.169161][ T5531] kill_block_super+0x79/0xd0
[ 80.173846][ T5531] deactivate_locked_super+0xa7/0xf0
[ 80.179149][ T5531] cleanup_mnt+0x494/0x520
[ 80.183584][ T5531] task_work_run+0x243/0x300
[ 80.188223][ T5531] exit_to_user_mode_loop+0x124/0x150
[ 80.193610][ T5531] exit_to_user_mode_prepare+0xb2/0x140
[ 80.199169][ T5531] syscall_exit_to_user_mode+0x26/0x60
[ 80.204640][ T5531] do_syscall_64+0x49/0xb0
[ 80.209070][ T5531] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.214977][ T5531]
[ 80.217309][ T5531] The buggy address belongs to the object at ffff888073716000
[ 80.217309][ T5531] which belongs to the cache gfs2_quotad of size 272
[ 80.231373][ T5531] The buggy address is located 144 bytes inside of
[ 80.231373][ T5531] 272-byte region [ffff888073716000, ffff888073716110)
[ 80.244659][ T5531]
[ 80.246984][ T5531] The buggy address belongs to the physical page:
[ 80.253398][ T5531] page:ffffea0001cdc580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73716
[ 80.263565][ T5531] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 80.271126][ T5531] raw: 00fff00000000200 ffff8880197b9280 dead000000000122 0000000000000000
[ 80.279723][ T5531] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 80.288320][ T5531] page dumped because: kasan: bad access detected
[ 80.294738][ T5531] page_owner tracks the page as allocated
[ 80.300458][ T5531] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5588, tgid 5587 (syz-executor.0), ts 78822522714, free_ts 78684545129
[ 80.321918][ T5531] get_page_from_freelist+0x742/0x7c0
[ 80.327318][ T5531] __alloc_pages+0x259/0x560
[ 80.331926][ T5531] alloc_slab_page+0xbd/0x190
[ 80.336707][ T5531] allocate_slab+0x5e/0x3c0
[ 80.341230][ T5531] ___slab_alloc+0x782/0xe20
[ 80.345842][ T5531] kmem_cache_alloc+0x268/0x350
[ 80.350720][ T5531] qd_alloc+0x51/0x250
[ 80.354811][ T5531] gfs2_quota_init+0x7c4/0x10e0
[ 80.359852][ T5531] gfs2_make_fs_rw+0x48e/0x590
[ 80.364625][ T5531] gfs2_fill_super+0x2357/0x2700
[ 80.369579][ T5531] get_tree_bdev+0x400/0x620
[ 80.374184][ T5531] gfs2_get_tree+0x50/0x210
[ 80.378702][ T5531] vfs_get_tree+0x88/0x270
[ 80.383129][ T5531] do_new_mount+0x289/0xad0
[ 80.387639][ T5531] __se_sys_mount+0x2d3/0x3c0
[ 80.392330][ T5531] do_syscall_64+0x3d/0xb0
[ 80.396760][ T5531] page last free stack trace:
[ 80.401431][ T5531] free_pcp_prepare+0x751/0x780
[ 80.406296][ T5531] free_unref_page+0x19/0x4c0
[ 80.411077][ T5531] __unfreeze_partials+0x1a5/0x1e0
[ 80.416203][ T5531] put_cpu_partial+0x106/0x170
[ 80.420980][ T5531] qlist_free_all+0x2b/0x70
[ 80.425496][ T5531] kasan_quarantine_reduce+0x156/0x170
[ 80.430967][ T5531] __kasan_slab_alloc+0x1f/0x70
[ 80.435833][ T5531] kmem_cache_alloc+0x1b3/0x350
[ 80.440694][ T5531] getname_flags+0xb8/0x4e0
[ 80.445226][ T5531] do_sys_openat2+0xba/0x4e0
[ 80.449837][ T5531] __x64_sys_openat+0x243/0x290
[ 80.454797][ T5531] do_syscall_64+0x3d/0xb0
[ 80.459320][ T5531] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.465274][ T5531]
[ 80.467613][ T5531] Memory state around the buggy address:
[ 80.473249][ T5531] ffff888073715f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.481323][ T5531] ffff888073716000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 80.489389][ T5531] >ffff888073716080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 80.497545][ T5531] ^
