------------[ cut here ]------------ WARNING: CPU: 1 PID: 4326 at include/linux/backing-dev.h:247 inode_to_wb include/linux/backing-dev.h:243 [inline] WARNING: CPU: 1 PID: 4326 at include/linux/backing-dev.h:247 folio_account_dirtied mm/page-writeback.c:2587 [inline] WARNING: CPU: 1 PID: 4326 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8a0/0xcd8 mm/page-writeback.c:2638 Modules linked in: CPU: 1 PID: 4326 Comm: syz-executor Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : inode_to_wb include/linux/backing-dev.h:243 [inline] pc : folio_account_dirtied mm/page-writeback.c:2587 [inline] pc : __folio_mark_dirty+0x8a0/0xcd8 mm/page-writeback.c:2638 lr : inode_to_wb include/linux/backing-dev.h:243 [inline] lr : folio_account_dirtied mm/page-writeback.c:2587 [inline] lr : __folio_mark_dirty+0x8a0/0xcd8 mm/page-writeback.c:2638 sp : ffff8000209876e0 x29: ffff800020987700 x28: 1fffff800065d2a8 x27: dfff800000000000 x26: 0000000000000000 x25: ffff0000c563ea90 x24: 0000000000000001 x23: 0000000000000000 x22: fffffc00032e9548 x21: 1fffe00018ac7d52 x20: ffff0000d20c4c40 x19: fffffc00032e9540 x18: ffff800011b7bf60 x17: ffff800018338000 x16: ffff8000082d7e60 x15: ffff800017e19000 x14: 0000000000000001 x13: 1fffe00018ac7d52 x12: 0000000000ff0100 x11: ff00800008708680 x10: 0000000000000000 x9 : ffff800008708680 x8 : ffff0000dbaf0000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a560e8 x2 : ffff0000cecbe060 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: inode_to_wb include/linux/backing-dev.h:243 [inline] folio_account_dirtied mm/page-writeback.c:2587 [inline] __folio_mark_dirty+0x8a0/0xcd8 mm/page-writeback.c:2638 __set_page_dirty include/linux/pagemap.h:1090 [inline] mark_buffer_dirty+0x2b8/0x5c0 fs/buffer.c:1105 gfs2_unpin+0x120/0x8fc fs/gfs2/lops.c:111 buf_lo_after_commit+0x140/0x188 fs/gfs2/lops.c:747 lops_after_commit fs/gfs2/lops.h:49 [inline] gfs2_log_flush+0xbf0/0x1b10 fs/gfs2/log.c:1116 gfs2_kill_sb+0x5c/0xd4 fs/gfs2/ops_fstype.c:1729 deactivate_locked_super+0xac/0x120 fs/super.c:332 deactivate_super+0xe4/0x104 fs/super.c:363 cleanup_mnt+0x390/0x418 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1ec/0x278 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x1fa0/0x2aa4 arch/arm64/kernel/signal.c:1137 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 149460 hardirqs last enabled at (149459): [] folio_memcg_lock+0xe8/0x1f4 mm/memcontrol.c:2113 hardirqs last disabled at (149460): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (149460): [] _raw_spin_lock_irqsave+0xa4/0xb0 kernel/locking/spinlock.c:162 softirqs last enabled at (149454): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (149454): [] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624 softirqs last disabled at (149251): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4326 at include/linux/backing-dev.h:247 inode_to_wb include/linux/backing-dev.h:243 [inline] WARNING: CPU: 1 PID: 4326 at include/linux/backing-dev.h:247 __folio_start_writeback+0x88c/0xa7c mm/page-writeback.c:3003 Modules linked in: CPU: 1 PID: 4326 Comm: syz-executor Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : inode_to_wb include/linux/backing-dev.h:243 [inline] pc : __folio_start_writeback+0x88c/0xa7c mm/page-writeback.c:3003 lr : inode_to_wb include/linux/backing-dev.h:243 [inline] lr : __folio_start_writeback+0x88c/0xa7c mm/page-writeback.c:3003 sp : ffff800020987180 x29: ffff800020987260 x28: dfff800000000000 x27: 0000000000000000 x26: ffff700004130e38 x25: 0000000000000000 x24: ffff0000d20c4c40 x23: ffff8000209871e0 x22: ffff0000c563e8e8 x21: 0000000000000001 x20: fffffc00032e9548 x19: fffffc00032e9540 x18: ffff800011b7bf60 x17: ffff800018338000 x16: ffff8000082d7e60 x15: 0000000000000000 x14: 0000000000000001 x13: 1fffff800065d2a8 x12: 0000000000ff0100 x11: ff0080000870ab8c x10: 0000000000000000 x9 : ffff80000870ab8c x8 : ffff0000dbaf0000 x7 : ffff80000870a5f8 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000870a638 x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 Call trace: inode_to_wb include/linux/backing-dev.h:243 [inline] __folio_start_writeback+0x88c/0xa7c mm/page-writeback.c:3003 set_page_writeback+0x5c/0x7c mm/folio-compat.c:56 gfs2_aspace_writepage+0x514/0x6dc fs/gfs2/meta_io.c:73 __gfs2_writepage+0x70/0x184 fs/gfs2/log.c:87 write_cache_pages+0x74c/0xde8 mm/page-writeback.c:2382 gfs2_ail1_start_one fs/gfs2/log.c:143 [inline] gfs2_ail1_flush+0x7c4/0xa14 fs/gfs2/log.c:223 gfs2_ail1_start fs/gfs2/log.c:254 [inline] empty_ail1_list+0x130/0x214 fs/gfs2/log.c:986 gfs2_log_flush+0x12a4/0x1b10 fs/gfs2/log.c:1131 gfs2_kill_sb+0x5c/0xd4 fs/gfs2/ops_fstype.c:1729 deactivate_locked_super+0xac/0x120 fs/super.c:332 deactivate_super+0xe4/0x104 fs/super.c:363 cleanup_mnt+0x390/0x418 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1ec/0x278 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x1fa0/0x2aa4 arch/arm64/kernel/signal.c:1137 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 irq event stamp: 149622 hardirqs last enabled at (149621): [] folio_memcg_lock+0xe8/0x1f4 mm/memcontrol.c:2113 hardirqs last disabled at (149622): [] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:108 [inline] hardirqs last disabled at (149622): [] _raw_spin_lock_irqsave+0xa4/0xb0 kernel/locking/spinlock.c:162 softirqs last enabled at (149590): [] softirq_handle_end kernel/softirq.c:439 [inline] softirqs last enabled at (149590): [] handle_softirqs+0xaec/0xc60 kernel/softirq.c:624 softirqs last disabled at (149463): [] __do_softirq+0x14/0x20 kernel/softirq.c:630 ---[ end trace 0000000000000000 ]--- gfs2: fsid=syz:syz.0: original: gfs2_quota_sync+0x2cc/0x500 fs/gfs2/quota.c:1329 gfs2: fsid=syz:syz.0: pid: 4326 gfs2: fsid=syz:syz.0: lock type: 8 req lock state : 1 gfs2: fsid=syz:syz.0: new: gfs2_quota_sync+0x2cc/0x500 fs/gfs2/quota.c:1329 gfs2: fsid=syz:syz.0: pid: 4326 gfs2: fsid=syz:syz.0: lock type: 8 req lock state : 1 gfs2: fsid=syz:syz.0: G: s:EX n:8/1 f:qb t:EX d:EX/0 a:0 v:0 r:5 m:20 p:0 gfs2: fsid=syz:syz.0: H: s:EX f:cH e:0 p:4326 [syz-executor] gfs2_quota_sync+0x2cc/0x500 fs/gfs2/quota.c:1329 ------------[ cut here ]------------ kernel BUG at fs/gfs2/glock.c:1560! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 4326 Comm: syz-executor Tainted: G W syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : add_to_queue fs/gfs2/glock.c:1559 [inline] pc : gfs2_glock_nq+0xec8/0x11c4 fs/gfs2/glock.c:1585 lr : add_to_queue fs/gfs2/glock.c:1559 [inline] lr : gfs2_glock_nq+0xec8/0x11c4 fs/gfs2/glock.c:1585 sp : ffff8000209875f0 x29: ffff800020987660 x28: ffff0000f5a5e600 x27: ffff0000d8151060 x26: ffff0000f051f000 x25: 0000000000000000 x24: 0000000000000400 x23: ffff0000d8151030 x22: ffff0000f5a5e580 x21: ffff0000d815105a x20: ffff0000f5a5e598 x19: 0000000000000008 x18: ffff800011b7bf60 x17: 6667205d726f7475 x16: ffff8000082d9364 x15: 0000000000000000 x14: 0000000000000001 x13: 1ffff00004130d7c x12: 0000000000ff0100 x11: ff0080000a1c96b8 x10: 0000000000000000 x9 : 116b8189c14a1900 x8 : 116b8189c14a1900 x7 : 0000000000000000 x6 : 0000000000000001 x5 : ffff800020986bf8 x4 : 0000000000000004 x3 : 0000000000000030 x2 : 000000000000000c x1 : 0000000000000000 x0 : ffff700004130e6c Call trace: add_to_queue fs/gfs2/glock.c:1559 [inline] gfs2_glock_nq+0xec8/0x11c4 fs/gfs2/glock.c:1585 gfs2_glock_nq_init fs/gfs2/glock.h:255 [inline] do_sync+0x380/0xaec fs/gfs2/quota.c:921 gfs2_quota_sync+0x2cc/0x500 fs/gfs2/quota.c:1329 gfs2_sync_fs+0x4c/0xc4 fs/gfs2/super.c:660 sync_filesystem+0xe8/0x218 fs/sync.c:56 generic_shutdown_super+0x70/0x324 fs/super.c:474 kill_block_super+0x70/0xdc fs/super.c:1470 gfs2_kill_sb+0xc0/0xd4 fs/gfs2/ops_fstype.c:-1 deactivate_locked_super+0xac/0x120 fs/super.c:332 deactivate_super+0xe4/0x104 fs/super.c:363 cleanup_mnt+0x390/0x418 fs/namespace.c:1191 __cleanup_mnt+0x20/0x30 fs/namespace.c:1198 task_work_run+0x1ec/0x278 kernel/task_work.c:203 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline] do_notify_resume+0x1fa0/0x2aa4 arch/arm64/kernel/signal.c:1137 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline] el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585 Code: aa1f03e0 aa1603e1 52800022 97ffe383 (d4210000) ---[ end trace 0000000000000000 ]---