08.673848][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 608.673877][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 608.673896][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 608.673920][ T8766] ? rt_spin_unlock+0x160/0x200 [ 608.673943][ T8766] gfs2_quota_sync+0x370/0x470 [ 608.673975][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 608.673996][ T8766] sync_filesystem+0xed/0x250 [ 608.674028][ T8766] generic_shutdown_super+0x77/0x2d0 [ 608.674057][ T8766] kill_block_super+0x44/0x90 [ 608.674079][ T8766] deactivate_locked_super+0xbc/0x130 [ 608.674100][ T8766] cleanup_mnt+0x437/0x4d0 [ 608.674121][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.674142][ T8766] task_work_run+0x1d9/0x270 [ 608.674163][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 608.674190][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 608.674205][ T8766] ? rcu_is_watching+0x15/0xb0 [ 608.674226][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.674243][ T8766] do_syscall_64+0x33e/0xf80 [ 608.674260][ T8766] ? trace_irq_disable+0x3b/0x140 [ 608.674282][ T8766] ? clear_bhb_loop+0x40/0x90 [ 608.674301][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.674316][ T8766] RIP: 0033:0x7fc23088fcf7 [ 608.674333][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 608.674346][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 608.674364][ T8766] RAX: 0000000000000000 RBX: 00000000000000eb RCX: 00007fc23088fcf7 [ 608.674374][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 608.674384][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 608.674395][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 608.674405][ T8766] R13: 000055556206d970 R14: 0000000000094652 R15: 0000000000000075 [ 608.674431][ T8766] [ 608.674619][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 608.860980][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 609.256757][ T9632] loop0: detected capacity change from 0 to 32768 [ 609.267277][ T9632] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 609.267297][ T9632] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 609.341671][ T9632] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 609.352861][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 609.352881][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 609.391992][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 609.392173][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 609.394644][ T9632] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 609.502035][ T9632] gfs2: fsid=syz:syz.0: found 1 quota changes [ 609.513392][ T9632] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 609.577712][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 609.577749][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 609.577776][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 609.577810][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 609.577834][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 609.577854][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.577865][ T8766] Call Trace: [ 609.577873][ T8766] [ 609.577879][ T8766] dump_stack_lvl+0xe8/0x150 [ 609.577895][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 609.577909][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 609.577923][ T8766] ? __pfx_bit_wait+0x10/0x10 [ 609.577936][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 609.577945][ T8766] ? rt_spin_unlock+0x160/0x200 [ 609.577962][ T8766] ? __pfx_wake_bit_function+0x10/0x10 [ 609.577981][ T8766] gfs2_instantiate+0x168/0x220 [ 609.577994][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 609.578007][ T8766] do_sync+0x49a/0xcb0 [ 609.578021][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 609.578039][ T8766] ? __pfx_do_sync+0x10/0x10 [ 609.578052][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 609.578071][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 609.578084][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 609.578101][ T8766] ? rt_spin_unlock+0x160/0x200 [ 609.578117][ T8766] gfs2_quota_sync+0x370/0x470 [ 609.578135][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 609.578149][ T8766] sync_filesystem+0xed/0x250 [ 609.578166][ T8766] generic_shutdown_super+0x77/0x2d0 [ 609.578182][ T8766] kill_block_super+0x44/0x90 [ 609.578196][ T8766] deactivate_locked_super+0xbc/0x130 [ 609.578211][ T8766] cleanup_mnt+0x437/0x4d0 [ 609.578225][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 609.578238][ T8766] task_work_run+0x1d9/0x270 [ 609.578252][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 609.578269][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 609.578279][ T8766] ? rcu_is_watching+0x15/0xb0 [ 609.578292][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.578303][ T8766] do_syscall_64+0x33e/0xf80 [ 609.578316][ T8766] ? trace_irq_disable+0x3b/0x140 [ 609.578332][ T8766] ? clear_bhb_loop+0x40/0x90 [ 609.578346][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.578357][ T8766] RIP: 0033:0x7fc23088fcf7 [ 609.578368][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 609.578377][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 609.578388][ T8766] RAX: 0000000000000000 RBX: 00000000000000ed RCX: 00007fc23088fcf7 [ 609.578395][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 executing program [ 609.578402][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 609.578409][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 609.578415][ T8766] R13: 000055556206d970 R14: 00000000000949a1 R15: 0000000000000076 [ 609.578430][ T8766] [ 609.578434][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 609.771398][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 610.175405][ T9638] loop0: detected capacity change from 0 to 32768 [ 610.181448][ T9638] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 610.181467][ T9638] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 610.232902][ T9638] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 610.236365][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 610.236383][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 610.290350][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 53ms [ 610.291350][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 610.291457][ T9638] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 610.388172][ T9638] gfs2: fsid=syz:syz.0: found 1 quota changes [ 610.391310][ T9638] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 610.440347][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 610.440383][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 610.440426][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 610.440460][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 610.440490][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 610.440508][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.440517][ T8766] Call Trace: [ 610.440524][ T8766] [ 610.440531][ T8766] dump_stack_lvl+0xe8/0x150 [ 610.440553][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 610.440571][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 610.440596][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 610.440610][ T8766] ? rt_spin_unlock+0x160/0x200 [ 610.440642][ T8766] gfs2_instantiate+0x168/0x220 [ 610.440662][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 610.440682][ T8766] do_sync+0x49a/0xcb0 [ 610.440702][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 610.440729][ T8766] ? __pfx_do_sync+0x10/0x10 [ 610.440747][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 610.440779][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 610.440798][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 610.440822][ T8766] ? rt_spin_unlock+0x160/0x200 [ 610.440846][ T8766] gfs2_quota_sync+0x370/0x470 [ 610.440876][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 610.440896][ T8766] sync_filesystem+0xed/0x250 [ 610.440921][ T8766] generic_shutdown_super+0x77/0x2d0 [ 610.440945][ T8766] kill_block_super+0x44/0x90 [ 610.440966][ T8766] deactivate_locked_super+0xbc/0x130 [ 610.440988][ T8766] cleanup_mnt+0x437/0x4d0 [ 610.441009][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.441030][ T8766] task_work_run+0x1d9/0x270 [ 610.441051][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 610.441078][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 610.441094][ T8766] ? rcu_is_watching+0x15/0xb0 [ 610.441114][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.441131][ T8766] do_syscall_64+0x33e/0xf80 [ 610.441149][ T8766] ? trace_irq_disable+0x3b/0x140 [ 610.441170][ T8766] ? clear_bhb_loop+0x40/0x90 [ 610.441189][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.441204][ T8766] RIP: 0033:0x7fc23088fcf7 [ 610.441221][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 610.441234][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 610.441252][ T8766] RAX: 0000000000000000 RBX: 00000000000000ef RCX: 00007fc23088fcf7 [ 610.441262][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 executing program [ 610.441272][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 610.441282][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 610.441292][ T8766] R13: 000055556206d970 R14: 0000000000094d34 R15: 0000000000000077 [ 610.441318][ T8766] [ 610.441341][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 610.641139][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 611.046370][ T9644] loop0: detected capacity change from 0 to 32768 [ 611.056618][ T9644] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 611.056646][ T9644] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 611.072535][ T9644] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 611.096532][ T37] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 611.096550][ T37] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 611.140677][ T37] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 611.141716][ T37] gfs2: fsid=syz:syz.0: jid=0: Done [ 611.142869][ T9644] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 611.280922][ T9644] gfs2: fsid=syz:syz.0: found 1 quota changes [ 611.284191][ T9644] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 611.330925][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 611.330960][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 611.330983][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 611.331038][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 611.331062][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 611.331079][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.331090][ T8766] Call Trace: [ 611.331096][ T8766] [ 611.331103][ T8766] dump_stack_lvl+0xe8/0x150 [ 611.331129][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 611.331155][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 611.331179][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 611.331194][ T8766] ? rt_spin_unlock+0x160/0x200 [ 611.331226][ T8766] gfs2_instantiate+0x168/0x220 [ 611.331246][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 611.331266][ T8766] do_sync+0x49a/0xcb0 [ 611.331286][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 611.331314][ T8766] ? __pfx_do_sync+0x10/0x10 [ 611.331331][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 611.331360][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 611.331379][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 611.331403][ T8766] ? rt_spin_unlock+0x160/0x200 [ 611.331427][ T8766] gfs2_quota_sync+0x370/0x470 [ 611.331456][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 611.331477][ T8766] sync_filesystem+0xed/0x250 [ 611.331502][ T8766] generic_shutdown_super+0x77/0x2d0 [ 611.331526][ T8766] kill_block_super+0x44/0x90 [ 611.331548][ T8766] deactivate_locked_super+0xbc/0x130 [ 611.331569][ T8766] cleanup_mnt+0x437/0x4d0 [ 611.331590][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.331611][ T8766] task_work_run+0x1d9/0x270 [ 611.331632][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 611.331658][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 611.331674][ T8766] ? rcu_is_watching+0x15/0xb0 [ 611.331693][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.331710][ T8766] do_syscall_64+0x33e/0xf80 [ 611.331728][ T8766] ? trace_irq_disable+0x3b/0x140 [ 611.331749][ T8766] ? clear_bhb_loop+0x40/0x90 [ 611.331768][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.331784][ T8766] RIP: 0033:0x7fc23088fcf7 [ 611.331800][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 611.331814][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 611.331830][ T8766] RAX: 0000000000000000 RBX: 00000000000000f1 RCX: 00007fc23088fcf7 [ 611.331841][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 611.331851][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 611.331862][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 611.331872][ T8766] R13: 000055556206d970 R14: 000000000009507c R15: 0000000000000078 [ 611.331898][ T8766] [ 611.331921][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 611.512245][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 611.929667][ T9650] loop0: detected capacity change from 0 to 32768 [ 611.957143][ T9650] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 611.957161][ T9650] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 612.017422][ T9650] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 612.023640][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 612.023657][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 612.061874][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 38ms [ 612.064061][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 612.064170][ T9650] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 612.156775][ T9650] gfs2: fsid=syz:syz.0: found 1 quota changes [ 612.159912][ T9650] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 612.217396][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 612.217441][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 612.217469][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 612.217501][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 612.217517][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 612.217529][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.217535][ T8766] Call Trace: [ 612.217540][ T8766] [ 612.217545][ T8766] dump_stack_lvl+0xe8/0x150 [ 612.217560][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 612.217572][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 612.217588][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 612.217597][ T8766] ? rt_spin_unlock+0x160/0x200 [ 612.217619][ T8766] gfs2_instantiate+0x168/0x220 [ 612.217632][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 612.217645][ T8766] do_sync+0x49a/0xcb0 [ 612.217658][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 612.217677][ T8766] ? __pfx_do_sync+0x10/0x10 [ 612.217689][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 612.217709][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 612.217722][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 612.217738][ T8766] ? rt_spin_unlock+0x160/0x200 [ 612.217754][ T8766] gfs2_quota_sync+0x370/0x470 [ 612.217773][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 612.217786][ T8766] sync_filesystem+0xed/0x250 [ 612.217803][ T8766] generic_shutdown_super+0x77/0x2d0 [ 612.217819][ T8766] kill_block_super+0x44/0x90 [ 612.217834][ T8766] deactivate_locked_super+0xbc/0x130 [ 612.217848][ T8766] cleanup_mnt+0x437/0x4d0 [ 612.217862][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.217875][ T8766] task_work_run+0x1d9/0x270 [ 612.217890][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 612.217906][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 612.217916][ T8766] ? rcu_is_watching+0x15/0xb0 [ 612.217930][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.217941][ T8766] do_syscall_64+0x33e/0xf80 [ 612.217953][ T8766] ? trace_irq_disable+0x3b/0x140 [ 612.217968][ T8766] ? clear_bhb_loop+0x40/0x90 [ 612.217980][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.217990][ T8766] RIP: 0033:0x7fc23088fcf7 [ 612.218002][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 612.218010][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 612.218021][ T8766] RAX: 0000000000000000 RBX: 00000000000000f3 RCX: 00007fc23088fcf7 [ 612.218028][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 612.218035][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 612.218042][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 612.218048][ T8766] R13: 000055556206d970 R14: 0000000000095405 R15: 0000000000000079 [ 612.218063][ T8766] [ 612.218067][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 612.372286][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 612.790012][ T9656] loop0: detected capacity change from 0 to 32768 [ 612.802665][ T9656] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 612.802683][ T9656] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 612.873478][ T9656] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 612.883862][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 612.883876][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 612.920776][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 612.921856][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 612.921908][ T9656] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 613.018436][ T9656] gfs2: fsid=syz:syz.0: found 1 quota changes [ 613.022135][ T9656] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 