Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts.
2026/02/04 12:39:00 parsed 1 programs
[ 56.980416][ T4187] cgroup: Unknown subsys name 'net'
[ 57.113038][ T4187] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 58.639832][ T4187] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 60.052330][ T4196] chnl_net:caif_netlink_parms(): no params data found
[ 60.091118][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.098549][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.106360][ T4196] device bridge_slave_0 entered promiscuous mode
[ 60.114998][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.122259][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.130060][ T4196] device bridge_slave_1 entered promiscuous mode
[ 60.148958][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 60.159580][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 60.179117][ T4196] team0: Port device team_slave_0 added
[ 60.186196][ T4196] team0: Port device team_slave_1 added
[ 60.201851][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 60.208809][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.234751][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 60.246813][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 60.254090][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 60.280003][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 60.307177][ T4196] device hsr_slave_0 entered promiscuous mode
[ 60.314081][ T4196] device hsr_slave_1 entered promiscuous mode
[ 60.408231][ T4196] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 60.418430][ T4196] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 60.427637][ T4196] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 60.436516][ T4196] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 60.460034][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.467142][ T4196] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 60.474808][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.481903][ T4196] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 60.521373][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0
[ 60.533535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 60.543143][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 60.551061][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 60.560116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 60.572595][ T4196] 8021q: adding VLAN 0 to HW filter on device team0
[ 60.583272][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 60.591596][ T151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 60.598688][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 60.610604][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 60.619445][ T151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 60.626507][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 60.644368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 60.653003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 60.665092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 60.676182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 60.686996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 60.697610][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 60.773453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 60.781322][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 60.793821][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 60.812981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 60.830874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 60.839236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 60.846790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 60.856616][ T4196] device veth0_vlan entered promiscuous mode
[ 60.866852][ T4196] device veth1_vlan entered promiscuous mode
[ 60.883859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 60.892058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 60.900332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 60.911905][ T4196] device veth0_macvtap entered promiscuous mode
[ 60.921356][ T4196] device veth1_macvtap entered promiscuous mode
[ 60.936380][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 60.944808][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 60.954564][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 60.965180][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 60.972817][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 60.983610][ T4196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.992549][ T4196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.001591][ T4196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.010454][ T4196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 61.149307][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 63.872985][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 66.173134][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 66.223873][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 66.926916][ T144] device hsr_slave_0 left promiscuous mode
[ 66.934118][ T144] device hsr_slave_1 left promiscuous mode
[ 66.950742][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 66.966839][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 66.998658][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 67.018466][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 67.038574][ T144] device bridge_slave_1 left promiscuous mode
[ 67.045466][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.088414][ T144] device bridge_slave_0 left promiscuous mode
[ 67.094879][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.137347][ T144] device veth1_macvtap left promiscuous mode
[ 67.148325][ T144] device veth0_macvtap left promiscuous mode
[ 67.154424][ T144] device veth1_vlan left promiscuous mode
[ 67.171198][ T144] device veth0_vlan left promiscuous mode
[ 67.345930][ T144] team0 (unregistering): Port device team_slave_1 removed
[ 67.360996][ T144] team0 (unregistering): Port device team_slave_0 removed
[ 67.378956][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 67.393817][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 67.441685][ T144] bond0 (unregistering): Released all slaves
[ 67.736787][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.766073][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.785009][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 67.815620][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.824217][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.834439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/02/04 12:39:14 executed programs: 0
[ 69.609438][ T4371] chnl_net:caif_netlink_parms(): no params data found
[ 69.674754][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.682017][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.691891][ T4371] device bridge_slave_0 entered promiscuous mode
[ 69.700452][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.707574][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.717243][ T4371] device bridge_slave_1 entered promiscuous mode
[ 69.741629][ T4371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 69.753143][ T4371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 69.782283][ T4371] team0: Port device team_slave_0 added
[ 69.791770][ T4371] team0: Port device team_slave_1 added
[ 69.811553][ T4371] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 69.818577][ T4371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.844975][ T4371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 69.857602][ T4371] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 69.864991][ T4371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.890978][ T4371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 69.925972][ T4371] device hsr_slave_0 entered promiscuous mode
[ 69.933422][ T4371] device hsr_slave_1 entered promiscuous mode
[ 70.644255][ T4371] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 70.656652][ T4371] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 70.667425][ T4371] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 70.677617][ T4371] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 70.748735][ T4371] 8021q: adding VLAN 0 to HW filter on device bond0
[ 70.762765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 70.771896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 70.782041][ T4371] 8021q: adding VLAN 0 to HW filter on device team0
