Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts.
2026/06/22 09:46:06 parsed 1 programs
2026/06/22 09:46:06 serving rpc on tcp://35461
[ 52.317552][ T4199] cgroup: Unknown subsys name 'net'
[ 52.459262][ T4199] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 53.695529][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 56.137529][ T781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 56.151048][ T781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 56.168675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 56.184448][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 56.192281][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 56.200500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 57.039136][ T4276] chnl_net:caif_netlink_parms(): no params data found
[ 57.077660][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.085361][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.093308][ T4276] device bridge_slave_0 entered promiscuous mode
[ 57.102413][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.109936][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.117800][ T4276] device bridge_slave_1 entered promiscuous mode
[ 57.136432][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 57.147118][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 57.166558][ T4276] team0: Port device team_slave_0 added
[ 57.173515][ T4276] team0: Port device team_slave_1 added
[ 57.188715][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 57.195914][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 57.222109][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 57.236038][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 57.243021][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 57.269191][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 57.295865][ T4276] device hsr_slave_0 entered promiscuous mode
[ 57.302646][ T4276] device hsr_slave_1 entered promiscuous mode
[ 57.382469][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 57.392861][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 57.418250][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 57.427535][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 57.491767][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[ 57.520405][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 57.529747][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 57.540167][ T4276] 8021q: adding VLAN 0 to HW filter on device team0
[ 57.567165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 57.576762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 57.585803][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.593092][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 57.602056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 57.625020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 57.633917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 57.642453][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.649558][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 57.657479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 57.666367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 57.675226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 57.684298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 57.692595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 57.701234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 57.709795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 57.717999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 57.726786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 57.749914][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 57.840918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 57.848651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 57.877183][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 57.892803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 57.929115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 57.938125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 57.946468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 57.970701][ T4276] device veth0_vlan entered promiscuous mode
[ 57.981805][ T4276] device veth1_vlan entered promiscuous mode
[ 57.999758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 58.008260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 58.017217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 58.029025][ T4276] device veth0_macvtap entered promiscuous mode
[ 58.039433][ T4276] device veth1_macvtap entered promiscuous mode
[ 58.066833][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 58.074640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 58.082768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 58.093018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 58.106368][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 58.119204][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.128474][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.137888][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.146886][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 58.157181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 58.165800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/06/22 09:46:14 executed programs: 0
[ 59.074704][ T4299] chnl_net:caif_netlink_parms(): no params data found
[ 59.130858][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.138189][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state
