syzbot


kernel BUG in gfs2_quota_cleanup (3)

Status: upstream: reported C repro on 2025/11/27 17:40
Subsystems: gfs2
[Documentation on labels]
Reported-by: syzbot+af4d53576692f8956fd6@syzkaller.appspotmail.com
First crash: 114d, last: 8d22h
Cause bisection: failed (error log, bisect log)
  
Discussions (2)
Title Replies (including bot) Last reply
[syzbot] [gfs2?] kernel BUG in gfs2_quota_cleanup (3) 1 (3) 2025/11/29 12:06
[PATCH] gfs2: replace BUG_ON with WARN_ON_ONCE in gfs2_quota_cleanup 2 (2) 2025/11/28 06:07
Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG in gfs2_quota_cleanup (2) gfs2 -1 2 277d 290d 0/29 auto-obsoleted due to no activity on 2025/09/22 04:04
upstream kernel BUG in gfs2_quota_cleanup gfs2 -1 C done 4 819d 919d 25/29 fixed on 2024/01/30 15:47
Last patch testing requests (4)
Created Duration User Patch Repo Result
2025/12/08 04:19 18m retest repro linux-next report log
2025/12/08 04:19 27m retest repro linux-next report log
2025/12/08 04:19 54m retest repro linux-next report log
2025/11/29 10:11 1h15m ssranevjti@gmail.com patch upstream OK log

Sample crash report:
R13: 00007f42f6216038 R14: 00007f42f6215fa0 R15: 00007ffe01899008
 </TASK>
gfs2: fsid=syz:syz.0: about to withdraw this file system
------------[ cut here ]------------
kernel BUG at fs/gfs2/quota.c:1521!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 0 UID: 0 PID: 5536 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
RIP: 0010:gfs2_quota_cleanup+0x75e/0x760 fs/gfs2/quota.c:1520
Code: ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b fd ff ff 4c 89 f7 e8 12 29 0e fe e9 4e fd ff ff e8 e8 34 8c 07 e8 a3 5c a2 fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6
RSP: 0018:ffffc900037efa40 EFLAGS: 00010293
RAX: ffffffff84234c7d RBX: 0000000000000002 RCX: ffff88803506a4c0
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffffc900037efb50 R08: ffff888011bc40af R09: 1ffff11002378815
R10: dffffc0000000000 R11: ffffed1002378816 R12: 1ffff920006fdf4c
R13: ffff888012556800 R14: dffffc0000000000 R15: 0000000000000000
FS:  00007f42f6e616c0(0000) GS:ffff88808ca58000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6d1b152000 CR3: 0000000011b30000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 gfs2_make_fs_ro+0x2a0/0x320 fs/gfs2/super.c:568
 gfs2_reconfigure+0x6a5/0xb20 fs/gfs2/ops_fstype.c:1594
 reconfigure_super+0x227/0x8a0 fs/super.c:1080
 do_remount fs/namespace.c:3391 [inline]
 path_mount+0xdc5/0x10e0 fs/namespace.c:4151
 do_mount fs/namespace.c:4172 [inline]
 __do_sys_mount fs/namespace.c:4361 [inline]
 __se_sys_mount+0x31d/0x420 fs/namespace.c:4338
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f42f5f9c799
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f42f6e61028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f42f6215fa0 RCX: 00007f42f5f9c799
RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
RBP: 00007f42f6032bd9 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000003376039 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f42f6216038 R14: 00007f42f6215fa0 R15: 00007ffe01899008
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:gfs2_quota_cleanup+0x75e/0x760 fs/gfs2/quota.c:1520
Code: ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5b fd ff ff 4c 89 f7 e8 12 29 0e fe e9 4e fd ff ff e8 e8 34 8c 07 e8 a3 5c a2 fd 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6
RSP: 0018:ffffc900037efa40 EFLAGS: 00010293
RAX: ffffffff84234c7d RBX: 0000000000000002 RCX: ffff88803506a4c0
RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
RBP: ffffc900037efb50 R08: ffff888011bc40af R09: 1ffff11002378815
R10: dffffc0000000000 R11: ffffed1002378816 R12: 1ffff920006fdf4c
R13: ffff888012556800 R14: dffffc0000000000 R15: 0000000000000000
FS:  00007f42f6e616c0(0000) GS:ffff88808ca58000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f6d1b152000 CR3: 0000000011b30000 CR4: 0000000000352ef0

Crashes (34):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/03/04 09:08 upstream 0031c06807cf 4180d919 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2025/11/24 03:11 linux-next d724c6f85e80 4fb8ef37 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2025/11/23 20:32 linux-next d724c6f85e80 4fb8ef37 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2025/11/24 00:30 linux-next d724c6f85e80 4fb8ef37 .config console log report syz / log [disk image] [vmlinux] [kernel image] [mounted in repro (corrupt fs)] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2026/03/09 12:38 upstream 1f318b96cc84 5cb44a80 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/03/05 04:39 upstream ecc64d2dc9ff a9fe5c9e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/03/04 07:51 upstream 0031c06807cf 4180d919 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/02/28 00:29 upstream a75cb869a8cc 2cf092b8 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/02/15 19:31 upstream ca4ee40bf13d 1e62d198 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/02/11 09:01 upstream dc855b77719f 441e25b7 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/02/05 14:16 upstream f14faaf3a1fb 4936e85c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/01/31 07:17 upstream 283073725700 c75a2f6e .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/01/28 16:59 upstream 1f97d9dcf536 004c195c .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/01/27 17:04 upstream fcb70a56f4d8 43e1df1d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/01/25 14:45 upstream d91a46d6805a 40acda8a .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/01/24 00:11 upstream c133687c2eae 4f25b9b4 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/01/21 03:50 upstream c03e9c42ae8f 2494e18d .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/01/11 21:54 upstream 54e82e93ca93 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/01/10 22:36 upstream 54e82e93ca93 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/01/07 08:30 upstream 54e82e93ca93 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2025/12/21 21:43 upstream 9094662f6707 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2025/12/20 00:47 upstream dd9b004b7ff3 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2025/12/09 22:21 upstream cb015814f8b6 d1b870e1 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root kernel BUG in gfs2_quota_cleanup
2026/03/03 00:59 linux-next d517cb8cea01 28b83e23 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2026/02/15 15:40 linux-next 635c467cc14e 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2026/02/15 15:39 linux-next 635c467cc14e 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2026/02/15 10:47 linux-next 635c467cc14e 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2026/02/03 09:22 linux-next 193579fe0138 6df4c87a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2025/11/23 17:33 linux-next d724c6f85e80 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2025/11/23 17:31 linux-next d724c6f85e80 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2025/11/23 17:30 linux-next d724c6f85e80 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2025/11/23 17:30 linux-next d724c6f85e80 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2025/11/23 17:30 linux-next d724c6f85e80 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
2025/11/23 17:28 linux-next d724c6f85e80 4fb8ef37 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root kernel BUG in gfs2_quota_cleanup
* Struck through repros no longer work on HEAD.