613.060204][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 613.060239][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 613.060263][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 613.060297][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 613.060320][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 613.060346][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.060356][ T8766] Call Trace: [ 613.060362][ T8766] [ 613.060369][ T8766] dump_stack_lvl+0xe8/0x150 [ 613.060391][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 613.060410][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 613.060434][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 613.060448][ T8766] ? rt_spin_unlock+0x160/0x200 [ 613.060481][ T8766] gfs2_instantiate+0x168/0x220 [ 613.060501][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 613.060521][ T8766] do_sync+0x49a/0xcb0 [ 613.060541][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 613.060568][ T8766] ? __pfx_do_sync+0x10/0x10 [ 613.060586][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 613.060615][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 613.060637][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 613.060661][ T8766] ? rt_spin_unlock+0x160/0x200 [ 613.060685][ T8766] gfs2_quota_sync+0x370/0x470 [ 613.060714][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 613.060734][ T8766] sync_filesystem+0xed/0x250 [ 613.060759][ T8766] generic_shutdown_super+0x77/0x2d0 [ 613.060782][ T8766] kill_block_super+0x44/0x90 [ 613.060804][ T8766] deactivate_locked_super+0xbc/0x130 [ 613.060825][ T8766] cleanup_mnt+0x437/0x4d0 [ 613.060846][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 613.060867][ T8766] task_work_run+0x1d9/0x270 [ 613.060889][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 613.060915][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 613.060931][ T8766] ? rcu_is_watching+0x15/0xb0 [ 613.060951][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.060968][ T8766] do_syscall_64+0x33e/0xf80 [ 613.060986][ T8766] ? trace_irq_disable+0x3b/0x140 [ 613.061009][ T8766] ? clear_bhb_loop+0x40/0x90 [ 613.061027][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.061043][ T8766] RIP: 0033:0x7fc23088fcf7 [ 613.061060][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 613.061074][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 613.061100][ T8766] RAX: 0000000000000000 RBX: 00000000000000f5 RCX: 00007fc23088fcf7 [ 613.061159][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 613.061171][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 613.061181][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 613.061191][ T8766] R13: 000055556206d970 R14: 0000000000095765 R15: 000000000000007a [ 613.061218][ T8766] [ 613.061239][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 613.239505][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 613.637090][ T9662] loop0: detected capacity change from 0 to 32768 [ 613.657880][ T9662] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 613.657899][ T9662] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 613.710896][ T9662] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 613.713573][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 613.713592][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 613.780729][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 613.780903][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 613.781025][ T9662] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 613.873981][ T9662] gfs2: fsid=syz:syz.0: found 1 quota changes [ 613.884112][ T9662] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 613.938536][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 613.938574][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 613.938601][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 613.938639][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 613.938666][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 613.938681][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.938688][ T8766] Call Trace: [ 613.938694][ T8766] [ 613.938699][ T8766] dump_stack_lvl+0xe8/0x150 [ 613.938715][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 613.938728][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 613.938743][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 613.938753][ T8766] ? rt_spin_unlock+0x160/0x200 [ 613.938777][ T8766] gfs2_instantiate+0x168/0x220 [ 613.938791][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 613.938804][ T8766] do_sync+0x49a/0xcb0 [ 613.938818][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 613.938836][ T8766] ? __pfx_do_sync+0x10/0x10 [ 613.938849][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 613.938872][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 613.938885][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 613.938902][ T8766] ? rt_spin_unlock+0x160/0x200 [ 613.938918][ T8766] gfs2_quota_sync+0x370/0x470 [ 613.938944][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 613.938958][ T8766] sync_filesystem+0xed/0x250 [ 613.938975][ T8766] generic_shutdown_super+0x77/0x2d0 [ 613.938991][ T8766] kill_block_super+0x44/0x90 [ 613.939006][ T8766] deactivate_locked_super+0xbc/0x130 [ 613.939021][ T8766] cleanup_mnt+0x437/0x4d0 [ 613.939035][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 613.939049][ T8766] task_work_run+0x1d9/0x270 [ 613.939064][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 613.939080][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 613.939091][ T8766] ? rcu_is_watching+0x15/0xb0 [ 613.939104][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.939115][ T8766] do_syscall_64+0x33e/0xf80 [ 613.939127][ T8766] ? trace_irq_disable+0x3b/0x140 [ 613.939143][ T8766] ? clear_bhb_loop+0x40/0x90 [ 613.939155][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.939165][ T8766] RIP: 0033:0x7fc23088fcf7 [ 613.939176][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 613.939187][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 613.939200][ T8766] RAX: 0000000000000000 RBX: 00000000000000f7 RCX: 00007fc23088fcf7 [ 613.939206][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 613.939213][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 613.939219][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 executing program [ 613.939226][ T8766] R13: 000055556206d970 R14: 0000000000095abd R15: 000000000000007b [ 613.939241][ T8766] [ 613.939245][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 614.091451][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 614.514617][ T9668] loop0: detected capacity change from 0 to 32768 [ 614.530695][ T9668] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 614.530736][ T9668] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 614.589210][ T9668] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 614.592228][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 614.592245][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 614.627687][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 35ms [ 614.627879][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 614.628001][ T9668] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 614.740312][ T9668] gfs2: fsid=syz:syz.0: found 1 quota changes [ 614.743403][ T9668] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 614.817738][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 614.817776][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 614.817797][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 614.817822][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 614.817841][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 614.817862][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.817874][ T8766] Call Trace: [ 614.817879][ T8766] [ 614.817883][ T8766] dump_stack_lvl+0xe8/0x150 [ 614.817899][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 614.817912][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 614.817929][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 614.817939][ T8766] ? rt_spin_unlock+0x160/0x200 [ 614.817967][ T8766] gfs2_instantiate+0x168/0x220 [ 614.817981][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 614.817994][ T8766] do_sync+0x49a/0xcb0 [ 614.818008][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 614.818026][ T8766] ? __pfx_do_sync+0x10/0x10 [ 614.818038][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 614.818058][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 614.818071][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 614.818087][ T8766] ? rt_spin_unlock+0x160/0x200 [ 614.818103][ T8766] gfs2_quota_sync+0x370/0x470 [ 614.818121][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 614.818135][ T8766] sync_filesystem+0xed/0x250 [ 614.818152][ T8766] generic_shutdown_super+0x77/0x2d0 [ 614.818176][ T8766] kill_block_super+0x44/0x90 [ 614.818191][ T8766] deactivate_locked_super+0xbc/0x130 [ 614.818205][ T8766] cleanup_mnt+0x437/0x4d0 [ 614.818220][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 614.818233][ T8766] task_work_run+0x1d9/0x270 [ 614.818248][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 614.818264][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 614.818275][ T8766] ? rcu_is_watching+0x15/0xb0 [ 614.818288][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.818300][ T8766] do_syscall_64+0x33e/0xf80 [ 614.818311][ T8766] ? trace_irq_disable+0x3b/0x140 [ 614.818328][ T8766] ? clear_bhb_loop+0x40/0x90 [ 614.818340][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.818350][ T8766] RIP: 0033:0x7fc23088fcf7 [ 614.818362][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 614.818370][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 614.818382][ T8766] RAX: 0000000000000000 RBX: 00000000000000f9 RCX: 00007fc23088fcf7 [ 614.818389][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 614.818395][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 614.818402][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 614.818409][ T8766] R13: 000055556206d970 R14: 0000000000095dfb R15: 000000000000007c [ 614.818424][ T8766] [ 614.818428][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 614.971580][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 615.379985][ T9674] loop0: detected capacity change from 0 to 32768 [ 615.399579][ T9674] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 615.399599][ T9674] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 615.440448][ T9674] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 615.443179][ T37] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 615.443199][ T37] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 615.481026][ T37] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 615.481247][ T37] gfs2: fsid=syz:syz.0: jid=0: Done [ 615.482112][ T9674] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 615.614433][ T9674] gfs2: fsid=syz:syz.0: found 1 quota changes [ 615.624722][ T9674] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 615.689169][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 615.689209][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 615.689236][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 615.689274][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 615.689302][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 615.689323][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.689334][ T8766] Call Trace: [ 615.689341][ T8766] [ 615.689349][ T8766] dump_stack_lvl+0xe8/0x150 [ 615.689375][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 615.689397][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 615.689423][ T8766] ? __pfx_bit_wait+0x10/0x10 [ 615.689462][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 615.689479][ T8766] ? rt_spin_unlock+0x160/0x200 [ 615.689515][ T8766] ? __pfx_wake_bit_function+0x10/0x10 [ 615.689548][ T8766] gfs2_instantiate+0x168/0x220 [ 615.689572][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 615.689595][ T8766] do_sync+0x49a/0xcb0 [ 615.689619][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 615.689652][ T8766] ? __pfx_do_sync+0x10/0x10 [ 615.689673][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 615.689707][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 615.689730][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 615.689759][ T8766] ? rt_spin_unlock+0x160/0x200 [ 615.689785][ T8766] gfs2_quota_sync+0x370/0x470 [ 615.689820][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 615.689844][ T8766] sync_filesystem+0xed/0x250 [ 615.689872][ T8766] generic_shutdown_super+0x77/0x2d0 [ 615.689899][ T8766] kill_block_super+0x44/0x90 [ 615.689925][ T8766] deactivate_locked_super+0xbc/0x130 [ 615.689950][ T8766] cleanup_mnt+0x437/0x4d0 [ 615.689975][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 615.689999][ T8766] task_work_run+0x1d9/0x270 [ 615.690024][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 615.690063][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 615.690081][ T8766] ? rcu_is_watching+0x15/0xb0 [ 615.690103][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.690122][ T8766] do_syscall_64+0x33e/0xf80 [ 615.690140][ T8766] ? trace_irq_disable+0x3b/0x140 [ 615.690164][ T8766] ? clear_bhb_loop+0x40/0x90 [ 615.690184][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.690200][ T8766] RIP: 0033:0x7fc23088fcf7 [ 615.690216][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 615.690225][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 executing program [ 615.690237][ T8766] RAX: 0000000000000000 RBX: 00000000000000fb RCX: 00007fc23088fcf7 [ 615.690244][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 615.690250][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 615.690257][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 615.690264][ T8766] R13: 000055556206d970 R14: 0000000000096161 R15: 000000000000007d [ 615.690279][ T8766] [ 615.690284][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 615.871868][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 616.287725][ T9680] loop0: detected capacity change from 0 to 32768 [ 616.294052][ T9680] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 616.294071][ T9680] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 616.357063][ T9680] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 616.360127][ T37] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 616.360145][ T37] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 616.392967][ T37] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 32ms [ 616.394033][ T37] gfs2: fsid=syz:syz.0: jid=0: Done [ 616.394090][ T9680] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 616.481583][ T9680] gfs2: fsid=syz:syz.0: found 1 quota changes [ 616.484989][ T9680] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 616.540320][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 616.540355][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 616.540378][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 616.540433][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 616.540457][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 616.540475][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 616.540484][ T8766] Call Trace: [ 616.540490][ T8766] [ 616.540497][ T8766] dump_stack_lvl+0xe8/0x150 [ 616.540519][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 616.540537][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 616.540561][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 616.540575][ T8766] ? rt_spin_unlock+0x160/0x200 [ 616.540608][ T8766] gfs2_instantiate+0x168/0x220 [ 616.540628][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 616.540647][ T8766] do_sync+0x49a/0xcb0 [ 616.540667][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 616.540694][ T8766] ? __pfx_do_sync+0x10/0x10 [ 616.540712][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 616.540742][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 616.540760][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 616.540791][ T8766] ? rt_spin_unlock+0x160/0x200 [ 616.540815][ T8766] gfs2_quota_sync+0x370/0x470 [ 616.540845][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 616.540872][ T8766] sync_filesystem+0xed/0x250 [ 616.540897][ T8766] generic_shutdown_super+0x77/0x2d0 [ 616.540921][ T8766] kill_block_super+0x44/0x90 [ 616.540950][ T8766] deactivate_locked_super+0xbc/0x130 [ 616.540988][ T8766] cleanup_mnt+0x437/0x4d0 [ 616.541014][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 616.541035][ T8766] task_work_run+0x1d9/0x270 [ 616.541056][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 616.541082][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 616.541097][ T8766] ? rcu_is_watching+0x15/0xb0 [ 616.541117][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.541134][ T8766] do_syscall_64+0x33e/0xf80 [ 616.541151][ T8766] ? trace_irq_disable+0x3b/0x140 [ 616.541173][ T8766] ? clear_bhb_loop+0x40/0x90 [ 616.541193][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.541212][ T8766] RIP: 0033:0x7fc23088fcf7 [ 616.541229][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 616.541243][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 616.541260][ T8766] RAX: 0000000000000000 RBX: 00000000000000fd RCX: 00007fc23088fcf7 [ 616.541270][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 616.541286][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 616.541301][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 