Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. 2025/09/15 01:36:33 ignoring optional flag "type"="gce" 2025/09/15 01:36:33 parsed 1 programs 2025/09/15 01:36:35 executed programs: 0 [ 108.772584][ T6016] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.828516][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.830725][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.831592][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.838194][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.838908][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.044457][ T6036] chnl_net:caif_netlink_parms(): no params data found [ 109.355859][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.355993][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.356107][ T6036] bridge_slave_0: entered allmulticast mode [ 109.358156][ T6036] bridge_slave_0: entered promiscuous mode [ 109.360480][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.360601][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.360703][ T6036] bridge_slave_1: entered allmulticast mode [ 109.362368][ T6036] bridge_slave_1: entered promiscuous mode [ 109.519235][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.522125][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.687125][ T6036] team0: Port device team_slave_0 added [ 109.690201][ T6036] team0: Port device team_slave_1 added [ 109.814990][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.815006][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.815026][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.817705][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.817717][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.817738][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.989319][ T6036] hsr_slave_0: entered promiscuous mode [ 109.990140][ T6036] hsr_slave_1: entered promiscuous mode [ 110.873196][ T5155] Bluetooth: hci0: command tx timeout [ 111.763043][ T6036] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.807969][ T6036] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.848255][ T6036] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.888863][ T6036] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.070898][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.093852][ T6036] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.108809][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.109096][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.126066][ T1465] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.126826][ T1465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.520416][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.602522][ T6036] veth0_vlan: entered promiscuous mode [ 112.619528][ T6036] veth1_vlan: entered promiscuous mode [ 112.685095][ T6036] veth0_macvtap: entered promiscuous mode [ 112.690901][ T6036] veth1_macvtap: entered promiscuous mode [ 112.725670][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.740364][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.760459][ T1465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.760739][ T1465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.760774][ T1465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.760806][ T1465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.953492][ T5155] Bluetooth: hci0: command tx timeout [ 113.710691][ T6121] loop0: detected capacity change from 0 to 32768 [ 113.826248][ T6121] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.826269][ T6121] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 113.927157][ T6121] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 113.944877][ T5868] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 113.944895][ T5868] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 114.229941][ T5868] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 285ms [ 114.235153][ T5868] gfs2: fsid=syz:syz.0: jid=0: Done [ 114.241355][ T6121] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 114.355513][ T6121] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 114.355533][ T6121] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6121, name: syz-executor.0 [ 114.355548][ T6121] preempt_count: 1, expected: 0 [ 114.355556][ T6121] RCU nest depth: 1, expected: 1 [ 114.355575][ T6121] 4 locks held by syz-executor.0/6121: [ 114.355585][ T6121] #0: ffff8880338920d0 (&type->s_umount_key#50/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 2025/09/15 01:36:41 executed programs: 1 [ 114.355649][ T6121] #1: ffffffff8df7ef98 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x845/0x1240 [ 114.355695][ T6121] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 114.355742][ T6121] #3: ffff888025224088 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 114.355790][ T6121] Preemption disabled at: [ 114.355794][ T6121] [] spin_lock_bucket+0x3b/0x150 [ 114.355833][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 114.355852][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.355868][ T6121] Call Trace: [ 114.355875][ T6121] [ 114.355883][ T6121] dump_stack_lvl+0x189/0x250 [ 114.355910][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.355931][ T6121] ? __pfx__printk+0x10/0x10 [ 114.355953][ T6121] ? print_lock_name+0xde/0x100 [ 114.355969][ T6121] ? spin_lock_bucket+0x3b/0x150 [ 114.355990][ T6121] __might_resched+0x44b/0x5d0 [ 114.356013][ T6121] ? spin_lock_bucket+0x3b/0x150 [ 114.356029][ T6121] ? __pfx___might_resched+0x10/0x10 [ 114.356047][ T6121] ? lockref_get_not_dead+0x28/0xd0 [ 114.356080][ T6121] rt_spin_lock+0xc7/0x2c0 [ 114.356103][ T6121] ? __pfx_rt_spin_lock+0x10/0x10 [ 114.356121][ T6121] ? migrate_disable+0xd5/0x190 [ 114.356142][ T6121] ? rt_spin_lock+0x223/0x2c0 [ 114.356164][ T6121] lockref_get_not_dead+0x28/0xd0 [ 114.356185][ T6121] gfs2_qd_search_bucket+0x139/0x210 [ 114.356206][ T6121] gfs2_quota_init+0x85d/0x1240 [ 114.356244][ T6121] ? __pfx_gfs2_quota_init+0x10/0x10 [ 114.356262][ T6121] ? __pfx_wake_up_bit+0x10/0x10 [ 114.356287][ T6121] ? inode_go_inval+0x259/0x2c0 [ 114.356309][ T6121] gfs2_make_fs_rw+0x181/0x2b0 [ 114.356333][ T6121] gfs2_fill_super+0x1af1/0x2120 [ 114.356371][ T6121] ? __pfx_gfs2_fill_super+0x10/0x10 [ 114.356394][ T6121] ? init_locking+0xb8/0x210 [ 114.356412][ T6121] ? sb_set_blocksize+0x104/0x180 [ 114.356433][ T6121] ? setup_bdev_super+0x4c1/0x5b0 [ 114.356456][ T6121] get_tree_bdev_flags+0x40e/0x4d0 [ 114.356476][ T6121] ? __pfx_gfs2_fill_super+0x10/0x10 [ 114.356504][ T6121] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 114.356527][ T6121] ? rcu_is_watching+0x15/0xb0 [ 114.356551][ T6121] ? cap_capable+0x11f/0x460 [ 114.356573][ T6121] gfs2_get_tree+0x51/0x1e0 [ 114.356597][ T6121] vfs_get_tree+0x8f/0x2b0 [ 114.356619][ T6121] do_new_mount+0x2a2/0x9e0 [ 114.356645][ T6121] ? ns_capable+0x8a/0xf0 [ 114.356664][ T6121] ? __pfx_do_new_mount+0x10/0x10 [ 114.356684][ T6121] ? path_mount+0x61c/0xfe0 [ 114.356717][ T6121] __se_sys_mount+0x317/0x410 [ 114.356745][ T6121] ? __pfx___se_sys_mount+0x10/0x10 [ 114.356764][ T6121] ? rcu_is_watching+0x15/0xb0 [ 114.356792][ T6121] ? do_syscall_64+0xbe/0x3b0 [ 114.356807][ T6121] ? __x64_sys_mount+0x20/0xc0 [ 114.356832][ T6121] do_syscall_64+0xfa/0x3b0 [ 114.356849][ T6121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.356865][ T6121] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.356882][ T6121] ? clear_bhb_loop+0x60/0xb0 [ 114.356902][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.356919][ T6121] RIP: 0033:0x7f33d31df5aa [ 114.356941][ T6121] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 114.356954][ T6121] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.356972][ T6121] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 114.356985][ T6121] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 114.356997][ T6121] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 114.357008][ T6121] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 114.357018][ T6121] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 114.357048][ T6121] [ 114.357288][ T6121] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 114.357420][ T6121] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 114.357445][ T6121] CPU: 0 UID: 0 PID: 6121 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 114.357468][ T6121] Tainted: [W]=WARN [ 114.357473][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.357490][ T6121] Call Trace: [ 114.357497][ T6121] [ 114.357504][ T6121] dump_stack_lvl+0x189/0x250 [ 114.357529][ T6121] ? reacquire_held_locks+0x127/0x1d0 [ 114.357554][ T6121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.357577][ T6121] ? __pfx__printk+0x10/0x10 [ 114.357599][ T6121] ? rt_spin_unlock+0x65/0x80 [ 114.357625][ T6121] gfs2_assert_warn_i+0x194/0x2c0 [ 114.357653][ T6121] gfs2_qd_dispose+0x4aa/0x5b0 [ 114.357676][ T6121] gfs2_quota_init+0xcce/0x1240 [ 114.357714][ T6121] ? __pfx_gfs2_quota_init+0x10/0x10 [ 114.357732][ T6121] ? __pfx_wake_up_bit+0x10/0x10 [ 114.357758][ T6121] ? inode_go_inval+0x259/0x2c0 [ 114.357779][ T6121] gfs2_make_fs_rw+0x181/0x2b0 [ 114.357803][ T6121] gfs2_fill_super+0x1af1/0x2120 [ 114.357841][ T6121] ? __pfx_gfs2_fill_super+0x10/0x10 [ 114.357865][ T6121] ? init_locking+0xb8/0x210 [ 114.357883][ T6121] ? sb_set_blocksize+0x104/0x180 [ 114.357902][ T6121] ? setup_bdev_super+0x4c1/0x5b0 [ 114.357926][ T6121] get_tree_bdev_flags+0x40e/0x4d0 [ 114.357947][ T6121] ? __pfx_gfs2_fill_super+0x10/0x10 [ 114.357966][ T6121] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 114.357988][ T6121] ? rcu_is_watching+0x15/0xb0 [ 114.358010][ T6121] ? cap_capable+0x11f/0x460 [ 114.358031][ T6121] gfs2_get_tree+0x51/0x1e0 [ 114.358055][ T6121] vfs_get_tree+0x8f/0x2b0 [ 114.358078][ T6121] do_new_mount+0x2a2/0x9e0 [ 114.358103][ T6121] ? ns_capable+0x8a/0xf0 [ 114.358122][ T6121] ? __pfx_do_new_mount+0x10/0x10 [ 114.358141][ T6121] ? path_mount+0x61c/0xfe0 [ 114.358174][ T6121] __se_sys_mount+0x317/0x410 [ 114.358202][ T6121] ? __pfx___se_sys_mount+0x10/0x10 [ 114.358220][ T6121] ? rcu_is_watching+0x15/0xb0 [ 114.358246][ T6121] ? do_syscall_64+0xbe/0x3b0 [ 114.358261][ T6121] ? __x64_sys_mount+0x20/0xc0 [ 114.358284][ T6121] do_syscall_64+0xfa/0x3b0 [ 114.358300][ T6121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.358315][ T6121] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.358331][ T6121] ? clear_bhb_loop+0x60/0xb0 [ 114.358351][ T6121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.358366][ T6121] RIP: 0033:0x7f33d31df5aa [ 114.358381][ T6121] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 114.358394][ T6121] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.358411][ T6121] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 114.358423][ T6121] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 114.358434][ T6121] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 114.358445][ T6121] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 114.358455][ T6121] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 114.358488][ T6121] [ 114.401784][ T6121] gfs2: fsid=syz:syz.0: found 1 quota changes [ 115.033538][ T5155] Bluetooth: hci0: command tx timeout [ 115.745992][ T6159] loop0: detected capacity change from 0 to 32768 [ 115.781914][ T6159] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.781932][ T6159] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 115.809845][ T6159] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 115.829543][ T5867] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 115.829562][ T5867] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 115.955231][ T5867] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 115.955463][ T5867] gfs2: fsid=syz:syz.0: jid=0: Done [ 115.956852][ T6159] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 116.070606][ T6159] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 116.070625][ T6159] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6159, name: syz-executor.0 [ 116.070646][ T6159] preempt_count: 1, expected: 0 [ 116.070654][ T6159] RCU nest depth: 1, expected: 1 [ 116.070662][ T6159] 4 locks held by syz-executor.0/6159: [ 116.070672][ T6159] #0: ffff8880357ca0d0 (&type->s_umount_key#50/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 116.070727][ T6159] #1: ffffffff8df7ef98 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x845/0x1240 [ 116.070773][ T6159] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 116.070815][ T6159] #3: ffff88803e8ac088 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 116.070861][ T6159] Preemption disabled at: [ 116.070866][ T6159] [] spin_lock_bucket+0x3b/0x150 [ 116.070894][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 116.070916][ T6159] Tainted: [W]=WARN [ 116.070922][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.070931][ T6159] Call Trace: [ 116.070939][ T6159] [ 116.070950][ T6159] dump_stack_lvl+0x189/0x250 [ 116.070977][ T6159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.070999][ T6159] ? __pfx__printk+0x10/0x10 [ 116.071022][ T6159] ? print_lock_name+0xde/0x100 [ 116.071039][ T6159] ? spin_lock_bucket+0x3b/0x150 [ 116.071060][ T6159] __might_resched+0x44b/0x5d0 [ 116.071083][ T6159] ? spin_lock_bucket+0x3b/0x150 [ 116.071098][ T6159] ? __pfx___might_resched+0x10/0x10 [ 116.071116][ T6159] ? lockref_get_not_dead+0x28/0xd0 [ 116.071150][ T6159] rt_spin_lock+0xc7/0x2c0 [ 116.071173][ T6159] ? __pfx_rt_spin_lock+0x10/0x10 [ 116.071191][ T6159] ? migrate_disable+0xd5/0x190 [ 116.071213][ T6159] ? rt_spin_lock+0x223/0x2c0 [ 116.071237][ T6159] lockref_get_not_dead+0x28/0xd0 [ 116.071259][ T6159] gfs2_qd_search_bucket+0x139/0x210 [ 116.071286][ T6159] gfs2_quota_init+0x85d/0x1240 [ 116.071327][ T6159] ? __pfx_gfs2_quota_init+0x10/0x10 [ 116.071352][ T6159] ? __pfx_wake_up_bit+0x10/0x10 [ 116.071380][ T6159] ? inode_go_inval+0x259/0x2c0 [ 116.071401][ T6159] gfs2_make_fs_rw+0x181/0x2b0 [ 116.071426][ T6159] gfs2_fill_super+0x1af1/0x2120 [ 116.071461][ T6159] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.071485][ T6159] ? init_locking+0xb8/0x210 [ 116.071503][ T6159] ? sb_set_blocksize+0x104/0x180 [ 116.071524][ T6159] ? setup_bdev_super+0x4c1/0x5b0 [ 116.071549][ T6159] get_tree_bdev_flags+0x40e/0x4d0 [ 116.071569][ T6159] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.071589][ T6159] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 116.071611][ T6159] ? rcu_is_watching+0x15/0xb0 [ 116.071635][ T6159] ? cap_capable+0x11f/0x460 [ 116.071656][ T6159] gfs2_get_tree+0x51/0x1e0 [ 116.071681][ T6159] vfs_get_tree+0x8f/0x2b0 [ 