Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. 2026/10/10 12:17:58 parsed 1 programs 2026/10/10 12:17:58 serving rpc on tcp://34129 [ 61.873289][ T4197] cgroup: Unknown subsys name 'net' [ 61.997828][ T4197] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.176198][ T4197] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.373264][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.381309][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.391587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.407044][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.415662][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.423770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.413293][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 66.456289][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.463900][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.472014][ T4264] device bridge_slave_0 entered promiscuous mode [ 66.481233][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.488439][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.497044][ T4264] device bridge_slave_1 entered promiscuous mode [ 66.527955][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.542653][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.577226][ T4264] team0: Port device team_slave_0 added [ 66.595676][ T4264] team0: Port device team_slave_1 added [ 66.615261][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.622222][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.648635][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.661554][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.668563][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.694568][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.735047][ T4264] device hsr_slave_0 entered promiscuous mode [ 66.746444][ T4264] device hsr_slave_1 entered promiscuous mode [ 66.830610][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.840473][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.849287][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.858596][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.877039][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.884210][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.891937][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.899043][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.935326][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.950167][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.957421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.967178][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.975426][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.984012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 66.998615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.007139][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.014583][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.026302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.035361][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.042391][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.060317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.068742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.080051][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.091944][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.105221][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.115431][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.181698][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.189258][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.201831][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.217109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.235607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.244767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.252385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.260508][ T4264] device veth0_vlan entered promiscuous mode [ 67.292253][ T4264] device veth1_vlan entered promiscuous mode [ 67.310603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.318793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.328394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.338955][ T4264] device veth0_macvtap entered promiscuous mode [ 67.349399][ T4264] device veth1_macvtap entered promiscuous mode [ 67.381000][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.389689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.400110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.410926][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.419907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.428426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.440647][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.449615][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.458377][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.467850][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.573561][ T4264] syz-executor (4264) used greatest stack depth: 20784 bytes left 2026/10/10 12:18:05 executed programs: 0 [ 67.981084][ T4309] chnl_net:caif_netlink_parms(): no params data found [ 68.025802][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.033089][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.040695][ T4309] device bridge_slave_0 entered promiscuous mode [ 68.049400][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.056543][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.064543][ T4309] device bridge_slave_1 entered promiscuous mode [ 68.089570][ T4309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.101004][ T4309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.129049][ T4309] team0: Port device team_slave_0 added [ 68.138893][ T4309] team0: Port device team_slave_1 added [ 68.157752][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.164732][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.190711][ T4309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.204227][ T4309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.211178][ T4309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.237322][ T4309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.273246][ T4309] device hsr_slave_0 entered promiscuous mode [ 68.279986][ T4309] device hsr_slave_1 entered promiscuous mode [ 68.287214][ T4309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.296007][ T4309] Cannot create hsr debugfs directory [ 68.381792][ T4309] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.801945][ T1168] ODEBUG: Out of memory. ODEBUG disabled [ 69.963416][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 70.757597][ T4309] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.174747][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.181223][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.043541][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 72.557546][ T4309] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.607972][ T4309] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.830377][ T4309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.839316][ T4309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.848039][ T4309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.857381][ T4309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.901304][ T4309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.913431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.921149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.937893][ T4309] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.947763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.956595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.965677][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.972723][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.981271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.994429][ T1168] device hsr_slave_0 left promiscuous mode [ 73.000699][ T1168] device hsr_slave_1 left promiscuous mode [ 73.007501][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.015432][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.025452][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.032873][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.040732][ T1168] device bridge_slave_1 left promiscuous mode [ 73.047364][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.059065][ T1168] device bridge_slave_0 left promiscuous mode [ 73.065998][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.080383][ T1168] device veth1_macvtap left promiscuous mode [ 73.087029][ T1168] device veth0_macvtap left promiscuous mode [ 73.093200][ T1168] device veth1_vlan