[ 472.859857][ T9330] loop0: detected capacity change from 0 to 32768 [ 472.934418][ T9330] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 472.971272][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.0.555 Not tainted syzkaller #0 PREEMPT(full) [ 472.971299][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.971310][ T9330] Call Trace: [ 472.971318][ T9330] [ 472.971326][ T9330] dump_stack_lvl+0x189/0x250 [ 472.971359][ T9330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.971384][ T9330] ? __pfx__printk+0x10/0x10 [ 472.971408][ T9330] ? kernfs_path_from_node+0x250/0x290 [ 472.971430][ T9330] ? kernfs_path_from_node+0x2f/0x290 [ 472.971454][ T9330] sysfs_create_dir_ns+0x259/0x280 [ 472.971479][ T9330] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 472.971500][ T9330] ? do_raw_spin_unlock+0x122/0x240 [ 472.971519][ T9330] kobject_add_internal+0x59f/0xb70 [ 472.971542][ T9330] kobject_init_and_add+0x125/0x190 [ 472.971561][ T9330] ? __pfx_kobject_init_and_add+0x10/0x10 [ 472.971578][ T9330] ? __raw_spin_lock_init+0x45/0x100 [ 472.971594][ T9330] ? __init_swait_queue_head+0xa9/0x150 [ 472.971612][ T9330] gfs2_sys_fs_add+0x234/0x450 [ 472.971641][ T9330] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 472.971662][ T9330] ? is_dynamic_key+0xd6/0x1c0 [ 472.971679][ T9330] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 472.971703][ T9330] gfs2_fill_super+0x1388/0x21b0 [ 472.971744][ T9330] ? __pfx_gfs2_fill_super+0x10/0x10 [ 472.971768][ T9330] ? sb_set_blocksize+0x155/0x240 [ 472.971785][ T9330] ? setup_bdev_super+0x4c1/0x5b0 [ 472.971804][ T9330] get_tree_bdev_flags+0x40e/0x4d0 [ 472.971820][ T9330] ? __pfx_gfs2_fill_super+0x10/0x10 [ 472.971840][ T9330] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 472.971855][ T9330] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 472.971876][ T9330] gfs2_get_tree+0x51/0x1e0 [ 472.971899][ T9330] vfs_get_tree+0x92/0x2b0 [ 472.971917][ T9330] do_new_mount+0x302/0xa10 [ 472.971934][ T9330] ? apparmor_capable+0x137/0x1b0 [ 472.971956][ T9330] ? __pfx_do_new_mount+0x10/0x10 [ 472.971975][ T9330] ? ns_capable+0x8a/0xf0 [ 472.971995][ T9330] ? kmem_cache_free+0x197/0x640 [ 472.972020][ T9330] __se_sys_mount+0x313/0x410 [ 472.972043][ T9330] ? __pfx___se_sys_mount+0x10/0x10 [ 472.972065][ T9330] ? do_syscall_64+0xbe/0xfa0 [ 472.972077][ T9330] ? __x64_sys_mount+0x20/0xc0 [ 472.972098][ T9330] do_syscall_64+0xfa/0xfa0 [ 472.972112][ T9330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.972126][ T9330] ? clear_bhb_loop+0x60/0xb0 [ 472.972142][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.972156][ T9330] RIP: 0033:0x7f4e3dd9038a [ 472.972170][ T9330] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.972182][ T9330] RSP: 002b:00007f4e3ec8de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 472.972198][ T9330] RAX: ffffffffffffffda RBX: 00007f4e3ec8def0 RCX: 00007f4e3dd9038a [ 472.972209][ T9330] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f4e3ec8deb0 [ 472.972219][ T9330] RBP: 000020000001f680 R08: 00007f4e3ec8def0 R09: 0000000000000084 [ 472.972229][ T9330] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 472.972238][ T9330] R13: 00007f4e3ec8deb0 R14: 000000000001f790 R15: 00002000000001c0 [ 472.972261][ T9330] [ 472.972432][ T9330] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 473.374640][ T9330] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 473.497643][ T9332] loop3: detected capacity change from 0 to 32768 [ 473.644083][ T9332] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 473.737561][ T9332] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 473.838256][ T9332] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 473.909148][ T6507] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 473.915959][ T6507] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 474.132219][ T6507] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 216ms [ 474.170608][ T6507] gfs2: fsid=syz:syz.0: jid=0: Done [ 474.176062][ T9332] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 474.220085][ T9332] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 474.444375][ T6626] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.539377][ T6626] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.626133][ T6626] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.734592][ T6626] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.889239][ T6626] bridge_slave_1: left allmulticast mode [ 474.894934][ T6626] bridge_slave_1: left promiscuous mode [ 474.900915][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.909889][ T6626] bridge_slave_0: left allmulticast mode [ 474.915716][ T6626] bridge_slave_0: left promiscuous mode [ 474.922111][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.187869][ T6626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.199380][ T6626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.209945][ T6626] bond0 (unregistering): Released all slaves [ 475.555031][ T6626] hsr_slave_0: left promiscuous mode [ 475.561946][ T6626] hsr_slave_1: left promiscuous mode [ 475.568759][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.576194][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.588011][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.596127][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.621126][ T6626] veth1_macvtap: left promiscuous mode [ 475.629480][ T6626] veth0_macvtap: left promiscuous mode [ 475.635220][ T6626] veth1_vlan: left promiscuous mode [ 475.642570][ T6626] veth0_vlan: left promiscuous mode [ 476.023776][ T6626] team0 (unregistering): Port device team_slave_1 removed [ 476.058884][ T6626] team0 (unregistering): Port device team_slave_0 removed [ 476.723153][ T6626] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.815806][ T6626] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.874991][ T6626] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.939261][ T6626] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.114537][ T6626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.199127][ T6626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.296277][ T6626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.383233][ T6626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.587769][ T6626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.682950][ T6626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.803283][ T6626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.889351][ T6626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 478.068430][ T6626] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.166338][ T6626] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.248362][ T6626] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.339728][ T6626] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 executing program executing program executing program executing program [ 478.824927][ T6626] bridge_slave_1: left allmulticast mode [ 478.841691][ T6626] bridge_slave_1: left promiscuous mode [ 478.866861][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state executing program [ 478.914162][ T6626] bridge_slave_0: left allmulticast mode [ 478.938001][ T6626] bridge_slave_0: left promiscuous mode [ 478.965582][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.029105][ T6626] bridge_slave_1: left