[ 70.800723][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 70.810533][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 70.820642][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.827716][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.836225][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 70.850085][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 70.860827][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 70.870308][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.877379][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.889397][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 70.907560][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 70.919606][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 70.930092][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 70.939247][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 70.968239][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 70.976894][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 70.987115][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 70.996219][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 71.004631][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 71.013235][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 71.070827][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 71.274142][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 71.288029][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 71.300702][ T4371] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 71.366839][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 71.377207][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 71.386658][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.393182][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[ 71.419115][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 71.427244][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 71.437209][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 71.445483][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 71.453684][ T4411] Bluetooth: hci0: command 0x0409 tx timeout
[ 71.463141][ T4371] device veth0_vlan entered promiscuous mode
[ 71.507458][ T4371] device veth1_vlan entered promiscuous mode
[ 71.531809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 71.542992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 71.551961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 71.562328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 71.573786][ T4371] device veth0_macvtap entered promiscuous mode
[ 71.584322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 71.595449][ T4371] device veth1_macvtap entered promiscuous mode
[ 71.655404][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 71.665426][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 71.675066][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 71.702380][ T4371] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 71.711081][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 71.721111][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 71.732000][ T4371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.742283][ T4371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.751746][ T4371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.761925][ T4371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 71.892719][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 71.911913][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 71.959316][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 71.981660][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 72.008413][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 72.035922][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 72.683232][ T4488] loop0: detected capacity change from 0 to 32768
[ 72.806443][ T4488] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 72.829650][ T4488] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 72.870395][ T4488] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 72.893732][ T4397] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 72.907811][ T4397] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 72.956725][ T4397] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 48ms
[ 72.980166][ T4397] gfs2: fsid=syz:syz.0: jid=0: Done
[ 72.985816][ T4488] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 73.163724][ T4488] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 73.227796][ T4371] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 73.227796][ T4371] inode = 11 2339
[ 73.227796][ T4371] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[ 73.288485][ T4371] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 73.313018][ T4371] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 73.327159][ T4371] CPU: 1 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 73.334733][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 73.344800][ T4371] Call Trace:
[ 73.348096][ T4371]
[ 73.351040][ T4371] dump_stack_lvl+0x188/0x250
[ 73.355742][ T4371] ? show_regs_print_info+0x20/0x20
[ 73.360961][ T4371] ? load_image+0x400/0x400
[ 73.365493][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 73.370710][ T4371] gfs2_assert_warn_i+0x18f/0x2c0
[ 73.375759][ T4371] gfs2_quota_cleanup+0x4b4/0x6a0
[ 73.380809][ T4371] gfs2_make_fs_ro+0x440/0x620
[ 73.385587][ T4371] ? __might_sleep+0xf0/0xf0
[ 73.390194][ T4371] ? gfs2_dinode_out+0xb00/0xb00
[ 73.395143][ T4371] ? _raw_spin_unlock+0x24/0x40
[ 73.400024][ T4371] ? gfs2_glock_nq+0xcb0/0x1550
[ 73.404918][ T4371] gfs2_withdraw+0x610/0x1490
[ 73.409628][ T4371] ? gfs2_lm+0x240/0x240
[ 73.413889][ T4371] ? __schedule+0x11f7/0x43c0
[ 73.418586][ T4371] ? gfs2_freeze_lock+0x52/0xc0
[ 73.423464][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 73.428692][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 73.433737][ T4371] ? do_promote+0x71a/0xab0
[ 73.438257][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 73.443384][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 73.448435][ T4371] inode_go_lock+0x127/0x470
[ 73.453048][ T4371] do_promote+0x741/0xab0
[ 73.457406][ T4371] finish_xmote+0x4df/0xb00
[ 73.461930][ T4371] do_xmote+0x7b6/0x1120
[ 73.466205][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 73.470919][ T4371] do_sync+0x4ab/0xc40
[ 73.475013][ T4371] ? slot_put+0x1e0/0x1e0
[ 73.479367][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 73.484411][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 73.489453][ T4371] ? do_sync+0x4a3/0xc40
[ 73.493717][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 73.498933][ T4371] gfs2_quota_sync+0x32c/0x700
[ 73.503723][ T4371] gfs2_sync_fs+0x48/0xb0
[ 73.508071][ T4371] sync_filesystem+0xe6/0x220
[ 73.512770][ T4371] generic_shutdown_super+0x6b/0x300
[ 73.518083][ T4371] kill_block_super+0x7c/0xe0
[ 73.522790][ T4371] deactivate_locked_super+0x93/0xf0
[ 73.528092][ T4371] cleanup_mnt+0x42d/0x4e0
[ 73.532525][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 73.537747][ T4371] task_work_run+0x125/0x1a0
[ 73.542366][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 73.547757][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 73.553321][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 73.558801][ T4371] do_syscall_64+0x58/0xa0
[ 73.563235][ T4371] ? clear_bhb_loop+0x30/0x80
[ 73.567927][ T4371] ? clear_bhb_loop+0x30/0x80
[ 73.572621][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 73.578527][ T4371] RIP: 0033:0x7f315d210117
[ 73.582957][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 73.602577][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 73.611014][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 73.619015][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 73.627003][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 73.634990][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 73.642974][ T4371] R13: 00007f315d27871f R14: 0000000000011dd5 R15: 00007fff52955360
[ 73.650979][ T4371]
[ 73.659184][ T4397] Bluetooth: hci0: command 0x041b tx timeout
[ 73.670768][ T4371] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 73.684994][ T4371] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 73.693394][ T4371] gfs2: fsid=syz:syz.0: File system withdrawn
[ 73.699876][ T4371] CPU: 1 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 73.707437][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 73.717503][ T4371] Call Trace:
[ 73.720804][ T4371]
