Warning: Permanently added '10.128.1.226' (ED25519) to the list of known hosts. 2026/01/07 16:30:49 parsed 1 programs [ 55.498920][ T4187] cgroup: Unknown subsys name 'net' [ 55.658786][ T4187] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.883622][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.978081][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.997061][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.016701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.031500][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.039842][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.048759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.766010][ T4249] chnl_net:caif_netlink_parms(): no params data found [ 59.826321][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.835126][ T4249] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.843302][ T4249] device bridge_slave_0 entered promiscuous mode [ 59.852360][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.859594][ T4249] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.867420][ T4249] device bridge_slave_1 entered promiscuous mode [ 59.895527][ T4249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.906767][ T4249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.935255][ T4249] team0: Port device team_slave_0 added [ 59.943750][ T4249] team0: Port device team_slave_1 added [ 59.976901][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.985833][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.011826][ T4249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.024890][ T4249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.031852][ T4249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.057914][ T4249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.084781][ T4249] device hsr_slave_0 entered promiscuous mode [ 60.091673][ T4249] device hsr_slave_1 entered promiscuous mode [ 60.327137][ T4249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.338012][ T4249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.347195][ T4249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.355838][ T4249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.378523][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.385704][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.393758][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.400824][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.438507][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.449898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.459368][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.467873][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.476366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.490165][ T4249] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.500969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.509393][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.516490][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.534621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.543828][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.550876][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.560105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.569000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.581517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.593300][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.607447][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.619445][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.629639][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.732329][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.741519][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.754414][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.769393][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.778425][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.817424][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.826105][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.835277][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.843646][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.859387][ T4249] device veth0_vlan entered promiscuous mode [ 60.891511][ T4249] device veth1_vlan entered promiscuous mode [ 60.909890][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.919301][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.928141][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.937249][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.947240][ T4249] device veth0_macvtap entered promiscuous mode [ 60.973721][ T4249] device veth1_macvtap entered promiscuous mode [ 60.987786][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.996549][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.005557][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.015173][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.023665][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.034482][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.044545][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.053747][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.065490][ T4249] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.074492][ T4249] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.084254][ T4249] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.093870][ T4249] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/07 16:30:57 executed programs: 0 [ 62.319802][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 62.379901][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.387816][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.396270][ T4295] device bridge_slave_0 entered promiscuous mode [ 62.405081][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.412217][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.421067][ T4295] device bridge_slave_1 entered promiscuous mode [ 62.446463][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.460797][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.489910][ T4295] team0: Port device team_slave_0 added [ 62.499373][ T4295] team0: Port device team_slave_1 added [ 62.523079][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.530046][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.557094][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.572110][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.579435][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.606533][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.643433][ T4295] device hsr_slave_0 entered promiscuous mode [ 62.650219][ T4295] device hsr_slave_1 entered promiscuous mode [ 62.657448][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.665815][ T4295] Cannot create hsr debugfs directory [ 62.755899][ T4295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.213285][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 66.009382][ T4295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.048798][ T4295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.110566][ T4295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.179053][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.199668][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.209180][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.219247][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.271282][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.285524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.294165][ T3158] Bluetooth: hci0: command 0x041b tx timeout [ 66.294615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.311112][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.325379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.334226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.343124][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.350428][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.358849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.377773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.386993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.396327][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.403409][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.413670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.425570][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.451084][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.461654][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.470161][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.479043][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.487738][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.496901][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.505976][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.515018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.524229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.544915][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.630675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.639169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.650818][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.667289][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.676455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.690452][ T1152] device hsr_slave_0 left promiscuous mode [ 66.697932][ T1152] device hsr_slave_1 left promiscuous mode [ 66.704503][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.711926][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.721196][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.728883][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.736945][ T1152] device bridge_slave_1 left promiscuous mode [ 66.744161][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.756818][ T1152] device bridge_slave_0 left promiscuous mode [ 66.763550][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.779857][ T1152] device veth1_macvtap left promiscuous mode [ 66.786306][ T1152] device veth0_macvtap left promiscuous mode [ 66.792356][ T1152] device veth1_vlan left promiscuous mode [ 66.799220][ T1152] device veth0_vlan left promiscuous