Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. 2026/05/10 15:53:24 ignoring optional flag "type"="gce" 2026/05/10 15:53:24 parsed 1 programs 2026/05/10 15:53:26 executed programs: 0 [ 106.313250][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.388758][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.390887][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.391898][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.392904][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.393803][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.116891][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.117070][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.117176][ T5827] bridge_slave_0: entered allmulticast mode [ 107.118605][ T5827] bridge_slave_0: entered promiscuous mode [ 107.121760][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.121876][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.121978][ T5827] bridge_slave_1: entered allmulticast mode [ 107.123320][ T5827] bridge_slave_1: entered promiscuous mode [ 107.309232][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.311740][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.470985][ T5827] team0: Port device team_slave_0 added [ 107.473082][ T5827] team0: Port device team_slave_1 added [ 107.627391][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.627407][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.627420][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.628660][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.628671][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.628687][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.975352][ T5827] hsr_slave_0: entered promiscuous mode [ 107.979444][ T5827] hsr_slave_1: entered promiscuous mode [ 108.545621][ T4914] Bluetooth: hci0: command tx timeout [ 109.817790][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.852232][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.853767][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.891737][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.893049][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.948971][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.950416][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.002632][ T5827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.159829][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.186353][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.205192][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.214628][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.246547][ T1847] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.252413][ T1847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.625565][ T4914] Bluetooth: hci0: command tx timeout [ 110.894908][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.986067][ T5827] veth0_vlan: entered promiscuous mode [ 111.005686][ T5827] veth1_vlan: entered promiscuous mode [ 111.081519][ T5827] veth0_macvtap: entered promiscuous mode [ 111.094609][ T5827] veth1_macvtap: entered promiscuous mode [ 111.172709][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.233926][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.258890][ T1509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.259141][ T1509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.259194][ T1509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.259225][ T1509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.383043][ T5952] loop0: detected capacity change from 0 to 32768 [ 112.579837][ T5952] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 112.579856][ T5952] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.705621][ T4914] Bluetooth: hci0: command tx timeout [ 112.852733][ T5952] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 112.929214][ T5640] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 112.929236][ T5640] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 113.227042][ T5640] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 297ms [ 113.240382][ T5640] gfs2: fsid=syz:syz.0: jid=0: Done [ 113.245475][ T5952] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 113.332450][ T5952] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 113.332470][ T5952] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5952, name: syz-executor.0 [ 113.332485][ T5952] preempt_count: 1, expected: 0 [ 113.332492][ T5952] RCU nest depth: 1, expected: 1 [ 113.332514][ T5952] 4 locks held by syz-executor.0/5952: [ 113.332524][ T5952] #0: ffff88803fe420d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 113.332595][ T5952] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 113.332644][ T5952] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 113.333880][ T5952] #3: ffff8880465e4b78 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 113.333930][ T5952] Preemption disabled at: [ 113.333934][ T5952] [] spin_lock_bucket+0x3b/0x150 [ 113.333985][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz-executor.0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.334005][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.334022][ T5952] Call Trace: [ 113.334032][ T5952] [ 113.334040][ T5952] dump_stack_lvl+0xe8/0x150 [ 113.334062][ T5952] __might_resched+0x329/0x480 [ 113.334083][ T5952] ? spin_lock_bucket+0x3b/0x150 [ 113.334108][ T5952] rt_spin_lock+0xc2/0x400 [ 113.334128][ T5952] ? __pfx_rt_spin_lock+0x10/0x10 [ 113.334145][ T5952] ? preempt_count_add+0x91/0x190 [ 113.334165][ T5952] ? rt_spin_lock+0x2ce/0x400 [ 113.334186][ T5952] lockref_get_not_dead+0x28/0xd0 [ 113.334208][ T5952] gfs2_qd_search_bucket+0x139/0x210 [ 113.334235][ T5952] gfs2_quota_init+0x86c/0x1220 [ 113.334258][ T5952] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.334298][ T5952] ? __pfx_gfs2_quota_init+0x10/0x10 [ 113.334322][ T5952] ? __pfx_wake_up_bit+0x10/0x10 [ 113.334340][ T5952] ? rt_spin_unlock+0x160/0x200 [ 113.334364][ T5952] ? inode_go_inval+0x2a0/0x360 [ 