[ 73.723749][ T4371] dump_stack_lvl+0x188/0x250
[ 73.728443][ T4371] ? kobject_uevent_env+0x371/0x890
[ 73.733664][ T4371] ? show_regs_print_info+0x20/0x20
[ 73.738889][ T4371] ? load_image+0x400/0x400
[ 73.743415][ T4371] ? kobject_uevent_env+0x371/0x890
[ 73.748628][ T4371] ? lockref_put_or_lock+0x6e/0xb0
[ 73.753761][ T4371] gfs2_withdraw+0x1149/0x1490
[ 73.758554][ T4371] ? gfs2_lm+0x240/0x240
[ 73.762810][ T4371] ? __schedule+0x11f7/0x43c0
[ 73.767511][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 73.772734][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 73.777788][ T4371] ? do_promote+0x71a/0xab0
[ 73.782320][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 73.787448][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 73.792497][ T4371] inode_go_lock+0x127/0x470
[ 73.797115][ T4371] do_promote+0x741/0xab0
[ 73.801481][ T4371] finish_xmote+0x4df/0xb00
[ 73.806009][ T4371] do_xmote+0x7b6/0x1120
[ 73.810282][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 73.815001][ T4371] do_sync+0x4ab/0xc40
[ 73.819097][ T4371] ? slot_put+0x1e0/0x1e0
[ 73.823450][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 73.828491][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 73.833538][ T4371] ? do_sync+0x4a3/0xc40
[ 73.837796][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 73.843032][ T4371] gfs2_quota_sync+0x32c/0x700
[ 73.847827][ T4371] gfs2_sync_fs+0x48/0xb0
[ 73.852181][ T4371] sync_filesystem+0xe6/0x220
[ 73.856883][ T4371] generic_shutdown_super+0x6b/0x300
[ 73.862194][ T4371] kill_block_super+0x7c/0xe0
[ 73.866895][ T4371] deactivate_locked_super+0x93/0xf0
[ 73.872200][ T4371] cleanup_mnt+0x42d/0x4e0
[ 73.876639][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 73.881853][ T4371] task_work_run+0x125/0x1a0
[ 73.886449][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 73.891818][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 73.897364][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 73.902820][ T4371] do_syscall_64+0x58/0xa0
[ 73.907236][ T4371] ? clear_bhb_loop+0x30/0x80
[ 73.911908][ T4371] ? clear_bhb_loop+0x30/0x80
[ 73.916584][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 73.922474][ T4371] RIP: 0033:0x7f315d210117
[ 73.926891][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 73.946497][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 73.954912][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 73.962881][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 73.970853][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 73.978820][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 73.986786][ T4371] R13: 00007f315d27871f R14: 0000000000011dd5 R15: 00007fff52955360
[ 73.994765][ T4371]
[ 75.014345][ T4538] loop0: detected capacity change from 0 to 32768
[ 75.061101][ T4538] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 75.073540][ T4538] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 75.090202][ T4538] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 75.099242][ T4406] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 75.106038][ T4406] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 75.137399][ T4406] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms
[ 75.146944][ T4406] gfs2: fsid=syz:syz.0: jid=0: Done
[ 75.152571][ T4538] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 75.223305][ T4538] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 75.242430][ T4371] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 75.242430][ T4371] inode = 11 2339
[ 75.242430][ T4371] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[ 75.262874][ T4371] gfs2: fsid=syz:syz.0: about to withdraw this file system
2026/02/04 12:39:20 executed programs: 4
[ 75.276292][ T4371] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 75.291723][ T4371] CPU: 0 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 75.299296][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 75.309340][ T4371] Call Trace:
[ 75.312608][ T4371]
[ 75.315543][ T4371] dump_stack_lvl+0x188/0x250
[ 75.320214][ T4371] ? show_regs_print_info+0x20/0x20
[ 75.325402][ T4371] ? load_image+0x400/0x400
[ 75.329896][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 75.335090][ T4371] gfs2_assert_warn_i+0x18f/0x2c0
[ 75.340107][ T4371] gfs2_quota_cleanup+0x4b4/0x6a0
[ 75.345129][ T4371] gfs2_make_fs_ro+0x440/0x620
[ 75.349878][ T4371] ? __might_sleep+0xf0/0xf0
[ 75.354455][ T4371] ? gfs2_dinode_out+0xb00/0xb00
[ 75.359378][ T4371] ? _raw_spin_unlock+0x24/0x40
[ 75.364217][ T4371] ? gfs2_glock_nq+0xcb0/0x1550
[ 75.369066][ T4371] gfs2_withdraw+0x610/0x1490
[ 75.373737][ T4371] ? gfs2_lm+0x240/0x240
[ 75.377966][ T4371] ? __schedule+0x11f7/0x43c0
[ 75.382631][ T4371] ? gfs2_freeze_lock+0x52/0xc0
[ 75.387471][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 75.392658][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 75.397677][ T4371] ? do_promote+0x71a/0xab0
[ 75.402166][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 75.407265][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 75.412282][ T4371] inode_go_lock+0x127/0x470
[ 75.416863][ T4371] do_promote+0x741/0xab0
[ 75.421185][ T4371] finish_xmote+0x4df/0xb00
[ 75.425680][ T4371] do_xmote+0x7b6/0x1120
[ 75.429917][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 75.434600][ T4371] do_sync+0x4ab/0xc40
[ 75.438660][ T4371] ? slot_put+0x1e0/0x1e0
[ 75.442980][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 75.447988][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 75.453008][ T4371] ? do_sync+0x4a3/0xc40
[ 75.457339][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 75.462528][ T4371] gfs2_quota_sync+0x32c/0x700
[ 75.467286][ T4371] gfs2_sync_fs+0x48/0xb0
[ 75.471604][ T4371] sync_filesystem+0xe6/0x220
[ 75.476269][ T4371] generic_shutdown_super+0x6b/0x300
[ 75.481542][ T4371] kill_block_super+0x7c/0xe0
[ 75.486206][ T4371] deactivate_locked_super+0x93/0xf0
[ 75.491477][ T4371] cleanup_mnt+0x42d/0x4e0
[ 75.495882][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 75.501072][ T4371] task_work_run+0x125/0x1a0
[ 75.505652][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 75.511009][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 75.516543][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 75.521988][ T4371] do_syscall_64+0x58/0xa0
[ 75.526389][ T4371] ? clear_bhb_loop+0x30/0x80
[ 75.531052][ T4371] ? clear_bhb_loop+0x30/0x80
[ 75.535715][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 75.541595][ T4371] RIP: 0033:0x7f315d210117
[ 75.546004][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 75.565596][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 75.573999][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 75.581960][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 75.589923][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 75.597886][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 75.605846][ T4371] R13: 00007f315d27871f R14: 00000000000121df R15: 00007fff52955360
[ 75.613812][ T4371]
[ 75.620283][ T4371] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 75.629091][ T4371] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 75.635988][ T4371] gfs2: fsid=syz:syz.0: File system withdrawn
[ 75.642165][ T4371] CPU: 0 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 75.649720][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 75.659763][ T4371] Call Trace:
[ 75.663057][ T4371]
[ 75.665986][ T4371] dump_stack_lvl+0x188/0x250
[ 75.670653][ T4371] ? kobject_uevent_env+0x371/0x890
[ 75.675840][ T4371] ? show_regs_print_info+0x20/0x20
[ 75.681027][ T4371] ? load_image+0x400/0x400
[ 75.685517][ T4371] ? kobject_uevent_env+0x371/0x890
[ 75.690701][ T4371] ? lockref_put_or_lock+0x6e/0xb0
[ 75.695821][ T4371] gfs2_withdraw+0x1149/0x1490
[ 75.698033][ T4397] Bluetooth: hci0: command 0x040f tx timeout
[ 75.700590][ T4371] ? gfs2_lm+0x240/0x240
[ 75.710789][ T4371] ? __schedule+0x11f7/0x43c0
[ 75.715461][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 75.720650][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 75.725662][ T4371] ? do_promote+0x71a/0xab0
[ 75.730153][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 75.735253][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 75.740271][ T4371] inode_go_lock+0x127/0x470
[ 75.744853][ T4371] do_promote+0x741/0xab0
[ 75.749175][ T4371] finish_xmote+0x4df/0xb00
[ 75.753672][ T4371] do_xmote+0x7b6/0x1120
[ 75.757913][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 75.762587][ T4371] do_sync+0x4ab/0xc40
