no interfaces have a carrier [ 35.924830][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.940194][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 81.363928][ T1107] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. 2026/02/28 00:42:49 parsed 1 programs [ 88.002657][ T4196] cgroup: Unknown subsys name 'net' [ 88.108017][ T4196] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.621772][ T4196] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 91.483811][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.494729][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.505877][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.529292][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.537242][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.545132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.140117][ T1280] ODEBUG: Out of memory. ODEBUG disabled [ 93.618897][ T4278] chnl_net:caif_netlink_parms(): no params data found [ 93.663529][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.671234][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.680797][ T4278] device bridge_slave_0 entered promiscuous mode [ 93.690279][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.697480][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.705726][ T4278] device bridge_slave_1 entered promiscuous mode [ 93.725485][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.736389][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.758278][ T4278] team0: Port device team_slave_0 added [ 93.765435][ T4278] team0: Port device team_slave_1 added [ 93.782924][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.789977][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.816338][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.828535][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.835573][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.862320][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.909462][ T4278] device hsr_slave_0 entered promiscuous mode [ 93.916675][ T4278] device hsr_slave_1 entered promiscuous mode [ 94.029665][ T4278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.040592][ T4278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.065672][ T4278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.075422][ T4278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.115714][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.122952][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.130773][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.137946][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.196211][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.210583][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.220268][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.229124][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.237536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 94.252450][ T4278] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.280898][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.290436][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.297595][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.308620][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.318405][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.325554][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.364785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.373867][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.385617][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.403234][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.412885][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.423315][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.532749][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.540543][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.555666][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.590125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.607410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.615800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.625711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.633763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.644562][ T4278] device veth0_vlan entered promiscuous mode [ 94.669937][ T4278] device veth1_vlan entered promiscuous mode [ 94.696883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.705471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.714019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.724768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.735501][ T4278] device veth0_macvtap entered promiscuous mode [ 94.754367][ T4278] device veth1_macvtap entered promiscuous mode [ 94.790371][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.798948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.808649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.816844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.825669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.837367][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.847513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.857008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.868364][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.878698][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.889406][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.899238][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.026421][ T4278] syz-executor (4278) used greatest stack depth: 21136 bytes left 2026/02/28 00:42:59 executed programs: 0 [ 95.757209][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 95.820987][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.828552][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.839285][ T4295] device bridge_slave_0 entered promiscuous mode [ 95.850055][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.859697][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.868134][ T4295] device bridge_slave_1 entered promiscuous mode [ 95.895410][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.909422][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.945552][ T4295] team0: Port device team_slave_0 added [ 95.954279][ T4295] team0: Port device team_slave_1 added [ 95.977819][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.987047][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.014257][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.028927][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.036003][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.062193][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.102852][ T4295] device hsr_slave_0 entered promiscuous mode [ 96.109759][ T4295] device hsr_slave_1 entered promiscuous mode [ 96.117081][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.126317][ T4295] Cannot create hsr debugfs directory [ 96.212343][ T4295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.692284][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 99.378098][ T4295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.771942][ T1325] Bluetooth: hci0: command 0x041b tx timeout [ 99.970317][ T4295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.069855][ T4295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.205628][ T4295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.215402][ T4295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.225571][ T4295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.234586][ T4295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.295898][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.319815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.328373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.338498][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.349971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.359788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.368909][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.376057][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.385129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.408513][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.417810][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.426508][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.433664][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.455922][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.469378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.480804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.490053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.500393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.521184][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.529964][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.541976][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.550415][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.565096][ T1280] device hsr_slave_0 left promiscuous mode [ 100.572873][ T1280] device hsr_slave_1 left promiscuous mode [ 100.579642][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.587275][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.595966][ T1280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.603748][ T1280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.611433][ T1280] device bridge_slave_1 left promiscuous mode [ 100.618569][ T1280] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.635652][ T1280] device bridge_slave_0 left promiscuous mode [ 100.642402][ T1280] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.659827][ T1280] device veth1_macvtap left promiscuous mode [ 100.666378][ T1280] device veth0_macvtap left promiscuous mode [ 100.672573][ T1280] device veth1_vlan left promiscuous mode [ 100.678521][ T1280] device veth0_vlan left promiscuous mode [ 100.821039][ T1280] team0 (unregistering): Port device team_slave_1 removed [ 100.835571][ T1280] team0 (unregistering): Port device team_slave_0 removed [ 100.849027][ T1280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.863251][ T1280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.916743][ T1280] bond0 (unregistering): Released all slaves [ 100.953378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.962350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.978461][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.078475][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.086311][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.099967][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.120964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.131261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.149680][ T4295] device veth0_vlan entered promiscuous mode [ 101.157129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.167541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.176242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.186067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.198531][ T4295] device veth1_vlan entered promiscuous mode [ 101.221993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.230297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.239717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.248821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.258223][ T4295] device veth0_macvtap entered promiscuous mode [ 101.268296][ T4295] device veth1_macvtap entered promiscuous mode [ 101.284880][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.294100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.302710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.310812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.320171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.332136][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.339727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.348606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.367704][ T4295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.376774][ T4295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.385850][ T4295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.394634][ T4295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.447524][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.461257][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.471956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/02/28 00:43:05 executed programs: 2 [ 101.495130][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.505132][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.515570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.842324][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 101.890859][ T4312] loop0: detected capacity change from 0 to 32768 [ 101.963430][ T4312] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 101.978142][ T4312] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.032663][ T4312] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 102.049863][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.061269][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.123448][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 62ms [ 102.143118][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.148949][ T4312] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 102.280488][ T4312] gfs2: fsid=syz:syz.0: found 1 quota changes [ 102.324564][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 102.324564][ T4295] inode = 11 2339 [ 102.324564][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 102.360702][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 102.378043][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 102.392286][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 102.399860][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.409961][ T4295] Call Trace: [ 102.413274][ T4295] [ 102.416241][ T4295] dump_stack_lvl+0x188/0x250 [ 102.420970][ T4295] ? show_regs_print_info+0x20/0x20 [ 102.426203][ T4295] ? load_image+0x400/0x400 [ 102.430831][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 102.436061][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 102.441125][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 102.446209][ T4295] gfs2_make_fs_ro+0x440/0x620 [ 102.451100][ T4295] ? __might_sleep+0xf0/0xf0 [ 102.455810][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 102.460876][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 102.465760][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 102.470668][ T4295] gfs2_withdraw+0x610/0x1490 [ 102.475390][ T4295] ? gfs2_lm+0x240/0x240 [ 102.479660][ T4295] ? __schedule+0x11f7/0x43c0 [ 102.484373][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 102.489268][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 102.494763][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 102.499996][ T4295] ? do_promote+0x71a/0xab0 [ 102.504624][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 102.509770][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 102.514866][ T4295] inode_go_lock+0x127/0x470 [ 102.519502][ T4295] do_promote+0x741/0xab0 [ 102.523873][ T4295] finish_xmote+0x4df/0xb00 [ 102.528430][ T4295] do_xmote+0x7b6/0x1120 [ 102.532715][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 102.537435][ T4295] do_sync+0x4ab/0xc40 [ 102.541557][ T4295] ? slot_put+0x1e0/0x1e0 [ 102.545944][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 