616.541310][ T8766] R13: 000055556206d970 R14: 0000000000096511 R15: 000000000000007e [ 616.541336][ T8766] [ 616.541342][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 616.709473][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 617.117717][ T9686] loop0: detected capacity change from 0 to 32768 [ 617.132542][ T9686] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 617.132558][ T9686] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 617.152147][ T9686] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 617.170059][ T37] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 617.170079][ T37] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 617.222149][ T37] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 52ms [ 617.223098][ T37] gfs2: fsid=syz:syz.0: jid=0: Done [ 617.223150][ T9686] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 617.325090][ T9686] gfs2: fsid=syz:syz.0: found 1 quota changes [ 617.333159][ T9686] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 617.395267][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 617.395304][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 617.395327][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 617.395353][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 617.395369][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 617.395381][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.395388][ T8766] Call Trace: [ 617.395393][ T8766] [ 617.395398][ T8766] dump_stack_lvl+0xe8/0x150 [ 617.395413][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 617.395426][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 617.395442][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 617.395451][ T8766] ? rt_spin_unlock+0x160/0x200 [ 617.395472][ T8766] gfs2_instantiate+0x168/0x220 [ 617.395486][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 617.395498][ T8766] do_sync+0x49a/0xcb0 [ 617.395512][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 617.395530][ T8766] ? __pfx_do_sync+0x10/0x10 [ 617.395543][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 617.395562][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 617.395575][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 617.395591][ T8766] ? rt_spin_unlock+0x160/0x200 [ 617.395617][ T8766] gfs2_quota_sync+0x370/0x470 [ 617.395636][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 617.395649][ T8766] sync_filesystem+0xed/0x250 [ 617.395666][ T8766] generic_shutdown_super+0x77/0x2d0 [ 617.395683][ T8766] kill_block_super+0x44/0x90 [ 617.395698][ T8766] deactivate_locked_super+0xbc/0x130 [ 617.395717][ T8766] cleanup_mnt+0x437/0x4d0 [ 617.395732][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 617.395745][ T8766] task_work_run+0x1d9/0x270 [ 617.395759][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 617.395776][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 617.395786][ T8766] ? rcu_is_watching+0x15/0xb0 [ 617.395800][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.395811][ T8766] do_syscall_64+0x33e/0xf80 [ 617.395823][ T8766] ? trace_irq_disable+0x3b/0x140 [ 617.395838][ T8766] ? clear_bhb_loop+0x40/0x90 [ 617.395851][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.395863][ T8766] RIP: 0033:0x7fc23088fcf7 [ 617.395875][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 617.395883][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 617.395895][ T8766] RAX: 0000000000000000 RBX: 00000000000000ff RCX: 00007fc23088fcf7 [ 617.395902][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 617.395908][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 617.395915][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 executing program [ 617.395921][ T8766] R13: 000055556206d970 R14: 0000000000096837 R15: 000000000000007f [ 617.395937][ T8766] [ 617.395941][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 617.571375][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 617.980641][ T9692] loop0: detected capacity change from 0 to 32768 [ 618.008074][ T9692] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 618.008088][ T9692] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 618.028867][ T9692] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 618.032136][ T37] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 618.032154][ T37] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 618.078939][ T37] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 618.081178][ T37] gfs2: fsid=syz:syz.0: jid=0: Done [ 618.081232][ T9692] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 618.231475][ T9692] gfs2: fsid=syz:syz.0: found 1 quota changes [ 618.235111][ T9692] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 618.290398][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 618.290433][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 618.290457][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 618.290499][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 618.290521][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 618.290538][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 618.290548][ T8766] Call Trace: [ 618.290554][ T8766] [ 618.290561][ T8766] dump_stack_lvl+0xe8/0x150 [ 618.290583][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 618.290601][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 618.290625][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 618.290640][ T8766] ? rt_spin_unlock+0x160/0x200 [ 618.290671][ T8766] gfs2_instantiate+0x168/0x220 [ 618.290691][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 618.290711][ T8766] do_sync+0x49a/0xcb0 [ 618.290732][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 618.290760][ T8766] ? __pfx_do_sync+0x10/0x10 [ 618.290778][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 618.290811][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 618.290829][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 618.290854][ T8766] ? rt_spin_unlock+0x160/0x200 [ 618.290877][ T8766] gfs2_quota_sync+0x370/0x470 [ 618.290906][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 618.290927][ T8766] sync_filesystem+0xed/0x250 [ 618.290951][ T8766] generic_shutdown_super+0x77/0x2d0 [ 618.290974][ T8766] kill_block_super+0x44/0x90 [ 618.290996][ T8766] deactivate_locked_super+0xbc/0x130 [ 618.291017][ T8766] cleanup_mnt+0x437/0x4d0 [ 618.291039][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.291059][ T8766] task_work_run+0x1d9/0x270 [ 618.291080][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 618.291107][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 618.291122][ T8766] ? rcu_is_watching+0x15/0xb0 [ 618.291149][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.291167][ T8766] do_syscall_64+0x33e/0xf80 [ 618.291189][ T8766] ? trace_irq_disable+0x3b/0x140 [ 618.291211][ T8766] ? clear_bhb_loop+0x40/0x90 [ 618.291231][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.291247][ T8766] RIP: 0033:0x7fc23088fcf7 [ 618.291263][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 618.291276][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 618.291293][ T8766] RAX: 0000000000000000 RBX: 0000000000000101 RCX: 00007fc23088fcf7 [ 618.291304][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 618.291314][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 618.291324][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 618.291334][ T8766] R13: 000055556206d970 R14: 0000000000096bb0 R15: 0000000000000080 [ 618.291360][ T8766] [ 618.291383][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 618.451349][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 618.892515][ T9698] loop0: detected capacity change from 0 to 32768 [ 618.904247][ T9698] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 618.904266][ T9698] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 618.948624][ T9698] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 618.951342][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 618.951360][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 619.014746][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms [ 619.014925][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 619.015034][ T9698] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 619.101008][ T9698] gfs2: fsid=syz:syz.0: found 1 quota changes [ 619.104234][ T9698] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 619.160242][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 619.160277][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 619.160300][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 619.160334][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 619.160357][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 619.160383][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.160392][ T8766] Call Trace: [ 619.160398][ T8766] [ 619.160409][ T8766] dump_stack_lvl+0xe8/0x150 [ 619.160431][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 619.160453][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 619.160477][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 619.160493][ T8766] ? rt_spin_unlock+0x160/0x200 [ 619.160525][ T8766] gfs2_instantiate+0x168/0x220 [ 619.160544][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 619.160564][ T8766] do_sync+0x49a/0xcb0 [ 619.160585][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 619.160613][ T8766] ? __pfx_do_sync+0x10/0x10 [ 619.160631][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 619.160660][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 619.160687][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 619.160712][ T8766] ? rt_spin_unlock+0x160/0x200 [ 619.160741][ T8766] gfs2_quota_sync+0x370/0x470 [ 619.160770][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 619.160790][ T8766] sync_filesystem+0xed/0x250 [ 619.160814][ T8766] generic_shutdown_super+0x77/0x2d0 [ 619.160838][ T8766] kill_block_super+0x44/0x90 [ 619.160860][ T8766] deactivate_locked_super+0xbc/0x130 [ 619.160881][ T8766] cleanup_mnt+0x437/0x4d0 [ 619.160903][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.160923][ T8766] task_work_run+0x1d9/0x270 [ 619.160944][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 619.160971][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 619.160986][ T8766] ? rcu_is_watching+0x15/0xb0 [ 619.161006][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.161023][ T8766] do_syscall_64+0x33e/0xf80 [ 619.161040][ T8766] ? trace_irq_disable+0x3b/0x140 [ 619.161062][ T8766] ? clear_bhb_loop+0x40/0x90 [ 619.161082][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.161097][ T8766] RIP: 0033:0x7fc23088fcf7 [ 619.161113][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 619.161127][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 619.161144][ T8766] RAX: 0000000000000000 RBX: 0000000000000103 RCX: 00007fc23088fcf7 [ 619.161155][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 619.161165][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 619.161176][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 executing program [ 619.161186][ T8766] R13: 000055556206d970 R14: 0000000000096f39 R15: 0000000000000081 [ 619.161212][ T8766] [ 619.161235][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 619.332138][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 619.749634][ T9704] loop0: detected capacity change from 0 to 32768 [ 619.759660][ T9704] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 619.761145][ T9704] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 619.822146][ T9704] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 619.836263][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 619.836282][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 619.889272][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 52ms [ 619.889505][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 619.890154][ T9704] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 619.993291][ T9704] gfs2: fsid=syz:syz.0: found 1 quota changes [ 619.996175][ T9704] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 620.041921][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 620.041969][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 620.041994][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 620.042028][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 620.042052][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 620.042070][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.042079][ T8766] Call Trace: [ 620.042085][ T8766] [ 620.042093][ T8766] dump_stack_lvl+0xe8/0x150 [ 620.042115][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 620.042134][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 620.042159][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 620.042174][ T8766] ? rt_spin_unlock+0x160/0x200 [ 620.042207][ T8766] gfs2_instantiate+0x168/0x220 [ 620.042227][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 620.042247][ T8766] do_sync+0x49a/0xcb0 [ 620.042268][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 620.042296][ T8766] ? __pfx_do_sync+0x10/0x10 [ 620.042314][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 620.042343][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 620.042363][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 620.042388][ T8766] ? rt_spin_unlock+0x160/0x200 [ 620.042412][ T8766] gfs2_quota_sync+0x370/0x470 [ 620.042441][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 620.042462][ T8766] sync_filesystem+0xed/0x250 [ 620.042487][ T8766] generic_shutdown_super+0x77/0x2d0 [ 620.042511][ T8766] kill_block_super+0x44/0x90 [ 620.042533][ T8766] deactivate_locked_super+0xbc/0x130 [ 620.042555][ T8766] cleanup_mnt+0x437/0x4d0 [ 620.042577][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.042607][ T8766] task_work_run+0x1d9/0x270 [ 620.042629][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 620.042656][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 620.042676][ T8766] ? rcu_is_watching+0x15/0xb0 [ 620.042696][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.042714][ T8766] do_syscall_64+0x33e/0xf80 [ 620.042732][ T8766] ? trace_irq_disable+0x3b/0x140 [ 620.042754][ T8766] ? clear_bhb_loop+0x40/0x90 [ 620.042774][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.042789][ T8766] RIP: 0033:0x7fc23088fcf7 [ 620.042806][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 620.042820][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 620.042837][ T8766] RAX: 0000000000000000 RBX: 0000000000000105 RCX: 00007fc23088fcf7 [ 620.042848][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 620.042858][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 620.042869][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 620.042879][ T8766] R13: 000055556206d970 R14: 0000000000097290 R15: 0000000000000082 [ 620.042905][ T8766] [ 620.042925][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 620.191682][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 620.610558][ T9710] loop0: detected capacity change from 0 to 32768 [ 620.631002][ T9710] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 620.631021][ T9710] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 620.702216][ T9710] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 620.712393][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 620.712415][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 620.754958][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 42ms [ 620.759486][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 620.759595][ T9710] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 620.841093][ T9710] gfs2: fsid=syz:syz.0: found 1 quota changes [ 620.844323][ T9710] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 620.906601][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 620.906634][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 620.906656][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 620.906687][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 620.906709][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 620.906725][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.906733][ T8766] Call Trace: [ 620.906738][ T8766] [ 620.906746][ T8766] dump_stack_lvl+0xe8/0x150 [ 620.906772][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 620.906790][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 620.906811][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 620.906824][ T8766] ? rt_spin_unlock+0x160/0x200 [ 620.906854][ T8766] gfs2_instantiate+0x168/0x220 [ 620.906880][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 620.906897][ T8766] do_sync+0x49a/0xcb0 [ 620.906916][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 620.906940][ T8766] ? __pfx_do_sync+0x10/0x10 [ 620.906955][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 620.906981][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 620.906997][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 620.907019][ T8766] ? rt_spin_unlock+0x160/0x200 [ 620.907041][ T8766] gfs2_quota_sync+0x370/0x470 [ 620.907069][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 620.907090][ T8766] sync_filesystem+0xed/0x250 [ 620.907111][ T8766] generic_shutdown_super+0x77/0x2d0 [ 620.907133][ T8766] kill_block_super+0x44/0x90 [ 620.907153][ T8766] deactivate_locked_super+0xbc/0x130 [ 620.907172][ T8766] cleanup_mnt+0x437/0x4d0 [ 620.907191][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.907210][ T8766] task_work_run+0x1d9/0x270 [ 