DI: 00007ffd0e585900 [ 556.369284][ T9730] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 556.369291][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 556.369297][ T9730] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 556.369312][ T9730] [ 556.645836][ T9730] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 557.003442][ T9735] loop0: detected capacity change from 0 to 32768 [ 557.017230][ T9735] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 557.027103][ T9735] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 557.042024][ T9735] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 557.051541][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 557.058391][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 557.099684][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 557.109028][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 557.114956][ T9735] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 557.142452][ T9739] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 557.174533][ T9739] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 557.186641][ T9739] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9739 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 557.186920][ T9735] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 557.197029][ T9739] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 557.215808][ T9739] CPU: 1 UID: 0 PID: 9739 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 557.215829][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.215839][ T9739] Call Trace: [ 557.215847][ T9739] [ 557.215854][ T9739] dump_stack_lvl+0xe8/0x150 [ 557.215877][ T9739] gfs2_withdraw+0xc3/0x1b0 [ 557.215901][ T9739] inode_go_instantiate+0xe69/0x12a0 [ 557.215925][ T9739] ? preempt_schedule_common+0x82/0xd0 [ 557.215953][ T9739] ? __pfx_inode_go_instantiate+0x10/0x10 [ 557.215987][ T9739] gfs2_instantiate+0x168/0x220 [ 557.216013][ T9739] gfs2_glock_wait+0x1d4/0x2a0 [ 557.216032][ T9739] do_sync+0x49a/0xcb0 [ 557.216051][ T9739] ? _raw_spin_unlock+0x28/0x50 [ 557.216073][ T9739] ? gfs2_quota_sync+0x370/0x470 [ 557.216101][ T9739] ? __pfx_do_sync+0x10/0x10 [ 557.216127][ T9739] ? gfs2_quota_sync+0x370/0x470 [ 557.216149][ T9739] ? do_raw_spin_unlock+0xf5/0x210 [ 557.216169][ T9739] gfs2_quota_sync+0x370/0x470 [ 557.216199][ T9739] gfs2_quotad+0x2b9/0x6e0 [ 557.216230][ T9739] ? __pfx_gfs2_quotad+0x10/0x10 [ 557.216249][ T9739] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 557.216270][ T9739] ? __kthread_parkme+0x7a/0x1f0 [ 557.216298][ T9739] kthread+0x388/0x470 [ 557.216330][ T9739] ? __pfx_gfs2_quotad+0x10/0x10 [ 557.216350][ T9739] ? __pfx_kthread+0x10/0x10 [ 557.216376][ T9739] ret_from_fork+0x514/0xb70 [ 557.216400][ T9739] ? __pfx_ret_from_fork+0x10/0x10 [ 557.216420][ T9739] ? __switch_to+0xc79/0x1410 [ 557.216445][ T9739] ? __pfx_kthread+0x10/0x10 [ 557.216467][ T9739] ret_from_fork_asm+0x1a/0x30 [ 557.216501][ T9739] [ 557.388713][ T9735] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 557.710664][ T9741] loop0: detected capacity change from 0 to 32768 [ 557.725400][ T9741] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 557.736454][ T9741] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 557.749970][ T9741] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 557.759907][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 557.767075][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 557.823946][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 557.833388][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 557.839133][ T9741] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 557.862990][ T9745] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 557.878609][ T9745] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 557.887866][ T9745] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9745 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 557.898953][ T9745] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 557.904880][ T9741] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 557.907817][ T9745] CPU: 0 UID: 0 PID: 9745 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 557.907839][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.907850][ T9745] Call Trace: [ 557.907857][ T9745] [ 557.907865][ T9745] dump_stack_lvl+0xe8/0x150 [ 557.907891][ T9745] gfs2_withdraw+0xc3/0x1b0 [ 557.907916][ T9745] inode_go_instantiate+0xe69/0x12a0 [ 557.907942][ T9745] ? preempt_schedule_common+0x82/0xd0 [ 557.907973][ T9745] ? __pfx_inode_go_instantiate+0x10/0x10 [ 557.908013][ T9745] gfs2_instantiate+0x168/0x220 [ 557.908041][ T9745] gfs2_glock_wait+0x1d4/0x2a0 [ 557.908060][ T9745] do_sync+0x49a/0xcb0 [ 557.908079][ T9745] ? _raw_spin_unlock+0x28/0x50 [ 557.908101][ T9745] ? gfs2_quota_sync+0x370/0x470 [ 557.908129][ T9745] ? __pfx_do_sync+0x10/0x10 [ 557.908157][ T9745] ? gfs2_quota_sync+0x370/0x470 [ 557.908181][ T9745] ? do_raw_spin_unlock+0xf5/0x210 [ 557.908204][ T9745] gfs2_quota_sync+0x370/0x470 [ 557.908232][ T9745] gfs2_quotad+0x2b9/0x6e0 [ 557.908264][ T9745] ? __pfx_gfs2_quotad+0x10/0x10 [ 557.908286][ T9745] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 557.908311][ T9745] ? __kthread_parkme+0x7a/0x1f0 [ 557.908341][ T9745] kthread+0x388/0x470 [ 557.908363][ T9745] ? __pfx_gfs2_quotad+0x10/0x10 [ 557.908382][ T9745] ? __pfx_kthread+0x10/0x10 [ 557.908411][ T9745] ret_from_fork+0x514/0xb70 [ 557.908433][ T9745] ? __pfx_ret_from_fork+0x10/0x10 [ 557.908451][ T9745] ? __switch_to+0xc79/0x1410 [ 557.908477][ T9745] ? __pfx_kthread+0x10/0x10 [ 557.908501][ T9745] ret_from_fork_asm+0x1a/0x30 [ 557.908536][ T9745] [ 558.098801][ T9741] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 558.411699][ T9746] loop0: detected capacity change from 0 to 32768 [ 558.427537][ T9746] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 558.443802][ T9746] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 558.464231][ T9746] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 558.473804][ T8827] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 558.482240][ T8827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 558.523374][ T8827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 558.531770][ T8827] gfs2: fsid=syz:syz.0: jid=0: Done [ 558.538645][ T9746] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 558.561408][ T9750] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 558.576084][ T9750] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 558.586568][ T9750] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9750 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 558.598321][ T9750] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 558.604909][ T9746] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 558.606832][ T9750] CPU: 1 UID: 0 PID: 9750 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 558.606853][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 558.606864][ T9750] Call Trace: [ 558.606871][ T9750] [ 558.606878][ T9750] dump_stack_lvl+0xe8/0x150 [ 558.606904][ T9750] gfs2_withdraw+0xc3/0x1b0 [ 558.606939][ T9750] inode_go_instantiate+0xe69/0x12a0 [ 558.606966][ T9750] ? preempt_schedule_common+0x82/0xd0 [ 558.606995][ T9750] ? __pfx_inode_go_instantiate+0x10/0x10 [ 558.607028][ T9750] gfs2_instantiate+0x168/0x220 [ 558.607056][ T9750] gfs2_glock_wait+0x1d4/0x2a0 [ 558.607075][ T9750] do_sync+0x49a/0xcb0 [ 558.607094][ T9750] ? _raw_spin_unlock+0x28/0x50 [ 558.607116][ T9750] ? gfs2_quota_sync+0x370/0x470 [ 558.607144][ T9750] ? __pfx_do_sync+0x10/0x10 [ 558.607172][ T9750] ? gfs2_quota_sync+0x370/0x470 [ 558.607194][ T9750] ? do_raw_spin_unlock+0xf5/0x210 [ 558.607215][ T9750] gfs2_quota_sync+0x370/0x470 [ 558.607246][ T9750] gfs2_quotad+0x2b9/0x6e0 [ 558.607277][ T9750] ? __pfx_gfs2_quotad+0x10/0x10 [ 558.607299][ T9750] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 558.607323][ T9750] ? __kthread_parkme+0x7a/0x1f0 [ 558.607353][ T9750] kthread+0x388/0x470 [ 558.607380][ T9750] ? __pfx_gfs2_quotad+0x10/0x10 [ 558.607398][ T9750] ? __pfx_kthread+0x10/0x10 [ 558.607421][ T9750] ret_from_fork+0x514/0xb70 [ 558.607443][ T9750] ? __pfx_ret_from_fork+0x10/0x10 [ 558.607461][ T9750] ? __switch_to+0xc79/0x1410 [ 558.607487][ T9750] ? __pfx_kthread+0x10/0x10 [ 558.607511][ T9750] ret_from_fork_asm+0x1a/0x30 [ 558.607545][ T9750] [ 558.819697][ T9746] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 559.141731][ T9751] loop0: detected capacity change from 0 to 32768 [ 559.161490][ T9751] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 559.171237][ T9751] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 559.187024][ T9751] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 559.197313][ T8827] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 559.204814][ T8827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 559.251963][ T8827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 559.261986][ T8827] gfs2: fsid=syz:syz.0: jid=0: Done [ 559.269851][ T9751] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 559.295361][ T9756] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 559.310466][ T9756] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 559.320287][ T9756] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9756 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 559.330975][ T9756] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 559.340511][ T9756] CPU: 1 UID: 0 PID: 9756 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 559.340534][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 559.340545][ T9756] Call Trace: [ 559.340553][ T9756] [ 559.340561][ T9756] dump_stack_lvl+0xe8/0x150 [ 559.340591][ T9756] gfs2_withdraw+0xc3/0x1b0 [ 559.340619][ T9756] inode_go_instantiate+0xe69/0x12a0 [ 559.340646][ T9756] ? preempt_schedule_common+0x82/0xd0 [ 559.340677][ T9756] ? __pfx_inode_go_instantiate+0x10/0x10 [ 559.340711][ T9756] gfs2_instantiate+0x168/0x220 [ 559.340739][ T9756] gfs2_glock_wait+0x1d4/0x2a0 [ 559.340759][ T9756] do_sync+0x49a/0xcb0 [ 559.340778][ T9756] ? _raw_spin_unlock+0x28/0x50 [ 559.340801][ T9756] ? gfs2_quota_sync+0x370/0x470 [ 559.340831][ T9756] ? __pfx_do_sync+0x10/0x10 [ 559.340865][ T9756] ? gfs2_quota_sync+0x370/0x470 [ 559.340890][ T9756] ? do_raw_spin_unlock+0xf5/0x210 [ 559.340913][ T9756] gfs2_quota_sync+0x370/0x470 [ 559.340943][ T9756] gfs2_quotad+0x2b9/0x6e0 [ 559.340976][ T9756] ? __pfx_gfs2_quotad+0x10/0x10 [ 559.340998][ T9756] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 559.341024][ T9756] ? __kthread_parkme+0x7a/0x1f0 [ 559.341056][ T9756] kthread+0x388/0x470 [ 559.341080][ T9756] ? __pfx_gfs2_quotad+0x10/0x10 [ 559.341098][ T9756] ? __pfx_kthread+0x10/0x10 [ 559.341122][ T9756] ret_from_fork+0x514/0xb70 [ 559.341145][ T9756] ? __pfx_ret_from_fork+0x10/0x10 [ 559.341164][ T9756] ? __switch_to+0xc79/0x1410 [ 559.341192][ T9756] ? __pfx_kthread+0x10/0x10 [ 559.341216][ T9756] ret_from_fork_asm+0x1a/0x30 [ 559.341253][ T9756] [ 559.528622][ T9751] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 559.843405][ T9757] loop0: detected capacity change from 0 to 32768 [ 559.856530][ T9757] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 559.872924][ T9757] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 559.885602][ T9757] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 559.895012][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 559.901900][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 559.937354][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 35ms [ 559.945771][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 559.952383][ T9757] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 559.981065][ T9761] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 560.009053][ T9761] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 560.022159][ T9761] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9761 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 560.032876][ T9761] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 560.038246][ T9757] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 560.041477][ T9761] CPU: 0 UID: 0 PID: 9761 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 560.041499][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.041510][ T9761] Call Trace: [ 560.041517][ T9761] [ 560.041525][ T9761] dump_stack_lvl+0xe8/0x150 [ 560.041550][ T9761] gfs2_withdraw+0xc3/0x1b0 [ 560.041576][ T9761] inode_go_instantiate+0xe69/0x12a0 [ 560.041598][ T9761] ? __pfx_bit_wait+0x10/0x10 [ 560.041622][ T9761] ? __pfx_bit_wait+0x10/0x10 [ 560.041638][ T9761] ? __pfx_inode_go_instantiate+0x10/0x10 [ 560.041663][ T9761] ? __pfx_wake_bit_function+0x10/0x10 [ 560.041686][ T9761] gfs2_instantiate+0x168/0x220 [ 560.041714][ T9761] gfs2_glock_wait+0x1d4/0x2a0 [ 560.041733][ T9761] do_sync+0x49a/0xcb0 [ 560.041752][ T9761] ? _raw_spin_unlock+0x28/0x50 [ 560.041774][ T9761] ? gfs2_quota_sync+0x370/0x470 [ 560.041801][ T9761] ? __pfx_do_sync+0x10/0x10 [ 560.041829][ T9761] ? gfs2_quota_sync+0x370/0x470 [ 560.041852][ T9761] ? do_raw_spin_unlock+0xf5/0x210 [ 560.041875][ T9761] gfs2_quota_sync+0x370/0x470 [ 560.041903][ T9761] gfs2_quotad+0x2b9/0x6e0 [ 560.041936][ T9761] ? __pfx_gfs2_quotad+0x10/0x10 [ 560.041957][ T9761] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 560.041988][ T9761] ? __kthread_parkme+0x7a/0x1f0 [ 560.042017][ T9761] kthread+0x388/0x470 [ 560.042040][ T9761] ? __pfx_gfs2_quotad+0x10/0x10 [ 560.042059][ T9761] ? __pfx_kthread+0x10/0x10 [ 560.042083][ T9761] ret_from_fork+0x514/0xb70 [ 560.042105][ T9761] ? __pfx_ret_from_fork+0x10/0x10 [ 560.042124][ T9761] ? __switch_to+0xc79/0x1410 [ 560.042151][ T9761] ? __pfx_kthread+0x10/0x10 [ 560.042175][ T9761] ret_from_fork_asm+0x1a/0x30 [ 560.042210][ T9761] [ 560.269167][ T9757] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 560.591884][ T9762] loop0: detected capacity change from 0 to 32768 [ 560.607682][ T9762] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 560.621991][ T9762] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 560.635172][ T9762] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 560.645309][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 560.652866][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 560.696916][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 560.705480][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 560.712803][ T9762] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 560.731314][ T9766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 560.746283][ T9766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 560.755934][ T9766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9766 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 560.766723][ T9766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 560.775795][ T9766] CPU: 1 UID: 0 PID: 9766 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 560.775818][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.775829][ T9766] Call Trace: [ 560.775836][ T9766] [ 560.775843][ T9766] dump_stack_lvl+0xe8/0x150 [ 560.775870][ T9766] gfs2_withdraw+0xc3/0x1b0 [ 560.775896][ T9766] inode_go_instantiate+0xe69/0x12a0 [ 560.775925][ T9762] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 560.775921][ T9766] ? preempt_schedule_common+0x82/0xd0 [ 560.775959][ T9766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 560.775989][ T9766] gfs2_instantiate+0x168/0x220 [ 560.776016][ T9766] gfs2_glock_wait+0x1d4/0x2a0 [ 560.776036][ T9766] do_sync+0x49a/0xcb0 [ 560.776055][ T9766] ? _raw_spin_unlock+0x28/0x50 [ 560.776077][ T9766] ? gfs2_quota_sync+0x370/0x470 [ 560.776105][ T9766] ? __pfx_do_sync+0x10/0x10 [ 560.776134][ T9766] ? gfs2_quota_sync+0x370/0x470 [ 560.776158][ T9766] ? do_raw_spin_unlock+0xf5/0x210 [ 560.776180][ T9766] gfs2_quota_sync+0x370/0x470 [ 560.776209][ T9766] gfs2_quotad+0x2b9/0x6e0 [ 560.776241][ T9766] ? __pfx_gfs2_quotad+0x10/0x10 [ 560.776263][ T9766] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 560.776287][ T9766] ? __kthread_parkme+0x7a/0x1f0 [ 560.776317][ T9766] kthread+0x388/0x470 [ 560.776345][ T9766] ? __pfx_gfs2_quotad+0x10/0x10 [ 560.776364][ T9766] ? __pfx_kthread+0x10/0x10 [ 560.776387][ T9766] ret_from_fork+0x514/0xb70 [ 560.776408][ T9766] ? __pfx_ret_from_fork+0x10/0x10 [ 560.776427][ T9766] ? __switch_to+0xc79/0x1410 [ 560.776454][ T9766] ? __pfx_kthread+0x10/0x10 [ 560.776478][ T9766] ret_from_fork_asm+0x1a/0x30 [ 560.776513][ T9766] [ 560.979592][ T9762] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 561.294060][ T9767] loop0: detected capacity change from 0 to 32768 [ 561.310401][ T9767] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 561.319082][ T9767] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 561.336079][ T9767] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 561.345831][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 561.353045][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 561.397247][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 561.405173][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 561.411780][ T9767] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 561.466360][ T9767] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 561.478928][ T9767] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 561.494016][ T9767] CPU: 0 UID: 0 PID: 9767 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 561.494041][ T9767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.494052][ T9767] Call Trace: [ 561.494059][ T9767] [ 561.494067][ T9767] dump_stack_lvl+0xe8/0x150 [ 561.494092][ T9767] gfs2_assert_warn_i+0x194/0x2c0 [ 561.494124][ T9767] gfs2_qd_dispose+0x466/0x570 [ 561.494152][ T9767] gfs2_quota_init+0xcd4/0x1220 [ 561.494193][ T9767] ? __pfx_gfs2_quota_init+0x10/0x10 [ 561.494214][ T9767] ? __pfx_wake_up_bit+0x10/0x10 [ 561.494230][ T9767] ? inode_go_inval+0x2a0/0x360 [ 561.494246][ T9767] gfs2_make_fs_rw+0x143/0x230 [ 561.494257][ T9767] gfs2_fill_super+0x1ba5/0x21d0 [ 561.494280][ T9767] ? __pfx_gfs2_fill_super+0x10/0x10 [ 561.494296][ T9767] ? init_locking+0xb8/0x210 [ 561.494310][ T9767] ? sb_set_blocksize+0x155/0x240 [ 561.494325][ T9767] ? setup_bdev_super+0x4c1/0x5b0 [ 561.494342][ T9767] get_tree_bdev_flags+0x431/0x4f0 [ 561.494358][ T9767] ? __pfx_gfs2_fill_super+0x10/0x10 [ 561.494372][ T9767] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 561.494387][ T9767] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 561.494408][ T9767] gfs2_get_tree+0x51/0x1e0 [ 561.494425][ T9767] vfs_get_tree+0x92/0x2a0 [ 561.494441][ T9767] do_new_mount+0x341/0xd30 [ 561.494453][ T9767] ? apparmor_capable+0x126/0x170 [ 561.494467][ T9767] ? __pfx_do_new_mount+0x10/0x10 [ 561.494479][ T9767] ? ns_capable+0x89/0xe0 [ 561.494496][ T9767] ? user_path_at+0xd4/0x160 [ 561.494511][ T9767] __se_sys_mount+0x31d/0x420 [ 561.494527][ T9767] ? __pfx___se_sys_mount+0x10/0x10 [ 561.494547][ T9767] ? __x64_sys_mount+0x20/0xc0 [ 561.494567][ T9767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.494585][ T9767] do_syscall_64+0x15f/0xf80 [ 561.494602][ T9767] ? trace_irq_disable+0x3b/0x140 [ 561.494622][ T9767] ? clear_bhb_loop+0x40/0x90 [ 561.494643][ T9767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.494653][ T9767] RIP: 0033:0x7fb66284b06a [ 561.494664][ T9767] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 561.494673][ T9767] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 561.494684][ T9767] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 561.494691][ T9767] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 561.494699][ T9767] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 561.494705][ T9767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 561.494711][ T9767] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 561.494727][ T9767] [ 561.769193][ T9767] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 562.136377][ T9772] loop0: detected capacity change from 0 to 32768 [ 562.149310][ T9772] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 562.163757][ T9772] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 562.179268][ T9772] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 562.200085][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 562.207702][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 562.247437][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 562.255731][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 562.261731][ T9772] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 562.283538][ T9776] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 562.300511][ T9776] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 562.310173][ T9776] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9776 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 562.321538][ T9776] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 562.323403][ T9772] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 562.329955][ T9776] CPU: 1 UID: 0 PID: 9776 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 562.329977][ T9776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 562.329987][ T9776] Call Trace: [ 562.329995][ T9776] [ 562.330002][ T9776] dump_stack_lvl+0xe8/0x150 [ 562.330028][ T9776] gfs2_withdraw+0xc3/0x1b0 [ 562.330054][ T9776] inode_go_instantiate+0xe69/0x12a0 [ 562.330078][ T9776] ? preempt_schedule_common+0x82/0xd0 [ 562.330107][ T9776] ? __pfx_inode_go_instantiate+0x10/0x10 [ 562.330147][ T9776] gfs2_instantiate+0x168/0x220 [ 562.330174][ T9776] gfs2_glock_wait+0x1d4/0x2a0 [ 562.330193][ T9776] do_sync+0x49a/0xcb0 [ 562.330212][ T9776] ? _raw_spin_unlock+0x28/0x50 [ 562.330235][ T9776] ? gfs2_quota_sync+0x370/0x470 [ 562.330263][ T9776] ? __pfx_do_sync+0x10/0x10 [ 562.330291][ T9776] ? gfs2_quota_sync+0x370/0x470 [ 562.330314][ T9776] ? do_raw_spin_unlock+0xf5/0x210 [ 562.330337][ T9776] gfs2_quota_sync+0x370/0x470 [ 562.330367][ T9776] gfs2_quotad+0x2b9/0x6e0 [ 562.330398][ T9776] ? __pfx_gfs2_quotad+0x10/0x10 [ 562.330419][ T9776] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.330445][ T9776] ? __kthread_parkme+0x7a/0x1f0 [ 562.330474][ T9776] kthread+0x388/0x470 [ 562.330496][ T9776] ? __pfx_gfs2_quotad+0x10/0x10 [ 562.330515][ T9776] ? __pfx_kthread+0x10/0x10 [ 562.330539][ T9776] ret_from_fork+0x514/0xb70 [ 562.330560][ T9776] ? __pfx_ret_from_fork+0x10/0x10 [ 562.330579][ T9776] ? __switch_to+0xc79/0x1410 [ 562.330604][ T9776] ? __pfx_kthread+0x10/0x10 [ 562.330627][ T9776] ret_from_fork_asm+0x1a/0x30 [ 562.330663][ T9776] [ 562.528649][ T9772] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 562.840072][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.847194][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.908852][ T9777] loop0: detected capacity change from 0 to 32768 [ 562.926526][ T9777] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 562.935225][ T9777] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 562.951739][ T9777] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 562.961782][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 562.969007][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 563.006533][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 563.014902][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 563.021606][ T9777] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 563.041536][ T9781] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 563.057733][ T9781] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 563.067398][ T9781] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9781 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 563.079181][ T9781] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 563.087598][ T9781] CPU: 1 UID: 0 PID: 9781 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 563.087622][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.087632][ T9781] Call Trace: [ 563.087640][ T9781] [ 563.087647][ T9781] dump_stack_lvl+0xe8/0x150 [ 563.087681][ T9781] gfs2_withdraw+0xc3/0x1b0 [ 563.087707][ T9781] inode_go_instantiate+0xe69/0x12a0 [ 563.087733][ T9781] ? preempt_schedule_common+0x82/0xd0 [ 563.087765][ T9781] ? __pfx_inode_go_instantiate+0x10/0x10 [ 563.087799][ T9781] gfs2_instantiate+0x168/0x220 [ 563.087828][ T9781] gfs2_glock_wait+0x1d4/0x2a0 [ 563.087848][ T9781] do_sync+0x49a/0xcb0 [ 563.087869][ T9781] ? _raw_spin_unlock+0x28/0x50 [ 563.087892][ T9781] ? gfs2_quota_sync+0x370/0x470 [ 563.087921][ T9781] ? __pfx_do_sync+0x10/0x10 [ 563.087951][ T9781] ? gfs2_quota_sync+0x370/0x470 [ 563.087975][ T9781] ? do_raw_spin_unlock+0xf5/0x210 [ 563.087998][ T9781] gfs2_quota_sync+0x370/0x470 [ 563.088028][ T9781] gfs2_quotad+0x2b9/0x6e0 [ 563.088062][ T9781] ? __pfx_gfs2_quotad+0x10/0x10 [ 563.088084][ T9781] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.088110][ T9781] ? __kthread_parkme+0x7a/0x1f0 [ 563.088141][ T9781] kthread+0x388/0x470 [ 563.088164][ T9781] ? __pfx_gfs2_quotad+0x10/0x10 [ 563.088184][ T9781] ? __pfx_kthread+0x10/0x10 [ 563.088208][ T9781] ret_from_fork+0x514/0xb70 [ 563.088231][ T9781] ? __pfx_ret_from_fork+0x10/0x10 [ 563.088251][ T9781] ? __switch_to+0xc79/0x1410 [ 563.088279][ T9781] ? __pfx_kthread+0x10/0x10 [ 563.088303][ T9781] ret_from_fork_asm+0x1a/0x30 [ 563.088340][ T9781] [ 563.279400][ T9777] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 563.596929][ T9783] loop0: detected capacity change from 0 to 32768 [ 563.622194][ T9783] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 563.630718][ T9783] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 563.646280][ T9783] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 563.658023][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 563.665057][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 563.712297][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 563.719996][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 563.725851][ T9783] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 563.759573][ T9787] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 563.774253][ T9787] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 563.785421][ T9787] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9787 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 563.788900][ T9783] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 563.795834][ T9787] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 563.816091][ T9787] CPU: 0 UID: 0 PID: 9787 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 563.816115][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.816126][ T9787] Call Trace: [ 563.816134][ T9787] [ 563.816142][ T9787] dump_stack_lvl+0xe8/0x150 [ 563.816169][ T9787] gfs2_withdraw+0xc3/0x1b0 [ 563.816197][ T9787] inode_go_instantiate+0xe69/0x12a0 [ 563.816224][ T9787] ? preempt_schedule_common+0x82/0xd0 [ 563.816257][ T9787] ? __pfx_inode_go_instantiate+0x10/0x10 [ 563.816292][ T9787] gfs2_instantiate+0x168/0x220 [ 563.816321][ T9787] gfs2_glock_wait+0x1d4/0x2a0 [ 563.816340][ T9787] do_sync+0x49a/0xcb0 [ 563.816360][ T9787] ? _raw_spin_unlock+0x28/0x50 [ 563.816392][ T9787] ? gfs2_quota_sync+0x370/0x470 [ 563.816416][ T9787] ? __pfx_do_sync+0x10/0x10 [ 563.816444][ T9787] ? gfs2_quota_sync+0x370/0x470 [ 563.816469][ T9787] ? do_raw_spin_unlock+0xf5/0x210 [ 563.816490][ T9787] gfs2_quota_sync+0x370/0x470 [ 563.816513][ T9787] gfs2_quotad+0x2b9/0x6e0 [ 563.816543][ T9787] ? __pfx_gfs2_quotad+0x10/0x10 [ 563.816566][ T9787] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.816591][ T9787] ? __kthread_parkme+0x7a/0x1f0 [ 