left promiscuous mode [ 73.099031][ T1168] device veth0_vlan left promiscuous mode [ 73.201710][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 73.215576][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 73.227505][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.239842][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.281142][ T1168] bond0 (unregistering): Released all slaves [ 73.305722][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.314374][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.322657][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.329737][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.337618][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.347072][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.355606][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.364135][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.373204][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.381955][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.390476][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.403904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.412153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.424934][ T4309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.436913][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.448312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.457750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.537578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.545435][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.558129][ T4309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.576991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.586803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.602168][ T4309] device veth0_vlan entered promiscuous mode [ 73.609175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.617863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.626354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.634165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.647306][ T4309] device veth1_vlan entered promiscuous mode [ 73.666470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.675393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.683443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.691758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.708525][ T4309] device veth0_macvtap entered promiscuous mode [ 73.718163][ T4309] device veth1_macvtap entered promiscuous mode [ 73.745499][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.753148][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.761717][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.771274][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.780603][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.794033][ T4309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.805186][ T4309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.814738][ T4309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.824780][ T4309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.833710][ T4309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.845971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.855204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.914963][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.931808][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.951450][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/10/10 12:18:11 executed programs: 2 [ 73.966434][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.974408][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.981957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.123210][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 74.298574][ T4324] loop0: detected capacity change from 0 to 32768 [ 74.404521][ T4324] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 74.422870][ T4324] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 74.467047][ T4324] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 74.487034][ T13] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 74.502939][ T13] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 74.540327][ T13] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 74.550427][ T13] gfs2: fsid=syz:syz.0: jid=0: Done [ 74.556573][ T4324] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 74.653309][ T4324] gfs2: fsid=syz:syz.0: found 1 quota changes [ 74.669470][ T4309] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 74.669470][ T4309] inode = 11 2339 [ 74.669470][ T4309] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 74.690293][ T4309] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 74.704728][ T4309] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 74.722691][ T4309] CPU: 1 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 74.730255][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.740328][ T4309] Call Trace: [ 74.743606][ T4309] [ 74.746533][ T4309] dump_stack_lvl+0x188/0x250 [ 74.751227][ T4309] ? show_regs_print_info+0x20/0x20 [ 74.756426][ T4309] ? load_image+0x410/0x410 [ 74.760933][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 74.766130][ T4309] gfs2_assert_warn_i+0x187/0x2c0 [ 74.771159][ T4309] gfs2_quota_cleanup+0x48c/0x670 [ 74.776200][ T4309] gfs2_make_fs_ro+0x440/0x620 [ 74.780963][ T4309] ? __might_sleep+0xf0/0xf0 [ 74.785556][ T4309] ? gfs2_dinode_out+0xb00/0xb00 [ 74.790488][ T4309] ? _raw_spin_unlock+0x24/0x40 [ 74.795334][ T4309] ? gfs2_glock_nq+0xcaa/0x1510 [ 74.800200][ T4309] gfs2_withdraw+0x660/0x14e0 [ 74.804873][ T4309] ? gfs2_meta_new+0x160/0x160 [ 74.809614][ T4309] ? gfs2_lm+0x240/0x240 [ 74.813835][ T4309] ? gfs2_freeze_lock+0x52/0xc0 [ 74.818664][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 74.823847][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 74.828958][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 74.834057][ T4309] inode_go_lock+0x127/0x450 [ 74.838659][ T4309] do_promote+0x75b/0xb20 [ 74.842972][ T4309] finish_xmote+0x4c2/0xaf0 [ 74.847460][ T4309] do_xmote+0x752/0x10a0 [ 74.851686][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 74.856384][ T4309] do_sync+0x49c/0xba0 [ 74.860456][ T4309] ? slot_put+0x1e0/0x1e0 [ 74.864767][ T4309] ? do_sync+0x494/0xba0 [ 74.868994][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 74.874187][ T4309] gfs2_quota_sync+0x355/0x780 [ 74.878959][ T4309] gfs2_sync_fs+0x48/0xb0 [ 74.883282][ T4309] sync_filesystem+0xe6/0x220 [ 74.887939][ T4309] generic_shutdown_super+0x6b/0x300 [ 74.893203][ T4309] kill_block_super+0x7c/0xe0 [ 74.897858][ T4309] deactivate_locked_super+0x93/0xf0 [ 74.903124][ T4309] cleanup_mnt+0x426/0x4d0 [ 74.907521][ T4309] task_work_run+0x125/0x1a0 [ 74.912092][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 74.917438][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 74.922965][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 74.928425][ T4309] do_syscall_64+0x58/0xa0 [ 74.932830][ T4309] ? clear_bhb_loop+0x30/0x80 [ 74.938137][ T4309] ? clear_bhb_loop+0x30/0x80 [ 74.942800][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.948688][ T4309] RIP: 0033:0x7f12c384b417 [ 74.953089][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 74.972676][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 74.981135][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 74.989090][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 74.997040][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 75.004991][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 75.012939][ T4309] R13: 00007f12c38e0ccb R14: 0000000000012391 R15: 00007fff4fd65bb0 [ 75.021182][ T4309] [ 75.028275][ T4309] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 75.037141][ T4309] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 75.045801][ T4309] gfs2: fsid=syz:syz.0: File system withdrawn [ 75.051888][ T4309] CPU: 1 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 75.059410][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.069444][ T4309] Call Trace: [ 75.072703][ T4309] [ 75.075617][ T4309] dump_stack_lvl+0x188/0x250 [ 75.080271][ T4309] ? show_regs_print_info+0x20/0x20 [ 75.085445][ T4309] ? load_image+0x410/0x410 [ 75.089924][ T4309] ? lockref_put_or_lock+0x6e/0xb0 [ 75.095035][ T4309] gfs2_withdraw+0xb9a/0x14e0 [ 75.099714][ T4309] ? gfs2_meta_new+0x160/0x160 [ 75.104457][ T4309] ? gfs2_lm+0x240/0x240 [ 75.108679][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 75.113857][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 75.118950][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 75.124070][ T4309] inode_go_lock+0x127/0x450 [ 