102.551027][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 102.556080][ T4295] ? do_sync+0x4a3/0xc40 [ 102.560359][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 102.565690][ T4295] gfs2_quota_sync+0x32c/0x700 [ 102.570724][ T4295] gfs2_sync_fs+0x48/0xb0 [ 102.575097][ T4295] sync_filesystem+0xe6/0x220 [ 102.579807][ T4295] generic_shutdown_super+0x6b/0x300 [ 102.585133][ T4295] kill_block_super+0x7c/0xe0 [ 102.589847][ T4295] deactivate_locked_super+0x93/0xf0 [ 102.595158][ T4295] cleanup_mnt+0x42d/0x4e0 [ 102.599713][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 102.604975][ T4295] task_work_run+0x125/0x1a0 [ 102.609615][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 102.615099][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 102.620677][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 102.626184][ T4295] do_syscall_64+0x58/0xa0 [ 102.631246][ T4295] ? clear_bhb_loop+0x30/0x80 [ 102.636040][ T4295] ? clear_bhb_loop+0x30/0x80 [ 102.640746][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.646674][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 102.651143][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.671128][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.679577][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 102.687576][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 102.695585][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 102.703678][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 102.711763][ T4295] R13: 00007f5f21bf3f90 R14: 0000000000018c92 R15: 00007ffc31288c70 [ 102.719777][ T4295] [ 102.739705][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 102.748716][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 102.758050][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 102.764538][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 102.772296][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 102.782492][ T4295] Call Trace: [ 102.785801][ T4295] [ 102.788762][ T4295] dump_stack_lvl+0x188/0x250 [ 102.793568][ T4295] ? kobject_uevent_env+0x371/0x890 [ 102.798932][ T4295] ? show_regs_print_info+0x20/0x20 [ 102.804254][ T4295] ? load_image+0x400/0x400 [ 102.808801][ T4295] ? kobject_uevent_env+0x371/0x890 [ 102.814222][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 102.819603][ T4295] gfs2_withdraw+0x1149/0x1490 [ 102.824404][ T4295] ? gfs2_lm+0x240/0x240 [ 102.828684][ T4295] ? __schedule+0x11f7/0x43c0 [ 102.833403][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 102.838632][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 102.843698][ T4295] ? do_promote+0x71a/0xab0 [ 102.848263][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 102.853533][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 102.858629][ T4295] inode_go_lock+0x127/0x470 [ 102.863263][ T4295] do_promote+0x741/0xab0 [ 102.867638][ T4295] finish_xmote+0x4df/0xb00 [ 102.872176][ T4295] do_xmote+0x7b6/0x1120 [ 102.876458][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 102.881172][ T4295] do_sync+0x4ab/0xc40 [ 102.885383][ T4295] ? slot_put+0x1e0/0x1e0 [ 102.889824][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 102.894958][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 102.900106][ T4295] ? do_sync+0x4a3/0xc40 [ 102.904404][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 102.909638][ T4295] gfs2_quota_sync+0x32c/0x700 [ 102.914435][ T4295] gfs2_sync_fs+0x48/0xb0 [ 102.918785][ T4295] sync_filesystem+0xe6/0x220 [ 102.923480][ T4295] generic_shutdown_super+0x6b/0x300 [ 102.928791][ T4295] kill_block_super+0x7c/0xe0 [ 102.933494][ T4295] deactivate_locked_super+0x93/0xf0 [ 102.938798][ T4295] cleanup_mnt+0x42d/0x4e0 [ 102.943240][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 102.948459][ T4295] task_work_run+0x125/0x1a0 [ 102.953071][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 102.958478][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 102.964036][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 102.969517][ T4295] do_syscall_64+0x58/0xa0 [ 102.974124][ T4295] ? clear_bhb_loop+0x30/0x80 [ 102.978827][ T4295] ? clear_bhb_loop+0x30/0x80 [ 102.983534][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.989480][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 102.993933][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 103.013607][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.022403][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 103.030491][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 103.038585][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 103.046598][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 103.054584][ T4295] R13: 00007f5f21bf3f90 R14: 0000000000018c92 R15: 00007ffc31288c70 [ 103.062580][ T4295] [ 103.478483][ T4315] loop0: detected capacity change from 0 to 32768 [ 103.535321][ T4315] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 103.545266][ T4315] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 103.557626][ T4315] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 103.566823][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 103.573736][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 103.605707][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms [ 103.613702][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 103.619067][ T4315] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 103.721593][ T4315] gfs2: fsid=syz:syz.0: found 1 quota changes [ 103.735436][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 103.735436][ T4295] inode = 11 2339 [ 103.735436][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 103.754403][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 103.781110][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 103.802539][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 103.810344][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 103.820450][ T4295] Call Trace: [ 103.824372][ T4295] [ 103.827396][ T4295] dump_stack_lvl+0x188/0x250 [ 103.832179][ T4295] ? show_regs_print_info+0x20/0x20 [ 103.837381][ T4295] ? load_image+0x400/0x400 [ 103.841915][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 103.847303][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 103.852343][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 103.857699][ T4295] gfs2_make_fs_ro+0x440/0x620 [ 103.862470][ T4295] ? __might_sleep+0xf0/0xf0 [ 103.867163][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 103.872097][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 103.876942][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 103.881808][ T4295] gfs2_withdraw+0x610/0x1490 [ 103.886493][ T4295] ? gfs2_lm+0x240/0x240 [ 103.890786][ T4295] ? __schedule+0x11f7/0x43c0 [ 103.895474][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 103.900321][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 103.905519][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 103.910567][ T4295] ? do_promote+0x71a/0xab0 [ 103.915070][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 103.920183][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 103.925210][ T4295] inode_go_lock+0x127/0x470 [ 103.929801][ T4295] do_promote+0x741/0xab0 [ 103.934139][ T4295] finish_xmote+0x4df/0xb00 [ 103.938652][ T4295] do_xmote+0x7b6/0x1120 [ 103.942903][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 103.947589][ T4295] do_sync+0x4ab/0xc40 [ 103.951679][ T4295] ? slot_put+0x1e0/0x1e0 [ 103.956034][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 103.961258][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 103.966383][ T4295] ? do_sync+0x4a3/0xc40 [ 103.970749][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 103.975969][ T4295] gfs2_quota_sync+0x32c/0x700 [ 103.980744][ T4295] gfs2_sync_fs+0x48/0xb0 [ 103.985092][ T4295] sync_filesystem+0xe6/0x220 [ 103.989783][ T4295] generic_shutdown_super+0x6b/0x300 [ 103.995086][ T4295] kill_block_super+0x7c/0xe0 [ 103.999800][ T4295] deactivate_locked_super+0x93/0xf0 [ 104.005106][ T4295] cleanup_mnt+0x42d/0x4e0 [ 104.009535][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 104.014817][ T4295] task_work_run+0x125/0x1a0 [ 104.019450][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 104.024833][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 104.030389][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 104.035965][ T4295] do_syscall_64+0x58/0xa0 [ 104.040399][ T4295] ? clear_bhb_loop+0x30/0x80 [ 104.045087][ T4295] ? clear_bhb_loop+0x30/0x80 [ 104.049802][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.055701][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 104.060230][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 104.079929][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.088363][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 104.096348][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 104.104335][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 104.112331][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 104.120326][ T4295] R13: 00007f5f21bf3f90 R14: 0000000000019319 R15: 00007ffc31288c70 [ 104.128334][ T4295] [ 104.132951][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 104.133139][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 104.148176][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 104.155812][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 104.162334][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 104.169943][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.180026][ T4295] Call Trace: [ 104.183313][ T4295] [ 104.186246][ T4295] dump_stack_lvl+0x188/0x250 [ 104.191106][ T4295] ? kobject_uevent_env+0x371/0x890 [ 104.196320][ T4295] ? show_regs_print_info+0x20/0x20 [ 104.201581][ T4295] ? load_image+0x400/0x400 [ 104.206114][ T4295] ? kobject_uevent_env+0x371/0x890 [ 104.211313][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 104.216560][ T4295] gfs2_withdraw+0x1149/0x1490 [ 104.221347][ T4295] ? gfs2_lm+0x240/0x240 [ 104.225594][ T4295] ? __schedule+0x11f7/0x43c0 [ 104.230279][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 104.235481][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 104.240595][ T4295] ? do_promote+0x71a/0xab0 [ 104.245295][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 104.250623][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 104.255676][ T4295] inode_go_lock+0x127/0x470 [ 104.260363][ T4295] do_promote+0x741/0xab0 [ 104.264804][ T4295] finish_xmote+0x4df/0xb00 [ 104.269320][ T4295] do_xmote+0x7b6/0x1120 [ 104.273586][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 104.278310][ T4295] do_sync+0x4ab/0xc40 [ 104.282477][ T4295] ? slot_put+0x1e0/0x1e0 [ 104.286816][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 104.291870][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 104.296903][ T4295] ? do_sync+0x4a3/0xc40 [ 104.301232][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 104.306440][ T4295] gfs2_quota_sync+0x32c/0x700 [ 104.311234][ T4295] gfs2_sync_fs+0x48/0xb0 [ 104.315699][ T4295] sync_filesystem+0xe6/0x220 [ 104.320384][ T4295] generic_shutdown_super+0x6b/0x300 [ 104.325698][ T4295] kill_block_super+0x7c/0xe0 [ 104.330412][ T4295] deactivate_locked_super+0x93/0xf0 [ 104.335701][ T4295] cleanup_mnt+0x42d/0x4e0 [ 104.340119][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 104.345337][ T4295] task_work_run+0x125/0x1a0 [ 104.350034][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 104.355406][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 104.360949][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 104.366404][ T4295] do_syscall_64+0x58/0xa0 [ 104.370815][ T4295] ? clear_bhb_loop+0x30/0x80 [ 104.375489][ T4295] ? clear_bhb_loop+0x30/0x80 [ 104.380166][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.386060][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 104.390472][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 104.410100][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.418514][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 104.426487][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 104.434465][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 104.442442][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 104.450415][ T4295] R13: 00007f5f21bf3f90 R14: 0000000000019319 R15: 00007ffc31288c70 [ 104.458412][ T4295] [ 104.808291][ T4318] loop0: detected capacity change from 0 to 32768 [ 104.862700][ T4318] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 104.871032][ T4318] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 104.886884][ T4318] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 104.896056][ T4270] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 104.903084][ T4270] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 104.932389][ T4270] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 29ms [ 104.942289][ T4270] gfs2: fsid=syz:syz.0: jid=0: Done [ 104.947574][ T4318] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 105.040466][ T4318] gfs2: fsid=syz:syz.0: found 1 quota changes [ 105.054569][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 105.054569][ T4295] inode = 11 2339 [ 105.054569][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 105.074566][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 105.089690][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 105.106037][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 105.113643][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.124021][ T4295] Call Trace: [ 105.127334][ T4295] [ 105.130303][ T4295] dump_stack_lvl+0x188/0x250 [ 105.135039][ T4295] ? show_regs_print_info+0x20/0x20 [ 105.140461][ T4295] ? load_image+0x400/0x400 [ 105.145014][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 105.150253][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 105.155341][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 105.160448][ T4295] gfs2_make_fs_ro+0x440/0x620 [ 105.165382][ T4295] ? __might_sleep+0xf0/0xf0 [ 105.170015][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 105.175013][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 105.179896][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 105.184820][ T4295] gfs2_withdraw+0x610/0x1490 [ 105.189540][ T4295] ? gfs2_lm+0x240/0x240 [ 105.193786][ T4295] ? __schedule+0x11f7/0x43c0 [ 105.198470][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 105.203457][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 105.208657][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 105.213690][ T4295] ? do_promote+0x71a/0xab0 [ 105.218208][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 105.223328][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 105.228360][ T4295] inode_go_lock+0x127/0x470 [ 105.232954][ T4295] do_promote+0x741/0xab0 [ 105.237291][ T4295] finish_xmote+0x4df/0xb00 [ 105.241814][ T4295] do_xmote+0x7b6/0x1120 [ 105.246155][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 105.250858][ T4295] do_sync+0x4ab/0xc40 [ 105.254935][ T4295] ? slot_put+0x1e0/0x1e0 [ 105.259267][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 105.264290][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 105.269586][ T4295] ? do_sync+0x4a3/0xc40 [ 105.273848][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 