563.816622][ T9787] kthread+0x388/0x470 [ 563.816645][ T9787] ? __pfx_gfs2_quotad+0x10/0x10 [ 563.816665][ T9787] ? __pfx_kthread+0x10/0x10 [ 563.816690][ T9787] ret_from_fork+0x514/0xb70 [ 563.816713][ T9787] ? __pfx_ret_from_fork+0x10/0x10 [ 563.816732][ T9787] ? __switch_to+0xc79/0x1410 [ 563.816760][ T9787] ? __pfx_kthread+0x10/0x10 [ 563.816785][ T9787] ret_from_fork_asm+0x1a/0x30 [ 563.816823][ T9787] [ 563.998616][ T9783] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 564.319625][ T9788] loop0: detected capacity change from 0 to 32768 [ 564.341755][ T9788] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 564.350162][ T9788] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 564.366233][ T9788] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 564.375691][ T8827] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 564.383658][ T8827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 564.411171][ T8827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 564.418801][ T8827] gfs2: fsid=syz:syz.0: jid=0: Done [ 564.425078][ T9788] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 564.442110][ T9792] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 564.457504][ T9792] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 564.467313][ T9792] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9792 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 564.477910][ T9792] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 564.483189][ T9788] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 564.486697][ T9792] CPU: 1 UID: 0 PID: 9792 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 564.486719][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 564.486730][ T9792] Call Trace: [ 564.486737][ T9792] [ 564.486745][ T9792] dump_stack_lvl+0xe8/0x150 [ 564.486769][ T9792] gfs2_withdraw+0xc3/0x1b0 [ 564.486796][ T9792] inode_go_instantiate+0xe69/0x12a0 [ 564.486823][ T9792] ? preempt_schedule_common+0x82/0xd0 [ 564.486854][ T9792] ? __pfx_inode_go_instantiate+0x10/0x10 [ 564.486887][ T9792] gfs2_instantiate+0x168/0x220 [ 564.486915][ T9792] gfs2_glock_wait+0x1d4/0x2a0 [ 564.486934][ T9792] do_sync+0x49a/0xcb0 [ 564.486953][ T9792] ? _raw_spin_unlock+0x28/0x50 [ 564.486975][ T9792] ? gfs2_quota_sync+0x370/0x470 [ 564.487003][ T9792] ? __pfx_do_sync+0x10/0x10 [ 564.487032][ T9792] ? gfs2_quota_sync+0x370/0x470 [ 564.487055][ T9792] ? do_raw_spin_unlock+0xf5/0x210 [ 564.487076][ T9792] gfs2_quota_sync+0x370/0x470 [ 564.487105][ T9792] gfs2_quotad+0x2b9/0x6e0 [ 564.487138][ T9792] ? __pfx_gfs2_quotad+0x10/0x10 [ 564.487159][ T9792] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.487184][ T9792] ? __kthread_parkme+0x7a/0x1f0 [ 564.487213][ T9792] kthread+0x388/0x470 [ 564.487235][ T9792] ? __pfx_gfs2_quotad+0x10/0x10 [ 564.487254][ T9792] ? __pfx_kthread+0x10/0x10 [ 564.487277][ T9792] ret_from_fork+0x514/0xb70 [ 564.487298][ T9792] ? __pfx_ret_from_fork+0x10/0x10 [ 564.487317][ T9792] ? __switch_to+0xc79/0x1410 [ 564.487343][ T9792] ? __pfx_kthread+0x10/0x10 [ 564.487367][ T9792] ret_from_fork_asm+0x1a/0x30 [ 564.487402][ T9792] [ 564.689424][ T9788] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 565.021215][ T9793] loop0: detected capacity change from 0 to 32768 [ 565.036711][ T9793] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 565.045535][ T9793] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 565.063955][ T9793] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 565.076071][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 565.083934][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 565.123412][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 565.132178][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 565.138837][ T9793] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 565.160491][ T9797] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 565.175688][ T9797] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 565.185240][ T9797] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9797 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 565.197041][ T9797] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 565.205718][ T9797] CPU: 0 UID: 0 PID: 9797 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 565.205741][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.205753][ T9797] Call Trace: [ 565.205761][ T9797] [ 565.205769][ T9797] dump_stack_lvl+0xe8/0x150 [ 565.205795][ T9797] gfs2_withdraw+0xc3/0x1b0 [ 565.205823][ T9797] inode_go_instantiate+0xe69/0x12a0 [ 565.205846][ T9797] ? __pfx_bit_wait+0x10/0x10 [ 565.205871][ T9797] ? __pfx_bit_wait+0x10/0x10 [ 565.205887][ T9797] ? __pfx_inode_go_instantiate+0x10/0x10 [ 565.205913][ T9797] ? __pfx_wake_bit_function+0x10/0x10 [ 565.205938][ T9797] gfs2_instantiate+0x168/0x220 [ 565.205966][ T9797] gfs2_glock_wait+0x1d4/0x2a0 [ 565.205985][ T9797] do_sync+0x49a/0xcb0 [ 565.206004][ T9797] ? _raw_spin_unlock+0x28/0x50 [ 565.206027][ T9797] ? gfs2_quota_sync+0x370/0x470 [ 565.206056][ T9797] ? __pfx_do_sync+0x10/0x10 [ 565.206086][ T9797] ? gfs2_quota_sync+0x370/0x470 [ 565.206110][ T9797] ? do_raw_spin_unlock+0xf5/0x210 [ 565.206133][ T9797] gfs2_quota_sync+0x370/0x470 [ 565.206164][ T9797] gfs2_quotad+0x2b9/0x6e0 [ 565.206198][ T9797] ? __pfx_gfs2_quotad+0x10/0x10 [ 565.206221][ T9797] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 565.206241][ T9797] ? __kthread_parkme+0x7a/0x1f0 [ 565.206267][ T9797] kthread+0x388/0x470 [ 565.206292][ T9797] ? __pfx_gfs2_quotad+0x10/0x10 [ 565.206311][ T9797] ? __pfx_kthread+0x10/0x10 [ 565.206336][ T9797] ret_from_fork+0x514/0xb70 [ 565.206358][ T9797] ? __pfx_ret_from_fork+0x10/0x10 [ 565.206378][ T9797] ? __switch_to+0xc79/0x1410 [ 565.206404][ T9797] ? __pfx_kthread+0x10/0x10 [ 565.206428][ T9797] ret_from_fork_asm+0x1a/0x30 [ 565.206476][ T9797] [ 565.398848][ T9793] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 565.713587][ T9798] loop0: detected capacity change from 0 to 32768 [ 565.725917][ T9798] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 565.735110][ T9798] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 565.748017][ T9798] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 565.757693][ T8827] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 565.764738][ T8827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 565.801710][ T8827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 565.809353][ T8827] gfs2: fsid=syz:syz.0: jid=0: Done [ 565.815175][ T9798] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 565.867627][ T9798] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 565.878334][ T9798] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 565.892667][ T9798] CPU: 0 UID: 0 PID: 9798 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 565.892692][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.892702][ T9798] Call Trace: [ 565.892717][ T9798] [ 565.892725][ T9798] dump_stack_lvl+0xe8/0x150 [ 565.892751][ T9798] gfs2_assert_warn_i+0x194/0x2c0 [ 565.892785][ T9798] gfs2_qd_dispose+0x466/0x570 [ 565.892811][ T9798] gfs2_quota_init+0xcd4/0x1220 [ 565.892851][ T9798] ? __pfx_gfs2_quota_init+0x10/0x10 [ 565.892869][ T9798] ? __pfx_wake_up_bit+0x10/0x10 [ 565.892882][ T9798] ? inode_go_inval+0x2a0/0x360 [ 565.892898][ T9798] gfs2_make_fs_rw+0x143/0x230 [ 565.892910][ T9798] gfs2_fill_super+0x1ba5/0x21d0 [ 565.892933][ T9798] ? __pfx_gfs2_fill_super+0x10/0x10 [ 565.892949][ T9798] ? init_locking+0xb8/0x210 [ 565.892963][ T9798] ? sb_set_blocksize+0x155/0x240 [ 565.892978][ T9798] ? setup_bdev_super+0x4c1/0x5b0 [ 565.892996][ T9798] get_tree_bdev_flags+0x431/0x4f0 [ 565.893012][ T9798] ? __pfx_gfs2_fill_super+0x10/0x10 [ 565.893026][ T9798] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 565.893040][ T9798] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 565.893062][ T9798] gfs2_get_tree+0x51/0x1e0 [ 565.893084][ T9798] vfs_get_tree+0x92/0x2a0 [ 565.893101][ T9798] do_new_mount+0x341/0xd30 [ 565.893113][ T9798] ? apparmor_capable+0x126/0x170 [ 565.893127][ T9798] ? __pfx_do_new_mount+0x10/0x10 [ 565.893144][ T9798] ? ns_capable+0x89/0xe0 [ 565.893162][ T9798] ? user_path_at+0xd4/0x160 [ 565.893177][ T9798] __se_sys_mount+0x31d/0x420 [ 565.893193][ T9798] ? __pfx___se_sys_mount+0x10/0x10 [ 565.893209][ T9798] ? __x64_sys_mount+0x20/0xc0 [ 565.893221][ T9798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.893232][ T9798] do_syscall_64+0x15f/0xf80 [ 565.893242][ T9798] ? trace_irq_disable+0x3b/0x140 [ 565.893254][ T9798] ? clear_bhb_loop+0x40/0x90 [ 565.893267][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.893280][ T9798] RIP: 0033:0x7fb66284b06a [ 565.893296][ T9798] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 565.893310][ T9798] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 565.893327][ T9798] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 565.893338][ T9798] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 565.893350][ T9798] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 565.893361][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 565.893369][ T9798] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 565.893385][ T9798] [ 566.166489][ T9798] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 566.514224][ T9803] loop0: detected capacity change from 0 to 32768 [ 566.538786][ T9803] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 566.547138][ T9803] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 566.562548][ T9803] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 566.571907][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 566.580007][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 566.617306][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 566.625081][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 566.632973][ T9803] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 566.661434][ T9807] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 566.675871][ T9807] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 566.685860][ T9807] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9807 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 566.690070][ T9803] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 566.696232][ T9807] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 566.715702][ T9807] CPU: 0 UID: 0 PID: 9807 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 566.715725][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.715736][ T9807] Call Trace: [ 566.715742][ T9807] [ 566.715751][ T9807] dump_stack_lvl+0xe8/0x150 [ 566.715773][ T9807] gfs2_withdraw+0xc3/0x1b0 [ 566.715799][ T9807] inode_go_instantiate+0xe69/0x12a0 [ 566.715823][ T9807] ? preempt_schedule_common+0x82/0xd0 [ 566.715852][ T9807] ? __pfx_inode_go_instantiate+0x10/0x10 [ 566.715885][ T9807] gfs2_instantiate+0x168/0x220 [ 566.715913][ T9807] gfs2_glock_wait+0x1d4/0x2a0 [ 566.715933][ T9807] do_sync+0x49a/0xcb0 [ 566.715953][ T9807] ? _raw_spin_unlock+0x28/0x50 [ 566.715977][ T9807] ? gfs2_quota_sync+0x370/0x470 [ 566.716007][ T9807] ? __pfx_do_sync+0x10/0x10 [ 566.716037][ T9807] ? gfs2_quota_sync+0x370/0x470 [ 566.716061][ T9807] ? do_raw_spin_unlock+0xf5/0x210 [ 566.716083][ T9807] gfs2_quota_sync+0x370/0x470 [ 566.716113][ T9807] gfs2_quotad+0x2b9/0x6e0 [ 566.716146][ T9807] ? __pfx_gfs2_quotad+0x10/0x10 [ 566.716169][ T9807] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 566.716194][ T9807] ? __kthread_parkme+0x7a/0x1f0 [ 566.716223][ T9807] kthread+0x388/0x470 [ 566.716243][ T9807] ? __pfx_gfs2_quotad+0x10/0x10 [ 566.716261][ T9807] ? __pfx_kthread+0x10/0x10 [ 566.716285][ T9807] ret_from_fork+0x514/0xb70 [ 566.716307][ T9807] ? __pfx_ret_from_fork+0x10/0x10 [ 566.716327][ T9807] ? __switch_to+0xc79/0x1410 [ 566.716382][ T9807] ? __pfx_kthread+0x10/0x10 [ 566.716414][ T9807] ret_from_fork_asm+0x1a/0x30 [ 566.716452][ T9807] [ 566.899401][ T9803] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 567.215345][ T9808] loop0: detected capacity change from 0 to 32768 [ 567.229788][ T9808] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 567.244552][ T9808] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 567.262309][ T9808] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 567.271589][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 567.278813][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 567.334795][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 55ms [ 567.343060][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 567.349881][ T9808] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 567.370532][ T9812] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 567.387277][ T9812] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 567.396584][ T9812] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9812 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 567.407115][ T9812] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 567.409635][ T9808] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 567.415463][ T9812] CPU: 1 UID: 0 PID: 9812 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 567.415486][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 567.415496][ T9812] Call Trace: [ 567.415504][ T9812] [ 567.415512][ T9812] dump_stack_lvl+0xe8/0x150 [ 567.415537][ T9812] gfs2_withdraw+0xc3/0x1b0 [ 567.415563][ T9812] inode_go_instantiate+0xe69/0x12a0 [ 567.415590][ T9812] ? preempt_schedule_common+0x82/0xd0 [ 567.415620][ T9812] ? __pfx_inode_go_instantiate+0x10/0x10 [ 567.415653][ T9812] gfs2_instantiate+0x168/0x220 [ 567.415680][ T9812] gfs2_glock_wait+0x1d4/0x2a0 [ 567.415700][ T9812] do_sync+0x49a/0xcb0 [ 567.415719][ T9812] ? _raw_spin_unlock+0x28/0x50 [ 567.415741][ T9812] ? gfs2_quota_sync+0x370/0x470 [ 567.415769][ T9812] ? __pfx_do_sync+0x10/0x10 [ 567.415797][ T9812] ? gfs2_quota_sync+0x370/0x470 [ 567.415819][ T9812] ? do_raw_spin_unlock+0xf5/0x210 [ 567.415841][ T9812] gfs2_quota_sync+0x370/0x470 [ 567.415870][ T9812] gfs2_quotad+0x2b9/0x6e0 [ 567.415902][ T9812] ? __pfx_gfs2_quotad+0x10/0x10 [ 567.415923][ T9812] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 567.415948][ T9812] ? __kthread_parkme+0x7a/0x1f0 [ 567.415978][ T9812] kthread+0x388/0x470 [ 567.416000][ T9812] ? __pfx_gfs2_quotad+0x10/0x10 [ 567.416018][ T9812] ? __pfx_kthread+0x10/0x10 [ 567.416049][ T9812] ret_from_fork+0x514/0xb70 [ 567.416070][ T9812] ? __pfx_ret_from_fork+0x10/0x10 [ 567.416088][ T9812] ? __switch_to+0xc79/0x1410 [ 567.416116][ T9812] ? __pfx_kthread+0x10/0x10 [ 567.416139][ T9812] ret_from_fork_asm+0x1a/0x30 [ 567.416175][ T9812] [ 567.618645][ T9808] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 567.947406][ T9813] loop0: detected capacity change from 0 to 32768 [ 567.973841][ T9813] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 567.998470][ T9813] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 568.021641][ T9813] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 568.045595][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 568.063264][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 568.139485][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 76ms [ 568.149886][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 568.155343][ T9813] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 568.191261][ T9817] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 568.208809][ T9817] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 568.218298][ T9817] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9817 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 568.221104][ T9813] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 568.229068][ T9817] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 568.248320][ T9817] CPU: 0 UID: 0 PID: 9817 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 568.248343][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.248354][ T9817] Call Trace: [ 568.248362][ T9817] [ 568.248370][ T9817] dump_stack_lvl+0xe8/0x150 [ 568.248396][ T9817] gfs2_withdraw+0xc3/0x1b0 [ 568.248425][ T9817] inode_go_instantiate+0xe69/0x12a0 [ 568.248450][ T9817] ? preempt_schedule_common+0x82/0xd0 [ 568.248480][ T9817] ? __pfx_inode_go_instantiate+0x10/0x10 [ 568.248515][ T9817] gfs2_instantiate+0x168/0x220 [ 568.248543][ T9817] gfs2_glock_wait+0x1d4/0x2a0 [ 568.248563][ T9817] do_sync+0x49a/0xcb0 [ 568.248583][ T9817] ? _raw_spin_unlock+0x28/0x50 [ 568.248606][ T9817] ? gfs2_quota_sync+0x370/0x470 [ 568.248636][ T9817] ? __pfx_do_sync+0x10/0x10 [ 568.248665][ T9817] ? gfs2_quota_sync+0x370/0x470 [ 568.248688][ T9817] ? do_raw_spin_unlock+0xf5/0x210 [ 568.248710][ T9817] gfs2_quota_sync+0x370/0x470 [ 568.248741][ T9817] gfs2_quotad+0x2b9/0x6e0 [ 568.248795][ T9817] ? __pfx_gfs2_quotad+0x10/0x10 [ 568.248819][ T9817] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 568.248844][ T9817] ? __kthread_parkme+0x7a/0x1f0 [ 568.248876][ T9817] kthread+0x388/0x470 [ 568.248900][ T9817] ? __pfx_gfs2_quotad+0x10/0x10 [ 568.248923][ T9817] ? __pfx_kthread+0x10/0x10 [ 568.248955][ T9817] ret_from_fork+0x514/0xb70 [ 568.248978][ T9817] ? __pfx_ret_from_fork+0x10/0x10 [ 568.248998][ T9817] ? __switch_to+0xc79/0x1410 [ 568.249026][ T9817] ? __pfx_kthread+0x10/0x10 [ 568.249051][ T9817] ret_from_fork_asm+0x1a/0x30 [ 568.249089][ T9817] [ 568.458629][ T9813] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 568.777805][ T9818] loop0: detected capacity change from 0 to 32768 [ 568.791495][ T9818] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 568.801751][ T9818] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 568.813536][ T9818] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 568.822625][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 568.830220][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 568.877633][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 568.886068][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 568.891764][ T9818] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 568.911572][ T9822] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 568.933726][ T9822] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 568.943611][ T9822] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9822 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 568.954503][ T9822] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 568.964211][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 568.964236][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.964247][ T9822] Call Trace: [ 568.964255][ T9822] [ 568.964262][ T9822] dump_stack_lvl+0xe8/0x150 [ 568.964292][ T9822] gfs2_withdraw+0xc3/0x1b0 [ 568.964318][ T9822] inode_go_instantiate+0xe69/0x12a0 [ 568.964335][ T9822] ? preempt_schedule_common+0x82/0xd0 [ 568.964354][ T9822] ? __pfx_inode_go_instantiate+0x10/0x10 [ 568.964374][ T9822] gfs2_instantiate+0x168/0x220 [ 568.964391][ T9822] gfs2_glock_wait+0x1d4/0x2a0 [ 568.964402][ T9822] do_sync+0x49a/0xcb0 [ 568.964414][ T9822] ? _raw_spin_unlock+0x28/0x50 [ 568.964428][ T9822] ? gfs2_quota_sync+0x370/0x470 [ 568.964444][ T9822] ? __pfx_do_sync+0x10/0x10 [ 568.964461][ T9822] ? gfs2_quota_sync+0x370/0x470 [ 568.964474][ T9822] ? do_raw_spin_unlock+0xf5/0x210 [ 568.964487][ T9822] gfs2_quota_sync+0x370/0x470 [ 568.964504][ T9822] gfs2_quotad+0x2b9/0x6e0 [ 568.964523][ T9822] ? __pfx_gfs2_quotad+0x10/0x10 [ 568.964536][ T9822] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 568.964551][ T9822] ? __kthread_parkme+0x7a/0x1f0 [ 568.964569][ T9822] kthread+0x388/0x470 [ 568.964583][ T9822] ? __pfx_gfs2_quotad+0x10/0x10 [ 568.964594][ T9822] ? __pfx_kthread+0x10/0x10 [ 568.964609][ T9822] ret_from_fork+0x514/0xb70 [ 568.964622][ T9822] ? __pfx_ret_from_fork+0x10/0x10 [ 568.964632][ T9822] ? __switch_to+0xc79/0x1410 [ 568.964650][ T9822] ? __pfx_kthread+0x10/0x10 [ 568.964664][ T9822] ret_from_fork_asm+0x1a/0x30 [ 568.964685][ T9822] [ 569.178584][ T9818] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 569.493396][ T9823] loop0: detected capacity change from 0 to 32768 [ 569.507296][ T9823] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 569.516335][ T9823] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 569.532414][ T9823] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 569.544110][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 569.551184][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 569.605748][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 54ms [ 569.613472][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 569.620549][ T9823] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 569.640966][ T9827] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 569.655620][ T9827] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 569.665487][ T9827] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9827 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 569.676882][ T9827] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 569.685176][ T9827] CPU: 1 UID: 0 PID: 9827 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 569.685198][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 569.685208][ T9827] Call Trace: [ 569.685216][ T9827] [ 569.685224][ T9827] dump_stack_lvl+0xe8/0x150 [ 569.685248][ T9827] gfs2_withdraw+0xc3/0x1b0 [ 569.685274][ T9827] inode_go_instantiate+0xe69/0x12a0 [ 569.685297][ T9827] ? preempt_schedule_common+0x82/0xd0 [ 569.685326][ T9827] ? __pfx_inode_go_instantiate+0x10/0x10 [ 569.685359][ T9827] gfs2_instantiate+0x168/0x220 [ 569.685388][ T9827] gfs2_glock_wait+0x1d4/0x2a0 [ 569.685409][ T9827] do_sync+0x49a/0xcb0 [ 569.685429][ T9827] ? _raw_spin_unlock+0x28/0x50 [ 569.685452][ T9827] ? gfs2_quota_sync+0x370/0x470 [ 569.685481][ T9827] ? __pfx_do_sync+0x10/0x10 [ 569.685510][ T9827] ? gfs2_quota_sync+0x370/0x470 [ 569.685534][ T9827] ? do_raw_spin_unlock+0xf5/0x210 [ 569.685557][ T9827] gfs2_quota_sync+0x370/0x470 [ 569.685586][ T9827] gfs2_quotad+0x2b9/0x6e0 [ 569.685619][ T9827] ? __pfx_gfs2_quotad+0x10/0x10 [ 569.685641][ T9827] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 569.685667][ T9827] ? __kthread_parkme+0x7a/0x1f0 [ 569.685697][ T9827] kthread+0x388/0x470 [ 569.685721][ T9827] ? __pfx_gfs2_quotad+0x10/0x10 [ 569.685740][ T9827] ? __pfx_kthread+0x10/0x10 [ 569.685763][ T9827] ret_from_fork+0x514/0xb70 [ 569.685784][ T9827] ? __pfx_ret_from_fork+0x10/0x10 [ 569.685804][ T9827] ? __switch_to+0xc79/0x1410 [ 569.685832][ T9827] ? __pfx_kthread+0x10/0x10 [ 569.685857][ T9827] ret_from_fork_asm+0x1a/0x30 [ 569.685894][ T9827] [ 569.858616][ T9823] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 570.173847][ T9828] loop0: detected capacity change from 0 to 32768 [ 570.188152][ T9828] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 570.210753][ T9828] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 570.236558][ T9828] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 570.252866][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 570.259844][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 570.296890][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 570.305321][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 570.311455][ T9828] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 570.366859][ T9828] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 570.377577][ T9828] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 570.391781][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 570.391797][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 570.391803][ T9828] Call Trace: [ 570.391807][ T9828] [ 570.391812][ T9828] dump_stack_lvl+0xe8/0x150 [ 570.391829][ T9828] gfs2_assert_warn_i+0x194/0x2c0 [ 570.391850][ T9828] gfs2_qd_dispose+0x466/0x570 [ 570.391865][ T9828] gfs2_quota_init+0xcd4/0x1220 [ 570.391889][ T9828] ? __pfx_gfs2_quota_init+0x10/0x10 [ 570.391902][ T9828] ? __pfx_wake_up_bit+0x10/0x10 [ 570.391916][ T9828] ? inode_go_inval+0x2a0/0x360 [ 570.391931][ T9828] gfs2_make_fs_rw+0x143/0x230 [ 570.391943][ T9828] gfs2_fill_super+0x1ba5/0x21d0 [ 570.391965][ T9828] ? __pfx_gfs2_fill_super+0x10/0x10 [ 570.391981][ T9828] ? init_locking+0xb8/0x210 [ 570.391995][ T9828] ? sb_set_blocksize+0x155/0x240 [ 570.392011][ T9828] ? setup_bdev_super+0x4c1/0x5b0 [ 570.392029][ T9828] get_tree_bdev_flags+0x431/0x4f0 [ 570.392044][ T9828] ? __pfx_gfs2_fill_super+0x10/0x10 [ 570.392059][ T9828] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 570.392072][ T9828] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 570.392094][ T9828] gfs2_get_tree+0x51/0x1e0 [ 570.392110][ T9828] vfs_get_tree+0x92/0x2a0 [ 570.392126][ T9828] do_new_mount+0x341/0xd30 [ 570.392138][ T9828] ? apparmor_capable+0x126/0x170 [ 570.392152][ T9828] ? __pfx_do_new_mount+0x10/0x10 [ 570.392164][ T9828] ? ns_capable+0x89/0xe0 [ 570.392181][ T9828] ? user_path_at+0xd4/0x160 [ 570.392196][ T9828] __se_sys_mount+0x31d/0x420 [ 570.392212][ T9828] ? __pfx___se_sys_mount+0x10/0x10 [ 570.392228][ T9828] ? __x64_sys_mount+0x20/0xc0 [ 570.392240][ T9828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.392250][ T9828] do_syscall_64+0x15f/0xf80 [ 570.392261][ T9828] ? trace_irq_disable+0x3b/0x140 [ 570.392273][ T9828] ? clear_bhb_loop+0x40/0x90 [ 570.392285][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.392295][ T9828] RIP: 0033:0x7fb66284b06a [ 570.392306][ T9828] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 570.392315][ T9828] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 570.392326][ T9828] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 570.392333][ T9828] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 570.392340][ T9828] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 570.392346][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 570.392352][ T9828] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 570.392367][ T9828] [ 570.667445][ T9828] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 571.042444][ T9833] loop0: detected capacity change from 0 to 32768 [ 571.066337][ T9833] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 571.074891][ T9833] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 571.092703][ T9833] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 571.103736][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 571.111491][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 571.142160][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 30ms [ 571.149786][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 571.155025][ T9833] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 571.201315][ T9833] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 571.212941][ T9833] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 571.227235][ T9833] CPU: 1 UID: 0 PID: 9833 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 571.227250][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 571.227256][ T9833] Call Trace: [ 571.227261][ T9833] [ 571.227265][ T9833] dump_stack_lvl+0xe8/0x150 [ 571.227282][ T9833] gfs2_assert_warn_i+0x194/0x2c0 [ 571.227303][ T9833] gfs2_qd_dispose+0x466/0x570 [ 571.227319][ T9833] gfs2_quota_init+0xcd4/0x1220 [ 571.227342][ T9833] ? __pfx_gfs2_quota_init+0x10/0x10 [ 571.227355][ T9833] ? __pfx_wake_up_bit+0x10/0x10 [ 571.227369][ T9833] ? inode_go_inval+0x2a0/0x360 [ 571.227384][ T9833] gfs2_make_fs_rw+0x143/0x230 [ 571.227396][ T9833] gfs2_fill_super+0x1ba5/0x21d0 [ 571.227418][ T9833] ? __pfx_gfs2_fill_super+0x10/0x10 [ 571.227435][ T9833] ? init_locking+0xb8/0x210 [ 571.227448][ T9833] ? sb_set_blocksize+0x155/0x240 [ 571.227463][ T9833] ? setup_bdev_super+0x4c1/0x5b0 [ 