75.128641][ T4309] do_promote+0x75b/0xb20 [ 75.132957][ T4309] finish_xmote+0x4c2/0xaf0 [ 75.137442][ T4309] do_xmote+0x752/0x10a0 [ 75.141664][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 75.146326][ T4309] do_sync+0x49c/0xba0 [ 75.150378][ T4309] ? slot_put+0x1e0/0x1e0 [ 75.154692][ T4309] ? do_sync+0x494/0xba0 [ 75.158914][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 75.164098][ T4309] gfs2_quota_sync+0x355/0x780 [ 75.168848][ T4309] gfs2_sync_fs+0x48/0xb0 [ 75.173152][ T4309] sync_filesystem+0xe6/0x220 [ 75.177805][ T4309] generic_shutdown_super+0x6b/0x300 [ 75.183064][ T4309] kill_block_super+0x7c/0xe0 [ 75.187744][ T4309] deactivate_locked_super+0x93/0xf0 [ 75.193016][ T4309] cleanup_mnt+0x426/0x4d0 [ 75.197430][ T4309] task_work_run+0x125/0x1a0 [ 75.202004][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 75.207360][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 75.212885][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 75.218320][ T4309] do_syscall_64+0x58/0xa0 [ 75.222712][ T4309] ? clear_bhb_loop+0x30/0x80 [ 75.227366][ T4309] ? clear_bhb_loop+0x30/0x80 [ 75.232055][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.237925][ T4309] RIP: 0033:0x7f12c384b417 [ 75.242325][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 75.261910][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.270312][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 75.278264][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 75.286212][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 75.294163][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 75.302109][ T4309] R13: 00007f12c38e0ccb R14: 0000000000012391 R15: 00007fff4fd65bb0 [ 75.310067][ T4309] [ 75.582511][ T4328] loop0: detected capacity change from 0 to 32768 [ 75.644776][ T4328] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 75.653187][ T4328] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 75.664738][ T4328] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 75.675008][ T4297] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 75.681906][ T4297] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 75.703156][ T4297] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms [ 75.712611][ T4297] gfs2: fsid=syz:syz.0: jid=0: Done [ 75.718333][ T4328] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 75.781010][ T4328] gfs2: fsid=syz:syz.0: found 1 quota changes [ 75.791715][ T4309] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 75.791715][ T4309] inode = 11 2339 [ 75.791715][ T4309] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 75.810688][ T4309] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 75.821608][ T4309] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 75.836668][ T4309] CPU: 1 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 75.844229][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 75.854268][ T4309] Call Trace: [ 75.857532][ T4309] [ 75.860442][ T4309] dump_stack_lvl+0x188/0x250 [ 75.865114][ T4309] ? show_regs_print_info+0x20/0x20 [ 75.870290][ T4309] ? load_image+0x410/0x410 [ 75.874772][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 75.879951][ T4309] gfs2_assert_warn_i+0x187/0x2c0 [ 75.884965][ T4309] gfs2_quota_cleanup+0x48c/0x670 [ 75.889977][ T4309] gfs2_make_fs_ro+0x440/0x620 [ 75.894717][ T4309] ? __might_sleep+0xf0/0xf0 [ 75.899287][ T4309] ? gfs2_dinode_out+0xb00/0xb00 [ 75.904200][ T4309] ? _raw_spin_unlock+0x24/0x40 [ 75.909043][ T4309] ? gfs2_glock_nq+0xcaa/0x1510 [ 75.913885][ T4309] gfs2_withdraw+0x660/0x14e0 [ 75.918541][ T4309] ? gfs2_meta_new+0x160/0x160 [ 75.923282][ T4309] ? gfs2_lm+0x240/0x240 [ 75.927510][ T4309] ? gfs2_freeze_lock+0x52/0xc0 [ 75.932337][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 75.937530][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 75.942643][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 75.947736][ T4309] inode_go_lock+0x127/0x450 [ 75.952305][ T4309] do_promote+0x75b/0xb20 [ 75.956615][ T4309] finish_xmote+0x4c2/0xaf0 [ 75.961098][ T4309] do_xmote+0x752/0x10a0 [ 75.965319][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 75.969986][ T4309] do_sync+0x49c/0xba0 [ 75.974040][ T4309] ? slot_put+0x1e0/0x1e0 [ 75.978350][ T4309] ? do_sync+0x494/0xba0 [ 75.982570][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 75.987756][ T4309] gfs2_quota_sync+0x355/0x780 [ 75.992511][ T4309] gfs2_sync_fs+0x48/0xb0 [ 75.996819][ T4309] sync_filesystem+0xe6/0x220 [ 76.001478][ T4309] generic_shutdown_super+0x6b/0x300 [ 76.006743][ T4309] kill_block_super+0x7c/0xe0 [ 76.011399][ T4309] deactivate_locked_super+0x93/0xf0 [ 76.016661][ T4309] cleanup_mnt+0x426/0x4d0 [ 76.021058][ T4309] task_work_run+0x125/0x1a0 [ 76.025628][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 76.030980][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 76.036502][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 76.041938][ T4309] do_syscall_64+0x58/0xa0 [ 76.046327][ T4309] ? clear_bhb_loop+0x30/0x80 [ 76.050983][ T4309] ? clear_bhb_loop+0x30/0x80 [ 76.055636][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.061505][ T4309] RIP: 0033:0x7f12c384b417 [ 76.065899][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 76.085488][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.093881][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 76.101831][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 76.109801][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 76.117750][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 76.125698][ T4309] R13: 00007f12c38e0ccb R14: 0000000000012694 R15: 00007fff4fd65bb0 [ 76.133831][ T4309] [ 76.142002][ T4309] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 76.150908][ T4309] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 76.158396][ T4309] gfs2: fsid=syz:syz.0: File system withdrawn [ 76.164563][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 76.172087][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.182125][ T4309] Call Trace: [ 76.185392][ T4309] [ 76.188349][ T4309] dump_stack_lvl+0x188/0x250 [ 76.193031][ T4309] ? show_regs_print_info+0x20/0x20 [ 76.198226][ T4309] ? load_image+0x410/0x410 [ 76.202712][ T4309] ? lockref_put_or_lock+0x6e/0xb0 [ 76.203191][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 76.207812][ T4309] gfs2_withdraw+0xb9a/0x14e0 [ 76.218423][ T4309] ? gfs2_meta_new+0x160/0x160 [ 76.223175][ T4309] ? gfs2_lm+0x240/0x240 [ 76.227421][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 76.232599][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 76.237692][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 76.242784][ T4309] inode_go_lock+0x127/0x450 [ 76.247356][ T4309] do_promote+0x75b/0xb20 [ 76.251687][ T4309] finish_xmote+0x4c2/0xaf0 [ 76.256172][ T4309] do_xmote+0x752/0x10a0 [ 76.260397][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 76.265060][ T4309] do_sync+0x49c/0xba0 [ 76.269111][ T4309] ? slot_put+0x1e0/0x1e0 [ 76.273427][ T4309] ? do_sync+0x494/0xba0 [ 76.277648][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 76.282831][ T4309] gfs2_quota_sync+0x355/0x780 [ 76.287602][ T4309] gfs2_sync_fs+0x48/0xb0 [ 76.291914][ T4309] sync_filesystem+0xe6/0x220 [ 76.296588][ T4309] generic_shutdown_super+0x6b/0x300 [ 76.301854][ T4309] kill_block_super+0x7c/0xe0 [ 76.306512][ T4309] deactivate_locked_super+0x93/0xf0 [ 76.311782][ T4309] cleanup_mnt+0x426/0x4d0 [ 76.316179][ T4309] task_work_run+0x125/0x1a0 [ 76.320767][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 76.326133][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 76.331658][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 76.337097][ T4309] do_syscall_64+0x58/0xa0 [ 76.341596][ T4309] ? clear_bhb_loop+0x30/0x80 [ 76.346250][ T4309] ? clear_bhb_loop+0x30/0x80 [ 76.350906][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.356775][ T4309] RIP: 0033:0x7f12c384b417 [ 76.361169][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 76.380751][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.389142][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 76.397117][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 76.405072][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 76.413021][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 76.420971][ T4309] R13: 00007f12c38e0ccb R14: 0000000000012694 R15: 00007fff4fd65bb0 [ 76.428929][ T4309] [ 76.678036][ T4331] loop0: detected capacity change from 0 to 32768 [ 76.776348][ T4331] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 76.785382][ T4331] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 76.802215][ T4331] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 