allmulticast mode [ 479.034808][ T6626] bridge_slave_1: left promiscuous mode [ 479.086872][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.134965][ T6626] bridge_slave_0: left allmulticast mode [ 479.151534][ T6626] bridge_slave_0: left promiscuous mode [ 479.177727][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.259635][ T6626] bridge_slave_1: left allmulticast mode [ 479.265504][ T6626] bridge_slave_1: left promiscuous mode [ 479.305539][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.382578][ T6626] bridge_slave_0: left allmulticast mode [ 479.400702][ T6626] bridge_slave_0: left promiscuous mode [ 479.427519][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.490440][ T6626] bridge_slave_1: left allmulticast mode [ 479.496433][ T6626] bridge_slave_1: left promiscuous mode [ 479.534142][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.616283][ T6626] bridge_slave_0: left allmulticast mode [ 479.655752][ T6626] bridge_slave_0: left promiscuous mode [ 479.676263][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.875419][ T9437] loop4: detected capacity change from 0 to 32768 [ 479.895894][ T9434] loop1: detected capacity change from 0 to 32768 [ 479.966048][ T9437] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 479.974983][ T9434] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 479.983691][ T9436] loop0: detected capacity change from 0 to 32768 [ 480.015438][ T9434] CPU: 0 UID: 0 PID: 9434 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 480.015463][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.015473][ T9434] Call Trace: [ 480.015480][ T9434] [ 480.015488][ T9434] dump_stack_lvl+0x189/0x250 [ 480.015520][ T9434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.015545][ T9434] ? __pfx__printk+0x10/0x10 [ 480.015572][ T9434] ? kernfs_path_from_node+0x250/0x290 [ 480.015590][ T9434] ? kernfs_path_from_node+0x2f/0x290 [ 480.015611][ T9434] sysfs_create_dir_ns+0x259/0x280 [ 480.015633][ T9434] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 480.015655][ T9434] ? do_raw_spin_unlock+0x122/0x240 [ 480.015680][ T9434] kobject_add_internal+0x59f/0xb70 [ 480.015710][ T9434] kobject_init_and_add+0x125/0x190 [ 480.015735][ T9434] ? __pfx_kobject_init_and_add+0x10/0x10 [ 480.015755][ T9434] ? __raw_spin_lock_init+0x45/0x100 [ 480.015774][ T9434] ? __init_swait_queue_head+0xa9/0x150 [ 480.015794][ T9434] gfs2_sys_fs_add+0x234/0x450 [ 480.015818][ T9434] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 480.015846][ T9434] ? is_dynamic_key+0xd6/0x1c0 [ 480.015867][ T9434] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 480.015900][ T9434] gfs2_fill_super+0x1388/0x21b0 [ 480.015942][ T9434] ? __pfx_gfs2_fill_super+0x10/0x10 [ 480.015970][ T9434] ? sb_set_blocksize+0x155/0x240 [ 480.015993][ T9434] ? setup_bdev_super+0x4c1/0x5b0 [ 480.016017][ T9434] get_tree_bdev_flags+0x40e/0x4d0 [ 480.016038][ T9434] ? __pfx_gfs2_fill_super+0x10/0x10 [ 480.016064][ T9434] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 480.016083][ T9434] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 480.016120][ T9434] gfs2_get_tree+0x51/0x1e0 [ 480.016149][ T9434] vfs_get_tree+0x92/0x2b0 [ 480.016171][ T9434] do_new_mount+0x302/0xa10 [ 480.016190][ T9434] ? apparmor_capable+0x137/0x1b0 [ 480.016214][ T9434] ? __pfx_do_new_mount+0x10/0x10 [ 480.016234][ T9434] ? ns_capable+0x8a/0xf0 [ 480.016257][ T9434] ? kmem_cache_free+0x197/0x640 [ 480.016285][ T9434] __se_sys_mount+0x313/0x410 [ 480.016313][ T9434] ? __pfx___se_sys_mount+0x10/0x10 [ 480.016345][ T9434] ? do_syscall_64+0xbe/0xfa0 [ 480.016360][ T9434] ? __x64_sys_mount+0x20/0xc0 [ 480.016384][ T9434] do_syscall_64+0xfa/0xfa0 [ 480.016402][ T9434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.016419][ T9434] ? clear_bhb_loop+0x60/0xb0 [ 480.016440][ T9434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.016458][ T9434] RIP: 0033:0x7f0c1ca9c94a [ 480.016476][ T9434] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 480.016492][ T9434] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 480.016511][ T9434] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 480.016525][ T9434] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 480.016542][ T9434] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 480.016552][ T9434] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 480.016562][ T9434] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 480.016591][ T9434] [ 480.033888][ T9433] loop2: detected capacity change from 0 to 32768 [ 480.037051][ T9437] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 480.256781][ T9434] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 480.407351][ T9436] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 480.414776][ T9436] CPU: 1 UID: 0 PID: 9436 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 480.414801][ T9436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.414813][ T9436] Call Trace: [ 480.414822][ T9436] [ 480.414831][ T9436] dump_stack_lvl+0x189/0x250 [ 480.414865][ T9436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.414889][ T9436] ? __pfx__printk+0x10/0x10 [ 480.414916][ T9436] ? kernfs_path_from_node+0x250/0x290 [ 480.414952][ T9436] ? kernfs_path_from_node+0x2f/0x290 [ 480.414978][ T9436] sysfs_create_dir_ns+0x259/0x280 [ 480.415002][ T9436] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 480.415023][ T9436] ? do_raw_spin_unlock+0x122/0x240 [ 480.415054][ T9436] kobject_add_internal+0x59f/0xb70 [ 480.415081][ T9436] kobject_init_and_add+0x125/0x190 [ 480.415107][ T9436] ? __pfx_kobject_init_and_add+0x10/0x10 [ 480.415127][ T9436] ? __raw_spin_lock_init+0x45/0x100 [ 480.415147][ T9436] ? __init_swait_queue_head+0xa9/0x150 [ 480.415170][ T9436] gfs2_sys_fs_add+0x234/0x450 [ 480.415194][ T9436] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 480.415222][ T9436] ? is_dynamic_key+0xd6/0x1c0 [ 480.415244][ T9436] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 480.415276][ T9436] gfs2_fill_super+0x1388/0x21b0 [ 480.415316][ T9436] ? __pfx_gfs2_fill_super+0x10/0x10 [ 480.415347][ T9436] ? sb_set_blocksize+0x155/0x240 [ 480.415369][ T9436] ? setup_bdev_super+0x4c1/0x5b0 [ 480.415392][ T9436] get_tree_bdev_flags+0x40e/0x4d0 [ 480.415412][ T9436] ? __pfx_gfs2_fill_super+0x10/0x10 [ 480.415436][ T9436] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 480.415455][ T9436] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 480.415484][ T9436] gfs2_get_tree+0x51/0x1e0 [ 480.415513][ T9436] vfs_get_tree+0x92/0x2b0 [ 480.415536][ T9436] do_new_mount+0x302/0xa10 [ 480.415558][ T9436] ? apparmor_capable+0x137/0x1b0 [ 480.415584][ T9436] ? __pfx_do_new_mount+0x10/0x10 [ 480.415606][ T9436] ? ns_capable+0x8a/0xf0 [ 480.415632][ T9436] ? kmem_cache_free+0x197/0x640 [ 480.415665][ T9436] __se_sys_mount+0x313/0x410 [ 480.415695][ T9436] ? __pfx___se_sys_mount+0x10/0x10 [ 480.415723][ T9436] ? do_syscall_64+0xbe/0xfa0 [ 480.415738][ T9436] ? __x64_sys_mount+0x20/0xc0 [ 480.415764][ T9436] do_syscall_64+0xfa/0xfa0 [ 480.415783][ T9436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.415801][ T9436] ? clear_bhb_loop+0x60/0xb0 [ 480.415824][ T9436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.415841][ T9436] RIP: 0033:0x7f0c1ca9c94a [ 480.415859][ T9436] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 480.415874][ T9436] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 480.415894][ T9436] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 480.415908][ T9436] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 480.415921][ T9436] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 480.415934][ T9436] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 480.415946][ T9436] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 480.415984][ T9436] [ 480.416011][ T9436] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 480.454311][ T9437] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 480.518483][ T9436] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 480.519688][ T9433] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 480.646755][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 480.689963][ T9434] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 480.748030][ T9446] loop3: detected capacity change from 0 to 32768 [ 480.868991][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 480.875317][ T9433] CPU: 1 UID: 0 PID: 9433 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 480.875346][ T9433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.875358][ T9433] Call Trace: [ 480.875366][ T9433] [ 480.875374][ T9433] dump_stack_lvl+0x189/0x250 [ 480.875407][ T9433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.875432][ T9433] ? __pfx__printk+0x10/0x10 [ 480.875459][ T9433] ? kernfs_path_from_node+0x250/0x290 [ 480.875479][ T9433] ? kernfs_path_from_node+0x2f/0x290 [ 480.875503][ T9433] sysfs_create_dir_ns+0x259/0x280 [ 480.875527][ T9433] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 480.875550][ T9433] ? do_raw_spin_unlock+0x122/0x240 [ 480.875575][ T9433] kobject_add_internal+0x59f/0xb70 [ 480.875604][ T9433] kobject_init_and_add+0x125/0x190 [ 480.875630][ T9433] ? __pfx_kobject_init_and_add+0x10/0x10 [ 480.875651][ T9433] ? __raw_spin_lock_init+0x45/0x100 [ 480.875672][ T9433] ? __init_swait_queue_head+0xa9/0x150 [ 480.875694][ T9433] gfs2_sys_fs_add+0x234/0x450 [ 480.875718][ T9433] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 480.875745][ T9433] ? is_dynamic_key+0xd6/0x1c0 [ 480.875767][ T9433] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 480.875796][ T9433] gfs2_fill_super+0x1388/0x21b0 [ 480.875833][ T9433] ? __pfx_gfs2_fill_super+0x10/0x10 [ 480.875862][ T9433] ? sb_set_blocksize+0x155/0x240 [ 480.875884][ T9433] ? setup_bdev_super+0x4c1/0x5b0 [ 480.875908][ T9433] get_tree_bdev_flags+0x40e/0x4d0 [ 480.875928][ T9433] ? __pfx_gfs2_fill_super+0x10/0x10 [ 480.875954][ T9433] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 480.875972][ T9433] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 480.876000][ T9433] gfs2_get_tree+0x51/0x1e0 [ 480.876025][ T9433] vfs_get_tree+0x92/0x2b0 [ 480.876043][ T9433] do_new_mount+0x302/0xa10 [ 480.876061][ T9433] ? apparmor_capable+0x137/0x1b0 [ 480.876088][ T9433] ? __pfx_do_new_mount+0x10/0x10 [ 480.876111][ T9433] ? ns_capable+0x8a/0xf0 [ 480.876136][ T9433] ? kmem_cache_free+0x197/0x640 [ 480.876168][ T9433] __se_sys_mount+0x313/0x410 [ 480.876198][ T9433] ? __pfx___se_sys_mount+0x10/0x10 [ 480.876225][ T9433] ? do_syscall_64+0xbe/0xfa0 [ 480.876241][ T9433] ? __x64_sys_mount+0x20/0xc0 [ 480.876287][ T9433] do_syscall_64+0xfa/0xfa0 [ 480.876305][ T9433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.876323][ T9433] ? clear_bhb_loop+0x60/0xb0 [ 480.876344][ T9433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.876361][ T9433] RIP: 0033:0x7f0c1ca9c94a [ 480.876379][ T9433] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 480.876398][ T9433] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 480.876418][ T9433] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 480.876431][ T9433] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 480.876444][ T9433] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 480.876456][ T9433] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 480.876467][ T9433] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 480.876498][ T9433] [ 480.878332][ T9433] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 481.125475][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 256ms the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 481.140213][ T9433] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 481.224637][ T9446] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 481.296328][ T9446] CPU: 0 UID: 0 PID: 9446 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 481.296355][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.296367][ T9446] Call Trace: [ 481.296375][ T9446] [ 481.296384][ T9446] dump_stack_lvl+0x189/0x250 [ 481.296418][ T9446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 481.296443][ T9446] ? __pfx__printk+0x10/0x10 [ 481.296471][ T9446] ? kernfs_path_from_node+0x250/0x290 [ 481.296492][ T9446] ? kernfs_path_from_node+0x2f/0x290 [ 481.296516][ T9446] sysfs_create_dir_ns+0x259/0x280 [ 481.296544][ T9446] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 481.296564][ T9446] ? do_raw_spin_unlock+0x122/0x240 [ 481.296587][ T9446] kobject_add_internal+0x59f/0xb70 [ 481.296615][ T9446] kobject_init_and_add+0x125/0x190 [ 481.296641][ T9446] ? __pfx_kobject_init_and_add+0x10/0x10 [ 481.296662][ T9446] ? __raw_spin_lock_init+0x45/0x100 [ 481.296683][ T9446] ? __init_swait_queue_head+0xa9/0x150 [ 481.296705][ T9446] gfs2_sys_fs_add+0x234/0x450 executing program [ 481.296730][ T9446] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 481.296759][ T9446] ? is_dynamic_key+0xd6/0x1c0 [ 481.296781][ T9446] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 481.296815][ T9446] gfs2_fill_super+0x1388/0x21b0 [ 481.296858][ T9446] ? __pfx_gfs2_fill_super+0x10/0x10 [ 481.296888][ T9446] ? sb_set_blocksize+0x155/0x240 [ 481.296911][ T9446] ? setup_bdev_super+0x4c1/0x5b0 [ 481.296936][ T9446] get_tree_bdev_flags+0x40e/0x4d0 [ 481.296956][ T9446] ? __pfx_gfs2_fill_super+0x10/0x10 [ 481.296980][ T9446] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 481.296997][ T9446] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 481.297025][ T9446] gfs2_get_tree+0x51/0x1e0 [ 481.297052][ T9446] vfs_get_tree+0x92/0x2b0 [ 481.297075][ T9446] do_new_mount+0x302/0xa10 [ 481.297096][ T9446] ? apparmor_capable+0x137/0x1b0 [ 481.297123][ T9446] ? __pfx_do_new_mount+0x10/0x10 [ 481.297145][ T9446] ? ns_capable+0x8a/0xf0 [ 481.297170][ T9446] ? kmem_cache_free+0x197/0x640 [ 481.297202][ T9446] __se_sys_mount+0x313/0x410 [ 481.297239][ T9446] ? __pfx___se_sys_mount+0x10/0x10 [ 481.297267][ T9446] ? do_syscall_64+0xbe/0xfa0 [ 481.297283][ T9446] ? __x64_sys_mount+0x20/0xc0 [ 481.297308][ T9446] do_syscall_64+0xfa/0xfa0 [ 481.297326][ T9446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.297345][ T9446] ? clear_bhb_loop+0x60/0xb0 [ 481.297366][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.297383][ T9446] RIP: 0033:0x7f0c1ca9c94a [ 481.297401][ T9446] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 481.297416][ T9446] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 481.297437][ T9446] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 481.297451][ T9446] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 481.297463][ T9446] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 481.297475][ T9446] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 