Warning: Permanently added '10.128.1.246' (ED25519) to the list of known hosts. 2026/05/10 16:21:35 ignoring optional flag "type"="gce" 2026/05/10 16:21:35 parsed 1 programs 2026/05/10 16:21:37 executed programs: 0 [ 109.589140][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.651560][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.655861][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.656575][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.657536][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.658247][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.392040][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.392190][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.392301][ T5834] bridge_slave_0: entered allmulticast mode [ 110.393684][ T5834] bridge_slave_0: entered promiscuous mode [ 110.398136][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.398260][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.398355][ T5834] bridge_slave_1: entered allmulticast mode [ 110.399747][ T5834] bridge_slave_1: entered promiscuous mode [ 110.524652][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.527107][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.693301][ T5834] team0: Port device team_slave_0 added [ 110.695257][ T5834] team0: Port device team_slave_1 added [ 110.833497][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.833513][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.833533][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.834835][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.834847][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.834868][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.997661][ T5834] hsr_slave_0: entered promiscuous mode [ 110.998445][ T5834] hsr_slave_1: entered promiscuous mode [ 111.750650][ T4919] Bluetooth: hci0: command tx timeout [ 113.105342][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.148839][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.149987][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.195463][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.196628][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.247491][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.249271][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.288221][ T5834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.506225][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.540030][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.562030][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.562245][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.574226][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.574419][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.843071][ T4919] Bluetooth: hci0: command tx timeout [ 114.294883][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.398544][ T5834] veth0_vlan: entered promiscuous mode [ 114.425278][ T5834] veth1_vlan: entered promiscuous mode [ 114.495937][ T5834] veth0_macvtap: entered promiscuous mode [ 114.516515][ T5834] veth1_macvtap: entered promiscuous mode [ 114.543270][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.572898][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.602601][ T1194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.602967][ T1194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.603005][ T1194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.603037][ T1194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.761549][ T5960] loop0: detected capacity change from 0 to 32768 [ 115.909110][ T5960] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.909128][ T5960] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 115.923450][ T4919] Bluetooth: hci0: command tx timeout [ 116.104154][ T5960] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 3ms [ 116.123008][ T5647] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 116.123029][ T5647] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 116.378258][ T5647] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 255ms [ 116.384409][ T5647] gfs2: fsid=syz:syz.0: jid=0: Done [ 116.391179][ T5960] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 116.595051][ T5960] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 116.595071][ T5960] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5960, name: syz-executor.0 [ 116.595084][ T5960] preempt_count: 1, expected: 0 [ 116.596346][ T5960] RCU nest depth: 1, expected: 1 [ 116.596374][ T5960] 4 locks held by syz-executor.0/5960: [ 116.596385][ T5960] #0: ffff8880360f60d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 116.596472][ T5960] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 116.596521][ T5960] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 116.596567][ T5960] #3: ffff888045688b78 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 116.596615][ T5960] Preemption disabled at: [ 116.596620][ T5960] [] spin_lock_bucket+0x3b/0x150 [ 116.596674][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 2026/05/10 16:21:44 executed programs: 1 [ 116.596693][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.596711][ T5960] Call Trace: [ 116.596722][ T5960] [ 116.596730][ T5960] dump_stack_lvl+0xe8/0x150 [ 116.596752][ T5960] __might_resched+0x329/0x480 [ 116.596774][ T5960] ? spin_lock_bucket+0x3b/0x150 [ 116.596800][ T5960] rt_spin_lock+0xc2/0x400 [ 116.596820][ T5960] ? __pfx_rt_spin_lock+0x10/0x10 [ 116.596838][ T5960] ? preempt_count_add+0x91/0x190 [ 116.596857][ T5960] ? rt_spin_lock+0x2ce/0x400 [ 116.596877][ T5960] lockref_get_not_dead+0x28/0xd0 [ 116.596898][ T5960] gfs2_qd_search_bucket+0x139/0x210 [ 116.596924][ T5960] gfs2_quota_init+0x86c/0x1220 [ 116.596947][ T5960] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.596984][ T5960] ? __pfx_gfs2_quota_init+0x10/0x10 [ 116.597007][ T5960] ? __pfx_wake_up_bit+0x10/0x10 [ 116.597024][ T5960] ? rt_spin_unlock+0x160/0x200 [ 116.597045][ T5960] ? inode_go_inval+0x2a0/0x360 [ 116.597066][ T5960] gfs2_make_fs_rw+0x143/0x230 [ 116.597089][ T5960] gfs2_fill_super+0x1bfd/0x2220 [ 116.597124][ T5960] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.597141][ T5960] ? rt_spin_unlock+0x14f/0x200 [ 116.597159][ T5960] ? init_locking+0xb8/0x210 [ 116.597174][ T5960] ? sb_set_blocksize+0x11b/0x210 [ 116.597197][ T5960] ? setup_bdev_super+0x4c1/0x5b0 [ 116.597219][ T5960] get_tree_bdev_flags+0x431/0x4f0 [ 116.597237][ T5960] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.597255][ T5960] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 116.597272][ T5960] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 116.597292][ T5960] ? rcu_is_watching+0x15/0xb0 [ 116.597313][ T5960] ? cap_capable+0x123/0x460 [ 116.597336][ T5960] gfs2_get_tree+0x51/0x1e0 [ 116.597358][ T5960] vfs_get_tree+0x92/0x2a0 [ 116.597381][ T5960] do_new_mount+0x341/0xd30 [ 116.597403][ T5960] ? safesetid_security_capable+0xa9/0x1a0 [ 116.597429][ T5960] ? __pfx_do_new_mount+0x10/0x10 [ 116.597452][ T5960] ? ns_capable+0x89/0xe0 [ 116.597474][ T5960] ? user_path_at+0xd4/0x160 [ 116.597497][ T5960] ? user_path_at+0xd4/0x160 [ 116.597516][ T5960] __se_sys_mount+0x31d/0x420 [ 116.597546][ T5960] ? __pfx___se_sys_mount+0x10/0x10 [ 116.597575][ T5960] ? __x64_sys_mount+0x20/0xc0 [ 116.597597][ T5960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.597615][ T5960] do_syscall_64+0x15f/0xf80 [ 116.597643][ T5960] ? trace_irq_disable+0x3b/0x140 [ 116.597663][ T5960] ? clear_bhb_loop+0x40/0x90 [ 116.597685][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.597700][ T5960] RIP: 0033:0x7f0e96f3ea4a [ 116.597724][ T5960] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 116.597738][ T5960] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.597756][ T5960] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 116.597769][ T5960] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 116.597780][ T5960] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 116.597791][ T5960] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 116.597802][ T5960] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 116.597837][ T5960] [ 116.598045][ T5960] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 116.611846][ T5960] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 116.611881][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 116.611903][ T5960] Tainted: [W]=WARN [ 116.611908][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.611917][ T5960] Call Trace: [ 116.611924][ T5960] [ 116.611931][ T5960] dump_stack_lvl+0xe8/0x150 [ 116.611960][ T5960] gfs2_assert_warn_i+0x194/0x2c0 [ 116.611987][ T5960] gfs2_qd_dispose+0x466/0x570 [ 116.612026][ T5960] gfs2_quota_init+0xcda/0x1220 [ 116.612049][ T5960] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 116.612088][ T5960] ? __pfx_gfs2_quota_init+0x10/0x10 [ 116.612111][ T5960] ? __pfx_wake_up_bit+0x10/0x10 [ 116.612130][ T5960] ? rt_spin_unlock+0x160/0x200 [ 116.612152][ T5960] ? inode_go_inval+0x2a0/0x360 [ 116.612172][ T5960] gfs2_make_fs_rw+0x143/0x230 [ 116.612195][ T5960] gfs2_fill_super+0x1bfd/0x2220 [ 116.612228][ T5960] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.612244][ T5960] ? rt_spin_unlock+0x14f/0x200 [ 116.612262][ T5960] ? init_locking+0xb8/0x210 [ 116.612279][ T5960] ? sb_set_blocksize+0x11b/0x210 [ 116.612304][ T5960] ? setup_bdev_super+0x4c1/0x5b0 [ 116.612326][ T5960] get_tree_bdev_flags+0x431/0x4f0 [ 116.612346][ T5960] ? __pfx_gfs2_fill_super+0x10/0x10 [ 116.612364][ T5960] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 116.612381][ T5960] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 116.612402][ T5960] ? rcu_is_watching+0x15/0xb0 [ 116.612426][ T5960] ? cap_capable+0x123/0x460 [ 116.612449][ T5960] gfs2_get_tree+0x51/0x1e0 [ 116.612470][ T5960] vfs_get_tree+0x92/0x2a0 [ 116.612492][ T5960] do_new_mount+0x341/0xd30 [ 116.612514][ T5960] ? safesetid_security_capable+0xa9/0x1a0 [ 116.612540][ T5960] ? __pfx_do_new_mount+0x10/0x10 [ 116.612562][ T5960] ? ns_capable+0x89/0xe0 [ 116.612583][ T5960] ? user_path_at+0xd4/0x160 [ 116.612604][ T5960] ? user_path_at+0xd4/0x160 [ 116.612623][ T5960] __se_sys_mount+0x31d/0x420 [ 116.612659][ T5960] ? __pfx___se_sys_mount+0x10/0x10 [ 116.612687][ T5960] ? __x64_sys_mount+0x20/0xc0 [ 116.612709][ T5960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.612728][ T5960] do_syscall_64+0x15f/0xf80 [ 116.612748][ T5960] ? trace_irq_disable+0x3b/0x140 [ 116.612767][ T5960] ? clear_bhb_loop+0x40/0x90 [ 116.612787][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.612804][ T5960] RIP: 0033:0x7f0e96f3ea4a [ 116.612821][ T5960] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 116.612834][ T5960] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.612853][ T5960] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 116.612865][ T5960] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 116.612876][ T5960] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 116.612887][ T5960] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 116.612897][ T5960] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 116.612928][ T5960] [ 116.688549][ T5960] gfs2: fsid=syz:syz.0: found 1 quota changes [ 118.000677][ T4919] Bluetooth: hci0: command tx timeout [ 118.061123][ T6003] loop0: detected capacity change from 0 to 32768 [ 118.108430][ T6003] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 118.108448][ T6003] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 118.235971][ T6003] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 118.254847][ T5647] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 118.254865][ T5647] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 118.446368][ T5647] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 191ms [ 118.448203][ T5647] gfs2: fsid=syz:syz.0: jid=0: Done [ 118.449446][ T6003] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 118.619182][ T6003] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 118.619201][ T6003] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6003, name: syz-executor.0 [ 118.619214][ T6003] preempt_count: 1, expected: 0 [ 118.619221][ T6003] RCU nest depth: 1, expected: 1 [ 118.619229][ T6003] 4 locks held by syz-executor.0/6003: [ 118.619239][ T6003] #0: ffff88803670e0d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 118.619293][ T6003] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 118.619341][ T6003] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 118.619381][ T6003] #3: ffff8880456c57f8 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 118.619427][ T6003] Preemption disabled at: [ 118.619431][ T6003] [] spin_lock_bucket+0x3b/0x150 [ 118.619475][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 118.619498][ T6003] Tainted: [W]=WARN [ 118.619504][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.619514][ T6003] Call Trace: [ 118.619521][ T6003] [ 118.619528][ T6003] dump_stack_lvl+0xe8/0x150 [ 118.619550][ T6003] __might_resched+0x329/0x480 [ 118.619571][ T6003] ? spin_lock_bucket+0x3b/0x150 [ 118.619597][ T6003] rt_spin_lock+0xc2/0x400 [ 118.619617][ T6003] ? __pfx_rt_spin_lock+0x10/0x10 [ 118.619635][ T6003] ? preempt_count_add+0x91/0x190 [ 118.619654][ T6003] ? rt_spin_lock+0x2ce/0x400 [ 118.619674][ T6003] lockref_get_not_dead+0x28/0xd0 [ 118.619695][ T6003] gfs2_qd_search_bucket+0x139/0x210 [ 118.619724][ T6003] gfs2_quota_init+0x86c/0x1220 [ 118.619748][ T6003] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.619789][ T6003] ? __pfx_gfs2_quota_init+0x10/0x10 [ 118.619813][ T6003] ? __pfx_wake_up_bit+0x10/0x10 [ 118.619831][ T6003] ? rt_spin_unlock+0x160/0x200 [ 118.619854][ T6003] ? inode_go_inval+0x2a0/0x360 [ 118.619875][ T6003] gfs2_make_fs_rw+0x143/0x230 [ 118.619899][ T6003] gfs2_fill_super+0x1bfd/0x2220 [ 118.619934][ T6003] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.619951][ T6003] ? rt_spin_unlock+0x14f/0x200 [ 118.619971][ T6003] ? init_locking+0xb8/0x210 [ 118.619992][ T6003] ? sb_set_blocksize+0x11b/0x210 [ 118.620017][ T6003] ? setup_bdev_super+0x4c1/0x5b0 [ 118.620040][ T6003] get_tree_bdev_flags+0x431/0x4f0 [ 118.620061][ T6003] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.620080][ T6003] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 118.620098][ T6003] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 118.620120][ T6003] ? rcu_is_watching+0x15/0xb0 [ 118.620145][ T6003] ? cap_capable+0x123/0x460 [ 118.620169][ T6003] gfs2_get_tree+0x51/0x1e0 [ 118.620192][ T6003] vfs_get_tree+0x92/0x2a0 [ 118.620215][ T6003] do_new_mount+0x341/0xd30 [ 118.620238][ T6003] ? safesetid_security_capable+0xa9/0x1a0 [ 118.620265][ T6003] ? __pfx_do_new_mount+0x10/0x10 [ 118.620289][ T6003] ? ns_capable+0x89/0xe0 [ 118.620311][ T6003] ? user_path_at+0xd4/0x160 [ 118.620333][ T6003] ? user_path_at+0xd4/0x160 [ 118.620353][ T6003] __se_sys_mount+0x31d/0x420 [ 118.620383][ T6003] ? __pfx___se_sys_mount+0x10/0x10 [ 118.620413][ T6003] ? __x64_sys_mount+0x20/0xc0 [ 118.620436][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.620461][ T6003] do_syscall_64+0x15f/0xf80 [ 118.620479][ T6003] ? trace_irq_disable+0x3b/0x140 [ 118.620496][ T6003] ? clear_bhb_loop+0x40/0x90 [ 118.620516][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.620531][ T6003] RIP: 0033:0x7f0e96f3ea4a [ 118.620547][ T6003] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 118.620560][ T6003] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.620577][ T6003] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 118.620589][ T6003] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 118.620601][ T6003] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 118.620612][ T6003] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 118.620622][ T6003] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 118.620652][ T6003] [ 118.620727][ T6003] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 118.621785][ T6003] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 118.621813][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 118.621835][ T6003] Tainted: [W]=WARN [ 118.621841][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.621850][ T6003] Call Trace: [ 118.621857][ T6003] [ 118.621864][ T6003] dump_stack_lvl+0xe8/0x150 [ 118.621889][ T6003] gfs2_assert_warn_i+0x194/0x2c0 [ 118.621916][ T6003] gfs2_qd_dispose+0x466/0x570 [ 118.621938][ T6003] gfs2_quota_init+0xcda/0x1220 [ 118.621962][ T6003] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.621998][ T6003] ? __pfx_gfs2_quota_init+0x10/0x10 [ 118.622021][ T6003] ? __pfx_wake_up_bit+0x10/0x10 [ 118.622039][ T6003] ? rt_spin_unlock+0x160/0x200 [ 118.622060][ T6003] ? inode_go_inval+0x2a0/0x360 [ 118.622080][ T6003] gfs2_make_fs_rw+0x143/0x230 [ 118.622103][ T6003] gfs2_fill_super+0x1bfd/0x2220 [ 118.622140][ T6003] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.622156][ T6003] ? rt_spin_unlock+0x14f/0x200 [ 118.622175][ T6003] ? init_locking+0xb8/0x210 [ 118.622192][ T6003] ? sb_set_blocksize+0x11b/0x210 [ 118.622216][ T6003] ? setup_bdev_super+0x4c1/0x5b0 [ 118.622238][ T6003] get_tree_bdev_flags+0x431/0x4f0 [ 118.622258][ T6003] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.622276][ T6003] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 118.622293][ T6003] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 118.622314][ T6003] ? rcu_is_watching+0x15/0xb0 [ 118.622337][ T6003] ? cap_capable+0x123/0x460 [ 118.622360][ T6003] gfs2_get_tree+0x51/0x1e0 [ 118.622382][ T6003] vfs_get_tree+0x92/0x2a0 [ 118.622404][ T6003] do_new_mount+0x341/0xd30 [ 118.622425][ T6003] ? safesetid_security_capable+0xa9/0x1a0 [ 118.622460][ T6003] ? __pfx_do_new_mount+0x10/0x10 [ 118.622482][ T6003] ? ns_capable+0x89/0xe0 [ 118.622505][ T6003] ? user_path_at+0xd4/0x160 [ 118.622526][ T6003] ? user_path_at+0xd4/0x160 [ 118.622544][ T6003] __se_sys_mount+0x31d/0x420 [ 118.622573][ T6003] ? __pfx___se_sys_mount+0x10/0x10 [ 118.622602][ T6003] ? __x64_sys_mount+0x20/0xc0 [ 118.622625][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.622642][ T6003] do_syscall_64+0x15f/0xf80 [ 118.622661][ T6003] ? trace_irq_disable+0x3b/0x140 [ 118.622680][ T6003] ? clear_bhb_loop+0x40/0x90 [ 118.622700][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.622717][ T6003] RIP: 0033:0x7f0e96f3ea4a [ 118.622733][ T6003] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 118.622746][ T6003] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.622763][ T6003] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 118.622775][ T6003] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 118.622786][ T6003] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 118.622796][ T6003] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 118.622806][ T6003] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 118.622832][ T6003] [ 118.682809][ T6003] gfs2: fsid=syz:syz.0: found 1 quota changes [ 120.069605][ T6050] loop0: detected capacity change from 0 to 32768 [ 120.118497][ T6050] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 120.118517][ T6050] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 120.209237][ T6050] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms [ 120.215493][ T5335] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 120.215524][ T5335] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 120.314431][ T5335] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 98ms [ 120.327348][ T5335] gfs2: fsid=syz:syz.0: jid=0: Done [ 120.327461][ T6050] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 120.433000][ T6050] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 120.433020][ T6050] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6050, name: syz-executor.0 [ 120.433035][ T6050] preempt_count: 1, expected: 0 [ 120.433043][ T6050] RCU nest depth: 1, expected: 1 [ 120.433051][ T6050] 4 locks held by syz-executor.0/6050: [ 120.433061][ T6050] #0: ffff888039b720d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 120.433119][ T6050] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 120.433166][ T6050] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 120.433205][ T6050] #3: ffff8880456c54d8 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 120.433251][ T6050] Preemption disabled at: [ 120.433256][ T6050] [] spin_lock_bucket+0x3b/0x150 [ 120.433287][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 120.433300][ T6050] Tainted: [W]=WARN [ 120.433303][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.433309][ T6050] Call Trace: [ 120.433314][ T6050] [ 120.433319][ T6050] dump_stack_lvl+0xe8/0x150 [ 120.433332][ T6050] __might_resched+0x329/0x480 [ 120.433344][ T6050] ? spin_lock_bucket+0x3b/0x150 [ 120.433359][ T6050] rt_spin_lock+0xc2/0x400 [ 120.433370][ T6050] ? __pfx_rt_spin_lock+0x10/0x10 [ 120.433380][ T6050] ? preempt_count_add+0x91/0x190 [ 120.433391][ T6050] ? rt_spin_lock+0x2ce/0x400 [ 120.433401][ T6050] lockref_get_not_dead+0x28/0xd0 [ 120.433414][ T6050] gfs2_qd_search_bucket+0x139/0x210 [ 120.433431][ T6050] gfs2_quota_init+0x86c/0x1220 [ 120.433445][ T6050] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.433466][ T6050] ? __pfx_gfs2_quota_init+0x10/0x10 [ 120.433480][ T6050] ? __pfx_wake_up_bit+0x10/0x10 [ 120.433491][ T6050] ? rt_spin_unlock+0x160/0x200 [ 120.433503][ T6050] ? inode_go_inval+0x2a0/0x360 [ 120.433514][ T6050] gfs2_make_fs_rw+0x143/0x230 [ 120.433531][ T6050] gfs2_fill_super+0x1bfd/0x2220 [ 120.433550][ T6050] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.433559][ T6050] ? rt_spin_unlock+0x14f/0x200 [ 120.433570][ T6050] ? init_locking+0xb8/0x210 [ 120.433579][ T6050] ? sb_set_blocksize+0x11b/0x210 [ 120.433594][ T6050] ? setup_bdev_super+0x4c1/0x5b0 [ 120.433607][ T6050] get_tree_bdev_flags+0x431/0x4f0 [ 120.433618][ T6050] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.433629][ T6050] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 120.433639][ T6050] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 120.433654][ T6050] ? rcu_is_watching+0x15/0xb0 [ 120.433678][ T6050] ? cap_capable+0x123/0x460 [ 120.433696][ T6050] gfs2_get_tree+0x51/0x1e0 [ 120.433709][ T6050] vfs_get_tree+0x92/0x2a0 [ 120.433721][ T6050] do_new_mount+0x341/0xd30 [ 120.433735][ T6050] ? safesetid_security_capable+0xa9/0x1a0 [ 120.433759][ T6050] ? __pfx_do_new_mount+0x10/0x10 [ 120.433772][ T6050] ? ns_capable+0x89/0xe0 [ 120.433785][ T6050] ? user_path_at+0xd4/0x160 [ 120.433798][ T6050] ? user_path_at+0xd4/0x160 [ 120.433809][ T6050] __se_sys_mount+0x31d/0x420 [ 120.433826][ T6050] ? __pfx___se_sys_mount+0x10/0x10 [ 120.433843][ T6050] ? __x64_sys_mount+0x20/0xc0 [ 120.433856][ T6050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.433867][ T6050] do_syscall_64+0x15f/0xf80 [ 120.433879][ T6050] ? trace_irq_disable+0x3b/0x140 [ 120.433891][ T6050] ? clear_bhb_loop+0x40/0x90 [ 120.433903][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.433912][ T6050] RIP: 0033:0x7f0e96f3ea4a [ 120.433923][ T6050] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 120.433930][ T6050] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.433940][ T6050] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 120.433947][ T6050] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 120.433953][ T6050] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 120.433959][ T6050] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 120.433965][ T6050] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 120.433980][ T6050] [ 120.433991][ T6050] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 120.434008][ T6050] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 120.434020][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 120.434032][ T6050] Tainted: [W]=WARN [ 120.434035][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.434040][ T6050] Call Trace: [ 120.434044][ T6050] [ 120.434047][ T6050] dump_stack_lvl+0xe8/0x150 [ 120.434059][ T6050] gfs2_assert_warn_i+0x194/0x2c0 [ 120.434074][ T6050] gfs2_qd_dispose+0x466/0x570 [ 120.434086][ T6050] gfs2_quota_init+0xcda/0x1220 [ 120.434100][ T6050] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.434121][ T6050] ? __pfx_gfs2_quota_init+0x10/0x10 [ 120.434135][ T6050] ? __pfx_wake_up_bit+0x10/0x10 [ 120.434145][ T6050] ? rt_spin_unlock+0x160/0x200 [ 120.434157][ T6050] ? inode_go_inval+0x2a0/0x360 [ 120.434168][ T6050] gfs2_make_fs_rw+0x143/0x230 [ 120.434181][ T6050] gfs2_fill_super+0x1bfd/0x2220 [ 120.434199][ T6050] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.434208][ T6050] ? rt_spin_unlock+0x14f/0x200 [ 120.434219][ T6050] ? init_locking+0xb8/0x210 [ 120.434229][ T6050] ? sb_set_blocksize+0x11b/0x210 [ 120.434250][ T6050] ? setup_bdev_super+0x4c1/0x5b0 [ 120.434275][ T6050] get_tree_bdev_flags+0x431/0x4f0 [ 120.434295][ T6050] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.434312][ T6050] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 120.434328][ T6050] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 120.434348][ T6050] ? rcu_is_watching+0x15/0xb0 [ 120.434368][ T6050] ? cap_capable+0x123/0x460 [ 120.434381][ T6050] gfs2_get_tree+0x51/0x1e0 [ 120.434393][ T6050] vfs_get_tree+0x92/0x2a0 [ 120.434406][ T6050] do_new_mount+0x341/0xd30 [ 120.434418][ T6050] ? safesetid_security_capable+0xa9/0x1a0 [ 120.434434][ T6050] ? __pfx_do_new_mount+0x10/0x10 [ 120.434447][ T6050] ? ns_capable+0x89/0xe0 [ 120.434459][ T6050] ? user_path_at+0xd4/0x160 [ 120.434471][ T6050] ? user_path_at+0xd4/0x160 [ 120.434482][ T6050] __se_sys_mount+0x31d/0x420 [ 120.434498][ T6050] ? __pfx___se_sys_mount+0x10/0x10 [ 120.434516][ T6050] ? __x64_sys_mount+0x20/0xc0 [ 120.434532][ T6050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.434543][ T6050] do_syscall_64+0x15f/0xf80 [ 120.434553][ T6050] ? trace_irq_disable+0x3b/0x140 [ 120.434564][ T6050] ? clear_bhb_loop+0x40/0x90 [ 120.434576][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.434585][ T6050] RIP: 0033:0x7f0e96f3ea4a [ 120.434594][ T6050] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 120.434601][ T6050] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.434611][ T6050] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 120.434617][ T6050] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 120.434623][ T6050] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 120.434629][ T6050] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 120.434635][ T6050] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 120.434649][ T6050] [ 120.579557][ T6050] gfs2: fsid=syz:syz.0: found 1 quota changes [ 121.357362][ T6063] loop0: detected capacity change from 0 to 32768 [ 121.394094][ T6063] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 121.394112][ T6063] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 121.425189][ T6063] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 121.457069][ T5647] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 121.457087][ T5647] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 121.581031][ T5647] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms [ 121.581227][ T5647] gfs2: fsid=syz:syz.0: jid=0: Done [ 121.582578][ T6063] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 121.684963][ T6063] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 121.684984][ T6063] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6063, name: syz-executor.0 [ 121.684999][ T6063] preempt_count: 1, expected: 0 [ 121.685007][ T6063] RCU nest depth: 1, expected: 1 [ 121.685016][ T6063] 4 locks held by syz-executor.0/6063: [ 121.685026][ T6063] #0: ffff888044f380d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 2026/05/10 16:21:49 executed programs: 4 [ 121.685083][ T6063] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 121.685120][ T6063] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 121.685151][ T6063] #3: ffff8880456886c8 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 121.685180][ T6063] Preemption disabled at: [ 121.685182][ T6063] [] spin_lock_bucket+0x3b/0x150 [ 121.685205][ T6063] CPU: 0 UID: 0 PID: 6063 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 121.685218][ T6063] Tainted: [W]=WARN [ 121.685222][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.685232][ T6063] Call Trace: [ 121.685237][ T6063] [ 121.685242][ T6063] dump_stack_lvl+0xe8/0x150 [ 121.685255][ T6063] __might_resched+0x329/0x480 [ 121.685267][ T6063] ? spin_lock_bucket+0x3b/0x150 [ 121.685282][ T6063] rt_spin_lock+0xc2/0x400 [ 121.685293][ T6063] ? __pfx_rt_spin_lock+0x10/0x10 [ 121.685302][ T6063] ? preempt_count_add+0x91/0x190 [ 121.685313][ T6063] ? rt_spin_lock+0x2ce/0x400 [ 121.685324][ T6063] lockref_get_not_dead+0x28/0xd0 [ 121.685336][ T6063] gfs2_qd_search_bucket+0x139/0x210 [ 121.685353][ T6063] gfs2_quota_init+0x86c/0x1220 [ 121.685368][ T6063] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.685389][ T6063] ? __pfx_gfs2_quota_init+0x10/0x10 [ 121.685409][ T6063] ? __pfx_wake_up_bit+0x10/0x10 [ 121.685419][ T6063] ? rt_spin_unlock+0x160/0x200 [ 121.685431][ T6063] ? inode_go_inval+0x2a0/0x360 [ 121.685443][ T6063] gfs2_make_fs_rw+0x143/0x230 [ 121.685457][ T6063] gfs2_fill_super+0x1bfd/0x2220 [ 121.685476][ T6063] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.685485][ T6063] ? rt_spin_unlock+0x14f/0x200 [ 121.685496][ T6063] ? init_locking+0xb8/0x210 [ 121.685512][ T6063] ? sb_set_blocksize+0x11b/0x210 [ 121.685527][ T6063] ? setup_bdev_super+0x4c1/0x5b0 [ 121.685540][ T6063] get_tree_bdev_flags+0x431/0x4f0 [ 121.685551][ T6063] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.685562][ T6063] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 121.685572][ T6063] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 121.685584][ T6063] ? rcu_is_watching+0x15/0xb0 [ 121.685599][ T6063] ? cap_capable+0x123/0x460 [ 121.685613][ T6063] gfs2_get_tree+0x51/0x1e0 [ 121.685629][ T6063] vfs_get_tree+0x92/0x2a0 [ 121.685641][ T6063] do_new_mount+0x341/0xd30 [ 121.685655][ T6063] ? safesetid_security_capable+0xa9/0x1a0 [ 121.685671][ T6063] ? __pfx_do_new_mount+0x10/0x10 [ 121.685684][ T6063] ? ns_capable+0x89/0xe0 [ 121.685697][ T6063] ? user_path_at+0xd4/0x160 [ 121.685708][ T6063] ? user_path_at+0xd4/0x160 [ 121.685719][ T6063] __se_sys_mount+0x31d/0x420 [ 121.685736][ T6063] ? __pfx___se_sys_mount+0x10/0x10 [ 121.685753][ T6063] ? __x64_sys_mount+0x20/0xc0 [ 121.685766][ T6063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.685777][ T6063] do_syscall_64+0x15f/0xf80 [ 121.685788][ T6063] ? trace_irq_disable+0x3b/0x140 [ 121.685800][ T6063] ? clear_bhb_loop+0x40/0x90 [ 121.685813][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.685822][ T6063] RIP: 0033:0x7f0e96f3ea4a [ 121.685832][ T6063] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 121.685839][ T6063] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.685849][ T6063] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 121.685856][ T6063] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 121.685862][ T6063] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 121.685868][ T6063] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 121.685874][ T6063] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 121.685890][ T6063] [ 121.685914][ T6063] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 121.686000][ T6063] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 121.686023][ T6063] CPU: 0 UID: 0 PID: 6063 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 121.686043][ T6063] Tainted: [W]=WARN [ 121.686046][ T6063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.686051][ T6063] Call Trace: [ 121.686055][ T6063] [ 121.686059][ T6063] dump_stack_lvl+0xe8/0x150 [ 121.686072][ T6063] gfs2_assert_warn_i+0x194/0x2c0 [ 121.686088][ T6063] gfs2_qd_dispose+0x466/0x570 [ 121.686100][ T6063] gfs2_quota_init+0xcda/0x1220 [ 121.686114][ T6063] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.686141][ T6063] ? __pfx_gfs2_quota_init+0x10/0x10 [ 121.686165][ T6063] ? __pfx_wake_up_bit+0x10/0x10 [ 121.686183][ T6063] ? rt_spin_unlock+0x160/0x200 [ 121.686195][ T6063] ? inode_go_inval+0x2a0/0x360 [ 121.686207][ T6063] gfs2_make_fs_rw+0x143/0x230 [ 121.686220][ T6063] gfs2_fill_super+0x1bfd/0x2220 [ 121.686239][ T6063] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.686248][ T6063] ? rt_spin_unlock+0x14f/0x200 [ 121.686259][ T6063] ? init_locking+0xb8/0x210 [ 121.686269][ T6063] ? sb_set_blocksize+0x11b/0x210 [ 121.686283][ T6063] ? setup_bdev_super+0x4c1/0x5b0 [ 121.686295][ T6063] get_tree_bdev_flags+0x431/0x4f0 [ 121.686307][ T6063] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.686317][ T6063] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 121.686327][ T6063] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 121.686339][ T6063] ? rcu_is_watching+0x15/0xb0 [ 121.686353][ T6063] ? cap_capable+0x123/0x460 [ 121.686366][ T6063] gfs2_get_tree+0x51/0x1e0 [ 121.686378][ T6063] vfs_get_tree+0x92/0x2a0 [ 121.686391][ T6063] do_new_mount+0x341/0xd30 [ 121.686409][ T6063] ? safesetid_security_capable+0xa9/0x1a0 [ 121.686425][ T6063] ? __pfx_do_new_mount+0x10/0x10 [ 121.686438][ T6063] ? ns_capable+0x89/0xe0 [ 121.686451][ T6063] ? user_path_at+0xd4/0x160 [ 121.686462][ T6063] ? user_path_at+0xd4/0x160 [ 121.686473][ T6063] __se_sys_mount+0x31d/0x420 [ 121.686490][ T6063] ? __pfx___se_sys_mount+0x10/0x10 [ 121.686507][ T6063] ? __x64_sys_mount+0x20/0xc0 [ 121.686521][ T6063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.686531][ T6063] do_syscall_64+0x15f/0xf80 [ 121.686542][ T6063] ? trace_irq_disable+0x3b/0x140 [ 121.686554][ T6063] ? clear_bhb_loop+0x40/0x90 [ 121.686566][ T6063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.686575][ T6063] RIP: 0033:0x7f0e96f3ea4a [ 121.686584][ T6063] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 121.686592][ T6063] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.686602][ T6063] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 121.686608][ T6063] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 121.686614][ T6063] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 121.686620][ T6063] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 121.686626][ T6063] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 121.686640][ T6063] [ 121.745826][ T6063] gfs2: fsid=syz:syz.0: found 1 quota changes [ 122.585524][ T6069] loop0: detected capacity change from 0 to 32768 [ 122.619059][ T6069] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 122.619077][ T6069] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 122.653250][ T6069] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 122.658855][ T31] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 122.658875][ T31] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 122.775743][ T31] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 116ms [ 122.789663][ T31] gfs2: fsid=syz:syz.0: jid=0: Done [ 122.789770][ T6069] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 122.891667][ T6069] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 122.891689][ T6069] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6069, name: syz-executor.0 [ 122.891704][ T6069] preempt_count: 1, expected: 0 [ 122.891713][ T6069] RCU nest depth: 1, expected: 1 [ 122.891721][ T6069] 4 locks held by syz-executor.0/6069: [ 122.891732][ T6069] #0: ffff88803b42e0d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 122.891784][ T6069] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 122.891813][ T6069] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 122.891835][ T6069] #3: ffff8880456c5348 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 122.891861][ T6069] Preemption disabled at: [ 122.891863][ T6069] [] spin_lock_bucket+0x3b/0x150 [ 122.891885][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 122.891898][ T6069] Tainted: [W]=WARN [ 122.891904][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.891910][ T6069] Call Trace: [ 122.891915][ T6069] [ 122.891919][ T6069] dump_stack_lvl+0xe8/0x150 [ 122.891933][ T6069] __might_resched+0x329/0x480 [ 122.891945][ T6069] ? spin_lock_bucket+0x3b/0x150 [ 122.891960][ T6069] rt_spin_lock+0xc2/0x400 [ 122.891971][ T6069] ? __pfx_rt_spin_lock+0x10/0x10 [ 122.891981][ T6069] ? preempt_count_add+0x91/0x190 [ 122.891992][ T6069] ? rt_spin_lock+0x2ce/0x400 [ 122.892005][ T6069] lockref_get_not_dead+0x28/0xd0 [ 122.892017][ T6069] gfs2_qd_search_bucket+0x139/0x210 [ 122.892034][ T6069] gfs2_quota_init+0x86c/0x1220 [ 122.892048][ T6069] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.892069][ T6069] ? __pfx_gfs2_quota_init+0x10/0x10 [ 122.892083][ T6069] ? __pfx_wake_up_bit+0x10/0x10 [ 122.892094][ T6069] ? rt_spin_unlock+0x160/0x200 [ 122.892106][ T6069] ? inode_go_inval+0x2a0/0x360 [ 122.892117][ T6069] gfs2_make_fs_rw+0x143/0x230 [ 122.892131][ T6069] gfs2_fill_super+0x1bfd/0x2220 [ 122.892150][ T6069] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.892160][ T6069] ? rt_spin_unlock+0x14f/0x200 [ 122.892170][ T6069] ? init_locking+0xb8/0x210 [ 122.892180][ T6069] ? sb_set_blocksize+0x11b/0x210 [ 122.892195][ T6069] ? setup_bdev_super+0x4c1/0x5b0 [ 122.892207][ T6069] get_tree_bdev_flags+0x431/0x4f0 [ 122.892219][ T6069] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.892229][ T6069] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 122.892239][ T6069] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 122.892257][ T6069] ? rcu_is_watching+0x15/0xb0 [ 122.892272][ T6069] ? cap_capable+0x123/0x460 [ 122.892286][ T6069] gfs2_get_tree+0x51/0x1e0 [ 122.892298][ T6069] vfs_get_tree+0x92/0x2a0 [ 122.892311][ T6069] do_new_mount+0x341/0xd30 [ 122.892324][ T6069] ? safesetid_security_capable+0xa9/0x1a0 [ 122.892340][ T6069] ? __pfx_do_new_mount+0x10/0x10 [ 122.892354][ T6069] ? ns_capable+0x89/0xe0 [ 122.892367][ T6069] ? user_path_at+0xd4/0x160 [ 122.892379][ T6069] ? user_path_at+0xd4/0x160 [ 122.892389][ T6069] __se_sys_mount+0x31d/0x420 [ 122.892406][ T6069] ? __pfx___se_sys_mount+0x10/0x10 [ 122.892423][ T6069] ? __x64_sys_mount+0x20/0xc0 [ 122.892436][ T6069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.892447][ T6069] do_syscall_64+0x15f/0xf80 [ 122.892458][ T6069] ? trace_irq_disable+0x3b/0x140 [ 122.892470][ T6069] ? clear_bhb_loop+0x40/0x90 [ 122.892481][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.892491][ T6069] RIP: 0033:0x7f0e96f3ea4a [ 122.892501][ T6069] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 122.892508][ T6069] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.892518][ T6069] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 122.892525][ T6069] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 122.892531][ T6069] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 122.892537][ T6069] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 122.892543][ T6069] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 122.892558][ T6069] [ 122.892584][ T6069] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 122.892670][ T6069] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 122.892693][ T6069] CPU: 0 UID: 0 PID: 6069 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 122.892710][ T6069] Tainted: [W]=WARN [ 122.892713][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.892718][ T6069] Call Trace: [ 122.892722][ T6069] [ 122.892726][ T6069] dump_stack_lvl+0xe8/0x150 [ 122.892739][ T6069] gfs2_assert_warn_i+0x194/0x2c0 [ 122.892755][ T6069] gfs2_qd_dispose+0x466/0x570 [ 122.892767][ T6069] gfs2_quota_init+0xcda/0x1220 [ 122.892781][ T6069] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.892803][ T6069] ? __pfx_gfs2_quota_init+0x10/0x10 [ 122.892817][ T6069] ? __pfx_wake_up_bit+0x10/0x10 [ 122.892827][ T6069] ? rt_spin_unlock+0x160/0x200 [ 122.892839][ T6069] ? inode_go_inval+0x2a0/0x360 [ 122.892851][ T6069] gfs2_make_fs_rw+0x143/0x230 [ 122.892872][ T6069] gfs2_fill_super+0x1bfd/0x2220 [ 122.892901][ T6069] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.892911][ T6069] ? rt_spin_unlock+0x14f/0x200 [ 122.892921][ T6069] ? init_locking+0xb8/0x210 [ 122.892931][ T6069] ? sb_set_blocksize+0x11b/0x210 [ 122.892945][ T6069] ? setup_bdev_super+0x4c1/0x5b0 [ 122.892957][ T6069] get_tree_bdev_flags+0x431/0x4f0 [ 122.892969][ T6069] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.892979][ T6069] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 122.892989][ T6069] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 122.893003][ T6069] ? rcu_is_watching+0x15/0xb0 [ 122.893018][ T6069] ? cap_capable+0x123/0x460 [ 122.893032][ T6069] gfs2_get_tree+0x51/0x1e0 [ 122.893044][ T6069] vfs_get_tree+0x92/0x2a0 [ 122.893056][ T6069] do_new_mount+0x341/0xd30 [ 122.893070][ T6069] ? safesetid_security_capable+0xa9/0x1a0 [ 122.893085][ T6069] ? __pfx_do_new_mount+0x10/0x10 [ 122.893098][ T6069] ? ns_capable+0x89/0xe0 [ 122.893111][ T6069] ? user_path_at+0xd4/0x160 [ 122.893122][ T6069] ? user_path_at+0xd4/0x160 [ 122.893133][ T6069] __se_sys_mount+0x31d/0x420 [ 122.893149][ T6069] ? __pfx___se_sys_mount+0x10/0x10 [ 122.893166][ T6069] ? __x64_sys_mount+0x20/0xc0 [ 122.893179][ T6069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.893189][ T6069] do_syscall_64+0x15f/0xf80 [ 122.893200][ T6069] ? trace_irq_disable+0x3b/0x140 [ 122.893211][ T6069] ? clear_bhb_loop+0x40/0x90 [ 122.893223][ T6069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.893232][ T6069] RIP: 0033:0x7f0e96f3ea4a [ 122.893241][ T6069] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 122.893248][ T6069] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.893265][ T6069] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 122.893272][ T6069] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 122.893278][ T6069] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 122.893283][ T6069] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 122.893289][ T6069] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 122.893304][ T6069] [ 122.957580][ T6069] gfs2: fsid=syz:syz.0: found 1 quota changes [ 123.774425][ T6075] loop0: detected capacity change from 0 to 32768 [ 123.793487][ T6075] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 123.793505][ T6075] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 123.810415][ T6075] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 123.826520][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 123.826542][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 123.929750][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 103ms [ 123.929910][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 123.929971][ T6075] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 124.057899][ T6075] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 124.057921][ T6075] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6075, name: syz-executor.0 [ 124.057937][ T6075] preempt_count: 1, expected: 0 [ 124.057945][ T6075] RCU nest depth: 1, expected: 1 [ 124.058029][ T6075] 4 locks held by syz-executor.0/6075: [ 124.058040][ T6075] #0: ffff88802a1160d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 124.058095][ T6075] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 124.058124][ T6075] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 124.058146][ T6075] #3: ffff888045688218 