76.811483][ T4297] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 76.818617][ T4297] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 76.837836][ T4297] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 19ms [ 76.846531][ T4297] gfs2: fsid=syz:syz.0: jid=0: Done [ 76.851767][ T4331] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 76.910589][ T4331] gfs2: fsid=syz:syz.0: found 1 quota changes [ 76.920601][ T4309] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 76.920601][ T4309] inode = 11 2339 [ 76.920601][ T4309] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 76.939628][ T4309] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 76.950143][ T4309] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 76.964247][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 76.971785][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 76.981816][ T4309] Call Trace: [ 76.985081][ T4309] [ 76.987991][ T4309] dump_stack_lvl+0x188/0x250 [ 76.992647][ T4309] ? show_regs_print_info+0x20/0x20 [ 76.997825][ T4309] ? load_image+0x410/0x410 [ 77.002312][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 77.007510][ T4309] gfs2_assert_warn_i+0x187/0x2c0 [ 77.012539][ T4309] gfs2_quota_cleanup+0x48c/0x670 [ 77.017546][ T4309] gfs2_make_fs_ro+0x440/0x620 [ 77.022287][ T4309] ? __might_sleep+0xf0/0xf0 [ 77.026854][ T4309] ? gfs2_dinode_out+0xb00/0xb00 [ 77.031768][ T4309] ? _raw_spin_unlock+0x24/0x40 [ 77.036608][ T4309] ? gfs2_glock_nq+0xcaa/0x1510 [ 77.041449][ T4309] gfs2_withdraw+0x660/0x14e0 [ 77.046109][ T4309] ? gfs2_meta_new+0x160/0x160 [ 77.050850][ T4309] ? gfs2_lm+0x240/0x240 [ 77.055070][ T4309] ? gfs2_freeze_lock+0x52/0xc0 [ 77.059905][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 77.065081][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 77.070174][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 77.075266][ T4309] inode_go_lock+0x127/0x450 [ 77.079850][ T4309] do_promote+0x75b/0xb20 [ 77.084164][ T4309] finish_xmote+0x4c2/0xaf0 [ 77.088650][ T4309] do_xmote+0x752/0x10a0 [ 77.092890][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 77.097567][ T4309] do_sync+0x49c/0xba0 [ 77.101620][ T4309] ? slot_put+0x1e0/0x1e0 [ 77.105931][ T4309] ? do_sync+0x494/0xba0 [ 77.110173][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 77.115378][ T4309] gfs2_quota_sync+0x355/0x780 [ 77.120135][ T4309] gfs2_sync_fs+0x48/0xb0 [ 77.124444][ T4309] sync_filesystem+0xe6/0x220 [ 77.129104][ T4309] generic_shutdown_super+0x6b/0x300 [ 77.134369][ T4309] kill_block_super+0x7c/0xe0 [ 77.139027][ T4309] deactivate_locked_super+0x93/0xf0 [ 77.144292][ T4309] cleanup_mnt+0x426/0x4d0 [ 77.148687][ T4309] task_work_run+0x125/0x1a0 [ 77.153263][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 77.158635][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 77.164167][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 77.169625][ T4309] do_syscall_64+0x58/0xa0 [ 77.174049][ T4309] ? clear_bhb_loop+0x30/0x80 [ 77.178708][ T4309] ? clear_bhb_loop+0x30/0x80 [ 77.183362][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.189253][ T4309] RIP: 0033:0x7f12c384b417 [ 77.193673][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 77.213255][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.221647][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 77.229594][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 77.237548][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 77.245499][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 77.253466][ T4309] R13: 00007f12c38e0ccb R14: 0000000000012adb R15: 00007fff4fd65bb0 [ 77.261427][ T4309] [ 77.266128][ T4309] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 77.274963][ T4309] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 77.281521][ T4309] gfs2: fsid=syz:syz.0: File system withdrawn [ 77.287628][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 77.295170][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.305208][ T4309] Call Trace: [ 77.308475][ T4309] [ 77.311388][ T4309] dump_stack_lvl+0x188/0x250 [ 77.316063][ T4309] ? show_regs_print_info+0x20/0x20 [ 77.321249][ T4309] ? load_image+0x410/0x410 [ 77.325737][ T4309] ? lockref_put_or_lock+0x6e/0xb0 [ 77.330864][ T4309] gfs2_withdraw+0xb9a/0x14e0 [ 77.335619][ T4309] ? gfs2_meta_new+0x160/0x160 [ 77.340362][ T4309] ? gfs2_lm+0x240/0x240 [ 77.344586][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 77.349767][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 77.354876][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 77.359970][ T4309] inode_go_lock+0x127/0x450 [ 77.364547][ T4309] do_promote+0x75b/0xb20 [ 77.368865][ T4309] finish_xmote+0x4c2/0xaf0 [ 77.373355][ T4309] do_xmote+0x752/0x10a0 [ 77.377583][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 77.382245][ T4309] do_sync+0x49c/0xba0 [ 77.386295][ T4309] ? slot_put+0x1e0/0x1e0 [ 77.390606][ T4309] ? do_sync+0x494/0xba0 [ 77.394828][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 77.400012][ T4309] gfs2_quota_sync+0x355/0x780 [ 77.404787][ T4309] gfs2_sync_fs+0x48/0xb0 [ 77.409114][ T4309] sync_filesystem+0xe6/0x220 [ 77.413774][ T4309] generic_shutdown_super+0x6b/0x300 [ 77.419044][ T4309] kill_block_super+0x7c/0xe0 [ 77.423710][ T4309] deactivate_locked_super+0x93/0xf0 [ 77.428999][ T4309] cleanup_mnt+0x426/0x4d0 [ 77.433393][ T4309] task_work_run+0x125/0x1a0 [ 77.437964][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 77.443318][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 77.448855][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 77.454317][ T4309] do_syscall_64+0x58/0xa0 [ 77.458716][ T4309] ? clear_bhb_loop+0x30/0x80 [ 77.463377][ T4309] ? clear_bhb_loop+0x30/0x80 [ 77.468049][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.473921][ T4309] RIP: 0033:0x7f12c384b417 [ 77.478334][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 77.498005][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.506403][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 77.514375][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 77.522326][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 77.530276][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 77.538226][ T4309] R13: 00007f12c38e0ccb R14: 0000000000012adb R15: 00007fff4fd65bb0 [ 77.546188][ T4309] [ 77.784722][ T4334] loop0: detected capacity change from 0 to 32768 [ 77.833937][ T4334] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.842222][ T4334] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.864210][ T4334] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 77.874486][ T13] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 77.881280][ T13] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 77.908787][ T13] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 77.916458][ T13] gfs2: fsid=syz:syz.0: jid=0: Done [ 77.923294][ T4334] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 77.980532][ T4334] gfs2: fsid=syz:syz.0: found 1 quota changes [ 77.991327][ T4309] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 77.991327][ T4309] inode = 11 2339 [ 77.991327][ T4309] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 78.009980][ T4309] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 78.020197][ T4309] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 78.034580][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 78.042156][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.052201][ T4309] Call Trace: [ 78.055467][ T4309] [ 78.058377][ T4309] dump_stack_lvl+0x188/0x250 [ 78.063064][ T4309] ? show_regs_print_info+0x20/0x20 [ 78.068248][ T4309] ? load_image+0x410/0x410 [ 78.072839][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 78.078025][ T4309] gfs2_assert_warn_i+0x187/0x2c0 [ 78.083031][ T4309] gfs2_quota_cleanup+0x48c/0x670 [ 78.088038][ T4309] gfs2_make_fs_ro+0x440/0x620 [ 78.092796][ T4309] ? __might_sleep+0xf0/0xf0 [ 78.097377][ T4309] ? gfs2_dinode_out+0xb00/0xb00 [ 78.102296][ T4309] ? _raw_spin_unlock+0x24/0x40 [ 78.107122][ T4309] ? gfs2_glock_nq+0xcaa/0x1510 [ 78.111958][ T4309] gfs2_withdraw+0x660/0x14e0 [ 78.116616][ T4309] ? gfs2_meta_new+0x160/0x160 [ 78.121371][ T4309] ? gfs2_lm+0x240/0x240 [ 78.125593][ T4309] ? gfs2_freeze_lock+0x52/0xc0 [ 78.130428][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 78.135611][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 78.140706][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 78.145802][ T4309] inode_go_lock+0x127/0x450 [ 78.150376][ T4309] do_promote+0x75b/0xb20 [ 78.154691][ T4309] finish_xmote+0x4c2/0xaf0 [ 78.159174][ T4309] do_xmote+0x752/0x10a0 [ 