[ 75.766648][ T4371] ? slot_put+0x1e0/0x1e0
[ 75.770969][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 75.775985][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 75.781007][ T4371] ? do_sync+0x4a3/0xc40
[ 75.785241][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 75.790430][ T4371] gfs2_quota_sync+0x32c/0x700
[ 75.795191][ T4371] gfs2_sync_fs+0x48/0xb0
[ 75.799511][ T4371] sync_filesystem+0xe6/0x220
[ 75.804179][ T4371] generic_shutdown_super+0x6b/0x300
[ 75.809453][ T4371] kill_block_super+0x7c/0xe0
[ 75.814118][ T4371] deactivate_locked_super+0x93/0xf0
[ 75.819390][ T4371] cleanup_mnt+0x42d/0x4e0
[ 75.823794][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 75.828989][ T4371] task_work_run+0x125/0x1a0
[ 75.833569][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 75.838925][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 75.844457][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 75.849909][ T4371] do_syscall_64+0x58/0xa0
[ 75.854316][ T4371] ? clear_bhb_loop+0x30/0x80
[ 75.858982][ T4371] ? clear_bhb_loop+0x30/0x80
[ 75.863647][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 75.869528][ T4371] RIP: 0033:0x7f315d210117
[ 75.873930][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 75.893520][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 75.901924][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 75.909884][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 75.917849][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 75.925806][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 75.933765][ T4371] R13: 00007f315d27871f R14: 00000000000121df R15: 00007fff52955360
[ 75.941733][ T4371]
[ 76.257307][ T4564] loop0: detected capacity change from 0 to 32768
[ 76.310004][ T4564] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 76.320153][ T4564] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 76.333626][ T4564] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 76.342667][ T4397] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 76.349767][ T4397] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 76.382185][ T4397] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 32ms
[ 76.389886][ T4397] gfs2: fsid=syz:syz.0: jid=0: Done
[ 76.395135][ T4564] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 76.469776][ T4564] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 76.508729][ T4371] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 76.508729][ T4371] inode = 11 2339
[ 76.508729][ T4371] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[ 76.547772][ T4371] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 76.568241][ T4371] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 76.589342][ T4371] CPU: 0 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 76.596961][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 76.607032][ T4371] Call Trace:
[ 76.610327][ T4371]
[ 76.613270][ T4371] dump_stack_lvl+0x188/0x250
[ 76.617970][ T4371] ? show_regs_print_info+0x20/0x20
[ 76.623189][ T4371] ? load_image+0x400/0x400
[ 76.627717][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 76.632943][ T4371] gfs2_assert_warn_i+0x18f/0x2c0
[ 76.638018][ T4371] gfs2_quota_cleanup+0x4b4/0x6a0
[ 76.643080][ T4371] gfs2_make_fs_ro+0x440/0x620
[ 76.647862][ T4371] ? __might_sleep+0xf0/0xf0
[ 76.652476][ T4371] ? gfs2_dinode_out+0xb00/0xb00
[ 76.657426][ T4371] ? _raw_spin_unlock+0x24/0x40
[ 76.662294][ T4371] ? gfs2_glock_nq+0xcb0/0x1550
[ 76.667187][ T4371] gfs2_withdraw+0x610/0x1490
[ 76.671894][ T4371] ? gfs2_lm+0x240/0x240
[ 76.676163][ T4371] ? __schedule+0x11f7/0x43c0
[ 76.680868][ T4371] ? gfs2_freeze_lock+0x52/0xc0
[ 76.685740][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 76.690966][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 76.696014][ T4371] ? do_promote+0x71a/0xab0
[ 76.700539][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 76.705679][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 76.710736][ T4371] inode_go_lock+0x127/0x470
[ 76.715360][ T4371] do_promote+0x741/0xab0
[ 76.719716][ T4371] finish_xmote+0x4df/0xb00
[ 76.724243][ T4371] do_xmote+0x7b6/0x1120
[ 76.728515][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 76.733232][ T4371] do_sync+0x4ab/0xc40
[ 76.737334][ T4371] ? slot_put+0x1e0/0x1e0
[ 76.741687][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 76.746726][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 76.751766][ T4371] ? do_sync+0x4a3/0xc40
[ 76.756028][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 76.761248][ T4371] gfs2_quota_sync+0x32c/0x700
[ 76.766046][ T4371] gfs2_sync_fs+0x48/0xb0
[ 76.770394][ T4371] sync_filesystem+0xe6/0x220
[ 76.775089][ T4371] generic_shutdown_super+0x6b/0x300
[ 76.780392][ T4371] kill_block_super+0x7c/0xe0
[ 76.785088][ T4371] deactivate_locked_super+0x93/0xf0
[ 76.790388][ T4371] cleanup_mnt+0x42d/0x4e0
[ 76.794828][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 76.800052][ T4371] task_work_run+0x125/0x1a0
[ 76.804668][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 76.810061][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 76.815631][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 76.821107][ T4371] do_syscall_64+0x58/0xa0
[ 76.825539][ T4371] ? clear_bhb_loop+0x30/0x80
[ 76.830231][ T4371] ? clear_bhb_loop+0x30/0x80
[ 76.834923][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 76.840826][ T4371] RIP: 0033:0x7f315d210117
[ 76.845262][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 76.864883][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 76.873317][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 76.881305][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 76.889290][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 76.897275][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 76.905256][ T4371] R13: 00007f315d27871f R14: 0000000000012a9d R15: 00007fff52955360
[ 76.913259][ T4371]
[ 76.919607][ T4371] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 76.928584][ T4371] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 76.937630][ T4371] gfs2: fsid=syz:syz.0: File system withdrawn
[ 76.944024][ T4371] CPU: 0 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 76.951595][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 76.961659][ T4371] Call Trace:
[ 76.964948][ T4371]
[ 76.967890][ T4371] dump_stack_lvl+0x188/0x250
[ 76.972588][ T4371] ? kobject_uevent_env+0x371/0x890
[ 76.977805][ T4371] ? show_regs_print_info+0x20/0x20
[ 76.983026][ T4371] ? load_image+0x400/0x400
[ 76.987538][ T4371] ? kobject_uevent_env+0x371/0x890
[ 76.992723][ T4371] ? lockref_put_or_lock+0x6e/0xb0
[ 76.997828][ T4371] gfs2_withdraw+0x1149/0x1490
[ 77.002594][ T4371] ? gfs2_lm+0x240/0x240
[ 77.006820][ T4371] ? __schedule+0x11f7/0x43c0
[ 77.011491][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 77.016678][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 77.021689][ T4371] ? do_promote+0x71a/0xab0
[ 77.026178][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 77.031276][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 77.036300][ T4371] inode_go_lock+0x127/0x470
[ 77.040881][ T4371] do_promote+0x741/0xab0
[ 77.045205][ T4371] finish_xmote+0x4df/0xb00
[ 77.049701][ T4371] do_xmote+0x7b6/0x1120
[ 77.053938][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 77.058609][ T4371] do_sync+0x4ab/0xc40
[ 77.062671][ T4371] ? slot_put+0x1e0/0x1e0
[ 77.066990][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 77.072003][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 77.077030][ T4371] ? do_sync+0x4a3/0xc40
[ 77.081261][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 77.086448][ T4371] gfs2_quota_sync+0x32c/0x700
[ 77.091204][ T4371] gfs2_sync_fs+0x48/0xb0
[ 77.095523][ T4371] sync_filesystem+0xe6/0x220
[ 77.100188][ T4371] generic_shutdown_super+0x6b/0x300
[ 77.105462][ T4371] kill_block_super+0x7c/0xe0
[ 77.110131][ T4371] deactivate_locked_super+0x93/0xf0
[ 77.115409][ T4371] cleanup_mnt+0x42d/0x4e0
[ 77.119814][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 77.125006][ T4371] task_work_run+0x125/0x1a0
[ 77.129601][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 77.135015][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 77.140574][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 77.146024][ T4371] do_syscall_64+0x58/0xa0
[ 77.150429][ T4371] ? clear_bhb_loop+0x30/0x80
[ 77.155095][ T4371] ? clear_bhb_loop+0x30/0x80