[ 80.502142][ T5531] ffff888073716100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.510215][ T5531] ffff888073716180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 80.518288][ T5531] ==================================================================
[ 80.544068][ T5531] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 80.551298][ T5531] CPU: 0 PID: 5531 Comm: syz-executor.0 Not tainted 6.2.0-rc1-syzkaller-dirty #0
[ 80.560417][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 80.570491][ T5531] Call Trace:
[ 80.573778][ T5531]
[ 80.576718][ T5531] dump_stack_lvl+0x1b1/0x290
[ 80.581416][ T5531] ? nf_tcp_handle_invalid+0x630/0x630
[ 80.586892][ T5531] ? panic+0x710/0x710
[ 80.590972][ T5531] ? lock_release+0x81/0x820
[ 80.595756][ T5531] ? vscnprintf+0x59/0x80
[ 80.600101][ T5531] panic+0x2d6/0x710
[ 80.604005][ T5531] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 80.610185][ T5531] ? check_panic_on_warn+0x1d/0xa0
[ 80.615315][ T5531] ? memcpy_page_flushcache+0x100/0x100
[ 80.620879][ T5531] ? _raw_spin_unlock_irqrestore+0x110/0x120
[ 80.626879][ T5531] ? _raw_spin_unlock+0x40/0x40
[ 80.631751][ T5531] ? print_report+0x1b4/0x1f0
[ 80.636456][ T5531] check_panic_on_warn+0x80/0xa0
[ 80.641415][ T5531] ? qd_unlock+0x30/0x2d0
[ 80.645766][ T5531] end_report+0x47/0x90
[ 80.649942][ T5531] kasan_report+0xda/0x100
[ 80.654380][ T5531] ? qd_unlock+0x30/0x2d0
[ 80.658902][ T5531] kasan_check_range+0x2a7/0x2e0
[ 80.663839][ T5531] qd_unlock+0x30/0x2d0
[ 80.667989][ T5531] gfs2_quota_sync+0x768/0x8b0
[ 80.672855][ T5531] gfs2_sync_fs+0x49/0xb0
[ 80.677184][ T5531] sync_filesystem+0xe8/0x220
[ 80.681865][ T5531] generic_shutdown_super+0x6b/0x310
[ 80.687147][ T5531] kill_block_super+0x79/0xd0
[ 80.691826][ T5531] deactivate_locked_super+0xa7/0xf0
[ 80.697108][ T5531] cleanup_mnt+0x494/0x520
[ 80.701518][ T5531] ? lockdep_hardirqs_on+0x8d/0x130
[ 80.706709][ T5531] task_work_run+0x243/0x300
[ 80.711297][ T5531] ? task_work_cancel+0x290/0x290
[ 80.716317][ T5531] ? exit_to_user_mode_loop+0x42/0x150
[ 80.721772][ T5531] exit_to_user_mode_loop+0x124/0x150
[ 80.727231][ T5531] exit_to_user_mode_prepare+0xb2/0x140
[ 80.732782][ T5531] syscall_exit_to_user_mode+0x26/0x60
[ 80.738235][ T5531] do_syscall_64+0x49/0xb0
[ 80.742648][ T5531] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.748624][ T5531] RIP: 0033:0x7f8c1448d517
[ 80.753032][ T5531] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 80.773060][ T5531] RSP: 002b:00007fffddc212f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 80.781554][ T5531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8c1448d517
[ 80.789603][ T5531] RDX: 00007fffddc213c9 RSI: 000000000000000a RDI: 00007fffddc213c0
[ 80.797563][ T5531] RBP: 00007fffddc213c0 R08: 00000000ffffffff R09: 00007fffddc21190
[ 80.805540][ T5531] R10: 0000555556fcf8b3 R11: 0000000000000246 R12: 00007f8c144e6b24
[ 80.813501][ T5531] R13: 00007fffddc22480 R14: 0000555556fcf810 R15: 00007fffddc224c0
[ 80.821473][ T5531]
[ 80.824752][ T5531] Kernel Offset: disabled
[ 80.829067][ T5531] Rebooting in 86400 seconds..