mode [ 66.931321][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 66.945701][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 66.959065][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.971655][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.021449][ T1152] bond0 (unregistering): Released all slaves [ 67.115164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.123610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.135480][ T4295] device veth0_vlan entered promiscuous mode [ 67.144049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.152171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.162472][ T4295] device veth1_vlan entered promiscuous mode [ 67.189015][ T4295] device veth0_macvtap entered promiscuous mode [ 67.196186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.207701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.219077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.229452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.238665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.248208][ T4295] device veth1_macvtap entered promiscuous mode [ 67.262250][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.270324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.278590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.287684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.300525][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.308344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.318061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.328711][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.339370][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.348144][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.356953][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.420540][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.436007][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.446575][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.448439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.455238][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/07 16:31:02 executed programs: 2 [ 67.473559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.804646][ T4313] loop0: detected capacity change from 0 to 32768 [ 67.897032][ T4313] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 67.919376][ T4313] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 67.963571][ T4313] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 67.976461][ T3158] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 67.985165][ T3158] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 68.030581][ T3158] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms [ 68.054927][ T3158] gfs2: fsid=syz:syz.0: jid=0: Done [ 68.069961][ T4313] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 68.186057][ T4313] gfs2: fsid=syz:syz.0: found 1 quota changes [ 68.228436][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 68.228436][ T4295] inode = 11 2339 [ 68.228436][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 68.274455][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 68.292879][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 68.308204][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 68.315772][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.325929][ T4295] Call Trace: [ 68.329211][ T4295] [ 68.332141][ T4295] dump_stack_lvl+0x168/0x230 [ 68.336841][ T4295] ? show_regs_print_info+0x20/0x20 [ 68.342039][ T4295] ? load_image+0x3b0/0x3b0 [ 68.346545][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 68.351571][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 68.356770][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 68.361806][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 68.367453][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 68.372308][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 68.377243][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 68.382091][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 68.386964][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 68.391653][ T4295] ? gfs2_lm+0x220/0x220 [ 68.395889][ T4295] ? __schedule+0x11c3/0x4390 [ 68.400569][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 68.405417][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 68.410617][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 68.413043][ T3158] Bluetooth: hci0: command 0x040f tx timeout [ 68.415642][ T4295] ? do_promote+0x71a/0xab0 [ 68.426090][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 68.431207][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 68.436242][ T4295] inode_go_lock+0x127/0x470 [ 68.440827][ T4295] do_promote+0x741/0xab0 [ 68.445148][ T4295] finish_xmote+0x514/0xb70 [ 68.449638][ T4295] do_xmote+0x7b6/0x1120 [ 68.453890][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 68.458566][ T4295] do_sync+0x486/0xc00 [ 68.462632][ T4295] ? slot_put+0x1e0/0x1e0 [ 68.466958][ T4295] ? do_sync+0x47e/0xc00 [ 68.471208][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 68.476410][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 68.481181][ T4295] gfs2_sync_fs+0x48/0xb0 [ 68.485504][ T4295] sync_filesystem+0xe6/0x220 [ 68.490183][ T4295] generic_shutdown_super+0x6b/0x300 [ 68.495465][ T4295] kill_block_super+0x7c/0xe0 [ 68.500147][ T4295] deactivate_locked_super+0x93/0xf0 [ 68.505421][ T4295] cleanup_mnt+0x418/0x4d0 [ 68.509839][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 68.515027][ T4295] task_work_run+0x125/0x1a0 [ 68.519611][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 68.525009][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 68.530634][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 68.536087][ T4295] do_syscall_64+0x58/0xa0 [ 68.540513][ T4295] ? clear_bhb_loop+0x30/0x80 [ 68.545177][ T4295] ? clear_bhb_loop+0x30/0x80 [ 68.549841][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.555731][ T4295] RIP: 0033:0x7fb773b47a77 [ 68.560138][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 68.579733][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 68.588143][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 68.596284][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 68.604243][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 68.612377][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 68.620339][ T4295] R13: 00007fb773bcad7d R14: 00000000000107a1 R15: 00007ffc4c8d5560 [ 68.628337][ T4295] [ 68.636253][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 68.645214][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 68.655049][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 68.661140][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 68.668776][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.678834][ T4295] Call Trace: [ 68.682117][ T4295] [ 68.685044][ T4295] dump_stack_lvl+0x168/0x230 [ 68.689725][ T4295] ? kobject_uevent_env+0x371/0x890 [ 68.694936][ T4295] ? show_regs_print_info+0x20/0x20 [ 68.700150][ T4295] ? load_image+0x3b0/0x3b0 [ 68.704668][ T4295] ? kobject_uevent_env+0x371/0x890 [ 68.709869][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 68.714989][ T4295] gfs2_withdraw+0x111b/0x1460 [ 68.719770][ T4295] ? gfs2_lm+0x220/0x220 [ 68.724006][ T4295] ? __schedule+0x11c3/0x4390 [ 68.728669][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 68.733857][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 68.738866][ T4295] ? do_promote+0x71a/0xab0 [ 68.743352][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 68.748450][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 68.753556][ T4295] inode_go_lock+0x127/0x470 [ 68.758146][ T4295] do_promote+0x741/0xab0 [ 68.762499][ T4295] finish_xmote+0x514/0xb70 [ 68.767181][ T4295] do_xmote+0x7b6/0x1120 [ 68.771431][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 68.776174][ T4295] do_sync+0x486/0xc00 [ 68.780286][ T4295] ? slot_put+0x1e0/0x1e0 [ 68.784708][ T4295] ? do_sync+0x47e/0xc00 [ 68.789040][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 68.794228][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 68.799160][ T4295] gfs2_sync_fs+0x48/0xb0 [ 68.803474][ T4295] sync_filesystem+0xe6/0x220 [ 68.808133][ T4295] generic_shutdown_super+0x6b/0x300 [ 68.813404][ T4295] kill_block_super+0x7c/0xe0 [ 68.818084][ T4295] deactivate_locked_super+0x93/0xf0 [ 68.823365][ T4295] cleanup_mnt+0x418/0x4d0 [ 68.827768][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 68.832955][ T4295] task_work_run+0x125/0x1a0 [ 68.837638][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 68.843094][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 68.848641][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 68.854094][ T4295] do_syscall_64+0x58/0xa0 [ 68.858527][ T4295] ? clear_bhb_loop+0x30/0x80 [ 68.863198][ T4295] ? clear_bhb_loop+0x30/0x80 [ 68.867872][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.873749][ T4295] RIP: 0033:0x7fb773b47a77 [ 68.878155][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 68.897741][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 68.906226][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 68.914184][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 68.922145][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 68.930105][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 68.938065][ T4295] R13: 00007fb773bcad7d R14: 00000000000107a1 R15: 00007ffc4c8d5560 [ 68.946040][ T4295] [ 69.265439][ T4318] loop0: detected capacity change from 0 to 32768 [ 69.365089][ T4318] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 69.375041][ T4318] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 69.387021][ T4318] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 69.396311][ T3158] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 69.403639][ T3158] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 69.435322][ T3158] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms [ 69.445055][ T3158] gfs2: fsid=syz:syz.0: jid=0: Done [ 69.450821][ T4318] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 69.516104][ T4318] gfs2: fsid=syz:syz.0: found 1 quota changes [ 69.533228][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 69.533228][ T4295] inode = 11 2339 [ 69.533228][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 69.552414][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 69.565999][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 69.584795][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 69.592358][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.602487][ T4295] Call Trace: [ 69.605762][ T4295] [ 69.608681][ T4295] dump_stack_lvl+0x168/0x230 [ 69.613461][ T4295] ? show_regs_print_info+0x20/0x20 [ 69.618741][ T4295] ? load_image+0x3b0/0x3b0 [ 69.623237][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 69.628255][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 69.633443][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 69.638475][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 69.643494][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 69.648245][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 69.653171][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 69.658027][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 69.662874][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 69.667547][ T4295] ? gfs2_lm+0x220/0x220 [ 69.671769][ T4295] ? __schedule+0x11c3/0x4390 [ 69.676694][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 69.681575][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 69.686762][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 69.691778][ T4295] ? do_promote+0x71a/0xab0 [ 69.696266][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 69.701361][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 69.706378][ T4295] inode_go_lock+0x127/0x470 [ 69.710960][ T4295] do_promote+0x741/0xab0 [ 69.715294][ T4295] finish_xmote+0x514/0xb70 [ 69.719795][ T4295] do_xmote+0x7b6/0x1120 [ 69.724022][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 69.728713][ T4295] do_sync+0x486/0xc00 [ 69.732792][ T4295] ? slot_put+0x1e0/0x1e0 [ 69.737153][ T4295] ? do_sync+0x47e/0xc00 [ 69.741390][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 69.746577][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 69.751333][ T4295] gfs2_sync_fs+0x48/0xb0 [ 69.755648][ T4295] sync_filesystem+0xe6/0x220 [ 69.760414][ T4295] generic_shutdown_super+0x6b/0x300 [ 69.765821][ T4295] kill_block_super+0x7c/0xe0 [ 69.770511][ T4295] deactivate_locked_super+0x93/0xf0 [ 69.775798][ T4295] cleanup_mnt+0x418/0x4d0 [ 69.780231][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 69.785421][ T4295] task_work_run+0x125/0x1a0 [ 69.790002][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 69.795358][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 69.800890][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 69.806445][ T4295] do_syscall_64+0x58/0xa0 [ 69.810842][ T4295] ? clear_bhb_loop+0x30/0x80 [ 69.815502][ T4295] ? clear_bhb_loop+0x30/0x80 [ 69.820169][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.826044][ T4295] RIP: 0033:0x7fb773b47a77 [ 69.830451][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 69.850042][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 69.858449][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 69.866411][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 69.874370][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 69.882320][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 69.890273][ T4295] R13: 00007fb773bcad7d R14: 0000000000010dd2 R15: 00007ffc4c8d5560 [ 69.898261][ T4295] [ 69.903957][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 69.913095][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 69.920104][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 69.926219][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 69.933768][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.943827][ T4295] Call Trace: [ 69.947093][ T4295] [ 69.950016][ T4295] dump_stack_lvl+0x168/0x230 [ 69.954722][ T4295] ? kobject_uevent_env+0x371/0x890 [ 69.959972][ T4295] ? show_regs_print_info+0x20/0x20 [ 69.965168][ T4295] ? load_image+0x3b0/0x3b0 [ 69.969672][ T4295] ? kobject_uevent_env+0x371/0x890 [ 69.974861][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 69.979985][ T4295] gfs2_withdraw+0x111b/0x1460 [ 69.984739][ T4295] ? gfs2_lm+0x220/0x220 [ 69.988966][ T4295] ? __schedule+0x11c3/0x4390 [ 69.993662][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 69.998865][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 70.003965][ T4295] ? do_promote+0x71a/0xab0 [ 70.008481][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 70.013595][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 70.018650][ T4295] inode_go_lock+0x127/0x470 [ 70.023356][ T4295] do_promote+0x741/0xab0 [ 70.027686][ T4295] finish_xmote+0x514/0xb70 [ 70.032178][ T4295] do_xmote+0x7b6/0x1120 [ 70.036412][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 70.041086][ T4295] do_sync+0x486/0xc00 [ 70.045142][ T4295] ? slot_put+0x1e0/0x1e0 [ 70.049570][ T4295] ? do_sync+0x47e/0xc00 [ 70.053823][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 70.059034][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 70.063799][ T4295] gfs2_sync_fs+0x48/0xb0 [ 70.068117][ T4295] sync_filesystem+0xe6/0x220 [ 70.072797][ T4295] generic_shutdown_super+0x6b/0x300 [ 70.078089][ T4295] kill_block_super+0x7c/0xe0 [ 70.082762][ T4295] deactivate_locked_super+0x93/0xf0 [ 70.088049][ T4295] cleanup_mnt+0x418/0x4d0 [ 70.092452][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 70.097639][ T4295] task_work_run+0x125/0x1a0 [ 70.102222][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 70.107764][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 70.113300][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 70.118757][ T4295] do_syscall_64+0x58/0xa0 [ 70.123168][ T4295] ? clear_bhb_loop+0x30/0x80 [ 70.127843][ T4295] ? clear_bhb_loop+0x30/0x80 [ 70.132506][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.138400][ T4295] RIP: 0033:0x7fb773b47a77 [ 70.142809][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 70.162404][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 70.170821][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 70.178790][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 70.186760][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 70.194723][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 70.202786][ T4295] R13: 00007fb773bcad7d R14: 0000000000010dd2 R15: 00007ffc4c8d5560 [ 70.210765][ T4295] [ 70.452738][ T23] Bluetooth: hci0: command 0x0419 tx timeout [ 70.490552][ T4321] loop0: detected capacity change from 0 to 32768 [ 70.541802][ T4321] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 70.551456][ T4321] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 70.564130][ T4321] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 70.573160][ T4258] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 70.579951][ T4258] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 70.610531][ T4258] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 30ms [ 70.619091][ T4258] gfs2: fsid=syz:syz.0: jid=0: Done [ 70.626078][ T4321] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 70.688557][ T4321] gfs2: fsid=syz:syz.0: found 1 quota changes [ 70.700982][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 70.700982][ T4295] inode = 11 2339 [ 70.700982][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 70.721128][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 70.735891][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 70.749981][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 70.757627][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.767692][ T4295] Call Trace: [ 70.770964][ T4295] [ 70.773878][ T4295] dump_stack_lvl+0x168/0x230 [ 70.778542][ T4295] ? show_regs_print_info+0x20/0x20 [ 70.783721][ T4295] ? load_image+0x3b0/0x3b0 [ 70.788234][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 70.793242][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 70.798449][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 70.803464][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 70.808481][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 70.813455][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 70.818391][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 70.823332][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 70.828715][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 70.833470][ T4295] ? gfs2_lm+0x220/0x220 [ 70.837697][ T4295] ? __schedule+0x11c3/0x4390 [ 70.842376][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 70.847217][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 70.852409][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 70.857438][ T4295] ? do_promote+0x71a/0xab0 [ 70.862035][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 70.867132][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 70.872151][ T4295] inode_go_lock+0x127/0x470 [ 70.876825][ T4295] do_promote+0x741/0xab0 [ 70.881143][ T4295] finish_xmote+0x514/0xb70 [ 70.885860][ T4295] do_xmote+0x7b6/0x1120 [ 70.890114][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 70.894844][ T4295] do_sync+0x486/0xc00 [ 70.898911][ T4295] ? slot_put+0x1e0/0x1e0 [ 70.903228][ T4295] ? do_sync+0x47e/0xc00 [ 70.907457][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 70.912647][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 70.917406][ T4295] gfs2_sync_fs+0x48/0xb0 [ 70.921721][ T4295] sync_filesystem+0xe6/0x220 [ 70.926411][ T4295] generic_shutdown_super+0x6b/0x300 [ 70.931695][ T4295] kill_block_super+0x7c/0xe0 [ 70.936364][ T4295] deactivate_locked_super+0x93/0xf0 [ 70.941650][ T4295] cleanup_mnt+0x418/0x4d0 [ 70.946061][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 70.951250][ T4295] task_work_run+0x125/0x1a0 [ 70.955831][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 70.961207][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 70.966752][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 70.972212][ T4295] do_syscall_64+0x58/0xa0 [ 70.976614][ T4295] ? clear_bhb_loop+0x30/0x80 [ 70.981295][ T4295] ? clear_bhb_loop+0x30/0x80 [ 70.985970][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.991854][ T4295] RIP: 0033:0x7fb773b47a77 [ 70.996261][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 71.015859][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 71.024264][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 71.032220][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 71.040172][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 71.048137][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 71.056113][ T4295] R13: 00007fb773bcad7d R14: 000000000001129c R15: 00007ffc4c8d5560 [ 71.064080][ T4295] [ 71.067751][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 71.076695][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 71.083408][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 71.089490][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 71.097018][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.107059][ T4295] Call Trace: [ 71.110322][ T4295] [ 71.113232][ T4295] dump_stack_lvl+0x168/0x230 [ 71.117906][ T4295] ? kobject_uevent_env+0x371/0x890 [ 71.123089][ T4295] ? show_regs_print_info+0x20/0x20 [ 71.128265][ T4295] ? load_image+0x3b0/0x3b0 [ 71.132746][ T4295] ? kobject_uevent_env+0x371/0x890 [ 71.137922][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 71.143025][ T4295] gfs2_withdraw+0x111b/0x1460 [ 71.147814][ T4295] ? gfs2_lm+0x220/0x220 [ 71.152057][ T4295] ? __schedule+0x11c3/0x4390 [ 71.156727][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 71.162028][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 71.167041][ T4295] ? do_promote+0x71a/0xab0 [ 71.171527][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 71.176620][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 71.181643][ T4295] inode_go_lock+0x127/0x470 [ 71.186315][ T4295] do_promote+0x741/0xab0 [ 71.190631][ T4295] finish_xmote+0x514/0xb70 [ 71.195122][ T4295] do_xmote+0x7b6/0x1120 [ 71.199365][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 71.204035][ T4295] do_sync+0x486/0xc00 [ 71.208092][ T4295] ? slot_put+0x1e0/0x1e0 [ 71.212499][ T4295] ? do_sync+0x47e/0xc00 [ 71.216725][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 71.221994][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 71.226740][ T4295] gfs2_sync_fs+0x48/0xb0 [ 71.231050][ T4295] sync_filesystem+0xe6/0x220 [ 71.235751][ T4295] generic_shutdown_super+0x6b/0x300 [ 71.241022][ T4295] kill_block_super+0x7c/0xe0 [ 71.245683][ T4295] deactivate_locked_super+0x93/0xf0 [ 71.250965][ T4295] cleanup_mnt+0x418/0x4d0 [ 71.255373][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 71.260646][ T4295] task_work_run+0x125/0x1a0 [ 71.265239][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 71.270619][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 71.276173][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 71.281659][ T4295] do_syscall_64+0x58/0xa0 [ 71.286061][ T4295] ? clear_bhb_loop+0x30/0x80 [ 71.290828][ T4295] ? clear_bhb_loop+0x30/0x80 [ 71.295525][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.301433][ T4295] RIP: 0033:0x7fb773b47a77 [ 71.306030][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 71.325631][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 71.334036][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 71.341992][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 71.349981][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 71.357949][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 71.365907][ T4295] R13: 00007fb773bcad7d R14: 000000000001129c R15: 00007ffc4c8d5560 [ 71.373883][ T4295] [ 71.382623][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.389261][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.677766][ T4324] loop0: detected capacity change from 0 to 32768 [ 71.723024][ T4324] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 71.731207][ T4324] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 71.748226][ T4324] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 71.757331][ T4258] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 71.764346][ T4258] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 71.786322][ T4258] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms [ 71.794516][ T4258] gfs2: fsid=syz:syz.0: jid=0: Done [ 71.799856][ T4324] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 71.863023][ T4324] gfs2: fsid=syz:syz.0: found 1 quota changes [ 71.877398][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 71.877398][ T4295] inode = 11 2339 [ 71.877398][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 71.896490][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 71.909207][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 71.923925][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 71.931487][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.941540][ T4295] Call Trace: [ 71.944817][ T4295] [ 71.947734][ T4295] dump_stack_lvl+0x168/0x230 [ 71.952394][ T4295] ? show_regs_print_info+0x20/0x20 [ 71.957571][ T4295] ? load_image+0x3b0/0x3b0 [ 71.962055][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 71.967058][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 71.972238][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 71.977252][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 71.982281][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 71.987124][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 71.992045][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 71.996879][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 72.001736][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 72.006429][ T4295] ? gfs2_lm+0x220/0x220 [ 72.010657][ T4295] ? __schedule+0x11c3/0x4390 [ 72.015320][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 72.020157][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 72.025336][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 72.030342][ T4295] ? do_promote+0x71a/0xab0 [ 72.034828][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 72.039923][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 72.044933][ T4295] inode_go_lock+0x127/0x470 [ 72.049854][ T4295] do_promote+0x741/0xab0 [ 72.054187][ T4295] finish_xmote+0x514/0xb70 [ 72.058696][ T4295] do_xmote+0x7b6/0x1120 [ 72.062924][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 72.067623][ T4295] do_sync+0x486/0xc00 [ 72.071675][ T4295] ? slot_put+0x1e0/0x1e0 [ 72.075987][ T4295] ? do_sync+0x47e/0xc00 [ 72.080208][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 72.085388][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 72.090141][ T4295] gfs2_sync_fs+0x48/0xb0 [ 72.094448][ T4295] sync_filesystem+0xe6/0x220 [ 72.099103][ T4295] generic_shutdown_super+0x6b/0x300 [ 72.104370][ T4295] kill_block_super+0x7c/0xe0 [ 72.109030][ T4295] deactivate_locked_super+0x93/0xf0 [ 72.114385][ T4295] cleanup_mnt+0x418/0x4d0 [ 72.118784][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 72.123976][ T4295] task_work_run+0x125/0x1a0 [ 72.128557][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 72.134024][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 72.139550][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 72.144999][ T4295] do_syscall_64+0x58/0xa0 [ 72.149394][ T4295] ? clear_bhb_loop+0x30/0x80 [ 72.154057][ T4295] ? clear_bhb_loop+0x30/0x80 [ 72.158715][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.164592][ T4295] RIP: 0033:0x7fb773b47a77 [ 72.168991][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 72.188604][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.197006][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 72.204968][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 72.212970][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 72.221050][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 72.229018][ T4295] R13: 00007fb773bcad7d R14: 00000000000118aa R15: 00007ffc4c8d5560 [ 72.236988][ T4295] [ 72.242387][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 72.251217][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 72.258065][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 72.264258][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 72.271804][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.281853][ T4295] Call Trace: [ 72.285127][ T4295] [ 72.288049][ T4295] dump_stack_lvl+0x168/0x230 [ 72.292836][ T4295] ? kobject_uevent_env+0x371/0x890 [ 72.298048][ T4295] ? show_regs_print_info+0x20/0x20 [ 72.303237][ T4295] ? load_image+0x3b0/0x3b0 [ 72.307722][ T4295] ? kobject_uevent_env+0x371/0x890 [ 72.312914][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 72.318025][ T4295] gfs2_withdraw+0x111b/0x1460 [ 72.322797][ T4295] ? gfs2_lm+0x220/0x220 [ 72.327019][ T4295] ? __schedule+0x11c3/0x4390 [ 72.331684][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 72.336873][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 72.341887][ T4295] ? do_promote+0x71a/0xab0 [ 72.346373][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 72.351465][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 72.356479][ T4295] inode_go_lock+0x127/0x470 [ 72.361056][ T4295] do_promote+0x741/0xab0 [ 72.365468][ T4295] finish_xmote+0x514/0xb70 [ 72.369956][ T4295] do_xmote+0x7b6/0x1120 [ 72.374198][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 72.378889][ T4295] do_sync+0x486/0xc00 [ 72.382951][ T4295] ? slot_put+0x1e0/0x1e0 [ 72.387276][ T4295] ? do_sync+0x47e/0xc00 [ 72.391502][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 72.396775][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 72.401538][ T4295] gfs2_sync_fs+0x48/0xb0 [ 72.405854][ T4295] sync_filesystem+0xe6/0x220 [ 72.410525][ T4295] generic_shutdown_super+0x6b/0x300 [ 72.415801][ T4295] kill_block_super+0x7c/0xe0 [ 72.420465][ T4295] deactivate_locked_super+0x93/0xf0 [ 72.425733][ T4295] cleanup_mnt+0x418/0x4d0 [ 72.430155][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 72.435339][ T4295] task_work_run+0x125/0x1a0 [ 72.439914][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 