[ 77.159757][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 77.165643][ T4371] RIP: 0033:0x7f315d210117
[ 77.170049][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 77.189641][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 77.198060][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 77.206020][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 77.213996][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 77.221957][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 77.229915][ T4371] R13: 00007f315d27871f R14: 0000000000012a9d R15: 00007fff52955360
[ 77.237885][ T4371]
[ 77.549665][ T4567] loop0: detected capacity change from 0 to 32768
[ 77.563384][ T4567] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 77.573642][ T4567] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 77.586010][ T4567] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 77.595105][ T4393] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 77.602214][ T4393] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 77.624799][ T4393] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 22ms
[ 77.632898][ T4393] gfs2: fsid=syz:syz.0: jid=0: Done
[ 77.638574][ T4567] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 77.708178][ T4567] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 77.728613][ T4371] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 77.728613][ T4371] inode = 11 2339
[ 77.728613][ T4371] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[ 77.747369][ T4371] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 77.763091][ T4371] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 77.767948][ T4397] Bluetooth: hci0: command 0x0419 tx timeout
[ 77.778997][ T4371] CPU: 0 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 77.790649][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 77.800717][ T4371] Call Trace:
[ 77.803998][ T4371]
[ 77.806919][ T4371] dump_stack_lvl+0x188/0x250
[ 77.811595][ T4371] ? show_regs_print_info+0x20/0x20
[ 77.816784][ T4371] ? load_image+0x400/0x400
[ 77.821284][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 77.826481][ T4371] gfs2_assert_warn_i+0x18f/0x2c0
[ 77.831500][ T4371] gfs2_quota_cleanup+0x4b4/0x6a0
[ 77.836534][ T4371] gfs2_make_fs_ro+0x440/0x620
[ 77.841288][ T4371] ? __might_sleep+0xf0/0xf0
[ 77.845868][ T4371] ? gfs2_dinode_out+0xb00/0xb00
[ 77.850794][ T4371] ? _raw_spin_unlock+0x24/0x40
[ 77.855634][ T4371] ? gfs2_glock_nq+0xcb0/0x1550
[ 77.860486][ T4371] gfs2_withdraw+0x610/0x1490
[ 77.865161][ T4371] ? gfs2_lm+0x240/0x240
[ 77.869391][ T4371] ? __schedule+0x11f7/0x43c0
[ 77.874058][ T4371] ? gfs2_freeze_lock+0x52/0xc0
[ 77.878897][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 77.884088][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 77.889104][ T4371] ? do_promote+0x71a/0xab0
[ 77.893602][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 77.898703][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 77.903721][ T4371] inode_go_lock+0x127/0x470
[ 77.908314][ T4371] do_promote+0x741/0xab0
[ 77.912644][ T4371] finish_xmote+0x4df/0xb00
[ 77.917140][ T4371] do_xmote+0x7b6/0x1120
[ 77.921390][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 77.926072][ T4371] do_sync+0x4ab/0xc40
[ 77.930136][ T4371] ? slot_put+0x1e0/0x1e0
[ 77.934466][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 77.939483][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 77.944501][ T4371] ? do_sync+0x4a3/0xc40
[ 77.948731][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 77.953919][ T4371] gfs2_quota_sync+0x32c/0x700
[ 77.958678][ T4371] gfs2_sync_fs+0x48/0xb0
[ 77.963002][ T4371] sync_filesystem+0xe6/0x220
[ 77.967668][ T4371] generic_shutdown_super+0x6b/0x300
[ 77.972961][ T4371] kill_block_super+0x7c/0xe0
[ 77.977627][ T4371] deactivate_locked_super+0x93/0xf0
[ 77.982899][ T4371] cleanup_mnt+0x42d/0x4e0
[ 77.987307][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 77.992497][ T4371] task_work_run+0x125/0x1a0
[ 77.997077][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 78.002455][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 78.007992][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 78.013441][ T4371] do_syscall_64+0x58/0xa0
[ 78.017844][ T4371] ? clear_bhb_loop+0x30/0x80
[ 78.022511][ T4371] ? clear_bhb_loop+0x30/0x80
[ 78.027172][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.033053][ T4371] RIP: 0033:0x7f315d210117
[ 78.037459][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 78.057052][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 78.065462][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 78.073423][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 78.081385][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 78.089348][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 78.097311][ T4371] R13: 00007f315d27871f R14: 0000000000012e14 R15: 00007fff52955360
[ 78.105277][ T4371]
[ 78.110179][ T4371] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 78.118995][ T4371] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 78.125776][ T4371] gfs2: fsid=syz:syz.0: File system withdrawn
[ 78.132107][ T4371] CPU: 0 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 78.139669][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 78.149716][ T4371] Call Trace:
[ 78.153002][ T4371]
[ 78.155927][ T4371] dump_stack_lvl+0x188/0x250
[ 78.160602][ T4371] ? kobject_uevent_env+0x371/0x890
[ 78.165801][ T4371] ? show_regs_print_info+0x20/0x20
[ 78.171005][ T4371] ? load_image+0x400/0x400
[ 78.175528][ T4371] ? kobject_uevent_env+0x371/0x890
[ 78.180737][ T4371] ? lockref_put_or_lock+0x6e/0xb0
[ 78.185865][ T4371] gfs2_withdraw+0x1149/0x1490
[ 78.190625][ T4371] ? gfs2_lm+0x240/0x240
[ 78.194854][ T4371] ? __schedule+0x11f7/0x43c0
[ 78.199524][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 78.204712][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 78.209729][ T4371] ? do_promote+0x71a/0xab0
[ 78.214222][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 78.219322][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 78.224343][ T4371] inode_go_lock+0x127/0x470
[ 78.228934][ T4371] do_promote+0x741/0xab0
[ 78.233259][ T4371] finish_xmote+0x4df/0xb00
[ 78.237768][ T4371] do_xmote+0x7b6/0x1120
[ 78.242035][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 78.246712][ T4371] do_sync+0x4ab/0xc40
[ 78.250777][ T4371] ? slot_put+0x1e0/0x1e0
[ 78.255112][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 78.260127][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 78.265141][ T4371] ? do_sync+0x4a3/0xc40
[ 78.269375][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 78.274566][ T4371] gfs2_quota_sync+0x32c/0x700
[ 78.279324][ T4371] gfs2_sync_fs+0x48/0xb0
[ 78.283644][ T4371] sync_filesystem+0xe6/0x220
[ 78.288329][ T4371] generic_shutdown_super+0x6b/0x300
[ 78.293637][ T4371] kill_block_super+0x7c/0xe0
[ 78.298318][ T4371] deactivate_locked_super+0x93/0xf0
[ 78.303597][ T4371] cleanup_mnt+0x42d/0x4e0
[ 78.308016][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 78.313226][ T4371] task_work_run+0x125/0x1a0
[ 78.317831][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 78.323198][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 78.328746][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 78.334218][ T4371] do_syscall_64+0x58/0xa0
[ 78.338623][ T4371] ? clear_bhb_loop+0x30/0x80
[ 78.343291][ T4371] ? clear_bhb_loop+0x30/0x80
[ 78.347966][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 78.353868][ T4371] RIP: 0033:0x7f315d210117
[ 78.358278][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 78.377874][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 78.386276][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 78.394236][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 78.402195][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 78.410154][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 78.418114][ T4371] R13: 00007f315d27871f R14: 0000000000012e14 R15: 00007fff52955360
[ 78.426090][ T4371]
[ 78.731714][ T4570] loop0: detected capacity change from 0 to 32768
[ 78.840267][ T4570] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 78.851159][ T4570] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 78.862986][ T4570] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 78.872195][ T4397] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 78.879251][ T4397] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 78.910637][ T4397] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms
[ 78.919476][ T4397] gfs2: fsid=syz:syz.0: jid=0: Done
[ 78.924791][ T4570] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 78.995507][ T4570] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 79.011706][ T4371] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 79.011706][ T4371] inode = 11 2339
[ 79.011706][ T4371] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[ 79.038572][ T4371] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 79.054607][ T4371] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 79.070088][ T4371] CPU: 0 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 79.077653][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 79.087703][ T4371] Call Trace:
[ 79.090980][ T4371]
[ 79.093901][ T4371] dump_stack_lvl+0x188/0x250
[ 79.098573][ T4371] ? show_regs_print_info+0x20/0x20
[ 79.103760][ T4371] ? load_image+0x400/0x400
[ 79.108255][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 79.113443][ T4371] gfs2_assert_warn_i+0x18f/0x2c0
[ 79.118459][ T4371] gfs2_quota_cleanup+0x4b4/0x6a0
[ 79.123476][ T4371] gfs2_make_fs_ro+0x440/0x620
[ 79.128229][ T4371] ? __might_sleep+0xf0/0xf0
[ 79.132806][ T4371] ? gfs2_dinode_out+0xb00/0xb00
[ 79.137736][ T4371] ? _raw_spin_unlock+0x24/0x40
[ 79.142595][ T4371] ? gfs2_glock_nq+0xcb0/0x1550
[ 79.147449][ T4371] gfs2_withdraw+0x610/0x1490
[ 79.152126][ T4371] ? gfs2_lm+0x240/0x240
[ 79.156356][ T4371] ? __schedule+0x11f7/0x43c0
[ 79.161021][ T4371] ? gfs2_freeze_lock+0x52/0xc0
[ 79.165862][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 79.171051][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 79.176068][ T4371] ? do_promote+0x71a/0xab0
[ 79.180559][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 79.185657][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 79.190673][ T4371] inode_go_lock+0x127/0x470
[ 79.195256][ T4371] do_promote+0x741/0xab0
[ 79.199596][ T4371] finish_xmote+0x4df/0xb00
[ 79.204094][ T4371] do_xmote+0x7b6/0x1120
[ 79.208345][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 79.213059][ T4371] do_sync+0x4ab/0xc40
[ 79.217140][ T4371] ? slot_put+0x1e0/0x1e0
[ 79.221461][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 79.226472][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 79.231483][ T4371] ? do_sync+0x4a3/0xc40
[ 79.235714][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 79.240903][ T4371] gfs2_quota_sync+0x32c/0x700
[ 79.245660][ T4371] gfs2_sync_fs+0x48/0xb0
[ 79.249977][ T4371] sync_filesystem+0xe6/0x220
[ 79.254642][ T4371] generic_shutdown_super+0x6b/0x300
[ 79.259917][ T4371] kill_block_super+0x7c/0xe0
[ 79.265192][ T4371] deactivate_locked_super+0x93/0xf0
[ 79.270480][ T4371] cleanup_mnt+0x42d/0x4e0
[ 79.274891][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 79.280083][ T4371] task_work_run+0x125/0x1a0
[ 79.284668][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 79.290029][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 79.295575][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 79.301023][ T4371] do_syscall_64+0x58/0xa0
[ 79.305427][ T4371] ? clear_bhb_loop+0x30/0x80
[ 79.310090][ T4371] ? clear_bhb_loop+0x30/0x80
[ 79.314756][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 79.320634][ T4371] RIP: 0033:0x7f315d210117
[ 79.325040][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 79.344634][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.353038][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 79.360996][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 79.369581][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 79.377552][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 79.385515][ T4371] R13: 00007f315d27871f R14: 00000000000132b4 R15: 00007fff52955360
[ 79.393488][ T4371]
[ 79.398577][ T4371] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 79.407360][ T4371] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 79.414006][ T4371] gfs2: fsid=syz:syz.0: File system withdrawn
[ 79.420148][ T4371] CPU: 0 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 79.427681][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 79.437720][ T4371] Call Trace:
[ 79.441001][ T4371]
[ 79.443921][ T4371] dump_stack_lvl+0x188/0x250
[ 79.448589][ T4371] ? kobject_uevent_env+0x371/0x890
[ 79.453776][ T4371] ? show_regs_print_info+0x20/0x20
[ 79.458963][ T4371] ? load_image+0x400/0x400
[ 79.463455][ T4371] ? kobject_uevent_env+0x371/0x890
[ 79.469230][ T4371] ? lockref_put_or_lock+0x6e/0xb0
[ 79.474336][ T4371] gfs2_withdraw+0x1149/0x1490
[ 79.479095][ T4371] ? gfs2_lm+0x240/0x240
[ 79.483323][ T4371] ? __schedule+0x11f7/0x43c0
[ 79.488000][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 79.493199][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 79.498224][ T4371] ? do_promote+0x71a/0xab0
[ 79.502739][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 79.507854][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 79.512875][ T4371] inode_go_lock+0x127/0x470
[ 79.517455][ T4371] do_promote+0x741/0xab0
[ 79.521778][ T4371] finish_xmote+0x4df/0xb00
[ 79.526276][ T4371] do_xmote+0x7b6/0x1120
[ 79.530515][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 79.535190][ T4371] do_sync+0x4ab/0xc40
[ 79.539252][ T4371] ? slot_put+0x1e0/0x1e0
[ 79.543572][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 79.548582][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 79.553595][ T4371] ? do_sync+0x4a3/0xc40
[ 79.557835][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 79.563053][ T4371] gfs2_quota_sync+0x32c/0x700
[ 79.567829][ T4371] gfs2_sync_fs+0x48/0xb0
[ 79.572158][ T4371] sync_filesystem+0xe6/0x220
[ 79.576822][ T4371] generic_shutdown_super+0x6b/0x300
[ 79.582100][ T4371] kill_block_super+0x7c/0xe0
[ 79.586767][ T4371] deactivate_locked_super+0x93/0xf0
[ 79.592041][ T4371] cleanup_mnt+0x42d/0x4e0
[ 79.596448][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 79.601634][ T4371] task_work_run+0x125/0x1a0
[ 79.606217][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 79.611575][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 79.617110][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 79.622557][ T4371] do_syscall_64+0x58/0xa0
[ 79.626962][ T4371] ? clear_bhb_loop+0x30/0x80
[ 79.631628][ T4371] ? clear_bhb_loop+0x30/0x80
[ 79.636295][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 79.642176][ T4371] RIP: 0033:0x7f315d210117
[ 79.646582][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 79.666175][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 79.674577][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 79.682537][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 79.690498][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 79.698464][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 79.706441][ T4371] R13: 00007f315d27871f R14: 00000000000132b4 R15: 00007fff52955360
[ 79.714410][ T4371]
[ 80.009478][ T4573] loop0: detected capacity change from 0 to 32768
[ 80.068430][ T4573] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 80.079520][ T4573] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 80.107380][ T4573] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 80.124896][ T4393] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 80.134683][ T4393] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 80.170113][ T4393] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 35ms
[ 80.189506][ T4393] gfs2: fsid=syz:syz.0: jid=0: Done
[ 80.194918][ T4573] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 80.265360][ T4573] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 80.282547][ T4371] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 80.282547][ T4371] inode = 11 2339
[ 80.282547][ T4371] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[ 80.301709][ T4371] gfs2: fsid=syz:syz.0: about to withdraw this file system
2026/02/04 12:39:25 executed programs: 8
[ 80.315810][ T4371] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 80.330474][ T4371] CPU: 1 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 80.338049][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 80.348115][ T4371] Call Trace:
[ 80.351384][ T4371]
[ 80.354301][ T4371] dump_stack_lvl+0x188/0x250
[ 80.358976][ T4371] ? show_regs_print_info+0x20/0x20
[ 80.364163][ T4371] ? load_image+0x400/0x400
[ 80.368661][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 80.373850][ T4371] gfs2_assert_warn_i+0x18f/0x2c0