[ 59.146560][ T4299] device bridge_slave_0 entered promiscuous mode
[ 59.156041][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.163158][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state
[ 59.171721][ T4299] device bridge_slave_1 entered promiscuous mode
[ 59.195465][ T4299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 59.207019][ T4299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 59.234333][ T4299] team0: Port device team_slave_0 added
[ 59.242089][ T4299] team0: Port device team_slave_1 added
[ 59.264981][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 59.271949][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.303516][ T4299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 59.323216][ T4299] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 59.330233][ T4299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.357243][ T4299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 59.389743][ T4299] device hsr_slave_0 entered promiscuous mode
[ 59.396887][ T4299] device hsr_slave_1 entered promiscuous mode
[ 59.403482][ T4299] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 59.411406][ T4299] Cannot create hsr debugfs directory
[ 59.496989][ T4299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 60.964433][ T4269] Bluetooth: hci0: command 0x0409 tx timeout
[ 62.159628][ T4299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 63.043845][ T4271] Bluetooth: hci0: command 0x041b tx timeout
[ 63.360379][ T4299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 63.429371][ T4299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 63.602459][ T4299] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 63.613541][ T4299] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 63.622939][ T4299] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 63.641575][ T4299] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 63.689117][ T4299] 8021q: adding VLAN 0 to HW filter on device bond0
[ 63.701028][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 63.708960][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 63.719902][ T4299] 8021q: adding VLAN 0 to HW filter on device team0
[ 63.733482][ T144] device hsr_slave_0 left promiscuous mode
[ 63.739938][ T144] device hsr_slave_1 left promiscuous mode
[ 63.746888][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 63.754587][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 63.763118][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 63.771896][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 63.779548][ T144] device bridge_slave_1 left promiscuous mode
[ 63.786513][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 63.799725][ T144] device bridge_slave_0 left promiscuous mode
[ 63.806000][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 63.821728][ T144] device veth1_macvtap left promiscuous mode
[ 63.828547][ T144] device veth0_macvtap left promiscuous mode
[ 63.834727][ T144] device veth1_vlan left promiscuous mode
[ 63.840639][ T144] device veth0_vlan left promiscuous mode
[ 63.966086][ T144] team0 (unregistering): Port device team_slave_1 removed
[ 63.977751][ T144] team0 (unregistering): Port device team_slave_0 removed
[ 63.994775][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 64.007930][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 64.053474][ T144] bond0 (unregistering): Released all slaves
[ 64.141203][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 64.149982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 64.158445][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 64.165523][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 64.198674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 64.206853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 64.216573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 64.225254][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 64.232298][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 64.240801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 64.249588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 64.259025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 64.267906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 64.276362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 64.285569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 64.294158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 64.302940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 64.311373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 64.337047][ T4299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 64.351437][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 64.359823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 64.368305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 64.453556][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 64.462032][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 64.473537][ T4299] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 64.499001][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 64.508368][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 64.529107][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 64.537487][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 64.547177][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 64.555258][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 64.565470][ T4299] device veth0_vlan entered promiscuous mode