620.907229][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 620.907263][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 620.907277][ T8766] ? rcu_is_watching+0x15/0xb0 [ 620.907295][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.907310][ T8766] do_syscall_64+0x33e/0xf80 [ 620.907326][ T8766] ? trace_irq_disable+0x3b/0x140 [ 620.907345][ T8766] ? clear_bhb_loop+0x40/0x90 [ 620.907362][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.907377][ T8766] RIP: 0033:0x7fc23088fcf7 [ 620.907393][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 620.907405][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 620.907423][ T8766] RAX: 0000000000000000 RBX: 0000000000000107 RCX: 00007fc23088fcf7 [ 620.907433][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 620.907443][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 620.907454][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 620.907464][ T8766] R13: 000055556206d970 R14: 00000000000975ec R15: 0000000000000083 [ 620.907491][ T8766] [ 620.907511][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 621.052346][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 621.478742][ T9716] loop0: detected capacity change from 0 to 32768 [ 621.483554][ T9716] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 621.483569][ T9716] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 621.550419][ T9716] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 621.552950][ T8590] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 621.552969][ T8590] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 621.596937][ T8590] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 621.597164][ T8590] gfs2: fsid=syz:syz.0: jid=0: Done [ 621.597276][ T9716] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 621.684923][ T9716] gfs2: fsid=syz:syz.0: found 1 quota changes [ 621.696597][ T9716] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 621.745804][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 621.745841][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 621.745859][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 621.745885][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 621.745901][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 621.745913][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 621.745920][ T8766] Call Trace: [ 621.745924][ T8766] [ 621.745930][ T8766] dump_stack_lvl+0xe8/0x150 [ 621.745945][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 621.745957][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 621.745973][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 621.745983][ T8766] ? rt_spin_unlock+0x160/0x200 [ 621.746005][ T8766] gfs2_instantiate+0x168/0x220 [ 621.746018][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 621.746031][ T8766] do_sync+0x49a/0xcb0 [ 621.746045][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 621.746063][ T8766] ? __pfx_do_sync+0x10/0x10 [ 621.746076][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 621.746095][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 621.746112][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 621.746138][ T8766] ? rt_spin_unlock+0x160/0x200 [ 621.746156][ T8766] gfs2_quota_sync+0x370/0x470 [ 621.746183][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 621.746197][ T8766] sync_filesystem+0xed/0x250 [ 621.746213][ T8766] generic_shutdown_super+0x77/0x2d0 [ 621.746229][ T8766] kill_block_super+0x44/0x90 [ 621.746244][ T8766] deactivate_locked_super+0xbc/0x130 [ 621.746259][ T8766] cleanup_mnt+0x437/0x4d0 [ 621.746273][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.746287][ T8766] task_work_run+0x1d9/0x270 [ 621.746302][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 621.746319][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 621.746328][ T8766] ? rcu_is_watching+0x15/0xb0 [ 621.746342][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.746354][ T8766] do_syscall_64+0x33e/0xf80 [ 621.746365][ T8766] ? trace_irq_disable+0x3b/0x140 [ 621.746381][ T8766] ? clear_bhb_loop+0x40/0x90 [ 621.746393][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.746403][ T8766] RIP: 0033:0x7fc23088fcf7 [ 621.746415][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 621.746425][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 621.746438][ T8766] RAX: 0000000000000000 RBX: 0000000000000109 RCX: 00007fc23088fcf7 [ 621.746445][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 621.746451][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 621.746458][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 621.746464][ T8766] R13: 000055556206d970 R14: 0000000000097958 R15: 0000000000000084 [ 621.746480][ T8766] [ 621.746484][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 621.920848][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 622.331375][ T9722] loop0: detected capacity change from 0 to 32768 [ 622.339319][ T9722] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 622.339337][ T9722] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 622.379246][ T9722] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 622.381687][ T8590] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 622.381706][ T8590] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 622.438472][ T8590] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 622.439486][ T8590] gfs2: fsid=syz:syz.0: jid=0: Done [ 622.439537][ T9722] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 622.520554][ T9722] gfs2: fsid=syz:syz.0: found 1 quota changes [ 622.523889][ T9722] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 622.580127][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 622.580161][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 622.580196][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 622.580230][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 622.580254][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 622.580271][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 622.580280][ T8766] Call Trace: [ 622.580287][ T8766] [ 622.580294][ T8766] dump_stack_lvl+0xe8/0x150 [ 622.580316][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 622.580335][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 622.580363][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 622.580378][ T8766] ? rt_spin_unlock+0x160/0x200 [ 622.580410][ T8766] gfs2_instantiate+0x168/0x220 [ 622.580429][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 622.580449][ T8766] do_sync+0x49a/0xcb0 [ 622.580470][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 622.580497][ T8766] ? __pfx_do_sync+0x10/0x10 [ 622.580515][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 622.580544][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 622.580562][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 622.580587][ T8766] ? rt_spin_unlock+0x160/0x200 [ 622.580610][ T8766] gfs2_quota_sync+0x370/0x470 [ 622.580639][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 622.580660][ T8766] sync_filesystem+0xed/0x250 [ 622.580684][ T8766] generic_shutdown_super+0x77/0x2d0 [ 622.580708][ T8766] kill_block_super+0x44/0x90 [ 622.580729][ T8766] deactivate_locked_super+0xbc/0x130 [ 622.580751][ T8766] cleanup_mnt+0x437/0x4d0 [ 622.580772][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.580793][ T8766] task_work_run+0x1d9/0x270 [ 622.580815][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 622.580842][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 622.580857][ T8766] ? rcu_is_watching+0x15/0xb0 [ 622.580877][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.580895][ T8766] do_syscall_64+0x33e/0xf80 [ 622.580912][ T8766] ? trace_irq_disable+0x3b/0x140 [ 622.580933][ T8766] ? clear_bhb_loop+0x40/0x90 [ 622.580953][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.580968][ T8766] RIP: 0033:0x7fc23088fcf7 [ 622.580984][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 622.580997][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 622.581014][ T8766] RAX: 0000000000000000 RBX: 000000000000010b RCX: 00007fc23088fcf7 [ 622.581024][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 622.581034][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 622.581045][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 622.581055][ T8766] R13: 000055556206d970 R14: 0000000000097cb3 R15: 0000000000000085 [ 622.581081][ T8766] [ 622.581117][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 622.721782][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 623.172083][ T9728] loop0: detected capacity change from 0 to 32768 [ 623.189705][ T9728] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 623.189739][ T9728] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 623.225473][ T9728] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 623.247168][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 623.247188][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 623.291572][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 623.291748][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 623.291859][ T9728] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 623.379023][ T9728] gfs2: fsid=syz:syz.0: found 1 quota changes [ 623.382291][ T9728] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 623.435487][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 623.435523][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 623.435549][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 623.435585][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 623.435610][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 623.435628][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.435638][ T8766] Call Trace: [ 623.435648][ T8766] [ 623.435656][ T8766] dump_stack_lvl+0xe8/0x150 [ 623.435679][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 623.435699][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 623.435725][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 623.435740][ T8766] ? rt_spin_unlock+0x160/0x200 [ 623.435773][ T8766] gfs2_instantiate+0x168/0x220 [ 623.435795][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 623.435816][ T8766] do_sync+0x49a/0xcb0 [ 623.435837][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 623.435866][ T8766] ? __pfx_do_sync+0x10/0x10 [ 623.435885][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 623.435916][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 623.435935][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 623.435961][ T8766] ? rt_spin_unlock+0x160/0x200 [ 623.435986][ T8766] gfs2_quota_sync+0x370/0x470 [ 623.436022][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 623.436044][ T8766] sync_filesystem+0xed/0x250 [ 623.436069][ T8766] generic_shutdown_super+0x77/0x2d0 [ 623.436094][ T8766] kill_block_super+0x44/0x90 [ 623.436125][ T8766] deactivate_locked_super+0xbc/0x130 [ 623.436152][ T8766] cleanup_mnt+0x437/0x4d0 [ 623.436174][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.436196][ T8766] task_work_run+0x1d9/0x270 [ 623.436225][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 623.436252][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 623.436268][ T8766] ? rcu_is_watching+0x15/0xb0 [ 623.436289][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.436308][ T8766] do_syscall_64+0x33e/0xf80 [ 623.436326][ T8766] ? trace_irq_disable+0x3b/0x140 [ 623.436350][ T8766] ? clear_bhb_loop+0x40/0x90 [ 623.436376][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.436392][ T8766] RIP: 0033:0x7fc23088fcf7 [ 623.436410][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 623.436424][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 623.436443][ T8766] RAX: 0000000000000000 RBX: 000000000000010d RCX: 00007fc23088fcf7 [ 623.436455][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 623.436465][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 623.436476][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 executing program [ 623.436486][ T8766] R13: 000055556206d970 R14: 0000000000097ffa R15: 0000000000000086 [ 623.436513][ T8766] [ 623.436519][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 623.651670][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 624.038660][ T9734] loop0: detected capacity change from 0 to 32768 [ 624.057076][ T9734] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 624.057095][ T9734] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 624.091426][ T9734] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 624.094555][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 624.094575][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 624.156159][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 61ms [ 624.156391][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 624.156509][ T9734] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 624.280150][ T9734] gfs2: fsid=syz:syz.0: found 1 quota changes [ 624.283567][ T9734] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 624.340906][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 624.340941][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 624.340966][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 624.341000][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 624.341023][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 624.341041][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.341050][ T8766] Call Trace: [ 624.341057][ T8766] [ 624.341064][ T8766] dump_stack_lvl+0xe8/0x150 [ 624.341086][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 624.341104][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 624.341128][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 624.341148][ T8766] ? rt_spin_unlock+0x160/0x200 [ 624.341180][ T8766] gfs2_instantiate+0x168/0x220 [ 624.341209][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 624.341228][ T8766] do_sync+0x49a/0xcb0 [ 624.341248][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 624.341292][ T8766] ? __pfx_do_sync+0x10/0x10 [ 624.341310][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 624.341339][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 624.341358][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 624.341400][ T8766] ? rt_spin_unlock+0x160/0x200 [ 624.341423][ T8766] gfs2_quota_sync+0x370/0x470 [ 624.341453][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 624.341473][ T8766] sync_filesystem+0xed/0x250 [ 624.341498][ T8766] generic_shutdown_super+0x77/0x2d0 [ 624.341521][ T8766] kill_block_super+0x44/0x90 [ 624.341543][ T8766] deactivate_locked_super+0xbc/0x130 [ 624.341565][ T8766] cleanup_mnt+0x437/0x4d0 [ 624.341586][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.341607][ T8766] task_work_run+0x1d9/0x270 [ 624.341629][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 624.341656][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 624.341672][ T8766] ? rcu_is_watching+0x15/0xb0 [ 624.341692][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.341709][ T8766] do_syscall_64+0x33e/0xf80 [ 624.341727][ T8766] ? trace_irq_disable+0x3b/0x140 [ 624.341749][ T8766] ? clear_bhb_loop+0x40/0x90 [ 624.341769][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.341784][ T8766] RIP: 0033:0x7fc23088fcf7 executing program [ 624.341800][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 624.341813][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 624.341830][ T8766] RAX: 0000000000000000 RBX: 000000000000010f RCX: 00007fc23088fcf7 [ 624.341841][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 624.341851][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 624.341862][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 624.341872][ T8766] R13: 000055556206d970 R14: 000000000009833e R15: 0000000000000087 [ 624.341898][ T8766] [ 624.341919][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 624.481337][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 624.673522][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.673601][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.922714][ T9740] loop0: detected capacity change from 0 to 32768 [ 624.944976][ T9740] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 624.944996][ T9740] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 625.021772][ T9740] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 625.024484][ T8590] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 625.024503][ T8590] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 625.080792][ T8590] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 625.081807][ T8590] gfs2: fsid=syz:syz.0: jid=0: Done [ 625.081861][ T9740] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 625.185586][ T9740] gfs2: fsid=syz:syz.0: found 1 quota changes [ 625.188708][ T9740] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 625.246841][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 625.246876][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 625.246903][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 625.246952][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 625.246979][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 625.247000][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.247010][ T8766] Call Trace: [ 625.247018][ T8766] [ 625.247027][ T8766] dump_stack_lvl+0xe8/0x150 [ 625.247053][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 625.247075][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 625.247104][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 625.247121][ T8766] ? rt_spin_unlock+0x160/0x200 [ 625.247159][ T8766] gfs2_instantiate+0x168/0x220 [ 625.247181][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 625.247206][ T8766] do_sync+0x49a/0xcb0 [ 625.247229][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 625.247262][ T8766] ? __pfx_do_sync+0x10/0x10 [ 625.247284][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 625.247318][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 625.247340][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 625.247369][ T8766] ? rt_spin_unlock+0x160/0x200 [ 625.247397][ T8766] gfs2_quota_sync+0x370/0x470 [ 625.247431][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 625.247455][ T8766] sync_filesystem+0xed/0x250 [ 625.247484][ T8766] generic_shutdown_super+0x77/0x2d0 [ 625.247511][ T8766] kill_block_super+0x44/0x90 [ 625.247538][ T8766] deactivate_locked_super+0xbc/0x130 [ 625.247562][ T8766] cleanup_mnt+0x437/0x4d0 [ 625.247585][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.247608][ T8766] task_work_run+0x1d9/0x270 [ 625.247630][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 625.247658][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 625.247677][ T8766] ? rcu_is_watching+0x15/0xb0 [ 625.247698][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.247717][ T8766] do_syscall_64+0x33e/0xf80 [ 625.247736][ T8766] ? trace_irq_disable+0x3b/0x140 [ 625.247760][ T8766] ? clear_bhb_loop+0x40/0x90 [ 625.247781][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.247797][ T8766] RIP: 0033:0x7fc23088fcf7 [ 625.247817][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 625.247830][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 625.247849][ T8766] RAX: 0000000000000000 RBX: 0000000000000111 RCX: 00007fc23088fcf7 [ 625.247860][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 625.247871][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 625.247883][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 executing program [ 625.247893][ T8766] R13: 000055556206d970 R14: 00000000000986a8 R15: 0000000000000088 [ 625.247921][ T8766] [ 625.247946][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 625.402322][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 625.807427][ T9746] loop0: detected capacity change from 0 to 32768 [ 625.840776][ T9746] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 625.840796][ T9746] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 625.877385][ T9746] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 625.880011][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 625.880029][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 625.947742][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 625.947976][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 625.948105][ T9746] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 626.065013][ T9746] gfs2: fsid=syz:syz.0: found 1 quota changes [ 626.074057][ T9746] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 626.131518][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 626.131555][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 626.131582][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 626.131617][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 626.131638][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 626.131653][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 626.131661][ T8766] Call Trace: [ 626.131667][ T8766] [ 626.131674][ T8766] dump_stack_lvl+0xe8/0x150 [ 626.131692][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 626.131709][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 626.131731][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 626.131744][ T8766] ? rt_spin_unlock+0x160/0x200 [ 626.131772][ T8766] gfs2_instantiate+0x168/0x220 [ 626.131801][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 626.131818][ T8766] do_sync+0x49a/0xcb0 [ 626.131836][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 626.131866][ T8766] ? __pfx_do_sync+0x10/0x10 [ 626.131883][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 626.131909][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 626.131926][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 626.131949][ T8766] ? rt_spin_unlock+0x160/0x200 [ 626.131971][ T8766] gfs2_quota_sync+0x370/0x470 [ 626.131996][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 626.132014][ T8766] sync_filesystem+0xed/0x250 [ 626.132037][ T8766] generic_shutdown_super+0x77/0x2d0 [ 626.132057][ T8766] kill_block_super+0x44/0x90 [ 626.132077][ T8766] deactivate_locked_super+0xbc/0x130 [ 626.132095][ T8766] cleanup_mnt+0x437/0x4d0 [ 626.132114][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.132131][ T8766] task_work_run+0x1d9/0x270 [ 626.132150][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 626.132173][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 626.132187][ T8766] ? rcu_is_watching+0x15/0xb0 [ 626.132205][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.132221][ T8766] do_syscall_64+0x33e/0xf80 [ 626.132237][ T8766] ? trace_irq_disable+0x3b/0x140 [ 626.132256][ T8766] ? clear_bhb_loop+0x40/0x90 [ 626.132274][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.132287][ T8766] RIP: 0033:0x7fc23088fcf7 [ 626.132301][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 626.132313][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 626.132328][ T8766] RAX: 0000000000000000 RBX: 0000000000000113 RCX: 00007fc23088fcf7 [ 626.132338][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 626.132346][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 626.132355][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 executing program [ 626.132364][ T8766] R13: 000055556206d970 R14: 0000000000098a43 R15: 0000000000000089 [ 626.132387][ T8766] [ 626.132410][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 626.291680][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 626.704088][ T9752] loop0: detected capacity change from 0 to 32768 [ 626.721590][ T9752] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 626.721608][ T9752] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 626.748290][ T4928] Bluetooth: hci0: command 0x0406 tx timeout [ 626.791716][ T9752] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 626.794403][ T8590] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 626.794423][ T8590] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 626.839166][ T8590] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 626.839412][ T8590] gfs2: fsid=syz:syz.0: jid=0: Done [ 626.840168][ T9752] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 626.962388][ T9752] gfs2: fsid=syz:syz.0: found 1 quota changes [ 626.974781][ T9752] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 627.049524][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 627.049583][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 627.049611][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 627.049650][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 627.049677][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 627.049698][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 627.049708][ T8766] Call Trace: [ 627.049716][ T8766] [ 627.049725][ T8766] dump_stack_lvl+0xe8/0x150 [ 627.049750][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 627.049772][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 627.049799][ T8766] ? __pfx_bit_wait+0x10/0x10 [ 627.049821][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 627.049838][ T8766] ? rt_spin_unlock+0x160/0x200 [ 627.049865][ T8766] ? __pfx_wake_bit_function+0x10/0x10 [ 627.049898][ T8766] gfs2_instantiate+0x168/0x220 [ 627.049922][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 627.049953][ T8766] do_sync+0x49a/0xcb0 [ 627.049976][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 627.050010][ T8766] ? __pfx_do_sync+0x10/0x10 [ 627.050030][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 627.050061][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 627.050079][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 627.050098][ T8766] ? rt_spin_unlock+0x160/0x200 [ 627.050114][ T8766] gfs2_quota_sync+0x370/0x470 [ 627.050133][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 627.050146][ T8766] sync_filesystem+0xed/0x250 [ 627.050163][ T8766] generic_shutdown_super+0x77/0x2d0 [ 627.050179][ T8766] kill_block_super+0x44/0x90 [ 627.050195][ T8766] deactivate_locked_super+0xbc/0x130 [ 627.050209][ T8766] cleanup_mnt+0x437/0x4d0 [ 627.050225][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 627.050245][ T8766] task_work_run+0x1d9/0x270 [ 627.050269][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 627.050295][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 627.050306][ T8766] ? rcu_is_watching+0x15/0xb0 [ 627.050319][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.050331][ T8766] do_syscall_64+0x33e/0xf80 [ 627.050344][ T8766] ? trace_irq_disable+0x3b/0x140 [ 627.050360][ T8766] ? clear_bhb_loop+0x40/0x90 [ 627.050372][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.050382][ T8766] RIP: 0033:0x7fc23088fcf7 [ 627.050394][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 627.050402][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 627.050414][ T8766] RAX: 0000000000000000 RBX: 0000000000000115 RCX: 00007fc23088fcf7 [ 627.050422][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 executing program [ 627.050428][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 627.050435][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 627.050441][ T8766] R13: 000055556206d970 R14: 0000000000098dc5 R15: 000000000000008a [ 627.050457][ T8766] [ 627.050461][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 627.231570][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 627.631100][ T9758] loop0: detected capacity change from 0 to 32768 [ 627.645833][ T9758] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 627.645852][ T9758] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 627.708201][ T9758] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 627.710957][ T8590] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 627.710975][ T8590] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 627.741297][ T8590] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 30ms [ 627.741470][ T8590] gfs2: fsid=syz:syz.0: jid=0: Done [ 627.741537][ T9758] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 627.821855][ T9758] gfs2: fsid=syz:syz.0: found 1 quota changes [ 627.827239][ T9758] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 627.870689][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 627.870723][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 627.870747][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 627.870781][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 627.870805][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 627.870822][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 627.870831][ T8766] Call Trace: [ 627.870837][ T8766] [ 627.870845][ T8766] dump_stack_lvl+0xe8/0x150 [ 627.870871][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 627.870889][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 627.870915][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 627.870929][ T8766] ? rt_spin_unlock+0x160/0x200 [ 627.870961][ T8766] gfs2_instantiate+0x168/0x220 [ 627.870981][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 627.871001][ T8766] do_sync+0x49a/0xcb0 [ 627.871021][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 627.871049][ T8766] ? __pfx_do_sync+0x10/0x10 [ 627.871067][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 627.871097][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 627.871115][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 627.871140][ T8766] ? rt_spin_unlock+0x160/0x200 [ 627.871163][ T8766] gfs2_quota_sync+0x370/0x470 [ 627.871191][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 627.871212][ T8766] sync_filesystem+0xed/0x250 [ 627.871237][ T8766] generic_shutdown_super+0x77/0x2d0 [ 627.871260][ T8766] kill_block_super+0x44/0x90 [ 627.871282][ T8766] deactivate_locked_super+0xbc/0x130 [ 627.871303][ T8766] cleanup_mnt+0x437/0x4d0 [ 627.871324][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 627.871345][ T8766] task_work_run+0x1d9/0x270 [ 627.871366][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 627.871393][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 627.871409][ T8766] ? rcu_is_watching+0x15/0xb0 [ 627.871429][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.871446][ T8766] do_syscall_64+0x33e/0xf80 [ 627.871464][ T8766] ? trace_irq_disable+0x3b/0x140 [ 627.871500][ T8766] ? clear_bhb_loop+0x40/0x90 [ 627.871519][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.871534][ T8766] RIP: 0033:0x7fc23088fcf7 [ 627.871550][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 627.871564][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 627.871581][ T8766] RAX: 0000000000000000 RBX: 0000000000000117 RCX: 00007fc23088fcf7 [ 627.871592][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 executing program [ 627.871602][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 627.871613][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 627.871622][ T8766] R13: 000055556206d970 R14: 0000000000099144 R15: 000000000000008b [ 627.871655][ T8766] [ 627.871676][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 628.031456][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 628.456092][ T9765] loop0: detected capacity change from 0 to 32768 [ 628.464532][ T9765] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 628.464552][ T9765] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 628.501471][ T9765] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 628.504592][ T822] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 628.504613][ T822] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 628.562453][ T822] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 57ms [ 628.563442][ T822] gfs2: fsid=syz:syz.0: jid=0: Done [ 628.563495][ T9765] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 628.687933][ T9765] gfs2: fsid=syz:syz.0: found 1 quota changes [ 628.691167][ T9765] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 628.755505][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 628.755539][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 628.755562][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 628.755607][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 628.755628][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 628.755643][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 628.755651][ T8766] Call Trace: [ 628.755663][ T8766] [ 628.755670][ T8766] dump_stack_lvl+0xe8/0x150 [ 628.755691][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 628.755708][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 628.755729][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 628.755742][ T8766] ? rt_spin_unlock+0x160/0x200 [ 628.755775][ T8766] gfs2_instantiate+0x168/0x220 [ 628.755795][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 628.755813][ T8766] do_sync+0x49a/0xcb0 [ 628.755832][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 628.755858][ T8766] ? __pfx_do_sync+0x10/0x10 [ 628.755874][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 628.755901][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 628.755918][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 628.755941][ T8766] ? rt_spin_unlock+0x160/0x200 [ 628.755961][ T8766] gfs2_quota_sync+0x370/0x470 [ 628.755986][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 628.756005][ T8766] sync_filesystem+0xed/0x250 [ 628.756027][ T8766] generic_shutdown_super+0x77/0x2d0 [ 628.756049][ T8766] kill_block_super+0x44/0x90 [ 628.756070][ T8766] deactivate_locked_super+0xbc/0x130 [ 628.756092][ T8766] cleanup_mnt+0x437/0x4d0 [ 628.756112][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.756130][ T8766] task_work_run+0x1d9/0x270 [ 628.756149][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 628.756173][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 628.756186][ T8766] ? rcu_is_watching+0x15/0xb0 [ 628.756206][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.756223][ T8766] do_syscall_64+0x33e/0xf80 [ 628.756238][ T8766] ? trace_irq_disable+0x3b/0x140 [ 628.756258][ T8766] ? clear_bhb_loop+0x40/0x90 [ 628.756276][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.756289][ T8766] RIP: 0033:0x7fc23088fcf7 [ 628.756306][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 628.756317][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 628.756335][ T8766] RAX: 0000000000000000 RBX: 0000000000000119 RCX: 00007fc23088fcf7 [ 628.756345][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 628.756354][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 628.756363][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 628.756372][ T8766] R13: 000055556206d970 R14: 0000000000099468 R15: 000000000000008c [ 628.756397][ T8766] [ 628.756434][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 628.891897][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 629.354877][ T9771] loop0: detected capacity change from 0 to 32768 [ 629.378510][ T9771] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 629.378528][ T9771] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 629.418356][ T9771] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 