481.297487][ T9446] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 481.297518][ T9446] [ 481.607827][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 481.613110][ T9437] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 481.638326][ T9446] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. executing program the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 481.811794][ T9446] gfs2: fsid=syz:syz: error -17 adding sysfs files executing program the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 482.335254][ T9469] loop0: detected capacity change from 0 to 32768 [ 482.351216][ T9469] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 482.406669][ T9469] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... executing program [ 482.473453][ T9469] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 482.512038][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 482.557706][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 482.715580][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 157ms executing program [ 482.757678][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done [ 482.766042][ T9469] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 483.123035][ T6626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.161089][ T6626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 483.198881][ T6626] bond0 (unregistering): Released all slaves [ 483.382473][ T9478] loop2: detected capacity change from 0 to 32768 [ 483.407342][ T9476] loop1: detected capacity change from 0 to 32768 [ 483.473876][ T9476] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 483.488182][ T9476] CPU: 1 UID: 0 PID: 9476 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 483.488208][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.488218][ T9476] Call Trace: [ 483.488224][ T9476] [ 483.488232][ T9476] dump_stack_lvl+0x189/0x250 [ 483.488263][ T9476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.488287][ T9476] ? __pfx__printk+0x10/0x10 [ 483.488312][ T9476] ? kernfs_path_from_node+0x250/0x290 [ 483.488331][ T9476] ? kernfs_path_from_node+0x2f/0x290 [ 483.488351][ T9476] sysfs_create_dir_ns+0x259/0x280 [ 483.488374][ T9476] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 483.488397][ T9476] ? do_raw_spin_unlock+0x122/0x240 [ 483.488421][ T9476] kobject_add_internal+0x59f/0xb70 [ 483.488449][ T9476] kobject_init_and_add+0x125/0x190 [ 483.488475][ T9476] ? __pfx_kobject_init_and_add+0x10/0x10 [ 483.488496][ T9476] ? __raw_spin_lock_init+0x45/0x100 [ 483.488516][ T9476] ? __init_swait_queue_head+0xa9/0x150 [ 483.488535][ T9476] gfs2_sys_fs_add+0x234/0x450 [ 483.488559][ T9476] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 483.488584][ T9476] ? is_dynamic_key+0xd6/0x1c0 [ 483.488604][ T9476] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 483.488634][ T9476] gfs2_fill_super+0x1388/0x21b0 [ 483.488671][ T9476] ? __pfx_gfs2_fill_super+0x10/0x10 [ 483.488700][ T9476] ? sb_set_blocksize+0x155/0x240 [ 483.488723][ T9476] ? setup_bdev_super+0x4c1/0x5b0 [ 483.488747][ T9476] get_tree_bdev_flags+0x40e/0x4d0 [ 483.488767][ T9476] ? __pfx_gfs2_fill_super+0x10/0x10 [ 483.488800][ T9476] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 483.488819][ T9476] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 483.488848][ T9476] gfs2_get_tree+0x51/0x1e0 [ 483.488876][ T9476] vfs_get_tree+0x92/0x2b0 [ 483.488896][ T9476] do_new_mount+0x302/0xa10 [ 483.488915][ T9476] ? apparmor_capable+0x137/0x1b0 [ 483.488944][ T9476] ? __pfx_do_new_mount+0x10/0x10 [ 483.488964][ T9476] ? ns_capable+0x8a/0xf0 [ 483.488987][ T9476] ? kmem_cache_free+0x197/0x640 [ 483.489015][ T9476] __se_sys_mount+0x313/0x410 [ 483.489043][ T9476] ? __pfx___se_sys_mount+0x10/0x10 [ 483.489067][ T9476] ? do_syscall_64+0xbe/0xfa0 [ 483.489082][ T9476] ? __x64_sys_mount+0x20/0xc0 [ 483.489107][ T9476] do_syscall_64+0xfa/0xfa0 [ 483.489126][ T9476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.489144][ T9476] ? clear_bhb_loop+0x60/0xb0 [ 483.489166][ T9476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.489183][ T9476] RIP: 0033:0x7f0c1ca9c94a [ 483.489201][ T9476] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 483.489217][ T9476] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 483.489237][ T9476] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 483.489251][ T9476] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 483.489263][ T9476] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 483.489277][ T9476] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 483.489289][ T9476] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 483.489320][ T9476] [ 483.489343][ T9476] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 483.537014][ T9478] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 483.586630][ T9476] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 483.813526][ T9478] CPU: 0 UID: 0 PID: 9478 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 483.813554][ T9478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.813565][ T9478] Call Trace: [ 483.813573][ T9478] [ 483.813581][ T9478] dump_stack_lvl+0x189/0x250 [ 483.813614][ T9478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.813639][ T9478] ? __pfx__printk+0x10/0x10 [ 483.813666][ T9478] ? kernfs_path_from_node+0x250/0x290 [ 483.813686][ T9478] ? kernfs_path_from_node+0x2f/0x290 [ 483.813710][ T9478] sysfs_create_dir_ns+0x259/0x280 [ 483.813734][ T9478] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 483.813756][ T9478] ? do_raw_spin_unlock+0x122/0x240 [ 483.813780][ T9478] kobject_add_internal+0x59f/0xb70 [ 483.813809][ T9478] kobject_init_and_add+0x125/0x190 [ 483.813835][ T9478] ? __pfx_kobject_init_and_add+0x10/0x10 [ 483.813856][ T9478] ? __raw_spin_lock_init+0x45/0x100 [ 483.813876][ T9478] ? __init_swait_queue_head+0xa9/0x150 [ 483.813897][ T9478] gfs2_sys_fs_add+0x234/0x450 [ 483.813924][ T9478] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 483.813953][ T9478] ? is_dynamic_key+0xd6/0x1c0 [ 483.813976][ T9478] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 483.814014][ T9478] gfs2_fill_super+0x1388/0x21b0 [ 483.814057][ T9478] ? __pfx_gfs2_fill_super+0x10/0x10 [ 483.814087][ T9478] ? sb_set_blocksize+0x155/0x240 [ 483.814110][ T9478] ? setup_bdev_super+0x4c1/0x5b0 [ 483.814135][ T9478] get_tree_bdev_flags+0x40e/0x4d0 [ 483.814157][ T9478] ? __pfx_gfs2_fill_super+0x10/0x10 [ 483.814182][ T9478] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 483.814202][ T9478] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 483.814231][ T9478] gfs2_get_tree+0x51/0x1e0 [ 483.814260][ T9478] vfs_get_tree+0x92/0x2b0 [ 483.814283][ T9478] do_new_mount+0x302/0xa10 [ 483.814304][ T9478] ? apparmor_capable+0x137/0x1b0 [ 483.814331][ T9478] ? __pfx_do_new_mount+0x10/0x10 [ 483.814354][ T9478] ? ns_capable+0x8a/0xf0 [ 483.814379][ T9478] ? kmem_cache_free+0x197/0x640 [ 483.814411][ T9478] __se_sys_mount+0x313/0x410 [ 483.814440][ T9478] ? __pfx___se_sys_mount+0x10/0x10 [ 483.814467][ T9478] ? do_syscall_64+0xbe/0xfa0 [ 483.814482][ T9478] ? __x64_sys_mount+0x20/0xc0 [ 483.814508][ T9478] do_syscall_64+0xfa/0xfa0 [ 483.814526][ T9478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.814543][ T9478] ? clear_bhb_loop+0x60/0xb0 [ 483.814565][ T9478] entry_SYSCALL_64_after_hwframe+0x77/0x7f