[ 80.378866][ T4371] gfs2_quota_cleanup+0x4b4/0x6a0
[ 80.383886][ T4371] gfs2_make_fs_ro+0x440/0x620
[ 80.388635][ T4371] ? __might_sleep+0xf0/0xf0
[ 80.393213][ T4371] ? gfs2_dinode_out+0xb00/0xb00
[ 80.398141][ T4371] ? _raw_spin_unlock+0x24/0x40
[ 80.403001][ T4371] ? gfs2_glock_nq+0xcb0/0x1550
[ 80.407856][ T4371] gfs2_withdraw+0x610/0x1490
[ 80.412528][ T4371] ? gfs2_lm+0x240/0x240
[ 80.416755][ T4371] ? __schedule+0x11f7/0x43c0
[ 80.421423][ T4371] ? gfs2_freeze_lock+0x52/0xc0
[ 80.426268][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 80.431457][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 80.436473][ T4371] ? do_promote+0x71a/0xab0
[ 80.440963][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 80.446072][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 80.451109][ T4371] inode_go_lock+0x127/0x470
[ 80.455706][ T4371] do_promote+0x741/0xab0
[ 80.460038][ T4371] finish_xmote+0x4df/0xb00
[ 80.464536][ T4371] do_xmote+0x7b6/0x1120
[ 80.468773][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 80.473449][ T4371] do_sync+0x4ab/0xc40
[ 80.477508][ T4371] ? slot_put+0x1e0/0x1e0
[ 80.481827][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 80.486845][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 80.491857][ T4371] ? do_sync+0x4a3/0xc40
[ 80.496092][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 80.501282][ T4371] gfs2_quota_sync+0x32c/0x700
[ 80.506042][ T4371] gfs2_sync_fs+0x48/0xb0
[ 80.510369][ T4371] sync_filesystem+0xe6/0x220
[ 80.515049][ T4371] generic_shutdown_super+0x6b/0x300
[ 80.520328][ T4371] kill_block_super+0x7c/0xe0
[ 80.524998][ T4371] deactivate_locked_super+0x93/0xf0
[ 80.530272][ T4371] cleanup_mnt+0x42d/0x4e0
[ 80.534683][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 80.539877][ T4371] task_work_run+0x125/0x1a0
[ 80.544460][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 80.549825][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 80.555361][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 80.560809][ T4371] do_syscall_64+0x58/0xa0
[ 80.565218][ T4371] ? clear_bhb_loop+0x30/0x80
[ 80.569881][ T4371] ? clear_bhb_loop+0x30/0x80
[ 80.574546][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 80.580426][ T4371] RIP: 0033:0x7f315d210117
[ 80.584840][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 80.604437][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 80.612842][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 80.620802][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 80.628764][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 80.636722][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 80.644684][ T4371] R13: 00007f315d27871f R14: 00000000000137b1 R15: 00007fff52955360
[ 80.652654][ T4371]
[ 80.656182][ T4371] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 80.665015][ T4371] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 80.671762][ T4371] gfs2: fsid=syz:syz.0: File system withdrawn
[ 80.677909][ T4371] CPU: 1 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 80.685463][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 80.695505][ T4371] Call Trace:
[ 80.698786][ T4371]
[ 80.701726][ T4371] dump_stack_lvl+0x188/0x250
[ 80.706393][ T4371] ? kobject_uevent_env+0x371/0x890
[ 80.711578][ T4371] ? show_regs_print_info+0x20/0x20
[ 80.716764][ T4371] ? load_image+0x400/0x400
[ 80.721258][ T4371] ? kobject_uevent_env+0x371/0x890
[ 80.726440][ T4371] ? lockref_put_or_lock+0x6e/0xb0
[ 80.731543][ T4371] gfs2_withdraw+0x1149/0x1490
[ 80.736307][ T4371] ? gfs2_lm+0x240/0x240
[ 80.740537][ T4371] ? __schedule+0x11f7/0x43c0
[ 80.745212][ T4371] ? gfs2_consist_inode_i+0xc0/0xe0
[ 80.750400][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 80.755416][ T4371] ? do_promote+0x71a/0xab0
[ 80.759905][ T4371] ? gfs2_inode_metasync+0xf0/0xf0
[ 80.765006][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 80.770022][ T4371] inode_go_lock+0x127/0x470
[ 80.774603][ T4371] do_promote+0x741/0xab0
[ 80.778927][ T4371] finish_xmote+0x4df/0xb00
[ 80.783422][ T4371] do_xmote+0x7b6/0x1120
[ 80.787657][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 80.792333][ T4371] do_sync+0x4ab/0xc40
[ 80.796395][ T4371] ? slot_put+0x1e0/0x1e0
[ 80.800711][ T4371] ? __lock_acquire+0x7d10/0x7d10
[ 80.805722][ T4371] ? do_raw_spin_lock+0x128/0x2f0
[ 80.810732][ T4371] ? do_sync+0x4a3/0xc40
[ 80.814964][ T4371] ? do_raw_spin_unlock+0x11d/0x230
[ 80.820148][ T4371] gfs2_quota_sync+0x32c/0x700
[ 80.824908][ T4371] gfs2_sync_fs+0x48/0xb0
[ 80.829222][ T4371] sync_filesystem+0xe6/0x220
[ 80.833888][ T4371] generic_shutdown_super+0x6b/0x300
[ 80.839164][ T4371] kill_block_super+0x7c/0xe0
[ 80.843832][ T4371] deactivate_locked_super+0x93/0xf0
[ 80.849106][ T4371] cleanup_mnt+0x42d/0x4e0
[ 80.853509][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 80.858704][ T4371] task_work_run+0x125/0x1a0
[ 80.863307][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 80.868665][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 80.874198][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 80.879644][ T4371] do_syscall_64+0x58/0xa0
[ 80.884047][ T4371] ? clear_bhb_loop+0x30/0x80
[ 80.888711][ T4371] ? clear_bhb_loop+0x30/0x80
[ 80.893379][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 80.899257][ T4371] RIP: 0033:0x7f315d210117
[ 80.903661][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 80.923252][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 80.931654][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 80.939612][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 80.947571][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 80.955530][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 80.963489][ T4371] R13: 00007f315d27871f R14: 00000000000137b1 R15: 00007fff52955360
[ 80.971458][ T4371]
[ 80.975102][ T4371] ==================================================================
[ 80.983353][ T4371] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 80.990021][ T4371] Read of size 8 at addr ffff888073ea7330 by task syz-executor/4371
[ 80.997988][ T4371]
[ 81.000319][ T4371] CPU: 1 PID: 4371 Comm: syz-executor Not tainted syzkaller #0
[ 81.007852][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 81.017899][ T4371] Call Trace:
[ 81.021184][ T4371]
[ 81.024103][ T4371] dump_stack_lvl+0x188/0x250
[ 81.028770][ T4371] ? show_regs_print_info+0x20/0x20
[ 81.033955][ T4371] ? _printk+0xda/0x130
[ 81.038105][ T4371] ? qd_unlock+0x30/0x2d0
[ 81.042451][ T4371] ? load_image+0x400/0x400
[ 81.046940][ T4371] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 81.052388][ T4371] print_address_description+0x60/0x2d0
[ 81.057928][ T4371] ? qd_unlock+0x30/0x2d0
[ 81.062265][ T4371] kasan_report+0xdf/0x130
[ 81.066668][ T4371] ? qd_unlock+0x30/0x2d0
[ 81.070986][ T4371] kasan_check_range+0x235/0x290
[ 81.075913][ T4371] qd_unlock+0x30/0x2d0
[ 81.080056][ T4371] gfs2_quota_sync+0x5cf/0x700
[ 81.084816][ T4371] gfs2_sync_fs+0x48/0xb0
[ 81.089135][ T4371] sync_filesystem+0xe6/0x220
[ 81.093802][ T4371] generic_shutdown_super+0x6b/0x300
[ 81.099088][ T4371] kill_block_super+0x7c/0xe0
[ 81.103752][ T4371] deactivate_locked_super+0x93/0xf0
[ 81.109033][ T4371] cleanup_mnt+0x42d/0x4e0
[ 81.113437][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 81.118638][ T4371] task_work_run+0x125/0x1a0
[ 81.123240][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 81.128599][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 81.134134][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 81.139578][ T4371] do_syscall_64+0x58/0xa0
[ 81.143985][ T4371] ? clear_bhb_loop+0x30/0x80
[ 81.148653][ T4371] ? clear_bhb_loop+0x30/0x80
[ 81.153316][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.159193][ T4371] RIP: 0033:0x7f315d210117
[ 81.163598][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 81.183189][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 81.191592][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 81.199556][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 81.207516][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 81.215473][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 81.223432][ T4371] R13: 00007f315d27871f R14: 00000000000137b1 R15: 00007fff52955360
[ 81.231400][ T4371]
[ 81.234406][ T4371]
[ 81.236714][ T4371] Allocated by task 4573:
[ 81.241027][ T4371] __kasan_slab_alloc+0x9c/0xd0
[ 81.245865][ T4371] slab_post_alloc_hook+0x4c/0x380