629.421243][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 629.421260][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 629.478347][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 57ms [ 629.480927][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 629.481007][ T9771] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 629.593363][ T9771] gfs2: fsid=syz:syz.0: found 1 quota changes [ 629.603111][ T9771] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 629.658315][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 629.658350][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 629.658375][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 629.658401][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 629.658417][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 629.658428][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 629.658435][ T8766] Call Trace: [ 629.658439][ T8766] [ 629.658444][ T8766] dump_stack_lvl+0xe8/0x150 [ 629.658460][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 629.658485][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 629.658500][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 629.658510][ T8766] ? rt_spin_unlock+0x160/0x200 [ 629.658531][ T8766] gfs2_instantiate+0x168/0x220 [ 629.658544][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 629.658557][ T8766] do_sync+0x49a/0xcb0 [ 629.658571][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 629.658589][ T8766] ? __pfx_do_sync+0x10/0x10 [ 629.658601][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 629.658621][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 629.658633][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 629.658650][ T8766] ? rt_spin_unlock+0x160/0x200 [ 629.658671][ T8766] gfs2_quota_sync+0x370/0x470 [ 629.658690][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 629.658704][ T8766] sync_filesystem+0xed/0x250 [ 629.658723][ T8766] generic_shutdown_super+0x77/0x2d0 [ 629.658739][ T8766] kill_block_super+0x44/0x90 [ 629.658754][ T8766] deactivate_locked_super+0xbc/0x130 [ 629.658768][ T8766] cleanup_mnt+0x437/0x4d0 [ 629.658783][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.658797][ T8766] task_work_run+0x1d9/0x270 [ 629.658811][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 629.658828][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 629.658838][ T8766] ? rcu_is_watching+0x15/0xb0 [ 629.658851][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.658862][ T8766] do_syscall_64+0x33e/0xf80 [ 629.658875][ T8766] ? trace_irq_disable+0x3b/0x140 [ 629.658890][ T8766] ? clear_bhb_loop+0x40/0x90 [ 629.658903][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.658913][ T8766] RIP: 0033:0x7fc23088fcf7 [ 629.658924][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 629.658933][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 629.658944][ T8766] RAX: 0000000000000000 RBX: 000000000000011b RCX: 00007fc23088fcf7 [ 629.658951][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 executing program [ 629.658958][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 629.658965][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 629.658971][ T8766] R13: 000055556206d970 R14: 00000000000997f3 R15: 000000000000008d [ 629.658987][ T8766] [ 629.658991][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 629.841491][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 630.267714][ T9781] loop0: detected capacity change from 0 to 32768 [ 630.285051][ T9781] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 630.285070][ T9781] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 630.322049][ T9781] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 630.324716][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 630.324735][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 630.364098][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 630.364463][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 630.365670][ T9781] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 630.463522][ T9781] gfs2: fsid=syz:syz.0: found 1 quota changes [ 630.475688][ T9781] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 630.520459][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 630.520496][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 630.520520][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 630.520554][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 630.520602][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 630.520619][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.520629][ T8766] Call Trace: [ 630.520636][ T8766] [ 630.520643][ T8766] dump_stack_lvl+0xe8/0x150 [ 630.520666][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 630.520685][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 630.520719][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 630.520740][ T8766] ? rt_spin_unlock+0x160/0x200 [ 630.520771][ T8766] gfs2_instantiate+0x168/0x220 [ 630.520791][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 630.520817][ T8766] do_sync+0x49a/0xcb0 [ 630.520842][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 630.520870][ T8766] ? __pfx_do_sync+0x10/0x10 [ 630.520887][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 630.520917][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 630.520935][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 630.520960][ T8766] ? rt_spin_unlock+0x160/0x200 [ 630.520983][ T8766] gfs2_quota_sync+0x370/0x470 [ 630.521012][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 630.521032][ T8766] sync_filesystem+0xed/0x250 [ 630.521057][ T8766] generic_shutdown_super+0x77/0x2d0 [ 630.521080][ T8766] kill_block_super+0x44/0x90 [ 630.521102][ T8766] deactivate_locked_super+0xbc/0x130 [ 630.521123][ T8766] cleanup_mnt+0x437/0x4d0 [ 630.521144][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.521165][ T8766] task_work_run+0x1d9/0x270 [ 630.521193][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 630.521220][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 630.521235][ T8766] ? rcu_is_watching+0x15/0xb0 [ 630.521255][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.521272][ T8766] do_syscall_64+0x33e/0xf80 [ 630.521290][ T8766] ? trace_irq_disable+0x3b/0x140 [ 630.521312][ T8766] ? clear_bhb_loop+0x40/0x90 [ 630.521332][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.521347][ T8766] RIP: 0033:0x7fc23088fcf7 [ 630.521375][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 630.521391][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 630.521409][ T8766] RAX: 0000000000000000 RBX: 000000000000011d RCX: 00007fc23088fcf7 [ 630.521420][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 executing program [ 630.521430][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 630.521446][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 630.521462][ T8766] R13: 000055556206d970 R14: 0000000000099bae R15: 000000000000008e [ 630.521488][ T8766] [ 630.521495][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 630.692039][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 631.114395][ T9787] loop0: detected capacity change from 0 to 32768 [ 631.127557][ T9787] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 631.127577][ T9787] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 631.176796][ T9787] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 631.179423][ T822] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 631.179441][ T822] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 631.228003][ T822] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 48ms [ 631.233486][ T822] gfs2: fsid=syz:syz.0: jid=0: Done [ 631.233600][ T9787] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 631.351250][ T9787] gfs2: fsid=syz:syz.0: found 1 quota changes [ 631.355067][ T9787] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 631.433794][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 631.433830][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 631.433853][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 631.433884][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 631.433906][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 631.433920][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.433929][ T8766] Call Trace: [ 631.433935][ T8766] [ 631.433941][ T8766] dump_stack_lvl+0xe8/0x150 [ 631.433964][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 631.433981][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 631.434004][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 631.434019][ T8766] ? rt_spin_unlock+0x160/0x200 [ 631.434050][ T8766] gfs2_instantiate+0x168/0x220 [ 631.434068][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 631.434085][ T8766] do_sync+0x49a/0xcb0 [ 631.434103][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 631.434128][ T8766] ? __pfx_do_sync+0x10/0x10 [ 631.434143][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 631.434170][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 631.434187][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 631.434211][ T8766] ? rt_spin_unlock+0x160/0x200 [ 631.434232][ T8766] gfs2_quota_sync+0x370/0x470 [ 631.434257][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 631.434275][ T8766] sync_filesystem+0xed/0x250 [ 631.434297][ T8766] generic_shutdown_super+0x77/0x2d0 [ 631.434320][ T8766] kill_block_super+0x44/0x90 [ 631.434341][ T8766] deactivate_locked_super+0xbc/0x130 [ 631.434361][ T8766] cleanup_mnt+0x437/0x4d0 [ 631.434381][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 631.434401][ T8766] task_work_run+0x1d9/0x270 [ 631.434424][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 631.434451][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 631.434468][ T8766] ? rcu_is_watching+0x15/0xb0 [ 631.434489][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.434508][ T8766] do_syscall_64+0x33e/0xf80 [ 631.434526][ T8766] ? trace_irq_disable+0x3b/0x140 [ 631.434547][ T8766] ? clear_bhb_loop+0x40/0x90 [ 631.434576][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.434587][ T8766] RIP: 0033:0x7fc23088fcf7 [ 631.434600][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 631.434609][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 631.434625][ T8766] RAX: 0000000000000000 RBX: 000000000000011f RCX: 00007fc23088fcf7 [ 631.434632][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 631.434639][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 631.434645][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 631.434652][ T8766] R13: 000055556206d970 R14: 0000000000099ef1 R15: 000000000000008f [ 631.434668][ T8766] [ 631.434683][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 631.617606][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 632.032659][ T9793] loop0: detected capacity change from 0 to 32768 [ 632.045830][ T9793] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 632.045848][ T9793] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 632.094969][ T9793] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 632.109092][ T822] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 632.109114][ T822] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 632.145463][ T822] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 632.145629][ T822] gfs2: fsid=syz:syz.0: jid=0: Done [ 632.145705][ T9793] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 632.221419][ T9793] gfs2: fsid=syz:syz.0: found 1 quota changes [ 632.224473][ T9793] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 632.287104][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 632.287141][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 632.287161][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 632.287187][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 632.287203][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 632.287214][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 632.287221][ T8766] Call Trace: [ 632.287225][ T8766] [ 632.287230][ T8766] dump_stack_lvl+0xe8/0x150 [ 632.287246][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 632.287258][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 632.287273][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 632.287283][ T8766] ? rt_spin_unlock+0x160/0x200 [ 632.287305][ T8766] gfs2_instantiate+0x168/0x220 [ 632.287372][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 632.287385][ T8766] do_sync+0x49a/0xcb0 [ 632.287399][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 632.287417][ T8766] ? __pfx_do_sync+0x10/0x10 [ 632.287438][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 632.287458][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 632.287470][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 632.287487][ T8766] ? rt_spin_unlock+0x160/0x200 [ 632.287502][ T8766] gfs2_quota_sync+0x370/0x470 [ 632.287521][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 632.287535][ T8766] sync_filesystem+0xed/0x250 [ 632.287552][ T8766] generic_shutdown_super+0x77/0x2d0 [ 632.287568][ T8766] kill_block_super+0x44/0x90 [ 632.287583][ T8766] deactivate_locked_super+0xbc/0x130 [ 632.287597][ T8766] cleanup_mnt+0x437/0x4d0 [ 632.287612][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 632.287625][ T8766] task_work_run+0x1d9/0x270 [ 632.287640][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 632.287657][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 632.287667][ T8766] ? rcu_is_watching+0x15/0xb0 [ 632.287680][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.287691][ T8766] do_syscall_64+0x33e/0xf80 [ 632.287704][ T8766] ? trace_irq_disable+0x3b/0x140 [ 632.287720][ T8766] ? clear_bhb_loop+0x40/0x90 [ 632.287732][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.287742][ T8766] RIP: 0033:0x7fc23088fcf7 [ 632.287754][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 632.287762][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 632.287774][ T8766] RAX: 0000000000000000 RBX: 0000000000000121 RCX: 00007fc23088fcf7 [ 632.287782][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 executing program [ 632.287788][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 632.287795][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 632.287801][ T8766] R13: 000055556206d970 R14: 000000000009a289 R15: 0000000000000090 [ 632.287817][ T8766] [ 632.287821][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 632.421145][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 632.857874][ T9800] loop0: detected capacity change from 0 to 32768 [ 632.879072][ T9800] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 632.879091][ T9800] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 632.938941][ T9800] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 632.941828][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 632.941847][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 632.992038][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 50ms [ 632.993244][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 633.017700][ T9800] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 633.139719][ T9800] gfs2: fsid=syz:syz.0: found 1 quota changes [ 633.143870][ T9800] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 633.209147][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 633.209186][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 633.209212][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 633.209238][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 633.209255][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 633.209267][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.209274][ T8766] Call Trace: [ 633.209278][ T8766] [ 633.209283][ T8766] dump_stack_lvl+0xe8/0x150 [ 633.209299][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 633.209311][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 633.209327][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 633.209336][ T8766] ? rt_spin_unlock+0x160/0x200 [ 633.209358][ T8766] gfs2_instantiate+0x168/0x220 [ 633.209371][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 633.209384][ T8766] do_sync+0x49a/0xcb0 [ 633.209398][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 633.209417][ T8766] ? __pfx_do_sync+0x10/0x10 [ 633.209429][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 633.209454][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 633.209467][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 633.209483][ T8766] ? rt_spin_unlock+0x160/0x200 [ 633.209499][ T8766] gfs2_quota_sync+0x370/0x470 [ 633.209519][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 633.209533][ T8766] sync_filesystem+0xed/0x250 [ 633.209550][ T8766] generic_shutdown_super+0x77/0x2d0 [ 633.209566][ T8766] kill_block_super+0x44/0x90 [ 633.209581][ T8766] deactivate_locked_super+0xbc/0x130 [ 633.209596][ T8766] cleanup_mnt+0x437/0x4d0 [ 633.209610][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.209624][ T8766] task_work_run+0x1d9/0x270 [ 633.209638][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 633.209655][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 633.209665][ T8766] ? rcu_is_watching+0x15/0xb0 [ 633.209678][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.209690][ T8766] do_syscall_64+0x33e/0xf80 [ 633.209701][ T8766] ? trace_irq_disable+0x3b/0x140 [ 633.209717][ T8766] ? clear_bhb_loop+0x40/0x90 [ 633.209729][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.209739][ T8766] RIP: 0033:0x7fc23088fcf7 [ 