executing program [ 483.814581][ T9478] RIP: 0033:0x7f0c1ca9c94a [ 483.814598][ T9478] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 483.814613][ T9478] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 483.814648][ T9478] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 483.814659][ T9478] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 483.814667][ T9478] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 483.814673][ T9478] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 483.814680][ T9478] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 483.814706][ T9478] [ 483.814734][ T9478] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 483.933087][ T9482] loop3: detected capacity change from 0 to 32768 [ 484.012545][ T9478] gfs2: fsid=syz:syz: error -17 adding sysfs files the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed executing program [ 484.415737][ T9484] loop4: detected capacity change from 0 to 32768 [ 484.422546][ T9482] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 484.465330][ T9484] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 484.483985][ T9482] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 484.486637][ T9484] CPU: 0 UID: 0 PID: 9484 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 484.486661][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.486673][ T9484] Call Trace: [ 484.486681][ T9484] [ 484.486689][ T9484] dump_stack_lvl+0x189/0x250 [ 484.486724][ T9484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.486750][ T9484] ? __pfx__printk+0x10/0x10 [ 484.486776][ T9484] ? kernfs_path_from_node+0x250/0x290 [ 484.486796][ T9484] ? kernfs_path_from_node+0x2f/0x290 [ 484.486821][ T9484] sysfs_create_dir_ns+0x259/0x280 [ 484.486845][ T9484] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 484.486867][ T9484] ? do_raw_spin_unlock+0x122/0x240 [ 484.486891][ T9484] kobject_add_internal+0x59f/0xb70 [ 484.486912][ T9484] kobject_init_and_add+0x125/0x190 [ 484.486936][ T9484] ? __pfx_kobject_init_and_add+0x10/0x10 [ 484.486964][ T9484] ? __raw_spin_lock_init+0x45/0x100 [ 484.486985][ T9484] ? __init_swait_queue_head+0xa9/0x150 [ 484.487007][ T9484] gfs2_sys_fs_add+0x234/0x450 [ 484.487032][ T9484] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 484.487059][ T9484] ? is_dynamic_key+0xd6/0x1c0 [ 484.487081][ T9484] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 484.487112][ T9484] gfs2_fill_super+0x1388/0x21b0 [ 484.487154][ T9484] ? __pfx_gfs2_fill_super+0x10/0x10 [ 484.487184][ T9484] ? sb_set_blocksize+0x155/0x240 [ 484.487206][ T9484] ? setup_bdev_super+0x4c1/0x5b0 [ 484.487229][ T9484] get_tree_bdev_flags+0x40e/0x4d0 [ 484.487250][ T9484] ? __pfx_gfs2_fill_super+0x10/0x10 [ 484.487275][ T9484] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 484.487293][ T9484] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 484.487321][ T9484] gfs2_get_tree+0x51/0x1e0 [ 484.487349][ T9484] vfs_get_tree+0x92/0x2b0 [ 484.487372][ T9484] do_new_mount+0x302/0xa10 [ 484.487393][ T9484] ? apparmor_capable+0x137/0x1b0 [ 484.487420][ T9484] ? __pfx_do_new_mount+0x10/0x10 [ 484.487443][ T9484] ? ns_capable+0x8a/0xf0 [ 484.487468][ T9484] ? kmem_cache_free+0x197/0x640 [ 484.487499][ T9484] __se_sys_mount+0x313/0x410 [ 484.487528][ T9484] ? __pfx___se_sys_mount+0x10/0x10 [ 484.487556][ T9484] ? do_syscall_64+0xbe/0xfa0 [ 484.487571][ T9484] ? __x64_sys_mount+0x20/0xc0 [ 484.487597][ T9484] do_syscall_64+0xfa/0xfa0 [ 484.487614][ T9484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.487631][ T9484] ? clear_bhb_loop+0x60/0xb0 [ 484.487653][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.487670][ T9484] RIP: 0033:0x7f0c1ca9c94a [ 484.487687][ T9484] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 484.487702][ T9484] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 484.487722][ T9484] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 484.487735][ T9484] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 484.487748][ T9484] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 484.487761][ T9484] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 484.487773][ T9484] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 484.487803][ T9484] [ 484.487828][ T9484] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 484.724697][ T9482] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 484.978407][ T5879] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 484.985216][ T5879] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 485.180757][ T9484] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 485.259871][ T5879] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 274ms [ 485.294126][ T5879] gfs2: fsid=syz:syz.0: jid=0: Done executing program [ 485.309925][ T9482] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 485.326055][ T9492] loop0: detected capacity change from 0 to 32768 [ 485.433144][ T9492] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 485.472869][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 485.472898][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.472909][ T9492] Call Trace: [ 485.472916][ T9492] [ 485.472925][ T9492] dump_stack_lvl+0x189/0x250 [ 485.472959][ T9492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.472984][ T9492] ? __pfx__printk+0x10/0x10 [ 485.473010][ T9492] ? kernfs_path_from_node+0x250/0x290 [ 485.473031][ T9492] ? kernfs_path_from_node+0x2f/0x290 [ 485.473056][ T9492] sysfs_create_dir_ns+0x259/0x280 [ 485.473082][ T9492] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 485.473105][ T9492] ? do_raw_spin_unlock+0x122/0x240 [ 485.473131][ T9492] kobject_add_internal+0x59f/0xb70 [ 485.473160][ T9492] kobject_init_and_add+0x125/0x190 [ 485.473187][ T9492] ? __pfx_kobject_init_and_add+0x10/0x10 [ 485.473209][ T9492] ? __raw_spin_lock_init+0x45/0x100 [ 485.473230][ T9492] ? __init_swait_queue_head+0xa9/0x150 [ 485.473253][ T9492] gfs2_sys_fs_add+0x234/0x450 [ 485.473278][ T9492] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 485.473306][ T9492] ? is_dynamic_key+0xd6/0x1c0 [ 485.473328][ T9492] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 485.473360][ T9492] gfs2_fill_super+0x1388/0x21b0 [ 485.473403][ T9492] ? __pfx_gfs2_fill_super+0x10/0x10 [ 485.473434][ T9492] ? sb_set_blocksize+0x155/0x240 [ 485.473457][ T9492] ? setup_bdev_super+0x4c1/0x5b0 [ 485.473481][ T9492] get_tree_bdev_flags+0x40e/0x4d0 [ 485.473502][ T9492] ? __pfx_gfs2_fill_super+0x10/0x10 [ 485.473528][ T9492] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 485.473546][ T9492] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 485.473575][ T9492] gfs2_get_tree+0x51/0x1e0 [ 485.473612][ T9492] vfs_get_tree+0x92/0x2b0 [ 485.473636][ T9492] do_new_mount+0x302/0xa10 [ 485.473657][ T9492] ? apparmor_capable+0x137/0x1b0 [ 485.473686][ T9492] ? __pfx_do_new_mount+0x10/0x10 [ 485.473709][ T9492] ? ns_capable+0x8a/0xf0 [ 485.473735][ T9492] ? kmem_cache_free+0x197/0x640 [ 485.473767][ T9492] __se_sys_mount+0x313/0x410 [ 485.473797][ T9492] ? __pfx___se_sys_mount+0x10/0x10 [ 485.473829][ T9492] ? do_syscall_64+0xbe/0xfa0 [ 485.473845][ T9492] ? __x64_sys_mount+0x20/0xc0 [ 485.473870][ T9492] do_syscall_64+0xfa/0xfa0 [ 485.473888][ T9492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.473906][ T9492] ? clear_bhb_loop+0x60/0xb0 [ 485.473928][ T9492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.473946][ T9492] RIP: 0033:0x7f0c1ca9c94a [ 485.473964][ T9492] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 485.473980][ T9492] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 485.474000][ T9492] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 485.474015][ T9492] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 485.474027][ T9492] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 485.474041][ T9492] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 485.474053][ T9492] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 485.474084][ T9492] [ 485.786874][ T9492] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 485.817333][ T9492] gfs2: fsid=syz:syz: error -17 adding sysfs files the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 486.136523][ T9503] loop2: detected capacity change from 0 to 32768 [ 486.171911][ T9503] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 486.181915][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 486.181943][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.181954][ T9503] Call Trace: [ 486.181961][ T9503] [ 486.181970][ T9503] dump_stack_lvl+0x189/0x250 [ 486.182005][ T9503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.182030][ T9503] ? __pfx__printk+0x10/0x10 [ 486.182056][ T9503] ? kernfs_path_from_node+0x250/0x290 [ 486.182076][ T9503] ? kernfs_path_from_node+0x2f/0x290 [ 486.182099][ T9503] sysfs_create_dir_ns+0x259/0x280 [ 486.182122][ T9503] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 486.182144][ T9503] ? do_raw_spin_unlock+0x122/0x240 [ 486.182182][ T9503] kobject_add_internal+0x59f/0xb70 [ 486.182210][ T9503] kobject_init_and_add+0x125/0x190 [ 486.182236][ T9503] ? __pfx_kobject_init_and_add+0x10/0x10 [ 486.182256][ T9503] ? __raw_spin_lock_init+0x45/0x100 [ 486.182276][ T9503] ? __init_swait_queue_head+0xa9/0x150 [ 486.182298][ T9503] gfs2_sys_fs_add+0x234/0x450 the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 486.182323][ T9503] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 486.182350][ T9503] ? is_dynamic_key+0xd6/0x1c0 [ 486.182372][ T9503] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 486.182405][ T9503] gfs2_fill_super+0x1388/0x21b0 [ 486.182447][ T9503] ? __pfx_gfs2_fill_super+0x10/0x10 [ 486.182478][ T9503] ? sb_set_blocksize+0x155/0x240 [ 486.182501][ T9503] ? setup_bdev_super+0x4c1/0x5b0 [ 486.182525][ T9503] get_tree_bdev_flags+0x40e/0x4d0 [ 486.182545][ T9503] ? __pfx_gfs2_fill_super+0x10/0x10 [ 486.182570][ T9503] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 486.182599][ T9503] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 486.182630][ T9503] gfs2_get_tree+0x51/0x1e0 [ 486.182658][ T9503] vfs_get_tree+0x92/0x2b0 [ 486.182680][ T9503] do_new_mount+0x302/0xa10 [ 486.182701][ T9503] ? apparmor_capable+0x137/0x1b0 [ 486.182728][ T9503] ? __pfx_do_new_mount+0x10/0x10 [ 486.182751][ T9503] ? ns_capable+0x8a/0xf0 [ 486.182778][ T9503] ? kmem_cache_free+0x197/0x640 [ 486.182810][ T9503] __se_sys_mount+0x313/0x410 [ 486.182839][ T9503] ? __pfx___se_sys_mount+0x10/0x10 [ 486.182868][ T9503] ? do_syscall_64+0xbe/0xfa0 [ 486.182883][ T9503] ? __x64_sys_mount+0x20/0xc0 [ 486.182909][ T9503] do_syscall_64+0xfa/0xfa0 [ 486.182927][ T9503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.182950][ T9503] ? clear_bhb_loop+0x60/0xb0 [ 486.182972][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.182990][ T9503] RIP: 0033:0x7f0c1ca9c94a [ 486.183007][ T9503] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 486.183023][ T9503] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 486.183043][ T9503] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 486.183056][ T9503] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 486.183068][ T9503] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 486.183081][ T9503] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 executing program [ 486.183094][ T9503] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 486.183124][ T9503] [ 486.184343][ T9503] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 486.340773][ T9498] loop1: detected capacity change from 0 to 32768 [ 486.346325][ T9503] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 486.526806][ T6626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface executing program [ 486.576406][ T9498] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 486.587442][ T6626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.604080][ T6626] bond0 (unregistering): Released all slaves [ 486.604826][ T9498] CPU: 0 UID: 0 PID: 9498 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 486.604850][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.604861][ T9498] Call Trace: [ 486.604869][ T9498] [ 486.604878][ T9498] dump_stack_lvl+0x189/0x250 [ 486.604911][ T9498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.604936][ T9498] ? __pfx__printk+0x10/0x10 [ 486.604963][ T9498] ? kernfs_path_from_node+0x250/0x290 [ 486.604984][ T9498] ? kernfs_path_from_node+0x2f/0x290 [ 486.605008][ T9498] sysfs_create_dir_ns+0x259/0x280 [ 486.605032][ T9498] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 486.605055][ T9498] ? do_raw_spin_unlock+0x122/0x240 [ 486.605080][ T9498] kobject_add_internal+0x59f/0xb70 [ 486.605109][ T9498] kobject_init_and_add+0x125/0x190 [ 486.605134][ T9498] ? __pfx_kobject_init_and_add+0x10/0x10 [ 486.605155][ T9498] ? __raw_spin_lock_init+0x45/0x100 [ 486.605176][ T9498] ? __init_swait_queue_head+0xa9/0x150 [ 486.605199][ T9498] gfs2_sys_fs_add+0x234/0x450 [ 486.605224][ T9498] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 486.605251][ T9498] ? is_dynamic_key+0xd6/0x1c0 [ 486.605273][ T9498] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 486.605306][ T9498] gfs2_fill_super+0x1388/0x21b0 [ 486.605347][ T9498] ? __pfx_gfs2_fill_super+0x10/0x10 [ 486.605376][ T9498] ? sb_set_blocksize+0x155/0x240 [ 486.605398][ T9498] ? setup_bdev_super+0x4c1/0x5b0 [ 486.605421][ T9498] get_tree_bdev_flags+0x40e/0x4d0 [ 486.605442][ T9498] ? __pfx_gfs2_fill_super+0x10/0x10 [ 486.605467][ T9498] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 486.605485][ T9498] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 486.605512][ T9498] gfs2_get_tree+0x51/0x1e0 [ 486.605541][ T9498] vfs_get_tree+0x92/0x2b0 [ 486.605563][ T9498] do_new_mount+0x302/0xa10 [ 486.605584][ T9498] ? apparmor_capable+0x137/0x1b0 [ 486.605612][ T9498] ? __pfx_do_new_mount+0x10/0x10 [ 486.605635][ T9498] ? ns_capable+0x8a/0xf0 [ 486.605660][ T9498] ? kmem_cache_free+0x197/0x640 [ 486.605692][ T9498] __se_sys_mount+0x313/0x410 [ 486.605720][ T9498] ? __pfx___se_sys_mount+0x10/0x10 [ 486.605748][ T9498] ? do_syscall_64+0xbe/0xfa0 [ 486.605769][ T9498] ? __x64_sys_mount+0x20/0xc0 [ 486.605794][ T9498] do_syscall_64+0xfa/0xfa0 [ 486.605812][ T9498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.605830][ T9498] ? clear_bhb_loop+0x60/0xb0 [ 486.605851][ T9498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.605868][ T9498] RIP: 0033:0x7f0c1ca9c94a [ 486.605885][ T9498] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 ee 08 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 486.605900][ T9498] RSP: 002b:00007f0c1ca46fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 486.605919][ T9498] RAX: ffffffffffffffda