[ 81.250960][ T4371] kmem_cache_alloc+0x100/0x290
[ 81.255797][ T4371] qd_alloc+0x50/0x260
[ 81.259854][ T4371] gfs2_quota_init+0x74e/0xea0
[ 81.264603][ T4371] gfs2_make_fs_rw+0x414/0x580
[ 81.269352][ T4371] gfs2_fill_super+0x1837/0x1f00
[ 81.274274][ T4371] get_tree_bdev+0x3f1/0x610
[ 81.278858][ T4371] gfs2_get_tree+0x4d/0x1e0
[ 81.283360][ T4371] vfs_get_tree+0x88/0x270
[ 81.287766][ T4371] do_new_mount+0x24a/0xa40
[ 81.292282][ T4371] __se_sys_mount+0x2e3/0x3d0
[ 81.296945][ T4371] do_syscall_64+0x4c/0xa0
[ 81.301347][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.307226][ T4371]
[ 81.309535][ T4371] Freed by task 4371:
[ 81.313497][ T4371] kasan_set_track+0x4b/0x70
[ 81.318082][ T4371] kasan_set_free_info+0x1f/0x40
[ 81.323026][ T4371] ____kasan_slab_free+0xd5/0x110
[ 81.328036][ T4371] slab_free_freelist_hook+0xea/0x170
[ 81.333393][ T4371] kmem_cache_free+0x8f/0x210
[ 81.338060][ T4371] rcu_core+0x9d2/0x1670
[ 81.342310][ T4371] handle_softirqs+0x339/0x830
[ 81.347057][ T4371] __irq_exit_rcu+0x13b/0x230
[ 81.351715][ T4371] irq_exit_rcu+0x5/0x20
[ 81.355943][ T4371] sysvec_apic_timer_interrupt+0xa0/0xc0
[ 81.361558][ T4371] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 81.367532][ T4371]
[ 81.369856][ T4371] Last potentially related work creation:
[ 81.375559][ T4371] kasan_save_stack+0x35/0x60
[ 81.380230][ T4371] kasan_record_aux_stack+0xb8/0x100
[ 81.385507][ T4371] call_rcu+0x189/0x950
[ 81.389650][ T4371] gfs2_quota_cleanup+0x43c/0x6a0
[ 81.394663][ T4371] gfs2_make_fs_ro+0x440/0x620
[ 81.399413][ T4371] gfs2_withdraw+0x610/0x1490
[ 81.404080][ T4371] gfs2_inode_refresh+0xb64/0xff0
[ 81.409095][ T4371] inode_go_lock+0x127/0x470
[ 81.413675][ T4371] do_promote+0x741/0xab0
[ 81.417997][ T4371] finish_xmote+0x4df/0xb00
[ 81.422507][ T4371] do_xmote+0x7b6/0x1120
[ 81.426737][ T4371] gfs2_glock_nq+0xc7a/0x1550
[ 81.431399][ T4371] do_sync+0x4ab/0xc40
[ 81.435455][ T4371] gfs2_quota_sync+0x32c/0x700
[ 81.440204][ T4371] gfs2_sync_fs+0x48/0xb0
[ 81.444520][ T4371] sync_filesystem+0xe6/0x220
[ 81.449182][ T4371] generic_shutdown_super+0x6b/0x300
[ 81.454452][ T4371] kill_block_super+0x7c/0xe0
[ 81.459115][ T4371] deactivate_locked_super+0x93/0xf0
[ 81.464385][ T4371] cleanup_mnt+0x42d/0x4e0
[ 81.468785][ T4371] task_work_run+0x125/0x1a0
[ 81.473381][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 81.478760][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 81.484324][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 81.489770][ T4371] do_syscall_64+0x58/0xa0
[ 81.494176][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.500057][ T4371]
[ 81.502382][ T4371] The buggy address belongs to the object at ffff888073ea72a0
[ 81.502382][ T4371] which belongs to the cache gfs2_quotad of size 272
[ 81.516444][ T4371] The buggy address is located 144 bytes inside of
[ 81.516444][ T4371] 272-byte region [ffff888073ea72a0, ffff888073ea73b0)
[ 81.529707][ T4371] The buggy address belongs to the page:
[ 81.535328][ T4371] page:ffffea0001cfa9c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73ea7
[ 81.545462][ T4371] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 81.552999][ T4371] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801dd8fdc0
[ 81.561572][ T4371] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 81.570139][ T4371] page dumped because: kasan: bad access detected
[ 81.576535][ T4371] page_owner tracks the page as allocated
[ 81.582233][ T4371] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4488, ts 73148975491, free_ts 71325128814
[ 81.601228][ T4371] get_page_from_freelist+0x1bbd/0x1ca0
[ 81.606768][ T4371] __alloc_pages+0x1ee/0x480
[ 81.611355][ T4371] new_slab+0xc0/0x4b0
[ 81.613130][ T7] cfg80211: failed to load regulatory.db
[ 81.615436][ T4371] ___slab_alloc+0x80a/0xdd0
[ 81.625661][ T4371] kmem_cache_alloc+0x195/0x290
[ 81.630531][ T4371] qd_alloc+0x50/0x260
[ 81.634617][ T4371] gfs2_quota_init+0x74e/0xea0
[ 81.639398][ T4371] gfs2_make_fs_rw+0x414/0x580
[ 81.644167][ T4371] gfs2_fill_super+0x1837/0x1f00
[ 81.649094][ T4371] get_tree_bdev+0x3f1/0x610
[ 81.653674][ T4371] gfs2_get_tree+0x4d/0x1e0
[ 81.658171][ T4371] vfs_get_tree+0x88/0x270
[ 81.662596][ T4371] do_new_mount+0x24a/0xa40
[ 81.667090][ T4371] __se_sys_mount+0x2e3/0x3d0
[ 81.671750][ T4371] do_syscall_64+0x4c/0xa0
[ 81.676156][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.682039][ T4371] page last free stack trace:
[ 81.686695][ T4371] free_unref_page_prepare+0x637/0x6c0
[ 81.692141][ T4371] free_unref_page+0x8f/0x2a0
[ 81.696833][ T4371] __unfreeze_partials+0x1a5/0x200
[ 81.701933][ T4371] put_cpu_partial+0x12d/0x190
[ 81.706684][ T4371] qlist_free_all+0x35/0x90
[ 81.711173][ T4371] kasan_quarantine_reduce+0x150/0x160
[ 81.716617][ T4371] __kasan_slab_alloc+0x2f/0xd0
[ 81.721451][ T4371] slab_post_alloc_hook+0x4c/0x380
[ 81.726549][ T4371] kmem_cache_alloc+0x100/0x290
[ 81.731381][ T4371] getname_flags+0xb5/0x500
[ 81.735873][ T4371] do_sys_openat2+0xdd/0x4b0
[ 81.740450][ T4371] __x64_sys_openat+0x135/0x160
[ 81.745287][ T4371] do_syscall_64+0x4c/0xa0
[ 81.749688][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 81.755569][ T4371]
[ 81.757885][ T4371] Memory state around the buggy address:
[ 81.763515][ T4371] ffff888073ea7200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 81.771561][ T4371] ffff888073ea7280: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 81.779609][ T4371] >ffff888073ea7300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 81.787652][ T4371] ^
[ 81.793267][ T4371] ffff888073ea7380: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
[ 81.801311][ T4371] ffff888073ea7400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 81.809362][ T4371] ==================================================================
[ 81.817422][ T4371] Disabling lock debugging due to kernel taint
[ 81.826400][ T4371] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 81.833606][ T4371] CPU: 1 PID: 4371 Comm: syz-executor Tainted: G B syzkaller #0
[ 81.842524][ T4371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 81.852563][ T4371] Call Trace:
[ 81.855844][ T4371]
[ 81.858760][ T4371] dump_stack_lvl+0x188/0x250
[ 81.863430][ T4371] ? show_regs_print_info+0x20/0x20
[ 81.868615][ T4371] ? load_image+0x400/0x400
[ 81.873105][ T4371] panic+0x2e5/0x810
[ 81.876986][ T4371] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 81.883124][ T4371] ? bpf_jit_dump+0xd0/0xd0
[ 81.887617][ T4371] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 81.893579][ T4371] ? _raw_spin_unlock+0x40/0x40
[ 81.898416][ T4371] ? qd_unlock+0x30/0x2d0
[ 81.902734][ T4371] check_panic_on_warn+0x80/0xa0
[ 81.907655][ T4371] ? qd_unlock+0x30/0x2d0
[ 81.911976][ T4371] end_report+0x6d/0xf0
[ 81.916137][ T4371] kasan_report+0x102/0x130
[ 81.920627][ T4371] ? qd_unlock+0x30/0x2d0
[ 81.924946][ T4371] kasan_check_range+0x235/0x290
[ 81.929868][ T4371] qd_unlock+0x30/0x2d0
[ 81.934007][ T4371] gfs2_quota_sync+0x5cf/0x700
[ 81.938756][ T4371] gfs2_sync_fs+0x48/0xb0
[ 81.943071][ T4371] sync_filesystem+0xe6/0x220
[ 81.947757][ T4371] generic_shutdown_super+0x6b/0x300
[ 81.953044][ T4371] kill_block_super+0x7c/0xe0
[ 81.957704][ T4371] deactivate_locked_super+0x93/0xf0
[ 81.962980][ T4371] cleanup_mnt+0x42d/0x4e0
[ 81.967382][ T4371] ? lockdep_hardirqs_on+0x94/0x140
[ 81.972582][ T4371] task_work_run+0x125/0x1a0
[ 81.977160][ T4371] exit_to_user_mode_loop+0x10f/0x130
[ 81.982517][ T4371] exit_to_user_mode_prepare+0xee/0x180
[ 81.988050][ T4371] syscall_exit_to_user_mode+0x16/0x40
[ 81.993494][ T4371] do_syscall_64+0x58/0xa0
[ 81.997902][ T4371] ? clear_bhb_loop+0x30/0x80
[ 82.002579][ T4371] ? clear_bhb_loop+0x30/0x80
[ 82.007238][ T4371] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 82.013113][ T4371] RIP: 0033:0x7f315d210117
[ 82.017515][ T4371] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 82.037106][ T4371] RSP: 002b:00007fff529541d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 82.045504][ T4371] RAX: 0000000000000000 RBX: 00007f315d27871f RCX: 00007f315d210117
[ 82.053467][ T4371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff52954290
[ 82.061435][ T4371] RBP: 00007fff52954290 R08: 00007fff52955290 R09: 00000000ffffffff
[ 82.069992][ T4371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff52955320
[ 82.077959][ T4371] R13: 00007f315d27871f R14: 00000000000137b1 R15: 00007fff52955360
[ 82.085942][ T4371]
[ 82.089216][ T4371] Kernel Offset: disabled
[ 82.093535][ T4371] Rebooting in 86400 seconds..