633.209751][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 633.209759][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 633.209771][ T8766] RAX: 0000000000000000 RBX: 0000000000000123 RCX: 00007fc23088fcf7 [ 633.209778][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 633.209785][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 633.209792][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 633.209798][ T8766] R13: 000055556206d970 R14: 000000000009a5ba R15: 0000000000000091 [ 633.209814][ T8766] [ 633.209818][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 633.342559][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 633.785784][ T9806] loop0: detected capacity change from 0 to 32768 [ 633.803473][ T9806] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 633.803492][ T9806] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 633.845009][ T9806] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 633.869549][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 633.869562][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 633.914470][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 633.914643][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 633.914752][ T9806] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 634.002033][ T9806] gfs2: fsid=syz:syz.0: found 1 quota changes [ 634.010935][ T9806] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 634.073044][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 634.073082][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 634.073113][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 634.073139][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 634.073156][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 634.073168][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.073174][ T8766] Call Trace: [ 634.073179][ T8766] [ 634.073184][ T8766] dump_stack_lvl+0xe8/0x150 [ 634.073204][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 634.073216][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 634.073232][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 634.073242][ T8766] ? rt_spin_unlock+0x160/0x200 [ 634.073263][ T8766] gfs2_instantiate+0x168/0x220 [ 634.073277][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 634.073290][ T8766] do_sync+0x49a/0xcb0 [ 634.073304][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 634.073322][ T8766] ? __pfx_do_sync+0x10/0x10 [ 634.073335][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 634.073356][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 634.073369][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 634.073386][ T8766] ? rt_spin_unlock+0x160/0x200 [ 634.073402][ T8766] gfs2_quota_sync+0x370/0x470 [ 634.073421][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 634.073435][ T8766] sync_filesystem+0xed/0x250 [ 634.073451][ T8766] generic_shutdown_super+0x77/0x2d0 [ 634.073467][ T8766] kill_block_super+0x44/0x90 [ 634.073482][ T8766] deactivate_locked_super+0xbc/0x130 [ 634.073496][ T8766] cleanup_mnt+0x437/0x4d0 [ 634.073510][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.073523][ T8766] task_work_run+0x1d9/0x270 [ 634.073537][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 634.073554][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 634.073564][ T8766] ? rcu_is_watching+0x15/0xb0 [ 634.073578][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.073589][ T8766] do_syscall_64+0x33e/0xf80 [ 634.073602][ T8766] ? trace_irq_disable+0x3b/0x140 [ 634.073618][ T8766] ? clear_bhb_loop+0x40/0x90 [ 634.073630][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.073640][ T8766] RIP: 0033:0x7fc23088fcf7 [ 634.073652][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 634.073660][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 634.073672][ T8766] RAX: 0000000000000000 RBX: 0000000000000125 RCX: 00007fc23088fcf7 [ 634.073679][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 634.073685][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 634.073692][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 executing program [ 634.073699][ T8766] R13: 000055556206d970 R14: 000000000009a951 R15: 0000000000000092 [ 634.073714][ T8766] [ 634.073729][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 634.210574][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 634.639166][ T9812] loop0: detected capacity change from 0 to 32768 [ 634.649596][ T9812] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 634.649615][ T9812] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 634.676618][ T9812] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 634.693833][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 634.693856][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 634.738867][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms [ 634.739105][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 634.739215][ T9812] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 634.839775][ T9812] gfs2: fsid=syz:syz.0: found 1 quota changes [ 634.842404][ T9812] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 634.900533][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 634.900567][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 634.900590][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 634.900639][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 634.900662][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 634.900679][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.900688][ T8766] Call Trace: [ 634.900694][ T8766] [ 634.900701][ T8766] dump_stack_lvl+0xe8/0x150 [ 634.900723][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 634.900741][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 634.900766][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 634.900780][ T8766] ? rt_spin_unlock+0x160/0x200 [ 634.900812][ T8766] gfs2_instantiate+0x168/0x220 [ 634.900832][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 634.900852][ T8766] do_sync+0x49a/0xcb0 [ 634.900872][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 634.900900][ T8766] ? __pfx_do_sync+0x10/0x10 [ 634.900918][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 634.900960][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 634.900979][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 634.901004][ T8766] ? rt_spin_unlock+0x160/0x200 [ 634.901027][ T8766] gfs2_quota_sync+0x370/0x470 [ 634.901056][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 634.901076][ T8766] sync_filesystem+0xed/0x250 [ 634.901101][ T8766] generic_shutdown_super+0x77/0x2d0 [ 634.901124][ T8766] kill_block_super+0x44/0x90 [ 634.901146][ T8766] deactivate_locked_super+0xbc/0x130 [ 634.901168][ T8766] cleanup_mnt+0x437/0x4d0 [ 634.901189][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.901209][ T8766] task_work_run+0x1d9/0x270 [ 634.901231][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 634.901258][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 634.901274][ T8766] ? rcu_is_watching+0x15/0xb0 [ 634.901293][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.901310][ T8766] do_syscall_64+0x33e/0xf80 [ 634.901328][ T8766] ? trace_irq_disable+0x3b/0x140 [ 634.901350][ T8766] ? clear_bhb_loop+0x40/0x90 [ 634.901369][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.901384][ T8766] RIP: 0033:0x7fc23088fcf7 [ 634.901401][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 634.901414][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 634.901431][ T8766] RAX: 0000000000000000 RBX: 0000000000000127 RCX: 00007fc23088fcf7 [ 634.901442][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 634.901451][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 634.901462][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 634.901472][ T8766] R13: 000055556206d970 R14: 000000000009acba R15: 0000000000000093 [ 634.901499][ T8766] [ 634.901520][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 635.279202][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) executing program [ 635.610581][ T9818] loop0: detected capacity change from 0 to 32768 [ 635.622311][ T9818] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 635.622330][ T9818] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 635.652085][ T9818] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 635.674825][ T8894] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 635.674846][ T8894] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 635.711968][ T8894] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 635.712836][ T8894] gfs2: fsid=syz:syz.0: jid=0: Done [ 635.712944][ T9818] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 635.819054][ T9818] gfs2: fsid=syz:syz.0: found 1 quota changes [ 635.822345][ T9818] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 635.894190][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 635.894227][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 635.894247][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 635.894272][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 635.894289][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 635.894300][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.894307][ T8766] Call Trace: [ 635.894311][ T8766] [ 635.894316][ T8766] dump_stack_lvl+0xe8/0x150 [ 635.894332][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 635.894344][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 635.894360][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 635.894370][ T8766] ? rt_spin_unlock+0x160/0x200 [ 635.894391][ T8766] gfs2_instantiate+0x168/0x220 [ 635.894404][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 635.894417][ T8766] do_sync+0x49a/0xcb0 [ 635.894431][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 635.894449][ T8766] ? __pfx_do_sync+0x10/0x10 [ 635.894461][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 635.894481][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 635.894495][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 635.894512][ T8766] ? rt_spin_unlock+0x160/0x200 [ 635.894528][ T8766] gfs2_quota_sync+0x370/0x470 [ 635.894547][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 635.894560][ T8766] sync_filesystem+0xed/0x250 [ 635.894577][ T8766] generic_shutdown_super+0x77/0x2d0 [ 635.894595][ T8766] kill_block_super+0x44/0x90 [ 635.894610][ T8766] deactivate_locked_super+0xbc/0x130 [ 635.894624][ T8766] cleanup_mnt+0x437/0x4d0 [ 635.894639][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 635.894652][ T8766] task_work_run+0x1d9/0x270 [ 635.894667][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 635.894684][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 635.894694][ T8766] ? rcu_is_watching+0x15/0xb0 [ 635.894712][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.894727][ T8766] do_syscall_64+0x33e/0xf80 [ 635.894739][ T8766] ? trace_irq_disable+0x3b/0x140 [ 635.894757][ T8766] ? clear_bhb_loop+0x40/0x90 [ 635.894770][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.894780][ T8766] RIP: 0033:0x7fc23088fcf7 [ 635.894791][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 635.894800][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 635.894814][ T8766] RAX: 0000000000000000 RBX: 0000000000000129 RCX: 00007fc23088fcf7 [ 635.894821][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 635.894827][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 635.894841][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 635.894848][ T8766] R13: 000055556206d970 R14: 000000000009b08f R15: 0000000000000094 [ 635.894864][ T8766] [ 635.894868][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 636.041722][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 636.468276][ T9824] loop0: detected capacity change from 0 to 32768 [ 636.497698][ T9824] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 636.498720][ T9824] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 636.522107][ T9824] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 636.524971][ T8894] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 636.524990][ T8894] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 636.565606][ T8894] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 40ms [ 636.566484][ T8894] gfs2: fsid=syz:syz.0: jid=0: Done [ 636.566586][ T9824] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 636.709763][ T9824] gfs2: fsid=syz:syz.0: found 1 quota changes [ 636.714814][ T9824] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 636.775833][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 636.775870][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 636.775898][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 636.775936][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 636.775961][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 636.775981][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 636.775991][ T8766] Call Trace: [ 636.775999][ T8766] [ 636.776008][ T8766] dump_stack_lvl+0xe8/0x150 [ 636.776043][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 636.776064][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 636.776093][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 636.776111][ T8766] ? rt_spin_unlock+0x160/0x200 [ 636.776148][ T8766] gfs2_instantiate+0x168/0x220 [ 636.776172][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 636.776196][ T8766] do_sync+0x49a/0xcb0 [ 636.776220][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 636.776253][ T8766] ? __pfx_do_sync+0x10/0x10 [ 636.776274][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 636.776309][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 636.776330][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 636.776360][ T8766] ? rt_spin_unlock+0x160/0x200 [ 636.776386][ T8766] gfs2_quota_sync+0x370/0x470 [ 636.776421][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 636.776445][ T8766] sync_filesystem+0xed/0x250 [ 636.776474][ T8766] generic_shutdown_super+0x77/0x2d0 [ 636.776501][ T8766] kill_block_super+0x44/0x90 [ 636.776527][ T8766] deactivate_locked_super+0xbc/0x130 [ 636.776552][ T8766] cleanup_mnt+0x437/0x4d0 [ 636.776577][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.776602][ T8766] task_work_run+0x1d9/0x270 [ 636.776625][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 636.776654][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 636.776671][ T8766] ? rcu_is_watching+0x15/0xb0 [ 636.776692][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.776709][ T8766] do_syscall_64+0x33e/0xf80 [ 636.776724][ T8766] ? trace_irq_disable+0x3b/0x140 [ 636.776740][ T8766] ? clear_bhb_loop+0x40/0x90 [ 636.776752][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.776770][ T8766] RIP: 0033:0x7fc23088fcf7 [ 636.776785][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 636.776799][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 636.776818][ T8766] RAX: 0000000000000000 RBX: 000000000000012b RCX: 00007fc23088fcf7 [ 636.776829][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 executing program [ 636.776836][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 636.776842][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 636.776849][ T8766] R13: 000055556206d970 R14: 000000000009b3ea R15: 0000000000000095 [ 636.776865][ T8766] [ 636.776879][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 636.971506][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 637.384857][ T9830] loop0: detected capacity change from 0 to 32768 [ 637.395966][ T9830] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 637.395984][ T9830] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 637.427979][ T9830] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 637.453703][ T8894] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 637.453723][ T8894] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 637.500271][ T8894] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 637.500445][ T8894] gfs2: fsid=syz:syz.0: jid=0: Done [ 637.500552][ T9830] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 637.593623][ T9830] gfs2: fsid=syz:syz.0: found 1 quota changes [ 637.602868][ T9830] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 637.660253][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 637.660287][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 637.660311][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 637.660346][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 637.660369][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 637.660386][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.660395][ T8766] Call Trace: [ 637.660402][ T8766] [ 637.660409][ T8766] dump_stack_lvl+0xe8/0x150 [ 637.660431][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 637.660450][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 637.660479][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 637.660502][ T8766] ? rt_spin_unlock+0x160/0x200 [ 637.660538][ T8766] gfs2_instantiate+0x168/0x220 [ 637.660558][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 637.660578][ T8766] do_sync+0x49a/0xcb0 [ 637.660597][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 637.660632][ T8766] ? __pfx_do_sync+0x10/0x10 [ 637.660649][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 637.660688][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 637.660706][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 637.660732][ T8766] ? rt_spin_unlock+0x160/0x200 [ 637.660755][ T8766] gfs2_quota_sync+0x370/0x470 [ 