RBX: 00007f0c1ca46ff0 RCX: 00007f0c1ca9c94a [ 486.605932][ T9498] RDX: 000020000001f680 RSI: 0000200000000040 RDI: 00007f0c1ca46ff0 [ 486.605945][ T9498] RBP: 000020000001f680 R08: 00007f0c1ca47030 R09: 00007f0c1ca47030 [ 486.605957][ T9498] R10: 0000000000000084 R11: 0000000000000246 R12: 0000200000000040 [ 486.605969][ T9498] R13: 00007f0c1ca47030 R14: 0000000000000003 R15: 0000000000000084 [ 486.605999][ T9498] [ 486.606023][ T9498] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 486.856533][ T56] kworker/1:1H: attempt to access beyond end of device [ 486.856533][ T56] loop3: rw=1, sector=31525197391603584, nr_sectors = 4 limit=32768 [ 486.963049][ T56] gfs2: fsid=syz:syz.0: Error -5 writing to journal, jid=0 [ 486.970972][ T56] CPU: 1 UID: 0 PID: 56 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 486.970998][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.971010][ T56] Workqueue: gfs2-glock/syz:syz glock_work_func [ 486.971036][ T56] Call Trace: [ 486.971044][ T56] [ 486.971053][ T56] dump_stack_lvl+0x189/0x250 [ 486.971086][ T56] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.971115][ T56] ? __pfx__printk+0x10/0x10 [ 486.971138][ T56] ? blkg_put+0x22/0x240 [ 486.971167][ T56] gfs2_withdraw+0xc3/0x1b0 [ 486.971196][ T56] gfs2_end_log_write+0xcd/0x7c0 [ 486.971232][ T56] gfs2_log_get_bio+0x1ab/0x3a0 [ 486.971259][ T56] gfs2_log_write+0x39/0xc0 [ 486.971282][ T56] gfs2_before_commit+0x1381/0x1930 [ 486.971322][ T56] ? __pfx_databuf_lo_before_commit+0x10/0x10 [ 486.971346][ T56] gfs2_log_flush+0xa48/0x24c0 [ 486.971381][ T56] ? __pfx_gfs2_log_flush+0x10/0x10 [ 486.971407][ T56] ? do_raw_spin_unlock+0x122/0x240 [ 486.971433][ T56] inode_go_sync+0x2cc/0x5d0 [ 486.971458][ T56] ? do_raw_spin_unlock+0x122/0x240 [ 486.971483][ T56] do_xmote+0x1a7/0x750 [ 486.971523][ T56] glock_work_func+0x2a8/0x580 [ 486.971546][ T56] ? process_one_work+0x868/0x15e0 [ 486.971567][ T56] process_one_work+0x93a/0x15e0 [ 486.971590][ T56] ? __lock_acquire+0xab9/0xd20 [ 486.971633][ T56] ? __pfx_process_one_work+0x10/0x10 [ 486.971664][ T56] ? assign_work+0x3a1/0x410 [ 486.971691][ T56] worker_thread+0x9b0/0xee0 [ 486.971743][ T56] kthread+0x711/0x8a0 [ 486.971770][ T56] ? __pfx_worker_thread+0x10/0x10 [ 486.971793][ T56] ? __pfx_kthread+0x10/0x10 [ 486.971812][ T56] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.971838][ T56] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.971853][ T56] ? __pfx_kthread+0x10/0x10 [ 486.971871][ T56] ret_from_fork+0x599/0xb30 [ 486.971897][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 486.971931][ T56] ? __switch_to_asm+0x39/0x70 [ 486.971948][ T56] ? __switch_to_asm+0x33/0x70 [ 486.971963][ T56] ? __pfx_kthread+0x10/0x10 the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 486.971982][ T56] ret_from_fork_asm+0x1a/0x30 [ 486.972019][ T56] [ 486.972027][ T56] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 487.211988][ T9498] gfs2: fsid=syz:syz: error -17 adding sysfs files the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 487.601073][ T9428] ================================================================== [ 487.609366][ T9428] BUG: KASAN: slab-use-after-free in gfs2_invalidate_folio+0x40b/0x750 [ 487.617633][ T9428] Read of size 8 at addr ffff8880788d9718 by task syz-executor264/9428 [ 487.625982][ T9428] [ 487.628322][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 487.628348][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.628360][ T9428] Call Trace: [ 487.628368][ T9428] [ 487.628376][ T9428] dump_stack_lvl+0x189/0x250 [ 487.628405][ T9428] ? __kasan_check_byte+0x12/0x40 [ 487.628428][ T9428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.628451][ T9428] ? lock_release+0x4b/0x3d0 [ 487.628477][ T9428] ? __virt_addr_valid+0x4a5/0x5c0 [ 487.628495][ T9428] print_report+0xca/0x240 [ 487.628516][ T9428] ? gfs2_invalidate_folio+0x40b/0x750 [ 487.628537][ T9428] kasan_report+0x118/0x150 [ 487.628560][ T9428] ? gfs2_invalidate_folio+0x40b/0x750 [ 487.628585][ T9428] gfs2_invalidate_folio+0x40b/0x750 [ 487.628610][ T9428] ? __pfx_gfs2_invalidate_folio+0x10/0x10 [ 487.628633][ T9428] truncate_cleanup_folio+0x2d8/0x430 [ 487.628660][ T9428] truncate_inode_pages_range+0x233/0xd90 [ 487.628689][ T9428] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 487.628719][ T9428] ? __lock_acquire+0xab9/0xd20 [ 487.628754][ T9428] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.628776][ T9428] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.628792][ T9428] gfs2_evict_inode+0x87a/0x1000 [ 487.628811][ T9428] ? inode_wait_for_writeback+0x14d/0x370 [ 487.628830][ T9428] ? __pfx_gfs2_evict_inode+0x10/0x10 [ 487.628853][ T9428] ? do_raw_spin_unlock+0x122/0x240 [ 487.628870][ T9428] ? __pfx_gfs2_evict_inode+0x10/0x10 [ 487.628887][ T9428] evict+0x5f4/0xae0 [ 487.628908][ T9428] ? __pfx_evict+0x10/0x10 [ 487.628925][ T9428] ? _raw_spin_unlock+0x28/0x50 [ 487.628946][ T9428] ? iput+0xcea/0x1050 [ 487.628969][ T9428] gfs2_kill_sb+0x2bc/0x430 [ 487.628992][ T9428] deactivate_locked_super+0xbc/0x130 [ 487.629010][ T9428] cleanup_mnt+0x425/0x4c0 [ 487.629027][ T9428] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.629042][ T9428] task_work_run+0x1d4/0x260 [ 487.629061][ T9428] ? __pfx_task_work_run+0x10/0x10 [ 487.629081][ T9428] ? exit_to_user_mode_loop+0x55/0x4f0 [ 487.629105][ T9428] exit_to_user_mode_loop+0xff/0x4f0 [ 487.629125][ T9428] ? rcu_is_watching+0x15/0xb0 [ 487.629143][ T9428] do_syscall_64+0x2e9/0xfa0 [ 487.629160][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.629176][ T9428] ? clear_bhb_loop+0x60/0xb0 [ 487.629197][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.629214][ T9428] RIP: 0033:0x7f0c1ca9c757 [ 487.629230][ T9428] Code: 09 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 487.629245][ T9428] RSP: 002b:00007fff595b1a18 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 487.629265][ T9428] RAX: 0000000000000000 RBX: 0000000000075c77 RCX: 00007f0c1ca9c757 [ 487.629277][ T9428] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff595b1ad0 [ 487.629287][ T9428] RBP: 00007fff595b1ad0 R08: 0000000000000000 R09: 0000000000000000 [ 487.629298][ T9428] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff595b2b90 [ 487.629309][ T9428] R13: 000055556d1ea7d0 R14: 431bde82d7b634db R15: 00007fff595b2b34 [ 487.629329][ T9428] [ 487.629336][ T9428] [ 487.933014][ T9428] Allocated by task 9482: [ 487.937325][ T9428] kasan_save_track+0x3e/0x80 [ 487.942217][ T9428] __kasan_slab_alloc+0x6c/0x80 [ 487.947056][ T9428] kmem_cache_alloc_noprof+0x37d/0x700 [ 487.952588][ T9428] gfs2_trans_add_data+0x200/0x620 [ 487.957690][ T9428] gfs2_trans_add_databufs+0x12f/0x1a0 [ 487.963138][ T9428] gfs2_iomap_put_folio+0x223/0x480 [ 487.968413][ T9428] iomap_file_buffered_write+0x5b2/0x9c0 [ 487.974123][ T9428] gfs2_file_buffered_write+0x4ed/0x880 [ 487.979759][ T9428] gfs2_file_write_iter+0x94e/0x1100 [ 487.985153][ T9428] vfs_write+0x5c9/0xb30 [ 487.989379][ T9428] ksys_write+0x145/0x250 [ 487.993713][ T9428] do_syscall_64+0xfa/0xfa0 [ 487.998217][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.004101][ T9428] [ 488.006514][ T9428] Freed by task 56: [ 488.010302][ T9428] kasan_save_track+0x3e/0x80 [ 488.014971][ T9428] kasan_save_free_info+0x46/0x50 [ 488.020068][ T9428] __kasan_slab_free+0x5c/0x80 [ 