Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. 2026/03/08 16:47:12 parsed 1 programs [ 62.861084][ T4188] cgroup: Unknown subsys name 'net' [ 63.003607][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.536861][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.311340][ T4229] syz-executor (4229) used greatest stack depth: 21136 bytes left [ 67.429020][ T4234] chnl_net:caif_netlink_parms(): no params data found [ 67.499218][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.507045][ T4234] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.515370][ T4234] device bridge_slave_0 entered promiscuous mode [ 67.526612][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.533863][ T4234] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.543582][ T4234] device bridge_slave_1 entered promiscuous mode [ 67.572271][ T4234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.585604][ T4234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.616880][ T4234] team0: Port device team_slave_0 added [ 67.626727][ T4234] team0: Port device team_slave_1 added [ 67.650975][ T4234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.659660][ T4234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.687976][ T4234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.701268][ T4234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.709733][ T4234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.737968][ T4234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.781508][ T4234] device hsr_slave_0 entered promiscuous mode [ 67.788898][ T4234] device hsr_slave_1 entered promiscuous mode [ 67.939695][ T4234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.952540][ T4234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.964843][ T4234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.975142][ T4234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.009177][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.016541][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.024961][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.032313][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.094871][ T4234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.111227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.123585][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.133084][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.149302][ T4234] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.161977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.171743][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.179243][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.192894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.201689][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.208907][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.230903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.239887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.259880][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.271785][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.289773][ T4234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.303446][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.313011][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.465618][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.473426][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.485963][ T4234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.503561][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.512802][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.536093][ T4234] device veth0_vlan entered promiscuous mode [ 68.543477][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.552524][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.562102][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.570081][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.582575][ T4234] device veth1_vlan entered promiscuous mode [ 68.601560][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.610202][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.619323][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.629255][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.640440][ T4234] device veth0_macvtap entered promiscuous mode [ 68.650923][ T4234] device veth1_macvtap entered promiscuous mode [ 68.665017][ T4234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.672924][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.681653][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.690535][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.699650][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.722913][ T4234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.731966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.741425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.752116][ T4234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.761410][ T4234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.771196][ T4234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.780969][ T4234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.892454][ T4234] syz-executor (4234) used greatest stack depth: 20272 bytes left [ 69.887037][ T1463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.909340][ T1463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.934458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.952301][ T1463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.960385][ T1463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.968666][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/03/08 16:47:21 executed programs: 0 [ 70.694172][ T4289] chnl_net:caif_netlink_parms(): no params data found [ 70.759026][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.766510][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.775619][ T4289] device bridge_slave_0 entered promiscuous mode [ 70.784502][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.792019][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.800257][ T4289] device bridge_slave_1 entered promiscuous mode [ 70.822478][ T4289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.835483][ T4289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.868604][ T4289] team0: Port device team_slave_0 added [ 70.876791][ T4289] team0: Port device team_slave_1 added [ 70.898846][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.906005][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.933678][ T4289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.946813][ T4289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.954054][ T4289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.980540][ T4289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.015623][ T4289] device hsr_slave_0 entered promiscuous mode [ 71.023013][ T4289] device hsr_slave_1 entered promiscuous mode [ 71.031528][ T4289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.040083][ T4289] Cannot create hsr debugfs directory [ 71.079528][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.500161][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.506934][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.618553][ T4255] Bluetooth: hci0: command 0x0409 tx timeout [ 74.224737][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.282727][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.344370][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.698336][ T4254] Bluetooth: hci0: command 0x041b tx timeout [ 75.120273][ T4289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.131852][ T4289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.159905][ T4289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.170575][ T4289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.252931][ T4289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.266250][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.274463][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.288418][ T4289] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.303702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.314252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.323298][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.330385][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.339106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.349986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.359896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.368794][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.376057][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.398995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.410422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.423338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.434483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.444583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.473611][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.482567][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.494461][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.503517][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.536464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.545726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.555819][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.666894][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.675292][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.688680][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.704735][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.714430][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.751856][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.760542][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.771008][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.779343][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.789168][ T4289] device veth0_vlan entered promiscuous mode [ 75.801415][ T4289] device veth1_vlan entered promiscuous mode [ 75.834899][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.843523][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.852603][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.861487][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.872869][ T4289] device veth0_macvtap entered promiscuous mode [ 75.892493][ T4289] device veth1_macvtap entered promiscuous mode [ 75.907217][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.919154][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.931332][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.941444][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.949617][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.958518][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.967282][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.982898][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.993645][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.004994][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.014428][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.023715][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.033860][ T4289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.044052][ T4289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.053099][ T4289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.062204][ T4289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.078921][ T154] device hsr_slave_0 left promiscuous mode [ 76.085992][ T154] device hsr_slave_1 left promiscuous mode [ 76.093043][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.101365][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.110766][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.118681][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.126651][ T154] device bridge_slave_1 left promiscuous mode [ 76.134492][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.146918][ T154] device bridge_slave_0 left promiscuous mode [ 76.154517][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.172212][ T154] device veth1_macvtap left promiscuous mode [ 76.178794][ T154] device veth0_macvtap left promiscuous mode [ 76.184999][ T154] device veth1_vlan left promiscuous mode [ 76.192000][ T154] device veth0_vlan left promiscuous mode [ 76.349687][ T154] team0 (unregistering): Port device team_slave_1 removed [ 76.363549][ T154] team0 (unregistering): Port device team_slave_0 removed [ 76.376775][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.393335][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.447134][ T154] bond0 (unregistering): Released all slaves [ 76.565458][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.576007][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.586364][ T1463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/03/08 16:47:28 executed programs: 2 [ 76.620565][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.629399][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.637109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.779557][ T4252] Bluetooth: hci0: command 0x040f tx timeout [ 76.951233][ T4335] loop0: detected capacity change from 0 to 32768 [ 77.037611][ T4335] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.053640][ T4335] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.082546][ T4335] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 77.109419][ T4252] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 77.116416][ T4252] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 77.163475][ T4252] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 77.179750][ T4252] gfs2: fsid=syz:syz.0: jid=0: Done [ 77.186262][ T4335] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 77.315747][ T4335] gfs2: fsid=syz:syz.0: found 1 quota changes [ 77.359190][ T4289] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 77.359190][ T4289] inode = 11 2339 [ 77.359190][ T4289] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 77.379072][ T4289] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 77.396817][ T4289] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 77.413210][ T4289] CPU: 1 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 77.421045][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.431216][ T4289] Call Trace: [ 77.434512][ T4289] [ 77.437548][ T4289] dump_stack_lvl+0x188/0x250 [ 77.442338][ T4289] ? show_regs_print_info+0x20/0x20 [ 77.447649][ T4289] ? load_image+0x400/0x400 [ 77.452174][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 77.457739][ T4289] gfs2_assert_warn_i+0x18f/0x2c0 [ 77.462885][ T4289] gfs2_quota_cleanup+0x4b4/0x6a0 [ 77.468130][ T4289] gfs2_make_fs_ro+0x440/0x620 [ 77.473157][ T4289] ? __might_sleep+0xf0/0xf0 [ 77.477857][ T4289] ? gfs2_dinode_out+0xb00/0xb00 [ 77.482818][ T4289] ? _raw_spin_unlock+0x24/0x40 [ 77.487864][ T4289] ? gfs2_glock_nq+0xcb0/0x1550 [ 77.492931][ T4289] gfs2_withdraw+0x610/0x1490 [ 77.497731][ T4289] ? gfs2_lm+0x240/0x240 [ 77.502260][ T4289] ? __schedule+0x11f7/0x43c0 [ 77.506965][ T4289] ? gfs2_freeze_lock+0x52/0xc0 [ 77.511924][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 77.517149][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 77.522481][ T4289] ? do_promote+0x71a/0xab0 [ 77.527102][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 77.532327][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 