637.660784][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 637.660805][ T8766] sync_filesystem+0xed/0x250 [ 637.660830][ T8766] generic_shutdown_super+0x77/0x2d0 [ 637.660854][ T8766] kill_block_super+0x44/0x90 [ 637.660876][ T8766] deactivate_locked_super+0xbc/0x130 [ 637.660897][ T8766] cleanup_mnt+0x437/0x4d0 [ 637.660918][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.660939][ T8766] task_work_run+0x1d9/0x270 [ 637.660960][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 637.660987][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 637.661002][ T8766] ? rcu_is_watching+0x15/0xb0 [ 637.661022][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.661039][ T8766] do_syscall_64+0x33e/0xf80 [ 637.661057][ T8766] ? trace_irq_disable+0x3b/0x140 [ 637.661079][ T8766] ? clear_bhb_loop+0x40/0x90 [ 637.661098][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.661113][ T8766] RIP: 0033:0x7fc23088fcf7 [ 637.661130][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 637.661143][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 637.661161][ T8766] RAX: 0000000000000000 RBX: 000000000000012d RCX: 00007fc23088fcf7 [ 637.661172][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 637.661182][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 637.661193][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 executing program [ 637.661203][ T8766] R13: 000055556206d970 R14: 000000000009b77c R15: 0000000000000096 [ 637.661231][ T8766] [ 637.661253][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 637.841837][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 638.257472][ T9836] loop0: detected capacity change from 0 to 32768 [ 638.274277][ T9836] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 638.274297][ T9836] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 638.344154][ T9836] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 638.357663][ T8590] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 638.357685][ T8590] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 638.392491][ T8590] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 34ms [ 638.393517][ T8590] gfs2: fsid=syz:syz.0: jid=0: Done [ 638.393568][ T9836] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 638.497414][ T9836] gfs2: fsid=syz:syz.0: found 1 quota changes [ 638.500772][ T9836] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 638.562603][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 638.562637][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 638.562661][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 638.562694][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 638.562734][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 638.562752][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 638.562761][ T8766] Call Trace: [ 638.562768][ T8766] [ 638.562777][ T8766] dump_stack_lvl+0xe8/0x150 [ 638.562797][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 638.562810][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 638.562825][ T8766] ? __pfx_bit_wait+0x10/0x10 [ 638.562838][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 638.562854][ T8766] ? rt_spin_unlock+0x160/0x200 [ 638.562871][ T8766] ? __pfx_wake_bit_function+0x10/0x10 [ 638.562908][ T8766] gfs2_instantiate+0x168/0x220 [ 638.562922][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 638.562935][ T8766] do_sync+0x49a/0xcb0 [ 638.562949][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 638.562968][ T8766] ? __pfx_do_sync+0x10/0x10 [ 638.562980][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 638.563000][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 638.563013][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 638.563029][ T8766] ? rt_spin_unlock+0x160/0x200 [ 638.563045][ T8766] gfs2_quota_sync+0x370/0x470 [ 638.563064][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 638.563078][ T8766] sync_filesystem+0xed/0x250 [ 638.563094][ T8766] generic_shutdown_super+0x77/0x2d0 [ 638.563111][ T8766] kill_block_super+0x44/0x90 [ 638.563126][ T8766] deactivate_locked_super+0xbc/0x130 [ 638.563140][ T8766] cleanup_mnt+0x437/0x4d0 [ 638.563155][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 638.563169][ T8766] task_work_run+0x1d9/0x270 [ 638.563183][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 638.563199][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 638.563210][ T8766] ? rcu_is_watching+0x15/0xb0 [ 638.563223][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.563235][ T8766] do_syscall_64+0x33e/0xf80 [ 638.563247][ T8766] ? trace_irq_disable+0x3b/0x140 [ 638.563262][ T8766] ? clear_bhb_loop+0x40/0x90 executing program [ 638.563274][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.563284][ T8766] RIP: 0033:0x7fc23088fcf7 [ 638.563296][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 638.563305][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 638.563317][ T8766] RAX: 0000000000000000 RBX: 000000000000012f RCX: 00007fc23088fcf7 [ 638.563324][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 638.563330][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 638.563337][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 638.563344][ T8766] R13: 000055556206d970 R14: 000000000009bae0 R15: 0000000000000097 [ 638.563359][ T8766] [ 638.563364][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 638.691826][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 639.116406][ T9842] loop0: detected capacity change from 0 to 32768 [ 639.135835][ T9842] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 639.135864][ T9842] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 639.204519][ T9842] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 639.209550][ T8590] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 639.209570][ T8590] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 639.272720][ T8590] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms [ 639.272895][ T8590] gfs2: fsid=syz:syz.0: jid=0: Done [ 639.272947][ T9842] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 639.366345][ T9842] gfs2: fsid=syz:syz.0: found 1 quota changes [ 639.369694][ T9842] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 639.435534][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 639.435578][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 639.435603][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 639.435640][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 639.435663][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 639.435681][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.435691][ T8766] Call Trace: [ 639.435698][ T8766] [ 639.435706][ T8766] dump_stack_lvl+0xe8/0x150 [ 639.435729][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 639.435748][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 639.435775][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 639.435790][ T8766] ? rt_spin_unlock+0x160/0x200 [ 639.435824][ T8766] gfs2_instantiate+0x168/0x220 [ 639.435845][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 639.435866][ T8766] do_sync+0x49a/0xcb0 [ 639.435888][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 639.435930][ T8766] ? __pfx_do_sync+0x10/0x10 [ 639.435949][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 639.435980][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 639.436000][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 639.436025][ T8766] ? rt_spin_unlock+0x160/0x200 [ 639.436049][ T8766] gfs2_quota_sync+0x370/0x470 [ 639.436079][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 639.436101][ T8766] sync_filesystem+0xed/0x250 [ 639.436127][ T8766] generic_shutdown_super+0x77/0x2d0 [ 639.436153][ T8766] kill_block_super+0x44/0x90 [ 639.436176][ T8766] deactivate_locked_super+0xbc/0x130 [ 639.436205][ T8766] cleanup_mnt+0x437/0x4d0 [ 639.436229][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 639.436251][ T8766] task_work_run+0x1d9/0x270 [ 639.436273][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 639.436301][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 639.436317][ T8766] ? rcu_is_watching+0x15/0xb0 [ 639.436338][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.436356][ T8766] do_syscall_64+0x33e/0xf80 [ 639.436379][ T8766] ? trace_irq_disable+0x3b/0x140 [ 639.436402][ T8766] ? clear_bhb_loop+0x40/0x90 [ 639.436422][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.436438][ T8766] RIP: 0033:0x7fc23088fcf7 [ 639.436455][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 639.436469][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 639.436487][ T8766] RAX: 0000000000000000 RBX: 0000000000000131 RCX: 00007fc23088fcf7 [ 639.436498][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 639.436508][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 639.436520][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 639.436530][ T8766] R13: 000055556206d970 R14: 000000000009be0e R15: 0000000000000098 [ 639.436567][ T8766] [ 639.436574][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 639.571898][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 640.006891][ T9848] loop0: detected capacity change from 0 to 32768 [ 640.032309][ T9848] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 640.032327][ T9848] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 640.079810][ T9848] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 640.092113][ T8894] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 640.092133][ T8894] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 640.147462][ T8894] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 55ms [ 640.148590][ T8894] gfs2: fsid=syz:syz.0: jid=0: Done [ 640.148652][ T9848] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 640.262701][ T9848] gfs2: fsid=syz:syz.0: found 1 quota changes [ 640.268638][ T9848] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 640.328760][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 640.328797][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 640.328826][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 640.328855][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 640.328871][ T8766] CPU: 1 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 640.328883][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.328889][ T8766] Call Trace: [ 640.328893][ T8766] [ 640.328898][ T8766] dump_stack_lvl+0xe8/0x150 [ 640.328915][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 640.328927][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 640.328943][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 640.328953][ T8766] ? rt_spin_unlock+0x160/0x200 [ 640.328974][ T8766] gfs2_instantiate+0x168/0x220 [ 640.328987][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 640.329000][ T8766] do_sync+0x49a/0xcb0 [ 640.329014][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 640.329032][ T8766] ? __pfx_do_sync+0x10/0x10 [ 640.329045][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 640.329064][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 640.329077][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 640.329094][ T8766] ? rt_spin_unlock+0x160/0x200 [ 640.329110][ T8766] gfs2_quota_sync+0x370/0x470 [ 640.329128][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 640.329142][ T8766] sync_filesystem+0xed/0x250 [ 640.329158][ T8766] generic_shutdown_super+0x77/0x2d0 [ 640.329179][ T8766] kill_block_super+0x44/0x90 [ 640.329194][ T8766] deactivate_locked_super+0xbc/0x130 [ 640.329209][ T8766] cleanup_mnt+0x437/0x4d0 [ 640.329223][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 640.329237][ T8766] task_work_run+0x1d9/0x270 [ 640.329250][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 640.329267][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 640.329277][ T8766] ? rcu_is_watching+0x15/0xb0 [ 640.329291][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.329302][ T8766] do_syscall_64+0x33e/0xf80 [ 640.329314][ T8766] ? trace_irq_disable+0x3b/0x140 [ 640.329329][ T8766] ? clear_bhb_loop+0x40/0x90 [ 640.329341][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.329351][ T8766] RIP: 0033:0x7fc23088fcf7 [ 640.329362][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 640.329371][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 640.329383][ T8766] RAX: 0000000000000000 RBX: 0000000000000133 RCX: 00007fc23088fcf7 [ 640.329390][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 executing program [ 640.329397][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff [ 640.329404][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 640.329410][ T8766] R13: 000055556206d970 R14: 000000000009c1ad R15: 0000000000000099 [ 640.329426][ T8766] [ 640.329430][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 640.482104][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 640.915833][ T9854] loop0: detected capacity change from 0 to 32768 [ 640.937013][ T9854] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 640.937047][ T9854] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 640.993885][ T9854] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 641.004735][ T8894] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 641.004752][ T8894] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 641.041529][ T8894] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 641.041705][ T8894] gfs2: fsid=syz:syz.0: jid=0: Done [ 641.041767][ T9854] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed [ 641.136503][ T9854] gfs2: fsid=syz:syz.0: found 1 quota changes [ 641.139623][ T9854] gfs2: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 641.199363][ T8766] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 641.199400][ T8766] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 641.199427][ T8766] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:8766 [syz-executor665] gfs2_quota_sync+0x370/0x470 [ 641.199462][ T8766] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 641.199485][ T8766] CPU: 0 UID: 0 PID: 8766 Comm: syz-executor665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 641.199497][ T8766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.199503][ T8766] Call Trace: [ 641.199508][ T8766] [ 641.199514][ T8766] dump_stack_lvl+0xe8/0x150 [ 641.199530][ T8766] gfs2_withdraw+0xc3/0x1b0 [ 641.199542][ T8766] inode_go_instantiate+0xe69/0x12a0 [ 641.199558][ T8766] ? __pfx_inode_go_instantiate+0x10/0x10 [ 641.199567][ T8766] ? rt_spin_unlock+0x160/0x200 [ 641.199598][ T8766] gfs2_instantiate+0x168/0x220 [ 641.199611][ T8766] gfs2_glock_wait+0x1d7/0x2a0 [ 641.199624][ T8766] do_sync+0x49a/0xcb0 [ 641.199639][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 641.199657][ T8766] ? __pfx_do_sync+0x10/0x10 [ 641.199669][ T8766] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 641.199689][ T8766] ? gfs2_quota_sync+0x370/0x470 [ 641.199701][ T8766] ? rt_spin_unlock+0x14f/0x200 [ 641.199718][ T8766] ? rt_spin_unlock+0x160/0x200 [ 641.199734][ T8766] gfs2_quota_sync+0x370/0x470 [ 641.199753][ T8766] gfs2_sync_fs+0x4c/0xb0 [ 641.199767][ T8766] sync_filesystem+0xed/0x250 [ 641.199787][ T8766] generic_shutdown_super+0x77/0x2d0 [ 641.199804][ T8766] kill_block_super+0x44/0x90 [ 641.199819][ T8766] deactivate_locked_super+0xbc/0x130 [ 641.199833][ T8766] cleanup_mnt+0x437/0x4d0 [ 641.199848][ T8766] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.199862][ T8766] task_work_run+0x1d9/0x270 [ 641.199876][ T8766] ? __pfx_task_work_run+0x10/0x10 [ 641.199893][ T8766] exit_to_user_mode_loop+0xf3/0x4d0 [ 641.199904][ T8766] ? rcu_is_watching+0x15/0xb0 [ 641.199917][ T8766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.199929][ T8766] do_syscall_64+0x33e/0xf80 [ 641.199941][ T8766] ? trace_irq_disable+0x3b/0x140 [ 641.199957][ T8766] ? clear_bhb_loop+0x40/0x90 [ 641.199969][ T8766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.199980][ T8766] RIP: 0033:0x7fc23088fcf7 [ 641.199991][ T8766] Code: a2 c7 05 08 d4 0a 00 00 00 00 00 eb 96 e8 61 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 641.200000][ T8766] RSP: 002b:00007fffa4540808 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 641.200011][ T8766] RAX: 0000000000000000 RBX: 0000000000000135 RCX: 00007fc23088fcf7 [ 641.200018][ T8766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa45408c0 [ 641.200024][ T8766] RBP: 00007fffa45408c0 R08: 00007fffa45418c0 R09: 00000000ffffffff executing program [ 641.200031][ T8766] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffa4541970 [ 641.200043][ T8766] R13: 000055556206d970 R14: 000000000009c53a R15: 000000000000009a [ 641.200063][ T8766] [ 641.200068][ T8766] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 641.350495][ T8766] __loop_clr_fd(loop0) clearing lo_backing_file (refcnt=0x0) [ 641.780574][ T9860] loop0: detected capacity change from 0 to 32768 [ 641.804373][ T9860] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 641.804394][ T9860] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 641.844596][ T9860] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 641.854811][ T8894] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 641.854830][ T8894] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 641.903967][ T8894] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 49ms [ 641.905035][ T8894] gfs2: fsid=syz:syz.0: jid=0: Done [ 641.905086][ T9860] gfs2: fsid=syz:syz.0: first mount done, others may mount the reproducer may not work as expected: 802154 injection setup failed: NL802154_CMD_SET_SHORT_ADDR failed