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 124.058172][ T6075] Preemption disabled at: [ 124.058174][ T6075] [] spin_lock_bucket+0x3b/0x150 [ 124.058203][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 124.058221][ T6075] Tainted: [W]=WARN [ 124.058224][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.058230][ T6075] Call Trace: [ 124.058235][ T6075] [ 124.058239][ T6075] dump_stack_lvl+0xe8/0x150 [ 124.058252][ T6075] __might_resched+0x329/0x480 [ 124.058264][ T6075] ? spin_lock_bucket+0x3b/0x150 [ 124.058280][ T6075] rt_spin_lock+0xc2/0x400 [ 124.058291][ T6075] ? __pfx_rt_spin_lock+0x10/0x10 [ 124.058300][ T6075] ? preempt_count_add+0x91/0x190 [ 124.058311][ T6075] ? rt_spin_lock+0x2ce/0x400 [ 124.058322][ T6075] lockref_get_not_dead+0x28/0xd0 [ 124.058334][ T6075] gfs2_qd_search_bucket+0x139/0x210 [ 124.058351][ T6075] gfs2_quota_init+0x86c/0x1220 [ 124.058365][ T6075] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 124.058386][ T6075] ? __pfx_gfs2_quota_init+0x10/0x10 [ 124.058404][ T6075] ? __pfx_wake_up_bit+0x10/0x10 [ 124.058421][ T6075] ? rt_spin_unlock+0x160/0x200 [ 124.058440][ T6075] ? inode_go_inval+0x2a0/0x360 [ 124.058452][ T6075] gfs2_make_fs_rw+0x143/0x230 [ 124.058466][ T6075] gfs2_fill_super+0x1bfd/0x2220 [ 124.058491][ T6075] ? __pfx_gfs2_fill_super+0x10/0x10 [ 124.058505][ T6075] ? rt_spin_unlock+0x14f/0x200 [ 124.058516][ T6075] ? init_locking+0xb8/0x210 [ 124.058525][ T6075] ? sb_set_blocksize+0x11b/0x210 [ 124.058540][ T6075] ? setup_bdev_super+0x4c1/0x5b0 [ 124.058553][ T6075] get_tree_bdev_flags+0x431/0x4f0 [ 124.058565][ T6075] ? __pfx_gfs2_fill_super+0x10/0x10 [ 124.058575][ T6075] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 124.058585][ T6075] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 124.058597][ T6075] ? rcu_is_watching+0x15/0xb0 [ 124.058612][ T6075] ? cap_capable+0x123/0x460 [ 124.058626][ T6075] gfs2_get_tree+0x51/0x1e0 [ 124.058639][ T6075] vfs_get_tree+0x92/0x2a0 [ 124.058651][ T6075] do_new_mount+0x341/0xd30 [ 124.058665][ T6075] ? safesetid_security_capable+0xa9/0x1a0 [ 124.058681][ T6075] ? __pfx_do_new_mount+0x10/0x10 [ 124.058694][ T6075] ? ns_capable+0x89/0xe0 [ 124.058707][ T6075] ? user_path_at+0xd4/0x160 [ 124.058720][ T6075] ? user_path_at+0xd4/0x160 [ 124.058730][ T6075] __se_sys_mount+0x31d/0x420 [ 124.058748][ T6075] ? __pfx___se_sys_mount+0x10/0x10 [ 124.058765][ T6075] ? __x64_sys_mount+0x20/0xc0 [ 124.058778][ T6075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.058789][ T6075] do_syscall_64+0x15f/0xf80 [ 124.058800][ T6075] ? trace_irq_disable+0x3b/0x140 [ 124.058812][ T6075] ? clear_bhb_loop+0x40/0x90 [ 124.058824][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.058834][ T6075] RIP: 0033:0x7f0e96f3ea4a [ 124.058845][ T6075] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 124.058852][ T6075] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.058863][ T6075] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 124.058869][ T6075] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 124.058876][ T6075] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 124.058882][ T6075] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 124.058887][ T6075] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 124.058903][ T6075] [ 124.058914][ T6075] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 124.059018][ T6075] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 124.059040][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 124.059062][ T6075] Tainted: [W]=WARN [ 124.059068][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.059077][ T6075] Call Trace: [ 124.059084][ T6075] [ 124.059091][ T6075] dump_stack_lvl+0xe8/0x150 [ 124.059114][ T6075] gfs2_assert_warn_i+0x194/0x2c0 [ 124.059141][ T6075] gfs2_qd_dispose+0x466/0x570 [ 124.059163][ T6075] gfs2_quota_init+0xcda/0x1220 [ 124.059187][ T6075] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 124.059226][ T6075] ? __pfx_gfs2_quota_init+0x10/0x10 [ 124.059250][ T6075] ? __pfx_wake_up_bit+0x10/0x10 [ 124.059267][ T6075] ? rt_spin_unlock+0x160/0x200 [ 124.059289][ T6075] ? inode_go_inval+0x2a0/0x360 [ 124.059302][ T6075] gfs2_make_fs_rw+0x143/0x230 [ 124.059316][ T6075] gfs2_fill_super+0x1bfd/0x2220 [ 124.059334][ T6075] ? __pfx_gfs2_fill_super+0x10/0x10 [ 124.059344][ T6075] ? rt_spin_unlock+0x14f/0x200 [ 124.059354][ T6075] ? init_locking+0xb8/0x210 [ 124.059364][ T6075] ? sb_set_blocksize+0x11b/0x210 [ 124.059378][ T6075] ? setup_bdev_super+0x4c1/0x5b0 [ 124.059390][ T6075] get_tree_bdev_flags+0x431/0x4f0 [ 124.059401][ T6075] ? __pfx_gfs2_fill_super+0x10/0x10 [ 124.059412][ T6075] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 124.059422][ T6075] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 124.059434][ T6075] ? rcu_is_watching+0x15/0xb0 [ 124.059448][ T6075] ? cap_capable+0x123/0x460 [ 124.059461][ T6075] gfs2_get_tree+0x51/0x1e0 [ 124.059473][ T6075] vfs_get_tree+0x92/0x2a0 [ 124.059486][ T6075] do_new_mount+0x341/0xd30 [ 124.059499][ T6075] ? safesetid_security_capable+0xa9/0x1a0 [ 124.059514][ T6075] ? __pfx_do_new_mount+0x10/0x10 [ 124.059527][ T6075] ? ns_capable+0x89/0xe0 [ 124.059539][ T6075] ? user_path_at+0xd4/0x160 [ 124.059551][ T6075] ? user_path_at+0xd4/0x160 [ 124.059562][ T6075] __se_sys_mount+0x31d/0x420 [ 124.059578][ T6075] ? __pfx___se_sys_mount+0x10/0x10 [ 124.059595][ T6075] ? __x64_sys_mount+0x20/0xc0 [ 124.059608][ T6075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.059622][ T6075] do_syscall_64+0x15f/0xf80 [ 124.059635][ T6075] ? trace_irq_disable+0x3b/0x140 [ 124.059646][ T6075] ? clear_bhb_loop+0x40/0x90 [ 124.059657][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.059666][ T6075] RIP: 0033:0x7f0e96f3ea4a [ 124.059676][ T6075] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 124.059683][ T6075] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.059693][ T6075] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 124.059700][ T6075] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 124.059706][ T6075] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 124.059711][ T6075] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 124.059717][ T6075] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 124.059732][ T6075] [ 124.140167][ T6075] gfs2: fsid=syz:syz.0: found 1 quota changes [ 124.941782][ T6081] loop0: detected capacity change from 0 to 32768 [ 124.978506][ T6081] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 124.978524][ T6081] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 125.028990][ T6081] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 125.046893][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 125.046913][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 125.151292][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 104ms [ 125.151518][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 125.156343][ T6081] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 125.247819][ T6081] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 125.247841][ T6081] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6081, name: syz-executor.0 [ 125.247856][ T6081] preempt_count: 1, expected: 0 [ 125.247864][ T6081] RCU nest depth: 