72.445271][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 72.450804][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 72.456252][ T4295] do_syscall_64+0x58/0xa0 [ 72.460676][ T4295] ? clear_bhb_loop+0x30/0x80 [ 72.465354][ T4295] ? clear_bhb_loop+0x30/0x80 [ 72.470016][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.475892][ T4295] RIP: 0033:0x7fb773b47a77 [ 72.480297][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 72.499982][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 72.508478][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 72.516449][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 72.524412][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 72.532636][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 72.540615][ T4295] R13: 00007fb773bcad7d R14: 00000000000118aa R15: 00007ffc4c8d5560 [ 72.548703][ T4295] [ 72.829294][ T4327] loop0: detected capacity change from 0 to 32768 [ 72.883566][ T4327] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 72.893578][ T4327] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 72.904424][ T4327] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 72.914858][ T4258] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 72.921994][ T4258] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 72.949482][ T4258] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 72.957654][ T4258] gfs2: fsid=syz:syz.0: jid=0: Done [ 72.963436][ T4327] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 73.041474][ T4327] gfs2: fsid=syz:syz.0: found 1 quota changes [ 73.057186][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 73.057186][ T4295] inode = 11 2339 [ 73.057186][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 73.082807][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/01/07 16:31:08 executed programs: 7 [ 73.098952][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 73.113979][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 73.121514][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.131688][ T4295] Call Trace: [ 73.134957][ T4295] [ 73.137869][ T4295] dump_stack_lvl+0x168/0x230 [ 73.142531][ T4295] ? show_regs_print_info+0x20/0x20 [ 73.147719][ T4295] ? load_image+0x3b0/0x3b0 [ 73.152216][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 73.157221][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 73.162399][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 73.167414][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 73.172494][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 73.177250][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 73.182174][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 73.187006][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 73.191866][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 73.196536][ T4295] ? gfs2_lm+0x220/0x220 [ 73.200773][ T4295] ? __schedule+0x11c3/0x4390 [ 73.205435][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 73.210272][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 73.215465][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 73.220570][ T4295] ? do_promote+0x71a/0xab0 [ 73.225056][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 73.230168][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 73.235199][ T4295] inode_go_lock+0x127/0x470 [ 73.239792][ T4295] do_promote+0x741/0xab0 [ 73.244117][ T4295] finish_xmote+0x514/0xb70 [ 73.248606][ T4295] do_xmote+0x7b6/0x1120 [ 73.252836][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 73.257502][ T4295] do_sync+0x486/0xc00 [ 73.261561][ T4295] ? slot_put+0x1e0/0x1e0 [ 73.265877][ T4295] ? do_sync+0x47e/0xc00 [ 73.270105][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 73.275292][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 73.280054][ T4295] gfs2_sync_fs+0x48/0xb0 [ 73.284378][ T4295] sync_filesystem+0xe6/0x220 [ 73.289054][ T4295] generic_shutdown_super+0x6b/0x300 [ 73.294326][ T4295] kill_block_super+0x7c/0xe0 [ 73.298995][ T4295] deactivate_locked_super+0x93/0xf0 [ 73.304279][ T4295] cleanup_mnt+0x418/0x4d0 [ 73.308787][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 73.313978][ T4295] task_work_run+0x125/0x1a0 [ 73.318551][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 73.323911][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 73.329446][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 73.334894][ T4295] do_syscall_64+0x58/0xa0 [ 73.339291][ T4295] ? clear_bhb_loop+0x30/0x80 [ 73.344037][ T4295] ? clear_bhb_loop+0x30/0x80 [ 73.348694][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.354566][ T4295] RIP: 0033:0x7fb773b47a77 [ 73.358968][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 73.378560][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 73.386959][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 73.395180][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 73.403241][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 73.411302][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 73.419357][ T4295] R13: 00007fb773bcad7d R14: 0000000000011bc1 R15: 00007ffc4c8d5560 [ 73.427341][ T4295] [ 73.432062][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 73.440893][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 73.447874][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 73.454090][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 73.461686][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.471756][ T4295] Call Trace: [ 73.475029][ T4295] [ 73.477949][ T4295] dump_stack_lvl+0x168/0x230 [ 73.482616][ T4295] ? kobject_uevent_env+0x371/0x890 [ 73.487800][ T4295] ? show_regs_print_info+0x20/0x20 [ 73.492991][ T4295] ? load_image+0x3b0/0x3b0 [ 73.497518][ T4295] ? kobject_uevent_env+0x371/0x890 [ 73.502798][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 73.507904][ T4295] gfs2_withdraw+0x111b/0x1460 [ 73.512670][ T4295] ? gfs2_lm+0x220/0x220 [ 73.516919][ T4295] ? __schedule+0x11c3/0x4390 [ 73.521598][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 73.526783][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 73.531797][ T4295] ? do_promote+0x71a/0xab0 [ 73.536281][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 73.541392][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 73.546500][ T4295] inode_go_lock+0x127/0x470 [ 73.551077][ T4295] do_promote+0x741/0xab0 [ 73.555391][ T4295] finish_xmote+0x514/0xb70 [ 73.559877][ T4295] do_xmote+0x7b6/0x1120 [ 73.564295][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 73.568988][ T4295] do_sync+0x486/0xc00 [ 73.573048][ T4295] ? slot_put+0x1e0/0x1e0 [ 73.577381][ T4295] ? do_sync+0x47e/0xc00 [ 73.581610][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 73.586792][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 73.591634][ T4295] gfs2_sync_fs+0x48/0xb0 [ 73.596109][ T4295] sync_filesystem+0xe6/0x220 [ 73.601100][ T4295] generic_shutdown_super+0x6b/0x300 [ 73.606626][ T4295] kill_block_super+0x7c/0xe0 [ 73.611307][ T4295] deactivate_locked_super+0x93/0xf0 [ 73.616671][ T4295] cleanup_mnt+0x418/0x4d0 [ 73.621079][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 73.626821][ T4295] task_work_run+0x125/0x1a0 [ 73.631412][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 73.636776][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 73.642311][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 73.647754][ T4295] do_syscall_64+0x58/0xa0 [ 73.652152][ T4295] ? clear_bhb_loop+0x30/0x80 [ 73.656812][ T4295] ? clear_bhb_loop+0x30/0x80 [ 73.661469][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.667347][ T4295] RIP: 0033:0x7fb773b47a77 [ 73.671753][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 73.691345][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 73.699748][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 73.707704][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 73.715840][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 73.723802][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 73.731763][ T4295] R13: 00007fb773bcad7d R14: 0000000000011bc1 R15: 00007ffc4c8d5560 [ 73.739732][ T4295] [ 74.011249][ T4330] loop0: detected capacity change from 0 to 32768 [ 74.064654][ T4330] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 74.072987][ T4330] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 74.085780][ T4330] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 74.094908][ T4257] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 74.101703][ T4257] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 74.125855][ T4257] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms [ 74.135676][ T4257] gfs2: fsid=syz:syz.0: jid=0: Done [ 74.140955][ T4330] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 74.216228][ T4330] gfs2: fsid=syz:syz.0: found 1 quota changes [ 74.244600][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 74.244600][ T4295] inode = 11 2339 [ 74.244600][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 74.263331][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 74.275731][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 74.289872][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 74.297412][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.307462][ T4295] Call Trace: [ 74.310728][ T4295] [ 74.313642][ T4295] dump_stack_lvl+0x168/0x230 [ 74.318303][ T4295] ? show_regs_print_info+0x20/0x20 [ 74.323486][ T4295] ? load_image+0x3b0/0x3b0 [ 74.327979][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 74.332984][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 74.338256][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 74.343271][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 74.348288][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 74.353039][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 74.357983][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 74.362846][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 74.367686][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 74.372352][ T4295] ? gfs2_lm+0x220/0x220 [ 74.376575][ T4295] ? __schedule+0x11c3/0x4390 [ 