77.537470][ T4289] inode_go_lock+0x127/0x470 [ 77.542176][ T4289] do_promote+0x741/0xab0 [ 77.546549][ T4289] finish_xmote+0x4df/0xb00 [ 77.551171][ T4289] do_xmote+0x7b6/0x1120 [ 77.555540][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 77.560523][ T4289] do_sync+0x4ab/0xc40 [ 77.564827][ T4289] ? slot_put+0x1e0/0x1e0 [ 77.569380][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 77.574883][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 77.579943][ T4289] ? do_sync+0x4a3/0xc40 [ 77.584302][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 77.589804][ T4289] gfs2_quota_sync+0x32c/0x700 [ 77.594879][ T4289] gfs2_sync_fs+0x48/0xb0 [ 77.599505][ T4289] sync_filesystem+0xe6/0x220 [ 77.604397][ T4289] generic_shutdown_super+0x6b/0x300 [ 77.609974][ T4289] kill_block_super+0x7c/0xe0 [ 77.614978][ T4289] deactivate_locked_super+0x93/0xf0 [ 77.620479][ T4289] cleanup_mnt+0x42d/0x4e0 [ 77.625008][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 77.630411][ T4289] task_work_run+0x125/0x1a0 [ 77.635101][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 77.640488][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 77.646090][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 77.651589][ T4289] do_syscall_64+0x58/0xa0 [ 77.656127][ T4289] ? clear_bhb_loop+0x30/0x80 [ 77.660915][ T4289] ? clear_bhb_loop+0x30/0x80 [ 77.665811][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.671811][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 77.676441][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 77.696529][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 77.705275][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 77.713441][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 77.721603][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 77.729873][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 77.738038][ T4289] R13: 00007f2e38990f90 R14: 0000000000012b4d R15: 00007ffda01036d0 [ 77.746053][ T4289] [ 77.761860][ T4289] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 77.770809][ T4289] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 77.779134][ T4289] gfs2: fsid=syz:syz.0: File system withdrawn [ 77.786480][ T4289] CPU: 1 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 77.794364][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.804726][ T4289] Call Trace: [ 77.808026][ T4289] [ 77.810978][ T4289] dump_stack_lvl+0x188/0x250 [ 77.816127][ T4289] ? kobject_uevent_env+0x371/0x890 [ 77.821549][ T4289] ? show_regs_print_info+0x20/0x20 [ 77.826877][ T4289] ? load_image+0x400/0x400 [ 77.831400][ T4289] ? kobject_uevent_env+0x371/0x890 [ 77.836964][ T4289] ? lockref_put_or_lock+0x6e/0xb0 [ 77.842452][ T4289] gfs2_withdraw+0x1149/0x1490 [ 77.847444][ T4289] ? gfs2_lm+0x240/0x240 [ 77.851791][ T4289] ? __schedule+0x11f7/0x43c0 [ 77.856593][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 77.862164][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 77.867387][ T4289] ? do_promote+0x71a/0xab0 [ 77.871916][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 77.877421][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 77.882784][ T4289] inode_go_lock+0x127/0x470 [ 77.887593][ T4289] do_promote+0x741/0xab0 [ 77.891963][ T4289] finish_xmote+0x4df/0xb00 [ 77.896607][ T4289] do_xmote+0x7b6/0x1120 [ 77.900888][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 77.905695][ T4289] do_sync+0x4ab/0xc40 [ 77.909970][ T4289] ? slot_put+0x1e0/0x1e0 [ 77.914326][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 77.919373][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 77.924515][ T4289] ? do_sync+0x4a3/0xc40 [ 77.928882][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 77.934205][ T4289] gfs2_quota_sync+0x32c/0x700 [ 77.939205][ T4289] gfs2_sync_fs+0x48/0xb0 [ 77.943562][ T4289] sync_filesystem+0xe6/0x220 [ 77.948479][ T4289] generic_shutdown_super+0x6b/0x300 [ 77.954065][ T4289] kill_block_super+0x7c/0xe0 [ 77.958850][ T4289] deactivate_locked_super+0x93/0xf0 [ 77.964305][ T4289] cleanup_mnt+0x42d/0x4e0 [ 77.968945][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 77.976072][ T4289] task_work_run+0x125/0x1a0 [ 77.980682][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 77.986067][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 77.991998][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 77.997930][ T4289] do_syscall_64+0x58/0xa0 [ 78.002438][ T4289] ? clear_bhb_loop+0x30/0x80 [ 78.007115][ T4289] ? clear_bhb_loop+0x30/0x80 [ 78.011970][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 78.017892][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 78.022593][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 78.043229][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.051941][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 78.060088][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 78.068552][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 78.076975][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 78.085062][ T4289] R13: 00007f2e38990f90 R14: 0000000000012b4d R15: 00007ffda01036d0 [ 78.093332][ T4289] [ 78.707182][ T4338] loop0: detected capacity change from 0 to 32768 [ 78.756521][ T4338] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 78.771952][ T4338] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 78.799078][ T4338] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 78.818924][ T1110] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 78.825753][ T1110] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 78.847801][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 78.852985][ T1110] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 78.863654][ T1110] gfs2: fsid=syz:syz.0: jid=0: Done [ 78.869442][ T4338] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 78.949322][ T4338] gfs2: fsid=syz:syz.0: found 1 quota changes [ 78.962477][ T4289] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 78.962477][ T4289] inode = 11 2339 [ 78.962477][ T4289] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 78.981788][ T4289] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 78.999426][ T4289] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 79.013946][ T4289] CPU: 0 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 79.021553][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.031618][ T4289] Call Trace: [ 79.034986][ T4289] [ 79.038039][ T4289] dump_stack_lvl+0x188/0x250 [ 79.042776][ T4289] ? show_regs_print_info+0x20/0x20 [ 79.047992][ T4289] ? load_image+0x400/0x400 [ 79.052584][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 79.057789][ T4289] gfs2_assert_warn_i+0x18f/0x2c0 [ 79.062809][ T4289] gfs2_quota_cleanup+0x4b4/0x6a0 [ 79.067847][ T4289] gfs2_make_fs_ro+0x440/0x620 [ 79.072706][ T4289] ? __might_sleep+0xf0/0xf0 [ 79.077309][ T4289] ? gfs2_dinode_out+0xb00/0xb00 [ 79.082599][ T4289] ? _raw_spin_unlock+0x24/0x40 [ 79.087461][ T4289] ? gfs2_glock_nq+0xcb0/0x1550 [ 79.092323][ T4289] gfs2_withdraw+0x610/0x1490 [ 79.097318][ T4289] ? gfs2_lm+0x240/0x240 [ 79.101850][ T4289] ? __schedule+0x11f7/0x43c0 [ 79.106814][ T4289] ? gfs2_freeze_lock+0x52/0xc0 [ 79.111952][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 79.117358][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 79.122389][ T4289] ? do_promote+0x71a/0xab0 [ 79.126948][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 79.132142][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 79.137437][ T4289] inode_go_lock+0x127/0x470 [ 79.142239][ T4289] do_promote+0x741/0xab0 [ 79.146849][ T4289] finish_xmote+0x4df/0xb00 [ 79.151344][ T4289] do_xmote+0x7b6/0x1120 [ 79.155586][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 79.160377][ T4289] do_sync+0x4ab/0xc40 [ 79.164537][ T4289] ? slot_put+0x1e0/0x1e0 [ 79.168963][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 79.174096][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 79.179204][ T4289] ? do_sync+0x4a3/0xc40 [ 79.183440][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 79.188633][ T4289] gfs2_quota_sync+0x32c/0x700 [ 79.193612][ T4289] gfs2_sync_fs+0x48/0xb0 [ 79.198021][ T4289] sync_filesystem+0xe6/0x220 [ 79.202868][ T4289] generic_shutdown_super+0x6b/0x300 [ 79.208675][ T4289] kill_block_super+0x7c/0xe0 [ 79.213430][ T4289] deactivate_locked_super+0x93/0xf0 [ 79.218719][ T4289] cleanup_mnt+0x42d/0x4e0 [ 79.223233][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 79.228774][ T4289] task_work_run+0x125/0x1a0 [ 79.233481][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 79.238950][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 79.244673][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 79.250219][ T4289] do_syscall_64+0x58/0xa0 [ 79.254802][ T4289] ? clear_bhb_loop+0x30/0x80 [ 79.259687][ T4289] ? clear_bhb_loop+0x30/0x80 [ 79.264373][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.270351][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 79.274981][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 79.295293][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.303875][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 79.312133][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 79.320279][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 79.328240][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 79.336203][ T4289] R13: 00007f2e38990f90 R14: 00000000000131d1 R15: 00007ffda01036d0 [ 79.344301][ T4289] [ 79.348927][ T4289] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 79.358868][ T4289] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 79.365871][ T4289] gfs2: fsid=syz:syz.0: File system withdrawn [ 79.372223][ T4289] CPU: 0 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 79.379881][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 79.389949][ T4289] Call Trace: [ 79.393228][ T4289] [ 79.396310][ T4289] dump_stack_lvl+0x188/0x250 [ 79.401274][ T4289] ? kobject_uevent_env+0x371/0x890 [ 79.406573][ T4289] ? show_regs_print_info+0x20/0x20 [ 79.412120][ T4289] ? load_image+0x400/0x400 [ 79.416805][ T4289] ? kobject_uevent_env+0x371/0x890 [ 79.422009][ T4289] ? lockref_put_or_lock+0x6e/0xb0 [ 79.427235][ T4289] gfs2_withdraw+0x1149/0x1490 [ 79.432099][ T4289] ? gfs2_lm+0x240/0x240 [ 79.436334][ T4289] ? __schedule+0x11f7/0x43c0 [ 79.441134][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 79.446470][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 79.451706][ T4289] ? do_promote+0x71a/0xab0 [ 79.456309][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 79.461526][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 79.466764][ T4289] inode_go_lock+0x127/0x470 [ 79.471557][ T4289] do_promote+0x741/0xab0 [ 79.476169][ T4289] finish_xmote+0x4df/0xb00 [ 79.480968][ T4289] do_xmote+0x7b6/0x1120 [ 79.485318][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 79.490176][ T4289] do_sync+0x4ab/0xc40 [ 79.494516][ T4289] ? slot_put+0x1e0/0x1e0 [ 79.499469][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 79.504609][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 79.509717][ T4289] ? do_sync+0x4a3/0xc40 [ 79.514444][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 79.519798][ T4289] gfs2_quota_sync+0x32c/0x700 [ 79.524778][ T4289] gfs2_sync_fs+0x48/0xb0 [ 79.529271][ T4289] sync_filesystem+0xe6/0x220 [ 79.534069][ T4289] generic_shutdown_super+0x6b/0x300 [ 79.539574][ T4289] kill_block_super+0x7c/0xe0 [ 79.544528][ T4289] deactivate_locked_super+0x93/0xf0 [ 79.549899][ T4289] cleanup_mnt+0x42d/0x4e0 [ 79.554412][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 79.559958][ T4289] task_work_run+0x125/0x1a0 [ 79.564551][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 79.570029][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 79.575584][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 79.581056][ T4289] do_syscall_64+0x58/0xa0 [ 79.585556][ T4289] ? clear_bhb_loop+0x30/0x80 [ 79.590583][ T4289] ? clear_bhb_loop+0x30/0x80 [ 79.595338][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.601403][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 79.606125][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 79.627810][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.636281][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 79.644708][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 79.652766][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 79.660814][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 79.668876][ T4289] R13: 00007f2e38990f90 R14: 00000000000131d1 R15: 00007ffda01036d0 [ 79.676852][ T4289] [ 80.008239][ T4341] loop0: detected capacity change from 0 to 32768 [ 80.060544][ T4341] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 80.070218][ T4341] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 80.083556][ T4341] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 80.093339][ T2324] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 80.100515][ T2324] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 80.127912][ T2324] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 80.136502][ T2324] gfs2: fsid=syz:syz.0: jid=0: Done [ 80.143880][ T4341] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 80.230793][ T4341] gfs2: fsid=syz:syz.0: found 1 quota changes [ 80.248791][ T4289] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 80.248791][ T4289] inode = 11 2339 [ 80.248791][ T4289] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 80.269093][ T4289] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 80.283548][ T4289] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 80.298052][ T4289] CPU: 0 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 80.306051][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.316109][ T4289] Call Trace: [ 80.319388][ T4289] [ 80.322398][ T4289] dump_stack_lvl+0x188/0x250 [ 80.327252][ T4289] ? show_regs_print_info+0x20/0x20 [ 80.332448][ T4289] ? load_image+0x400/0x400 [ 80.336944][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 80.342361][ T4289] gfs2_assert_warn_i+0x18f/0x2c0 [ 80.347493][ T4289] gfs2_quota_cleanup+0x4b4/0x6a0 [ 80.352746][ T4289] gfs2_make_fs_ro+0x440/0x620 [ 80.357823][ T4289] ? __might_sleep+0xf0/0xf0 [ 80.362452][ T4289] ? gfs2_dinode_out+0xb00/0xb00 [ 80.367673][ T4289] ? _raw_spin_unlock+0x24/0x40 [ 80.372644][ T4289] ? gfs2_glock_nq+0xcb0/0x1550 [ 80.377904][ T4289] gfs2_withdraw+0x610/0x1490 [ 80.382888][ T4289] ? gfs2_lm+0x240/0x240 [ 80.387271][ T4289] ? __schedule+0x11f7/0x43c0 [ 80.391941][ T4289] ? gfs2_freeze_lock+0x52/0xc0 [ 80.396959][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 80.402237][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 80.407467][ T4289] ? do_promote+0x71a/0xab0 [ 80.412323][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 80.417527][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 80.422948][ T4289] inode_go_lock+0x127/0x470 [ 80.427708][ T4289] do_promote+0x741/0xab0 [ 80.432140][ T4289] finish_xmote+0x4df/0xb00 [ 80.436750][ T4289] do_xmote+0x7b6/0x1120 [ 80.441002][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 80.445692][ T4289] do_sync+0x4ab/0xc40 [ 80.449852][ T4289] ? slot_put+0x1e0/0x1e0 [ 80.454882][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 80.460104][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 