[ 64.578496][ T4299] device veth1_vlan entered promiscuous mode
[ 64.599635][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 64.607919][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 64.617706][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 64.626537][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 64.637456][ T4299] device veth0_macvtap entered promiscuous mode
[ 64.647742][ T4299] device veth1_macvtap entered promiscuous mode
[ 64.664140][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 64.671486][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 64.680624][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 64.688913][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 64.698005][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 64.710595][ T4299] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 64.719136][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 64.727847][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 64.739700][ T4299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 64.748988][ T4299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 64.759505][ T4299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 64.768537][ T4299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 64.831101][ T781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 64.842335][ T781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 64.853543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/06/22 09:46:20 executed programs: 2
[ 64.874614][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 64.882575][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 64.890911][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 65.133756][ T4269] Bluetooth: hci0: command 0x040f tx timeout
[ 65.219649][ T4318] loop0: detected capacity change from 0 to 32768
[ 65.259349][ T4318] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 65.267839][ T4318] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 65.296572][ T4318] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 65.308415][ T4269] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 65.315533][ T4269] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 65.347424][ T4269] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms
[ 65.357845][ T4269] gfs2: fsid=syz:syz.0: jid=0: Done
[ 65.363558][ T4318] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 65.469072][ T4318] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 65.508176][ T4299] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 65.508176][ T4299] inode = 11 2339
[ 65.508176][ T4299] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414
[ 65.529404][ T4299] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 65.546420][ T4299] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 65.560654][ T4299] CPU: 0 PID: 4299 Comm: syz-executor Not tainted syzkaller #0
[ 65.568213][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 65.578372][ T4299] Call Trace:
[ 65.581653][ T4299]
[ 65.584578][ T4299] dump_stack_lvl+0x188/0x250
[ 65.589269][ T4299] ? show_regs_print_info+0x20/0x20
[ 65.594467][ T4299] ? load_image+0x410/0x410
[ 65.598985][ T4299] ? do_raw_spin_unlock+0x11d/0x230
[ 65.604250][ T4299] gfs2_assert_warn_i+0x187/0x2c0
[ 65.609280][ T4299] gfs2_quota_cleanup+0x48c/0x670
[ 65.614315][ T4299] gfs2_make_fs_ro+0x440/0x620
[ 65.619092][ T4299] ? __might_sleep+0xf0/0xf0
[ 65.623696][ T4299] ? gfs2_dinode_out+0xb00/0xb00
[ 65.628645][ T4299] ? _raw_spin_unlock+0x24/0x40
[ 65.633503][ T4299] ? gfs2_glock_nq+0xcaa/0x1510
[ 65.638382][ T4299] gfs2_withdraw+0x660/0x14e0
[ 65.643070][ T4299] ? gfs2_meta_new+0x160/0x160
[ 65.647836][ T4299] ? gfs2_lm+0x240/0x240
[ 65.652089][ T4299] ? gfs2_freeze_lock+0x52/0xc0
[ 65.656945][ T4299] ? gfs2_consist_inode_i+0xc0/0xe0
[ 65.662153][ T4299] gfs2_inode_refresh+0xb2d/0x11a0
[ 65.667265][ T4299] ? gfs2_inode_metasync+0xf0/0xf0
[ 65.672362][ T4299] inode_go_lock+0x127/0x450
[ 65.676931][ T4299] do_promote+0x75b/0xb20
[ 65.681244][ T4299] finish_xmote+0x4c2/0xaf0
[ 65.685729][ T4299] do_xmote+0x752/0x10a0
[ 65.689957][ T4299] gfs2_glock_nq+0xc6b/0x1510
[ 65.694617][ T4299] do_sync+0x49c/0xba0
[ 65.698666][ T4299] ? slot_put+0x1e0/0x1e0
[ 65.702978][ T4299] ? do_sync+0x494/0xba0
[ 65.707234][ T4299] ? do_raw_spin_unlock+0x11d/0x230
[ 65.712412][ T4299] gfs2_quota_sync+0x355/0x780
[ 65.717164][ T4299] gfs2_sync_fs+0x48/0xb0
[ 65.721487][ T4299] sync_filesystem+0xe6/0x220
[ 65.726155][ T4299] generic_shutdown_super+0x6b/0x300
[ 65.731435][ T4299] kill_block_super+0x7c/0xe0
[ 65.736109][ T4299] deactivate_locked_super+0x93/0xf0
[ 65.741383][ T4299] cleanup_mnt+0x426/0x4d0
[ 65.745785][ T4299] task_work_run+0x125/0x1a0
[ 65.750358][ T4299] exit_to_user_mode_loop+0x10f/0x130
[ 65.755709][ T4299] exit_to_user_mode_prepare+0xee/0x180
[ 65.761235][ T4299] syscall_exit_to_user_mode+0x16/0x40
[ 65.766682][ T4299] do_syscall_64+0x58/0xa0
[ 65.771084][ T4299] ? clear_bhb_loop+0x30/0x80
[ 65.775740][ T4299] ? clear_bhb_loop+0x30/0x80
[ 65.780394][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 65.786280][ T4299] RIP: 0033:0x7f3a77e19097
[ 65.790683][ T4299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 65.810278][ T4299] RSP: 002b:00007ffd1f68a4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 65.818678][ T4299] RAX: 0000000000000000 RBX: 00007f3a77ead2ca RCX: 00007f3a77e19097
[ 65.826635][ T4299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f68a5a0