78.163452][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 78.168114][ T4309] do_sync+0x49c/0xba0 [ 78.172163][ T4309] ? slot_put+0x1e0/0x1e0 [ 78.176475][ T4309] ? do_sync+0x494/0xba0 [ 78.180695][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 78.185870][ T4309] gfs2_quota_sync+0x355/0x780 [ 78.190618][ T4309] gfs2_sync_fs+0x48/0xb0 [ 78.194926][ T4309] sync_filesystem+0xe6/0x220 [ 78.199582][ T4309] generic_shutdown_super+0x6b/0x300 [ 78.204846][ T4309] kill_block_super+0x7c/0xe0 [ 78.209504][ T4309] deactivate_locked_super+0x93/0xf0 [ 78.214773][ T4309] cleanup_mnt+0x426/0x4d0 [ 78.219174][ T4309] task_work_run+0x125/0x1a0 [ 78.223754][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 78.229122][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 78.234647][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 78.240087][ T4309] do_syscall_64+0x58/0xa0 [ 78.244490][ T4309] ? clear_bhb_loop+0x30/0x80 [ 78.249172][ T4309] ? clear_bhb_loop+0x30/0x80 [ 78.253854][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.259748][ T4309] RIP: 0033:0x7f12c384b417 [ 78.264143][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 78.283747][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.292137][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 78.300088][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 78.308044][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 78.316009][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 78.323957][ T4309] R13: 00007f12c38e0ccb R14: 0000000000012f31 R15: 00007fff4fd65bb0 [ 78.331919][ T4309] [ 78.336417][ T4309] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 78.345338][ T4309] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 78.352409][ T4309] gfs2: fsid=syz:syz.0: File system withdrawn [ 78.358547][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 78.366091][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 78.376133][ T4309] Call Trace: [ 78.379396][ T4309] [ 78.382307][ T4309] dump_stack_lvl+0x188/0x250 [ 78.386969][ T4309] ? show_regs_print_info+0x20/0x20 [ 78.392147][ T4309] ? load_image+0x410/0x410 [ 78.396630][ T4309] ? lockref_put_or_lock+0x6e/0xb0 [ 78.401728][ T4309] gfs2_withdraw+0xb9a/0x14e0 [ 78.406389][ T4309] ? gfs2_meta_new+0x160/0x160 [ 78.411129][ T4309] ? gfs2_lm+0x240/0x240 [ 78.415352][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 78.420533][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 78.425626][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 78.430727][ T4309] inode_go_lock+0x127/0x450 [ 78.435299][ T4309] do_promote+0x75b/0xb20 [ 78.439645][ T4309] finish_xmote+0x4c2/0xaf0 [ 78.444144][ T4309] do_xmote+0x752/0x10a0 [ 78.448367][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 78.453025][ T4309] do_sync+0x49c/0xba0 [ 78.457077][ T4309] ? slot_put+0x1e0/0x1e0 [ 78.461385][ T4309] ? do_sync+0x494/0xba0 [ 78.465606][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 78.470791][ T4309] gfs2_quota_sync+0x355/0x780 [ 78.475538][ T4309] gfs2_sync_fs+0x48/0xb0 [ 78.479843][ T4309] sync_filesystem+0xe6/0x220 [ 78.484500][ T4309] generic_shutdown_super+0x6b/0x300 [ 78.489764][ T4309] kill_block_super+0x7c/0xe0 [ 78.494421][ T4309] deactivate_locked_super+0x93/0xf0 [ 78.499697][ T4309] cleanup_mnt+0x426/0x4d0 [ 78.504099][ T4309] task_work_run+0x125/0x1a0 [ 78.508669][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 78.514020][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 78.519540][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 78.524973][ T4309] do_syscall_64+0x58/0xa0 [ 78.529368][ T4309] ? clear_bhb_loop+0x30/0x80 [ 78.534025][ T4309] ? clear_bhb_loop+0x30/0x80 [ 78.538679][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.544551][ T4309] RIP: 0033:0x7f12c384b417 [ 78.548946][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 78.568537][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.576933][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 78.584884][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 78.592838][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 78.600798][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 78.608760][ T4309] R13: 00007f12c38e0ccb R14: 0000000000012f31 R15: 00007fff4fd65bb0 [ 78.616722][ T4309] [ 78.876498][ T4337] loop0: detected capacity change from 0 to 32768 [ 78.930786][ T4337] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 78.939041][ T4337] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 78.950832][ T4337] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 78.959772][ T4297] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 78.966707][ T4297] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 78.988663][ T4297] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms [ 78.996291][ T4297] gfs2: fsid=syz:syz.0: jid=0: Done [ 79.001522][ T4337] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 79.067296][ T4337] gfs2: fsid=syz:syz.0: found 1 quota changes [ 79.079334][ T4309] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 79.079334][ T4309] inode = 11 2339 [ 79.079334][ T4309] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 79.098352][ T4309] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/10/10 12:18:16 executed programs: 7 [ 79.109517][ T4309] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 79.123540][ T4309] CPU: 1 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 79.131088][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.141134][ T4309] Call Trace: [ 79.144401][ T4309] [ 79.147314][ T4309] dump_stack_lvl+0x188/0x250 [ 79.151974][ T4309] ? show_regs_print_info+0x20/0x20 [ 79.157154][ T4309] ? load_image+0x410/0x410 [ 79.161643][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 79.166830][ T4309] gfs2_assert_warn_i+0x187/0x2c0 [ 79.171837][ T4309] gfs2_quota_cleanup+0x48c/0x670 [ 79.176846][ T4309] gfs2_make_fs_ro+0x440/0x620 [ 79.181588][ T4309] ? __might_sleep+0xf0/0xf0 [ 79.186155][ T4309] ? gfs2_dinode_out+0xb00/0xb00 [ 79.191086][ T4309] ? _raw_spin_unlock+0x24/0x40 [ 79.195922][ T4309] ? gfs2_glock_nq+0xcaa/0x1510 [ 79.200781][ T4309] gfs2_withdraw+0x660/0x14e0 [ 79.205442][ T4309] ? gfs2_meta_new+0x160/0x160 [ 79.210185][ T4309] ? gfs2_lm+0x240/0x240 [ 79.214409][ T4309] ? gfs2_freeze_lock+0x52/0xc0 [ 79.219241][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 79.224419][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 79.229553][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 79.234648][ T4309] inode_go_lock+0x127/0x450 [ 79.239263][ T4309] do_promote+0x75b/0xb20 [ 79.243575][ T4309] finish_xmote+0x4c2/0xaf0 [ 79.248066][ T4309] do_xmote+0x752/0x10a0 [ 79.252288][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 79.256953][ T4309] do_sync+0x49c/0xba0 [ 79.261012][ T4309] ? slot_put+0x1e0/0x1e0 [ 79.265324][ T4309] ? do_sync+0x494/0xba0 [ 79.269551][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 79.274729][ T4309] gfs2_quota_sync+0x355/0x780 [ 79.279480][ T4309] gfs2_sync_fs+0x48/0xb0 [ 79.283790][ T4309] sync_filesystem+0xe6/0x220 [ 79.288454][ T4309] generic_shutdown_super+0x6b/0x300 [ 79.293726][ T4309] kill_block_super+0x7c/0xe0 [ 79.298416][ T4309] deactivate_locked_super+0x93/0xf0 [ 79.303682][ T4309] cleanup_mnt+0x426/0x4d0 [ 79.308092][ T4309] task_work_run+0x125/0x1a0 [ 79.312661][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 79.318011][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 79.323545][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 79.329012][ T4309] do_syscall_64+0x58/0xa0 [ 79.333418][ T4309] ? clear_bhb_loop+0x30/0x80 [ 79.338109][ T4309] ? clear_bhb_loop+0x30/0x80 [ 79.342783][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.348659][ T4309] RIP: 0033:0x7f12c384b417 [ 79.353057][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 79.372662][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.381057][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 79.389010][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 79.396963][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 79.404916][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 79.412881][ T4309] R13: 00007f12c38e0ccb R14: 0000000000013372 R15: 00007fff4fd65bb0 [ 79.420866][ T4309] [ 79.428056][ T4309] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 79.436914][ T4309] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 79.444552][ T4309] gfs2: fsid=syz:syz.0: File system withdrawn [ 79.450632][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 79.458153][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 79.468189][ T4309] Call Trace: [ 79.471449][ T4309] [ 79.474357][ T4309] dump_stack_lvl+0x188/0x250 [ 79.479015][ T4309] ? show_regs_print_info+0x20/0x20 [ 79.484190][ T4309] ? load_image+0x410/0x410 [ 79.488680][ T4309] ? lockref_put_or_lock+0x6e/0xb0 [ 79.493780][ T4309] gfs2_withdraw+0xb9a/0x14e0 [ 79.498453][ T4309] ? gfs2_meta_new+0x160/0x160 [ 79.503199][ T4309] ? gfs2_lm+0x240/0x240 [ 79.507440][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 79.512627][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 79.517718][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 79.522814][ T4309] inode_go_lock+0x127/0x450 [ 79.527424][ T4309] do_promote+0x75b/0xb20 [ 79.531758][ T4309] finish_xmote+0x4c2/0xaf0 [ 79.536249][ T4309] do_xmote+0x752/0x10a0 [ 79.540481][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 79.545146][ T4309] do_sync+0x49c/0xba0 [ 79.549199][ T4309] ? slot_put+0x1e0/0x1e0 [ 79.553524][ T4309] ? do_sync+0x494/0xba0 [ 79.557766][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 79.562952][ T4309] gfs2_quota_sync+0x355/0x780 [ 79.567714][ T4309] gfs2_sync_fs+0x48/0xb0 [ 79.572030][ T4309] sync_filesystem+0xe6/0x220 [ 79.576690][ T4309] generic_shutdown_super+0x6b/0x300 [ 79.581958][ T4309] kill_block_super+0x7c/0xe0 [ 79.586625][ T4309] deactivate_locked_super+0x93/0xf0 [ 79.591901][ T4309] cleanup_mnt+0x426/0x4d0 [ 79.596312][ T4309] task_work_run+0x125/0x1a0 [ 79.600890][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 79.606247][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 79.611780][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 79.617217][ T4309] do_syscall_64+0x58/0xa0 [ 79.621614][ T4309] ? clear_bhb_loop+0x30/0x80 [ 79.626272][ T4309] ? clear_bhb_loop+0x30/0x80 [ 79.630929][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.636803][ T4309] RIP: 0033:0x7f12c384b417 [ 79.641199][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 79.660783][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.669186][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 79.677146][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 79.685106][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 79.693059][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 79.701033][ T4309] R13: 00007f12c38e0ccb R14: 0000000000013372 R15: 00007fff4fd65bb0 [ 79.709000][ T4309] [ 79.976054][ T4340] loop0: detected capacity change from 0 to 32768 [ 80.034415][ T4340] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 80.042681][ T4340] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 80.054269][ T4340] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 80.064674][ T4297] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 80.071463][ T4297] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 80.095531][ T4297] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms [ 80.103172][ T4297] gfs2: fsid=syz:syz.0: jid=0: Done [ 80.108443][ T4340] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 80.170741][ T4340] gfs2: fsid=syz:syz.0: found 1 quota changes [ 80.181194][ T4309] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 80.181194][ T4309] inode = 11 2339 [ 80.181194][ T4309] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 80.199895][ T4309] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 80.210626][ T4309] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 80.225266][ T4309] CPU: 1 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 80.232832][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.242890][ T4309] Call Trace: [ 80.246166][ T4309] [ 80.249077][ T4309] dump_stack_lvl+0x188/0x250 [ 80.253738][ T4309] ? show_regs_print_info+0x20/0x20 [ 80.258914][ T4309] ? load_image+0x410/0x410 [ 80.263414][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 80.268611][ T4309] gfs2_assert_warn_i+0x187/0x2c0 [ 80.273618][ T4309] gfs2_quota_cleanup+0x48c/0x670 [ 80.278629][ T4309] gfs2_make_fs_ro+0x440/0x620 [ 80.283377][ T4309] ? __might_sleep+0xf0/0xf0 [ 80.287963][ T4309] ? gfs2_dinode_out+0xb00/0xb00 [ 80.292890][ T4309] ? _raw_spin_unlock+0x24/0x40 [ 80.297884][ T4309] ? gfs2_glock_nq+0xcaa/0x1510 [ 80.302731][ T4309] gfs2_withdraw+0x660/0x14e0 [ 80.307394][ T4309] ? gfs2_meta_new+0x160/0x160 [ 80.312138][ T4309] ? gfs2_lm+0x240/0x240 [ 80.316362][ T4309] ? gfs2_freeze_lock+0x52/0xc0 [ 80.321194][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 80.326393][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 80.331495][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 80.336617][ T4309] inode_go_lock+0x127/0x450 [ 80.341189][ T4309] do_promote+0x75b/0xb20 [ 80.345500][ T4309] finish_xmote+0x4c2/0xaf0 [ 80.349993][ T4309] do_xmote+0x752/0x10a0 [ 80.354223][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 80.358886][ T4309] do_sync+0x49c/0xba0 [ 80.362948][ T4309] ? slot_put+0x1e0/0x1e0 [ 80.367278][ T4309] ? do_sync+0x494/0xba0 [ 80.371497][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 80.376674][ T4309] gfs2_quota_sync+0x355/0x780 [ 80.381423][ T4309] gfs2_sync_fs+0x48/0xb0 [ 80.385732][ T4309] sync_filesystem+0xe6/0x220 [ 80.390391][ T4309] generic_shutdown_super+0x6b/0x300 [ 80.395659][ T4309] kill_block_super+0x7c/0xe0 [ 80.400316][ T4309] deactivate_locked_super+0x93/0xf0 [ 80.405581][ T4309] cleanup_mnt+0x426/0x4d0 [ 80.409977][ T4309] task_work_run+0x125/0x1a0 [ 80.414554][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 80.419902][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 80.425423][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 80.430861][ T4309] do_syscall_64+0x58/0xa0 [ 80.435285][ T4309] ? clear_bhb_loop+0x30/0x80 [ 80.439941][ T4309] ? clear_bhb_loop+0x30/0x80 [ 80.444615][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.450490][ T4309] RIP: 0033:0x7f12c384b417 [ 80.454885][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 80.474472][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.482872][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 80.490839][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 80.498810][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 80.506767][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 80.514723][ T4309] R13: 00007f12c38e0ccb R14: 00000000000137bf R15: 00007fff4fd65bb0 [ 80.522686][ T4309] [ 80.530044][ T4309] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 80.538937][ T4309] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 80.546511][ T4309] gfs2: fsid=syz:syz.0: File system withdrawn [ 80.552596][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 80.560124][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 80.570165][ T4309] Call Trace: [ 80.573427][ T4309] [ 80.576341][ T4309] dump_stack_lvl+0x188/0x250 [ 80.581001][ T4309] ? show_regs_print_info+0x20/0x20 [ 80.586179][ T4309] ? load_image+0x410/0x410 [ 80.590687][ T4309] ? lockref_put_or_lock+0x6e/0xb0 [ 80.595802][ T4309] gfs2_withdraw+0xb9a/0x14e0 [ 80.600461][ T4309] ? gfs2_meta_new+0x160/0x160 [ 80.605209][ T4309] ? gfs2_lm+0x240/0x240 [ 80.609439][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 80.614627][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 80.619720][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 80.624817][ T4309] inode_go_lock+0x127/0x450 [ 80.629388][ T4309] do_promote+0x75b/0xb20 [ 80.633701][ T4309] finish_xmote+0x4c2/0xaf0 [ 80.638186][ T4309] do_xmote+0x752/0x10a0 [ 80.642425][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 80.647086][ T4309] do_sync+0x49c/0xba0 [ 80.651139][ T4309] ? slot_put+0x1e0/0x1e0 [ 80.655448][ T4309] ? do_sync+0x494/0xba0 [ 80.659693][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 80.664871][ T4309] gfs2_quota_sync+0x355/0x780 [ 80.669618][ T4309] gfs2_sync_fs+0x48/0xb0 [ 80.673923][ T4309] sync_filesystem+0xe6/0x220 [ 80.678582][ T4309] generic_shutdown_super+0x6b/0x300 [ 80.683865][ T4309] kill_block_super+0x7c/0xe0 [ 80.688525][ T4309] deactivate_locked_super+0x93/0xf0 [ 80.693791][ T4309] cleanup_mnt+0x426/0x4d0 [ 80.698192][ T4309] task_work_run+0x125/0x1a0 [ 80.702765][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 80.708116][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 80.713641][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 80.719076][ T4309] do_syscall_64+0x58/0xa0 [ 80.723473][ T4309] ? clear_bhb_loop+0x30/0x80 [ 80.728135][ T4309] ? clear_bhb_loop+0x30/0x80 [ 80.732789][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.738674][ T4309] RIP: 0033:0x7f12c384b417 [ 80.743071][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 80.762663][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.771055][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 80.779005][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 