1, expected: 1 [ 125.247873][ T6081] 4 locks held by syz-executor.0/6081: [ 125.247883][ T6081] #0: ffff88802b2040d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 125.247939][ T6081] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 125.247970][ T6081] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 125.247992][ T6081] #3: ffff888040f9be38 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 125.248018][ T6081] Preemption disabled at: [ 125.248020][ T6081] [] spin_lock_bucket+0x3b/0x150 [ 125.248044][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 125.248058][ T6081] Tainted: [W]=WARN [ 125.248061][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.248066][ T6081] Call Trace: [ 125.248071][ T6081] [ 125.248075][ T6081] dump_stack_lvl+0xe8/0x150 [ 125.248088][ T6081] __might_resched+0x329/0x480 [ 125.248100][ T6081] ? spin_lock_bucket+0x3b/0x150 [ 125.248116][ T6081] rt_spin_lock+0xc2/0x400 [ 125.248127][ T6081] ? __pfx_rt_spin_lock+0x10/0x10 [ 125.248136][ T6081] ? preempt_count_add+0x91/0x190 [ 125.248148][ T6081] ? rt_spin_lock+0x2ce/0x400 [ 125.248158][ T6081] lockref_get_not_dead+0x28/0xd0 [ 125.248171][ T6081] gfs2_qd_search_bucket+0x139/0x210 [ 125.248189][ T6081] gfs2_quota_init+0x86c/0x1220 [ 125.248211][ T6081] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.248249][ T6081] ? __pfx_gfs2_quota_init+0x10/0x10 [ 125.248272][ T6081] ? __pfx_wake_up_bit+0x10/0x10 [ 125.248289][ T6081] ? rt_spin_unlock+0x160/0x200 [ 125.248309][ T6081] ? inode_go_inval+0x2a0/0x360 [ 125.248321][ T6081] gfs2_make_fs_rw+0x143/0x230 [ 125.248335][ T6081] gfs2_fill_super+0x1bfd/0x2220 [ 125.248355][ T6081] ? __pfx_gfs2_fill_super+0x10/0x10 [ 125.248364][ T6081] ? rt_spin_unlock+0x14f/0x200 [ 125.248375][ T6081] ? init_locking+0xb8/0x210 [ 125.248384][ T6081] ? sb_set_blocksize+0x11b/0x210 [ 125.248399][ T6081] ? setup_bdev_super+0x4c1/0x5b0 [ 125.248412][ T6081] get_tree_bdev_flags+0x431/0x4f0 [ 125.248424][ T6081] ? __pfx_gfs2_fill_super+0x10/0x10 [ 125.248435][ T6081] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.248445][ T6081] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 125.248457][ T6081] ? rcu_is_watching+0x15/0xb0 [ 125.248472][ T6081] ? cap_capable+0x123/0x460 [ 125.248486][ T6081] gfs2_get_tree+0x51/0x1e0 [ 125.248523][ T6081] vfs_get_tree+0x92/0x2a0 [ 125.248535][ T6081] do_new_mount+0x341/0xd30 [ 125.248549][ T6081] ? safesetid_security_capable+0xa9/0x1a0 [ 125.248565][ T6081] ? __pfx_do_new_mount+0x10/0x10 [ 125.248579][ T6081] ? ns_capable+0x89/0xe0 [ 125.248591][ T6081] ? user_path_at+0xd4/0x160 [ 125.248603][ T6081] ? user_path_at+0xd4/0x160 [ 125.248614][ T6081] __se_sys_mount+0x31d/0x420 [ 125.248631][ T6081] ? __pfx___se_sys_mount+0x10/0x10 [ 125.248649][ T6081] ? __x64_sys_mount+0x20/0xc0 [ 125.248662][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.248673][ T6081] do_syscall_64+0x15f/0xf80 [ 125.248685][ T6081] ? trace_irq_disable+0x3b/0x140 [ 125.248696][ T6081] ? clear_bhb_loop+0x40/0x90 [ 125.248709][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.248718][ T6081] RIP: 0033:0x7f0e96f3ea4a [ 125.248729][ T6081] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 125.248736][ T6081] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.248747][ T6081] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 125.248753][ T6081] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 125.248760][ T6081] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 125.248766][ T6081] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 125.248771][ T6081] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 125.248792][ T6081] [ 125.248803][ T6081] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 44452 [ 125.248821][ T6081] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 125.248834][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 125.248846][ T6081] Tainted: [W]=WARN [ 125.248849][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 125.248854][ T6081] Call Trace: [ 125.248858][ T6081] [ 125.248862][ T6081] dump_stack_lvl+0xe8/0x150 [ 125.248875][ T6081] gfs2_assert_warn_i+0x194/0x2c0 [ 125.248890][ T6081] gfs2_qd_dispose+0x466/0x570 [ 125.248902][ T6081] gfs2_quota_init+0xcda/0x1220 [ 125.248916][ T6081] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 125.248937][ T6081] ? __pfx_gfs2_quota_init+0x10/0x10 [ 125.248951][ T6081] ? __pfx_wake_up_bit+0x10/0x10 [ 125.248961][ T6081] ? rt_spin_unlock+0x160/0x200 [ 125.248973][ T6081] ? inode_go_inval+0x2a0/0x360 [ 125.248984][ T6081] gfs2_make_fs_rw+0x143/0x230 [ 125.248997][ T6081] gfs2_fill_super+0x1bfd/0x2220 [ 125.249015][ T6081] ? __pfx_gfs2_fill_super+0x10/0x10 [ 125.249025][ T6081] ? rt_spin_unlock+0x14f/0x200 [ 125.249036][ T6081] ? init_locking+0xb8/0x210 [ 125.249048][ T6081] ? sb_set_blocksize+0x11b/0x210 [ 125.249061][ T6081] ? setup_bdev_super+0x4c1/0x5b0 [ 125.249074][ T6081] get_tree_bdev_flags+0x431/0x4f0 [ 125.249085][ T6081] ? __pfx_gfs2_fill_super+0x10/0x10 [ 125.249095][ T6081] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.249105][ T6081] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 125.249117][ T6081] ? rcu_is_watching+0x15/0xb0 [ 125.249131][ T6081] ? cap_capable+0x123/0x460 [ 125.249144][ T6081] gfs2_get_tree+0x51/0x1e0 [ 125.249156][ T6081] vfs_get_tree+0x92/0x2a0 [ 125.249169][ T6081] do_new_mount+0x341/0xd30 [ 125.249181][ T6081] ? safesetid_security_capable+0xa9/0x1a0 [ 125.249196][ T6081] ? __pfx_do_new_mount+0x10/0x10 [ 125.249210][ T6081] ? ns_capable+0x89/0xe0 [ 125.249221][ T6081] ? user_path_at+0xd4/0x160 [ 125.249233][ T6081] ? user_path_at+0xd4/0x160 [ 125.249243][ T6081] __se_sys_mount+0x31d/0x420 [ 125.249260][ T6081] ? __pfx___se_sys_mount+0x10/0x10 [ 125.249277][ T6081] ? __x64_sys_mount+0x20/0xc0 [ 125.249290][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.249300][ T6081] do_syscall_64+0x15f/0xf80 [ 125.249311][ T6081] ? trace_irq_disable+0x3b/0x140 [ 125.249321][ T6081] ? clear_bhb_loop+0x40/0x90 [ 125.249334][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.249349][ T6081] RIP: 0033:0x7f0e96f3ea4a [ 125.249363][ T6081] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 125.249375][ T6081] RSP: 002b:00007f0e962cdea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.249390][ T6081] RAX: ffffffffffffffda RBX: 00007f0e962cdf30 RCX: 00007f0e96f3ea4a [ 125.249402][ T6081] RDX: 0000000020000080 RSI: 0000000020012700 RDI: 00007f0e962cdef0 [ 125.249412][ T6081] RBP: 0000000020000080 R08: 00007f0e962cdf30 R09: 0000000000000008 [ 125.249423][ T6081] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000020012700 [ 125.249433][ T6081] R13: 00007f0e962cdef0 R14: 0000000000012692 R15: 00000000200001c0 [ 125.249454][ T6081] [ 125.297508][ T6081] gfs2: fsid=syz:syz.0: found 1 quota changes [ 126.412350][ T6087] loop0: detected capacity change from 0 to 32768 [ 126.440820][ T6087] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.440840][ T6087] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 126.498245][ T6087] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 126.525482][ T31] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 126.525501][ T31] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...