[ 65.834595][ T4299] RBP: 00007ffd1f68a5a0 R08: 00007ffd1f68b5a0 R09: 00000000ffffffff
[ 65.842552][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1f68b630
[ 65.850518][ T4299] R13: 00007f3a77ead2ca R14: 000000000000fd9d R15: 00007ffd1f68b670
[ 65.858485][ T4299]
[ 65.868544][ T4299] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 65.877533][ T4299] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 65.885187][ T4299] gfs2: fsid=syz:syz.0: File system withdrawn
[ 65.891276][ T4299] CPU: 0 PID: 4299 Comm: syz-executor Not tainted syzkaller #0
[ 65.898829][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 65.908891][ T4299] Call Trace:
[ 65.912174][ T4299]
[ 65.915097][ T4299] dump_stack_lvl+0x188/0x250
[ 65.919763][ T4299] ? show_regs_print_info+0x20/0x20
[ 65.924940][ T4299] ? load_image+0x410/0x410
[ 65.929423][ T4299] ? lockref_put_or_lock+0x6e/0xb0
[ 65.934517][ T4299] gfs2_withdraw+0xb9a/0x14e0
[ 65.939180][ T4299] ? gfs2_meta_new+0x160/0x160
[ 65.943929][ T4299] ? gfs2_lm+0x240/0x240
[ 65.948179][ T4299] ? gfs2_consist_inode_i+0xc0/0xe0
[ 65.953367][ T4299] gfs2_inode_refresh+0xb2d/0x11a0
[ 65.958470][ T4299] ? gfs2_inode_metasync+0xf0/0xf0
[ 65.963582][ T4299] inode_go_lock+0x127/0x450
[ 65.968184][ T4299] do_promote+0x75b/0xb20
[ 65.972496][ T4299] finish_xmote+0x4c2/0xaf0
[ 65.976992][ T4299] do_xmote+0x752/0x10a0
[ 65.981213][ T4299] gfs2_glock_nq+0xc6b/0x1510
[ 65.985871][ T4299] do_sync+0x49c/0xba0
[ 65.989921][ T4299] ? slot_put+0x1e0/0x1e0
[ 65.994246][ T4299] ? do_sync+0x494/0xba0
[ 65.998496][ T4299] ? do_raw_spin_unlock+0x11d/0x230
[ 66.003680][ T4299] gfs2_quota_sync+0x355/0x780
[ 66.008432][ T4299] gfs2_sync_fs+0x48/0xb0
[ 66.012740][ T4299] sync_filesystem+0xe6/0x220
[ 66.017577][ T4299] generic_shutdown_super+0x6b/0x300
[ 66.022857][ T4299] kill_block_super+0x7c/0xe0
[ 66.027519][ T4299] deactivate_locked_super+0x93/0xf0
[ 66.032787][ T4299] cleanup_mnt+0x426/0x4d0
[ 66.037211][ T4299] task_work_run+0x125/0x1a0
[ 66.041787][ T4299] exit_to_user_mode_loop+0x10f/0x130
[ 66.047142][ T4299] exit_to_user_mode_prepare+0xee/0x180
[ 66.052674][ T4299] syscall_exit_to_user_mode+0x16/0x40
[ 66.058112][ T4299] do_syscall_64+0x58/0xa0
[ 66.062501][ T4299] ? clear_bhb_loop+0x30/0x80
[ 66.067154][ T4299] ? clear_bhb_loop+0x30/0x80
[ 66.071807][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 66.077681][ T4299] RIP: 0033:0x7f3a77e19097
[ 66.082080][ T4299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 66.101666][ T4299] RSP: 002b:00007ffd1f68a4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 66.110064][ T4299] RAX: 0000000000000000 RBX: 00007f3a77ead2ca RCX: 00007f3a77e19097
[ 66.118038][ T4299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f68a5a0
[ 66.125985][ T4299] RBP: 00007ffd1f68a5a0 R08: 00007ffd1f68b5a0 R09: 00000000ffffffff
[ 66.133932][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1f68b630
[ 66.141878][ T4299] R13: 00007f3a77ead2ca R14: 000000000000fd9d R15: 00007ffd1f68b670
[ 66.149838][ T4299]
[ 66.452199][ T4322] loop0: detected capacity change from 0 to 32768
[ 66.506192][ T4322] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 66.515106][ T4322] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 66.527812][ T4322] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 66.537216][ T4313] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 66.544620][ T4313] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 66.566114][ T4313] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 21ms
[ 66.575981][ T4313] gfs2: fsid=syz:syz.0: jid=0: Done
[ 66.581265][ T4322] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 66.647444][ T4322] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 66.661769][ T4299] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 66.661769][ T4299] inode = 11 2339
[ 66.661769][ T4299] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414
[ 66.680747][ T4299] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 66.694680][ T4299] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 66.709821][ T4299] CPU: 0 PID: 4299 Comm: syz-executor Not tainted syzkaller #0
[ 66.717393][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 66.727436][ T4299] Call Trace:
[ 66.730704][ T4299]
[ 66.733617][ T4299] dump_stack_lvl+0x188/0x250
[ 66.738290][ T4299] ? show_regs_print_info+0x20/0x20
[ 66.743466][ T4299] ? load_image+0x410/0x410
[ 66.747977][ T4299] ? do_raw_spin_unlock+0x11d/0x230
[ 66.753160][ T4299] gfs2_assert_warn_i+0x187/0x2c0
[ 66.758188][ T4299] gfs2_quota_cleanup+0x48c/0x670
[ 66.763211][ T4299] gfs2_make_fs_ro+0x440/0x620
[ 66.767958][ T4299] ? __might_sleep+0xf0/0xf0
[ 66.772531][ T4299] ? gfs2_dinode_out+0xb00/0xb00
[ 66.777450][ T4299] ? _raw_spin_unlock+0x24/0x40
[ 66.782288][ T4299] ? gfs2_glock_nq+0xcaa/0x1510
[ 66.787123][ T4299] gfs2_withdraw+0x660/0x14e0
[ 66.791779][ T4299] ? gfs2_meta_new+0x160/0x160
[ 66.796517][ T4299] ? gfs2_lm+0x240/0x240
[ 66.800737][ T4299] ? gfs2_freeze_lock+0x52/0xc0
[ 66.805567][ T4299] ? gfs2_consist_inode_i+0xc0/0xe0
[ 66.810750][ T4299] gfs2_inode_refresh+0xb2d/0x11a0
[ 66.815842][ T4299] ? gfs2_inode_metasync+0xf0/0xf0
[ 66.820936][ T4299] inode_go_lock+0x127/0x450
[ 66.825518][ T4299] do_promote+0x75b/0xb20
[ 66.829856][ T4299] finish_xmote+0x4c2/0xaf0
[ 66.834366][ T4299] do_xmote+0x752/0x10a0
[ 66.838606][ T4299] gfs2_glock_nq+0xc6b/0x1510
[ 66.843288][ T4299] do_sync+0x49c/0xba0
[ 66.847362][ T4299] ? slot_put+0x1e0/0x1e0
[ 66.851691][ T4299] ? do_sync+0x494/0xba0