80.786956][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 80.794908][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 80.802862][ T4309] R13: 00007f12c38e0ccb R14: 00000000000137bf R15: 00007fff4fd65bb0 [ 80.810835][ T4309] [ 81.057129][ T4343] loop0: detected capacity change from 0 to 32768 [ 81.113263][ T4343] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 81.121614][ T4343] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 81.156647][ T4343] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 81.165599][ T4297] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 81.172383][ T4297] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 81.195840][ T4297] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 23ms [ 81.205027][ T4297] gfs2: fsid=syz:syz.0: jid=0: Done [ 81.210269][ T4343] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 81.275118][ T4343] gfs2: fsid=syz:syz.0: found 1 quota changes [ 81.285833][ T4309] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 81.285833][ T4309] inode = 11 2339 [ 81.285833][ T4309] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 410 [ 81.304693][ T4309] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 81.315714][ T4309] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 81.329897][ T4309] CPU: 1 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 81.337474][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.347533][ T4309] Call Trace: [ 81.350798][ T4309] [ 81.353724][ T4309] dump_stack_lvl+0x188/0x250 [ 81.358406][ T4309] ? show_regs_print_info+0x20/0x20 [ 81.363598][ T4309] ? load_image+0x410/0x410 [ 81.368084][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 81.373269][ T4309] gfs2_assert_warn_i+0x187/0x2c0 [ 81.378292][ T4309] gfs2_quota_cleanup+0x48c/0x670 [ 81.383299][ T4309] gfs2_make_fs_ro+0x440/0x620 [ 81.388045][ T4309] ? __might_sleep+0xf0/0xf0 [ 81.392612][ T4309] ? gfs2_dinode_out+0xb00/0xb00 [ 81.397530][ T4309] ? _raw_spin_unlock+0x24/0x40 [ 81.402360][ T4309] ? gfs2_glock_nq+0xcaa/0x1510 [ 81.407200][ T4309] gfs2_withdraw+0x660/0x14e0 [ 81.411865][ T4309] ? gfs2_meta_new+0x160/0x160 [ 81.416628][ T4309] ? gfs2_lm+0x240/0x240 [ 81.420858][ T4309] ? gfs2_freeze_lock+0x52/0xc0 [ 81.425687][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 81.430862][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 81.435970][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 81.441069][ T4309] inode_go_lock+0x127/0x450 [ 81.445655][ T4309] do_promote+0x75b/0xb20 [ 81.449970][ T4309] finish_xmote+0x4c2/0xaf0 [ 81.454472][ T4309] do_xmote+0x752/0x10a0 [ 81.458697][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 81.463358][ T4309] do_sync+0x49c/0xba0 [ 81.467407][ T4309] ? slot_put+0x1e0/0x1e0 [ 81.471719][ T4309] ? do_sync+0x494/0xba0 [ 81.475940][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 81.481122][ T4309] gfs2_quota_sync+0x355/0x780 [ 81.485869][ T4309] gfs2_sync_fs+0x48/0xb0 [ 81.490178][ T4309] sync_filesystem+0xe6/0x220 [ 81.494835][ T4309] generic_shutdown_super+0x6b/0x300 [ 81.500098][ T4309] kill_block_super+0x7c/0xe0 [ 81.504754][ T4309] deactivate_locked_super+0x93/0xf0 [ 81.510018][ T4309] cleanup_mnt+0x426/0x4d0 [ 81.514418][ T4309] task_work_run+0x125/0x1a0 [ 81.518998][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 81.524351][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 81.529878][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 81.535321][ T4309] do_syscall_64+0x58/0xa0 [ 81.539715][ T4309] ? clear_bhb_loop+0x30/0x80 [ 81.544383][ T4309] ? clear_bhb_loop+0x30/0x80 [ 81.549042][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.554914][ T4309] RIP: 0033:0x7f12c384b417 [ 81.559309][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 81.578896][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.587289][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 81.595239][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 81.603200][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 81.611155][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 81.619105][ T4309] R13: 00007f12c38e0ccb R14: 0000000000013bf8 R15: 00007fff4fd65bb0 [ 81.627067][ T4309] [ 81.635308][ T4309] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 81.644228][ T4309] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 81.650893][ T4309] gfs2: fsid=syz:syz.0: File system withdrawn [ 81.659194][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 81.666747][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.676795][ T4309] Call Trace: [ 81.680070][ T4309] [ 81.682996][ T4309] dump_stack_lvl+0x188/0x250 [ 81.687676][ T4309] ? show_regs_print_info+0x20/0x20 [ 81.692871][ T4309] ? load_image+0x410/0x410 [ 81.697381][ T4309] ? lockref_put_or_lock+0x6e/0xb0 [ 81.702496][ T4309] gfs2_withdraw+0xb9a/0x14e0 [ 81.707176][ T4309] ? gfs2_meta_new+0x160/0x160 [ 81.711936][ T4309] ? gfs2_lm+0x240/0x240 [ 81.716185][ T4309] ? gfs2_consist_inode_i+0xc0/0xe0 [ 81.721390][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 81.726510][ T4309] ? gfs2_inode_metasync+0xf0/0xf0 [ 81.731630][ T4309] inode_go_lock+0x127/0x450 [ 81.736222][ T4309] do_promote+0x75b/0xb20 [ 81.740558][ T4309] finish_xmote+0x4c2/0xaf0 [ 81.745063][ T4309] do_xmote+0x752/0x10a0 [ 81.749310][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 81.754015][ T4309] do_sync+0x49c/0xba0 [ 81.758088][ T4309] ? slot_put+0x1e0/0x1e0 [ 81.762433][ T4309] ? do_sync+0x494/0xba0 [ 81.766675][ T4309] ? do_raw_spin_unlock+0x11d/0x230 [ 81.771876][ T4309] gfs2_quota_sync+0x355/0x780 [ 81.776647][ T4309] gfs2_sync_fs+0x48/0xb0 [ 81.780973][ T4309] sync_filesystem+0xe6/0x220 [ 81.785654][ T4309] generic_shutdown_super+0x6b/0x300 [ 81.790941][ T4309] kill_block_super+0x7c/0xe0 [ 81.795624][ T4309] deactivate_locked_super+0x93/0xf0 [ 81.800908][ T4309] cleanup_mnt+0x426/0x4d0 [ 81.805327][ T4309] task_work_run+0x125/0x1a0 [ 81.809922][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 81.815297][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 81.820843][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 81.826307][ T4309] do_syscall_64+0x58/0xa0 [ 81.830720][ T4309] ? clear_bhb_loop+0x30/0x80 [ 81.835398][ T4309] ? clear_bhb_loop+0x30/0x80 [ 81.840073][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.845964][ T4309] RIP: 0033:0x7f12c384b417 [ 81.850385][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 81.869988][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.878403][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 81.886373][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 81.894347][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 81.902320][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 81.910286][ T4309] R13: 00007f12c38e0ccb R14: 0000000000013bf8 R15: 00007fff4fd65bb0 [ 81.918269][ T4309] [ 81.926185][ T4309] ================================================================== [ 81.934433][ T4309] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 81.941107][ T4309] Read of size 8 at addr ffff888062754480 by task syz-executor/4309 [ 81.949077][ T4309] [ 81.951398][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Not tainted syzkaller #0 [ 81.958935][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 81.968984][ T4309] Call Trace: [ 81.972261][ T4309] [ 81.975188][ T4309] dump_stack_lvl+0x188/0x250 [ 81.979866][ T4309] ? show_regs_print_info+0x20/0x20 [ 81.985064][ T4309] ? load_image+0x410/0x410 [ 81.989563][ T4309] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 81.995030][ T4309] print_address_description+0x60/0x2d0 [ 82.000581][ T4309] ? qd_unlock+0x30/0x2d0 [ 82.004909][ T4309] kasan_report+0xdf/0x130 [ 82.009329][ T4309] ? qd_unlock+0x30/0x2d0 [ 82.013665][ T4309] kasan_check_range+0x235/0x290 [ 82.018604][ T4309] qd_unlock+0x30/0x2d0 [ 82.022762][ T4309] gfs2_quota_sync+0x63b/0x780 [ 82.027544][ T4309] gfs2_sync_fs+0x48/0xb0 [ 82.031871][ T4309] sync_filesystem+0xe6/0x220 [ 82.036548][ T4309] generic_shutdown_super+0x6b/0x300 [ 82.041838][ T4309] kill_block_super+0x7c/0xe0 [ 82.046514][ T4309] deactivate_locked_super+0x93/0xf0 [ 82.051799][ T4309] cleanup_mnt+0x426/0x4d0 [ 82.056215][ T4309] task_work_run+0x125/0x1a0 [ 82.060799][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 82.066168][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 82.071700][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 82.077154][ T4309] do_syscall_64+0x58/0xa0 [ 82.081553][ T4309] ? clear_bhb_loop+0x30/0x80 [ 82.086220][ T4309] ? clear_bhb_loop+0x30/0x80 [ 82.090879][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.096747][ T4309] RIP: 0033:0x7f12c384b417 [ 