571.227480][ T9833] get_tree_bdev_flags+0x431/0x4f0 [ 571.227496][ T9833] ? __pfx_gfs2_fill_super+0x10/0x10 [ 571.227512][ T9833] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 571.227534][ T9833] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 571.227568][ T9833] gfs2_get_tree+0x51/0x1e0 [ 571.227594][ T9833] vfs_get_tree+0x92/0x2a0 [ 571.227612][ T9833] do_new_mount+0x341/0xd30 [ 571.227624][ T9833] ? apparmor_capable+0x126/0x170 [ 571.227637][ T9833] ? __pfx_do_new_mount+0x10/0x10 [ 571.227649][ T9833] ? ns_capable+0x89/0xe0 [ 571.227672][ T9833] ? user_path_at+0xd4/0x160 [ 571.227688][ T9833] __se_sys_mount+0x31d/0x420 [ 571.227703][ T9833] ? __pfx___se_sys_mount+0x10/0x10 [ 571.227720][ T9833] ? __x64_sys_mount+0x20/0xc0 [ 571.227732][ T9833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.227743][ T9833] do_syscall_64+0x15f/0xf80 [ 571.227753][ T9833] ? trace_irq_disable+0x3b/0x140 [ 571.227765][ T9833] ? clear_bhb_loop+0x40/0x90 [ 571.227777][ T9833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.227787][ T9833] RIP: 0033:0x7fb66284b06a [ 571.227798][ T9833] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 571.227807][ T9833] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 571.227818][ T9833] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 571.227825][ T9833] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 571.227832][ T9833] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 571.227838][ T9833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 571.227845][ T9833] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 571.227860][ T9833] [ 571.504025][ T9833] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 571.851404][ T9838] loop0: detected capacity change from 0 to 32768 [ 571.866136][ T9838] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 571.876116][ T9838] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 571.888597][ T9838] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 571.897988][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 571.905395][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 571.953749][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 48ms [ 571.963208][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 571.971395][ T9838] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 572.026507][ T9838] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 572.039458][ T9838] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 572.053157][ T9838] CPU: 1 UID: 0 PID: 9838 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 572.053178][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.053188][ T9838] Call Trace: [ 572.053195][ T9838] [ 572.053201][ T9838] dump_stack_lvl+0xe8/0x150 [ 572.053226][ T9838] gfs2_assert_warn_i+0x194/0x2c0 [ 572.053255][ T9838] gfs2_qd_dispose+0x466/0x570 [ 572.053280][ T9838] gfs2_quota_init+0xcd4/0x1220 [ 572.053318][ T9838] ? __pfx_gfs2_quota_init+0x10/0x10 [ 572.053339][ T9838] ? __pfx_wake_up_bit+0x10/0x10 [ 572.053363][ T9838] ? inode_go_inval+0x2a0/0x360 [ 572.053389][ T9838] gfs2_make_fs_rw+0x143/0x230 [ 572.053409][ T9838] gfs2_fill_super+0x1ba5/0x21d0 [ 572.053448][ T9838] ? __pfx_gfs2_fill_super+0x10/0x10 [ 572.053475][ T9838] ? init_locking+0xb8/0x210 [ 572.053497][ T9838] ? sb_set_blocksize+0x155/0x240 [ 572.053521][ T9838] ? setup_bdev_super+0x4c1/0x5b0 [ 572.053550][ T9838] get_tree_bdev_flags+0x431/0x4f0 [ 572.053585][ T9838] ? __pfx_gfs2_fill_super+0x10/0x10 [ 572.053608][ T9838] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 572.053630][ T9838] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 572.053666][ T9838] gfs2_get_tree+0x51/0x1e0 [ 572.053690][ T9838] vfs_get_tree+0x92/0x2a0 [ 572.053715][ T9838] do_new_mount+0x341/0xd30 [ 572.053735][ T9838] ? apparmor_capable+0x126/0x170 [ 572.053760][ T9838] ? __pfx_do_new_mount+0x10/0x10 [ 572.053781][ T9838] ? ns_capable+0x89/0xe0 [ 572.053812][ T9838] ? user_path_at+0xd4/0x160 [ 572.053837][ T9838] __se_sys_mount+0x31d/0x420 [ 572.053865][ T9838] ? __pfx___se_sys_mount+0x10/0x10 [ 572.053893][ T9838] ? __x64_sys_mount+0x20/0xc0 [ 572.053913][ T9838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.053933][ T9838] do_syscall_64+0x15f/0xf80 [ 572.053951][ T9838] ? trace_irq_disable+0x3b/0x140 [ 572.053972][ T9838] ? clear_bhb_loop+0x40/0x90 [ 572.053994][ T9838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.054012][ T9838] RIP: 0033:0x7fb66284b06a [ 572.054030][ T9838] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 572.054046][ T9838] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 572.054065][ T9838] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 572.054078][ T9838] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 572.054091][ T9838] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 572.054103][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 572.054114][ T9838] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 572.054141][ T9838] [ 572.325403][ T9838] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 572.648970][ T9843] loop0: detected capacity change from 0 to 32768 [ 572.672581][ T9843] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 572.683013][ T9843] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 572.700712][ T9843] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 572.712610][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 572.730386][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 572.776376][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms [ 572.784552][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 572.789860][ T9843] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 572.813609][ T9847] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 572.828112][ T9847] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 572.837824][ T9847] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9847 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 572.845895][ T9843] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 572.848684][ T9847] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 572.868359][ T9847] CPU: 1 UID: 0 PID: 9847 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 572.868383][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.868395][ T9847] Call Trace: [ 572.868406][ T9847] [ 572.868413][ T9847] dump_stack_lvl+0xe8/0x150 [ 572.868438][ T9847] gfs2_withdraw+0xc3/0x1b0 [ 572.868532][ T9847] inode_go_instantiate+0xe69/0x12a0 [ 572.868560][ T9847] ? preempt_schedule_common+0x82/0xd0 [ 572.868592][ T9847] ? __pfx_inode_go_instantiate+0x10/0x10 [ 572.868627][ T9847] gfs2_instantiate+0x168/0x220 [ 572.868655][ T9847] gfs2_glock_wait+0x1d4/0x2a0 [ 572.868676][ T9847] do_sync+0x49a/0xcb0 [ 572.868696][ T9847] ? _raw_spin_unlock+0x28/0x50 [ 572.868718][ T9847] ? gfs2_quota_sync+0x370/0x470 [ 572.868749][ T9847] ? __pfx_do_sync+0x10/0x10 [ 572.868778][ T9847] ? gfs2_quota_sync+0x370/0x470 [ 572.868803][ T9847] ? do_raw_spin_unlock+0xf5/0x210 [ 572.868827][ T9847] gfs2_quota_sync+0x370/0x470 [ 572.868858][ T9847] gfs2_quotad+0x2b9/0x6e0 [ 572.868892][ T9847] ? __pfx_gfs2_quotad+0x10/0x10 [ 572.868915][ T9847] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 572.868941][ T9847] ? __kthread_parkme+0x7a/0x1f0 [ 572.868973][ T9847] kthread+0x388/0x470 [ 572.868996][ T9847] ? __pfx_gfs2_quotad+0x10/0x10 [ 572.869015][ T9847] ? __pfx_kthread+0x10/0x10 [ 572.869040][ T9847] ret_from_fork+0x514/0xb70 [ 572.869063][ T9847] ? __pfx_ret_from_fork+0x10/0x10 [ 572.869083][ T9847] ? __switch_to+0xc79/0x1410 [ 572.869110][ T9847] ? __pfx_kthread+0x10/0x10 [ 572.869135][ T9847] ret_from_fork_asm+0x1a/0x30 [ 572.869172][ T9847] [ 573.058746][ T9843] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 573.388364][ T9848] loop0: detected capacity change from 0 to 32768 [ 573.405224][ T9848] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 573.414854][ T9848] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 573.426813][ T9848] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 573.436052][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 573.442977][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 573.485200][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 42ms [ 573.493591][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 573.499067][ T9848] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 573.531751][ T9852] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 573.546311][ T9852] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 573.564244][ T9852] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9852 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 573.574925][ T9852] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 573.577063][ T9848] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 573.583569][ T9852] CPU: 1 UID: 0 PID: 9852 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 573.583590][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 573.583600][ T9852] Call Trace: [ 573.583608][ T9852] [ 573.583615][ T9852] dump_stack_lvl+0xe8/0x150 [ 573.583640][ T9852] gfs2_withdraw+0xc3/0x1b0 [ 573.583666][ T9852] inode_go_instantiate+0xe69/0x12a0 [ 573.583692][ T9852] ? preempt_schedule_common+0x82/0xd0 [ 573.583722][ T9852] ? __pfx_inode_go_instantiate+0x10/0x10 [ 573.583755][ T9852] gfs2_instantiate+0x168/0x220 [ 573.583781][ T9852] gfs2_glock_wait+0x1d4/0x2a0 [ 573.583801][ T9852] do_sync+0x49a/0xcb0 [ 573.583819][ T9852] ? _raw_spin_unlock+0x28/0x50 [ 573.583847][ T9852] ? gfs2_quota_sync+0x370/0x470 [ 573.583876][ T9852] ? __pfx_do_sync+0x10/0x10 [ 573.583904][ T9852] ? gfs2_quota_sync+0x370/0x470 [ 573.583928][ T9852] ? do_raw_spin_unlock+0xf5/0x210 [ 573.583949][ T9852] gfs2_quota_sync+0x370/0x470 [ 573.583979][ T9852] gfs2_quotad+0x2b9/0x6e0 [ 573.584011][ T9852] ? __pfx_gfs2_quotad+0x10/0x10 [ 573.584033][ T9852] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 573.584057][ T9852] ? __kthread_parkme+0x7a/0x1f0 [ 573.584087][ T9852] kthread+0x388/0x470 [ 573.584109][ T9852] ? __pfx_gfs2_quotad+0x10/0x10 [ 573.584128][ T9852] ? __pfx_kthread+0x10/0x10 [ 573.584151][ T9852] ret_from_fork+0x514/0xb70 [ 573.584173][ T9852] ? __pfx_ret_from_fork+0x10/0x10 [ 573.584192][ T9852] ? __switch_to+0xc79/0x1410 [ 573.584219][ T9852] ? __pfx_kthread+0x10/0x10 [ 573.584243][ T9852] ret_from_fork_asm+0x1a/0x30 [ 573.584277][ T9852] [ 573.789722][ T9848] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 574.109881][ T9853] loop0: detected capacity change from 0 to 32768 [ 574.123213][ T9853] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 574.131863][ T9853] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 574.145566][ T9853] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 574.156068][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 574.163393][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 574.201166][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 574.209685][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 574.215256][ T9853] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 574.261999][ T9853] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 574.272721][ T9853] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 574.286380][ T9853] CPU: 1 UID: 0 PID: 9853 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 574.286404][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.286415][ T9853] Call Trace: [ 574.286424][ T9853] [ 574.286432][ T9853] dump_stack_lvl+0xe8/0x150 [ 574.286459][ T9853] gfs2_assert_warn_i+0x194/0x2c0 [ 574.286495][ T9853] gfs2_qd_dispose+0x466/0x570 [ 574.286517][ T9853] gfs2_quota_init+0xcd4/0x1220 [ 574.286554][ T9853] ? __pfx_gfs2_quota_init+0x10/0x10 [ 574.286573][ T9853] ? __pfx_wake_up_bit+0x10/0x10 [ 574.286595][ T9853] ? inode_go_inval+0x2a0/0x360 [ 574.286621][ T9853] gfs2_make_fs_rw+0x143/0x230 [ 574.286641][ T9853] gfs2_fill_super+0x1ba5/0x21d0 [ 574.286680][ T9853] ? __pfx_gfs2_fill_super+0x10/0x10 [ 574.286707][ T9853] ? init_locking+0xb8/0x210 [ 574.286730][ T9853] ? sb_set_blocksize+0x155/0x240 [ 574.286755][ T9853] ? setup_bdev_super+0x4c1/0x5b0 [ 574.286782][ T9853] get_tree_bdev_flags+0x431/0x4f0 [ 574.286806][ T9853] ? __pfx_gfs2_fill_super+0x10/0x10 [ 574.286829][ T9853] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 574.286853][ T9853] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 574.286889][ T9853] gfs2_get_tree+0x51/0x1e0 [ 574.286918][ T9853] vfs_get_tree+0x92/0x2a0 [ 574.286946][ T9853] do_new_mount+0x341/0xd30 [ 574.286966][ T9853] ? apparmor_capable+0x126/0x170 [ 574.286990][ T9853] ? __pfx_do_new_mount+0x10/0x10 [ 574.287010][ T9853] ? ns_capable+0x89/0xe0 [ 574.287040][ T9853] ? user_path_at+0xd4/0x160 [ 574.287066][ T9853] __se_sys_mount+0x31d/0x420 [ 574.287092][ T9853] ? __pfx___se_sys_mount+0x10/0x10 [ 574.287119][ T9853] ? __x64_sys_mount+0x20/0xc0 [ 574.287140][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.287158][ T9853] do_syscall_64+0x15f/0xf80 [ 574.287173][ T9853] ? trace_irq_disable+0x3b/0x140 [ 574.287192][ T9853] ? clear_bhb_loop+0x40/0x90 [ 574.287211][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.287227][ T9853] RIP: 0033:0x7fb66284b06a [ 574.287244][ T9853] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 574.287256][ T9853] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 574.287274][ T9853] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 574.287294][ T9853] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 574.287307][ T9853] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 574.287318][ T9853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 574.287329][ T9853] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 574.287357][ T9853] [ 574.561621][ T9853] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 574.935467][ T9858] loop0: detected capacity change from 0 to 32768 [ 574.946973][ T9858] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 574.959807][ T9858] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 574.977720][ T9858] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 574.994068][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 575.001081][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 575.046261][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms [ 575.053860][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 575.059395][ T9858] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 575.082264][ T9862] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 575.096808][ T9862] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 575.106551][ T9862] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9862 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 575.110088][ T9858] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 575.117297][ T9862] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 575.136087][ T9862] CPU: 1 UID: 0 PID: 9862 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 575.136111][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.136122][ T9862] Call Trace: [ 575.136130][ T9862] [ 575.136138][ T9862] dump_stack_lvl+0xe8/0x150 [ 575.136164][ T9862] gfs2_withdraw+0xc3/0x1b0 [ 575.136191][ T9862] inode_go_instantiate+0xe69/0x12a0 [ 575.136217][ T9862] ? preempt_schedule_common+0x82/0xd0 [ 575.136248][ T9862] ? __pfx_inode_go_instantiate+0x10/0x10 [ 575.136284][ T9862] gfs2_instantiate+0x168/0x220 [ 575.136313][ T9862] gfs2_glock_wait+0x1d4/0x2a0 [ 575.136334][ T9862] do_sync+0x49a/0xcb0 [ 575.136354][ T9862] ? _raw_spin_unlock+0x28/0x50 [ 575.136377][ T9862] ? gfs2_quota_sync+0x370/0x470 [ 575.136407][ T9862] ? __pfx_do_sync+0x10/0x10 [ 575.136437][ T9862] ? gfs2_quota_sync+0x370/0x470 [ 575.136469][ T9862] ? do_raw_spin_unlock+0xf5/0x210 [ 575.136492][ T9862] gfs2_quota_sync+0x370/0x470 [ 575.136524][ T9862] gfs2_quotad+0x2b9/0x6e0 [ 575.136559][ T9862] ? __pfx_gfs2_quotad+0x10/0x10 [ 575.136582][ T9862] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 575.136609][ T9862] ? __kthread_parkme+0x7a/0x1f0 [ 575.136640][ T9862] kthread+0x388/0x470 [ 575.136665][ T9862] ? __pfx_gfs2_quotad+0x10/0x10 [ 575.136684][ T9862] ? __pfx_kthread+0x10/0x10 [ 575.136710][ T9862] ret_from_fork+0x514/0xb70 [ 575.136734][ T9862] ? __pfx_ret_from_fork+0x10/0x10 [ 575.136753][ T9862] ? __switch_to+0xc79/0x1410 [ 575.136782][ T9862] ? __pfx_kthread+0x10/0x10 [ 575.136808][ T9862] ret_from_fork_asm+0x1a/0x30 [ 575.136848][ T9862] [ 575.318597][ T9858] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 575.637508][ T9863] loop0: detected capacity change from 0 to 32768 [ 575.652366][ T9863] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 575.661572][ T9863] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 575.673991][ T9863] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 575.683929][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 575.691085][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 575.732600][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 575.740248][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 575.747160][ T9863] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 575.771851][ T9867] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 575.797433][ T9867] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 575.806860][ T9867] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9867 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 575.818342][ T9867] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 575.821726][ T9863] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 575.829299][ T9867] CPU: 0 UID: 0 PID: 9867 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 575.829323][ T9867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.829333][ T9867] Call Trace: [ 575.829341][ T9867] [ 575.829352][ T9867] dump_stack_lvl+0xe8/0x150 [ 575.829377][ T9867] gfs2_withdraw+0xc3/0x1b0 [ 575.829403][ T9867] inode_go_instantiate+0xe69/0x12a0 [ 575.829429][ T9867] ? preempt_schedule_common+0x82/0xd0 [ 575.829465][ T9867] ? __pfx_inode_go_instantiate+0x10/0x10 [ 575.829498][ T9867] gfs2_instantiate+0x168/0x220 [ 575.829525][ T9867] gfs2_glock_wait+0x1d4/0x2a0 [ 575.829545][ T9867] do_sync+0x49a/0xcb0 [ 575.829564][ T9867] ? _raw_spin_unlock+0x28/0x50 [ 575.829586][ T9867] ? gfs2_quota_sync+0x370/0x470 [ 575.829614][ T9867] ? __pfx_do_sync+0x10/0x10 [ 575.829641][ T9867] ? gfs2_quota_sync+0x370/0x470 [ 575.829665][ T9867] ? do_raw_spin_unlock+0xf5/0x210 [ 575.829686][ T9867] gfs2_quota_sync+0x370/0x470 [ 575.829716][ T9867] gfs2_quotad+0x2b9/0x6e0 [ 575.829748][ T9867] ? __pfx_gfs2_quotad+0x10/0x10 [ 575.829769][ T9867] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 575.829793][ T9867] ? __kthread_parkme+0x7a/0x1f0 [ 575.829823][ T9867] kthread+0x388/0x470 [ 575.829846][ T9867] ? __pfx_gfs2_quotad+0x10/0x10 [ 575.829864][ T9867] ? __pfx_kthread+0x10/0x10 [ 575.829905][ T9867] ret_from_fork+0x514/0xb70 [ 575.829927][ T9867] ? __pfx_ret_from_fork+0x10/0x10 [ 575.829945][ T9867] ? __switch_to+0xc79/0x1410 [ 575.829973][ T9867] ? __pfx_kthread+0x10/0x10 [ 575.829995][ T9867] ret_from_fork_asm+0x1a/0x30 [ 575.830030][ T9867] [ 576.028940][ T9863] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 576.344019][ T9868] loop0: detected capacity change from 0 to 32768 [ 576.367183][ T9868] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 576.375982][ T9868] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 576.389202][ T9868] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 576.398870][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 576.405766][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 576.446441][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 40ms [ 576.466618][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 576.472785][ T9868] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 576.535871][ T9868] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 576.547039][ T9868] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 576.562247][ T9868] CPU: 0 UID: 0 PID: 9868 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 576.562263][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.562269][ T9868] Call Trace: [ 576.562274][ T9868] [ 576.562278][ T9868] dump_stack_lvl+0xe8/0x150 [ 576.562295][ T9868] gfs2_assert_warn_i+0x194/0x2c0 [ 576.562316][ T9868] gfs2_qd_dispose+0x466/0x570 [ 576.562337][ T9868] gfs2_quota_init+0xcd4/0x1220 [ 576.562360][ T9868] ? __pfx_gfs2_quota_init+0x10/0x10 [ 576.562373][ T9868] ? __pfx_wake_up_bit+0x10/0x10 [ 576.562387][ T9868] ? inode_go_inval+0x2a0/0x360 [ 576.562402][ T9868] gfs2_make_fs_rw+0x143/0x230 [ 576.562413][ T9868] gfs2_fill_super+0x1ba5/0x21d0 [ 576.562436][ T9868] ? __pfx_gfs2_fill_super+0x10/0x10 [ 576.562452][ T9868] ? init_locking+0xb8/0x210 [ 576.562466][ T9868] ? sb_set_blocksize+0x155/0x240 [ 576.562481][ T9868] ? setup_bdev_super+0x4c1/0x5b0 [ 576.562498][ T9868] get_tree_bdev_flags+0x431/0x4f0 [ 576.562514][ T9868] ? __pfx_gfs2_fill_super+0x10/0x10 [ 576.562529][ T9868] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 576.562543][ T9868] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 576.562564][ T9868] gfs2_get_tree+0x51/0x1e0 [ 576.562580][ T9868] vfs_get_tree+0x92/0x2a0 [ 576.562596][ T9868] do_new_mount+0x341/0xd30 [ 576.562608][ T9868] ? apparmor_capable+0x126/0x170 [ 576.562622][ T9868] ? __pfx_do_new_mount+0x10/0x10 [ 576.562634][ T9868] ? ns_capable+0x89/0xe0 [ 576.562651][ T9868] ? user_path_at+0xd4/0x160 [ 576.562666][ T9868] __se_sys_mount+0x31d/0x420 [ 576.562683][ T9868] ? __pfx___se_sys_mount+0x10/0x10 [ 576.562698][ T9868] ? __x64_sys_mount+0x20/0xc0 [ 576.562711][ T9868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.562722][ T9868] do_syscall_64+0x15f/0xf80 [ 576.562732][ T9868] ? trace_irq_disable+0x3b/0x140 [ 576.562744][ T9868] ? clear_bhb_loop+0x40/0x90 [ 576.562756][ T9868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.562766][ T9868] RIP: 0033:0x7fb66284b06a [ 576.562778][ T9868] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 576.562787][ T9868] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 576.562798][ T9868] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 576.562806][ T9868] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 576.562813][ T9868] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 576.562819][ T9868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 576.562825][ T9868] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 576.562841][ T9868] [ 576.593598][ T9868] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 577.158155][ T9873] loop0: detected capacity change from 0 to 32768 [ 577.173125][ T9873] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 577.186931][ T9873] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 577.202840][ T9873] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 577.212591][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 577.219453][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 577.262980][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 577.271380][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 577.276955][ T9873] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 577.300794][ T9877] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 577.315348][ T9877] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 577.324868][ T9877] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9877 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 577.335386][ T9877] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 577.344019][ T9877] CPU: 1 UID: 0 PID: 9877 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 577.344041][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 577.344052][ T9877] Call Trace: [ 577.344059][ T9877] [ 577.344067][ T9877] dump_stack_lvl+0xe8/0x150 [ 577.344092][ T9877] gfs2_withdraw+0xc3/0x1b0 [ 577.344120][ T9877] inode_go_instantiate+0xe69/0x12a0 [ 577.344142][ T9877] ? __pfx_bit_wait+0x10/0x10 [ 577.344166][ T9877] ? __pfx_bit_wait+0x10/0x10 [ 577.344182][ T9877] ? __pfx_inode_go_instantiate+0x10/0x10 [ 577.344208][ T9877] ? __pfx_wake_bit_function+0x10/0x10 [ 577.344231][ T9877] gfs2_instantiate+0x168/0x220 [ 577.344259][ T9877] gfs2_glock_wait+0x1d4/0x2a0 [ 577.344279][ T9877] do_sync+0x49a/0xcb0 [ 577.344299][ T9877] ? _raw_spin_unlock+0x28/0x50 [ 577.344331][ T9877] ? gfs2_quota_sync+0x370/0x470 [ 577.344359][ T9877] ? __pfx_do_sync+0x10/0x10 [ 577.344385][ T9877] ? gfs2_quota_sync+0x370/0x470 [ 577.344405][ T9877] ? do_raw_spin_unlock+0xf5/0x210 [ 577.344421][ T9877] gfs2_quota_sync+0x370/0x470 [ 577.344438][ T9877] gfs2_quotad+0x2b9/0x6e0 [ 577.344457][ T9877] ? __pfx_gfs2_quotad+0x10/0x10 [ 577.344471][ T9877] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 577.344487][ T9877] ? __kthread_parkme+0x7a/0x1f0 [ 577.344504][ T9877] kthread+0x388/0x470 [ 577.344519][ T9877] ? __pfx_gfs2_quotad+0x10/0x10 [ 577.344530][ T9877] ? __pfx_kthread+0x10/0x10 [ 577.344545][ T9877] ret_from_fork+0x514/0xb70 [ 577.344558][ T9877] ? __pfx_ret_from_fork+0x10/0x10 [ 577.344569][ T9877] ? __switch_to+0xc79/0x1410 [ 577.344586][ T9877] ? __pfx_kthread+0x10/0x10 [ 577.344601][ T9877] ret_from_fork_asm+0x1a/0x30 [ 577.344622][ T9877] [ 577.528583][ T9873] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 577.835757][ T9878] loop0: detected capacity change from 0 to 32768 [ 577.853352][ T9878] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 577.866236][ T9878] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 577.884592][ T9878] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 577.894703][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 577.901942][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 577.943348][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 577.951660][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 577.957284][ T9878] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 577.981413][ T9882] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 577.996125][ T9882] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 578.006900][ T9882] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9882 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 578.017639][ T9882] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 578.026153][ T9882] CPU: 0 UID: 0 PID: 9882 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 578.026176][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 578.026188][ T9882] Call Trace: [ 578.026195][ T9882] [ 578.026203][ T9882] dump_stack_lvl+0xe8/0x150 [ 578.026228][ T9882] gfs2_withdraw+0xc3/0x1b0 [ 578.026255][ T9882] inode_go_instantiate+0xe69/0x12a0 [ 578.026282][ T9882] ? preempt_schedule_common+0x82/0xd0 [ 578.026313][ T9882] ? __pfx_inode_go_instantiate+0x10/0x10 [ 578.026348][ T9882] gfs2_instantiate+0x168/0x220 [ 578.026376][ T9882] gfs2_glock_wait+0x1d4/0x2a0 [ 578.026397][ T9882] do_sync+0x49a/0xcb0 [ 578.026416][ T9882] ? _raw_spin_unlock+0x28/0x50 [ 578.026439][ T9882] ? gfs2_quota_sync+0x370/0x470 [ 578.026470][ T9882] ? __pfx_do_sync+0x10/0x10 [ 578.026498][ T9882] ? gfs2_quota_sync+0x370/0x470 [ 578.026523][ T9882] ? do_raw_spin_unlock+0xf5/0x210 [ 578.026545][ T9882] gfs2_quota_sync+0x370/0x470 [ 578.026576][ T9882] gfs2_quotad+0x2b9/0x6e0 [ 578.026608][ T9882] ? __pfx_gfs2_quotad+0x10/0x10 [ 578.026631][ T9882] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 578.026657][ T9882] ? __kthread_parkme+0x7a/0x1f0 [ 578.026688][ T9882] kthread+0x388/0x470 [ 578.026713][ T9882] ? __pfx_gfs2_quotad+0x10/0x10 [ 578.026731][ T9882] ? __pfx_kthread+0x10/0x10 [ 578.026754][ T9882] ret_from_fork+0x514/0xb70 [ 578.026776][ T9882] ? __pfx_ret_from_fork+0x10/0x10 [ 578.026795][ T9882] ? __switch_to+0xc79/0x1410 [ 578.026823][ T9882] ? __pfx_kthread+0x10/0x10 [ 578.026847][ T9882] ret_from_fork_asm+0x1a/0x30 [ 578.026884][ T9882] [ 578.218621][ T9878] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 578.542537][ T9883] loop0: detected capacity change from 0 to 32768 [ 578.553971][ T9883] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 578.562296][ T9883] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 578.574403][ T9883] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 578.583812][ T5832] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 578.593240][ T5832] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 578.631743][ T5832] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms [ 578.639438][ T5832] gfs2: fsid=syz:syz.0: jid=0: Done [ 578.645447][ T9883] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 578.661058][ T9887] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 578.675608][ T9887] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 578.685124][ T9887] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9887 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 578.695833][ T9887] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 578.702987][ T9883] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 578.704316][ T9887] CPU: 1 UID: 0 PID: 9887 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 578.704336][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 578.704347][ T9887] Call Trace: [ 578.704354][ T9887] [ 578.704361][ T9887] dump_stack_lvl+0xe8/0x150 [ 578.704386][ T9887] gfs2_withdraw+0xc3/0x1b0 [ 578.704413][ T9887] inode_go_instantiate+0xe69/0x12a0 [ 578.704439][ T9887] ? preempt_schedule_common+0x82/0xd0 [ 578.704469][ T9887] ? __pfx_inode_go_instantiate+0x10/0x10 [ 578.704502][ T9887] gfs2_instantiate+0x168/0x220 [ 578.704529][ T9887] gfs2_glock_wait+0x1d4/0x2a0 [ 578.704548][ T9887] do_sync+0x49a/0xcb0 [ 578.704567][ T9887] ? _raw_spin_unlock+0x28/0x50 [ 578.704587][ T9887] ? gfs2_quota_sync+0x370/0x470 [ 578.704616][ T9887] ? __pfx_do_sync+0x10/0x10 [ 578.704644][ T9887] ? gfs2_quota_sync+0x370/0x470 [ 578.704668][ T9887] ? do_raw_spin_unlock+0xf5/0x210 [ 578.704689][ T9887] gfs2_quota_sync+0x370/0x470 [ 578.704718][ T9887] gfs2_quotad+0x2b9/0x6e0 [ 578.704750][ T9887] ? __pfx_gfs2_quotad+0x10/0x10 [ 578.704770][ T9887] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 578.704795][ T9887] ? __kthread_parkme+0x7a/0x1f0 [ 578.704825][ T9887] kthread+0x388/0x470 [ 578.704848][ T9887] ? __pfx_gfs2_quotad+0x10/0x10 [ 578.704866][ T9887] ? __pfx_kthread+0x10/0x10 [ 578.704890][ T9887] ret_from_fork+0x514/0xb70 [ 578.704910][ T9887] ? __pfx_ret_from_fork+0x10/0x10 [ 578.704929][ T9887] ? __switch_to+0xc79/0x1410 [ 578.704956][ T9887] ? __pfx_kthread+0x10/0x10 [ 578.704980][ T9887] ret_from_fork_asm+0x1a/0x30 [ 578.705015][ T9887] [ 578.928562][ T9883] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 579.238768][ T9888] loop0: detected capacity change from 0 to 32768 [ 579.264645][ T9888] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 579.273107][ T9888] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 579.287120][ T9888] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 579.300001][ T8827] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 579.311175][ T8827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 579.365463][ T8827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 54ms [ 579.373165][ T8827] gfs2: fsid=syz:syz.0: jid=0: Done [ 579.378468][ T9888] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 579.401241][ T9892] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 579.416313][ T9892] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 579.429938][ T9892] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9892 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 579.440479][ T9892] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 579.444841][ T9888] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 579.448977][ T9892] CPU: 0 UID: 0 PID: 9892 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 579.448998][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 579.449008][ T9892] Call Trace: [ 579.449016][ T9892] [ 579.449023][ T9892] dump_stack_lvl+0xe8/0x150 [ 579.449156][ T9892] gfs2_withdraw+0xc3/0x1b0 [ 579.449203][ T9892] inode_go_instantiate+0xe69/0x12a0 [ 579.449227][ T9892] ? __pfx_bit_wait+0x10/0x10 [ 579.449251][ T9892] ? __pfx_bit_wait+0x10/0x10 [ 579.449268][ T9892] ? __pfx_inode_go_instantiate+0x10/0x10 [ 579.449293][ T9892] ? __pfx_wake_bit_function+0x10/0x10 [ 579.449316][ T9892] gfs2_instantiate+0x168/0x220 [ 579.449343][ T9892] gfs2_glock_wait+0x1d4/0x2a0 [ 579.449363][ T9892] do_sync+0x49a/0xcb0 [ 579.449382][ T9892] ? _raw_spin_unlock+0x28/0x50 [ 579.449404][ T9892] ? gfs2_quota_sync+0x370/0x470 [ 579.449432][ T9892] ? __pfx_do_sync+0x10/0x10 [ 579.449461][ T9892] ? gfs2_quota_sync+0x370/0x470 [ 579.449484][ T9892] ? do_raw_spin_unlock+0xf5/0x210 [ 579.449506][ T9892] gfs2_quota_sync+0x370/0x470 [ 579.449535][ T9892] gfs2_quotad+0x2b9/0x6e0 [ 579.449568][ T9892] ? __pfx_gfs2_quotad+0x10/0x10 [ 579.449589][ T9892] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 579.449614][ T9892] ? __kthread_parkme+0x7a/0x1f0 [ 579.449643][ T9892] kthread+0x388/0x470 [ 579.449666][ T9892] ? __pfx_gfs2_quotad+0x10/0x10 [ 579.449685][ T9892] ? __pfx_kthread+0x10/0x10 [ 579.449708][ T9892] ret_from_fork+0x514/0xb70 [ 579.449730][ T9892] ? __pfx_ret_from_fork+0x10/0x10 [ 579.449748][ T9892] ? __switch_to+0xc79/0x1410 [ 579.449775][ T9892] ? __pfx_kthread+0x10/0x10 [ 579.449799][ T9892] ret_from_fork_asm+0x1a/0x30 [ 579.449834][ T9892] [ 579.660219][ T9888] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 579.980276][ T9893] loop0: detected capacity change from 0 to 32768 [ 580.011164][ T9893] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 580.020217][ T9893] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 580.040443][ T9893] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 2ms [ 580.051951][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 580.059251][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 580.100921][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 580.111408][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 580.116771][ T9893] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 580.140924][ T9897] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 580.155530][ T9897] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 580.165059][ T9897] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9897 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 580.176281][ T9897] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 580.185885][ T9897] CPU: 1 UID: 0 PID: 9897 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 580.185909][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.185920][ T9897] Call Trace: [ 580.185928][ T9897] [ 580.185936][ T9897] dump_stack_lvl+0xe8/0x150 [ 580.185959][ T9897] gfs2_withdraw+0xc3/0x1b0 [ 580.185986][ T9897] inode_go_instantiate+0xe69/0x12a0 [ 580.186012][ T9897] ? preempt_schedule_common+0x82/0xd0 [ 580.186042][ T9897] ? __pfx_inode_go_instantiate+0x10/0x10 [ 580.186077][ T9897] gfs2_instantiate+0x168/0x220 [ 580.186095][ T9897] gfs2_glock_wait+0x1d4/0x2a0 [ 580.186106][ T9897] do_sync+0x49a/0xcb0 [ 580.186118][ T9897] ? _raw_spin_unlock+0x28/0x50 [ 580.186132][ T9897] ? gfs2_quota_sync+0x370/0x470 [ 580.186148][ T9897] ? __pfx_do_sync+0x10/0x10 [ 580.186165][ T9897] ? gfs2_quota_sync+0x370/0x470 [ 580.186179][ T9897] ? do_raw_spin_unlock+0xf5/0x210 [ 580.186191][ T9897] gfs2_quota_sync+0x370/0x470 [ 580.186209][ T9897] gfs2_quotad+0x2b9/0x6e0 [ 580.186228][ T9897] ? __pfx_gfs2_quotad+0x10/0x10 [ 580.186241][ T9897] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 580.186256][ T9897] ? __kthread_parkme+0x7a/0x1f0 [ 580.186274][ T9897] kthread+0x388/0x470 [ 580.186289][ T9897] ? __pfx_gfs2_quotad+0x10/0x10 [ 580.186299][ T9897] ? __pfx_kthread+0x10/0x10 [ 580.186314][ T9897] ret_from_fork+0x514/0xb70 [ 580.186327][ T9897] ? __pfx_ret_from_fork+0x10/0x10 [ 580.186337][ T9897] ? __switch_to+0xc79/0x1410 [ 580.186354][ T9897] ? __pfx_kthread+0x10/0x10 [ 580.186369][ T9897] ret_from_fork_asm+0x1a/0x30 [ 580.186389][ T9897] [ 580.368704][ T9893] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 580.692924][ T9898] loop0: detected capacity change from 0 to 32768 [ 580.706677][ T9898] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 580.716316][ T9898] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 580.730019][ T9898] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 580.743401][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 580.750798][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 580.799234][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 48ms [ 580.809608][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 580.814984][ T9898] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 580.864574][ T9898] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 580.875303][ T9898] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 580.888962][ T9898] CPU: 0 UID: 0 PID: 9898 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 580.888986][ T9898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 580.888997][ T9898] Call Trace: [ 580.889007][ T9898] [ 580.889016][ T9898] dump_stack_lvl+0xe8/0x150 [ 580.889042][ T9898] gfs2_assert_warn_i+0x194/0x2c0 [ 580.889070][ T9898] gfs2_qd_dispose+0x466/0x570 [ 580.889092][ T9898] gfs2_quota_init+0xcd4/0x1220 [ 580.889124][ T9898] ? __pfx_gfs2_quota_init+0x10/0x10 [ 580.889142][ T9898] ? __pfx_wake_up_bit+0x10/0x10 [ 580.889160][ T9898] ? inode_go_inval+0x2a0/0x360 [ 580.889181][ T9898] gfs2_make_fs_rw+0x143/0x230 [ 580.889197][ T9898] gfs2_fill_super+0x1ba5/0x21d0 [ 580.889227][ T9898] ? __pfx_gfs2_fill_super+0x10/0x10 [ 580.889248][ T9898] ? init_locking+0xb8/0x210 [ 580.889266][ T9898] ? sb_set_blocksize+0x155/0x240 [ 580.889285][ T9898] ? setup_bdev_super+0x4c1/0x5b0 [ 580.889307][ T9898] get_tree_bdev_flags+0x431/0x4f0 [ 580.889327][ T9898] ? __pfx_gfs2_fill_super+0x10/0x10 [ 580.889345][ T9898] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 580.889363][ T9898] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 580.889391][ T9898] gfs2_get_tree+0x51/0x1e0 [ 580.889412][ T9898] vfs_get_tree+0x92/0x2a0 [ 580.889433][ T9898] do_new_mount+0x341/0xd30 [ 580.889449][ T9898] ? apparmor_capable+0x126/0x170 [ 580.889467][ T9898] ? __pfx_do_new_mount+0x10/0x10 [ 580.889483][ T9898] ? ns_capable+0x89/0xe0 [ 580.889506][ T9898] ? user_path_at+0xd4/0x160 [ 580.889526][ T9898] __se_sys_mount+0x31d/0x420 [ 580.889547][ T9898] ? __pfx___se_sys_mount+0x10/0x10 [ 580.889569][ T9898] ? __x64_sys_mount+0x20/0xc0 [ 580.889585][ T9898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.889600][ T9898] do_syscall_64+0x15f/0xf80 [ 580.889615][ T9898] ? trace_irq_disable+0x3b/0x140 [ 580.889631][ T9898] ? clear_bhb_loop+0x40/0x90 [ 580.889655][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.889669][ T9898] RIP: 0033:0x7fb66284b06a [ 580.889683][ T9898] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 580.889696][ T9898] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 580.889715][ T9898] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 580.889725][ T9898] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 580.889734][ T9898] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 580.889743][ T9898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 580.889752][ T9898] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 580.889773][ T9898] [ 581.161051][ T9898] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 581.520868][ T9903] loop0: detected capacity change from 0 to 32768 [ 581.536414][ T9903] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 581.551284][ T9903] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 581.577137][ T9903] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 581.591246][ T8827] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 581.598113][ T8827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 581.636187][ T8827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms [ 581.643851][ T8827] gfs2: fsid=syz:syz.0: jid=0: Done [ 581.649537][ T9903] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 581.670399][ T9907] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 581.684847][ T9907] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 581.694537][ T9907] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9907 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 581.700492][ T9903] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 581.705343][ T9907] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 581.724868][ T9907] CPU: 1 UID: 0 PID: 9907 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 581.724893][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 581.724903][ T9907] Call Trace: [ 581.724909][ T9907] [ 581.724915][ T9907] dump_stack_lvl+0xe8/0x150 [ 581.724937][ T9907] gfs2_withdraw+0xc3/0x1b0 [ 581.724959][ T9907] inode_go_instantiate+0xe69/0x12a0 [ 581.724981][ T9907] ? preempt_schedule_common+0x82/0xd0 [ 581.725005][ T9907] ? __pfx_inode_go_instantiate+0x10/0x10 [ 581.725031][ T9907] gfs2_instantiate+0x168/0x220 [ 581.725053][ T9907] gfs2_glock_wait+0x1d4/0x2a0 [ 581.725069][ T9907] do_sync+0x49a/0xcb0 [ 581.725084][ T9907] ? _raw_spin_unlock+0x28/0x50 [ 581.725101][ T9907] ? gfs2_quota_sync+0x370/0x470 [ 581.725124][ T9907] ? __pfx_do_sync+0x10/0x10 [ 581.725146][ T9907] ? gfs2_quota_sync+0x370/0x470 [ 581.725164][ T9907] ? do_raw_spin_unlock+0xf5/0x210 [ 581.725182][ T9907] gfs2_quota_sync+0x370/0x470 [ 581.725206][ T9907] gfs2_quotad+0x2b9/0x6e0 [ 581.725230][ T9907] ? __pfx_gfs2_quotad+0x10/0x10 [ 581.725248][ T9907] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 581.725267][ T9907] ? __kthread_parkme+0x7a/0x1f0 [ 581.725291][ T9907] kthread+0x388/0x470 [ 581.725309][ T9907] ? __pfx_gfs2_quotad+0x10/0x10 [ 581.725325][ T9907] ? __pfx_kthread+0x10/0x10 [ 581.725343][ T9907] ret_from_fork+0x514/0xb70 [ 581.725360][ T9907] ? __pfx_ret_from_fork+0x10/0x10 [ 581.725378][ T9907] ? __switch_to+0xc79/0x1410 [ 581.725401][ T9907] ? __pfx_kthread+0x10/0x10 [ 581.725419][ T9907] ret_from_fork_asm+0x1a/0x30 [ 581.725447][ T9907] [ 581.908610][ T9903] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 582.230170][ T9908] loop0: detected capacity change from 0 to 32768 [ 582.247638][ T9908] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 582.260077][ T9908] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 582.276184][ T9908] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 582.285695][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 582.293193][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 582.352487][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 59ms [ 582.360925][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 582.366186][ T9908] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 582.391394][ T9912] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 582.405973][ T9912] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 582.415567][ T9912] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9912 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 582.422960][ T9908] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 582.426419][ T9912] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 582.445491][ T9912] CPU: 1 UID: 0 PID: 9912 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 582.445514][ T9912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 582.445524][ T9912] Call Trace: [ 582.445532][ T9912] [ 582.445540][ T9912] dump_stack_lvl+0xe8/0x150 [ 582.445567][ T9912] gfs2_withdraw+0xc3/0x1b0 [ 582.445596][ T9912] inode_go_instantiate+0xe69/0x12a0 [ 582.445622][ T9912] ? preempt_schedule_common+0x82/0xd0 [ 582.445654][ T9912] ? __pfx_inode_go_instantiate+0x10/0x10 [ 582.445689][ T9912] gfs2_instantiate+0x168/0x220 [ 582.445716][ T9912] gfs2_glock_wait+0x1d4/0x2a0 [ 582.445737][ T9912] do_sync+0x49a/0xcb0 [ 582.445756][ T9912] ? _raw_spin_unlock+0x28/0x50 [ 582.445788][ T9912] ? gfs2_quota_sync+0x370/0x470 [ 582.445816][ T9912] ? __pfx_do_sync+0x10/0x10 [ 582.445845][ T9912] ? gfs2_quota_sync+0x370/0x470 [ 582.445869][ T9912] ? do_raw_spin_unlock+0xf5/0x210 [ 582.445891][ T9912] gfs2_quota_sync+0x370/0x470 [ 582.445919][ T9912] gfs2_quotad+0x2b9/0x6e0 [ 582.445952][ T9912] ? __pfx_gfs2_quotad+0x10/0x10 [ 582.445974][ T9912] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 582.446000][ T9912] ? __kthread_parkme+0x7a/0x1f0 [ 582.446030][ T9912] kthread+0x388/0x470 [ 582.446055][ T9912] ? __pfx_gfs2_quotad+0x10/0x10 [ 582.446074][ T9912] ? __pfx_kthread+0x10/0x10 [ 582.446097][ T9912] ret_from_fork+0x514/0xb70 [ 582.446119][ T9912] ? __pfx_ret_from_fork+0x10/0x10 [ 582.446139][ T9912] ? __switch_to+0xc79/0x1410 [ 582.446166][ T9912] ? __pfx_kthread+0x10/0x10 [ 582.446191][ T9912] ret_from_fork_asm+0x1a/0x30 [ 582.446232][ T9912] [ 582.605798][ T9908] gfs2: fsid=syz:syz.0: found 1 quota changes [ 582.618594][ T9908] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 582.939564][ T9913] loop0: detected capacity change from 0 to 32768 [ 582.957629][ T9913] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 582.969476][ T9913] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 582.984549][ T9913] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 582.994502][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 583.002629][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 583.043888][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 583.052157][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 583.057798][ T9913] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 583.082739][ T9917] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 583.098519][ T9917] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 583.107848][ T9917] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9917 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 583.117426][ T9913] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 583.119002][ T9917] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 583.137362][ T9917] CPU: 0 UID: 0 PID: 9917 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 583.137385][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.137397][ T9917] Call Trace: [ 583.137458][ T9917] [ 583.137467][ T9917] dump_stack_lvl+0xe8/0x150 [ 583.137492][ T9917] gfs2_withdraw+0xc3/0x1b0 [ 583.137518][ T9917] inode_go_instantiate+0xe69/0x12a0 [ 583.137545][ T9917] ? preempt_schedule_common+0x82/0xd0 [ 583.137575][ T9917] ? __pfx_inode_go_instantiate+0x10/0x10 [ 583.137609][ T9917] gfs2_instantiate+0x168/0x220 [ 583.137636][ T9917] gfs2_glock_wait+0x1d4/0x2a0 [ 583.137656][ T9917] do_sync+0x49a/0xcb0 [ 583.137674][ T9917] ? _raw_spin_unlock+0x28/0x50 [ 583.137698][ T9917] ? gfs2_quota_sync+0x370/0x470 [ 583.137728][ T9917] ? __pfx_do_sync+0x10/0x10 [ 583.137758][ T9917] ? gfs2_quota_sync+0x370/0x470 [ 583.137783][ T9917] ? do_raw_spin_unlock+0xf5/0x210 [ 583.137806][ T9917] gfs2_quota_sync+0x370/0x470 [ 583.137838][ T9917] gfs2_quotad+0x2b9/0x6e0 [ 583.137871][ T9917] ? __pfx_gfs2_quotad+0x10/0x10 [ 583.137895][ T9917] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.137921][ T9917] ? __kthread_parkme+0x7a/0x1f0 [ 583.137952][ T9917] kthread+0x388/0x470 [ 583.137976][ T9917] ? __pfx_gfs2_quotad+0x10/0x10 [ 583.137996][ T9917] ? __pfx_kthread+0x10/0x10 [ 583.138021][ T9917] ret_from_fork+0x514/0xb70 [ 583.138042][ T9917] ? __pfx_ret_from_fork+0x10/0x10 [ 583.138062][ T9917] ? __switch_to+0xc79/0x1410 [ 583.138088][ T9917] ? __pfx_kthread+0x10/0x10 [ 583.138111][ T9917] ret_from_fork_asm+0x1a/0x30 [ 583.138152][ T9917] [ 583.141380][ T9913] gfs2: fsid=syz:syz.0: found 1 quota changes [ 583.318871][ T9913] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 583.690959][ T9918] loop0: detected capacity change from 0 to 32768 [ 583.706193][ T9918] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 583.720314][ T9918] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 583.746030][ T9918] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 583.758793][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 583.765720][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 583.803313][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 583.813070][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 583.818787][ T9918] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 583.840046][ T9922] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 583.854512][ T9922] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 583.864406][ T9922] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9922 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 583.876190][ T9922] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 583.880689][ T9918] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 583.884866][ T9922] CPU: 1 UID: 0 PID: 9922 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 583.884887][ T9922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.884898][ T9922] Call Trace: [ 583.884906][ T9922] [ 583.884913][ T9922] dump_stack_lvl+0xe8/0x150 [ 583.884939][ T9922] gfs2_withdraw+0xc3/0x1b0 [ 583.884966][ T9922] inode_go_instantiate+0xe69/0x12a0 [ 583.884992][ T9922] ? preempt_schedule_common+0x82/0xd0 [ 583.885021][ T9922] ? __pfx_inode_go_instantiate+0x10/0x10 [ 583.885062][ T9922] gfs2_instantiate+0x168/0x220 [ 583.885090][ T9922] gfs2_glock_wait+0x1d4/0x2a0 [ 583.885110][ T9922] do_sync+0x49a/0xcb0 [ 583.885128][ T9922] ? _raw_spin_unlock+0x28/0x50 [ 583.885151][ T9922] ? gfs2_quota_sync+0x370/0x470 [ 583.885179][ T9922] ? __pfx_do_sync+0x10/0x10 [ 583.885207][ T9922] ? gfs2_quota_sync+0x370/0x470 [ 583.885230][ T9922] ? do_raw_spin_unlock+0xf5/0x210 [ 583.885252][ T9922] gfs2_quota_sync+0x370/0x470 [ 583.885282][ T9922] gfs2_quotad+0x2b9/0x6e0 [ 583.885314][ T9922] ? __pfx_gfs2_quotad+0x10/0x10 [ 583.885342][ T9922] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 583.885367][ T9922] ? __kthread_parkme+0x7a/0x1f0 [ 583.885397][ T9922] kthread+0x388/0x470 [ 583.885420][ T9922] ? __pfx_gfs2_quotad+0x10/0x10 [ 583.885439][ T9922] ? __pfx_kthread+0x10/0x10 [ 583.885462][ T9922] ret_from_fork+0x514/0xb70 [ 583.885484][ T9922] ? __pfx_ret_from_fork+0x10/0x10 [ 583.885503][ T9922] ? __switch_to+0xc79/0x1410 [ 583.885530][ T9922] ? __pfx_kthread+0x10/0x10 [ 583.885553][ T9922] ret_from_fork_asm+0x1a/0x30 [ 583.885586][ T9922] [ 584.108630][ T9918] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 584.416152][ T9923] loop0: detected capacity change from 0 to 32768 [ 584.432584][ T9923] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 584.446452][ T9923] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 584.462339][ T9923] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 584.472502][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 584.479518][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 584.521386][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 584.529618][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 584.535514][ T9923] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 584.559920][ T9927] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 584.575746][ T9927] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 584.585442][ T9927] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9927 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 584.597063][ T9927] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 584.603825][ T9923] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 584.606466][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 584.606489][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 584.606500][ T9927] Call Trace: [ 584.606508][ T9927] [ 584.606516][ T9927] dump_stack_lvl+0xe8/0x150 [ 584.606547][ T9927] gfs2_withdraw+0xc3/0x1b0 [ 584.606574][ T9927] inode_go_instantiate+0xe69/0x12a0 [ 584.606600][ T9927] ? preempt_schedule_common+0x82/0xd0 [ 584.606629][ T9927] ? __pfx_inode_go_instantiate+0x10/0x10 [ 584.606663][ T9927] gfs2_instantiate+0x168/0x220 [ 584.606695][ T9927] gfs2_glock_wait+0x1d4/0x2a0 [ 584.606713][ T9927] do_sync+0x49a/0xcb0 [ 584.606732][ T9927] ? _raw_spin_unlock+0x28/0x50 [ 584.606754][ T9927] ? gfs2_quota_sync+0x370/0x470 [ 584.606783][ T9927] ? __pfx_do_sync+0x10/0x10 [ 584.606810][ T9927] ? gfs2_quota_sync+0x370/0x470 [ 584.606834][ T9927] ? do_raw_spin_unlock+0xf5/0x210 [ 584.606855][ T9927] gfs2_quota_sync+0x370/0x470 [ 584.606885][ T9927] gfs2_quotad+0x2b9/0x6e0 [ 584.606916][ T9927] ? __pfx_gfs2_quotad+0x10/0x10 [ 584.606938][ T9927] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.606962][ T9927] ? __kthread_parkme+0x7a/0x1f0 [ 584.606992][ T9927] kthread+0x388/0x470 [ 584.607014][ T9927] ? __pfx_gfs2_quotad+0x10/0x10 [ 584.607032][ T9927] ? __pfx_kthread+0x10/0x10 [ 584.607056][ T9927] ret_from_fork+0x514/0xb70 [ 584.607077][ T9927] ? __pfx_ret_from_fork+0x10/0x10 [ 584.607096][ T9927] ? __switch_to+0xc79/0x1410 [ 584.607123][ T9927] ? __pfx_kthread+0x10/0x10 [ 584.607160][ T9927] ret_from_fork_asm+0x1a/0x30 [ 584.607196][ T9927] [ 584.828583][ T9923] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 585.151923][ T9928] loop0: detected capacity change from 0 to 32768 [ 585.163632][ T9928] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 585.171915][ T9928] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 585.186892][ T9928] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 585.197624][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 585.206185][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 585.244305][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms [ 585.251961][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 585.257201][ T9928] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 585.279605][ T9932] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 585.294092][ T9932] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 585.303790][ T9932] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9932 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 585.308068][ T9928] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 585.314513][ T9932] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 585.333566][ T9932] CPU: 1 UID: 0 PID: 9932 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 585.333589][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.333599][ T9932] Call Trace: [ 585.333607][ T9932] [ 585.333614][ T9932] dump_stack_lvl+0xe8/0x150 [ 585.333640][ T9932] gfs2_withdraw+0xc3/0x1b0 [ 585.333668][ T9932] inode_go_instantiate+0xe69/0x12a0 [ 585.333695][ T9932] ? preempt_schedule_common+0x82/0xd0 [ 585.333725][ T9932] ? __pfx_inode_go_instantiate+0x10/0x10 [ 585.333760][ T9932] gfs2_instantiate+0x168/0x220 [ 585.333787][ T9932] gfs2_glock_wait+0x1d4/0x2a0 [ 585.333807][ T9932] do_sync+0x49a/0xcb0 [ 585.333826][ T9932] ? _raw_spin_unlock+0x28/0x50 [ 585.333849][ T9932] ? gfs2_quota_sync+0x370/0x470 [ 585.333879][ T9932] ? __pfx_do_sync+0x10/0x10 [ 585.333909][ T9932] ? gfs2_quota_sync+0x370/0x470 [ 585.333933][ T9932] ? do_raw_spin_unlock+0xf5/0x210 [ 585.333956][ T9932] gfs2_quota_sync+0x370/0x470 [ 585.333988][ T9932] gfs2_quotad+0x2b9/0x6e0 [ 585.334021][ T9932] ? __pfx_gfs2_quotad+0x10/0x10 [ 585.334042][ T9932] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 585.334069][ T9932] ? __kthread_parkme+0x7a/0x1f0 [ 585.334100][ T9932] kthread+0x388/0x470 [ 585.334124][ T9932] ? __pfx_gfs2_quotad+0x10/0x10 [ 585.334143][ T9932] ? __pfx_kthread+0x10/0x10 [ 585.334168][ T9932] ret_from_fork+0x514/0xb70 [ 585.334191][ T9932] ? __pfx_ret_from_fork+0x10/0x10 [ 585.334211][ T9932] ? __switch_to+0xc79/0x1410 [ 585.334246][ T9932] ? __pfx_kthread+0x10/0x10 [ 585.334270][ T9932] ret_from_fork_asm+0x1a/0x30 [ 585.334306][ T9932] [ 585.518628][ T9928] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 585.830440][ T9933] loop0: detected capacity change from 0 to 32768 [ 585.853071][ T9933] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 585.862248][ T9933] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 585.874915][ T9933] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 585.884602][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 585.893415][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 585.940352][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 585.948740][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 585.954361][ T9933] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 585.982798][ T9937] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 585.997905][ T9937] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 586.007634][ T9937] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9937 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 586.011805][ T9933] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 586.018624][ T9937] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 586.037249][ T9937] CPU: 1 UID: 0 PID: 9937 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 586.037272][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.037283][ T9937] Call Trace: [ 586.037291][ T9937] [ 586.037298][ T9937] dump_stack_lvl+0xe8/0x150 [ 586.037322][ T9937] gfs2_withdraw+0xc3/0x1b0 [ 586.037348][ T9937] inode_go_instantiate+0xe69/0x12a0 [ 586.037370][ T9937] ? preempt_schedule_common+0x82/0xd0 [ 586.037389][ T9937] ? __pfx_inode_go_instantiate+0x10/0x10 [ 586.037410][ T9937] gfs2_instantiate+0x168/0x220 [ 586.037428][ T9937] gfs2_glock_wait+0x1d4/0x2a0 [ 586.037440][ T9937] do_sync+0x49a/0xcb0 [ 586.037451][ T9937] ? _raw_spin_unlock+0x28/0x50 [ 586.037466][ T9937] ? gfs2_quota_sync+0x370/0x470 [ 586.037482][ T9937] ? __pfx_do_sync+0x10/0x10 [ 586.037498][ T9937] ? gfs2_quota_sync+0x370/0x470 [ 586.037512][ T9937] ? do_raw_spin_unlock+0xf5/0x210 [ 586.037525][ T9937] gfs2_quota_sync+0x370/0x470 [ 586.037542][ T9937] gfs2_quotad+0x2b9/0x6e0 [ 586.037561][ T9937] ? __pfx_gfs2_quotad+0x10/0x10 [ 586.037574][ T9937] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 586.037590][ T9937] ? __kthread_parkme+0x7a/0x1f0 [ 586.037608][ T9937] kthread+0x388/0x470 [ 586.037622][ T9937] ? __pfx_gfs2_quotad+0x10/0x10 [ 586.037634][ T9937] ? __pfx_kthread+0x10/0x10 [ 586.037648][ T9937] ret_from_fork+0x514/0xb70 [ 586.037661][ T9937] ? __pfx_ret_from_fork+0x10/0x10 [ 586.037672][ T9937] ? __switch_to+0xc79/0x1410 [ 586.037690][ T9937] ? __pfx_kthread+0x10/0x10 [ 586.037704][ T9937] ret_from_fork_asm+0x1a/0x30 [ 586.037725][ T9937] [ 586.200919][ T9933] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 586.515145][ T9938] loop0: detected capacity change from 0 to 32768 [ 586.528323][ T9938] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 586.538519][ T9938] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 586.554789][ T9938] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 586.564074][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 586.570976][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 586.611172][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 40ms [ 586.618760][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 586.624305][ T9938] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 586.678964][ T9938] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 586.690503][ T9938] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 586.704592][ T9938] CPU: 1 UID: 0 PID: 9938 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 586.704616][ T9938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.704626][ T9938] Call Trace: [ 586.704634][ T9938] [ 586.704642][ T9938] dump_stack_lvl+0xe8/0x150 [ 586.704668][ T9938] gfs2_assert_warn_i+0x194/0x2c0 [ 586.704701][ T9938] gfs2_qd_dispose+0x466/0x570 [ 586.704728][ T9938] gfs2_quota_init+0xcd4/0x1220 [ 586.704771][ T9938] ? __pfx_gfs2_quota_init+0x10/0x10 [ 586.704793][ T9938] ? __pfx_wake_up_bit+0x10/0x10 [ 586.704817][ T9938] ? inode_go_inval+0x2a0/0x360 [ 586.704842][ T9938] gfs2_make_fs_rw+0x143/0x230 [ 586.704862][ T9938] gfs2_fill_super+0x1ba5/0x21d0 [ 586.704901][ T9938] ? __pfx_gfs2_fill_super+0x10/0x10 [ 586.704929][ T9938] ? init_locking+0xb8/0x210 [ 586.704951][ T9938] ? sb_set_blocksize+0x155/0x240 [ 586.704976][ T9938] ? setup_bdev_super+0x4c1/0x5b0 [ 586.705002][ T9938] get_tree_bdev_flags+0x431/0x4f0 [ 586.705027][ T9938] ? __pfx_gfs2_fill_super+0x10/0x10 [ 586.705051][ T9938] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 586.705074][ T9938] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 586.705109][ T9938] gfs2_get_tree+0x51/0x1e0 [ 586.705137][ T9938] vfs_get_tree+0x92/0x2a0 [ 586.705171][ T9938] do_new_mount+0x341/0xd30 [ 586.705194][ T9938] ? apparmor_capable+0x126/0x170 [ 586.705219][ T9938] ? __pfx_do_new_mount+0x10/0x10 [ 586.705240][ T9938] ? ns_capable+0x89/0xe0 [ 586.705271][ T9938] ? user_path_at+0xd4/0x160 [ 586.705297][ T9938] __se_sys_mount+0x31d/0x420 [ 586.705325][ T9938] ? __pfx___se_sys_mount+0x10/0x10 [ 586.705353][ T9938] ? __x64_sys_mount+0x20/0xc0 [ 586.705374][ T9938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.705393][ T9938] do_syscall_64+0x15f/0xf80 [ 586.705410][ T9938] ? trace_irq_disable+0x3b/0x140 [ 586.705431][ T9938] ? clear_bhb_loop+0x40/0x90 [ 586.705453][ T9938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.705471][ T9938] RIP: 0033:0x7fb66284b06a [ 586.705489][ T9938] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 586.705504][ T9938] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 586.705522][ T9938] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 586.705535][ T9938] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 586.705547][ T9938] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 586.705559][ T9938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 586.705570][ T9938] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 586.705599][ T9938] [ 586.977612][ T9938] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 587.322229][ T9943] loop0: detected capacity change from 0 to 32768 [ 587.339065][ T9943] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 587.347743][ T9943] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 587.361954][ T9943] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 587.371984][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 587.379199][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 587.420540][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 587.428126][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 587.433717][ T9943] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 587.488055][ T9943] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 587.499414][ T9943] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 587.513835][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 587.513859][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 587.513870][ T9943] Call Trace: [ 587.513878][ T9943] [ 587.513886][ T9943] dump_stack_lvl+0xe8/0x150 [ 587.513912][ T9943] gfs2_assert_warn_i+0x194/0x2c0 [ 587.513945][ T9943] gfs2_qd_dispose+0x466/0x570 [ 587.513972][ T9943] gfs2_quota_init+0xcd4/0x1220 [ 587.514013][ T9943] ? __pfx_gfs2_quota_init+0x10/0x10 [ 587.514036][ T9943] ? __pfx_wake_up_bit+0x10/0x10 [ 587.514059][ T9943] ? inode_go_inval+0x2a0/0x360 [ 587.514085][ T9943] gfs2_make_fs_rw+0x143/0x230 [ 587.514105][ T9943] gfs2_fill_super+0x1ba5/0x21d0 [ 587.514145][ T9943] ? __pfx_gfs2_fill_super+0x10/0x10 [ 587.514172][ T9943] ? init_locking+0xb8/0x210 [ 587.514195][ T9943] ? sb_set_blocksize+0x155/0x240 [ 587.514219][ T9943] ? setup_bdev_super+0x4c1/0x5b0 [ 587.514253][ T9943] get_tree_bdev_flags+0x431/0x4f0 [ 587.514280][ T9943] ? __pfx_gfs2_fill_super+0x10/0x10 [ 587.514303][ T9943] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 587.514326][ T9943] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 587.514362][ T9943] gfs2_get_tree+0x51/0x1e0 [ 587.514393][ T9943] vfs_get_tree+0x92/0x2a0 [ 587.514420][ T9943] do_new_mount+0x341/0xd30 [ 587.514441][ T9943] ? apparmor_capable+0x126/0x170 [ 587.514466][ T9943] ? __pfx_do_new_mount+0x10/0x10 [ 587.514487][ T9943] ? ns_capable+0x89/0xe0 [ 587.514516][ T9943] ? user_path_at+0xd4/0x160 [ 587.514542][ T9943] __se_sys_mount+0x31d/0x420 [ 587.514570][ T9943] ? __pfx___se_sys_mount+0x10/0x10 [ 587.514598][ T9943] ? __x64_sys_mount+0x20/0xc0 [ 587.514619][ T9943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.514639][ T9943] do_syscall_64+0x15f/0xf80 [ 587.514657][ T9943] ? trace_irq_disable+0x3b/0x140 [ 587.514676][ T9943] ? clear_bhb_loop+0x40/0x90 [ 587.514699][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.514717][ T9943] RIP: 0033:0x7fb66284b06a [ 587.514734][ T9943] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 587.514749][ T9943] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 587.514768][ T9943] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 587.514781][ T9943] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 587.514794][ T9943] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 587.514805][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 587.514817][ T9943] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 587.514846][ T9943] [ 587.535971][ T9943] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 588.113910][ T9948] loop0: detected capacity change from 0 to 32768 [ 588.130054][ T9948] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 588.138916][ T9948] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 588.155221][ T9948] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 588.164928][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 588.172293][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 588.217485][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms [ 588.225475][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 588.231341][ T9948] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 588.290904][ T9948] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 588.301603][ T9948] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 588.315824][ T9948] CPU: 0 UID: 0 PID: 9948 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 588.315847][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.315859][ T9948] Call Trace: [ 588.315866][ T9948] [ 588.315874][ T9948] dump_stack_lvl+0xe8/0x150 [ 588.315954][ T9948] gfs2_assert_warn_i+0x194/0x2c0 [ 588.315988][ T9948] gfs2_qd_dispose+0x466/0x570 [ 588.316015][ T9948] gfs2_quota_init+0xcd4/0x1220 [ 588.316058][ T9948] ? __pfx_gfs2_quota_init+0x10/0x10 [ 588.316081][ T9948] ? __pfx_wake_up_bit+0x10/0x10 [ 588.316106][ T9948] ? inode_go_inval+0x2a0/0x360 [ 588.316131][ T9948] gfs2_make_fs_rw+0x143/0x230 [ 588.316150][ T9948] gfs2_fill_super+0x1ba5/0x21d0 [ 588.316190][ T9948] ? __pfx_gfs2_fill_super+0x10/0x10 [ 588.316216][ T9948] ? init_locking+0xb8/0x210 [ 588.316237][ T9948] ? sb_set_blocksize+0x155/0x240 [ 588.316260][ T9948] ? setup_bdev_super+0x4c1/0x5b0 [ 588.316288][ T9948] get_tree_bdev_flags+0x431/0x4f0 [ 588.316323][ T9948] ? __pfx_gfs2_fill_super+0x10/0x10 [ 588.316347][ T9948] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 588.316368][ T9948] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 588.316404][ T9948] gfs2_get_tree+0x51/0x1e0 [ 588.316431][ T9948] vfs_get_tree+0x92/0x2a0 [ 588.316459][ T9948] do_new_mount+0x341/0xd30 [ 588.316478][ T9948] ? apparmor_capable+0x126/0x170 [ 588.316498][ T9948] ? __pfx_do_new_mount+0x10/0x10 [ 588.316517][ T9948] ? ns_capable+0x89/0xe0 [ 588.316544][ T9948] ? user_path_at+0xd4/0x160 [ 588.316568][ T9948] __se_sys_mount+0x31d/0x420 [ 588.316593][ T9948] ? __pfx___se_sys_mount+0x10/0x10 [ 588.316618][ T9948] ? __x64_sys_mount+0x20/0xc0 [ 588.316637][ T9948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.316655][ T9948] do_syscall_64+0x15f/0xf80 [ 588.316670][ T9948] ? trace_irq_disable+0x3b/0x140 [ 588.316688][ T9948] ? clear_bhb_loop+0x40/0x90 [ 588.316707][ T9948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.316723][ T9948] RIP: 0033:0x7fb66284b06a [ 588.316739][ T9948] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 588.316752][ T9948] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 588.316769][ T9948] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 588.316778][ T9948] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 588.316789][ T9948] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 588.316798][ T9948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 588.316808][ T9948] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 588.316832][ T9948] [ 588.330899][ T9948] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 588.921523][ T9953] loop0: detected capacity change from 0 to 32768 [ 588.941526][ T9953] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 588.949827][ T9953] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 588.962936][ T9953] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 588.982621][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 588.991442][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 589.029124][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 589.038369][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 589.044651][ T9953] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 589.072159][ T9957] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 589.089439][ T9957] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 589.099409][ T9957] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9957 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 589.109922][ T9957] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 589.114092][ T9953] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 589.118185][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 589.118207][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.118218][ T9957] Call Trace: [ 589.118226][ T9957] [ 589.118234][ T9957] dump_stack_lvl+0xe8/0x150 [ 589.118260][ T9957] gfs2_withdraw+0xc3/0x1b0 [ 589.118285][ T9957] inode_go_instantiate+0xe69/0x12a0 [ 589.118311][ T9957] ? preempt_schedule_common+0x82/0xd0 [ 589.118341][ T9957] ? __pfx_inode_go_instantiate+0x10/0x10 [ 589.118374][ T9957] gfs2_instantiate+0x168/0x220 [ 589.118404][ T9957] gfs2_glock_wait+0x1d4/0x2a0 [ 589.118424][ T9957] do_sync+0x49a/0xcb0 [ 589.118443][ T9957] ? _raw_spin_unlock+0x28/0x50 [ 589.118465][ T9957] ? gfs2_quota_sync+0x370/0x470 [ 589.118492][ T9957] ? __pfx_do_sync+0x10/0x10 [ 589.118520][ T9957] ? gfs2_quota_sync+0x370/0x470 [ 589.118543][ T9957] ? do_raw_spin_unlock+0xf5/0x210 [ 589.118565][ T9957] gfs2_quota_sync+0x370/0x470 [ 589.118594][ T9957] gfs2_quotad+0x2b9/0x6e0 [ 589.118625][ T9957] ? __pfx_gfs2_quotad+0x10/0x10 [ 589.118647][ T9957] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 589.118671][ T9957] ? __kthread_parkme+0x7a/0x1f0 [ 589.118701][ T9957] kthread+0x388/0x470 [ 589.118722][ T9957] ? __pfx_gfs2_quotad+0x10/0x10 [ 589.118741][ T9957] ? __pfx_kthread+0x10/0x10 [ 589.118764][ T9957] ret_from_fork+0x514/0xb70 [ 589.118786][ T9957] ? __pfx_ret_from_fork+0x10/0x10 [ 589.118804][ T9957] ? __switch_to+0xc79/0x1410 [ 589.118829][ T9957] ? __pfx_kthread+0x10/0x10 [ 589.118852][ T9957] ret_from_fork_asm+0x1a/0x30 [ 589.118887][ T9957] [ 589.319113][ T9953] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 589.630011][ T9958] loop0: detected capacity change from 0 to 32768 [ 589.645453][ T9958] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 589.659964][ T9958] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 589.675585][ T9958] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 589.692666][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 589.699640][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 589.735983][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 589.743773][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 589.750458][ T9958] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 589.769837][ T9962] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 589.784347][ T9962] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 589.795682][ T9962] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9962 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 589.808878][ T9962] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 589.811008][ T9958] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 589.817147][ T9962] CPU: 0 UID: 0 PID: 9962 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 589.817169][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.817179][ T9962] Call Trace: [ 589.817188][ T9962] [ 589.817196][ T9962] dump_stack_lvl+0xe8/0x150 [ 589.817220][ T9962] gfs2_withdraw+0xc3/0x1b0 [ 589.817247][ T9962] inode_go_instantiate+0xe69/0x12a0 [ 589.817274][ T9962] ? preempt_schedule_common+0x82/0xd0 [ 589.817304][ T9962] ? __pfx_inode_go_instantiate+0x10/0x10 [ 589.817336][ T9962] gfs2_instantiate+0x168/0x220 [ 589.817364][ T9962] gfs2_glock_wait+0x1d4/0x2a0 [ 589.817383][ T9962] do_sync+0x49a/0xcb0 [ 589.817402][ T9962] ? _raw_spin_unlock+0x28/0x50 [ 589.817424][ T9962] ? gfs2_quota_sync+0x370/0x470 [ 589.817452][ T9962] ? __pfx_do_sync+0x10/0x10 [ 589.817481][ T9962] ? gfs2_quota_sync+0x370/0x470 [ 589.817504][ T9962] ? do_raw_spin_unlock+0xf5/0x210 [ 589.817526][ T9962] gfs2_quota_sync+0x370/0x470 [ 589.817555][ T9962] gfs2_quotad+0x2b9/0x6e0 [ 589.817587][ T9962] ? __pfx_gfs2_quotad+0x10/0x10 [ 589.817608][ T9962] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 589.817633][ T9962] ? __kthread_parkme+0x7a/0x1f0 [ 589.817662][ T9962] kthread+0x388/0x470 [ 589.817685][ T9962] ? __pfx_gfs2_quotad+0x10/0x10 [ 589.817705][ T9962] ? __pfx_kthread+0x10/0x10 [ 589.817728][ T9962] ret_from_fork+0x514/0xb70 [ 589.817749][ T9962] ? __pfx_ret_from_fork+0x10/0x10 [ 589.817767][ T9962] ? __switch_to+0xc79/0x1410 [ 589.817793][ T9962] ? __pfx_kthread+0x10/0x10 [ 589.817817][ T9962] ret_from_fork_asm+0x1a/0x30 [ 589.817852][ T9962] [ 590.038660][ T9958] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 590.356640][ T9963] loop0: detected capacity change from 0 to 32768 [ 590.368673][ T9963] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 590.377991][ T9963] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 590.394376][ T9963] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 590.405992][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 590.413207][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 590.450414][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 590.457964][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 590.463271][ T9963] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 590.479410][ T9967] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 590.493918][ T9967] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 590.504529][ T9967] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9967 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 590.515133][ T9967] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 590.521604][ T9963] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 590.525034][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 590.525056][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.525067][ T9967] Call Trace: [ 590.525074][ T9967] [ 590.525082][ T9967] dump_stack_lvl+0xe8/0x150 [ 590.525108][ T9967] gfs2_withdraw+0xc3/0x1b0 [ 590.525134][ T9967] inode_go_instantiate+0xe69/0x12a0 [ 590.525160][ T9967] ? preempt_schedule_common+0x82/0xd0 [ 590.525191][ T9967] ? __pfx_inode_go_instantiate+0x10/0x10 [ 590.525224][ T9967] gfs2_instantiate+0x168/0x220 [ 590.525251][ T9967] gfs2_glock_wait+0x1d4/0x2a0 [ 590.525270][ T9967] do_sync+0x49a/0xcb0 [ 590.525289][ T9967] ? _raw_spin_unlock+0x28/0x50 [ 590.525311][ T9967] ? gfs2_quota_sync+0x370/0x470 [ 590.525339][ T9967] ? __pfx_do_sync+0x10/0x10 [ 590.525368][ T9967] ? gfs2_quota_sync+0x370/0x470 [ 590.525391][ T9967] ? do_raw_spin_unlock+0xf5/0x210 [ 590.525413][ T9967] gfs2_quota_sync+0x370/0x470 [ 590.525442][ T9967] gfs2_quotad+0x2b9/0x6e0 [ 590.525474][ T9967] ? __pfx_gfs2_quotad+0x10/0x10 [ 590.525495][ T9967] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 590.525520][ T9967] ? __kthread_parkme+0x7a/0x1f0 [ 590.525549][ T9967] kthread+0x388/0x470 [ 590.525572][ T9967] ? __pfx_gfs2_quotad+0x10/0x10 [ 590.525590][ T9967] ? __pfx_kthread+0x10/0x10 [ 590.525614][ T9967] ret_from_fork+0x514/0xb70 [ 590.525635][ T9967] ? __pfx_ret_from_fork+0x10/0x10 [ 590.525653][ T9967] ? __switch_to+0xc79/0x1410 [ 590.525679][ T9967] ? __pfx_kthread+0x10/0x10 [ 590.525710][ T9967] ret_from_fork_asm+0x1a/0x30 [ 590.525745][ T9967] [ 590.738613][ T9963] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 591.057554][ T9968] loop0: detected capacity change from 0 to 32768 [ 591.072340][ T9968] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 591.081817][ T9968] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 591.094415][ T9968] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 591.104120][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 591.111217][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 591.151380][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 40ms [ 591.159557][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 591.165964][ T9968] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 591.190494][ T9972] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 591.205868][ T9972] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 591.215435][ T9972] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9972 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 591.225822][ T9972] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 591.234393][ T9972] CPU: 0 UID: 0 PID: 9972 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 591.234417][ T9972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.234428][ T9972] Call Trace: [ 591.234436][ T9972] [ 591.234444][ T9972] dump_stack_lvl+0xe8/0x150 [ 591.234469][ T9972] gfs2_withdraw+0xc3/0x1b0 [ 591.234497][ T9972] inode_go_instantiate+0xe69/0x12a0 [ 591.234524][ T9972] ? preempt_schedule_common+0x82/0xd0 [ 591.234555][ T9972] ? __pfx_inode_go_instantiate+0x10/0x10 [ 591.234590][ T9972] gfs2_instantiate+0x168/0x220 [ 591.234618][ T9972] gfs2_glock_wait+0x1d4/0x2a0 [ 591.234648][ T9972] do_sync+0x49a/0xcb0 [ 591.234667][ T9972] ? _raw_spin_unlock+0x28/0x50 [ 591.234689][ T9972] ? gfs2_quota_sync+0x370/0x470 [ 591.234719][ T9972] ? __pfx_do_sync+0x10/0x10 [ 591.234749][ T9972] ? gfs2_quota_sync+0x370/0x470 [ 591.234773][ T9972] ? do_raw_spin_unlock+0xf5/0x210 [ 591.234795][ T9972] gfs2_quota_sync+0x370/0x470 [ 591.234824][ T9972] gfs2_quotad+0x2b9/0x6e0 [ 591.234856][ T9972] ? __pfx_gfs2_quotad+0x10/0x10 [ 591.234879][ T9972] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 591.234904][ T9972] ? __kthread_parkme+0x7a/0x1f0 [ 591.234935][ T9972] kthread+0x388/0x470 [ 591.234959][ T9972] ? __pfx_gfs2_quotad+0x10/0x10 [ 591.234978][ T9972] ? __pfx_kthread+0x10/0x10 [ 591.235003][ T9972] ret_from_fork+0x514/0xb70 [ 591.235026][ T9972] ? __pfx_ret_from_fork+0x10/0x10 [ 591.235045][ T9972] ? __switch_to+0xc79/0x1410 [ 591.235073][ T9972] ? __pfx_kthread+0x10/0x10 [ 591.235095][ T9972] ret_from_fork_asm+0x1a/0x30 [ 591.235132][ T9972] [ 591.408599][ T9968] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 591.730201][ T9973] loop0: detected capacity change from 0 to 32768 [ 591.745446][ T9973] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 591.754414][ T9973] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 591.769569][ T9973] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 591.787370][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 591.794826][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 591.847270][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 52ms [ 591.855045][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 591.860704][ T9973] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 591.917614][ T9973] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 591.928778][ T9973] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 591.942625][ T9973] CPU: 1 UID: 0 PID: 9973 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 591.942648][ T9973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.942658][ T9973] Call Trace: [ 591.942666][ T9973] [ 591.942672][ T9973] dump_stack_lvl+0xe8/0x150 [ 591.942695][ T9973] gfs2_assert_warn_i+0x194/0x2c0 [ 591.942726][ T9973] gfs2_qd_dispose+0x466/0x570 [ 591.942749][ T9973] gfs2_quota_init+0xcd4/0x1220 [ 591.942785][ T9973] ? __pfx_gfs2_quota_init+0x10/0x10 [ 591.942804][ T9973] ? __pfx_wake_up_bit+0x10/0x10 [ 591.942827][ T9973] ? inode_go_inval+0x2a0/0x360 [ 591.942849][ T9973] gfs2_make_fs_rw+0x143/0x230 [ 591.942868][ T9973] gfs2_fill_super+0x1ba5/0x21d0 [ 591.942906][ T9973] ? __pfx_gfs2_fill_super+0x10/0x10 [ 591.942933][ T9973] ? init_locking+0xb8/0x210 [ 591.942956][ T9973] ? sb_set_blocksize+0x155/0x240 [ 591.942979][ T9973] ? setup_bdev_super+0x4c1/0x5b0 [ 591.943007][ T9973] get_tree_bdev_flags+0x431/0x4f0 [ 591.943034][ T9973] ? __pfx_gfs2_fill_super+0x10/0x10 [ 591.943059][ T9973] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 591.943082][ T9973] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 591.943119][ T9973] gfs2_get_tree+0x51/0x1e0 [ 591.943147][ T9973] vfs_get_tree+0x92/0x2a0 [ 591.943172][ T9973] do_new_mount+0x341/0xd30 [ 591.943193][ T9973] ? apparmor_capable+0x126/0x170 [ 591.943216][ T9973] ? __pfx_do_new_mount+0x10/0x10 [ 591.943236][ T9973] ? ns_capable+0x89/0xe0 [ 591.943265][ T9973] ? user_path_at+0xd4/0x160 [ 591.943288][ T9973] __se_sys_mount+0x31d/0x420 [ 591.943314][ T9973] ? __pfx___se_sys_mount+0x10/0x10 [ 591.943341][ T9973] ? __x64_sys_mount+0x20/0xc0 [ 591.943362][ T9973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.943381][ T9973] do_syscall_64+0x15f/0xf80 [ 591.943398][ T9973] ? trace_irq_disable+0x3b/0x140 [ 591.943418][ T9973] ? clear_bhb_loop+0x40/0x90 [ 591.943439][ T9973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.943456][ T9973] RIP: 0033:0x7fb66284b06a [ 591.943473][ T9973] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 591.943488][ T9973] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 591.943506][ T9973] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 591.943518][ T9973] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 591.943539][ T9973] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 591.943550][ T9973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 591.943561][ T9973] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 591.943589][ T9973] [ 592.216391][ T9973] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 592.533593][ T9978] loop0: detected capacity change from 0 to 32768 [ 592.554779][ T9978] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 592.563066][ T9978] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 592.576423][ T9978] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 592.586264][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 592.595921][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 592.638804][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 42ms [ 592.646499][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 592.654022][ T9978] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 592.674094][ T9982] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 592.688574][ T9982] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 592.697838][ T9982] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9982 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 592.708848][ T9982] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 592.710820][ T9978] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 592.717049][ T9982] CPU: 1 UID: 0 PID: 9982 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 592.717070][ T9982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.717080][ T9982] Call Trace: [ 592.717088][ T9982] [ 592.717101][ T9982] dump_stack_lvl+0xe8/0x150 [ 592.717126][ T9982] gfs2_withdraw+0xc3/0x1b0 [ 592.717154][ T9982] inode_go_instantiate+0xe69/0x12a0 [ 592.717179][ T9982] ? preempt_schedule_common+0x82/0xd0 [ 592.717210][ T9982] ? __pfx_inode_go_instantiate+0x10/0x10 [ 592.717244][ T9982] gfs2_instantiate+0x168/0x220 [ 592.717272][ T9982] gfs2_glock_wait+0x1d4/0x2a0 [ 592.717293][ T9982] do_sync+0x49a/0xcb0 [ 592.717312][ T9982] ? _raw_spin_unlock+0x28/0x50 [ 592.717335][ T9982] ? gfs2_quota_sync+0x370/0x470 [ 592.717364][ T9982] ? __pfx_do_sync+0x10/0x10 [ 592.717390][ T9982] ? gfs2_quota_sync+0x370/0x470 [ 592.717411][ T9982] ? do_raw_spin_unlock+0xf5/0x210 [ 592.717434][ T9982] gfs2_quota_sync+0x370/0x470 [ 592.717470][ T9982] gfs2_quotad+0x2b9/0x6e0 [ 592.717502][ T9982] ? __pfx_gfs2_quotad+0x10/0x10 [ 592.717523][ T9982] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 592.717547][ T9982] ? __kthread_parkme+0x7a/0x1f0 [ 592.717577][ T9982] kthread+0x388/0x470 [ 592.717600][ T9982] ? __pfx_gfs2_quotad+0x10/0x10 [ 592.717619][ T9982] ? __pfx_kthread+0x10/0x10 [ 592.717641][ T9982] ret_from_fork+0x514/0xb70 [ 592.717663][ T9982] ? __pfx_ret_from_fork+0x10/0x10 [ 592.717682][ T9982] ? __switch_to+0xc79/0x1410 [ 592.717709][ T9982] ? __pfx_kthread+0x10/0x10 [ 592.717733][ T9982] ret_from_fork_asm+0x1a/0x30 [ 592.717768][ T9982] [ 592.938763][ T9978] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 593.261968][ T9983] loop0: detected capacity change from 0 to 32768 [ 593.282259][ T9983] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 593.292495][ T9983] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 593.309566][ T9983] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 593.321110][ T8827] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 593.328030][ T8827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 593.355226][ T8827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 593.363036][ T8827] gfs2: fsid=syz:syz.0: jid=0: Done [ 593.368271][ T9983] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 593.390167][ T9987] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 593.404788][ T9987] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 593.414100][ T9987] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9987 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 593.425735][ T9987] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 593.427995][ T9983] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 593.434482][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 593.434507][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 593.434518][ T9987] Call Trace: [ 593.434526][ T9987] [ 593.434534][ T9987] dump_stack_lvl+0xe8/0x150 [ 593.434560][ T9987] gfs2_withdraw+0xc3/0x1b0 [ 593.434588][ T9987] inode_go_instantiate+0xe69/0x12a0 [ 593.434615][ T9987] ? preempt_schedule_common+0x82/0xd0 [ 593.434644][ T9987] ? __pfx_inode_go_instantiate+0x10/0x10 [ 593.434676][ T9987] gfs2_instantiate+0x168/0x220 [ 593.434702][ T9987] gfs2_glock_wait+0x1d4/0x2a0 [ 593.434722][ T9987] do_sync+0x49a/0xcb0 [ 593.434740][ T9987] ? _raw_spin_unlock+0x28/0x50 [ 593.434762][ T9987] ? gfs2_quota_sync+0x370/0x470 [ 593.434791][ T9987] ? __pfx_do_sync+0x10/0x10 [ 593.434818][ T9987] ? gfs2_quota_sync+0x370/0x470 [ 593.434840][ T9987] ? do_raw_spin_unlock+0xf5/0x210 [ 593.434863][ T9987] gfs2_quota_sync+0x370/0x470 [ 593.434892][ T9987] gfs2_quotad+0x2b9/0x6e0 [ 593.434924][ T9987] ? __pfx_gfs2_quotad+0x10/0x10 [ 593.434945][ T9987] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 593.434970][ T9987] ? __kthread_parkme+0x7a/0x1f0 [ 593.434999][ T9987] kthread+0x388/0x470 [ 593.435022][ T9987] ? __pfx_gfs2_quotad+0x10/0x10 [ 593.435040][ T9987] ? __pfx_kthread+0x10/0x10 [ 593.435063][ T9987] ret_from_fork+0x514/0xb70 [ 593.435085][ T9987] ? __pfx_ret_from_fork+0x10/0x10 [ 593.435103][ T9987] ? __switch_to+0xc79/0x1410 [ 593.435130][ T9987] ? __pfx_kthread+0x10/0x10 [ 593.435154][ T9987] ret_from_fork_asm+0x1a/0x30 [ 593.435189][ T9987] [ 593.638727][ T9983] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 594.003922][ T9988] loop0: detected capacity change from 0 to 32768 [ 594.019982][ T9988] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 594.030354][ T9988] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 594.042987][ T9988] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 594.054781][ T8827] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 594.061958][ T8827] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 594.129324][ T8827] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 594.137969][ T8827] gfs2: fsid=syz:syz.0: jid=0: Done [ 594.144104][ T9988] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 594.161811][ T9992] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 594.177365][ T9992] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 594.187024][ T9992] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:9992 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 594.197596][ T9992] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 594.200973][ T9988] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 594.206230][ T9992] CPU: 0 UID: 0 PID: 9992 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 594.206251][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.206262][ T9992] Call Trace: [ 594.206269][ T9992] [ 594.206277][ T9992] dump_stack_lvl+0xe8/0x150 [ 594.206302][ T9992] gfs2_withdraw+0xc3/0x1b0 [ 594.206329][ T9992] inode_go_instantiate+0xe69/0x12a0 [ 594.206354][ T9992] ? preempt_schedule_common+0x82/0xd0 [ 594.206383][ T9992] ? __pfx_inode_go_instantiate+0x10/0x10 [ 594.206417][ T9992] gfs2_instantiate+0x168/0x220 [ 594.206444][ T9992] gfs2_glock_wait+0x1d4/0x2a0 [ 594.206462][ T9992] do_sync+0x49a/0xcb0 [ 594.206481][ T9992] ? _raw_spin_unlock+0x28/0x50 [ 594.206503][ T9992] ? gfs2_quota_sync+0x370/0x470 [ 594.206532][ T9992] ? __pfx_do_sync+0x10/0x10 [ 594.206560][ T9992] ? gfs2_quota_sync+0x370/0x470 [ 594.206582][ T9992] ? do_raw_spin_unlock+0xf5/0x210 [ 594.206611][ T9992] gfs2_quota_sync+0x370/0x470 [ 594.206641][ T9992] gfs2_quotad+0x2b9/0x6e0 [ 594.206672][ T9992] ? __pfx_gfs2_quotad+0x10/0x10 [ 594.206694][ T9992] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.206719][ T9992] ? __kthread_parkme+0x7a/0x1f0 [ 594.206749][ T9992] kthread+0x388/0x470 [ 594.206772][ T9992] ? __pfx_gfs2_quotad+0x10/0x10 [ 594.206790][ T9992] ? __pfx_kthread+0x10/0x10 [ 594.206813][ T9992] ret_from_fork+0x514/0xb70 [ 594.206835][ T9992] ? __pfx_ret_from_fork+0x10/0x10 [ 594.206853][ T9992] ? __switch_to+0xc79/0x1410 [ 594.206880][ T9992] ? __pfx_kthread+0x10/0x10 [ 594.206903][ T9992] ret_from_fork_asm+0x1a/0x30 [ 594.206939][ T9992] [ 594.428828][ T9988] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 594.744073][ T9993] loop0: detected capacity change from 0 to 32768 [ 594.760154][ T9993] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 594.770600][ T9993] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 594.785981][ T9993] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 594.796149][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 594.805162][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 594.842125][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 594.849740][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 594.856761][ T9993] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 594.912277][ T9993] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 594.923293][ T9993] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 594.937287][ T9993] CPU: 0 UID: 0 PID: 9993 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 594.937303][ T9993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.937312][ T9993] Call Trace: [ 594.937317][ T9993] [ 594.937321][ T9993] dump_stack_lvl+0xe8/0x150 [ 594.937338][ T9993] gfs2_assert_warn_i+0x194/0x2c0 [ 594.937359][ T9993] gfs2_qd_dispose+0x466/0x570 [ 594.937375][ T9993] gfs2_quota_init+0xcd4/0x1220 [ 594.937398][ T9993] ? __pfx_gfs2_quota_init+0x10/0x10 [ 594.937411][ T9993] ? __pfx_wake_up_bit+0x10/0x10 [ 594.937425][ T9993] ? inode_go_inval+0x2a0/0x360 [ 594.937440][ T9993] gfs2_make_fs_rw+0x143/0x230 [ 594.937452][ T9993] gfs2_fill_super+0x1ba5/0x21d0 [ 594.937474][ T9993] ? __pfx_gfs2_fill_super+0x10/0x10 [ 594.937491][ T9993] ? init_locking+0xb8/0x210 [ 594.937504][ T9993] ? sb_set_blocksize+0x155/0x240 [ 594.937518][ T9993] ? setup_bdev_super+0x4c1/0x5b0 [ 594.937536][ T9993] get_tree_bdev_flags+0x431/0x4f0 [ 594.937551][ T9993] ? __pfx_gfs2_fill_super+0x10/0x10 [ 594.937572][ T9993] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 594.937586][ T9993] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 594.937607][ T9993] gfs2_get_tree+0x51/0x1e0 [ 594.937623][ T9993] vfs_get_tree+0x92/0x2a0 [ 594.937640][ T9993] do_new_mount+0x341/0xd30 [ 594.937652][ T9993] ? apparmor_capable+0x126/0x170 [ 594.937666][ T9993] ? __pfx_do_new_mount+0x10/0x10 [ 594.937678][ T9993] ? ns_capable+0x89/0xe0 [ 594.937695][ T9993] ? user_path_at+0xd4/0x160 [ 594.937710][ T9993] __se_sys_mount+0x31d/0x420 [ 594.937726][ T9993] ? __pfx___se_sys_mount+0x10/0x10 [ 594.937742][ T9993] ? __x64_sys_mount+0x20/0xc0 [ 594.937754][ T9993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.937765][ T9993] do_syscall_64+0x15f/0xf80 [ 594.937775][ T9993] ? trace_irq_disable+0x3b/0x140 [ 594.937786][ T9993] ? clear_bhb_loop+0x40/0x90 [ 594.937799][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.937808][ T9993] RIP: 0033:0x7fb66284b06a [ 594.937819][ T9993] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 594.937827][ T9993] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 594.937838][ T9993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 594.937845][ T9993] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 594.937852][ T9993] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 594.937858][ T9993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 594.937865][ T9993] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 594.937880][ T9993] [ 595.211232][ T9993] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 595.554847][ T9998] loop0: detected capacity change from 0 to 32768 [ 595.570092][ T9998] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 595.584822][ T9998] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 595.599794][ T9998] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 595.610415][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 595.617248][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 595.658019][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 40ms [ 595.665730][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 595.673062][ T9998] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 595.723786][ T9998] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 595.734556][ T9998] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 595.748199][ T9998] CPU: 0 UID: 0 PID: 9998 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 595.748219][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.748229][ T9998] Call Trace: [ 595.748235][ T9998] [ 595.748242][ T9998] dump_stack_lvl+0xe8/0x150 [ 595.748267][ T9998] gfs2_assert_warn_i+0x194/0x2c0 [ 595.748296][ T9998] gfs2_qd_dispose+0x466/0x570 [ 595.748320][ T9998] gfs2_quota_init+0xcd4/0x1220 [ 595.748357][ T9998] ? __pfx_gfs2_quota_init+0x10/0x10 [ 595.748377][ T9998] ? __pfx_wake_up_bit+0x10/0x10 [ 595.748403][ T9998] ? inode_go_inval+0x2a0/0x360 [ 595.748427][ T9998] gfs2_make_fs_rw+0x143/0x230 [ 595.748447][ T9998] gfs2_fill_super+0x1ba5/0x21d0 [ 595.748482][ T9998] ? __pfx_gfs2_fill_super+0x10/0x10 [ 595.748509][ T9998] ? init_locking+0xb8/0x210 [ 595.748529][ T9998] ? sb_set_blocksize+0x155/0x240 [ 595.748552][ T9998] ? setup_bdev_super+0x4c1/0x5b0 [ 595.748576][ T9998] get_tree_bdev_flags+0x431/0x4f0 [ 595.748600][ T9998] ? __pfx_gfs2_fill_super+0x10/0x10 [ 595.748623][ T9998] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 595.748647][ T9998] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 595.748681][ T9998] gfs2_get_tree+0x51/0x1e0 [ 595.748707][ T9998] vfs_get_tree+0x92/0x2a0 [ 595.748734][ T9998] do_new_mount+0x341/0xd30 [ 595.748753][ T9998] ? apparmor_capable+0x126/0x170 [ 595.748776][ T9998] ? __pfx_do_new_mount+0x10/0x10 [ 595.748796][ T9998] ? ns_capable+0x89/0xe0 [ 595.748824][ T9998] ? user_path_at+0xd4/0x160 [ 595.748850][ T9998] __se_sys_mount+0x31d/0x420 [ 595.748878][ T9998] ? __pfx___se_sys_mount+0x10/0x10 [ 595.748907][ T9998] ? __x64_sys_mount+0x20/0xc0 [ 595.748928][ T9998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.748948][ T9998] do_syscall_64+0x15f/0xf80 [ 595.748966][ T9998] ? trace_irq_disable+0x3b/0x140 [ 595.748984][ T9998] ? clear_bhb_loop+0x40/0x90 [ 595.749006][ T9998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.749023][ T9998] RIP: 0033:0x7fb66284b06a [ 595.749041][ T9998] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 595.749056][ T9998] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 595.749074][ T9998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 595.749087][ T9998] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 595.749099][ T9998] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 595.749111][ T9998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 595.749122][ T9998] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 595.749151][ T9998] [ 596.021195][ T9998] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 596.368230][T10003] loop0: detected capacity change from 0 to 32768 [ 596.384842][T10003] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 596.394361][T10003] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 596.409244][T10003] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 596.419133][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 596.425980][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 596.478094][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 52ms [ 596.485919][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 596.492590][T10003] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 596.521337][T10007] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 596.538363][T10007] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 596.547755][T10007] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10007 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 596.557224][T10003] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 596.558314][T10007] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 596.577105][T10007] CPU: 0 UID: 0 PID: 10007 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 596.577129][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.577140][T10007] Call Trace: [ 596.577148][T10007] [ 596.577155][T10007] dump_stack_lvl+0xe8/0x150 [ 596.577182][T10007] gfs2_withdraw+0xc3/0x1b0 [ 596.577209][T10007] inode_go_instantiate+0xe69/0x12a0 [ 596.577233][T10007] ? __pfx_bit_wait+0x10/0x10 [ 596.577257][T10007] ? __pfx_bit_wait+0x10/0x10 [ 596.577274][T10007] ? __pfx_inode_go_instantiate+0x10/0x10 [ 596.577299][T10007] ? __pfx_wake_bit_function+0x10/0x10 [ 596.577323][T10007] gfs2_instantiate+0x168/0x220 [ 596.577352][T10007] gfs2_glock_wait+0x1d4/0x2a0 [ 596.577380][T10007] do_sync+0x49a/0xcb0 [ 596.577401][T10007] ? _raw_spin_unlock+0x28/0x50 [ 596.577424][T10007] ? gfs2_quota_sync+0x370/0x470 [ 596.577452][T10007] ? __pfx_do_sync+0x10/0x10 [ 596.577482][T10007] ? gfs2_quota_sync+0x370/0x470 [ 596.577507][T10007] ? do_raw_spin_unlock+0xf5/0x210 [ 596.577529][T10007] gfs2_quota_sync+0x370/0x470 [ 596.577560][T10007] gfs2_quotad+0x2b9/0x6e0 [ 596.577593][T10007] ? __pfx_gfs2_quotad+0x10/0x10 [ 596.577616][T10007] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 596.577643][T10007] ? __kthread_parkme+0x7a/0x1f0 [ 596.577674][T10007] kthread+0x388/0x470 [ 596.577699][T10007] ? __pfx_gfs2_quotad+0x10/0x10 [ 596.577718][T10007] ? __pfx_kthread+0x10/0x10 [ 596.577743][T10007] ret_from_fork+0x514/0xb70 [ 596.577766][T10007] ? __pfx_ret_from_fork+0x10/0x10 [ 596.577786][T10007] ? __switch_to+0xc79/0x1410 [ 596.577813][T10007] ? __pfx_kthread+0x10/0x10 [ 596.577839][T10007] ret_from_fork_asm+0x1a/0x30 [ 596.577875][T10007] [ 596.748245][T10003] gfs2: fsid=syz:syz.0: found 1 quota changes [ 596.768633][T10003] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 597.090796][T10008] loop0: detected capacity change from 0 to 32768 [ 597.106016][T10008] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 597.115566][T10008] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 597.127690][T10008] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 597.137649][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 597.144557][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 597.184284][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 597.191968][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 597.197367][T10008] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 597.257010][T10008] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 597.268242][T10008] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 597.282234][T10008] CPU: 0 UID: 0 PID: 10008 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 597.282249][T10008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 597.282256][T10008] Call Trace: [ 597.282261][T10008] [ 597.282265][T10008] dump_stack_lvl+0xe8/0x150 [ 597.282282][T10008] gfs2_assert_warn_i+0x194/0x2c0 [ 597.282308][T10008] gfs2_qd_dispose+0x466/0x570 [ 597.282324][T10008] gfs2_quota_init+0xcd4/0x1220 [ 597.282348][T10008] ? __pfx_gfs2_quota_init+0x10/0x10 [ 597.282361][T10008] ? __pfx_wake_up_bit+0x10/0x10 [ 597.282374][T10008] ? inode_go_inval+0x2a0/0x360 [ 597.282390][T10008] gfs2_make_fs_rw+0x143/0x230 [ 597.282401][T10008] gfs2_fill_super+0x1ba5/0x21d0 [ 597.282423][T10008] ? __pfx_gfs2_fill_super+0x10/0x10 [ 597.282440][T10008] ? init_locking+0xb8/0x210 [ 597.282453][T10008] ? sb_set_blocksize+0x155/0x240 [ 597.282468][T10008] ? setup_bdev_super+0x4c1/0x5b0 [ 597.282486][T10008] get_tree_bdev_flags+0x431/0x4f0 [ 597.282502][T10008] ? __pfx_gfs2_fill_super+0x10/0x10 [ 597.282516][T10008] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 597.282530][T10008] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 597.282552][T10008] gfs2_get_tree+0x51/0x1e0 [ 597.282568][T10008] vfs_get_tree+0x92/0x2a0 [ 597.282584][T10008] do_new_mount+0x341/0xd30 [ 597.282596][T10008] ? apparmor_capable+0x126/0x170 [ 597.282609][T10008] ? __pfx_do_new_mount+0x10/0x10 [ 597.282621][T10008] ? ns_capable+0x89/0xe0 [ 597.282638][T10008] ? user_path_at+0xd4/0x160 [ 597.282654][T10008] __se_sys_mount+0x31d/0x420 [ 597.282670][T10008] ? __pfx___se_sys_mount+0x10/0x10 [ 597.282685][T10008] ? __x64_sys_mount+0x20/0xc0 [ 597.282698][T10008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.282709][T10008] do_syscall_64+0x15f/0xf80 [ 597.282718][T10008] ? trace_irq_disable+0x3b/0x140 [ 597.282730][T10008] ? clear_bhb_loop+0x40/0x90 [ 597.282743][T10008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.282752][T10008] RIP: 0033:0x7fb66284b06a [ 597.282763][T10008] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 597.282772][T10008] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 597.282783][T10008] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 597.282790][T10008] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 597.282797][T10008] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 597.282804][T10008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 597.282810][T10008] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 597.282825][T10008] [ 597.557482][T10008] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 597.885403][T10013] loop0: detected capacity change from 0 to 32768 [ 597.897039][T10013] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 597.906825][T10013] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 597.919894][T10013] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 597.930815][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 597.937803][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 597.975150][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 597.982787][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 597.989781][T10013] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 598.011662][T10017] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 598.027954][T10017] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 598.038160][T10017] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10017 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 598.049313][T10017] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 598.054405][T10013] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 598.057515][T10017] CPU: 1 UID: 0 PID: 10017 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 598.057534][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.057544][T10017] Call Trace: [ 598.057553][T10017] [ 598.057560][T10017] dump_stack_lvl+0xe8/0x150 [ 598.057587][T10017] gfs2_withdraw+0xc3/0x1b0 [ 598.057614][T10017] inode_go_instantiate+0xe69/0x12a0 [ 598.057643][T10017] ? preempt_schedule_common+0x82/0xd0 [ 598.057673][T10017] ? __pfx_inode_go_instantiate+0x10/0x10 [ 598.057707][T10017] gfs2_instantiate+0x168/0x220 [ 598.057735][T10017] gfs2_glock_wait+0x1d4/0x2a0 [ 598.057754][T10017] do_sync+0x49a/0xcb0 [ 598.057772][T10017] ? _raw_spin_unlock+0x28/0x50 [ 598.057794][T10017] ? gfs2_quota_sync+0x370/0x470 [ 598.057823][T10017] ? __pfx_do_sync+0x10/0x10 [ 598.057851][T10017] ? gfs2_quota_sync+0x370/0x470 [ 598.057873][T10017] ? do_raw_spin_unlock+0xf5/0x210 [ 598.057895][T10017] gfs2_quota_sync+0x370/0x470 [ 598.057925][T10017] gfs2_quotad+0x2b9/0x6e0 [ 598.057957][T10017] ? __pfx_gfs2_quotad+0x10/0x10 [ 598.057978][T10017] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.058002][T10017] ? __kthread_parkme+0x7a/0x1f0 [ 598.058037][T10017] kthread+0x388/0x470 [ 598.058060][T10017] ? __pfx_gfs2_quotad+0x10/0x10 [ 598.058078][T10017] ? __pfx_kthread+0x10/0x10 [ 598.058102][T10017] ret_from_fork+0x514/0xb70 [ 598.058124][T10017] ? __pfx_ret_from_fork+0x10/0x10 [ 598.058143][T10017] ? __switch_to+0xc79/0x1410 [ 598.058169][T10017] ? __pfx_kthread+0x10/0x10 [ 598.058192][T10017] ret_from_fork_asm+0x1a/0x30 [ 598.058228][T10017] [ 598.259964][T10013] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 598.570550][T10018] loop0: detected capacity change from 0 to 32768 [ 598.587077][T10018] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 598.599167][T10018] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 598.617986][T10018] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 598.635403][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 598.642653][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 598.680912][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms [ 598.690617][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 598.695966][T10018] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 598.719400][T10022] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 598.734292][T10022] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 598.744087][T10022] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10022 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 598.753625][T10018] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 598.754773][T10022] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 598.774194][T10022] CPU: 0 UID: 0 PID: 10022 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 598.774217][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.774227][T10022] Call Trace: [ 598.774235][T10022] [ 598.774243][T10022] dump_stack_lvl+0xe8/0x150 [ 598.774269][T10022] gfs2_withdraw+0xc3/0x1b0 [ 598.774296][T10022] inode_go_instantiate+0xe69/0x12a0 [ 598.774321][T10022] ? preempt_schedule_common+0x82/0xd0 [ 598.774352][T10022] ? __pfx_inode_go_instantiate+0x10/0x10 [ 598.774386][T10022] gfs2_instantiate+0x168/0x220 [ 598.774413][T10022] gfs2_glock_wait+0x1d4/0x2a0 [ 598.774432][T10022] do_sync+0x49a/0xcb0 [ 598.774451][T10022] ? _raw_spin_unlock+0x28/0x50 [ 598.774474][T10022] ? gfs2_quota_sync+0x370/0x470 [ 598.774503][T10022] ? __pfx_do_sync+0x10/0x10 [ 598.774532][T10022] ? gfs2_quota_sync+0x370/0x470 [ 598.774556][T10022] ? do_raw_spin_unlock+0xf5/0x210 [ 598.774579][T10022] gfs2_quota_sync+0x370/0x470 [ 598.774610][T10022] gfs2_quotad+0x2b9/0x6e0 [ 598.774644][T10022] ? __pfx_gfs2_quotad+0x10/0x10 [ 598.774667][T10022] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.774692][T10022] ? __kthread_parkme+0x7a/0x1f0 [ 598.774724][T10022] kthread+0x388/0x470 [ 598.774748][T10022] ? __pfx_gfs2_quotad+0x10/0x10 [ 598.774767][T10022] ? __pfx_kthread+0x10/0x10 [ 598.774792][T10022] ret_from_fork+0x514/0xb70 [ 598.774815][T10022] ? __pfx_ret_from_fork+0x10/0x10 [ 598.774835][T10022] ? __switch_to+0xc79/0x1410 [ 598.774862][T10022] ? __pfx_kthread+0x10/0x10 [ 598.774886][T10022] ret_from_fork_asm+0x1a/0x30 [ 598.774923][T10022] [ 598.938276][T10018] gfs2: fsid=syz:syz.0: found 1 quota changes [ 598.959198][T10018] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 599.286346][T10023] loop0: detected capacity change from 0 to 32768 [ 599.303996][T10023] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 599.316118][T10023] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 599.334678][T10023] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 599.344165][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 599.354906][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 599.394613][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 599.404021][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 599.410845][T10023] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 599.431042][T10027] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 599.446072][T10027] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 599.456144][T10027] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10027 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 599.467111][T10027] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 599.474907][T10023] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 599.477460][T10027] CPU: 0 UID: 0 PID: 10027 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 599.477484][T10027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 599.477494][T10027] Call Trace: [ 599.477502][T10027] [ 599.477510][T10027] dump_stack_lvl+0xe8/0x150 [ 599.477536][T10027] gfs2_withdraw+0xc3/0x1b0 [ 599.477562][T10027] inode_go_instantiate+0xe69/0x12a0 [ 599.477584][T10027] ? __pfx_bit_wait+0x10/0x10 [ 599.477607][T10027] ? __pfx_bit_wait+0x10/0x10 [ 599.477624][T10027] ? __pfx_inode_go_instantiate+0x10/0x10 [ 599.477648][T10027] ? __pfx_wake_bit_function+0x10/0x10 [ 599.477672][T10027] gfs2_instantiate+0x168/0x220 [ 599.477700][T10027] gfs2_glock_wait+0x1d4/0x2a0 [ 599.477719][T10027] do_sync+0x49a/0xcb0 [ 599.477742][T10027] ? _raw_spin_unlock+0x28/0x50 [ 599.477764][T10027] ? gfs2_quota_sync+0x370/0x470 [ 599.477792][T10027] ? __pfx_do_sync+0x10/0x10 [ 599.477820][T10027] ? gfs2_quota_sync+0x370/0x470 [ 599.477843][T10027] ? do_raw_spin_unlock+0xf5/0x210 [ 599.477864][T10027] gfs2_quota_sync+0x370/0x470 [ 599.477894][T10027] gfs2_quotad+0x2b9/0x6e0 [ 599.477925][T10027] ? __pfx_gfs2_quotad+0x10/0x10 [ 599.477947][T10027] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.477972][T10027] ? __kthread_parkme+0x7a/0x1f0 [ 599.478002][T10027] kthread+0x388/0x470 [ 599.478024][T10027] ? __pfx_gfs2_quotad+0x10/0x10 [ 599.478043][T10027] ? __pfx_kthread+0x10/0x10 [ 599.478066][T10027] ret_from_fork+0x514/0xb70 [ 599.478096][T10027] ? __pfx_ret_from_fork+0x10/0x10 [ 599.478114][T10027] ? __switch_to+0xc79/0x1410 [ 599.478141][T10027] ? __pfx_kthread+0x10/0x10 [ 599.478165][T10027] ret_from_fork_asm+0x1a/0x30 [ 599.478200][T10027] [ 599.698992][T10023] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 600.014806][T10028] loop0: detected capacity change from 0 to 32768 [ 600.029968][T10028] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 600.039625][T10028] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 600.055713][T10028] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 600.065827][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 600.072932][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 600.112821][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 600.120550][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 600.126508][T10028] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 600.152013][T10032] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 600.168198][T10032] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 600.177540][T10032] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10032 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 600.189140][T10032] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 600.191657][T10028] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 600.197895][T10032] CPU: 0 UID: 0 PID: 10032 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 600.197917][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.197928][T10032] Call Trace: [ 600.197935][T10032] [ 600.197943][T10032] dump_stack_lvl+0xe8/0x150 [ 600.197970][T10032] gfs2_withdraw+0xc3/0x1b0 [ 600.197996][T10032] inode_go_instantiate+0xe69/0x12a0 [ 600.198022][T10032] ? preempt_schedule_common+0x82/0xd0 [ 600.198052][T10032] ? __pfx_inode_go_instantiate+0x10/0x10 [ 600.198086][T10032] gfs2_instantiate+0x168/0x220 [ 600.198112][T10032] gfs2_glock_wait+0x1d4/0x2a0 [ 600.198131][T10032] do_sync+0x49a/0xcb0 [ 600.198150][T10032] ? _raw_spin_unlock+0x28/0x50 [ 600.198172][T10032] ? gfs2_quota_sync+0x370/0x470 [ 600.198200][T10032] ? __pfx_do_sync+0x10/0x10 [ 600.198227][T10032] ? gfs2_quota_sync+0x370/0x470 [ 600.198251][T10032] ? do_raw_spin_unlock+0xf5/0x210 [ 600.198273][T10032] gfs2_quota_sync+0x370/0x470 [ 600.198302][T10032] gfs2_quotad+0x2b9/0x6e0 [ 600.198333][T10032] ? __pfx_gfs2_quotad+0x10/0x10 [ 600.198355][T10032] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 600.198380][T10032] ? __kthread_parkme+0x7a/0x1f0 [ 600.198413][T10032] kthread+0x388/0x470 [ 600.198435][T10032] ? __pfx_gfs2_quotad+0x10/0x10 [ 600.198454][T10032] ? __pfx_kthread+0x10/0x10 [ 600.198477][T10032] ret_from_fork+0x514/0xb70 [ 600.198500][T10032] ? __pfx_ret_from_fork+0x10/0x10 [ 600.198518][T10032] ? __switch_to+0xc79/0x1410 [ 600.198544][T10032] ? __pfx_kthread+0x10/0x10 [ 600.198568][T10032] ret_from_fork_asm+0x1a/0x30 [ 600.198603][T10032] [ 600.389182][T10028] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 600.709533][T10033] loop0: detected capacity change from 0 to 32768 [ 600.724992][T10033] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 600.741323][T10033] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 600.757750][T10033] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 600.772751][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 600.779856][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 600.825915][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 600.834510][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 600.840296][T10033] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 600.859641][T10037] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 600.874231][T10037] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 600.883571][T10037] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10037 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 600.890651][T10033] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 600.894323][T10037] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 600.913929][T10037] CPU: 1 UID: 0 PID: 10037 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 600.913951][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.913963][T10037] Call Trace: [ 600.913970][T10037] [ 600.913978][T10037] dump_stack_lvl+0xe8/0x150 [ 600.914005][T10037] gfs2_withdraw+0xc3/0x1b0 [ 600.914033][T10037] inode_go_instantiate+0xe69/0x12a0 [ 600.914060][T10037] ? preempt_schedule_common+0x82/0xd0 [ 600.914091][T10037] ? __pfx_inode_go_instantiate+0x10/0x10 [ 600.914126][T10037] gfs2_instantiate+0x168/0x220 [ 600.914155][T10037] gfs2_glock_wait+0x1d4/0x2a0 [ 600.914175][T10037] do_sync+0x49a/0xcb0 [ 600.914194][T10037] ? _raw_spin_unlock+0x28/0x50 [ 600.914213][T10037] ? gfs2_quota_sync+0x370/0x470 [ 600.914241][T10037] ? __pfx_do_sync+0x10/0x10 [ 600.914266][T10037] ? gfs2_quota_sync+0x370/0x470 [ 600.914290][T10037] ? do_raw_spin_unlock+0xf5/0x210 [ 600.914313][T10037] gfs2_quota_sync+0x370/0x470 [ 600.914342][T10037] gfs2_quotad+0x2b9/0x6e0 [ 600.914374][T10037] ? __pfx_gfs2_quotad+0x10/0x10 [ 600.914397][T10037] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 600.914421][T10037] ? __kthread_parkme+0x7a/0x1f0 [ 600.914451][T10037] kthread+0x388/0x470 [ 600.914476][T10037] ? __pfx_gfs2_quotad+0x10/0x10 [ 600.914495][T10037] ? __pfx_kthread+0x10/0x10 [ 600.914519][T10037] ret_from_fork+0x514/0xb70 [ 600.914543][T10037] ? __pfx_ret_from_fork+0x10/0x10 [ 600.914563][T10037] ? __switch_to+0xc79/0x1410 [ 600.914592][T10037] ? __pfx_kthread+0x10/0x10 [ 600.914617][T10037] ret_from_fork_asm+0x1a/0x30 [ 600.914653][T10037] [ 600.917879][T10033] gfs2: fsid=syz:syz.0: found 1 quota changes [ 601.108563][T10033] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 601.425936][T10038] loop0: detected capacity change from 0 to 32768 [ 601.443503][T10038] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 601.452821][T10038] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 601.467940][T10038] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 601.478382][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 601.485495][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 601.525181][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 601.532927][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 601.538283][T10038] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 601.596525][T10038] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 601.608038][T10038] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 601.621712][T10038] CPU: 0 UID: 0 PID: 10038 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 601.621735][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 601.621745][T10038] Call Trace: [ 601.621751][T10038] [ 601.621758][T10038] dump_stack_lvl+0xe8/0x150 [ 601.621784][T10038] gfs2_assert_warn_i+0x194/0x2c0 [ 601.621818][T10038] gfs2_qd_dispose+0x466/0x570 [ 601.621846][T10038] gfs2_quota_init+0xcd4/0x1220 [ 601.621888][T10038] ? __pfx_gfs2_quota_init+0x10/0x10 [ 601.621910][T10038] ? __pfx_wake_up_bit+0x10/0x10 [ 601.621941][T10038] ? inode_go_inval+0x2a0/0x360 [ 601.621967][T10038] gfs2_make_fs_rw+0x143/0x230 [ 601.621987][T10038] gfs2_fill_super+0x1ba5/0x21d0 [ 601.622027][T10038] ? __pfx_gfs2_fill_super+0x10/0x10 [ 601.622055][T10038] ? init_locking+0xb8/0x210 [ 601.622078][T10038] ? sb_set_blocksize+0x155/0x240 [ 601.622103][T10038] ? setup_bdev_super+0x4c1/0x5b0 [ 601.622132][T10038] get_tree_bdev_flags+0x431/0x4f0 [ 601.622159][T10038] ? __pfx_gfs2_fill_super+0x10/0x10 [ 601.622183][T10038] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 601.622206][T10038] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 601.622243][T10038] gfs2_get_tree+0x51/0x1e0 [ 601.622270][T10038] vfs_get_tree+0x92/0x2a0 [ 601.622298][T10038] do_new_mount+0x341/0xd30 [ 601.622318][T10038] ? apparmor_capable+0x126/0x170 [ 601.622342][T10038] ? __pfx_do_new_mount+0x10/0x10 [ 601.622364][T10038] ? ns_capable+0x89/0xe0 [ 601.622394][T10038] ? user_path_at+0xd4/0x160 [ 601.622420][T10038] __se_sys_mount+0x31d/0x420 [ 601.622447][T10038] ? __pfx___se_sys_mount+0x10/0x10 [ 601.622470][T10038] ? __x64_sys_mount+0x20/0xc0 [ 601.622488][T10038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.622506][T10038] do_syscall_64+0x15f/0xf80 [ 601.622522][T10038] ? trace_irq_disable+0x3b/0x140 [ 601.622542][T10038] ? clear_bhb_loop+0x40/0x90 [ 601.622563][T10038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.622577][T10038] RIP: 0033:0x7fb66284b06a [ 601.622592][T10038] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 601.622605][T10038] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 601.622622][T10038] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 601.622633][T10038] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 601.622643][T10038] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 601.622652][T10038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 601.622662][T10038] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 601.622686][T10038] [ 601.644216][T10038] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 602.245538][T10043] loop0: detected capacity change from 0 to 32768 [ 602.258256][T10043] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 602.268035][T10043] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 602.282800][T10043] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 602.292250][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 602.299801][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 602.327886][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 28ms [ 602.336491][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 602.341867][T10043] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 602.361454][T10047] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 602.376224][T10047] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 602.385603][T10047] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10047 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 602.396613][T10047] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 602.404925][T10047] CPU: 1 UID: 0 PID: 10047 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 602.404949][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 602.404959][T10047] Call Trace: [ 602.404967][T10047] [ 602.404973][T10047] dump_stack_lvl+0xe8/0x150 [ 602.404996][T10047] gfs2_withdraw+0xc3/0x1b0 [ 602.405023][T10047] inode_go_instantiate+0xe69/0x12a0 [ 602.405051][T10047] ? preempt_schedule_common+0x82/0xd0 [ 602.405083][T10047] ? __pfx_inode_go_instantiate+0x10/0x10 [ 602.405117][T10047] gfs2_instantiate+0x168/0x220 [ 602.405146][T10047] gfs2_glock_wait+0x1d4/0x2a0 [ 602.405167][T10047] do_sync+0x49a/0xcb0 [ 602.405186][T10047] ? _raw_spin_unlock+0x28/0x50 [ 602.405208][T10047] ? gfs2_quota_sync+0x370/0x470 [ 602.405238][T10047] ? __pfx_do_sync+0x10/0x10 [ 602.405268][T10047] ? gfs2_quota_sync+0x370/0x470 [ 602.405293][T10047] ? do_raw_spin_unlock+0xf5/0x210 [ 602.405316][T10047] gfs2_quota_sync+0x370/0x470 [ 602.405348][T10047] gfs2_quotad+0x2b9/0x6e0 [ 602.405399][T10047] ? __pfx_gfs2_quotad+0x10/0x10 [ 602.405423][T10047] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 602.405450][T10047] ? __kthread_parkme+0x7a/0x1f0 [ 602.405482][T10047] kthread+0x388/0x470 [ 602.405505][T10047] ? __pfx_gfs2_quotad+0x10/0x10 [ 602.405526][T10047] ? __pfx_kthread+0x10/0x10 [ 602.405549][T10047] ret_from_fork+0x514/0xb70 [ 602.405573][T10047] ? __pfx_ret_from_fork+0x10/0x10 [ 602.405592][T10047] ? __switch_to+0xc79/0x1410 [ 602.405620][T10047] ? __pfx_kthread+0x10/0x10 [ 602.405644][T10047] ret_from_fork_asm+0x1a/0x30 [ 602.405676][T10047] [ 602.618638][T10043] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 602.937485][T10048] loop0: detected capacity change from 0 to 32768 [ 602.960569][T10048] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 602.969877][T10048] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 602.986805][T10048] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 602.996171][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 603.003120][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 603.041461][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms [ 603.050912][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 603.056260][T10048] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 603.080491][T10052] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 603.097163][T10052] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 603.106860][T10052] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10052 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 603.117942][T10052] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 603.126334][T10052] CPU: 1 UID: 0 PID: 10052 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 603.126357][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.126367][T10052] Call Trace: [ 603.126375][T10052] [ 603.126383][T10052] dump_stack_lvl+0xe8/0x150 [ 603.126408][T10052] gfs2_withdraw+0xc3/0x1b0 [ 603.126431][T10052] inode_go_instantiate+0xe69/0x12a0 [ 603.126457][T10052] ? preempt_schedule_common+0x82/0xd0 [ 603.126485][T10052] ? __pfx_inode_go_instantiate+0x10/0x10 [ 603.126516][T10052] gfs2_instantiate+0x168/0x220 [ 603.126543][T10052] gfs2_glock_wait+0x1d4/0x2a0 [ 603.126562][T10052] do_sync+0x49a/0xcb0 [ 603.126582][T10052] ? _raw_spin_unlock+0x28/0x50 [ 603.126605][T10052] ? gfs2_quota_sync+0x370/0x470 [ 603.126634][T10052] ? __pfx_do_sync+0x10/0x10 [ 603.126664][T10052] ? gfs2_quota_sync+0x370/0x470 [ 603.126697][T10052] ? do_raw_spin_unlock+0xf5/0x210 [ 603.126720][T10052] gfs2_quota_sync+0x370/0x470 [ 603.126751][T10052] gfs2_quotad+0x2b9/0x6e0 [ 603.126784][T10052] ? __pfx_gfs2_quotad+0x10/0x10 [ 603.126807][T10052] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 603.126834][T10052] ? __kthread_parkme+0x7a/0x1f0 [ 603.126864][T10052] kthread+0x388/0x470 [ 603.126889][T10052] ? __pfx_gfs2_quotad+0x10/0x10 [ 603.126909][T10052] ? __pfx_kthread+0x10/0x10 [ 603.126934][T10052] ret_from_fork+0x514/0xb70 [ 603.126957][T10052] ? __pfx_ret_from_fork+0x10/0x10 [ 603.126976][T10052] ? __switch_to+0xc79/0x1410 [ 603.127004][T10052] ? __pfx_kthread+0x10/0x10 [ 603.127029][T10052] ret_from_fork_asm+0x1a/0x30 [ 603.127067][T10052] [ 603.298626][T10048] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 603.607416][T10053] loop0: detected capacity change from 0 to 32768 [ 603.632804][T10053] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 603.641860][T10053] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 603.655097][T10053] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 603.665475][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 603.672590][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 603.720293][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 603.728839][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 603.735018][T10053] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 603.760818][T10057] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 603.775948][T10057] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 603.785687][T10057] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10057 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 603.796989][T10057] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 603.806032][T10053] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 603.806517][T10057] CPU: 1 UID: 0 PID: 10057 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 603.806538][T10057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.806549][T10057] Call Trace: [ 603.806556][T10057] [ 603.806564][T10057] dump_stack_lvl+0xe8/0x150 [ 603.806589][T10057] gfs2_withdraw+0xc3/0x1b0 [ 603.806628][T10057] inode_go_instantiate+0xe69/0x12a0 [ 603.806650][T10057] ? __pfx_bit_wait+0x10/0x10 [ 603.806674][T10057] ? __pfx_bit_wait+0x10/0x10 [ 603.806689][T10057] ? __pfx_inode_go_instantiate+0x10/0x10 [ 603.806713][T10057] ? __pfx_wake_bit_function+0x10/0x10 [ 603.806737][T10057] gfs2_instantiate+0x168/0x220 [ 603.806764][T10057] gfs2_glock_wait+0x1d4/0x2a0 [ 603.806783][T10057] do_sync+0x49a/0xcb0 [ 603.806801][T10057] ? _raw_spin_unlock+0x28/0x50 [ 603.806823][T10057] ? gfs2_quota_sync+0x370/0x470 [ 603.806850][T10057] ? __pfx_do_sync+0x10/0x10 [ 603.806879][T10057] ? gfs2_quota_sync+0x370/0x470 [ 603.806902][T10057] ? do_raw_spin_unlock+0xf5/0x210 [ 603.806923][T10057] gfs2_quota_sync+0x370/0x470 [ 603.806953][T10057] gfs2_quotad+0x2b9/0x6e0 [ 603.806985][T10057] ? __pfx_gfs2_quotad+0x10/0x10 [ 603.807006][T10057] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 603.807031][T10057] ? __kthread_parkme+0x7a/0x1f0 [ 603.807060][T10057] kthread+0x388/0x470 [ 603.807083][T10057] ? __pfx_gfs2_quotad+0x10/0x10 [ 603.807101][T10057] ? __pfx_kthread+0x10/0x10 [ 603.807125][T10057] ret_from_fork+0x514/0xb70 [ 603.807146][T10057] ? __pfx_ret_from_fork+0x10/0x10 [ 603.807165][T10057] ? __switch_to+0xc79/0x1410 [ 603.807191][T10057] ? __pfx_kthread+0x10/0x10 [ 603.807214][T10057] ret_from_fork_asm+0x1a/0x30 [ 603.807249][T10057] [ 604.009040][T10053] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 604.355064][T10058] loop0: detected capacity change from 0 to 32768 [ 604.372036][T10058] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 604.381574][T10058] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 604.396155][T10058] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 604.408236][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 604.415505][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 604.459937][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 604.469552][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 604.475091][T10058] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 604.500689][T10062] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 604.515216][T10062] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 604.526009][T10062] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10062 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 604.536375][T10058] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 604.544931][T10058] gfs2: fsid=syz:syz.0: found 1 quota changes [ 604.547178][T10062] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 604.561494][T10062] CPU: 0 UID: 0 PID: 10062 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 604.561520][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.561530][T10062] Call Trace: [ 604.561539][T10062] [ 604.561547][T10062] dump_stack_lvl+0xe8/0x150 [ 604.561573][T10062] gfs2_withdraw+0xc3/0x1b0 [ 604.561600][T10062] inode_go_instantiate+0xe69/0x12a0 [ 604.561627][T10062] ? preempt_schedule_common+0x82/0xd0 [ 604.561658][T10062] ? __pfx_inode_go_instantiate+0x10/0x10 [ 604.561693][T10062] gfs2_instantiate+0x168/0x220 [ 604.561721][T10062] gfs2_glock_wait+0x1d4/0x2a0 [ 604.561742][T10062] do_sync+0x49a/0xcb0 [ 604.561762][T10062] ? _raw_spin_unlock+0x28/0x50 [ 604.561791][T10062] ? gfs2_quota_sync+0x370/0x470 [ 604.561821][T10062] ? __pfx_do_sync+0x10/0x10 [ 604.561850][T10062] ? gfs2_quota_sync+0x370/0x470 [ 604.561875][T10062] ? do_raw_spin_unlock+0xf5/0x210 [ 604.561899][T10062] gfs2_quota_sync+0x370/0x470 [ 604.561931][T10062] gfs2_quotad+0x2b9/0x6e0 [ 604.561965][T10062] ? __pfx_gfs2_quotad+0x10/0x10 [ 604.561987][T10062] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 604.562013][T10062] ? __kthread_parkme+0x7a/0x1f0 [ 604.562045][T10062] kthread+0x388/0x470 [ 604.562069][T10062] ? __pfx_gfs2_quotad+0x10/0x10 [ 604.562087][T10062] ? __pfx_kthread+0x10/0x10 [ 604.562109][T10062] ret_from_fork+0x514/0xb70 [ 604.562129][T10062] ? __pfx_ret_from_fork+0x10/0x10 [ 604.562144][T10062] ? __switch_to+0xc79/0x1410 [ 604.562170][T10062] ? __pfx_kthread+0x10/0x10 [ 604.562192][T10062] ret_from_fork_asm+0x1a/0x30 [ 604.562226][T10062] [ 604.562232][T10062] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 604.737533][ T5774] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 605.130171][T10063] loop0: detected capacity change from 0 to 32768 [ 605.152498][T10063] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 605.160941][T10063] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 605.175910][T10063] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 605.185301][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 605.192187][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 605.248344][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 605.257432][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 605.263141][T10063] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 605.290562][T10067] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 605.305027][T10067] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 605.316434][T10067] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10067 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 605.325129][T10063] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 605.327095][T10067] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 605.348205][T10067] CPU: 0 UID: 0 PID: 10067 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 605.348229][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 605.348240][T10067] Call Trace: [ 605.348248][T10067] [ 605.348255][T10067] dump_stack_lvl+0xe8/0x150 [ 605.348282][T10067] gfs2_withdraw+0xc3/0x1b0 [ 605.348310][T10067] inode_go_instantiate+0xe69/0x12a0 [ 605.348336][T10067] ? preempt_schedule_common+0x82/0xd0 [ 605.348367][T10067] ? __pfx_inode_go_instantiate+0x10/0x10 [ 605.348406][T10067] gfs2_instantiate+0x168/0x220 [ 605.348432][T10067] gfs2_glock_wait+0x1d4/0x2a0 [ 605.348451][T10067] do_sync+0x49a/0xcb0 [ 605.348479][T10067] ? _raw_spin_unlock+0x28/0x50 [ 605.348502][T10067] ? gfs2_quota_sync+0x370/0x470 [ 605.348532][T10067] ? __pfx_do_sync+0x10/0x10 [ 605.348561][T10067] ? gfs2_quota_sync+0x370/0x470 [ 605.348584][T10067] ? do_raw_spin_unlock+0xf5/0x210 [ 605.348606][T10067] gfs2_quota_sync+0x370/0x470 [ 605.348638][T10067] gfs2_quotad+0x2b9/0x6e0 [ 605.348671][T10067] ? __pfx_gfs2_quotad+0x10/0x10 [ 605.348694][T10067] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 605.348719][T10067] ? __kthread_parkme+0x7a/0x1f0 [ 605.348751][T10067] kthread+0x388/0x470 [ 605.348775][T10067] ? __pfx_gfs2_quotad+0x10/0x10 [ 605.348794][T10067] ? __pfx_kthread+0x10/0x10 [ 605.348818][T10067] ret_from_fork+0x514/0xb70 [ 605.348841][T10067] ? __pfx_ret_from_fork+0x10/0x10 [ 605.348861][T10067] ? __switch_to+0xc79/0x1410 [ 605.348889][T10067] ? __pfx_kthread+0x10/0x10 [ 605.348914][T10067] ret_from_fork_asm+0x1a/0x30 [ 605.348951][T10067] [ 605.350958][T10063] gfs2: fsid=syz:syz.0: found 1 quota changes [ 605.528612][T10063] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 605.845935][T10068] loop0: detected capacity change from 0 to 32768 [ 605.861115][T10068] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 605.876941][T10068] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 605.892810][T10068] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 605.902647][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 605.909602][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 605.950790][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 605.959012][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 605.965478][T10068] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 605.989800][T10072] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 606.008832][T10072] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 606.018202][T10072] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10072 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 606.022628][T10068] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 606.030934][T10072] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 606.047602][T10072] CPU: 0 UID: 0 PID: 10072 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 606.047626][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.047637][T10072] Call Trace: [ 606.047645][T10072] [ 606.047653][T10072] dump_stack_lvl+0xe8/0x150 [ 606.047679][T10072] gfs2_withdraw+0xc3/0x1b0 [ 606.047706][T10072] inode_go_instantiate+0xe69/0x12a0 [ 606.047733][T10072] ? preempt_schedule_common+0x82/0xd0 [ 606.047764][T10072] ? __pfx_inode_go_instantiate+0x10/0x10 [ 606.047800][T10072] gfs2_instantiate+0x168/0x220 [ 606.047828][T10072] gfs2_glock_wait+0x1d4/0x2a0 [ 606.047848][T10072] do_sync+0x49a/0xcb0 [ 606.047868][T10072] ? _raw_spin_unlock+0x28/0x50 [ 606.047891][T10072] ? gfs2_quota_sync+0x370/0x470 [ 606.047921][T10072] ? __pfx_do_sync+0x10/0x10 [ 606.047950][T10072] ? gfs2_quota_sync+0x370/0x470 [ 606.047974][T10072] ? do_raw_spin_unlock+0xf5/0x210 [ 606.047997][T10072] gfs2_quota_sync+0x370/0x470 [ 606.048028][T10072] gfs2_quotad+0x2b9/0x6e0 [ 606.048061][T10072] ? __pfx_gfs2_quotad+0x10/0x10 [ 606.048084][T10072] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 606.048110][T10072] ? __kthread_parkme+0x7a/0x1f0 [ 606.048141][T10072] kthread+0x388/0x470 [ 606.048173][T10072] ? __pfx_gfs2_quotad+0x10/0x10 [ 606.048192][T10072] ? __pfx_kthread+0x10/0x10 [ 606.048216][T10072] ret_from_fork+0x514/0xb70 [ 606.048239][T10072] ? __pfx_ret_from_fork+0x10/0x10 [ 606.048258][T10072] ? __switch_to+0xc79/0x1410 [ 606.048287][T10072] ? __pfx_kthread+0x10/0x10 [ 606.048311][T10072] ret_from_fork_asm+0x1a/0x30 [ 606.048355][T10072] [ 606.238743][T10068] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 606.561571][T10073] loop0: detected capacity change from 0 to 32768 [ 606.582238][T10073] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 606.590951][T10073] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 606.608263][T10073] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 606.618502][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 606.626952][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 606.670636][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 606.678324][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 606.685295][T10073] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 606.702628][T10077] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 606.717220][T10077] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 606.726822][T10077] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10077 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 