[ 66.855929][ T4299] ? do_raw_spin_unlock+0x11d/0x230
[ 66.861116][ T4299] gfs2_quota_sync+0x355/0x780
[ 66.865870][ T4299] gfs2_sync_fs+0x48/0xb0
[ 66.870182][ T4299] sync_filesystem+0xe6/0x220
[ 66.874839][ T4299] generic_shutdown_super+0x6b/0x300
[ 66.880103][ T4299] kill_block_super+0x7c/0xe0
[ 66.884758][ T4299] deactivate_locked_super+0x93/0xf0
[ 66.890023][ T4299] cleanup_mnt+0x426/0x4d0
[ 66.894423][ T4299] task_work_run+0x125/0x1a0
[ 66.899001][ T4299] exit_to_user_mode_loop+0x10f/0x130
[ 66.904362][ T4299] exit_to_user_mode_prepare+0xee/0x180
[ 66.909896][ T4299] syscall_exit_to_user_mode+0x16/0x40
[ 66.915338][ T4299] do_syscall_64+0x58/0xa0
[ 66.919871][ T4299] ? clear_bhb_loop+0x30/0x80
[ 66.924546][ T4299] ? clear_bhb_loop+0x30/0x80
[ 66.929227][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 66.935120][ T4299] RIP: 0033:0x7f3a77e19097
[ 66.939520][ T4299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 66.959104][ T4299] RSP: 002b:00007ffd1f68a4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 66.967498][ T4299] RAX: 0000000000000000 RBX: 00007f3a77ead2ca RCX: 00007f3a77e19097
[ 66.975470][ T4299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f68a5a0
[ 66.983422][ T4299] RBP: 00007ffd1f68a5a0 R08: 00007ffd1f68b5a0 R09: 00000000ffffffff
[ 66.991375][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1f68b630
[ 66.999327][ T4299] R13: 00007f3a77ead2ca R14: 00000000000102d6 R15: 00007ffd1f68b670
[ 67.007289][ T4299]
[ 67.012474][ T4299] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 67.021500][ T4299] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 67.028581][ T4299] gfs2: fsid=syz:syz.0: File system withdrawn
[ 67.034951][ T4299] CPU: 0 PID: 4299 Comm: syz-executor Not tainted syzkaller #0
[ 67.042501][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 67.052539][ T4299] Call Trace:
[ 67.055803][ T4299]
[ 67.058714][ T4299] dump_stack_lvl+0x188/0x250
[ 67.063374][ T4299] ? show_regs_print_info+0x20/0x20
[ 67.068549][ T4299] ? load_image+0x410/0x410
[ 67.073030][ T4299] ? lockref_put_or_lock+0x6e/0xb0
[ 67.078125][ T4299] gfs2_withdraw+0xb9a/0x14e0
[ 67.082784][ T4299] ? gfs2_meta_new+0x160/0x160
[ 67.087525][ T4299] ? gfs2_lm+0x240/0x240
[ 67.091750][ T4299] ? gfs2_consist_inode_i+0xc0/0xe0
[ 67.096933][ T4299] gfs2_inode_refresh+0xb2d/0x11a0
[ 67.102035][ T4299] ? gfs2_inode_metasync+0xf0/0xf0
[ 67.107128][ T4299] inode_go_lock+0x127/0x450
[ 67.111696][ T4299] do_promote+0x75b/0xb20
[ 67.116011][ T4299] finish_xmote+0x4c2/0xaf0
[ 67.120493][ T4299] do_xmote+0x752/0x10a0
[ 67.124715][ T4299] gfs2_glock_nq+0xc6b/0x1510
[ 67.129376][ T4299] do_sync+0x49c/0xba0
[ 67.133450][ T4299] ? slot_put+0x1e0/0x1e0
[ 67.137790][ T4299] ? do_sync+0x494/0xba0
[ 67.142019][ T4299] ? do_raw_spin_unlock+0x11d/0x230
[ 67.147200][ T4299] gfs2_quota_sync+0x355/0x780
[ 67.151955][ T4299] gfs2_sync_fs+0x48/0xb0
[ 67.156261][ T4299] sync_filesystem+0xe6/0x220
[ 67.160918][ T4299] generic_shutdown_super+0x6b/0x300
[ 67.166187][ T4299] kill_block_super+0x7c/0xe0
[ 67.170846][ T4299] deactivate_locked_super+0x93/0xf0
[ 67.176109][ T4299] cleanup_mnt+0x426/0x4d0
[ 67.180507][ T4299] task_work_run+0x125/0x1a0
[ 67.185080][ T4299] exit_to_user_mode_loop+0x10f/0x130
[ 67.190433][ T4299] exit_to_user_mode_prepare+0xee/0x180
[ 67.195955][ T4299] syscall_exit_to_user_mode+0x16/0x40
[ 67.201396][ T4299] do_syscall_64+0x58/0xa0
[ 67.205788][ T4299] ? clear_bhb_loop+0x30/0x80
[ 67.210440][ T4299] ? clear_bhb_loop+0x30/0x80
[ 67.215096][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 67.220969][ T4299] RIP: 0033:0x7f3a77e19097
[ 67.225365][ T4299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 67.243786][ T4270] Bluetooth: hci0: command 0x0419 tx timeout
[ 67.244950][ T4299] RSP: 002b:00007ffd1f68a4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 67.259325][ T4299] RAX: 0000000000000000 RBX: 00007f3a77ead2ca RCX: 00007f3a77e19097
[ 67.267279][ T4299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f68a5a0
[ 67.275231][ T4299] RBP: 00007ffd1f68a5a0 R08: 00007ffd1f68b5a0 R09: 00000000ffffffff
[ 67.283181][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1f68b630
[ 67.291164][ T4299] R13: 00007f3a77ead2ca R14: 00000000000102d6 R15: 00007ffd1f68b670
[ 67.299140][ T4299]
[ 67.573991][ T4325] loop0: detected capacity change from 0 to 32768
[ 67.639853][ T4325] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 67.648400][ T4325] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 67.660506][ T4325] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 67.669788][ T4270] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 67.676724][ T4270] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 67.702788][ T4270] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 26ms
[ 67.713871][ T4270] gfs2: fsid=syz:syz.0: jid=0: Done
[ 67.719116][ T4325] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 67.786602][ T4325] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 67.800647][ T4299] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 67.800647][ T4299] inode = 11 2339
[ 67.800647][ T4299] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 414
[ 67.820783][ T4299] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 67.834758][ T4299] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 67.849495][ T4299] CPU: 1 PID: 4299 Comm: syz-executor Not tainted syzkaller #0
[ 67.857083][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 67.867123][ T4299] Call Trace:
[ 67.870385][ T4299]
[ 67.873296][ T4299] dump_stack_lvl+0x188/0x250
[ 67.877959][ T4299] ? show_regs_print_info+0x20/0x20
[ 67.883141][ T4299] ? load_image+0x410/0x410
[ 67.887633][ T4299] ? do_raw_spin_unlock+0x11d/0x230
[ 67.892820][ T4299] gfs2_assert_warn_i+0x187/0x2c0
[ 67.897829][ T4299] gfs2_quota_cleanup+0x48c/0x670
[ 67.902843][ T4299] gfs2_make_fs_ro+0x440/0x620
[ 67.907588][ T4299] ? __might_sleep+0xf0/0xf0
[ 67.912161][ T4299] ? gfs2_dinode_out+0xb00/0xb00
[ 67.917080][ T4299] ? _raw_spin_unlock+0x24/0x40
[ 67.921910][ T4299] ? gfs2_glock_nq+0xcaa/0x1510
[ 67.926763][ T4299] gfs2_withdraw+0x660/0x14e0
[ 67.931462][ T4299] ? gfs2_meta_new+0x160/0x160
[ 67.936212][ T4299] ? gfs2_lm+0x240/0x240
[ 67.940437][ T4299] ? gfs2_freeze_lock+0x52/0xc0
[ 67.945272][ T4299] ? gfs2_consist_inode_i+0xc0/0xe0
[ 67.950459][ T4299] gfs2_inode_refresh+0xb2d/0x11a0
[ 67.955558][ T4299] ? gfs2_inode_metasync+0xf0/0xf0
[ 67.960657][ T4299] inode_go_lock+0x127/0x450
[ 67.965230][ T4299] do_promote+0x75b/0xb20
[ 67.969547][ T4299] finish_xmote+0x4c2/0xaf0
[ 67.974037][ T4299] do_xmote+0x752/0x10a0
[ 67.978295][ T4299] gfs2_glock_nq+0xc6b/0x1510
[ 67.982958][ T4299] do_sync+0x49c/0xba0
[ 67.987014][ T4299] ? slot_put+0x1e0/0x1e0
[ 67.991329][ T4299] ? do_sync+0x494/0xba0
[ 67.995551][ T4299] ? do_raw_spin_unlock+0x11d/0x230
[ 68.000730][ T4299] gfs2_quota_sync+0x355/0x780
[ 68.005479][ T4299] gfs2_sync_fs+0x48/0xb0
[ 68.009788][ T4299] sync_filesystem+0xe6/0x220
[ 68.014443][ T4299] generic_shutdown_super+0x6b/0x300
[ 68.019712][ T4299] kill_block_super+0x7c/0xe0
[ 68.024375][ T4299] deactivate_locked_super+0x93/0xf0
[ 68.029640][ T4299] cleanup_mnt+0x426/0x4d0
[ 68.034041][ T4299] task_work_run+0x125/0x1a0
[ 68.038611][ T4299] exit_to_user_mode_loop+0x10f/0x130
[ 68.043959][ T4299] exit_to_user_mode_prepare+0xee/0x180
[ 68.049484][ T4299] syscall_exit_to_user_mode+0x16/0x40
[ 68.054923][ T4299] do_syscall_64+0x58/0xa0
[ 68.059317][ T4299] ? clear_bhb_loop+0x30/0x80
[ 68.063976][ T4299] ? clear_bhb_loop+0x30/0x80
[ 68.068631][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.074510][ T4299] RIP: 0033:0x7f3a77e19097
[ 68.078908][ T4299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 68.098492][ T4299] RSP: 002b:00007ffd1f68a4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 68.106886][ T4299] RAX: 0000000000000000 RBX: 00007f3a77ead2ca RCX: 00007f3a77e19097
[ 68.114865][ T4299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f68a5a0
[ 68.122815][ T4299] RBP: 00007ffd1f68a5a0 R08: 00007ffd1f68b5a0 R09: 00000000ffffffff
[ 68.130766][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1f68b630
[ 68.138717][ T4299] R13: 00007f3a77ead2ca R14: 000000000001073d R15: 00007ffd1f68b670
[ 68.146681][ T4299]
[ 68.153178][ T4299] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 68.162323][ T4299] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 68.169724][ T4299] gfs2: fsid=syz:syz.0: File system withdrawn
[ 68.176349][ T4299] CPU: 1 PID: 4299 Comm: syz-executor Not tainted syzkaller #0
[ 68.183916][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 68.193967][ T4299] Call Trace:
[ 68.197227][ T4299]
[ 68.200136][ T4299] dump_stack_lvl+0x188/0x250
[ 68.204806][ T4299] ? show_regs_print_info+0x20/0x20
[ 68.209983][ T4299] ? load_image+0x410/0x410
[ 68.214466][ T4299] ? lockref_put_or_lock+0x6e/0xb0
[ 68.219558][ T4299] gfs2_withdraw+0xb9a/0x14e0
[ 68.224222][ T4299] ? gfs2_meta_new+0x160/0x160
[ 68.228979][ T4299] ? gfs2_lm+0x240/0x240
[ 68.233200][ T4299] ? gfs2_consist_inode_i+0xc0/0xe0
[ 68.238377][ T4299] gfs2_inode_refresh+0xb2d/0x11a0
[ 68.243468][ T4299] ? gfs2_inode_metasync+0xf0/0xf0
[ 68.248559][ T4299] inode_go_lock+0x127/0x450
[ 68.253125][ T4299] do_promote+0x75b/0xb20
[ 68.257437][ T4299] finish_xmote+0x4c2/0xaf0
[ 68.261921][ T4299] do_xmote+0x752/0x10a0
[ 68.266146][ T4299] gfs2_glock_nq+0xc6b/0x1510
[ 68.270810][ T4299] do_sync+0x49c/0xba0
[ 68.274859][ T4299] ? slot_put+0x1e0/0x1e0
[ 68.279171][ T4299] ? do_sync+0x494/0xba0
[ 68.283389][ T4299] ? do_raw_spin_unlock+0x11d/0x230
[ 68.288568][ T4299] gfs2_quota_sync+0x355/0x780
[ 68.293315][ T4299] gfs2_sync_fs+0x48/0xb0
[ 68.297620][ T4299] sync_filesystem+0xe6/0x220
[ 68.302275][ T4299] generic_shutdown_super+0x6b/0x300
[ 68.307537][ T4299] kill_block_super+0x7c/0xe0
[ 68.312193][ T4299] deactivate_locked_super+0x93/0xf0
[ 68.317456][ T4299] cleanup_mnt+0x426/0x4d0
[ 68.321855][ T4299] task_work_run+0x125/0x1a0
[ 68.326430][ T4299] exit_to_user_mode_loop+0x10f/0x130
[ 68.331779][ T4299] exit_to_user_mode_prepare+0xee/0x180
[ 68.337302][ T4299] syscall_exit_to_user_mode+0x16/0x40
[ 68.342747][ T4299] do_syscall_64+0x58/0xa0
[ 68.347139][ T4299] ? clear_bhb_loop+0x30/0x80
[ 68.351791][ T4299] ? clear_bhb_loop+0x30/0x80
[ 68.356447][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.362318][ T4299] RIP: 0033:0x7f3a77e19097
[ 68.366720][ T4299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 68.386307][ T4299] RSP: 002b:00007ffd1f68a4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 68.394701][ T4299] RAX: 0000000000000000 RBX: 00007f3a77ead2ca RCX: 00007f3a77e19097
[ 68.402652][ T4299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f68a5a0
[ 68.410602][ T4299] RBP: 00007ffd1f68a5a0 R08: 00007ffd1f68b5a0 R09: 00000000ffffffff
[ 68.418556][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1f68b630
[ 68.426508][ T4299] R13: 00007f3a77ead2ca R14: 000000000001073d R15: 00007ffd1f68b670