82.101157][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 82.120755][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.129153][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 82.137105][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 82.145056][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 82.153004][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 82.160950][ T4309] R13: 00007f12c38e0ccb R14: 0000000000013bf8 R15: 00007fff4fd65bb0 [ 82.168999][ T4309] [ 82.171995][ T4309] [ 82.174294][ T4309] Allocated by task 4343: [ 82.178601][ T4309] __kasan_slab_alloc+0x92/0xc0 [ 82.183610][ T4309] slab_post_alloc_hook+0x4c/0x380 [ 82.188724][ T4309] kmem_cache_alloc+0x15d/0x280 [ 82.193564][ T4309] qd_alloc+0x50/0x260 [ 82.197609][ T4309] gfs2_quota_init+0x74d/0xe80 [ 82.202353][ T4309] gfs2_make_fs_rw+0x41c/0x590 [ 82.207107][ T4309] gfs2_fill_super+0x17d1/0x1ea0 [ 82.212020][ T4309] get_tree_bdev+0x3e6/0x610 [ 82.216587][ T4309] gfs2_get_tree+0x4d/0x1e0 [ 82.221065][ T4309] vfs_get_tree+0x88/0x270 [ 82.225457][ T4309] do_new_mount+0x247/0xa40 [ 82.229943][ T4309] __se_sys_mount+0x2e3/0x3d0 [ 82.234599][ T4309] do_syscall_64+0x4c/0xa0 [ 82.239000][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.244876][ T4309] [ 82.247178][ T4309] Freed by task 14: [ 82.250958][ T4309] kasan_set_track+0x4b/0x70 [ 82.255538][ T4309] kasan_set_free_info+0x1f/0x40 [ 82.260454][ T4309] ____kasan_slab_free+0xd5/0x110 [ 82.265453][ T4309] slab_free_freelist_hook+0xec/0x170 [ 82.270887][ T4309] kmem_cache_free+0x8f/0x210 [ 82.275539][ T4309] rcu_core+0x96e/0x1650 [ 82.279757][ T4309] handle_softirqs+0x336/0x830 [ 82.284493][ T4309] run_ksoftirqd+0xa4/0x100 [ 82.288974][ T4309] smpboot_thread_fn+0x520/0x990 [ 82.293885][ T4309] kthread+0x42e/0x520 [ 82.297926][ T4309] ret_from_fork+0x1f/0x30 [ 82.302322][ T4309] [ 82.304623][ T4309] Last potentially related work creation: [ 82.310309][ T4309] kasan_save_stack+0x35/0x60 [ 82.314984][ T4309] kasan_record_aux_stack+0xb8/0x100 [ 82.320248][ T4309] call_rcu+0x189/0x900 [ 82.324382][ T4309] gfs2_quota_cleanup+0x414/0x670 [ 82.329385][ T4309] gfs2_make_fs_ro+0x440/0x620 [ 82.334129][ T4309] gfs2_withdraw+0x660/0x14e0 [ 82.338787][ T4309] gfs2_inode_refresh+0xb2d/0x11a0 [ 82.343878][ T4309] inode_go_lock+0x127/0x450 [ 82.348446][ T4309] do_promote+0x75b/0xb20 [ 82.352749][ T4309] finish_xmote+0x4c2/0xaf0 [ 82.357224][ T4309] do_xmote+0x752/0x10a0 [ 82.361439][ T4309] gfs2_glock_nq+0xc6b/0x1510 [ 82.366088][ T4309] do_sync+0x49c/0xba0 [ 82.370133][ T4309] gfs2_quota_sync+0x355/0x780 [ 82.374869][ T4309] gfs2_sync_fs+0x48/0xb0 [ 82.379200][ T4309] sync_filesystem+0xe6/0x220 [ 82.383856][ T4309] generic_shutdown_super+0x6b/0x300 [ 82.389136][ T4309] kill_block_super+0x7c/0xe0 [ 82.393790][ T4309] deactivate_locked_super+0x93/0xf0 [ 82.399049][ T4309] cleanup_mnt+0x426/0x4d0 [ 82.403440][ T4309] task_work_run+0x125/0x1a0 [ 82.408007][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 82.413351][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 82.418871][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 82.424323][ T4309] do_syscall_64+0x58/0xa0 [ 82.428716][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.434592][ T4309] [ 82.436894][ T4309] The buggy address belongs to the object at ffff8880627543f0 [ 82.436894][ T4309] which belongs to the cache gfs2_quotad of size 272 [ 82.450917][ T4309] The buggy address is located 144 bytes inside of [ 82.450917][ T4309] 272-byte region [ffff8880627543f0, ffff888062754500) [ 82.464164][ T4309] The buggy address belongs to the page: [ 82.469774][ T4309] page:ffffea000189d500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x62754 [ 82.479896][ T4309] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 82.487429][ T4309] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801f7013c0 [ 82.495991][ T4309] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 82.504543][ T4309] page dumped because: kasan: bad access detected [ 82.510935][ T4309] page_owner tracks the page as allocated [ 82.516625][ T4309] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4328, ts 75773475522, free_ts 63700736554 [ 82.535612][ T4309] get_page_from_freelist+0x24f6/0x2670 [ 82.541140][ T4309] __alloc_pages+0x1ee/0x480 [ 82.545706][ T4309] new_slab+0xc0/0x4b0 [ 82.549749][ T4309] ___slab_alloc+0x807/0xdd0 [ 82.554342][ T4309] kmem_cache_alloc+0xf0/0x280 [ 82.559079][ T4309] qd_alloc+0x50/0x260 [ 82.563122][ T4309] gfs2_quota_init+0x74d/0xe80 [ 82.567860][ T4309] gfs2_make_fs_rw+0x41c/0x590 [ 82.572596][ T4309] gfs2_fill_super+0x17d1/0x1ea0 [ 82.577520][ T4309] get_tree_bdev+0x3e6/0x610 [ 82.582087][ T4309] gfs2_get_tree+0x4d/0x1e0 [ 82.586563][ T4309] vfs_get_tree+0x88/0x270 [ 82.590959][ T4309] do_new_mount+0x247/0xa40 [ 82.595567][ T4309] __se_sys_mount+0x2e3/0x3d0 [ 82.600241][ T4309] do_syscall_64+0x4c/0xa0 [ 82.604651][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.610525][ T4309] page last free stack trace: [ 82.615178][ T4309] free_unref_page_prepare+0x637/0x6c0 [ 82.620618][ T4309] free_unref_page_list+0x119/0x830 [ 82.625802][ T4309] release_pages+0x185f/0x1bd0 [ 82.630542][ T4309] tlb_finish_mmu+0x1b4/0x370 [ 82.635199][ T4309] unmap_region+0x344/0x3b0 [ 82.639687][ T4309] __do_munmap+0xa29/0xe10 [ 82.644087][ T4309] __vm_munmap+0x13f/0x240 [ 82.648480][ T4309] __x64_sys_munmap+0x67/0x70 [ 82.653131][ T4309] do_syscall_64+0x4c/0xa0 [ 82.657521][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.663393][ T4309] [ 82.665696][ T4309] Memory state around the buggy address: [ 82.671295][ T4309] ffff888062754380: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb [ 82.679329][ T4309] ffff888062754400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.687372][ T4309] >ffff888062754480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 82.695419][ T4309] ^ [ 82.699465][ T4309] ffff888062754500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.707505][ T4309] ffff888062754580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.715539][ T4309] ================================================================== [ 82.723572][ T4309] Disabling lock debugging due to kernel taint [ 82.730982][ T4309] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.738181][ T4309] CPU: 0 PID: 4309 Comm: syz-executor Tainted: G B syzkaller #0 [ 82.747103][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 82.757137][ T4309] Call Trace: [ 82.760412][ T4309] [ 82.763324][ T4309] dump_stack_lvl+0x188/0x250 [ 82.767981][ T4309] ? show_regs_print_info+0x20/0x20 [ 82.773154][ T4309] ? load_image+0x410/0x410 [ 82.777632][ T4309] panic+0x2f8/0x850 [ 82.781515][ T4309] ? bpf_jit_dump+0xd0/0xd0 [ 82.785992][ T4309] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 82.791953][ T4309] ? _raw_spin_unlock+0x40/0x40 [ 82.796783][ T4309] ? qd_unlock+0x30/0x2d0 [ 82.801092][ T4309] check_panic_on_warn+0x80/0xa0 [ 82.806003][ T4309] ? qd_unlock+0x30/0x2d0 [ 82.810309][ T4309] end_report+0x6d/0xf0 [ 82.814440][ T4309] kasan_report+0x102/0x130 [ 82.818917][ T4309] ? qd_unlock+0x30/0x2d0 [ 82.823222][ T4309] kasan_check_range+0x235/0x290 [ 82.828146][ T4309] qd_unlock+0x30/0x2d0 [ 82.832280][ T4309] gfs2_quota_sync+0x63b/0x780 [ 82.837020][ T4309] gfs2_sync_fs+0x48/0xb0 [ 82.841329][ T4309] sync_filesystem+0xe6/0x220 [ 82.845982][ T4309] generic_shutdown_super+0x6b/0x300 [ 82.851244][ T4309] kill_block_super+0x7c/0xe0 [ 82.855899][ T4309] deactivate_locked_super+0x93/0xf0 [ 82.861158][ T4309] cleanup_mnt+0x426/0x4d0 [ 82.865555][ T4309] task_work_run+0x125/0x1a0 [ 82.870122][ T4309] exit_to_user_mode_loop+0x10f/0x130 [ 82.875484][ T4309] exit_to_user_mode_prepare+0xee/0x180 [ 82.881002][ T4309] syscall_exit_to_user_mode+0x16/0x40 [ 82.886436][ T4309] do_syscall_64+0x58/0xa0 [ 82.890837][ T4309] ? clear_bhb_loop+0x30/0x80 [ 82.895493][ T4309] ? clear_bhb_loop+0x30/0x80 [ 82.900146][ T4309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.906013][ T4309] RIP: 0033:0x7f12c384b417 [ 82.910403][ T4309] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 82.929983][ T4309] RSP: 002b:00007fff4fd64a28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.938381][ T4309] RAX: 0000000000000000 RBX: 00007f12c38e0ccb RCX: 00007f12c384b417 [ 82.946329][ T4309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4fd64ae0 [ 82.954279][ T4309] RBP: 00007fff4fd64ae0 R08: 00007fff4fd65ae0 R09: 00000000ffffffff [ 82.962225][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4fd65b70 [ 82.970174][ T4309] R13: 00007f12c38e0ccb R14: 0000000000013bf8 R15: 00007fff4fd65bb0 [ 82.978124][ T4309] [ 82.981342][ T4309] Kernel Offset: disabled [ 82.985651][ T4309] Rebooting in 86400 seconds..