105.279063][ T4295] gfs2_quota_sync+0x32c/0x700 [ 105.283876][ T4295] gfs2_sync_fs+0x48/0xb0 [ 105.288223][ T4295] sync_filesystem+0xe6/0x220 [ 105.292914][ T4295] generic_shutdown_super+0x6b/0x300 [ 105.298310][ T4295] kill_block_super+0x7c/0xe0 [ 105.303026][ T4295] deactivate_locked_super+0x93/0xf0 [ 105.308341][ T4295] cleanup_mnt+0x42d/0x4e0 [ 105.312779][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 105.318070][ T4295] task_work_run+0x125/0x1a0 [ 105.322708][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 105.328519][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 105.334065][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 105.339525][ T4295] do_syscall_64+0x58/0xa0 [ 105.343934][ T4295] ? clear_bhb_loop+0x30/0x80 [ 105.348610][ T4295] ? clear_bhb_loop+0x30/0x80 [ 105.353287][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.359196][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 105.363630][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.383388][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.391921][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 105.399913][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 105.407904][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 105.415897][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 105.423891][ T4295] R13: 00007f5f21bf3f90 R14: 0000000000019877 R15: 00007ffc31288c70 [ 105.431875][ T4295] [ 105.439807][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 105.448878][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 105.457459][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 105.463871][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 105.471460][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.481542][ T4295] Call Trace: [ 105.484844][ T4295] [ 105.487774][ T4295] dump_stack_lvl+0x188/0x250 [ 105.492464][ T4295] ? kobject_uevent_env+0x371/0x890 [ 105.497666][ T4295] ? show_regs_print_info+0x20/0x20 [ 105.502860][ T4295] ? load_image+0x400/0x400 [ 105.507365][ T4295] ? kobject_uevent_env+0x371/0x890 [ 105.512568][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 105.517680][ T4295] gfs2_withdraw+0x1149/0x1490 [ 105.522466][ T4295] ? gfs2_lm+0x240/0x240 [ 105.526733][ T4295] ? __schedule+0x11f7/0x43c0 [ 105.531470][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 105.536701][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 105.542044][ T4295] ? do_promote+0x71a/0xab0 [ 105.546797][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 105.551949][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 105.557057][ T4295] inode_go_lock+0x127/0x470 [ 105.561668][ T4295] do_promote+0x741/0xab0 [ 105.566017][ T4295] finish_xmote+0x4df/0xb00 [ 105.570552][ T4295] do_xmote+0x7b6/0x1120 [ 105.574831][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 105.579553][ T4295] do_sync+0x4ab/0xc40 [ 105.583725][ T4295] ? slot_put+0x1e0/0x1e0 [ 105.588075][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 105.593147][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 105.598221][ T4295] ? do_sync+0x4a3/0xc40 [ 105.602518][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 105.607847][ T4295] gfs2_quota_sync+0x32c/0x700 [ 105.612746][ T4295] gfs2_sync_fs+0x48/0xb0 [ 105.617090][ T4295] sync_filesystem+0xe6/0x220 [ 105.621996][ T4295] generic_shutdown_super+0x6b/0x300 [ 105.627498][ T4295] kill_block_super+0x7c/0xe0 [ 105.632206][ T4295] deactivate_locked_super+0x93/0xf0 [ 105.637531][ T4295] cleanup_mnt+0x42d/0x4e0 [ 105.641988][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 105.647209][ T4295] task_work_run+0x125/0x1a0 [ 105.651813][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 105.657197][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 105.662760][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 105.668232][ T4295] do_syscall_64+0x58/0xa0 [ 105.672656][ T4295] ? clear_bhb_loop+0x30/0x80 [ 105.677359][ T4295] ? clear_bhb_loop+0x30/0x80 [ 105.682042][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.688051][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 105.692554][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.712245][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.720671][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 105.728648][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 105.736626][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 105.744665][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 105.752651][ T4295] R13: 00007f5f21bf3f90 R14: 0000000000019877 R15: 00007ffc31288c70 [ 105.760757][ T4295] [ 106.106514][ T4321] loop0: detected capacity change from 0 to 32768 [ 106.215278][ T4321] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 106.223587][ T4321] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 106.236125][ T4321] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 106.245761][ T1325] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 106.252834][ T1325] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 106.277522][ T1325] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms [ 106.286228][ T1325] gfs2: fsid=syz:syz.0: jid=0: Done [ 106.292294][ T4321] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 106.380272][ T4321] gfs2: fsid=syz:syz.0: found 1 quota changes [ 106.393554][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 106.393554][ T4295] inode = 11 2339 [ 106.393554][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 106.415420][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 106.430761][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 106.450514][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 106.458127][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.468217][ T4295] Call Trace: [ 106.471527][ T4295] [ 106.474478][ T4295] dump_stack_lvl+0x188/0x250 [ 106.479241][ T4295] ? show_regs_print_info+0x20/0x20 [ 106.484476][ T4295] ? load_image+0x400/0x400 [ 106.489019][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 106.494261][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 106.499343][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 106.504484][ T4295] gfs2_make_fs_ro+0x440/0x620 [ 106.509394][ T4295] ? __might_sleep+0xf0/0xf0 [ 106.514191][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 106.519173][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 106.524045][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 106.528939][ T4295] gfs2_withdraw+0x610/0x1490 [ 106.533652][ T4295] ? gfs2_lm+0x240/0x240 [ 106.537924][ T4295] ? __schedule+0x11f7/0x43c0 [ 106.542609][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 106.547511][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 106.552737][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 106.557784][ T4295] ? do_promote+0x71a/0xab0 [ 106.562298][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 106.567582][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 106.572626][ T4295] inode_go_lock+0x127/0x470 [ 106.577229][ T4295] do_promote+0x741/0xab0 [ 106.581586][ T4295] finish_xmote+0x4df/0xb00 [ 106.586109][ T4295] do_xmote+0x7b6/0x1120 [ 106.590365][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 106.595090][ T4295] do_sync+0x4ab/0xc40 [ 106.599174][ T4295] ? slot_put+0x1e0/0x1e0 [ 106.603527][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 106.608671][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 106.613705][ T4295] ? do_sync+0x4a3/0xc40 [ 106.617972][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 106.623181][ T4295] gfs2_quota_sync+0x32c/0x700 [ 106.628185][ T4295] gfs2_sync_fs+0x48/0xb0 [ 106.632737][ T4295] sync_filesystem+0xe6/0x220 [ 106.637429][ T4295] generic_shutdown_super+0x6b/0x300 [ 106.642725][ T4295] kill_block_super+0x7c/0xe0 [ 106.647410][ T4295] deactivate_locked_super+0x93/0xf0 [ 106.652714][ T4295] cleanup_mnt+0x42d/0x4e0 [ 106.657168][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 106.662405][ T4295] task_work_run+0x125/0x1a0 [ 106.667025][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 106.672489][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 106.678049][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 106.683571][ T4295] do_syscall_64+0x58/0xa0 [ 106.687996][ T4295] ? clear_bhb_loop+0x30/0x80 [ 106.692682][ T4295] ? clear_bhb_loop+0x30/0x80 [ 106.697377][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.703284][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 106.707894][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 106.727532][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.735965][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 106.743947][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 106.751929][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 106.759918][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 106.767891][ T4295] R13: 00007f5f21bf3f90 R14: 0000000000019f6e R15: 00007ffc31288c70 [ 106.776049][ T4295] [ 106.782204][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 106.791165][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 106.799770][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 106.806379][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 106.813974][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.824048][ T4295] Call Trace: [ 106.827336][ T4295] [ 106.830266][ T4295] dump_stack_lvl+0x188/0x250 [ 106.834964][ T4295] ? kobject_uevent_env+0x371/0x890 [ 106.840169][ T4295] ? show_regs_print_info+0x20/0x20 [ 106.845369][ T4295] ? load_image+0x400/0x400 [ 106.849977][ T4295] ? kobject_uevent_env+0x371/0x890 [ 106.855284][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 106.860413][ T4295] gfs2_withdraw+0x1149/0x1490 [ 106.865222][ T4295] ? gfs2_lm+0x240/0x240 [ 106.869607][ T4295] ? __schedule+0x11f7/0x43c0 [ 106.874367][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 106.879591][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 106.884727][ T4295] ? do_promote+0x71a/0xab0 [ 106.889252][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 106.894476][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 106.899614][ T4295] inode_go_lock+0x127/0x470 [ 106.904215][ T4295] do_promote+0x741/0xab0 [ 106.908574][ T4295] finish_xmote+0x4df/0xb00 [ 106.913104][ T4295] do_xmote+0x7b6/0x1120 [ 106.917381][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 106.922071][ T4295] do_sync+0x4ab/0xc40 [ 106.926146][ T4295] ? slot_put+0x1e0/0x1e0 [ 106.930483][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 106.935508][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 106.940630][ T4295] ? do_sync+0x4a3/0xc40 [ 106.944874][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 106.950071][ T4295] gfs2_quota_sync+0x32c/0x700 [ 106.954878][ T4295] gfs2_sync_fs+0x48/0xb0 [ 106.959211][ T4295] sync_filesystem+0xe6/0x220 [ 106.963994][ T4295] generic_shutdown_super+0x6b/0x300 [ 106.969492][ T4295] kill_block_super+0x7c/0xe0 [ 106.974175][ T4295] deactivate_locked_super+0x93/0xf0 [ 106.979554][ T4295] cleanup_mnt+0x42d/0x4e0 [ 106.984013][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 106.989236][ T4295] task_work_run+0x125/0x1a0 [ 106.993846][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 106.999234][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 107.004795][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 107.010263][ T4295] do_syscall_64+0x58/0xa0 [ 107.014690][ T4295] ? clear_bhb_loop+0x30/0x80 [ 107.019488][ T4295] ? clear_bhb_loop+0x30/0x80 [ 107.024176][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.030257][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 107.034680][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.054484][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.063051][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 107.071051][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 107.079349][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 107.087341][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 107.095343][ T4295] R13: 00007f5f21bf3f90 R14: 0000000000019f6e R15: 00007ffc31288c70 [ 107.103443][ T4295] [ 107.446063][ T4324] loop0: detected capacity change from 0 to 32768 [ 107.504564][ T4324] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 107.513557][ T4324] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 107.525866][ T4324] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 107.535608][ T4270] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 107.543903][ T4270] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 107.573432][ T4270] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 29ms [ 107.584299][ T4270] gfs2: fsid=syz:syz.0: jid=0: Done [ 107.589617][ T4324] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 107.677277][ T4324] gfs2: fsid=syz:syz.0: found 1 quota changes [ 107.702065][ T4295] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 107.702065][ T4295] inode = 11 2339 [ 107.702065][ T4295] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 2026/02/28 00:43:11 executed programs: 7 [ 107.721631][ T4295] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 107.738363][ T4295] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 107.754183][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 107.761778][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.771876][ T4295] Call Trace: [ 107.775183][ T4295] [ 107.778141][ T4295] dump_stack_lvl+0x188/0x250 [ 107.782854][ T4295] ? show_regs_print_info+0x20/0x20 [ 107.788115][ T4295] ? load_image+0x400/0x400 [ 107.792662][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 107.797895][ T4295] gfs2_assert_warn_i+0x18f/0x2c0 [ 107.802936][ T4295] gfs2_quota_cleanup+0x4b4/0x6a0 [ 107.807987][ T4295] gfs2_make_fs_ro+0x440/0x620 [ 107.812794][ T4295] ? __might_sleep+0xf0/0xf0 [ 107.817386][ T4295] ? gfs2_dinode_out+0xb00/0xb00 [ 107.822326][ T4295] ? _raw_spin_unlock+0x24/0x40 [ 107.827178][ T4295] ? gfs2_glock_nq+0xcb0/0x1550 [ 107.832126][ T4295] gfs2_withdraw+0x610/0x1490 [ 107.837096][ T4295] ? gfs2_lm+0x240/0x240 [ 107.841364][ T4295] ? __schedule+0x11f7/0x43c0 [ 107.846203][ T4295] ? gfs2_freeze_lock+0x52/0xc0 [ 107.851159][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 107.856389][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 107.861578][ T4295] ? do_promote+0x71a/0xab0 [ 107.866322][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 107.871470][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 107.876908][ T4295] inode_go_lock+0x127/0x470 [ 107.881635][ T4295] do_promote+0x741/0xab0 [ 107.886265][ T4295] finish_xmote+0x4df/0xb00 [ 107.890810][ T4295] do_xmote+0x7b6/0x1120 [ 107.895073][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 107.899942][ T4295] do_sync+0x4ab/0xc40 [ 107.904249][ T4295] ? slot_put+0x1e0/0x1e0 [ 107.908688][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 107.913756][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 107.918790][ T4295] ? do_sync+0x4a3/0xc40 [ 107.923039][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 107.928244][ T4295] gfs2_quota_sync+0x32c/0x700 [ 107.933023][ T4295] gfs2_sync_fs+0x48/0xb0 [ 107.937376][ T4295] sync_filesystem+0xe6/0x220 [ 107.942148][ T4295] generic_shutdown_super+0x6b/0x300 [ 107.947625][ T4295] kill_block_super+0x7c/0xe0 [ 