116.071704][ T6159] do_new_mount+0x2a2/0x9e0 [ 116.071729][ T6159] ? ns_capable+0x8a/0xf0 [ 116.071748][ T6159] ? __pfx_do_new_mount+0x10/0x10 [ 116.071769][ T6159] ? path_mount+0x61c/0xfe0 [ 116.071800][ T6159] __se_sys_mount+0x317/0x410 [ 116.071828][ T6159] ? __pfx___se_sys_mount+0x10/0x10 [ 116.071846][ T6159] ? rcu_is_watching+0x15/0xb0 [ 116.071872][ T6159] ? do_syscall_64+0xbe/0x3b0 [ 116.071886][ T6159] ? __x64_sys_mount+0x20/0xc0 [ 116.071909][ T6159] do_syscall_64+0xfa/0x3b0 [ 116.071923][ T6159] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.071944][ T6159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.071960][ T6159] ? clear_bhb_loop+0x60/0xb0 [ 116.071981][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.071997][ T6159] RIP: 0033:0x7f33d31df5aa [ 116.072013][ T6159] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 116.072025][ T6159] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.072042][ T6159] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 116.072055][ T6159] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 116.072066][ T6159] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 116.072076][ T6159] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 116.072086][ T6159] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 116.072111][ T6159] [ 116.072143][ T6159] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 116.202958][ T6159] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 116.202989][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 116.203011][ T6159] Tainted: [W]=WARN [ 116.203016][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.203026][ T6159] Call Trace: [ 116.203033][ T6159] [ 116.203040][ T6159] dump_stack_lvl+0x189/0x250 [ 116.203067][ T6159] ? reacquire_held_locks+0x127/0x1d0 [ 116.203091][ T6159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.203113][ T6159] ? __pfx__printk+0x10/0x10 [ 116.203136][ T6159] ? rt_spin_unlock+0x65/0x80 [ 116.203169][ T6159] gfs2_assert_warn_i+0x194/0x2c0 [ 116.203196][ T6159] gfs2_qd_dispose+0x4aa/0x5b0 [ 116.203220][ T6159] gfs2_quota_init+0xcce/0x1240 [ 116.203261][ T6159] ? __pfx_gfs2_quota_init+0x10/0x10 [ 116.203279][ T6159] ? __pfx_wake_up_bit+0x10/0x10 [ 116.203306][ T6159] ? inode_go_inval+0x259/0x2c0 [ 116.203328][ T6159] gfs2_make_fs_rw+0x181/0x2b0 [ 116.203352][ T6159] gfs2_fill_super+0x1af1/0x2120 [ 116.203388][ T6159] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.203411][ T6159] ? init_locking+0xb8/0x210 [ 116.203429][ T6159] ? sb_set_blocksize+0x104/0x180 [ 116.203449][ T6159] ? setup_bdev_super+0x4c1/0x5b0 [ 116.203473][ T6159] get_tree_bdev_flags+0x40e/0x4d0 [ 116.203494][ T6159] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.203514][ T6159] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 116.203538][ T6159] ? rcu_is_watching+0x15/0xb0 [ 116.203561][ T6159] ? cap_capable+0x11f/0x460 [ 116.203582][ T6159] gfs2_get_tree+0x51/0x1e0 [ 116.203605][ T6159] vfs_get_tree+0x8f/0x2b0 [ 116.203627][ T6159] do_new_mount+0x2a2/0x9e0 [ 116.203653][ T6159] ? ns_capable+0x8a/0xf0 [ 116.203672][ T6159] ? __pfx_do_new_mount+0x10/0x10 [ 116.203691][ T6159] ? path_mount+0x61c/0xfe0 [ 116.203722][ T6159] __se_sys_mount+0x317/0x410 [ 116.203750][ T6159] ? __pfx___se_sys_mount+0x10/0x10 [ 116.203770][ T6159] ? rcu_is_watching+0x15/0xb0 [ 116.203797][ T6159] ? do_syscall_64+0xbe/0x3b0 [ 116.203812][ T6159] ? __x64_sys_mount+0x20/0xc0 [ 116.203836][ T6159] do_syscall_64+0xfa/0x3b0 [ 116.203850][ T6159] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.203872][ T6159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.203889][ T6159] ? clear_bhb_loop+0x60/0xb0 [ 116.203910][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.203926][ T6159] RIP: 0033:0x7f33d31df5aa [ 116.203941][ T6159] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 116.203955][ T6159] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.203974][ T6159] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 116.203986][ T6159] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 116.203998][ T6159] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 116.204009][ T6159] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 116.204020][ T6159] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 116.204049][ T6159] [ 116.276273][ T6159] gfs2: fsid=syz:syz.0: found 1 quota changes [ 117.113690][ T5155] Bluetooth: hci0: command tx timeout [ 117.424969][ T6189] loop0: detected capacity change from 0 to 32768 [ 117.472521][ T6189] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 117.472541][ T6189] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 117.528047][ T6189] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 117.532039][ T5867] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 117.532056][ T5867] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 117.693024][ T5867] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 160ms [ 117.696128][ T5867] gfs2: fsid=syz:syz.0: jid=0: Done [ 117.696222][ T6189] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 117.810896][ T6189] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 117.810914][ T6189] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6189, name: syz-executor.0 [ 117.810926][ T6189] preempt_count: 1, expected: 0 [ 117.810934][ T6189] RCU nest depth: 1, expected: 1 [ 117.810942][ T6189] 4 locks held by syz-executor.0/6189: [ 117.810952][ T6189] #0: ffff8880429c00d0 (&type->s_umount_key#50/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 117.811006][ T6189] #1: ffffffff8df7ef98 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x845/0x1240 [ 117.811071][ T6189] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 117.811119][ T6189] #3: ffff88803e8ac3a8 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 117.811161][ T6189] Preemption disabled at: [ 117.811166][ T6189] [] spin_lock_bucket+0x3b/0x150 [ 117.811193][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 117.811214][ T6189] Tainted: [W]=WARN [ 117.811219][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.811228][ T6189] Call Trace: [ 117.811234][ T6189] [ 117.811240][ T6189] dump_stack_lvl+0x189/0x250 [ 117.811263][ T6189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.811281][ T6189] ? __pfx__printk+0x10/0x10 [ 117.811298][ T6189] ? print_lock_name+0xde/0x100 [ 117.811311][ T6189] ? spin_lock_bucket+0x3b/0x150 [ 117.811328][ T6189] __might_resched+0x44b/0x5d0 [ 117.811347][ T6189] ? spin_lock_bucket+0x3b/0x150 [ 117.811360][ T6189] ? __pfx___might_resched+0x10/0x10 [ 117.811374][ T6189] ? lockref_get_not_dead+0x28/0xd0 [ 117.811399][ T6189] rt_spin_lock+0xc7/0x2c0 [ 117.811417][ T6189] ? __pfx_rt_spin_lock+0x10/0x10 [ 117.811431][ T6189] ? migrate_disable+0xd5/0x190 [ 117.811448][ T6189] ? rt_spin_lock+0x223/0x2c0 [ 117.811467][ T6189] lockref_get_not_dead+0x28/0xd0 [ 117.811484][ T6189] gfs2_qd_search_bucket+0x139/0x210 [ 117.811502][ T6189] gfs2_quota_init+0x85d/0x1240 [ 117.811533][ T6189] ? __pfx_gfs2_quota_init+0x10/0x10 [ 117.811546][ T6189] ? __pfx_wake_up_bit+0x10/0x10 [ 117.811567][ T6189] ? inode_go_inval+0x259/0x2c0 [ 117.811585][ T6189] gfs2_make_fs_rw+0x181/0x2b0 [ 117.811604][ T6189] gfs2_fill_super+0x1af1/0x2120 [ 117.811633][ T6189] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.811652][ T6189] ? init_locking+0xb8/0x210 [ 117.811666][ T6189] ? sb_set_blocksize+0x104/0x180 [ 117.811682][ T6189] ? setup_bdev_super+0x4c1/0x5b0 [ 117.811700][ T6189] get_tree_bdev_flags+0x40e/0x4d0 [ 117.811716][ T6189] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.811733][ T6189] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.811750][ T6189] ? rcu_is_watching+0x15/0xb0 [ 117.811770][ T6189] ? cap_capable+0x11f/0x460 [ 117.811787][ T6189] gfs2_get_tree+0x51/0x1e0 [ 117.811806][ T6189] vfs_get_tree+0x8f/0x2b0 [ 117.811824][ T6189] do_new_mount+0x2a2/0x9e0 [ 117.811844][ T6189] ? ns_capable+0x8a/0xf0 [ 117.811859][ T6189] ? __pfx_do_new_mount+0x10/0x10 [ 117.811876][ T6189] ? path_mount+0x61c/0xfe0 [ 117.811901][ T6189] __se_sys_mount+0x317/0x410 [ 117.811923][ T6189] ? __pfx___se_sys_mount+0x10/0x10 [ 117.811938][ T6189] ? rcu_is_watching+0x15/0xb0 [ 117.811960][ T6189] ? do_syscall_64+0xbe/0x3b0 [ 117.811971][ T6189] ? __x64_sys_mount+0x20/0xc0 [ 117.811990][ T6189] do_syscall_64+0xfa/0x3b0 [ 117.812001][ T6189] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.812018][ T6189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.812031][ T6189] ? clear_bhb_loop+0x60/0xb0 [ 117.812047][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.812060][ T6189] RIP: 0033:0x7f33d31df5aa [ 117.812072][ T6189] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 117.812089][ T6189] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.812103][ T6189] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 117.812112][ T6189] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 117.812121][ T6189] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 117.812130][ T6189] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 117.812138][ T6189] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 117.812160][ T6189] [ 117.812179][ T6189] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 117.812275][ T6189] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 117.812298][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 117.812320][ T6189] Tainted: [W]=WARN [ 117.812326][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.812334][ T6189] Call Trace: [ 117.812341][ T6189] [ 117.812348][ T6189] dump_stack_lvl+0x189/0x250 [ 117.812371][ T6189] ? reacquire_held_locks+0x127/0x1d0 [ 117.812395][ T6189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.812417][ T6189] ? __pfx__printk+0x10/0x10 [ 117.812439][ T6189] ? rt_spin_unlock+0x65/0x80 [ 117.812465][ T6189] gfs2_assert_warn_i+0x194/0x2c0 [ 117.812494][ T6189] gfs2_qd_dispose+0x4aa/0x5b0 [ 117.812517][ T6189] gfs2_quota_init+0xcce/0x1240 [ 117.812559][ T6189] ? __pfx_gfs2_quota_init+0x10/0x10 [ 117.812577][ T6189] ? __pfx_wake_up_bit+0x10/0x10 [ 117.812603][ T6189] ? inode_go_inval+0x259/0x2c0 [ 117.812625][ T6189] gfs2_make_fs_rw+0x181/0x2b0 [ 117.812649][ T6189] gfs2_fill_super+0x1af1/0x2120 [ 117.812686][ T6189] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.812710][ T6189] ? init_locking+0xb8/0x210 [ 117.812728][ T6189] ? sb_set_blocksize+0x104/0x180 [ 117.812748][ T6189] ? setup_bdev_super+0x4c1/0x5b0 [ 117.812771][ T6189] get_tree_bdev_flags+0x40e/0x4d0 [ 117.812792][ T6189] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.812821][ T6189] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.812848][ T6189] ? rcu_is_watching+0x15/0xb0 [ 117.812871][ T6189] ? cap_capable+0x11f/0x460 [ 117.812894][ T6189] gfs2_get_tree+0x51/0x1e0 [ 117.812915][ T6189] vfs_get_tree+0x8f/0x2b0 [ 117.812937][ T6189] do_new_mount+0x2a2/0x9e0 [ 117.812959][ T6189] ? ns_capable+0x8a/0xf0 [ 117.812977][ T6189] ? __pfx_do_new_mount+0x10/0x10 [ 117.812997][ T6189] ? path_mount+0x61c/0xfe0 [ 117.813030][ T6189] __se_sys_mount+0x317/0x410 [ 117.813057][ T6189] ? __pfx___se_sys_mount+0x10/0x10 [ 117.813075][ T6189] ? rcu_is_watching+0x15/0xb0 [ 117.813113][ T6189] ? do_syscall_64+0xbe/0x3b0 [ 117.813127][ T6189] ? __x64_sys_mount+0x20/0xc0 [ 117.813151][ T6189] do_syscall_64+0xfa/0x3b0 [ 117.813166][ T6189] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.813187][ T6189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.813204][ T6189] ? clear_bhb_loop+0x60/0xb0 [ 117.813223][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.813239][ T6189] RIP: 0033:0x7f33d31df5aa [ 117.813254][ T6189] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 117.813267][ T6189] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.813284][ T6189] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 117.813297][ T6189] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 117.813308][ T6189] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 117.813319][ T6189] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 117.813329][ T6189] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 117.813359][ T6189] [ 117.870196][ T6189] gfs2: fsid=syz:syz.0: found 1 quota changes [ 119.363761][ T6222] loop0: detected capacity change from 0 to 32768 [ 119.408233][ T6222] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 119.408251][ T6222] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 119.441024][ T6222] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 119.458759][ T5867] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 119.458778][ T5867] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 119.604580][ T5867] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 145ms [ 119.607409][ T5867] gfs2: fsid=syz:syz.0: jid=0: Done [ 119.607457][ T6222] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 119.743435][ T6222] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 119.743456][ T6222] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6222, name: syz-executor.0 [ 119.743471][ T6222] preempt_count: 1, expected: 0 [ 119.743480][ T6222] RCU nest depth: 1, expected: 1 [ 119.743488][ T6222] 4 locks held by syz-executor.0/6222: [ 119.743499][ T6222] #0: ffff88803153e0d0 (&type->s_umount_key#50/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 2025/09/15 01:36:46 executed programs: 4 [ 119.743583][ T6222] #1: ffffffff8df7ef98 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x845/0x1240 [ 119.743625][ T6222] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 119.743668][ T6222] #3: ffff888025224538 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 119.743716][ T6222] Preemption disabled at: [ 119.743720][ T6222] [] spin_lock_bucket+0x3b/0x150 [ 119.743755][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 119.743778][ T6222] Tainted: [W]=WARN [ 119.743784][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.743796][ T6222] Call Trace: [ 119.743803][ T6222] [ 119.743811][ T6222] dump_stack_lvl+0x189/0x250 [ 119.743838][ T6222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.743861][ T6222] ? __pfx__printk+0x10/0x10 [ 119.743890][ T6222] ? print_lock_name+0xde/0x100 [ 119.743907][ T6222] ? spin_lock_bucket+0x3b/0x150 [ 119.743929][ T6222] __might_resched+0x44b/0x5d0 [ 119.743953][ T6222] ? spin_lock_bucket+0x3b/0x150 [ 119.743969][ T6222] ? __pfx___might_resched+0x10/0x10 [ 119.743988][ T6222] ? lockref_get_not_dead+0x28/0xd0 [ 119.744022][ T6222] rt_spin_lock+0xc7/0x2c0 [ 119.744044][ T6222] ? __pfx_rt_spin_lock+0x10/0x10 [ 119.744067][ T6222] ? migrate_disable+0xd5/0x190 [ 119.744089][ T6222] ? rt_spin_lock+0x223/0x2c0 [ 119.744113][ T6222] lockref_get_not_dead+0x28/0xd0 [ 119.744134][ T6222] gfs2_qd_search_bucket+0x139/0x210 [ 119.744157][ T6222] gfs2_quota_init+0x85d/0x1240 [ 119.744199][ T6222] ? __pfx_gfs2_quota_init+0x10/0x10 [ 119.744217][ T6222] ? __pfx_wake_up_bit+0x10/0x10 [ 119.744245][ T6222] ? inode_go_inval+0x259/0x2c0 [ 119.744267][ T6222] gfs2_make_fs_rw+0x181/0x2b0 [ 119.744292][ T6222] gfs2_fill_super+0x1af1/0x2120 [ 119.744329][ T6222] ? __pfx_gfs2_fill_super+0x10/0x10 [ 119.744353][ T6222] ? init_locking+0xb8/0x210 [ 119.744371][ T6222] ? sb_set_blocksize+0x104/0x180 [ 119.744392][ T6222] ? setup_bdev_super+0x4c1/0x5b0 [ 119.744422][ T6222] get_tree_bdev_flags+0x40e/0x4d0 [ 119.744443][ T6222] ? __pfx_gfs2_fill_super+0x10/0x10 [ 119.744464][ T6222] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 119.744487][ T6222] ? rcu_is_watching+0x15/0xb0 [ 119.744510][ T6222] ? cap_capable+0x11f/0x460 [ 119.744533][ T6222] gfs2_get_tree+0x51/0x1e0 [ 119.744558][ T6222] vfs_get_tree+0x8f/0x2b0 [ 119.744581][ T6222] do_new_mount+0x2a2/0x9e0 [ 119.744606][ T6222] ? ns_capable+0x8a/0xf0 [ 119.744625][ T6222] ? __pfx_do_new_mount+0x10/0x10 [ 119.744645][ T6222] ? path_mount+0x61c/0xfe0 [ 119.744678][ T6222] __se_sys_mount+0x317/0x410 [ 119.744706][ T6222] ? __pfx___se_sys_mount+0x10/0x10 [ 119.744725][ T6222] ? rcu_is_watching+0x15/0xb0 [ 119.744753][ T6222] ? do_syscall_64+0xbe/0x3b0 [ 119.744767][ T6222] ? __x64_sys_mount+0x20/0xc0 [ 119.744791][ T6222] do_syscall_64+0xfa/0x3b0 [ 119.744805][ T6222] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.744827][ T6222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.744843][ T6222] ? clear_bhb_loop+0x60/0xb0 [ 119.744864][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.744885][ T6222] RIP: 0033:0x7f33d31df5aa [ 119.744906][ T6222] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 119.744919][ T6222] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.744936][ T6222] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 119.744949][ T6222] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 119.744960][ T6222] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 119.744971][ T6222] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 119.744982][ T6222] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 119.745013][ T6222] [ 119.745045][ T6222] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 119.750378][ T6222] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 119.750411][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 119.750435][ T6222] Tainted: [W]=WARN [ 119.750441][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.750450][ T6222] Call Trace: [ 119.750457][ T6222] [ 119.750465][ T6222] dump_stack_lvl+0x189/0x250 [ 119.750492][ T6222] ? reacquire_held_locks+0x127/0x1d0 [ 119.750517][ T6222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.750539][ T6222] ? __pfx__printk+0x10/0x10 [ 119.750561][ T6222] ? rt_spin_unlock+0x65/0x80 [ 119.750587][ T6222] gfs2_assert_warn_i+0x194/0x2c0 [ 119.750615][ T6222] gfs2_qd_dispose+0x4aa/0x5b0 [ 119.750638][ T6222] gfs2_quota_init+0xcce/0x1240 [ 119.750679][ T6222] ? __pfx_gfs2_quota_init+0x10/0x10 [ 119.750696][ T6222] ? __pfx_wake_up_bit+0x10/0x10 [ 119.750720][ T6222] ? inode_go_inval+0x259/0x2c0 [ 119.750741][ T6222] gfs2_make_fs_rw+0x181/0x2b0 [ 119.750765][ T6222] gfs2_fill_super+0x1af1/0x2120 [ 119.750800][ T6222] ? __pfx_gfs2_fill_super+0x10/0x10 [ 119.750821][ T6222] ? init_locking+0xb8/0x210 [ 119.750839][ T6222] ? sb_set_blocksize+0x104/0x180 [ 119.750857][ T6222] ? setup_bdev_super+0x4c1/0x5b0 [ 119.750889][ T6222] get_tree_bdev_flags+0x40e/0x4d0 [ 119.750909][ T6222] ? __pfx_gfs2_fill_super+0x10/0x10 [ 119.750928][ T6222] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 119.750950][ T6222] ? rcu_is_watching+0x15/0xb0 [ 119.750972][ T6222] ? cap_capable+0x11f/0x460 [ 119.750994][ T6222] gfs2_get_tree+0x51/0x1e0 [ 119.751018][ T6222] vfs_get_tree+0x8f/0x2b0 [ 119.751039][ T6222] do_new_mount+0x2a2/0x9e0 [ 119.751064][ T6222] ? ns_capable+0x8a/0xf0 [ 119.751083][ T6222] ? __pfx_do_new_mount+0x10/0x10 [ 119.751102][ T6222] ? path_mount+0x61c/0xfe0 [ 119.751131][ T6222] __se_sys_mount+0x317/0x410 [ 119.751159][ T6222] ? __pfx___se_sys_mount+0x10/0x10 [ 119.751178][ T6222] ? rcu_is_watching+0x15/0xb0 [ 119.751203][ T6222] ? do_syscall_64+0xbe/0x3b0 [ 119.751217][ T6222] ? __x64_sys_mount+0x20/0xc0 [ 119.751241][ T6222] do_syscall_64+0xfa/0x3b0 [ 119.751255][ T6222] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.751276][ T6222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.751292][ T6222] ? clear_bhb_loop+0x60/0xb0 [ 119.751312][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.751328][ T6222] RIP: 0033:0x7f33d31df5aa [ 119.751343][ T6222] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 119.751356][ T6222] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.751375][ T6222] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 119.751391][ T6222] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 119.751403][ T6222] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 119.751414][ T6222] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 119.751424][ T6222] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 119.751457][ T6222] [ 119.814447][ T6222] gfs2: fsid=syz:syz.0: found 1 quota changes [ 120.773413][ T6251] loop0: detected capacity change from 0 to 32768 [ 120.793486][ T6251] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 120.793502][ T6251] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 120.836433][ T6251] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 120.840523][ T44] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 120.840540][ T44] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 120.935955][ T44] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 95ms [ 120.936131][ T44] gfs2: fsid=syz:syz.0: jid=0: Done [ 120.936202][ T6251] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 121.001545][ T6251] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 121.001567][ T6251] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6251, name: syz-executor.0 [ 121.001581][ T6251] preempt_count: 1, expected: 0 [ 121.001590][ T6251] RCU nest depth: 1, expected: 1 [ 121.001599][ T6251] 4 locks held by syz-executor.0/6251: [ 121.001609][ T6251] #0: ffff88803ed2a0d0 (&type->s_umount_key#50/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 121.001667][ T6251] #1: ffffffff8df7ef98 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x845/0x1240 [ 121.001699][ T6251] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 121.001723][ T6251] #3: ffff8880252246c8 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 121.001749][ T6251] Preemption disabled at: [ 121.001752][ T6251] [] spin_lock_bucket+0x3b/0x150 [ 121.001769][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 121.001783][ T6251] Tainted: [W]=WARN [ 121.001786][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.001792][ T6251] Call Trace: [ 121.001797][ T6251] [ 121.001803][ T6251] dump_stack_lvl+0x189/0x250 [ 121.001828][ T6251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.001841][ T6251] ? __pfx__printk+0x10/0x10 [ 121.001853][ T6251] ? print_lock_name+0xde/0x100 [ 121.001862][ T6251] ? spin_lock_bucket+0x3b/0x150 [ 121.001874][ T6251] __might_resched+0x44b/0x5d0 [ 121.001888][ T6251] ? spin_lock_bucket+0x3b/0x150 [ 121.001897][ T6251] ? __pfx___might_resched+0x10/0x10 [ 121.001907][ T6251] ? lockref_get_not_dead+0x28/0xd0 [ 121.001925][ T6251] rt_spin_lock+0xc7/0x2c0 [ 121.001938][ T6251] ? __pfx_rt_spin_lock+0x10/0x10 [ 121.001948][ T6251] ? migrate_disable+0xd5/0x190 [ 121.001961][ T6251] ? rt_spin_lock+0x223/0x2c0 [ 121.001974][ T6251] lockref_get_not_dead+0x28/0xd0 [ 121.001987][ T6251] gfs2_qd_search_bucket+0x139/0x210 [ 121.001999][ T6251] gfs2_quota_init+0x85d/0x1240 [ 121.002021][ T6251] ? __pfx_gfs2_quota_init+0x10/0x10 [ 121.002034][ T6251] ? __pfx_wake_up_bit+0x10/0x10 [ 121.002049][ T6251] ? inode_go_inval+0x259/0x2c0 [ 121.002062][ T6251] gfs2_make_fs_rw+0x181/0x2b0 [ 121.002078][ T6251] gfs2_fill_super+0x1af1/0x2120 [ 121.002099][ T6251] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.002112][ T6251] ? init_locking+0xb8/0x210 [ 121.002123][ T6251] ? sb_set_blocksize+0x104/0x180 [ 121.002135][ T6251] ? setup_bdev_super+0x4c1/0x5b0 [ 121.002148][ T6251] get_tree_bdev_flags+0x40e/0x4d0 [ 121.002160][ T6251] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.002172][ T6251] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 121.002185][ T6251] ? rcu_is_watching+0x15/0xb0 [ 121.002199][ T6251] ? cap_capable+0x11f/0x460 [ 121.002212][ T6251] gfs2_get_tree+0x51/0x1e0 [ 121.002226][ T6251] vfs_get_tree+0x8f/0x2b0 [ 121.002239][ T6251] do_new_mount+0x2a2/0x9e0 [ 121.002254][ T6251] ? ns_capable+0x8a/0xf0 [ 121.002266][ T6251] ? __pfx_do_new_mount+0x10/0x10 [ 121.002278][ T6251] ? path_mount+0x61c/0xfe0 [ 121.002296][ T6251] __se_sys_mount+0x317/0x410 [ 121.002312][ T6251] ? __pfx___se_sys_mount+0x10/0x10 [ 121.002324][ T6251] ? rcu_is_watching+0x15/0xb0 [ 121.002340][ T6251] ? do_syscall_64+0xbe/0x3b0 [ 121.002347][ T6251] ? __x64_sys_mount+0x20/0xc0 [ 121.002361][ T6251] do_syscall_64+0xfa/0x3b0 [ 121.002369][ T6251] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.002382][ T6251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.002392][ T6251] ? clear_bhb_loop+0x60/0xb0 [ 121.002403][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.002412][ T6251] RIP: 0033:0x7f33d31df5aa [ 121.002422][ T6251] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 121.002430][ T6251] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.002440][ T6251] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 121.002446][ T6251] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 121.002453][ T6251] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 121.002459][ T6251] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 121.002465][ T6251] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 121.002480][ T6251] [ 121.002503][ T6251] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 121.002588][ T6251] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 121.002611][ T6251] CPU: 0 UID: 0 PID: 6251 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 121.002629][ T6251] Tainted: [W]=WARN [ 121.002633][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.002638][ T6251] Call Trace: [ 121.002642][ T6251] [ 121.002646][ T6251] dump_stack_lvl+0x189/0x250 [ 121.002661][ T6251] ? reacquire_held_locks+0x127/0x1d0 [ 121.002675][ T6251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.002689][ T6251] ? __pfx__printk+0x10/0x10 [ 121.002701][ T6251] ? rt_spin_unlock+0x65/0x80 [ 121.002715][ T6251] gfs2_assert_warn_i+0x194/0x2c0 [ 121.002732][ T6251] gfs2_qd_dispose+0x4aa/0x5b0 [ 121.002751][ T6251] gfs2_quota_init+0xcce/0x1240 [ 121.002772][ T6251] ? __pfx_gfs2_quota_init+0x10/0x10 [ 121.002787][ T6251] ? __pfx_wake_up_bit+0x10/0x10 [ 121.002802][ T6251] ? inode_go_inval+0x259/0x2c0 [ 121.002814][ T6251] gfs2_make_fs_rw+0x181/0x2b0 [ 121.002834][ T6251] gfs2_fill_super+0x1af1/0x2120 [ 121.002855][ T6251] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.002874][ T6251] ? init_locking+0xb8/0x210 [ 121.002892][ T6251] ? sb_set_blocksize+0x104/0x180 [ 121.002910][ T6251] ? setup_bdev_super+0x4c1/0x5b0 [ 121.002930][ T6251] get_tree_bdev_flags+0x40e/0x4d0 [ 121.002950][ T6251] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.002969][ T6251] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 121.002990][ T6251] ? rcu_is_watching+0x15/0xb0 [ 121.003011][ T6251] ? cap_capable+0x11f/0x460 [ 121.003032][ T6251] gfs2_get_tree+0x51/0x1e0 [ 121.003055][ T6251] vfs_get_tree+0x8f/0x2b0 [ 121.003078][ T6251] do_new_mount+0x2a2/0x9e0 [ 121.003103][ T6251] ? ns_capable+0x8a/0xf0 [ 121.003121][ T6251] ? __pfx_do_new_mount+0x10/0x10 [ 121.003142][ T6251] ? path_mount+0x61c/0xfe0 [ 121.003174][ T6251] __se_sys_mount+0x317/0x410 [ 121.003202][ T6251] ? __pfx___se_sys_mount+0x10/0x10 [ 121.003221][ T6251] ? rcu_is_watching+0x15/0xb0 [ 121.003249][ T6251] ? do_syscall_64+0xbe/0x3b0 [ 121.003263][ T6251] ? __x64_sys_mount+0x20/0xc0 [ 121.003287][ T6251] do_syscall_64+0xfa/0x3b0 [ 121.003301][ T6251] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.003322][ T6251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.003339][ T6251] ? clear_bhb_loop+0x60/0xb0 [ 121.003359][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.003375][ T6251] RIP: 0033:0x7f33d31df5aa [ 121.003390][ T6251] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 121.003403][ T6251] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.003420][ T6251] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 121.003433][ T6251] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 121.003445][ T6251] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 121.003456][ T6251] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 121.003466][ T6251] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 121.003495][ T6251] [ 121.047077][ T6251] gfs2: fsid=syz:syz.0: found 1 quota changes [ 121.986050][ T6261] loop0: detected capacity change from 0 to 32768 [ 122.008951][ T6261] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 122.008976][ T6261] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 122.042722][ T6261] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 122.053553][ T44] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 122.053570][ T44] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 122.161482][ T44] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms [ 122.162678][ T44] gfs2: fsid=syz:syz.0: jid=0: Done [ 122.162768][ T6261] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 122.259554][ T6261] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 122.259576][ T6261] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6261, name: syz-executor.0 [ 122.259591][ T6261] preempt_count: 1, expected: 0 [ 122.259599][ T6261] RCU nest depth: 1, expected: 1 [ 122.259608][ T6261] 4 locks held by syz-executor.0/6261: [ 122.259618][ T6261] #0: ffff88803c9900d0 (&type->s_umount_key#50/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 122.259673][ T6261] #1: ffffffff8df7ef98 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x845/0x1240 [ 122.259702][ T6261] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 122.259726][ T6261] #3: ffff8880252249e8 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 122.259752][ T6261] Preemption disabled