488.024831][ T9428] kmem_cache_free+0x197/0x640 [ 488.029600][ T9428] gfs2_log_flush+0x17a2/0x24c0 [ 488.034732][ T9428] inode_go_sync+0x2cc/0x5d0 [ 488.039337][ T9428] do_xmote+0x1a7/0x750 [ 488.043586][ T9428] glock_work_func+0x2a8/0x580 [ 488.048384][ T9428] process_one_work+0x93a/0x15e0 [ 488.053332][ T9428] worker_thread+0x9b0/0xee0 [ 488.058019][ T9428] kthread+0x711/0x8a0 [ 488.062078][ T9428] ret_from_fork+0x599/0xb30 [ 488.066751][ T9428] ret_from_fork_asm+0x1a/0x30 [ 488.071604][ T9428] [ 488.073931][ T9428] The buggy address belongs to the object at ffff8880788d9700 [ 488.073931][ T9428] which belongs to the cache gfs2_bufdata of size 80 [ 488.088244][ T9428] The buggy address is located 24 bytes inside of [ 488.088244][ T9428] freed 80-byte region [ffff8880788d9700, ffff8880788d9750) [ 488.101973][ T9428] [ 488.104354][ T9428] The buggy address belongs to the physical page: [ 488.110788][ T9428] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x788d9 [ 488.119653][ T9428] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 488.126775][ T9428] page_type: f5(slab) [ 488.130772][ T9428] raw: 00fff00000000000 ffff88801b7f1000 dead000000000122 0000000000000000 [ 488.139357][ T9428] raw: 0000000000000000 0000000000240024 00000000f5000000 0000000000000000 [ 488.147934][ T9428] page dumped because: kasan: bad access detected [ 488.154408][ T9428] page_owner tracks the page as allocated [ 488.160119][ T9428] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9482, tgid 9481 (syz-executor264), ts 486825817003, free_ts 484455258806 [ 488.179918][ T9428] post_alloc_hook+0x234/0x290 [ 488.184703][ T9428] get_page_from_freelist+0x2365/0x2440 [ 488.190261][ T9428] __alloc_frozen_pages_noprof+0x181/0x370 [ 488.196376][ T9428] alloc_pages_mpol+0x232/0x4a0 [ 488.201227][ T9428] allocate_slab+0x86/0x3b0 [ 488.205765][ T9428] ___slab_alloc+0xf56/0x1990 [ 488.210467][ T9428] __slab_alloc+0x65/0x100 [ 488.215151][ T9428] kmem_cache_alloc_noprof+0x40f/0x700 [ 488.220597][ T9428] gfs2_trans_add_data+0x200/0x620 [ 488.225743][ T9428] gfs2_trans_add_databufs+0x12f/0x1a0 [ 488.231289][ T9428] gfs2_iomap_put_folio+0x223/0x480 [ 488.236585][ T9428] iomap_file_buffered_write+0x5b2/0x9c0 [ 488.242239][ T9428] gfs2_file_buffered_write+0x4ed/0x880 [ 488.247793][ T9428] gfs2_file_write_iter+0x94e/0x1100 [ 488.253091][ T9428] vfs_write+0x5c9/0xb30 [ 488.257376][ T9428] ksys_write+0x145/0x250 [ 488.261797][ T9428] page last free pid 9478 tgid 9477 stack trace: [ 488.268243][ T9428] free_unref_folios+0xd22/0x1470 [ 488.273270][ T9428] folios_put_refs+0x584/0x670 [ 488.278023][ T9428] truncate_inode_pages_range+0x346/0xd90 [ 488.283730][ T9428] blkdev_flush_mapping+0x109/0x2f0 [ 488.288920][ T9428] bdev_release+0x417/0x650 [ 488.293439][ T9428] blkdev_release+0x15/0x20 [ 488.297929][ T9428] __fput+0x44c/0xa70 [ 488.301906][ T9428] task_work_run+0x1d4/0x260 [ 488.306483][ T9428] exit_to_user_mode_loop+0xff/0x4f0 [ 488.311852][ T9428] do_syscall_64+0x2e9/0xfa0 [ 488.316436][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.322318][ T9428] [ 488.324632][ T9428] Memory state around the buggy address: [ 488.330329][ T9428] ffff8880788d9600: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fc fc [ 488.338395][ T9428] ffff8880788d9680: fc fc 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 488.346512][ T9428] >ffff8880788d9700: fa fb fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 488.354652][ T9428] ^ [ 488.359489][ T9428] ffff8880788d9780: fb fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 488.367563][ T9428] ffff8880788d9800: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb [ 488.375622][ T9428] ================================================================== [ 488.385340][ T9428] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 488.392672][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz-executor264 Not tainted syzkaller #0 PREEMPT(full) [ 488.402591][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 488.412661][ T9428] Call Trace: [ 488.415948][ T9428] [ 488.418889][ T9428] dump_stack_lvl+0x99/0x250 [ 488.423607][ T9428] ? __asan_memcpy+0x40/0x70 [ 488.428309][ T9428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.433537][ T9428] ? __pfx__printk+0x10/0x10 [ 488.438164][ T9428] vpanic+0x237/0x6d0 [ 488.442170][ T9428] ? __pfx_vpanic+0x10/0x10 [ 488.446692][ T9428] panic+0xb9/0xc0 [ 488.450709][ T9428] ? __pfx_panic+0x10/0x10 [ 488.455246][ T9428] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 488.461351][ T9428] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 488.467285][ T9428] ? gfs2_invalidate_folio+0x40b/0x750 [ 488.472884][ T9428] check_panic_on_warn+0x89/0xb0 [ 488.478020][ T9428] ? gfs2_invalidate_folio+0x40b/0x750 [ 488.483502][ T9428] end_report+0x6f/0x160 [ 488.487775][ T9428] kasan_report+0x129/0x150 [ 488.492304][ T9428] ? gfs2_invalidate_folio+0x40b/0x750 [ 488.497885][ T9428] gfs2_invalidate_folio+0x40b/0x750 [ 488.503197][ T9428] ? __pfx_gfs2_invalidate_folio+0x10/0x10 [ 488.509022][ T9428] truncate_cleanup_folio+0x2d8/0x430 [ 488.514428][ T9428] truncate_inode_pages_range+0x233/0xd90 [ 488.520252][ T9428] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 488.526535][ T9428] ? __lock_acquire+0xab9/0xd20 [ 488.531514][ T9428] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.536736][ T9428] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.541955][ T9428] gfs2_evict_inode+0x87a/0x1000 [ 488.546924][ T9428] ? inode_wait_for_writeback+0x14d/0x370 [ 488.552672][ T9428] ? __pfx_gfs2_evict_inode+0x10/0x10 [ 488.558163][ T9428] ? do_raw_spin_unlock+0x122/0x240 [ 488.563385][ T9428] ? __pfx_gfs2_evict_inode+0x10/0x10 [ 488.568796][ T9428] evict+0x5f4/0xae0 [ 488.572896][ T9428] ? __pfx_evict+0x10/0x10 [ 488.577347][ T9428] ? _raw_spin_unlock+0x28/0x50 [ 488.582226][ T9428] ? iput+0xcea/0x1050 [ 488.586310][ T9428] gfs2_kill_sb+0x2bc/0x430 [ 488.590824][ T9428] deactivate_locked_super+0xbc/0x130 [ 488.596567][ T9428] cleanup_mnt+0x425/0x4c0 [ 488.601237][ T9428] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.606530][ T9428] task_work_run+0x1d4/0x260 [ 488.611210][ T9428] ? __pfx_task_work_run+0x10/0x10 [ 488.616413][ T9428] ? exit_to_user_mode_loop+0x55/0x4f0 [ 488.621957][ T9428] exit_to_user_mode_loop+0xff/0x4f0 [ 488.627266][ T9428] ? rcu_is_watching+0x15/0xb0 [ 488.632044][ T9428] do_syscall_64+0x2e9/0xfa0 [ 488.636650][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.642908][ T9428] ? clear_bhb_loop+0x60/0xb0 [ 488.647686][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.653684][ T9428] RIP: 0033:0x7f0c1ca9c757 [ 488.658097][ T9428] Code: 09 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 488.678039][ T9428] RSP: 002b:00007fff595b1a18 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 488.686442][ T9428] RAX: 0000000000000000 RBX: 0000000000075c77 RCX: 00007f0c1ca9c757 [ 488.694405][ T9428] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff595b1ad0 [ 488.702499][ T9428] RBP: 00007fff595b1ad0 R08: 0000000000000000 R09: 0000000000000000 [ 488.710476][ T9428] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff595b2b90 [ 488.718537][ T9428] R13: 000055556d1ea7d0 R14: 431bde82d7b634db R15: 00007fff595b2b34 [ 488.726730][ T9428] [ 488.730246][ T9428] Kernel Offset: disabled [ 488.734793][ T9428] Rebooting in 86400 seconds..