80.465140][ T4289] ? do_sync+0x4a3/0xc40 [ 80.469381][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 80.474665][ T4289] gfs2_quota_sync+0x32c/0x700 [ 80.479610][ T4289] gfs2_sync_fs+0x48/0xb0 [ 80.484257][ T4289] sync_filesystem+0xe6/0x220 [ 80.488952][ T4289] generic_shutdown_super+0x6b/0x300 [ 80.494688][ T4289] kill_block_super+0x7c/0xe0 [ 80.499467][ T4289] deactivate_locked_super+0x93/0xf0 [ 80.504840][ T4289] cleanup_mnt+0x42d/0x4e0 [ 80.509345][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 80.514542][ T4289] task_work_run+0x125/0x1a0 [ 80.519131][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 80.524593][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 80.530293][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 80.535927][ T4289] do_syscall_64+0x58/0xa0 [ 80.540343][ T4289] ? clear_bhb_loop+0x30/0x80 [ 80.545102][ T4289] ? clear_bhb_loop+0x30/0x80 [ 80.549859][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.556021][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 80.560730][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 80.580897][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.589661][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 80.597808][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 80.606776][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 80.615386][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 80.624397][ T4289] R13: 00007f2e38990f90 R14: 0000000000013797 R15: 00007ffda01036d0 [ 80.632470][ T4289] [ 80.639447][ T4289] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 80.648956][ T4289] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 80.655806][ T4289] gfs2: fsid=syz:syz.0: File system withdrawn [ 80.662155][ T4289] CPU: 0 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 80.670069][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.680494][ T4289] Call Trace: [ 80.684067][ T4289] [ 80.687008][ T4289] dump_stack_lvl+0x188/0x250 [ 80.691888][ T4289] ? kobject_uevent_env+0x371/0x890 [ 80.697259][ T4289] ? show_regs_print_info+0x20/0x20 [ 80.702561][ T4289] ? load_image+0x400/0x400 [ 80.707092][ T4289] ? kobject_uevent_env+0x371/0x890 [ 80.712325][ T4289] ? lockref_put_or_lock+0x6e/0xb0 [ 80.717717][ T4289] gfs2_withdraw+0x1149/0x1490 [ 80.722600][ T4289] ? gfs2_lm+0x240/0x240 [ 80.726926][ T4289] ? __schedule+0x11f7/0x43c0 [ 80.731710][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 80.737080][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 80.742670][ T4289] ? do_promote+0x71a/0xab0 [ 80.747786][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 80.753247][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 80.758478][ T4289] inode_go_lock+0x127/0x470 [ 80.763111][ T4289] do_promote+0x741/0xab0 [ 80.767452][ T4289] finish_xmote+0x4df/0xb00 [ 80.772316][ T4289] do_xmote+0x7b6/0x1120 [ 80.776584][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 80.781327][ T4289] do_sync+0x4ab/0xc40 [ 80.785749][ T4289] ? slot_put+0x1e0/0x1e0 [ 80.790181][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 80.795323][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 80.800449][ T4289] ? do_sync+0x4a3/0xc40 [ 80.804807][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 80.810097][ T4289] gfs2_quota_sync+0x32c/0x700 [ 80.814950][ T4289] gfs2_sync_fs+0x48/0xb0 [ 80.819492][ T4289] sync_filesystem+0xe6/0x220 [ 80.824285][ T4289] generic_shutdown_super+0x6b/0x300 [ 80.829753][ T4289] kill_block_super+0x7c/0xe0 [ 80.834804][ T4289] deactivate_locked_super+0x93/0xf0 [ 80.840261][ T4289] cleanup_mnt+0x42d/0x4e0 [ 80.844857][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 80.850240][ T4289] task_work_run+0x125/0x1a0 [ 80.854933][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 80.860319][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 80.866041][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 80.871940][ T4289] do_syscall_64+0x58/0xa0 [ 80.876524][ T4289] ? clear_bhb_loop+0x30/0x80 [ 80.881378][ T4289] ? clear_bhb_loop+0x30/0x80 [ 80.886096][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.892619][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 80.897708][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 80.917779][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.926433][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 80.934574][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 80.942546][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 80.950653][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 80.958993][ T4289] R13: 00007f2e38990f90 R14: 0000000000013797 R15: 00007ffda01036d0 [ 80.967023][ T4289] [ 81.292978][ T4344] loop0: detected capacity change from 0 to 32768 [ 81.351827][ T4344] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 81.360962][ T4344] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 81.373356][ T4344] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 81.382931][ T21] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 81.390628][ T21] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 81.417272][ T21] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 26ms [ 81.427009][ T21] gfs2: fsid=syz:syz.0: jid=0: Done [ 81.433008][ T4344] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 81.520919][ T4344] gfs2: fsid=syz:syz.0: found 1 quota changes [ 81.534784][ T4289] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 81.534784][ T4289] inode = 11 2339 [ 81.534784][ T4289] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 81.554823][ T4289] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 81.571134][ T4289] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 81.586110][ T4289] CPU: 1 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 81.594490][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.604644][ T4289] Call Trace: [ 81.608212][ T4289] [ 81.611167][ T4289] dump_stack_lvl+0x188/0x250 [ 81.615952][ T4289] ? show_regs_print_info+0x20/0x20 [ 81.621162][ T4289] ? load_image+0x400/0x400 [ 81.625763][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 81.631316][ T4289] gfs2_assert_warn_i+0x18f/0x2c0 [ 81.637175][ T4289] gfs2_quota_cleanup+0x4b4/0x6a0 [ 81.642240][ T4289] gfs2_make_fs_ro+0x440/0x620 [ 81.646995][ T4289] ? __might_sleep+0xf0/0xf0 [ 81.651585][ T4289] ? gfs2_dinode_out+0xb00/0xb00 [ 81.656514][ T4289] ? _raw_spin_unlock+0x24/0x40 [ 81.661453][ T4289] ? gfs2_glock_nq+0xcb0/0x1550 [ 81.666331][ T4289] gfs2_withdraw+0x610/0x1490 [ 81.671109][ T4289] ? gfs2_lm+0x240/0x240 [ 81.675342][ T4289] ? __schedule+0x11f7/0x43c0 [ 81.680290][ T4289] ? gfs2_freeze_lock+0x52/0xc0 [ 81.685323][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 81.690623][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 81.696085][ T4289] ? do_promote+0x71a/0xab0 [ 81.700781][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 81.706240][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 81.711388][ T4289] inode_go_lock+0x127/0x470 [ 81.716036][ T4289] do_promote+0x741/0xab0 [ 81.720697][ T4289] finish_xmote+0x4df/0xb00 [ 81.725669][ T4289] do_xmote+0x7b6/0x1120 [ 81.729940][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 81.730254][ T7] cfg80211: failed to load regulatory.db [ 81.734872][ T4289] do_sync+0x4ab/0xc40 [ 81.745046][ T4289] ? slot_put+0x1e0/0x1e0 [ 81.749609][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 81.754697][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 81.759973][ T4289] ? do_sync+0x4a3/0xc40 [ 81.764314][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 81.769705][ T4289] gfs2_quota_sync+0x32c/0x700 [ 81.774556][ T4289] gfs2_sync_fs+0x48/0xb0 [ 81.778892][ T4289] sync_filesystem+0xe6/0x220 [ 81.783698][ T4289] generic_shutdown_super+0x6b/0x300 [ 81.789331][ T4289] kill_block_super+0x7c/0xe0 [ 81.794095][ T4289] deactivate_locked_super+0x93/0xf0 [ 81.799458][ T4289] cleanup_mnt+0x42d/0x4e0 [ 81.803916][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 81.809396][ T4289] task_work_run+0x125/0x1a0 [ 81.814448][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 81.820027][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 81.825908][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 81.831741][ T4289] do_syscall_64+0x58/0xa0 [ 81.836528][ T4289] ? clear_bhb_loop+0x30/0x80 [ 81.841791][ T4289] ? clear_bhb_loop+0x30/0x80 [ 81.847401][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.853732][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 81.858166][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 81.879717][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 81.889264][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 81.897552][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 81.905631][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 81.914262][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 81.922511][ T4289] R13: 00007f2e38990f90 R14: 0000000000013ca4 R15: 00007ffda01036d0 [ 81.931023][ T4289] [ 81.937210][ T4289] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 81.946235][ T4289] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 81.958264][ T4289] gfs2: fsid=syz:syz.0: File system withdrawn [ 81.964390][ T4289] CPU: 0 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 81.972478][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 81.982821][ T4289] Call Trace: [ 81.986133][ T4289] [ 81.989074][ T4289] dump_stack_lvl+0x188/0x250 [ 81.994072][ T4289] ? kobject_uevent_env+0x371/0x890 [ 81.999294][ T4289] ? show_regs_print_info+0x20/0x20 [ 82.004517][ T4289] ? load_image+0x400/0x400 [ 82.009301][ T4289] ? kobject_uevent_env+0x371/0x890 [ 82.015210][ T4289] ? lockref_put_or_lock+0x6e/0xb0 [ 82.020534][ T4289] gfs2_withdraw+0x1149/0x1490 [ 82.025332][ T4289] ? gfs2_lm+0x240/0x240 [ 82.029684][ T4289] ? __schedule+0x11f7/0x43c0 [ 82.034414][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 82.039820][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 82.045027][ T4289] ? do_promote+0x71a/0xab0 [ 82.049583][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 82.054829][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 82.059971][ T4289] inode_go_lock+0x127/0x470 [ 82.064784][ T4289] do_promote+0x741/0xab0 [ 82.069241][ T4289] finish_xmote+0x4df/0xb00 [ 82.074040][ T4289] do_xmote+0x7b6/0x1120 [ 82.078402][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 82.083302][ T4289] do_sync+0x4ab/0xc40 [ 82.087761][ T4289] ? slot_put+0x1e0/0x1e0 [ 82.092204][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 82.097456][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 82.102597][ T4289] ? do_sync+0x4a3/0xc40 [ 82.106867][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 82.112473][ T4289] gfs2_quota_sync+0x32c/0x700 [ 82.117500][ T4289] gfs2_sync_fs+0x48/0xb0 [ 82.121866][ T4289] sync_filesystem+0xe6/0x220 [ 82.126656][ T4289] generic_shutdown_super+0x6b/0x300 [ 82.131967][ T4289] kill_block_super+0x7c/0xe0 [ 82.136976][ T4289] deactivate_locked_super+0x93/0xf0 [ 82.142470][ T4289] cleanup_mnt+0x42d/0x4e0 [ 82.147089][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 82.152586][ T4289] task_work_run+0x125/0x1a0 [ 82.157476][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 82.163309][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 82.169047][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 82.174624][ T4289] do_syscall_64+0x58/0xa0 [ 82.179066][ T4289] ? clear_bhb_loop+0x30/0x80 [ 82.183761][ T4289] ? clear_bhb_loop+0x30/0x80 [ 82.188458][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.194460][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 82.198895][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 82.218610][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.227064][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 82.235232][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 82.243399][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 82.252016][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 82.260282][ T4289] R13: 00007f2e38990f90 R14: 0000000000013ca4 R15: 00007ffda01036d0 [ 82.268491][ T4289] [ 82.626441][ T4347] loop0: detected capacity change from 0 to 32768 [ 82.678583][ T4347] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 82.687228][ T4347] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 82.700321][ T4347] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 82.710838][ T1110] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 82.718164][ T1110] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 82.744121][ T1110] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 25ms [ 82.753993][ T1110] gfs2: fsid=syz:syz.0: jid=0: Done [ 82.760274][ T4347] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 82.838760][ T4347] gfs2: fsid=syz:syz.0: found 1 quota changes [ 82.853751][ T4289] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 82.853751][ T4289] inode = 11 2339 [ 82.853751][ T4289] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465 [ 82.873037][ T4289] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/03/08 16:47:34 executed programs: 7 [ 82.887984][ T4289] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 82.903084][ T4289] CPU: 0 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 82.910837][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.921261][ T4289] Call Trace: [ 82.924536][ T4289] [ 82.927649][ T4289] dump_stack_lvl+0x188/0x250 [ 82.933109][ T4289] ? show_regs_print_info+0x20/0x20 [ 82.938322][ T4289] ? load_image+0x400/0x400 [ 82.942928][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 82.948222][ T4289] gfs2_assert_warn_i+0x18f/0x2c0 [ 82.953277][ T4289] gfs2_quota_cleanup+0x4b4/0x6a0 [ 82.958405][ T4289] gfs2_make_fs_ro+0x440/0x620 [ 82.963341][ T4289] ? __might_sleep+0xf0/0xf0 [ 82.968015][ T4289] ? gfs2_dinode_out+0xb00/0xb00 [ 82.973053][ T4289] ? _raw_spin_unlock+0x24/0x40 [ 82.978153][ T4289] ? gfs2_glock_nq+0xcb0/0x1550 [ 82.983012][ T4289] gfs2_withdraw+0x610/0x1490 [ 82.987899][ T4289] ? gfs2_lm+0x240/0x240 [ 82.992175][ T4289] ? __schedule+0x11f7/0x43c0 [ 82.997103][ T4289] ? gfs2_freeze_lock+0x52/0xc0 [ 83.002230][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 83.007625][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 83.013013][ T4289] ? do_promote+0x71a/0xab0 [ 83.017628][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 83.022774][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 83.028183][ T4289] inode_go_lock+0x127/0x470 [ 83.033007][ T4289] do_promote+0x741/0xab0 [ 83.037439][ T4289] finish_xmote+0x4df/0xb00 [ 83.042032][ T4289] do_xmote+0x7b6/0x1120 [ 83.046296][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 83.051234][ T4289] do_sync+0x4ab/0xc40 [ 83.055847][ T4289] ? slot_put+0x1e0/0x1e0 [ 83.060169][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 83.065362][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 83.070682][ T4289] ? do_sync+0x4a3/0xc40 [ 83.075285][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 83.080579][ T4289] gfs2_quota_sync+0x32c/0x700 [ 83.085448][ T4289] gfs2_sync_fs+0x48/0xb0 [ 83.089954][ T4289] sync_filesystem+0xe6/0x220 [ 83.094624][ T4289] generic_shutdown_super+0x6b/0x300 [ 83.099900][ T4289] kill_block_super+0x7c/0xe0 [ 83.104569][ T4289] deactivate_locked_super+0x93/0xf0 [ 83.109844][ T4289] cleanup_mnt+0x42d/0x4e0 [ 83.114458][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 83.119841][ T4289] task_work_run+0x125/0x1a0 [ 83.124548][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 83.130058][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 83.135764][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 83.141542][ T4289] do_syscall_64+0x58/0xa0 [ 83.145984][ T4289] ? clear_bhb_loop+0x30/0x80 [ 83.150845][ T4289] ? clear_bhb_loop+0x30/0x80 [ 83.155810][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.162043][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 83.166921][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 83.187109][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.195708][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 83.203769][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 83.212102][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 83.220964][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 83.229076][ T4289] R13: 00007f2e38990f90 R14: 00000000000141d7 R15: 00007ffda01036d0 [ 83.237333][ T4289] [ 83.241833][ T4289] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 83.251224][ T4289] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 83.259861][ T4289] gfs2: fsid=syz:syz.0: File system withdrawn [ 83.266053][ T4289] CPU: 1 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 83.273677][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.283724][ T4289] Call Trace: [ 83.286994][ T4289] [ 83.289910][ T4289] dump_stack_lvl+0x188/0x250 [ 83.294595][ T4289] ? kobject_uevent_env+0x371/0x890 [ 83.299974][ T4289] ? show_regs_print_info+0x20/0x20 [ 83.305641][ T4289] ? load_image+0x400/0x400 [ 83.310142][ T4289] ? kobject_uevent_env+0x371/0x890 [ 83.315341][ T4289] ? lockref_put_or_lock+0x6e/0xb0 [ 83.320828][ T4289] gfs2_withdraw+0x1149/0x1490 [ 83.325619][ T4289] ? gfs2_lm+0x240/0x240 [ 83.330943][ T4289] ? __schedule+0x11f7/0x43c0 [ 83.335789][ T4289] ? gfs2_consist_inode_i+0xc0/0xe0 [ 83.341075][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 83.346437][ T4289] ? do_promote+0x71a/0xab0 [ 83.351079][ T4289] ? gfs2_inode_metasync+0xf0/0xf0 [ 83.356215][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 83.361451][ T4289] inode_go_lock+0x127/0x470 [ 83.366077][ T4289] do_promote+0x741/0xab0 [ 83.370523][ T4289] finish_xmote+0x4df/0xb00 [ 83.375066][ T4289] do_xmote+0x7b6/0x1120 [ 83.379338][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 83.384020][ T4289] do_sync+0x4ab/0xc40 [ 83.388324][ T4289] ? slot_put+0x1e0/0x1e0 [ 83.392734][ T4289] ? __lock_acquire+0x7d10/0x7d10 [ 83.398390][ T4289] ? do_raw_spin_lock+0x128/0x2f0 [ 83.403428][ T4289] ? do_sync+0x4a3/0xc40 [ 83.407926][ T4289] ? do_raw_spin_unlock+0x11d/0x230 [ 83.413480][ T4289] gfs2_quota_sync+0x32c/0x700 [ 83.418698][ T4289] gfs2_sync_fs+0x48/0xb0 [ 83.423148][ T4289] sync_filesystem+0xe6/0x220 [ 83.427912][ T4289] generic_shutdown_super+0x6b/0x300 [ 83.433461][ T4289] kill_block_super+0x7c/0xe0 [ 83.438480][ T4289] deactivate_locked_super+0x93/0xf0 [ 83.443934][ T4289] cleanup_mnt+0x42d/0x4e0 [ 83.448453][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 83.453898][ T4289] task_work_run+0x125/0x1a0 [ 83.458585][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 83.464007][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 83.469641][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 83.475111][ T4289] do_syscall_64+0x58/0xa0 [ 83.479524][ T4289] ? clear_bhb_loop+0x30/0x80 [ 83.484370][ T4289] ? clear_bhb_loop+0x30/0x80 [ 83.489408][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.495683][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 83.500640][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 83.521362][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.530257][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 83.538340][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 83.546326][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 83.554293][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 83.562405][ T4289] R13: 00007f2e38990f90 R14: 00000000000141d7 R15: 00007ffda01036d0 [ 83.570759][ T4289] [ 83.575326][ T4289] ================================================================== [ 83.583719][ T4289] BUG: KASAN: use-after-free in qd_unlock+0x30/0x2d0 [ 83.590657][ T4289] Read of size 8 at addr ffff88805d4081e0 by task syz-executor/4289 [ 83.598883][ T4289] [ 83.601208][ T4289] CPU: 1 PID: 4289 Comm: syz-executor Not tainted syzkaller #0 [ 83.609002][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.619143][ T4289] Call Trace: [ 83.622599][ T4289] [ 83.625524][ T4289] dump_stack_lvl+0x188/0x250 [ 83.630285][ T4289] ? show_regs_print_info+0x20/0x20 [ 83.635758][ T4289] ? _printk+0xda/0x130 [ 83.640062][ T4289] ? qd_unlock+0x30/0x2d0 [ 83.644643][ T4289] ? load_image+0x400/0x400 [ 83.649541][ T4289] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 83.655142][ T4289] print_address_description+0x60/0x2d0 [ 83.660794][ T4289] ? qd_unlock+0x30/0x2d0 [ 83.665245][ T4289] kasan_report+0xdf/0x130 [ 83.669856][ T4289] ? qd_unlock+0x30/0x2d0 [ 83.674277][ T4289] kasan_check_range+0x235/0x290 [ 83.679534][ T4289] qd_unlock+0x30/0x2d0 [ 83.684122][ T4289] gfs2_quota_sync+0x5cf/0x700 [ 83.689090][ T4289] gfs2_sync_fs+0x48/0xb0 [ 83.693966][ T4289] sync_filesystem+0xe6/0x220 [ 83.698752][ T4289] generic_shutdown_super+0x6b/0x300 [ 83.704996][ T4289] kill_block_super+0x7c/0xe0 [ 83.709788][ T4289] deactivate_locked_super+0x93/0xf0 [ 83.715066][ T4289] cleanup_mnt+0x42d/0x4e0 [ 83.720126][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 83.725570][ T4289] task_work_run+0x125/0x1a0 [ 83.730877][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 83.736481][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 83.742569][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 83.748641][ T4289] do_syscall_64+0x58/0xa0 [ 83.753240][ T4289] ? clear_bhb_loop+0x30/0x80 [ 83.758523][ T4289] ? clear_bhb_loop+0x30/0x80 [ 83.763193][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.769258][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 83.773795][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 83.793865][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.802472][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 83.810648][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 83.818808][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 83.827077][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 83.835250][ T4289] R13: 00007f2e38990f90 R14: 00000000000141d7 R15: 00007ffda01036d0 [ 83.844302][ T4289] [ 83.847776][ T4289] [ 83.850105][ T4289] Allocated by task 4347: [ 83.854605][ T4289] __kasan_slab_alloc+0x9c/0xd0 [ 83.859716][ T4289] slab_post_alloc_hook+0x4c/0x380 [ 83.866138][ T4289] kmem_cache_alloc+0x100/0x290 [ 83.871486][ T4289] qd_alloc+0x50/0x260 [ 83.875878][ T4289] gfs2_quota_init+0x74e/0xea0 [ 83.880865][ T4289] gfs2_make_fs_rw+0x414/0x580 [ 83.886074][ T4289] gfs2_fill_super+0x1837/0x1f00 [ 83.891128][ T4289] get_tree_bdev+0x3f1/0x610 [ 83.895724][ T4289] gfs2_get_tree+0x4d/0x1e0 [ 83.900508][ T4289] vfs_get_tree+0x88/0x270 [ 83.905468][ T4289] do_new_mount+0x24a/0xa40 [ 83.910319][ T4289] __se_sys_mount+0x2e3/0x3d0 [ 83.915094][ T4289] do_syscall_64+0x4c/0xa0 [ 83.919610][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.926230][ T4289] [ 83.928549][ T4289] Freed by task 0: [ 83.932342][ T4289] kasan_set_track+0x4b/0x70 [ 83.937570][ T4289] kasan_set_free_info+0x1f/0x40 [ 83.942534][ T4289] ____kasan_slab_free+0xd5/0x110 [ 83.947640][ T4289] slab_free_freelist_hook+0xea/0x170 [ 83.953001][ T4289] kmem_cache_free+0x8f/0x210 [ 83.957721][ T4289] rcu_core+0x9d2/0x1670 [ 83.962086][ T4289] handle_softirqs+0x339/0x830 [ 83.966853][ T4289] __irq_exit_rcu+0x13b/0x230 [ 83.971662][ T4289] irq_exit_rcu+0x5/0x20 [ 83.976027][ T4289] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 83.981820][ T4289] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.987813][ T4289] [ 83.990141][ T4289] Last potentially related work creation: [ 83.996200][ T4289] kasan_save_stack+0x35/0x60 [ 84.001233][ T4289] kasan_record_aux_stack+0xb8/0x100 [ 84.007079][ T4289] call_rcu+0x189/0x950 [ 84.011325][ T4289] gfs2_quota_cleanup+0x43c/0x6a0 [ 84.016348][ T4289] gfs2_make_fs_ro+0x440/0x620 [ 84.021202][ T4289] gfs2_withdraw+0x610/0x1490 [ 84.026101][ T4289] gfs2_inode_refresh+0xb64/0xff0 [ 84.031372][ T4289] inode_go_lock+0x127/0x470 [ 84.036185][ T4289] do_promote+0x741/0xab0 [ 84.040569][ T4289] finish_xmote+0x4df/0xb00 [ 84.045078][ T4289] do_xmote+0x7b6/0x1120 [ 84.049360][ T4289] gfs2_glock_nq+0xc7a/0x1550 [ 84.054225][ T4289] do_sync+0x4ab/0xc40 [ 84.058386][ T4289] gfs2_quota_sync+0x32c/0x700 [ 84.063140][ T4289] gfs2_sync_fs+0x48/0xb0 [ 84.067462][ T4289] sync_filesystem+0xe6/0x220 [ 84.072519][ T4289] generic_shutdown_super+0x6b/0x300 [ 84.077981][ T4289] kill_block_super+0x7c/0xe0 [ 84.082649][ T4289] deactivate_locked_super+0x93/0xf0 [ 84.088017][ T4289] cleanup_mnt+0x42d/0x4e0 [ 84.092566][ T4289] task_work_run+0x125/0x1a0 [ 84.097501][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 84.102884][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 84.108917][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 84.114555][ T4289] do_syscall_64+0x58/0xa0 [ 84.119147][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.125413][ T4289] [ 84.127775][ T4289] The buggy address belongs to the object at ffff88805d408150 [ 84.127775][ T4289] which belongs to the cache gfs2_quotad of size 272 [ 84.142082][ T4289] The buggy address is located 144 bytes inside of [ 84.142082][ T4289] 272-byte region [ffff88805d408150, ffff88805d408260) [ 84.155350][ T4289] The buggy address belongs to the page: [ 84.160972][ T4289] page:ffffea0001750200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d408 [ 84.171123][ T4289] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 84.178669][ T4289] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888146cfe000 [ 84.187454][ T4289] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 84.196328][ T4289] page dumped because: kasan: bad access detected [ 84.202821][ T4289] page_owner tracks the page as allocated [ 84.208799][ T4289] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4338, ts 78940627802, free_ts 66913502461 [ 84.228990][ T4289] get_page_from_freelist+0x1bbd/0x1ca0 [ 84.234653][ T4289] __alloc_pages+0x1ee/0x480 [ 84.239505][ T4289] new_slab+0xc0/0x4b0 [ 84.243781][ T4289] ___slab_alloc+0x80a/0xdd0 [ 84.248887][ T4289] kmem_cache_alloc+0x195/0x290 [ 84.253905][ T4289] qd_alloc+0x50/0x260 [ 84.258004][ T4289] gfs2_quota_init+0x74e/0xea0 [ 84.262757][ T4289] gfs2_make_fs_rw+0x414/0x580 [ 84.268582][ T4289] gfs2_fill_super+0x1837/0x1f00 [ 84.273800][ T4289] get_tree_bdev+0x3f1/0x610 [ 84.278579][ T4289] gfs2_get_tree+0x4d/0x1e0 [ 84.283252][ T4289] vfs_get_tree+0x88/0x270 [ 84.287661][ T4289] do_new_mount+0x24a/0xa40 [ 84.292156][ T4289] __se_sys_mount+0x2e3/0x3d0 [ 84.296822][ T4289] do_syscall_64+0x4c/0xa0 [ 84.301467][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.307742][ T4289] page last free stack trace: [ 84.312943][ T4289] free_unref_page_prepare+0x637/0x6c0 [ 84.318737][ T4289] free_unref_page+0x8f/0x2a0 [ 84.323550][ T4289] __vunmap+0x8b9/0xa50 [ 84.327710][ T4289] kcov_close+0x27/0x50 [ 84.331877][ T4289] __fput+0x234/0x930 [ 84.335967][ T4289] task_work_run+0x125/0x1a0 [ 84.340940][ T4289] do_exit+0x626/0x20c0 [ 84.345186][ T4289] do_group_exit+0x12e/0x300 [ 84.349865][ T4289] get_signal+0x6ca/0x12c0 [ 84.354279][ T4289] arch_do_signal_or_restart+0xe7/0x12c0 [ 84.360197][ T4289] exit_to_user_mode_loop+0x9e/0x130 [ 84.365585][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 84.371473][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 84.376931][ T4289] do_syscall_64+0x58/0xa0 [ 84.381435][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.387669][ T4289] [ 84.389991][ T4289] Memory state around the buggy address: [ 84.395779][ T4289] ffff88805d408080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.404031][ T4289] ffff88805d408100: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 84.412098][ T4289] >ffff88805d408180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.420472][ T4289] ^ [ 84.428194][ T4289] ffff88805d408200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 84.436657][ T4289] ffff88805d408280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.445234][ T4289] ================================================================== [ 84.453487][ T4289] Disabling lock debugging due to kernel taint [ 84.461521][ T4289] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.468840][ T4289] CPU: 1 PID: 4289 Comm: syz-executor Tainted: G B syzkaller #0 [ 84.478059][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.488452][ T4289] Call Trace: [ 84.491722][ T4289] [ 84.494638][ T4289] dump_stack_lvl+0x188/0x250 [ 84.499307][ T4289] ? show_regs_print_info+0x20/0x20 [ 84.504755][ T4289] ? load_image+0x400/0x400 [ 84.509356][ T4289] panic+0x2e5/0x810 [ 84.513245][ T4289] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 84.519395][ T4289] ? bpf_jit_dump+0xd0/0xd0 [ 84.523990][ T4289] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 84.530053][ T4289] ? _raw_spin_unlock+0x40/0x40 [ 84.534886][ T4289] ? qd_unlock+0x30/0x2d0 [ 84.539201][ T4289] check_panic_on_warn+0x80/0xa0 [ 84.544254][ T4289] ? qd_unlock+0x30/0x2d0 [ 84.548590][ T4289] end_report+0x6d/0xf0 [ 84.552853][ T4289] kasan_report+0x102/0x130 [ 84.557436][ T4289] ? qd_unlock+0x30/0x2d0 [ 84.561756][ T4289] kasan_check_range+0x235/0x290 [ 84.566700][ T4289] qd_unlock+0x30/0x2d0 [ 84.570853][ T4289] gfs2_quota_sync+0x5cf/0x700 [ 84.575616][ T4289] gfs2_sync_fs+0x48/0xb0 [ 84.579932][ T4289] sync_filesystem+0xe6/0x220 [ 84.584659][ T4289] generic_shutdown_super+0x6b/0x300 [ 84.590021][ T4289] kill_block_super+0x7c/0xe0 [ 84.594691][ T4289] deactivate_locked_super+0x93/0xf0 [ 84.600017][ T4289] cleanup_mnt+0x42d/0x4e0 [ 84.604510][ T4289] ? lockdep_hardirqs_on+0x94/0x140 [ 84.609994][ T4289] task_work_run+0x125/0x1a0 [ 84.614683][ T4289] exit_to_user_mode_loop+0x10f/0x130 [ 84.620063][ T4289] exit_to_user_mode_prepare+0xee/0x180 [ 84.625597][ T4289] syscall_exit_to_user_mode+0x16/0x40 [ 84.631128][ T4289] do_syscall_64+0x58/0xa0 [ 84.635543][ T4289] ? clear_bhb_loop+0x30/0x80 [ 84.640221][ T4289] ? clear_bhb_loop+0x30/0x80 [ 84.644889][ T4289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.650769][ T4289] RIP: 0033:0x7f2e388fc9d7 [ 84.655175][ T4289] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 84.675298][ T4289] RSP: 002b:00007ffda0102548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 84.684005][ T4289] RAX: 0000000000000000 RBX: 00007f2e38990f90 RCX: 00007f2e388fc9d7 [ 84.692229][ T4289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda0102600 [ 84.700311][ T4289] RBP: 00007ffda0102600 R08: 00007ffda0103600 R09: 00000000ffffffff [ 84.708654][ T4289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda0103690 [ 84.716749][ T4289] R13: 00007f2e38990f90 R14: 00000000000141d7 R15: 00007ffda01036d0 [ 84.724984][ T4289] [ 84.728461][ T4289] Kernel Offset: disabled [ 84.732783][ T4289] Rebooting in 86400 seconds..