at: [ 122.259755][ T6261] [] spin_lock_bucket+0x3b/0x150 [ 122.259772][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 122.259785][ T6261] Tainted: [W]=WARN [ 122.259789][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.259794][ T6261] Call Trace: [ 122.259799][ T6261] [ 122.259804][ T6261] dump_stack_lvl+0x189/0x250 [ 122.259820][ T6261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.259833][ T6261] ? __pfx__printk+0x10/0x10 [ 122.259846][ T6261] ? print_lock_name+0xde/0x100 [ 122.259855][ T6261] ? spin_lock_bucket+0x3b/0x150 [ 122.259866][ T6261] __might_resched+0x44b/0x5d0 [ 122.259880][ T6261] ? spin_lock_bucket+0x3b/0x150 [ 122.259889][ T6261] ? __pfx___might_resched+0x10/0x10 [ 122.259900][ T6261] ? lockref_get_not_dead+0x28/0xd0 [ 122.259918][ T6261] rt_spin_lock+0xc7/0x2c0 [ 122.259932][ T6261] ? __pfx_rt_spin_lock+0x10/0x10 [ 122.259943][ T6261] ? migrate_disable+0xd5/0x190 [ 122.259956][ T6261] ? rt_spin_lock+0x223/0x2c0 [ 122.259969][ T6261] lockref_get_not_dead+0x28/0xd0 [ 122.259981][ T6261] gfs2_qd_search_bucket+0x139/0x210 [ 122.259994][ T6261] gfs2_quota_init+0x85d/0x1240 [ 122.260016][ T6261] ? __pfx_gfs2_quota_init+0x10/0x10 [ 122.260026][ T6261] ? __pfx_wake_up_bit+0x10/0x10 [ 122.260041][ T6261] ? inode_go_inval+0x259/0x2c0 [ 122.260053][ T6261] gfs2_make_fs_rw+0x181/0x2b0 [ 122.260068][ T6261] gfs2_fill_super+0x1af1/0x2120 [ 122.260089][ T6261] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.260103][ T6261] ? init_locking+0xb8/0x210 [ 122.260113][ T6261] ? sb_set_blocksize+0x104/0x180 [ 122.260125][ T6261] ? setup_bdev_super+0x4c1/0x5b0 [ 122.260138][ T6261] get_tree_bdev_flags+0x40e/0x4d0 [ 122.260150][ T6261] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.260162][ T6261] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 122.260175][ T6261] ? rcu_is_watching+0x15/0xb0 [ 122.260190][ T6261] ? cap_capable+0x11f/0x460 [ 122.260203][ T6261] gfs2_get_tree+0x51/0x1e0 [ 122.260217][ T6261] vfs_get_tree+0x8f/0x2b0 [ 122.260230][ T6261] do_new_mount+0x2a2/0x9e0 [ 122.260245][ T6261] ? ns_capable+0x8a/0xf0 [ 122.260256][ T6261] ? __pfx_do_new_mount+0x10/0x10 [ 122.260269][ T6261] ? path_mount+0x61c/0xfe0 [ 122.260286][ T6261] __se_sys_mount+0x317/0x410 [ 122.260314][ T6261] ? __pfx___se_sys_mount+0x10/0x10 [ 122.260325][ T6261] ? rcu_is_watching+0x15/0xb0 [ 122.260345][ T6261] ? do_syscall_64+0xbe/0x3b0 [ 122.260353][ T6261] ? __x64_sys_mount+0x20/0xc0 [ 122.260366][ T6261] do_syscall_64+0xfa/0x3b0 [ 122.260374][ T6261] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.260388][ T6261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.260397][ T6261] ? clear_bhb_loop+0x60/0xb0 [ 122.260409][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.260418][ T6261] RIP: 0033:0x7f33d31df5aa [ 122.260427][ T6261] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 122.260435][ T6261] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.260444][ T6261] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 122.260452][ T6261] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 122.260458][ T6261] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 122.260464][ T6261] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 122.260470][ T6261] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 122.260485][ T6261] [ 122.260510][ T6261] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 122.260599][ T6261] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 122.260622][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 122.260640][ T6261] Tainted: [W]=WARN [ 122.260644][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.260649][ T6261] Call Trace: [ 122.260653][ T6261] [ 122.260657][ T6261] dump_stack_lvl+0x189/0x250 [ 122.260673][ T6261] ? reacquire_held_locks+0x127/0x1d0 [ 122.260752][ T6261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.260765][ T6261] ? __pfx__printk+0x10/0x10 [ 122.260778][ T6261] ? rt_spin_unlock+0x65/0x80 [ 122.260793][ T6261] gfs2_assert_warn_i+0x194/0x2c0 [ 122.260809][ T6261] gfs2_qd_dispose+0x4aa/0x5b0 [ 122.260823][ T6261] gfs2_quota_init+0xcce/0x1240 [ 122.260844][ T6261] ? __pfx_gfs2_quota_init+0x10/0x10 [ 122.260854][ T6261] ? __pfx_wake_up_bit+0x10/0x10 [ 122.260871][ T6261] ? inode_go_inval+0x259/0x2c0 [ 122.260891][ T6261] gfs2_make_fs_rw+0x181/0x2b0 [ 122.260905][ T6261] gfs2_fill_super+0x1af1/0x2120 [ 122.260926][ T6261] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.260944][ T6261] ? init_locking+0xb8/0x210 [ 122.260956][ T6261] ? sb_set_blocksize+0x104/0x180 [ 122.260967][ T6261] ? setup_bdev_super+0x4c1/0x5b0 [ 122.260981][ T6261] get_tree_bdev_flags+0x40e/0x4d0 [ 122.260993][ T6261] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.261005][ T6261] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 122.261018][ T6261] ? rcu_is_watching+0x15/0xb0 [ 122.261032][ T6261] ? cap_capable+0x11f/0x460 [ 122.261045][ T6261] gfs2_get_tree+0x51/0x1e0 [ 122.261058][ T6261] vfs_get_tree+0x8f/0x2b0 [ 122.261072][ T6261] do_new_mount+0x2a2/0x9e0 [ 122.261086][ T6261] ? ns_capable+0x8a/0xf0 [ 122.261098][ T6261] ? __pfx_do_new_mount+0x10/0x10 [ 122.261112][ T6261] ? path_mount+0x61c/0xfe0 [ 122.261133][ T6261] __se_sys_mount+0x317/0x410 [ 122.261149][ T6261] ? __pfx___se_sys_mount+0x10/0x10 [ 122.261161][ T6261] ? rcu_is_watching+0x15/0xb0 [ 122.261177][ T6261] ? do_syscall_64+0xbe/0x3b0 [ 122.261185][ T6261] ? __x64_sys_mount+0x20/0xc0 [ 122.261199][ T6261] do_syscall_64+0xfa/0x3b0 [ 122.261207][ T6261] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.261219][ T6261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.261228][ T6261] ? clear_bhb_loop+0x60/0xb0 [ 122.261240][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.261249][ T6261] RIP: 0033:0x7f33d31df5aa [ 122.261257][ T6261] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 122.261264][ T6261] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.261274][ T6261] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 122.261281][ T6261] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 122.261288][ T6261] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 122.261295][ T6261] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 122.261301][ T6261] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 122.261316][ T6261] [ 122.318812][ T6261] gfs2: fsid=syz:syz.0: found 1 quota changes [ 123.169588][ T6267] loop0: detected capacity change from 0 to 32768 [ 123.185328][ T6267] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.185345][ T6267] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 123.198130][ T6267] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 123.200827][ T5868] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 123.200843][ T5868] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 123.318498][ T5868] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 117ms [ 123.318683][ T5868] gfs2: fsid=syz:syz.0: jid=0: Done [ 123.321686][ T6267] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 123.398832][ T6267] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 123.398853][ T6267] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6267, name: syz-executor.0 [ 123.398868][ T6267] preempt_count: 1, expected: 0 [ 123.398877][ T6267] RCU nest depth: 1, expected: 1 [ 123.398885][ T6267] 4 locks held by syz-executor.0/6267: [ 123.398896][ T6267] #0: ffff88803adb60d0 (&type->s_umount_key#50/1){+.