74.381246][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 74.386080][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 74.391290][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 74.396322][ T4295] ? do_promote+0x71a/0xab0 [ 74.400814][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 74.405909][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 74.410923][ T4295] inode_go_lock+0x127/0x470 [ 74.415497][ T4295] do_promote+0x741/0xab0 [ 74.419824][ T4295] finish_xmote+0x514/0xb70 [ 74.424343][ T4295] do_xmote+0x7b6/0x1120 [ 74.428597][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 74.433265][ T4295] do_sync+0x486/0xc00 [ 74.437416][ T4295] ? slot_put+0x1e0/0x1e0 [ 74.441728][ T4295] ? do_sync+0x47e/0xc00 [ 74.445953][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 74.451136][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 74.455889][ T4295] gfs2_sync_fs+0x48/0xb0 [ 74.460213][ T4295] sync_filesystem+0xe6/0x220 [ 74.464872][ T4295] generic_shutdown_super+0x6b/0x300 [ 74.470138][ T4295] kill_block_super+0x7c/0xe0 [ 74.474795][ T4295] deactivate_locked_super+0x93/0xf0 [ 74.480061][ T4295] cleanup_mnt+0x418/0x4d0 [ 74.484460][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 74.489649][ T4295] task_work_run+0x125/0x1a0 [ 74.494232][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 74.499602][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 74.505144][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 74.510597][ T4295] do_syscall_64+0x58/0xa0 [ 74.514993][ T4295] ? clear_bhb_loop+0x30/0x80 [ 74.519657][ T4295] ? clear_bhb_loop+0x30/0x80 [ 74.524330][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.530316][ T4295] RIP: 0033:0x7fb773b47a77 [ 74.534726][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 74.554436][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 74.562837][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 74.570793][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 74.578918][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 74.586872][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 74.594828][ T4295] R13: 00007fb773bcad7d R14: 0000000000012061 R15: 00007ffc4c8d5560 [ 74.602798][ T4295] [ 74.606405][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 74.615420][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 74.622136][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 74.628349][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 74.635898][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 74.645951][ T4295] Call Trace: [ 74.649228][ T4295] [ 74.652145][ T4295] dump_stack_lvl+0x168/0x230 [ 74.656806][ T4295] ? kobject_uevent_env+0x371/0x890 [ 74.661992][ T4295] ? show_regs_print_info+0x20/0x20 [ 74.667263][ T4295] ? load_image+0x3b0/0x3b0 [ 74.671889][ T4295] ? kobject_uevent_env+0x371/0x890 [ 74.677079][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 74.682189][ T4295] gfs2_withdraw+0x111b/0x1460 [ 74.686977][ T4295] ? gfs2_lm+0x220/0x220 [ 74.691313][ T4295] ? __schedule+0x11c3/0x4390 [ 74.695986][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 74.701172][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 74.706188][ T4295] ? do_promote+0x71a/0xab0 [ 74.710850][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 74.715963][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 74.721071][ T4295] inode_go_lock+0x127/0x470 [ 74.725648][ T4295] do_promote+0x741/0xab0 [ 74.729983][ T4295] finish_xmote+0x514/0xb70 [ 74.734488][ T4295] do_xmote+0x7b6/0x1120 [ 74.738726][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 74.743414][ T4295] do_sync+0x486/0xc00 [ 74.747488][ T4295] ? slot_put+0x1e0/0x1e0 [ 74.751803][ T4295] ? do_sync+0x47e/0xc00 [ 74.756160][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 74.761373][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 74.766402][ T4295] gfs2_sync_fs+0x48/0xb0 [ 74.770722][ T4295] sync_filesystem+0xe6/0x220 [ 74.775390][ T4295] generic_shutdown_super+0x6b/0x300 [ 74.780684][ T4295] kill_block_super+0x7c/0xe0 [ 74.785365][ T4295] deactivate_locked_super+0x93/0xf0 [ 74.790641][ T4295] cleanup_mnt+0x418/0x4d0 [ 74.795043][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 74.800235][ T4295] task_work_run+0x125/0x1a0 [ 74.804811][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 74.810360][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 74.815912][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 74.821370][ T4295] do_syscall_64+0x58/0xa0 [ 74.825775][ T4295] ? clear_bhb_loop+0x30/0x80 [ 74.830438][ T4295] ? clear_bhb_loop+0x30/0x80 [ 74.835206][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.841113][ T4295] RIP: 0033:0x7fb773b47a77 [ 74.845523][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 74.865121][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 74.873523][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 74.881478][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 74.889434][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 74.897396][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 74.905443][ T4295] R13: 00007fb773bcad7d R14: 0000000000012061 R15: 00007ffc4c8d5560 [ 74.913615][ T4295] [ 75.204266][ T4333] loop0: detected capacity change from 0 to 32768 [ 75.264174][ T4333] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 75.272354][ T4333] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 75.285684][ T4333] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 75.294831][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 75.301818][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 75.335211][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 33ms [ 75.344704][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 75.349971][ T4333] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 75.418696][ T4333] gfs2: fsid=syz:syz.0: found 1 quota changes [ 75.430989][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 75.430989][ T4295] inode = 11 2339 [ 75.430989][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 75.450093][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 75.462938][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 75.477274][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 75.484846][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.494897][ T4295] Call Trace: [ 75.498161][ T4295] [ 75.501336][ T4295] dump_stack_lvl+0x168/0x230 [ 75.506002][ T4295] ? show_regs_print_info+0x20/0x20 [ 75.511183][ T4295] ? load_image+0x3b0/0x3b0 [ 75.515690][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 75.520700][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 75.525897][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 75.530948][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 75.535992][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 75.540767][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 75.545811][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 75.550918][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 75.555806][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 75.560512][ T4295] ? gfs2_lm+0x220/0x220 [ 75.564739][ T4295] ? __schedule+0x11c3/0x4390 [ 75.569509][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 75.574345][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 75.579532][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 75.584544][ T4295] ? do_promote+0x71a/0xab0 [ 75.589031][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 75.594126][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 75.599139][ T4295] inode_go_lock+0x127/0x470 [ 75.603714][ T4295] do_promote+0x741/0xab0 [ 75.608039][ T4295] finish_xmote+0x514/0xb70 [ 75.612619][ T4295] do_xmote+0x7b6/0x1120 [ 75.616853][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 75.621611][ T4295] do_sync+0x486/0xc00 [ 75.625669][ T4295] ? slot_put+0x1e0/0x1e0 [ 75.629984][ T4295] ? do_sync+0x47e/0xc00 [ 75.634210][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 75.639395][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 75.644239][ T4295] gfs2_sync_fs+0x48/0xb0 [ 75.648549][ T4295] sync_filesystem+0xe6/0x220 [ 75.653208][ T4295] generic_shutdown_super+0x6b/0x300 [ 75.658487][ T4295] kill_block_super+0x7c/0xe0 [ 75.663147][ T4295] deactivate_locked_super+0x93/0xf0 [ 75.668414][ T4295] cleanup_mnt+0x418/0x4d0 [ 75.672821][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 75.678023][ T4295] task_work_run+0x125/0x1a0 [ 75.682617][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 75.687979][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 75.693509][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 75.698962][ T4295] do_syscall_64+0x58/0xa0 [ 75.703360][ T4295] ? clear_bhb_loop+0x30/0x80 [ 75.708028][ T4295] ? clear_bhb_loop+0x30/0x80 [ 75.712784][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.718657][ T4295] RIP: 0033:0x7fb773b47a77 [ 75.723053][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 75.742657][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.751066][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 75.759023][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 75.766993][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 75.774946][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 75.782898][ T4295] R13: 00007fb773bcad7d R14: 0000000000012508 R15: 00007ffc4c8d5560 [ 75.790861][ T4295] [ 75.798761][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 75.807940][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 75.815692][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 75.821771][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 75.829401][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.839442][ T4295] Call Trace: [ 75.842726][ T4295] [ 75.845662][ T4295] dump_stack_lvl+0x168/0x230 [ 75.850333][ T4295] ? kobject_uevent_env+0x371/0x890 [ 75.855697][ T4295] ? show_regs_print_info+0x20/0x20 [ 75.860895][ T4295] ? load_image+0x3b0/0x3b0 [ 75.865385][ T4295] ? kobject_uevent_env+0x371/0x890 [ 75.870562][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 75.875662][ T4295] gfs2_withdraw+0x111b/0x1460 [ 