107.952308][ T4295] deactivate_locked_super+0x93/0xf0 [ 107.957612][ T4295] cleanup_mnt+0x42d/0x4e0 [ 107.962172][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 107.967389][ T4295] task_work_run+0x125/0x1a0 [ 107.972005][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 107.977563][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 107.983111][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 107.988575][ T4295] do_syscall_64+0x58/0xa0 [ 107.992993][ T4295] ? clear_bhb_loop+0x30/0x80 [ 107.997703][ T4295] ? clear_bhb_loop+0x30/0x80 [ 108.002393][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.008297][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 108.012735][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.032644][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.041076][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 108.049057][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 108.057120][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 108.065383][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 108.073390][ T4295] R13: 00007f5f21bf3f90 R14: 000000000001a2c2 R15: 00007ffc31288c70 [ 108.081467][ T4295] [ 108.089702][ T4295] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 108.098921][ T4295] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 108.107377][ T4295] gfs2: fsid=syz:syz.0: File system withdrawn [ 108.114252][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 108.121848][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.132549][ T4295] Call Trace: [ 108.135911][ T4295] [ 108.138895][ T4295] dump_stack_lvl+0x188/0x250 [ 108.143624][ T4295] ? kobject_uevent_env+0x371/0x890 [ 108.149018][ T4295] ? show_regs_print_info+0x20/0x20 [ 108.154470][ T4295] ? load_image+0x400/0x400 [ 108.159109][ T4295] ? kobject_uevent_env+0x371/0x890 [ 108.164347][ T4295] ? lockref_put_or_lock+0x6e/0xb0 [ 108.169507][ T4295] gfs2_withdraw+0x1149/0x1490 [ 108.174326][ T4295] ? gfs2_lm+0x240/0x240 [ 108.178599][ T4295] ? __schedule+0x11f7/0x43c0 [ 108.183405][ T4295] ? gfs2_consist_inode_i+0xc0/0xe0 [ 108.188743][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 108.193804][ T4295] ? do_promote+0x71a/0xab0 [ 108.198351][ T4295] ? gfs2_inode_metasync+0xf0/0xf0 [ 108.203571][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 108.208616][ T4295] inode_go_lock+0x127/0x470 [ 108.213378][ T4295] do_promote+0x741/0xab0 [ 108.217751][ T4295] finish_xmote+0x4df/0xb00 [ 108.222296][ T4295] do_xmote+0x7b6/0x1120 [ 108.226678][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 108.231462][ T4295] do_sync+0x4ab/0xc40 [ 108.235557][ T4295] ? slot_put+0x1e0/0x1e0 [ 108.240048][ T4295] ? __lock_acquire+0x7d10/0x7d10 [ 108.245220][ T4295] ? do_raw_spin_lock+0x128/0x2f0 [ 108.250429][ T4295] ? do_sync+0x4a3/0xc40 [ 108.254824][ T4295] ? do_raw_spin_unlock+0x11d/0x230 [ 108.260170][ T4295] gfs2_quota_sync+0x32c/0x700 [ 108.264997][ T4295] gfs2_sync_fs+0x48/0xb0 [ 108.269374][ T4295] sync_filesystem+0xe6/0x220 [ 108.274249][ T4295] generic_shutdown_super+0x6b/0x300 [ 108.279589][ T4295] kill_block_super+0x7c/0xe0 [ 108.284613][ T4295] deactivate_locked_super+0x93/0xf0 [ 108.289944][ T4295] cleanup_mnt+0x42d/0x4e0 [ 108.294407][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 108.299645][ T4295] task_work_run+0x125/0x1a0 [ 108.304374][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 108.309952][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 108.315718][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 108.321322][ T4295] do_syscall_64+0x58/0xa0 [ 108.325777][ T4295] ? clear_bhb_loop+0x30/0x80 [ 108.330548][ T4295] ? clear_bhb_loop+0x30/0x80 [ 108.335269][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.341448][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 108.345998][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.365914][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.374370][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 108.382977][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 108.391058][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 108.399232][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 108.407383][ T4295] R13: 00007f5f21bf3f90 R14: 000000000001a2c2 R15: 00007ffc31288c70 [ 108.415526][ T4295] [ 108.420139][ T4295] ================================================================== [ 108.428643][ T4295] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 108.435449][ T4295] Read of size 8 at addr ffff888069007330 by task syz-executor/4295 [ 108.443457][ T4295] [ 108.445809][ T4295] CPU: 1 PID: 4295 Comm: syz-executor Not tainted syzkaller #0 [ 108.453377][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 108.463640][ T4295] Call Trace: [ 108.467018][ T4295] [ 108.469980][ T4295] dump_stack_lvl+0x188/0x250 [ 108.474733][ T4295] ? show_regs_print_info+0x20/0x20 [ 108.479964][ T4295] ? _printk+0xda/0x130 [ 108.484150][ T4295] ? qd_unlock+0x30/0x2d0 [ 108.488613][ T4295] ? load_image+0x400/0x400 [ 108.493288][ T4295] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 108.498878][ T4295] print_address_description+0x60/0x2d0 [ 108.504499][ T4295] ? qd_unlock+0x30/0x2d0 [ 108.508859][ T4295] kasan_report+0xdf/0x130 [ 108.513317][ T4295] ? qd_unlock+0x30/0x2d0 [ 108.517808][ T4295] kasan_check_range+0x235/0x290 [ 108.522788][ T4295] qd_unlock+0x30/0x2d0 [ 108.527156][ T4295] gfs2_quota_sync+0x5cf/0x700 [ 108.531959][ T4295] gfs2_sync_fs+0x48/0xb0 [ 108.536315][ T4295] sync_filesystem+0xe6/0x220 [ 108.541009][ T4295] generic_shutdown_super+0x6b/0x300 [ 108.546341][ T4295] kill_block_super+0x7c/0xe0 [ 108.551063][ T4295] deactivate_locked_super+0x93/0xf0 [ 108.556454][ T4295] cleanup_mnt+0x42d/0x4e0 [ 108.560899][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 108.566120][ T4295] task_work_run+0x125/0x1a0 [ 108.570786][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 108.576187][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 108.581776][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 108.587267][ T4295] do_syscall_64+0x58/0xa0 [ 108.591713][ T4295] ? clear_bhb_loop+0x30/0x80 [ 108.596413][ T4295] ? clear_bhb_loop+0x30/0x80 [ 108.601117][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.607040][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 108.611490][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.631284][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.639861][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 108.647865][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 108.655867][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 108.664040][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 108.672039][ T4295] R13: 00007f5f21bf3f90 R14: 000000000001a2c2 R15: 00007ffc31288c70 [ 108.680051][ T4295] [ 108.683090][ T4295] [ 108.685472][ T4295] Allocated by task 4324: [ 108.689821][ T4295] __kasan_slab_alloc+0x9c/0xd0 [ 108.694815][ T4295] slab_post_alloc_hook+0x4c/0x380 [ 108.700030][ T4295] kmem_cache_alloc+0x100/0x290 [ 108.704886][ T4295] qd_alloc+0x50/0x260 [ 108.708955][ T4295] gfs2_quota_init+0x74e/0xea0 [ 108.713723][ T4295] gfs2_make_fs_rw+0x414/0x580 [ 108.718510][ T4295] gfs2_fill_super+0x1837/0x1f00 [ 108.723480][ T4295] get_tree_bdev+0x3f1/0x610 [ 108.728256][ T4295] gfs2_get_tree+0x4d/0x1e0 [ 108.732819][ T4295] vfs_get_tree+0x88/0x270 [ 108.737277][ T4295] do_new_mount+0x24a/0xa40 [ 108.742186][ T4295] __se_sys_mount+0x2e3/0x3d0 [ 108.746982][ T4295] do_syscall_64+0x4c/0xa0 [ 108.751429][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.757413][ T4295] [ 108.759773][ T4295] Freed by task 4295: [ 108.763782][ T4295] kasan_set_track+0x4b/0x70 [ 108.768417][ T4295] kasan_set_free_info+0x1f/0x40 [ 108.773388][ T4295] ____kasan_slab_free+0xd5/0x110 [ 108.778451][ T4295] slab_free_freelist_hook+0xea/0x170 [ 108.783857][ T4295] kmem_cache_free+0x8f/0x210 [ 108.788570][ T4295] rcu_core+0x9d2/0x1670 [ 108.792869][ T4295] handle_softirqs+0x339/0x830 [ 108.797663][ T4295] __irq_exit_rcu+0x13b/0x230 [ 108.802360][ T4295] irq_exit_rcu+0x5/0x20 [ 108.806636][ T4295] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 108.812302][ T4295] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 108.818306][ T4295] [ 108.820632][ T4295] Last potentially related work creation: [ 108.826341][ T4295] kasan_save_stack+0x35/0x60 [ 108.831023][ T4295] kasan_record_aux_stack+0xb8/0x100 [ 108.836314][ T4295] call_rcu+0x189/0x950 [ 108.840466][ T4295] gfs2_quota_cleanup+0x43c/0x6a0 [ 108.845488][ T4295] gfs2_make_fs_ro+0x440/0x620 [ 108.850269][ T4295] gfs2_withdraw+0x610/0x1490 [ 108.854962][ T4295] gfs2_inode_refresh+0xb64/0xff0 [ 108.860087][ T4295] inode_go_lock+0x127/0x470 [ 108.864688][ T4295] do_promote+0x741/0xab0 [ 108.869312][ T4295] finish_xmote+0x4df/0xb00 [ 108.874100][ T4295] do_xmote+0x7b6/0x1120 [ 108.878361][ T4295] gfs2_glock_nq+0xc7a/0x1550 [ 108.883058][ T4295] do_sync+0x4ab/0xc40 [ 108.887300][ T4295] gfs2_quota_sync+0x32c/0x700 [ 108.892313][ T4295] gfs2_sync_fs+0x48/0xb0 [ 108.896791][ T4295] sync_filesystem+0xe6/0x220 [ 108.901759][ T4295] generic_shutdown_super+0x6b/0x300 [ 108.907279][ T4295] kill_block_super+0x7c/0xe0 [ 108.912474][ T4295] deactivate_locked_super+0x93/0xf0 [ 108.917848][ T4295] cleanup_mnt+0x42d/0x4e0 [ 108.923081][ T4295] task_work_run+0x125/0x1a0 [ 108.927768][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 108.933496][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 108.939233][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 108.944801][ T4295] do_syscall_64+0x58/0xa0 [ 108.949430][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.955347][ T4295] [ 108.957837][ T4295] The buggy address belongs to the object at ffff8880690072a0 [ 108.957837][ T4295] which belongs to the cache gfs2_quotad of size 272 [ 108.972173][ T4295] The buggy address is located 144 bytes inside of [ 108.972173][ T4295] 272-byte region [ffff8880690072a0, ffff8880690073b0) [ 108.985630][ T4295] The buggy address belongs to the page: [ 108.991298][ T4295] page:ffffea0001a401c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x69007 [ 109.001474][ T4295] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 109.009181][ T4295] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801d7c8c80 [ 109.017888][ T4295] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 109.026733][ T4295] page dumped because: kasan: bad access detected [ 109.033164][ T4295] page_owner tracks the page as allocated [ 109.039003][ T4295] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4315, ts 103713008904, free_ts 90833753550 [ 109.058575][ T4295] get_page_from_freelist+0x1bbd/0x1ca0 [ 109.064232][ T4295] __alloc_pages+0x1ee/0x480 [ 109.068860][ T4295] new_slab+0xc0/0x4b0 [ 109.073041][ T4295] ___slab_alloc+0x80a/0xdd0 [ 109.077638][ T4295] kmem_cache_alloc+0x195/0x290 [ 109.082572][ T4295] qd_alloc+0x50/0x260 [ 109.086644][ T4295] gfs2_quota_init+0x74e/0xea0 [ 109.091456][ T4295] gfs2_make_fs_rw+0x414/0x580 [ 109.096305][ T4295] gfs2_fill_super+0x1837/0x1f00 [ 109.101301][ T4295] get_tree_bdev+0x3f1/0x610 [ 109.106034][ T4295] gfs2_get_tree+0x4d/0x1e0 [ 109.110553][ T4295] vfs_get_tree+0x88/0x270 [ 109.115236][ T4295] do_new_mount+0x24a/0xa40 [ 109.119838][ T4295] __se_sys_mount+0x2e3/0x3d0 [ 109.125054][ T4295] do_syscall_64+0x4c/0xa0 [ 109.129827][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.135757][ T4295] page last free stack trace: [ 109.140550][ T4295] free_unref_page_prepare+0x637/0x6c0 [ 109.146381][ T4295] free_unref_page_list+0x119/0x820 [ 109.151603][ T4295] release_pages+0x186c/0x1be0 [ 109.156382][ T4295] tlb_finish_mmu+0x176/0x300 [ 109.161146][ T4295] unmap_region+0x344/0x3b0 [ 109.165656][ T4295] __do_munmap+0x9f8/0xdf0 [ 109.170201][ T4295] __vm_munmap+0x140/0x240 [ 109.174654][ T4295] __x64_sys_munmap+0x67/0x70 [ 109.179334][ T4295] do_syscall_64+0x4c/0xa0 [ 109.183753][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.189652][ T4295] [ 109.191977][ T4295] Memory state around the buggy address: [ 109.197693][ T4295] ffff888069007200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 109.205756][ T4295] ffff888069007280: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb [ 109.213916][ T4295] >ffff888069007300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.222081][ T4295] ^ [ 109.227809][ T4295] ffff888069007380: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 109.235884][ T4295] ffff888069007400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 109.243960][ T4295] ================================================================== [ 109.252041][ T4295] Disabling lock debugging due to kernel taint [ 109.259343][ T4295] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.266591][ T4295] CPU: 0 PID: 4295 Comm: syz-executor Tainted: G B syzkaller #0 [ 109.275811][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 109.285976][ T4295] Call Trace: [ 109.289279][ T4295] [ 109.292228][ T4295] dump_stack_lvl+0x188/0x250 [ 109.296943][ T4295] ? show_regs_print_info+0x20/0x20 [ 109.302170][ T4295] ? load_image+0x400/0x400 [ 109.306710][ T4295] panic+0x2e5/0x810 [ 109.310627][ T4295] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 109.316803][ T4295] ? bpf_jit_dump+0xd0/0xd0 [ 109.321332][ T4295] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 109.327338][ T4295] ? _raw_spin_unlock+0x40/0x40 [ 109.332215][ T4295] ? qd_unlock+0x30/0x2d0 [ 109.336591][ T4295] check_panic_on_warn+0x80/0xa0 [ 109.341553][ T4295] ? qd_unlock+0x30/0x2d0 [ 109.345908][ T4295] end_report+0x6d/0xf0 [ 109.350096][ T4295] kasan_report+0x102/0x130 [ 109.354632][ T4295] ? qd_unlock+0x30/0x2d0 [ 109.358996][ T4295] kasan_check_range+0x235/0x290 [ 109.363958][ T4295] qd_unlock+0x30/0x2d0 [ 109.368153][ T4295] gfs2_quota_sync+0x5cf/0x700 [ 109.373065][ T4295] gfs2_sync_fs+0x48/0xb0 [ 109.377424][ T4295] sync_filesystem+0xe6/0x220 [ 109.382142][ T4295] generic_shutdown_super+0x6b/0x300 [ 109.387464][ T4295] kill_block_super+0x7c/0xe0 [ 109.392673][ T4295] deactivate_locked_super+0x93/0xf0 [ 109.398166][ T4295] cleanup_mnt+0x42d/0x4e0 [ 109.402834][ T4295] ? lockdep_hardirqs_on+0x94/0x140 [ 109.408155][ T4295] task_work_run+0x125/0x1a0 [ 109.412962][ T4295] exit_to_user_mode_loop+0x10f/0x130 [ 109.418639][ T4295] exit_to_user_mode_prepare+0xee/0x180 [ 109.424219][ T4295] syscall_exit_to_user_mode+0x16/0x40 [ 109.429815][ T4295] do_syscall_64+0x58/0xa0 [ 109.434266][ T4295] ? clear_bhb_loop+0x30/0x80 [ 109.439003][ T4295] ? clear_bhb_loop+0x30/0x80 [ 109.443711][ T4295] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.450176][ T4295] RIP: 0033:0x7f5f21b5f9d7 [ 109.454639][ T4295] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 109.474581][ T4295] RSP: 002b:00007ffc31287ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 109.483125][ T4295] RAX: 0000000000000000 RBX: 00007f5f21bf3f90 RCX: 00007f5f21b5f9d7 [ 109.491436][ T4295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc31287ba0 [ 109.499439][ T4295] RBP: 00007ffc31287ba0 R08: 00007ffc31288ba0 R09: 00000000ffffffff [ 109.507738][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc31288c30 [ 109.515859][ T4295] R13: 00007f5f21bf3f90 R14: 000000000001a2c2 R15: 00007ffc31288c70 [ 109.523876][ T4295] [ 109.527016][ T4295] Kernel Offset: disabled [ 109.531447][ T4295] Rebooting in 86400 seconds..