+.}-{4:4}, at: alloc_super+0x204/0x990 [ 123.398952][ T6267] #1: ffffffff8df7ef98 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x845/0x1240 [ 123.398994][ T6267] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 123.399041][ T6267] #3: ffff888025224b78 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 123.399089][ T6267] Preemption disabled at: [ 123.399093][ T6267] [] spin_lock_bucket+0x3b/0x150 [ 123.399123][ T6267] CPU: 1 UID: 0 PID: 6267 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 123.399146][ T6267] Tainted: [W]=WARN [ 123.399152][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.399161][ T6267] Call Trace: [ 123.399168][ T6267] [ 123.399176][ T6267] dump_stack_lvl+0x189/0x250 [ 123.399203][ T6267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.399226][ T6267] ? __pfx__printk+0x10/0x10 [ 123.399249][ T6267] ? print_lock_name+0xde/0x100 [ 123.399265][ T6267] ? spin_lock_bucket+0x3b/0x150 [ 123.399287][ T6267] __might_resched+0x44b/0x5d0 [ 123.399311][ T6267] ? spin_lock_bucket+0x3b/0x150 [ 123.399327][ T6267] ? __pfx___might_resched+0x10/0x10 [ 123.399346][ T6267] ? lockref_get_not_dead+0x28/0xd0 [ 123.399380][ T6267] rt_spin_lock+0xc7/0x2c0 [ 123.399402][ T6267] ? __pfx_rt_spin_lock+0x10/0x10 [ 123.399421][ T6267] ? migrate_disable+0xd5/0x190 [ 123.399447][ T6267] ? rt_spin_lock+0x223/0x2c0 [ 123.399471][ T6267] lockref_get_not_dead+0x28/0xd0 [ 123.399494][ T6267] gfs2_qd_search_bucket+0x139/0x210 [ 123.399516][ T6267] gfs2_quota_init+0x85d/0x1240 [ 123.399556][ T6267] ? __pfx_gfs2_quota_init+0x10/0x10 [ 123.399574][ T6267] ? __pfx_wake_up_bit+0x10/0x10 [ 123.399599][ T6267] ? inode_go_inval+0x259/0x2c0 [ 123.399613][ T6267] gfs2_make_fs_rw+0x181/0x2b0 [ 123.399628][ T6267] gfs2_fill_super+0x1af1/0x2120 [ 123.399648][ T6267] ? __pfx_gfs2_fill_super+0x10/0x10 [ 123.399662][ T6267] ? init_locking+0xb8/0x210 [ 123.399680][ T6267] ? sb_set_blocksize+0x104/0x180 [ 123.399692][ T6267] ? setup_bdev_super+0x4c1/0x5b0 [ 123.399706][ T6267] get_tree_bdev_flags+0x40e/0x4d0 [ 123.399718][ T6267] ? __pfx_gfs2_fill_super+0x10/0x10 [ 123.399729][ T6267] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 123.399742][ T6267] ? rcu_is_watching+0x15/0xb0 [ 123.399757][ T6267] ? cap_capable+0x11f/0x460 [ 123.399769][ T6267] gfs2_get_tree+0x51/0x1e0 [ 123.399783][ T6267] vfs_get_tree+0x8f/0x2b0 [ 123.399796][ T6267] do_new_mount+0x2a2/0x9e0 [ 123.399811][ T6267] ? ns_capable+0x8a/0xf0 [ 123.399823][ T6267] ? __pfx_do_new_mount+0x10/0x10 [ 123.399834][ T6267] ? path_mount+0x61c/0xfe0 [ 123.399852][ T6267] __se_sys_mount+0x317/0x410 [ 123.399868][ T6267] ? __pfx___se_sys_mount+0x10/0x10 [ 123.399880][ T6267] ? rcu_is_watching+0x15/0xb0 [ 123.399896][ T6267] ? do_syscall_64+0xbe/0x3b0 [ 123.399904][ T6267] ? __x64_sys_mount+0x20/0xc0 [ 123.399921][ T6267] do_syscall_64+0xfa/0x3b0 [ 123.399929][ T6267] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.399942][ T6267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.399952][ T6267] ? clear_bhb_loop+0x60/0xb0 [ 123.399963][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.399972][ T6267] RIP: 0033:0x7f33d31df5aa [ 123.399981][ T6267] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 123.399989][ T6267] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.399999][ T6267] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 123.400006][ T6267] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 123.400012][ T6267] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 123.400019][ T6267] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 123.400024][ T6267] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 123.400040][ T6267] [ 123.400062][ T6267] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 123.400143][ T6267] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 123.400165][ T6267] CPU: 1 UID: 0 PID: 6267 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 123.400187][ T6267] Tainted: [W]=WARN [ 123.400191][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.400196][ T6267] Call Trace: [ 123.400201][ T6267] [ 123.400205][ T6267] dump_stack_lvl+0x189/0x250 [ 123.400220][ T6267] ? reacquire_held_locks+0x127/0x1d0 [ 123.400234][ T6267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.400247][ T6267] ? __pfx__printk+0x10/0x10 [ 123.400260][ T6267] ? rt_spin_unlock+0x65/0x80 [ 123.400274][ T6267] gfs2_assert_warn_i+0x194/0x2c0 [ 123.400290][ T6267] gfs2_qd_dispose+0x4aa/0x5b0 [ 123.400303][ T6267] gfs2_quota_init+0xcce/0x1240 [ 123.400328][ T6267] ? __pfx_gfs2_quota_init+0x10/0x10 [ 123.400338][ T6267] ? __pfx_wake_up_bit+0x10/0x10 [ 123.400353][ T6267] ? inode_go_inval+0x259/0x2c0 [ 123.400365][ T6267] gfs2_make_fs_rw+0x181/0x2b0 [ 123.400380][ T6267] gfs2_fill_super+0x1af1/0x2120 [ 123.400400][ T6267] ? __pfx_gfs2_fill_super+0x10/0x10 [ 123.400414][ T6267] ? init_locking+0xb8/0x210 [ 123.400425][ T6267] ? sb_set_blocksize+0x104/0x180 [ 123.400436][ T6267] ? setup_bdev_super+0x4c1/0x5b0 [ 123.400449][ T6267] get_tree_bdev_flags+0x40e/0x4d0 [ 123.400461][ T6267] ? __pfx_gfs2_fill_super+0x10/0x10 [ 123.400473][ T6267] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 123.400486][ T6267] ? rcu_is_watching+0x15/0xb0 [ 123.400500][ T6267] ? cap_capable+0x11f/0x460 [ 123.400512][ T6267] gfs2_get_tree+0x51/0x1e0 [ 123.400525][ T6267] vfs_get_tree+0x8f/0x2b0 [ 123.400538][ T6267] do_new_mount+0x2a2/0x9e0 [ 123.400553][ T6267] ? ns_capable+0x8a/0xf0 [ 123.400564][ T6267] ? __pfx_do_new_mount+0x10/0x10 [ 123.400576][ T6267] ? path_mount+0x61c/0xfe0 [ 123.400594][ T6267] __se_sys_mount+0x317/0x410 [ 123.400610][ T6267] ? __pfx___se_sys_mount+0x10/0x10 [ 123.400621][ T6267] ? rcu_is_watching+0x15/0xb0 [ 123.400637][ T6267] ? do_syscall_64+0xbe/0x3b0 [ 123.400645][ T6267] ? __x64_sys_mount+0x20/0xc0 [ 123.400659][ T6267] do_syscall_64+0xfa/0x3b0 [ 123.400674][ T6267] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.400686][ T6267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.400695][ T6267] ? clear_bhb_loop+0x60/0xb0 [ 123.400706][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.400715][ T6267] RIP: 0033:0x7f33d31df5aa [ 123.400723][ T6267] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 123.400731][ T6267] RSP: 002b:00007f33d255def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 123.400740][ T6267] RAX: ffffffffffffffda RBX: 00007f33d255df80 RCX: 00007f33d31df5aa [ 123.400747][ T6267] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f33d255df40 [ 123.400753][ T6267] RBP: 0000000020000080 R08: 00007f33d255df80 R09: 0000000000000008 [ 123.400759][ T6267] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 123.400765][ T6267] R13: 00007f33d255df40 R14: 0000000000012692 R15: 00000000200001c0 [ 123.400780][ T6267] [ 123.466126][ T6267] gfs2: fsid=syz:syz.0: found 1 quota changes [ 124.304071][ T6273] loop0: detected capacity change from 0 to 32768 [ 124.325958][ T6273] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 124.325977][ T6273] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 124.339149][ T6273] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 124.341668][ T5222] gfs2: fsid=syz:syz.0: jid=0, already locked for use