606.738470][T10077] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 606.746706][T10077] CPU: 1 UID: 0 PID: 10077 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 606.746730][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.746741][T10077] Call Trace: [ 606.746749][T10077] [ 606.746756][T10077] dump_stack_lvl+0xe8/0x150 [ 606.746782][T10077] gfs2_withdraw+0xc3/0x1b0 [ 606.746810][T10077] inode_go_instantiate+0xe69/0x12a0 [ 606.746836][T10077] ? preempt_schedule_common+0x82/0xd0 [ 606.746867][T10077] ? __pfx_inode_go_instantiate+0x10/0x10 [ 606.746902][T10077] gfs2_instantiate+0x168/0x220 [ 606.746930][T10077] gfs2_glock_wait+0x1d4/0x2a0 [ 606.746949][T10077] do_sync+0x49a/0xcb0 [ 606.746968][T10077] ? _raw_spin_unlock+0x28/0x50 [ 606.746990][T10077] ? gfs2_quota_sync+0x370/0x470 [ 606.747018][T10077] ? __pfx_do_sync+0x10/0x10 [ 606.747047][T10077] ? gfs2_quota_sync+0x370/0x470 [ 606.747071][T10077] ? do_raw_spin_unlock+0xf5/0x210 [ 606.747093][T10077] gfs2_quota_sync+0x370/0x470 [ 606.747122][T10073] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 606.747133][T10077] gfs2_quotad+0x2b9/0x6e0 [ 606.747163][T10077] ? __pfx_gfs2_quotad+0x10/0x10 [ 606.747184][T10077] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 606.747209][T10077] ? __kthread_parkme+0x7a/0x1f0 [ 606.747239][T10077] kthread+0x388/0x470 [ 606.747261][T10077] ? __pfx_gfs2_quotad+0x10/0x10 [ 606.747280][T10077] ? __pfx_kthread+0x10/0x10 [ 606.747303][T10077] ret_from_fork+0x514/0xb70 [ 606.747325][T10077] ? __pfx_ret_from_fork+0x10/0x10 [ 606.747343][T10077] ? __switch_to+0xc79/0x1410 [ 606.747369][T10077] ? __pfx_kthread+0x10/0x10 [ 606.747393][T10077] ret_from_fork_asm+0x1a/0x30 [ 606.747428][T10077] [ 606.968647][T10073] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 607.287203][T10078] loop0: detected capacity change from 0 to 32768 [ 607.303340][T10078] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 607.315942][T10078] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 607.335770][T10078] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 607.345394][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 607.353627][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 607.393175][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 607.400956][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 607.406321][T10078] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 607.433377][T10082] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 607.448463][T10082] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 607.457818][T10082] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10082 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 607.468632][T10082] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 607.476931][T10082] CPU: 1 UID: 0 PID: 10082 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 607.476954][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.476964][T10082] Call Trace: [ 607.476972][T10082] [ 607.476979][T10082] dump_stack_lvl+0xe8/0x150 [ 607.477004][T10082] gfs2_withdraw+0xc3/0x1b0 [ 607.477034][T10082] inode_go_instantiate+0xe69/0x12a0 [ 607.477056][T10082] ? preempt_schedule_common+0x82/0xd0 [ 607.477080][T10082] ? __pfx_inode_go_instantiate+0x10/0x10 [ 607.477110][T10082] gfs2_instantiate+0x168/0x220 [ 607.477136][T10082] gfs2_glock_wait+0x1d4/0x2a0 [ 607.477154][T10082] do_sync+0x49a/0xcb0 [ 607.477173][T10082] ? _raw_spin_unlock+0x28/0x50 [ 607.477194][T10082] ? gfs2_quota_sync+0x370/0x470 [ 607.477221][T10082] ? __pfx_do_sync+0x10/0x10 [ 607.477251][T10082] ? gfs2_quota_sync+0x370/0x470 [ 607.477275][T10082] ? do_raw_spin_unlock+0xf5/0x210 [ 607.477296][T10082] gfs2_quota_sync+0x370/0x470 [ 607.477325][T10082] gfs2_quotad+0x2b9/0x6e0 [ 607.477358][T10082] ? __pfx_gfs2_quotad+0x10/0x10 [ 607.477380][T10082] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 607.477405][T10082] ? __kthread_parkme+0x7a/0x1f0 [ 607.477436][T10082] kthread+0x388/0x470 [ 607.477460][T10082] ? __pfx_gfs2_quotad+0x10/0x10 [ 607.477480][T10082] ? __pfx_kthread+0x10/0x10 [ 607.477504][T10082] ret_from_fork+0x514/0xb70 [ 607.477527][T10082] ? __pfx_ret_from_fork+0x10/0x10 [ 607.477546][T10082] ? __switch_to+0xc79/0x1410 [ 607.477575][T10082] ? __pfx_kthread+0x10/0x10 [ 607.477599][T10082] ret_from_fork_asm+0x1a/0x30 [ 607.477636][T10082] [ 607.668964][T10078] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 607.975797][T10083] loop0: detected capacity change from 0 to 32768 [ 607.989534][T10083] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 607.998808][T10083] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 608.011890][T10083] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 608.021335][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 608.028221][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 608.083779][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 55ms [ 608.092225][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 608.097858][T10083] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 608.127175][T10087] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 608.142041][T10087] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 608.151719][T10087] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10087 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 608.151738][T10083] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 608.151762][T10087] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 608.175048][T10083] gfs2: fsid=syz:syz.0: found 1 quota changes [ 608.181213][T10087] CPU: 1 UID: 0 PID: 10087 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 608.181240][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.181252][T10087] Call Trace: [ 608.181260][T10087] [ 608.181267][T10087] dump_stack_lvl+0xe8/0x150 [ 608.181292][T10087] gfs2_withdraw+0xc3/0x1b0 [ 608.181318][T10087] inode_go_instantiate+0xe69/0x12a0 [ 608.181341][T10087] ? __pfx_bit_wait+0x10/0x10 [ 608.181366][T10087] ? __pfx_bit_wait+0x10/0x10 [ 608.181383][T10087] ? __pfx_inode_go_instantiate+0x10/0x10 [ 608.181409][T10087] ? __pfx_wake_bit_function+0x10/0x10 [ 608.181434][T10087] gfs2_instantiate+0x168/0x220 [ 608.181463][T10087] gfs2_glock_wait+0x1d4/0x2a0 [ 608.181482][T10087] do_sync+0x49a/0xcb0 [ 608.181501][T10087] ? _raw_spin_unlock+0x28/0x50 [ 608.181519][T10087] ? gfs2_quota_sync+0x370/0x470 [ 608.181546][T10087] ? __pfx_do_sync+0x10/0x10 [ 608.181574][T10087] ? gfs2_quota_sync+0x370/0x470 [ 608.181598][T10087] ? do_raw_spin_unlock+0xf5/0x210 [ 608.181620][T10087] gfs2_quota_sync+0x370/0x470 [ 608.181648][T10087] gfs2_quotad+0x2b9/0x6e0 [ 608.181680][T10087] ? __pfx_gfs2_quotad+0x10/0x10 [ 608.181702][T10087] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 608.181727][T10087] ? __kthread_parkme+0x7a/0x1f0 [ 608.181757][T10087] kthread+0x388/0x470 [ 608.181780][T10087] ? __pfx_gfs2_quotad+0x10/0x10 [ 608.181799][T10087] ? __pfx_kthread+0x10/0x10 [ 608.181823][T10087] ret_from_fork+0x514/0xb70 [ 608.181843][T10087] ? __pfx_ret_from_fork+0x10/0x10 [ 608.181862][T10087] ? __switch_to+0xc79/0x1410 [ 608.181888][T10087] ? __pfx_kthread+0x10/0x10 [ 608.181912][T10087] ret_from_fork_asm+0x1a/0x30 [ 608.181947][T10087] [ 608.368581][T10083] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 608.677254][T10088] loop0: detected capacity change from 0 to 32768 [ 608.692871][T10088] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 608.701730][T10088] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 608.715738][T10088] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 608.726300][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 608.733243][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 608.785687][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 52ms [ 608.794211][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 608.800480][T10088] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 608.822206][T10092] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 608.837631][T10092] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 608.847076][T10092] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10092 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 608.857539][T10092] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 608.866028][T10092] CPU: 0 UID: 0 PID: 10092 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 608.866051][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.866061][T10092] Call Trace: [ 608.866069][T10092] [ 608.866076][T10092] dump_stack_lvl+0xe8/0x150 [ 608.866100][T10092] gfs2_withdraw+0xc3/0x1b0 [ 608.866132][T10092] inode_go_instantiate+0xe69/0x12a0 [ 608.866158][T10092] ? preempt_schedule_common+0x82/0xd0 [ 608.866190][T10092] ? __pfx_inode_go_instantiate+0x10/0x10 [ 608.866225][T10092] gfs2_instantiate+0x168/0x220 [ 608.866254][T10092] gfs2_glock_wait+0x1d4/0x2a0 [ 608.866274][T10092] do_sync+0x49a/0xcb0 [ 608.866294][T10092] ? _raw_spin_unlock+0x28/0x50 [ 608.866317][T10092] ? gfs2_quota_sync+0x370/0x470 [ 608.866347][T10092] ? __pfx_do_sync+0x10/0x10 [ 608.866377][T10092] ? gfs2_quota_sync+0x370/0x470 [ 608.866402][T10092] ? do_raw_spin_unlock+0xf5/0x210 [ 608.866422][T10092] gfs2_quota_sync+0x370/0x470 [ 608.866451][T10092] gfs2_quotad+0x2b9/0x6e0 [ 608.866480][T10092] ? __pfx_gfs2_quotad+0x10/0x10 [ 608.866502][T10092] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 608.866527][T10092] ? __kthread_parkme+0x7a/0x1f0 [ 608.866558][T10092] kthread+0x388/0x470 [ 608.866583][T10092] ? __pfx_gfs2_quotad+0x10/0x10 [ 608.866602][T10092] ? __pfx_kthread+0x10/0x10 [ 608.866628][T10092] ret_from_fork+0x514/0xb70 [ 608.866651][T10092] ? __pfx_ret_from_fork+0x10/0x10 [ 608.866670][T10092] ? __switch_to+0xc79/0x1410 [ 608.866699][T10092] ? __pfx_kthread+0x10/0x10 [ 608.866724][T10092] ret_from_fork_asm+0x1a/0x30 [ 608.866759][T10092] [ 609.029185][T10088] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 609.359029][T10093] loop0: detected capacity change from 0 to 32768 [ 609.373714][T10093] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 609.382427][T10093] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 609.397722][T10093] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 609.407018][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 609.414562][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 609.475809][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 61ms [ 609.484149][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 609.489512][T10093] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 609.509189][T10097] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 609.525841][T10097] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 609.535354][T10097] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10097 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 609.546120][T10097] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 609.546351][T10093] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 609.556235][T10097] CPU: 1 UID: 0 PID: 10097 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 609.556257][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.556267][T10097] Call Trace: [ 609.556275][T10097] [ 609.556282][T10097] dump_stack_lvl+0xe8/0x150 [ 609.556308][T10097] gfs2_withdraw+0xc3/0x1b0 [ 609.556334][T10097] inode_go_instantiate+0xe69/0x12a0 [ 609.556360][T10097] ? preempt_schedule_common+0x82/0xd0 [ 609.556391][T10097] ? __pfx_inode_go_instantiate+0x10/0x10 [ 609.556424][T10097] gfs2_instantiate+0x168/0x220 [ 609.556451][T10097] gfs2_glock_wait+0x1d4/0x2a0 [ 609.556470][T10097] do_sync+0x49a/0xcb0 [ 609.556488][T10097] ? _raw_spin_unlock+0x28/0x50 [ 609.556510][T10097] ? gfs2_quota_sync+0x370/0x470 [ 609.556539][T10097] ? __pfx_do_sync+0x10/0x10 [ 609.556566][T10097] ? gfs2_quota_sync+0x370/0x470 [ 609.556589][T10097] ? do_raw_spin_unlock+0xf5/0x210 [ 609.556611][T10097] gfs2_quota_sync+0x370/0x470 [ 609.556641][T10097] gfs2_quotad+0x2b9/0x6e0 [ 609.556672][T10097] ? __pfx_gfs2_quotad+0x10/0x10 [ 609.556694][T10097] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 609.556718][T10097] ? __kthread_parkme+0x7a/0x1f0 [ 609.556749][T10097] kthread+0x388/0x470 [ 609.556771][T10097] ? __pfx_gfs2_quotad+0x10/0x10 [ 609.556789][T10097] ? __pfx_kthread+0x10/0x10 [ 609.556813][T10097] ret_from_fork+0x514/0xb70 [ 609.556835][T10097] ? __pfx_ret_from_fork+0x10/0x10 [ 609.556854][T10097] ? __switch_to+0xc79/0x1410 [ 609.556882][T10097] ? __pfx_kthread+0x10/0x10 [ 609.556905][T10097] ret_from_fork_asm+0x1a/0x30 [ 609.556940][T10097] [ 609.759313][T10093] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 610.074352][T10098] loop0: detected capacity change from 0 to 32768 [ 610.087192][T10098] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 610.095678][T10098] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 610.109860][T10098] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 610.119937][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 610.127661][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 610.174202][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 610.181992][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 610.187855][T10098] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 610.215692][T10102] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 610.231187][T10102] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 610.241156][T10102] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10102 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 610.250099][T10098] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 610.252804][T10102] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 610.271918][T10102] CPU: 0 UID: 0 PID: 10102 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 610.271941][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.271952][T10102] Call Trace: [ 610.271959][T10102] [ 610.271966][T10102] dump_stack_lvl+0xe8/0x150 [ 610.272003][T10102] gfs2_withdraw+0xc3/0x1b0 [ 610.272030][T10102] inode_go_instantiate+0xe69/0x12a0 [ 610.272057][T10102] ? preempt_schedule_common+0x82/0xd0 [ 610.272088][T10102] ? __pfx_inode_go_instantiate+0x10/0x10 [ 610.272122][T10102] gfs2_instantiate+0x168/0x220 [ 610.272151][T10102] gfs2_glock_wait+0x1d4/0x2a0 [ 610.272170][T10102] do_sync+0x49a/0xcb0 [ 610.272190][T10102] ? _raw_spin_unlock+0x28/0x50 [ 610.272213][T10102] ? gfs2_quota_sync+0x370/0x470 [ 610.272247][T10102] ? __pfx_do_sync+0x10/0x10 [ 610.272277][T10102] ? gfs2_quota_sync+0x370/0x470 [ 610.272301][T10102] ? do_raw_spin_unlock+0xf5/0x210 [ 610.272324][T10102] gfs2_quota_sync+0x370/0x470 [ 610.272354][T10102] gfs2_quotad+0x2b9/0x6e0 [ 610.272388][T10102] ? __pfx_gfs2_quotad+0x10/0x10 [ 610.272410][T10102] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 610.272436][T10102] ? __kthread_parkme+0x7a/0x1f0 [ 610.272468][T10102] kthread+0x388/0x470 [ 610.272491][T10102] ? __pfx_gfs2_quotad+0x10/0x10 [ 610.272510][T10102] ? __pfx_kthread+0x10/0x10 [ 610.272534][T10102] ret_from_fork+0x514/0xb70 [ 610.272557][T10102] ? __pfx_ret_from_fork+0x10/0x10 [ 610.272576][T10102] ? __switch_to+0xc79/0x1410 [ 610.272603][T10102] ? __pfx_kthread+0x10/0x10 [ 610.272628][T10102] ret_from_fork_asm+0x1a/0x30 [ 610.272663][T10102] [ 610.276631][T10098] gfs2: fsid=syz:syz.0: found 1 quota changes [ 610.468626][T10098] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 610.783366][T10103] loop0: detected capacity change from 0 to 32768 [ 610.797273][T10103] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 610.812689][T10103] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 610.829726][T10103] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 610.840637][ T987] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 610.847848][ T987] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 610.889758][ T987] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 610.898002][ T987] gfs2: fsid=syz:syz.0: jid=0: Done [ 610.904556][T10103] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 610.921123][T10107] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 610.937934][T10107] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 610.948180][T10107] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10107 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 610.959477][T10103] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 610.960260][T10107] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 610.978633][T10107] CPU: 0 UID: 0 PID: 10107 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 610.978657][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.978667][T10107] Call Trace: [ 610.978675][T10107] [ 610.978682][T10107] dump_stack_lvl+0xe8/0x150 [ 610.978710][T10107] gfs2_withdraw+0xc3/0x1b0 [ 610.978738][T10107] inode_go_instantiate+0xe69/0x12a0 [ 610.978766][T10107] ? preempt_schedule_common+0x82/0xd0 [ 610.978797][T10107] ? __pfx_inode_go_instantiate+0x10/0x10 [ 610.978833][T10107] gfs2_instantiate+0x168/0x220 [ 610.978862][T10107] gfs2_glock_wait+0x1d4/0x2a0 [ 610.978883][T10107] do_sync+0x49a/0xcb0 [ 610.978927][T10107] ? _raw_spin_unlock+0x28/0x50 [ 610.978951][T10107] ? gfs2_quota_sync+0x370/0x470 [ 610.978982][T10107] ? __pfx_do_sync+0x10/0x10 [ 610.979011][T10107] ? gfs2_quota_sync+0x370/0x470 [ 610.979036][T10107] ? do_raw_spin_unlock+0xf5/0x210 [ 610.979060][T10107] gfs2_quota_sync+0x370/0x470 [ 610.979090][T10107] gfs2_quotad+0x2b9/0x6e0 [ 610.979124][T10107] ? __pfx_gfs2_quotad+0x10/0x10 [ 610.979146][T10107] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 610.979170][T10107] ? __kthread_parkme+0x7a/0x1f0 [ 610.979201][T10107] kthread+0x388/0x470 [ 610.979223][T10107] ? __pfx_gfs2_quotad+0x10/0x10 [ 610.979243][T10107] ? __pfx_kthread+0x10/0x10 [ 610.979263][T10107] ret_from_fork+0x514/0xb70 [ 610.979281][T10107] ? __pfx_ret_from_fork+0x10/0x10 [ 610.979293][T10107] ? __switch_to+0xc79/0x1410 [ 610.979311][T10107] ? __pfx_kthread+0x10/0x10 [ 610.979325][T10107] ret_from_fork_asm+0x1a/0x30 [ 610.979346][T10107] [ 611.158589][T10103] gfs2: fsid=syz:syz.0: can't make FS RW: -5 executing program [ 611.470970][T10108] loop0: detected capacity change from 0 to 32768 [ 611.496385][T10108] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 611.504993][T10108] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 611.522304][T10108] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 611.531675][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 611.540904][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 611.578249][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 611.586690][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 611.592384][T10108] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 611.644242][T10108] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 611.656746][T10108] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 611.670690][T10108] CPU: 1 UID: 0 PID: 10108 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 611.670715][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.670726][T10108] Call Trace: [ 611.670734][T10108] [ 611.670741][T10108] dump_stack_lvl+0xe8/0x150 [ 611.670768][T10108] gfs2_assert_warn_i+0x194/0x2c0 [ 611.670801][T10108] gfs2_qd_dispose+0x466/0x570 [ 611.670829][T10108] gfs2_quota_init+0xcd4/0x1220 [ 611.670870][T10108] ? __pfx_gfs2_quota_init+0x10/0x10 [ 611.670892][T10108] ? __pfx_wake_up_bit+0x10/0x10 [ 611.670917][T10108] ? inode_go_inval+0x2a0/0x360 [ 611.670943][T10108] gfs2_make_fs_rw+0x143/0x230 [ 611.670964][T10108] gfs2_fill_super+0x1ba5/0x21d0 [ 611.671004][T10108] ? __pfx_gfs2_fill_super+0x10/0x10 [ 611.671031][T10108] ? init_locking+0xb8/0x210 [ 611.671054][T10108] ? sb_set_blocksize+0x155/0x240 [ 611.671076][T10108] ? setup_bdev_super+0x4c1/0x5b0 [ 611.671105][T10108] get_tree_bdev_flags+0x431/0x4f0 [ 611.671131][T10108] ? __pfx_gfs2_fill_super+0x10/0x10 [ 611.671155][T10108] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 611.671178][T10108] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 611.671214][T10108] gfs2_get_tree+0x51/0x1e0 [ 611.671242][T10108] vfs_get_tree+0x92/0x2a0 [ 611.671269][T10108] do_new_mount+0x341/0xd30 [ 611.671289][T10108] ? apparmor_capable+0x126/0x170 [ 611.671317][T10108] ? __pfx_do_new_mount+0x10/0x10 [ 611.671342][T10108] ? ns_capable+0x89/0xe0 [ 611.671373][T10108] ? user_path_at+0xd4/0x160 [ 611.671398][T10108] __se_sys_mount+0x31d/0x420 [ 611.671426][T10108] ? __pfx___se_sys_mount+0x10/0x10 [ 611.671454][T10108] ? __x64_sys_mount+0x20/0xc0 [ 611.671474][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.671493][T10108] do_syscall_64+0x15f/0xf80 [ 611.671510][T10108] ? trace_irq_disable+0x3b/0x140 [ 611.671531][T10108] ? clear_bhb_loop+0x40/0x90 [ 611.671553][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.671571][T10108] RIP: 0033:0x7fb66284b06a [ 611.671594][T10108] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 611.671605][T10108] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 611.671621][T10108] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 611.671631][T10108] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 611.671642][T10108] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 611.671653][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 611.671662][T10108] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 611.671688][T10108] [ 611.947054][T10108] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 612.275588][T10113] loop0: detected capacity change from 0 to 32768 [ 612.291657][T10113] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 612.300241][T10113] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 612.315180][T10113] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 612.326373][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 612.334440][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 612.376690][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 42ms [ 612.386638][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 612.392564][T10113] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 612.445410][T10113] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 612.456291][T10113] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 612.469960][T10113] CPU: 1 UID: 0 PID: 10113 Comm: syz-executor285 Not tainted syzkaller #0 PREEMPT(full) [ 612.469981][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.469991][T10113] Call Trace: [ 612.469999][T10113] [ 612.470005][T10113] dump_stack_lvl+0xe8/0x150 [ 612.470029][T10113] gfs2_assert_warn_i+0x194/0x2c0 [ 612.470058][T10113] gfs2_qd_dispose+0x466/0x570 [ 612.470084][T10113] gfs2_quota_init+0xcd4/0x1220 [ 612.470120][T10113] ? __pfx_gfs2_quota_init+0x10/0x10 [ 612.470140][T10113] ? __pfx_wake_up_bit+0x10/0x10 [ 612.470164][T10113] ? inode_go_inval+0x2a0/0x360 [ 612.470189][T10113] gfs2_make_fs_rw+0x143/0x230 [ 612.470210][T10113] gfs2_fill_super+0x1ba5/0x21d0 [ 612.470247][T10113] ? __pfx_gfs2_fill_super+0x10/0x10 [ 612.470275][T10113] ? init_locking+0xb8/0x210 [ 612.470298][T10113] ? sb_set_blocksize+0x155/0x240 [ 612.470324][T10113] ? setup_bdev_super+0x4c1/0x5b0 [ 612.470353][T10113] get_tree_bdev_flags+0x431/0x4f0 [ 612.470380][T10113] ? __pfx_gfs2_fill_super+0x10/0x10 [ 612.470404][T10113] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 612.470427][T10113] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 612.470461][T10113] gfs2_get_tree+0x51/0x1e0 [ 612.470489][T10113] vfs_get_tree+0x92/0x2a0 [ 612.470514][T10113] do_new_mount+0x341/0xd30 [ 612.470533][T10113] ? apparmor_capable+0x126/0x170 [ 612.470556][T10113] ? __pfx_do_new_mount+0x10/0x10 [ 612.470577][T10113] ? ns_capable+0x89/0xe0 [ 612.470606][T10113] ? user_path_at+0xd4/0x160 [ 612.470631][T10113] __se_sys_mount+0x31d/0x420 [ 612.470659][T10113] ? __pfx___se_sys_mount+0x10/0x10 [ 612.470686][T10113] ? __x64_sys_mount+0x20/0xc0 [ 612.470706][T10113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.470724][T10113] do_syscall_64+0x15f/0xf80 [ 612.470750][T10113] ? trace_irq_disable+0x3b/0x140 [ 612.470771][T10113] ? clear_bhb_loop+0x40/0x90 [ 612.470792][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.470809][T10113] RIP: 0033:0x7fb66284b06a [ 612.470827][T10113] Code: 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 612.470841][T10113] RSP: 002b:00007ffd0e5858a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 612.470860][T10113] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb66284b06a [ 612.470872][T10113] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007ffd0e585900 [ 612.470884][T10113] RBP: 0000000000000004 R08: 00007ffd0e585940 R09: 0000000000000000 [ 612.470895][T10113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 612.470906][T10113] R13: 00007ffd0e585940 R14: 0000000001000000 R15: 0000000000000003 [ 612.470934][T10113] [ 612.494733][T10113] gfs2: fsid=syz:syz.0: found 1 quota changes executing program [ 613.075640][T10118] loop0: detected capacity change from 0 to 32768 [ 613.090408][T10118] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 613.106099][T10118] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 613.125953][T10118] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 613.136455][ T5774] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 613.143675][ T5774] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 613.183502][ T5774] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 613.191133][ T5774] gfs2: fsid=syz:syz.0: jid=0: Done [ 613.197566][T10118] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 613.219837][T10122] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 613.234311][T10122] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 613.243612][T10122] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:10122 [gfs2_quotad/syz] gfs2_quota_sync+0x370/0x470 [ 613.251229][T10118] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 48768 [ 613.254054][T10122] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 613.274487][T10122] CPU: 0 UID: 0 PID: 10122 Comm: gfs2_quotad/syz Not tainted syzkaller #0 PREEMPT(full) [ 613.274510][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.274521][T10122] Call Trace: [ 613.274529][T10122] [ 613.274536][T10122] dump_stack_lvl+0xe8/0x150 [ 613.274563][T10122] gfs2_withdraw+0xc3/0x1b0 [ 613.274590][T10122] inode_go_instantiate+0xe69/0x12a0 [ 613.274617][T10122] ? preempt_schedule_common+0x82/0xd0 [ 613.274648][T10122] ? __pfx_inode_go_instantiate+0x10/0x10 [ 613.274683][T10122] gfs2_instantiate+0x168/0x220 [ 613.274711][T10122] gfs2_glock_wait+0x1d4/0x2a0 [ 613.274731][T10122] do_sync+0x49a/0xcb0 [ 613.274751][T10122] ? _raw_spin_unlock+0x28/0x50 [ 613.274773][T10122] ? gfs2_quota_sync+0x370/0x470 [ 613.274804][T10122] ? __pfx_do_sync+0x10/0x10 [ 613.274833][T10122] ? gfs2_quota_sync+0x370/0x470 [ 613.274857][T10122] ? do_raw_spin_unlock+0xf5/0x210 [ 613.274880][T10122] gfs2_quota_sync+0x370/0x470 [ 613.274911][T10122] gfs2_quotad+0x2b9/0x6e0 [ 613.274943][T10122] ? __pfx_gfs2_quotad+0x10/0x10 [ 613.274967][T10122] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 613.274993][T10122] ? __kthread_parkme+0x7a/0x1f0 [ 613.275024][T10122] kthread+0x388/0x470 [ 613.275048][T10122] ? __pfx_gfs2_quotad+0x10/0x10 [ 613.275067][T10122] ? __pfx_kthread+0x10/0x10 [ 613.275092][T10122] ret_from_fork+0x514/0xb70 [ 613.275114][T10122] ? __pfx_ret_from_fork+0x10/0x10 [ 613.275134][T10122] ? __switch_to+0xc79/0x1410 [ 613.275162][T10122] ? __pfx_kthread+0x10/0x10 [ 613.275187][T10122] ret_from_fork_asm+0x1a/0x30 [ 613.275224][T10122] [ 613.488627][T10118] gfs2: fsid=syz:syz.0: can't make FS RW: -5