75.880421][ T4295] ? gfs2_lm+0x220/0x220 [ 75.884731][ T4295] ? __schedule+0x11c3/0x4390 [ 75.889407][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 75.894585][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 75.899601][ T4295] ? do_promote+0x71a/0xab0 [ 75.904089][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 75.909182][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 75.914196][ T4295] inode_go_lock+0x127/0x470 [ 75.918776][ T4295] do_promote+0x741/0xab0 [ 75.923094][ T4295] finish_xmote+0x514/0xb70 [ 75.927583][ T4295] do_xmote+0x7b6/0x1120 [ 75.931813][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 75.936481][ T4295] do_sync+0x486/0xc00 [ 75.940538][ T4295] ? slot_put+0x1e0/0x1e0 [ 75.944850][ T4295] ? do_sync+0x47e/0xc00 [ 75.949074][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 75.954268][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 75.959023][ T4295] gfs2_sync_fs+0x48/0xb0 [ 75.963467][ T4295] sync_filesystem+0xe6/0x220 [ 75.968134][ T4295] generic_shutdown_super+0x6b/0x300 [ 75.974115][ T4295] kill_block_super+0x7c/0xe0 [ 75.978779][ T4295] deactivate_locked_super+0x93/0xf0 [ 75.984055][ T4295] cleanup_mnt+0x418/0x4d0 [ 75.988454][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 75.993639][ T4295] task_work_run+0x125/0x1a0 [ 75.998229][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 76.003595][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 76.009141][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 76.014667][ T4295] do_syscall_64+0x58/0xa0 [ 76.019075][ T4295] ? clear_bhb_loop+0x30/0x80 [ 76.023738][ T4295] ? clear_bhb_loop+0x30/0x80 [ 76.028400][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.034276][ T4295] RIP: 0033:0x7fb773b47a77 [ 76.038694][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 76.058489][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.066997][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 76.074961][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 76.082936][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 76.090998][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 76.098957][ T4295] R13: 00007fb773bcad7d R14: 0000000000012508 R15: 00007ffc4c8d5560 [ 76.107011][ T4295] [ 76.372350][ T4336] loop0: detected capacity change from 0 to 32768 [ 76.434536][ T4336] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 76.443618][ T4336] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 76.455180][ T13] cfg80211: failed to load regulatory.db [ 76.466937][ T4336] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 76.478930][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 76.488245][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 76.541931][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 53ms [ 76.559871][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 76.569890][ T4336] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 76.669291][ T4336] gfs2: fsid=syz:syz.0: found 1 quota changes [ 76.704216][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 76.704216][ T4295] inode = 11 2339 [ 76.704216][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 76.742631][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 76.758452][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 76.772662][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 76.780223][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.790711][ T4295] Call Trace: [ 76.794077][ T4295] [ 76.797014][ T4295] dump_stack_lvl+0x168/0x230 [ 76.801697][ T4295] ? show_regs_print_info+0x20/0x20 [ 76.806900][ T4295] ? load_image+0x3b0/0x3b0 [ 76.811528][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 76.816641][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 76.821844][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 76.826874][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 76.831910][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 76.836678][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 76.841614][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 76.846463][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 76.851344][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 76.856035][ T4295] ? gfs2_lm+0x220/0x220 [ 76.860276][ T4295] ? __schedule+0x11c3/0x4390 [ 76.864955][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 76.869831][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 76.875054][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 76.880103][ T4295] ? do_promote+0x71a/0xab0 [ 76.884626][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 76.889743][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 76.894782][ T4295] inode_go_lock+0x127/0x470 [ 76.899484][ T4295] do_promote+0x741/0xab0 [ 76.903825][ T4295] finish_xmote+0x514/0xb70 [ 76.908398][ T4295] do_xmote+0x7b6/0x1120 [ 76.912649][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 76.917339][ T4295] do_sync+0x486/0xc00 [ 76.921436][ T4295] ? slot_put+0x1e0/0x1e0 [ 76.925752][ T4295] ? do_sync+0x47e/0xc00 [ 76.929979][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 76.935170][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 76.939933][ T4295] gfs2_sync_fs+0x48/0xb0 [ 76.944243][ T4295] sync_filesystem+0xe6/0x220 [ 76.949005][ T4295] generic_shutdown_super+0x6b/0x300 [ 76.954279][ T4295] kill_block_super+0x7c/0xe0 [ 76.958940][ T4295] deactivate_locked_super+0x93/0xf0 [ 76.964213][ T4295] cleanup_mnt+0x418/0x4d0 [ 76.968614][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 76.973799][ T4295] task_work_run+0x125/0x1a0 [ 76.978380][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 76.983736][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 76.989265][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 76.994718][ T4295] do_syscall_64+0x58/0xa0 [ 76.999194][ T4295] ? clear_bhb_loop+0x30/0x80 [ 77.003857][ T4295] ? clear_bhb_loop+0x30/0x80 [ 77.008526][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.014493][ T4295] RIP: 0033:0x7fb773b47a77 [ 77.018903][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 77.038576][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.047025][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 77.054993][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 77.062960][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 77.071011][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 77.078993][ T4295] R13: 00007fb773bcad7d R14: 000000000001299a R15: 00007ffc4c8d5560 [ 77.086965][ T4295] [ 77.091389][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 77.100211][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 77.107677][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 77.114007][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 77.121756][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.132000][ T4295] Call Trace: [ 77.135365][ T4295] [ 77.138412][ T4295] dump_stack_lvl+0x168/0x230 [ 77.143087][ T4295] ? kobject_uevent_env+0x371/0x890 [ 77.148271][ T4295] ? show_regs_print_info+0x20/0x20 [ 77.153455][ T4295] ? load_image+0x3b0/0x3b0 [ 77.157944][ T4295] ? kobject_uevent_env+0x371/0x890 [ 77.163130][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 77.168235][ T4295] gfs2_withdraw+0x111b/0x1460 [ 77.172990][ T4295] ? gfs2_lm+0x220/0x220 [ 77.177231][ T4295] ? __schedule+0x11c3/0x4390 [ 77.181897][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 77.187093][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 77.192289][ T4295] ? do_promote+0x71a/0xab0 [ 77.196779][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 77.201884][ T4295] ? __lock_acquire+0x7c60/0x7c60 [ 77.206897][ T4295] inode_go_lock+0x127/0x470 [ 77.211493][ T4295] do_promote+0x741/0xab0 [ 77.215907][ T4295] finish_xmote+0x514/0xb70 [ 77.220409][ T4295] do_xmote+0x7b6/0x1120 [ 77.224646][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 77.229316][ T4295] do_sync+0x486/0xc00 [ 77.233375][ T4295] ? slot_put+0x1e0/0x1e0 [ 77.237693][ T4295] ? do_sync+0x47e/0xc00 [ 77.241923][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 77.247109][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 77.251869][ T4295] gfs2_sync_fs+0x48/0xb0 [ 77.256184][ T4295] sync_filesystem+0xe6/0x220 [ 77.260852][ T4295] generic_shutdown_super+0x6b/0x300 [ 77.266239][ T4295] kill_block_super+0x7c/0xe0 [ 77.270902][ T4295] deactivate_locked_super+0x93/0xf0 [ 77.276170][ T4295] cleanup_mnt+0x418/0x4d0 [ 77.280594][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 77.285870][ T4295] task_work_run+0x125/0x1a0 [ 77.290539][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 77.295901][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 77.301519][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 77.306974][ T4295] do_syscall_64+0x58/0xa0 [ 77.311372][ T4295] ? clear_bhb_loop+0x30/0x80 [ 77.316030][ T4295] ? clear_bhb_loop+0x30/0x80 [ 77.320704][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.326708][ T4295] RIP: 0033:0x7fb773b47a77 [ 77.331118][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 77.350722][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.359122][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 77.367095][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 77.375065][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 77.383018][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 77.391036][ T4295] R13: 00007fb773bcad7d R14: 000000000001299a R15: 00007ffc4c8d5560 [ 77.399228][ T4295] [ 77.408215][ T4295] ================================================================== [ 77.416593][ T4295] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 77.423385][ T4295] Read of size 8 at addr ffff8880620ec720 by task syz-executor/4295 [ 77.431448][ T4295] [ 77.433760][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 77.441317][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.451367][ T4295] Call Trace: [ 77.454643][ T4295] [ 77.457562][ T4295] dump_stack_lvl+0x168/0x230 [ 77.462245][ T4295] ? show_regs_print_info+0x20/0x20 [ 77.467428][ T4295] ? _printk+0xcc/0x110 [ 77.471578][ T4295] ? load_image+0x3b0/0x3b0 [ 77.476070][ T4295] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 77.481517][ T4295] print_address_description+0x60/0x2d0 [ 77.487337][ T4295] ? qd_unlock+0x30/0x2d0 [ 77.491653][ T4295] kasan_report+0xdf/0x130 [ 77.496059][ T4295] ? qd_unlock+0x30/0x2d0 [ 77.500377][ T4295] kasan_check_range+0x27b/0x290 [ 77.505431][ T4295] qd_unlock+0x30/0x2d0 [ 77.509579][ T4295] gfs2_quota_sync+0x5bf/0x6f0 [ 77.514368][ T4295] gfs2_sync_fs+0x48/0xb0 [ 77.518862][ T4295] sync_filesystem+0xe6/0x220 [ 77.523593][ T4295] generic_shutdown_super+0x6b/0x300 [ 77.529151][ T4295] kill_block_super+0x7c/0xe0 [ 77.534006][ T4295] deactivate_locked_super+0x93/0xf0 [ 77.539390][ T4295] cleanup_mnt+0x418/0x4d0 [ 77.543798][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 77.548986][ T4295] task_work_run+0x125/0x1a0 [ 77.553678][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 77.559174][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 77.564711][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 77.570160][ T4295] do_syscall_64+0x58/0xa0 [ 77.574560][ T4295] ? clear_bhb_loop+0x30/0x80 [ 77.579222][ T4295] ? clear_bhb_loop+0x30/0x80 [ 77.583879][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.589754][ T4295] RIP: 0033:0x7fb773b47a77 [ 77.594150][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 77.614173][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.622575][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 77.630822][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 77.638788][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 77.646752][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 77.654721][ T4295] R13: 00007fb773bcad7d R14: 000000000001299a R15: 00007ffc4c8d5560 [ 77.662712][ T4295] [ 77.665859][ T4295] [ 77.668183][ T4295] Allocated by task 4336: [ 77.672536][ T4295] __kasan_slab_alloc+0x9c/0xd0 [ 77.677389][ T4295] slab_post_alloc_hook+0x4c/0x380 [ 77.682478][ T4295] kmem_cache_alloc+0x100/0x290 [ 77.687307][ T4295] qd_alloc+0x50/0x260 [ 77.691355][ T4295] gfs2_quota_init+0x730/0xe80 [ 77.696099][ T4295] gfs2_make_fs_rw+0x3f5/0x560 [ 77.700978][ T4295] gfs2_fill_super+0x188a/0x1f50 [ 77.705910][ T4295] get_tree_bdev+0x3f1/0x610 [ 77.710490][ T4295] gfs2_get_tree+0x4d/0x1e0 [ 77.714996][ T4295] vfs_get_tree+0x88/0x270 [ 77.719553][ T4295] do_new_mount+0x24a/0xa40 [ 77.724048][ T4295] __se_sys_mount+0x2d6/0x3c0 [ 77.728711][ T4295] do_syscall_64+0x4c/0xa0 [ 77.733222][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.739118][ T4295] [ 77.741424][ T4295] Freed by task 0: [ 77.745122][ T4295] kasan_set_track+0x4b/0x70 [ 77.749693][ T4295] kasan_set_free_info+0x1f/0x40 [ 77.754668][ T4295] ____kasan_slab_free+0xd5/0x110 [ 77.759674][ T4295] slab_free_freelist_hook+0xea/0x170 [ 77.765024][ T4295] kmem_cache_free+0x8f/0x210 [ 77.769678][ T4295] rcu_core+0x962/0x15d0 [ 77.773896][ T4295] handle_softirqs+0x328/0x820 [ 77.778637][ T4295] __irq_exit_rcu+0x12f/0x220 [ 77.783292][ T4295] irq_exit_rcu+0x5/0x20 [ 77.787511][ T4295] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 77.793124][ T4295] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 77.799089][ T4295] [ 77.801393][ T4295] Last potentially related work creation: [ 77.807081][ T4295] kasan_save_stack+0x35/0x60 [ 77.811740][ T4295] kasan_record_aux_stack+0xb8/0x100 [ 77.817010][ T4295] call_rcu+0x182/0x930 [ 77.821146][ T4295] gfs2_quota_cleanup+0x43c/0x6a0 [ 77.826151][ T4295] gfs2_make_fs_ro+0x237/0x5d0 [ 77.830896][ T4295] gfs2_withdraw+0x5f9/0x1460 [ 77.835549][ T4295] gfs2_inode_refresh+0xb5e/0xfe0 [ 77.840554][ T4295] inode_go_lock+0x127/0x470 [ 77.845124][ T4295] do_promote+0x741/0xab0 [ 77.849433][ T4295] finish_xmote+0x514/0xb70 [ 77.853917][ T4295] do_xmote+0x7b6/0x1120 [ 77.858144][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 77.862802][ T4295] do_sync+0x486/0xc00 [ 77.866848][ T4295] gfs2_quota_sync+0x32c/0x6f0 [ 77.871589][ T4295] gfs2_sync_fs+0x48/0xb0 [ 77.875896][ T4295] sync_filesystem+0xe6/0x220 [ 77.880555][ T4295] generic_shutdown_super+0x6b/0x300 [ 77.885822][ T4295] kill_block_super+0x7c/0xe0 [ 77.890499][ T4295] deactivate_locked_super+0x93/0xf0 [ 77.895763][ T4295] cleanup_mnt+0x418/0x4d0 [ 77.900198][ T4295] task_work_run+0x125/0x1a0 [ 77.904768][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 77.910120][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 77.915652][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 77.921092][ T4295] do_syscall_64+0x58/0xa0 [ 77.925489][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.931373][ T4295] [ 77.933681][ T4295] The buggy address belongs to the object at ffff8880620ec690 [ 77.933681][ T4295] which belongs to the cache gfs2_quotad of size 272 [ 77.947716][ T4295] The buggy address is located 144 bytes inside of [ 77.947716][ T4295] 272-byte region [ffff8880620ec690, ffff8880620ec7a0) [ 77.960979][ T4295] The buggy address belongs to the page: [ 77.966601][ T4295] page:ffffea0001883b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x620ec [ 77.976739][ T4295] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 77.984286][ T4295] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801db47a00 [ 77.992850][ T4295] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 78.001412][ T4295] page dumped because: kasan: bad access detected [ 78.007812][ T4295] page_owner tracks the page as allocated [ 78.013508][ T4295] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4313, ts 68174294624, free_ts 57070429981 [ 78.032596][ T4295] get_page_from_freelist+0x1b77/0x1c60 [ 78.038152][ T4295] __alloc_pages+0x1e1/0x470 [ 78.042816][ T4295] new_slab+0xc0/0x4b0 [ 78.046867][ T4295] ___slab_alloc+0x81e/0xdf0 [ 78.051435][ T4295] kmem_cache_alloc+0x195/0x290 [ 78.056262][ T4295] qd_alloc+0x50/0x260 [ 78.060313][ T4295] gfs2_quota_init+0x730/0xe80 [ 78.065055][ T4295] gfs2_make_fs_rw+0x3f5/0x560 [ 78.069800][ T4295] gfs2_fill_super+0x188a/0x1f50 [ 78.074717][ T4295] get_tree_bdev+0x3f1/0x610 [ 78.079315][ T4295] gfs2_get_tree+0x4d/0x1e0 [ 78.083799][ T4295] vfs_get_tree+0x88/0x270 [ 78.088197][ T4295] do_new_mount+0x24a/0xa40 [ 78.092711][ T4295] __se_sys_mount+0x2d6/0x3c0 [ 78.097365][ T4295] do_syscall_64+0x4c/0xa0 [ 78.101759][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.107633][ T4295] page last free stack trace: [ 78.112285][ T4295] free_unref_page_prepare+0x637/0x6c0 [ 78.117813][ T4295] free_unref_page_list+0x122/0x7e0 [ 78.122998][ T4295] release_pages+0x184b/0x1bb0 [ 78.127741][ T4295] tlb_finish_mmu+0x164/0x2e0 [ 78.132395][ T4295] unmap_region+0x315/0x360 [ 78.136965][ T4295] __do_munmap+0x9d3/0xdc0 [ 78.141378][ T4295] __vm_munmap+0x137/0x230 [ 78.145808][ T4295] __x64_sys_munmap+0x67/0x70 [ 78.150488][ T4295] do_syscall_64+0x4c/0xa0 [ 78.154886][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.160761][ T4295] [ 78.163064][ T4295] Memory state around the buggy address: [ 78.168843][ T4295] ffff8880620ec600: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 78.176890][ T4295] ffff8880620ec680: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.184933][ T4295] >ffff8880620ec700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.192991][ T4295] ^ [ 78.198084][ T4295] ffff8880620ec780: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 78.206218][ T4295] ffff8880620ec800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.214255][ T4295] ================================================================== [ 78.222305][ T4295] Disabling lock debugging due to kernel taint [ 78.229360][ T4295] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.236578][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Tainted: G B syzkaller #0 [ 78.245507][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.255545][ T4295] Call Trace: [ 78.258809][ T4295] [ 78.261719][ T4295] dump_stack_lvl+0x168/0x230 [ 78.266383][ T4295] ? show_regs_print_info+0x20/0x20 [ 78.271561][ T4295] ? load_image+0x3b0/0x3b0 [ 78.276042][ T4295] panic+0x2c9/0x7f0 [ 78.279915][ T4295] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.286045][ T4295] ? bpf_jit_dump+0xd0/0xd0 [ 78.290525][ T4295] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 78.296392][ T4295] ? _raw_spin_unlock+0x40/0x40 [ 78.301233][ T4295] ? qd_unlock+0x30/0x2d0 [ 78.305542][ T4295] check_panic_on_warn+0x80/0xa0 [ 78.310456][ T4295] ? qd_unlock+0x30/0x2d0 [ 78.315291][ T4295] end_report+0x6d/0xf0 [ 78.319434][ T4295] kasan_report+0x102/0x130 [ 78.323912][ T4295] ? qd_unlock+0x30/0x2d0 [ 78.328262][ T4295] kasan_check_range+0x27b/0x290 [ 78.333180][ T4295] qd_unlock+0x30/0x2d0 [ 78.337318][ T4295] gfs2_quota_sync+0x5bf/0x6f0 [ 78.342063][ T4295] gfs2_sync_fs+0x48/0xb0 [ 78.346464][ T4295] sync_filesystem+0xe6/0x220 [ 78.351118][ T4295] generic_shutdown_super+0x6b/0x300 [ 78.356389][ T4295] kill_block_super+0x7c/0xe0 [ 78.361045][ T4295] deactivate_locked_super+0x93/0xf0 [ 78.366309][ T4295] cleanup_mnt+0x418/0x4d0 [ 78.370704][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 78.375886][ T4295] task_work_run+0x125/0x1a0 [ 78.380468][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 78.385819][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 78.391347][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 78.396789][ T4295] do_syscall_64+0x58/0xa0 [ 78.401202][ T4295] ? clear_bhb_loop+0x30/0x80 [ 78.405856][ T4295] ? clear_bhb_loop+0x30/0x80 [ 78.410513][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.416489][ T4295] RIP: 0033:0x7fb773b47a77 [ 78.420904][ T4295] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 78.440499][ T4295] RSP: 002b:00007ffc4c8d43d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.448893][ T4295] RAX: 0000000000000000 RBX: 00007fb773bcad7d RCX: 00007fb773b47a77 [ 78.456876][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c8d4490 [ 78.464839][ T4295] RBP: 00007ffc4c8d4490 R08: 0000000000000000 R09: 0000000000000000 [ 78.472818][ T4295] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c8d5520 [ 78.480794][ T4295] R13: 00007fb773bcad7d R14: 000000000001299a R15: 00007ffc4c8d5560 [ 78.488755][ T4295] [ 78.492110][ T4295] Kernel Offset: disabled [ 78.496438][ T4295] Rebooting in 86400 seconds..