[ 68.434467][ T4299]
[ 68.438332][ T4299] ==================================================================
[ 68.446602][ T4299] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0
[ 68.453266][ T4299] Read of size 8 at addr ffff888070e5a330 by task syz-executor/4299
[ 68.461216][ T4299]
[ 68.463520][ T4299] CPU: 1 PID: 4299 Comm: syz-executor Not tainted syzkaller #0
[ 68.471039][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 68.481074][ T4299] Call Trace:
[ 68.484343][ T4299]
[ 68.487269][ T4299] dump_stack_lvl+0x188/0x250
[ 68.491951][ T4299] ? show_regs_print_info+0x20/0x20
[ 68.497146][ T4299] ? load_image+0x410/0x410
[ 68.501625][ T4299] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 68.507066][ T4299] print_address_description+0x60/0x2d0
[ 68.512592][ T4299] ? qd_unlock+0x30/0x2d0
[ 68.516903][ T4299] kasan_report+0xdf/0x130
[ 68.521300][ T4299] ? qd_unlock+0x30/0x2d0
[ 68.525607][ T4299] kasan_check_range+0x235/0x290
[ 68.530524][ T4299] qd_unlock+0x30/0x2d0
[ 68.534659][ T4299] gfs2_quota_sync+0x63b/0x780
[ 68.539406][ T4299] gfs2_sync_fs+0x48/0xb0
[ 68.543714][ T4299] sync_filesystem+0xe6/0x220
[ 68.548384][ T4299] generic_shutdown_super+0x6b/0x300
[ 68.553657][ T4299] kill_block_super+0x7c/0xe0
[ 68.558319][ T4299] deactivate_locked_super+0x93/0xf0
[ 68.563579][ T4299] cleanup_mnt+0x426/0x4d0
[ 68.567984][ T4299] task_work_run+0x125/0x1a0
[ 68.572559][ T4299] exit_to_user_mode_loop+0x10f/0x130
[ 68.577909][ T4299] exit_to_user_mode_prepare+0xee/0x180
[ 68.583430][ T4299] syscall_exit_to_user_mode+0x16/0x40
[ 68.588866][ T4299] do_syscall_64+0x58/0xa0
[ 68.593260][ T4299] ? clear_bhb_loop+0x30/0x80
[ 68.597915][ T4299] ? clear_bhb_loop+0x30/0x80
[ 68.602573][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.608441][ T4299] RIP: 0033:0x7f3a77e19097
[ 68.612837][ T4299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 68.632425][ T4299] RSP: 002b:00007ffd1f68a4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 68.640821][ T4299] RAX: 0000000000000000 RBX: 00007f3a77ead2ca RCX: 00007f3a77e19097
[ 68.648781][ T4299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f68a5a0
[ 68.656733][ T4299] RBP: 00007ffd1f68a5a0 R08: 00007ffd1f68b5a0 R09: 00000000ffffffff
[ 68.664691][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1f68b630
[ 68.672655][ T4299] R13: 00007f3a77ead2ca R14: 000000000001073d R15: 00007ffd1f68b670
[ 68.680616][ T4299]
[ 68.683616][ T4299]
[ 68.685928][ T4299] Allocated by task 4325:
[ 68.690229][ T4299] __kasan_slab_alloc+0x92/0xc0
[ 68.695060][ T4299] slab_post_alloc_hook+0x4c/0x380
[ 68.700144][ T4299] kmem_cache_alloc+0x15d/0x280
[ 68.704966][ T4299] qd_alloc+0x50/0x260
[ 68.709012][ T4299] gfs2_quota_init+0x74d/0xe80
[ 68.713755][ T4299] gfs2_make_fs_rw+0x41c/0x590
[ 68.718508][ T4299] gfs2_fill_super+0x17d1/0x1ea0
[ 68.723421][ T4299] get_tree_bdev+0x3e6/0x610
[ 68.727987][ T4299] gfs2_get_tree+0x4d/0x1e0
[ 68.732474][ T4299] vfs_get_tree+0x88/0x270
[ 68.736869][ T4299] do_new_mount+0x247/0xa40
[ 68.741348][ T4299] __se_sys_mount+0x2e3/0x3d0
[ 68.745999][ T4299] do_syscall_64+0x4c/0xa0
[ 68.750393][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.756261][ T4299]
[ 68.758561][ T4299] Freed by task 4299:
[ 68.762511][ T4299] kasan_set_track+0x4b/0x70
[ 68.767077][ T4299] kasan_set_free_info+0x1f/0x40
[ 68.771992][ T4299] ____kasan_slab_free+0xd5/0x110
[ 68.777017][ T4299] slab_free_freelist_hook+0xec/0x170
[ 68.782364][ T4299] kmem_cache_free+0x8f/0x210
[ 68.787015][ T4299] rcu_core+0x96e/0x1650
[ 68.791237][ T4299] handle_softirqs+0x336/0x830
[ 68.795974][ T4299] __irq_exit_rcu+0x13b/0x230
[ 68.800623][ T4299] irq_exit_rcu+0x5/0x20
[ 68.804843][ T4299] sysvec_apic_timer_interrupt+0xa0/0xc0
[ 68.810468][ T4299] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 68.816426][ T4299]
[ 68.818728][ T4299] Last potentially related work creation:
[ 68.824419][ T4299] kasan_save_stack+0x35/0x60
[ 68.829093][ T4299] kasan_record_aux_stack+0xb8/0x100
[ 68.834352][ T4299] call_rcu+0x189/0x900
[ 68.838483][ T4299] gfs2_quota_cleanup+0x414/0x670
[ 68.844601][ T4299] gfs2_make_fs_ro+0x440/0x620
[ 68.849370][ T4299] gfs2_withdraw+0x660/0x14e0
[ 68.854027][ T4299] gfs2_inode_refresh+0xb2d/0x11a0
[ 68.859120][ T4299] inode_go_lock+0x127/0x450
[ 68.863691][ T4299] do_promote+0x75b/0xb20
[ 68.868014][ T4299] finish_xmote+0x4c2/0xaf0
[ 68.872603][ T4299] do_xmote+0x752/0x10a0
[ 68.876847][ T4299] gfs2_glock_nq+0xc6b/0x1510
[ 68.881510][ T4299] do_sync+0x49c/0xba0
[ 68.885557][ T4299] gfs2_quota_sync+0x355/0x780
[ 68.890305][ T4299] gfs2_sync_fs+0x48/0xb0
[ 68.894620][ T4299] sync_filesystem+0xe6/0x220
[ 68.899277][ T4299] generic_shutdown_super+0x6b/0x300
[ 68.904548][ T4299] kill_block_super+0x7c/0xe0
[ 68.909229][ T4299] deactivate_locked_super+0x93/0xf0
[ 68.914492][ T4299] cleanup_mnt+0x426/0x4d0
[ 68.918892][ T4299] task_work_run+0x125/0x1a0
[ 68.923461][ T4299] exit_to_user_mode_loop+0x10f/0x130
[ 68.928813][ T4299] exit_to_user_mode_prepare+0xee/0x180
[ 68.934339][ T4299] syscall_exit_to_user_mode+0x16/0x40
[ 68.939777][ T4299] do_syscall_64+0x58/0xa0
[ 68.944175][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.950065][ T4299]
[ 68.952367][ T4299] The buggy address belongs to the object at ffff888070e5a2a0
[ 68.952367][ T4299] which belongs to the cache gfs2_quotad of size 272
[ 68.966398][ T4299] The buggy address is located 144 bytes inside of
[ 68.966398][ T4299] 272-byte region [ffff888070e5a2a0, ffff888070e5a3b0)
[ 68.979651][ T4299] The buggy address belongs to the page:
[ 68.985270][ T4299] page:ffffea0001c39680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x70e5a
[ 68.995400][ T4299] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 69.002926][ T4299] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801e2a4a00
[ 69.011490][ T4299] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000
[ 69.020044][ T4299] page dumped because: kasan: bad access detected
[ 69.026444][ T4299] page_owner tracks the page as allocated
[ 69.032158][ T4299] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4318, ts 65456570855, free_ts 65454779933
[ 69.051151][ T4299] get_page_from_freelist+0x24f6/0x2670
[ 69.056689][ T4299] __alloc_pages+0x1ee/0x480
[ 69.061259][ T4299] new_slab+0xc0/0x4b0
[ 69.065310][ T4299] ___slab_alloc+0x807/0xdd0
[ 69.069887][ T4299] kmem_cache_alloc+0xf0/0x280
[ 69.074629][ T4299] qd_alloc+0x50/0x260
[ 69.078675][ T4299] gfs2_quota_init+0x74d/0xe80
[ 69.083415][ T4299] gfs2_make_fs_rw+0x41c/0x590
[ 69.088158][ T4299] gfs2_fill_super+0x17d1/0x1ea0
[ 69.093074][ T4299] get_tree_bdev+0x3e6/0x610
[ 69.097639][ T4299] gfs2_get_tree+0x4d/0x1e0
[ 69.102126][ T4299] vfs_get_tree+0x88/0x270
[ 69.106521][ T4299] do_new_mount+0x247/0xa40
[ 69.111005][ T4299] __se_sys_mount+0x2e3/0x3d0
[ 69.115661][ T4299] do_syscall_64+0x4c/0xa0
[ 69.120056][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 69.125927][ T4299] page last free stack trace:
[ 69.130577][ T4299] free_unref_page_prepare+0x637/0x6c0
[ 69.136016][ T4299] free_unref_page+0x8f/0x2a0
[ 69.140672][ T4299] __unfreeze_partials+0x188/0x1e0
[ 69.145758][ T4299] put_cpu_partial+0x12d/0x190
[ 69.150504][ T4299] qlist_free_all+0x35/0x90
[ 69.154983][ T4299] kasan_quarantine_reduce+0x150/0x160
[ 69.160413][ T4299] __kasan_slab_alloc+0x2f/0xc0
[ 69.165361][ T4299] slab_post_alloc_hook+0x4c/0x380
[ 69.170451][ T4299] kmem_cache_alloc+0x15d/0x280
[ 69.175275][ T4299] alloc_buffer_head+0x21/0x100
[ 69.180101][ T4299] alloc_page_buffers+0x341/0x600
[ 69.185099][ T4299] create_empty_buffers+0x3a/0x6d0
[ 69.190190][ T4299] gfs2_getbuf+0x24f/0x980
[ 69.194586][ T4299] gfs2_meta_ra+0x16c/0x4d0
[ 69.199072][ T4299] gfs2_quota_init+0x4e5/0xe80
[ 69.203819][ T4299] gfs2_make_fs_rw+0x41c/0x590
[ 69.208577][ T4299]
[ 69.210875][ T4299] Memory state around the buggy address:
[ 69.216483][ T4299] ffff888070e5a200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 69.224526][ T4299] ffff888070e5a280: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 69.232576][ T4299] >ffff888070e5a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.240612][ T4299] ^
[ 69.246219][ T4299] ffff888070e5a380: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
[ 69.254256][ T4299] ffff888070e5a400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.262287][ T4299] ==================================================================
[ 69.270319][ T4299] Disabling lock debugging due to kernel taint
[ 69.278214][ T4299] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 69.285414][ T4299] CPU: 1 PID: 4299 Comm: syz-executor Tainted: G B syzkaller #0
[ 69.294343][ T4299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 69.304382][ T4299] Call Trace:
[ 69.307652][ T4299]
[ 69.310564][ T4299] dump_stack_lvl+0x188/0x250
[ 69.315223][ T4299] ? show_regs_print_info+0x20/0x20
[ 69.320425][ T4299] ? load_image+0x410/0x410
[ 69.324907][ T4299] panic+0x2f8/0x850
[ 69.328787][ T4299] ? bpf_jit_dump+0xd0/0xd0
[ 69.333309][ T4299] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 69.339272][ T4299] ? _raw_spin_unlock+0x40/0x40
[ 69.344110][ T4299] ? qd_unlock+0x30/0x2d0
[ 69.348422][ T4299] check_panic_on_warn+0x80/0xa0
[ 69.353333][ T4299] ? qd_unlock+0x30/0x2d0
[ 69.357642][ T4299] end_report+0x6d/0xf0
[ 69.361775][ T4299] kasan_report+0x102/0x130
[ 69.366260][ T4299] ? qd_unlock+0x30/0x2d0
[ 69.370577][ T4299] kasan_check_range+0x235/0x290
[ 69.375509][ T4299] qd_unlock+0x30/0x2d0
[ 69.379648][ T4299] gfs2_quota_sync+0x63b/0x780
[ 69.384391][ T4299] gfs2_sync_fs+0x48/0xb0
[ 69.388705][ T4299] sync_filesystem+0xe6/0x220
[ 69.393361][ T4299] generic_shutdown_super+0x6b/0x300
[ 69.398625][ T4299] kill_block_super+0x7c/0xe0
[ 69.403281][ T4299] deactivate_locked_super+0x93/0xf0
[ 69.408542][ T4299] cleanup_mnt+0x426/0x4d0
[ 69.412940][ T4299] task_work_run+0x125/0x1a0
[ 69.417512][ T4299] exit_to_user_mode_loop+0x10f/0x130
[ 69.422859][ T4299] exit_to_user_mode_prepare+0xee/0x180
[ 69.428376][ T4299] syscall_exit_to_user_mode+0x16/0x40
[ 69.433813][ T4299] do_syscall_64+0x58/0xa0
[ 69.438205][ T4299] ? clear_bhb_loop+0x30/0x80
[ 69.442854][ T4299] ? clear_bhb_loop+0x30/0x80
[ 69.447502][ T4299] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 69.453368][ T4299] RIP: 0033:0x7f3a77e19097
[ 69.457762][ T4299] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 69.477343][ T4299] RSP: 002b:00007ffd1f68a4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 69.485731][ T4299] RAX: 0000000000000000 RBX: 00007f3a77ead2ca RCX: 00007f3a77e19097
[ 69.493684][ T4299] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f68a5a0
[ 69.501643][ T4299] RBP: 00007ffd1f68a5a0 R08: 00007ffd1f68b5a0 R09: 00000000ffffffff
[ 69.509590][ T4299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1f68b630
[ 69.517539][ T4299] R13: 00007f3a77ead2ca R14: 000000000001073d R15: 00007ffd1f68b670
[ 69.525500][ T4299]
[ 69.528732][ T4299] Kernel Offset: disabled
[ 69.533046][ T4299] Rebooting in 86400 seconds..