113.334384][ T5952] gfs2_make_fs_rw+0x143/0x230 [ 113.334409][ T5952] gfs2_fill_super+0x1bfd/0x2220 [ 113.334440][ T5952] ? __pfx_gfs2_fill_super+0x10/0x10 [ 113.334454][ T5952] ? rt_spin_unlock+0x14f/0x200 [ 113.334471][ T5952] ? init_locking+0xb8/0x210 [ 113.334486][ T5952] ? sb_set_blocksize+0x11b/0x210 [ 113.334509][ T5952] ? setup_bdev_super+0x4c1/0x5b0 [ 113.334531][ T5952] get_tree_bdev_flags+0x431/0x4f0 [ 113.334552][ T5952] ? __pfx_gfs2_fill_super+0x10/0x10 [ 113.334570][ T5952] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 113.334587][ T5952] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 113.334609][ T5952] ? rcu_is_watching+0x15/0xb0 [ 113.334633][ T5952] ? cap_capable+0x123/0x460 [ 113.334658][ T5952] gfs2_get_tree+0x51/0x1e0 [ 113.334681][ T5952] vfs_get_tree+0x92/0x2a0 [ 113.334703][ T5952] do_new_mount+0x341/0xd30 [ 113.334724][ T5952] ? safesetid_security_capable+0xa9/0x1a0 [ 113.334751][ T5952] ? __pfx_do_new_mount+0x10/0x10 [ 113.334774][ T5952] ? ns_capable+0x89/0xe0 [ 113.334796][ T5952] ? user_path_at+0xd4/0x160 [ 113.334817][ T5952] ? user_path_at+0xd4/0x160 [ 113.334838][ T5952] __se_sys_mount+0x31d/0x420 [ 113.334868][ T5952] ? __pfx___se_sys_mount+0x10/0x10 [ 113.334898][ T5952] ? __x64_sys_mount+0x20/0xc0 [ 113.334919][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.334937][ T5952] do_syscall_64+0x15f/0xf80 [ 113.334956][ T5952] ? trace_irq_disable+0x3b/0x140 [ 113.334982][ T5952] ? clear_bhb_loop+0x40/0x90 [ 113.335004][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.335020][ T5952] RIP: 0033:0x7f9000e4ea4a [ 113.335043][ T5952] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 113.335055][ T5952] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.335072][ T5952] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 113.335084][ T5952] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 113.335095][ T5952] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 113.335105][ T5952] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 113.335115][ T5952] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 113.335144][ T5952] [ 113.335320][ T5952] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 26671 [ 113.358482][ T5952] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 113.358516][ T5952] CPU: 0 UID: 0 PID: 5952 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 113.358540][ T5952] Tainted: [W]=WARN [ 113.358545][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.358555][ T5952] Call Trace: [ 113.358562][ T5952] [ 113.358569][ T5952] dump_stack_lvl+0xe8/0x150 [ 113.358594][ T5952] gfs2_assert_warn_i+0x194/0x2c0 [ 113.358622][ T5952] gfs2_qd_dispose+0x466/0x570 [ 113.358644][ T5952] gfs2_quota_init+0xcda/0x1220 2026/05/10 15:53:33 executed programs: 1 [ 113.358667][ T5952] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 113.358706][ T5952] ? __pfx_gfs2_quota_init+0x10/0x10 [ 113.358729][ T5952] ? __pfx_wake_up_bit+0x10/0x10 [ 113.358748][ T5952] ? rt_spin_unlock+0x160/0x200 [ 113.358769][ T5952] ? inode_go_inval+0x2a0/0x360 [ 113.358789][ T5952] gfs2_make_fs_rw+0x143/0x230 [ 113.358811][ T5952] gfs2_fill_super+0x1bfd/0x2220 [ 113.358845][ T5952] ? __pfx_gfs2_fill_super+0x10/0x10 [ 113.358861][ T5952] ? rt_spin_unlock+0x14f/0x200 [ 113.358880][ T5952] ? init_locking+0xb8/0x210 [ 113.358896][ T5952] ? sb_set_blocksize+0x11b/0x210 [ 113.358921][ T5952] ? setup_bdev_super+0x4c1/0x5b0 [ 113.358943][ T5952] get_tree_bdev_flags+0x431/0x4f0 [ 113.358963][ T5952] ? __pfx_gfs2_fill_super+0x10/0x10 [ 113.358988][ T5952] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 113.359005][ T5952] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 113.359026][ T5952] ? rcu_is_watching+0x15/0xb0 [ 113.359051][ T5952] ? cap_capable+0x123/0x460 [ 113.359074][ T5952] gfs2_get_tree+0x51/0x1e0 [ 113.359095][ T5952] vfs_get_tree+0x92/0x2a0 [ 113.359116][ T5952] do_new_mount+0x341/0xd30 [ 113.359138][ T5952] ? safesetid_security_capable+0xa9/0x1a0 [ 113.359164][ T5952] ? __pfx_do_new_mount+0x10/0x10 [ 113.359186][ T5952] ? ns_capable+0x89/0xe0 [ 113.359208][ T5952] ? user_path_at+0xd4/0x160 [ 113.359229][ T5952] ? user_path_at+0xd4/0x160 [ 113.359248][ T5952] __se_sys_mount+0x31d/0x420 [ 113.359276][ T5952] ? __pfx___se_sys_mount+0x10/0x10 [ 113.359308][ T5952] ? __x64_sys_mount+0x20/0xc0 [ 113.359330][ T5952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.359349][ T5952] do_syscall_64+0x15f/0xf80 [ 113.359367][ T5952] ? trace_irq_disable+0x3b/0x140 [ 113.359387][ T5952] ? clear_bhb_loop+0x40/0x90 [ 113.359408][ T5952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.359423][ T5952] RIP: 0033:0x7f9000e4ea4a [ 113.359439][ T5952] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 113.359450][ T5952] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.359467][ T5952] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 113.359478][ T5952] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 113.359488][ T5952] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 113.359499][ T5952] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 113.359509][ T5952] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 113.359537][ T5952] [ 113.798524][ T5952] gfs2: fsid=syz:syz.0: found 1 quota changes [ 114.785914][ T4914] Bluetooth: hci0: command tx timeout [ 115.085737][ T6008] loop0: detected capacity change from 0 to 32768 [ 115.152938][ T6008] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.152958][ T6008] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.226192][ T6008] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 115.232876][ T822] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 115.232892][ T822] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 115.438575][ T822] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 205ms [ 115.438811][ T822] gfs2: fsid=syz:syz.0: jid=0: Done [ 115.440663][ T6008] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 115.573374][ T6008] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 115.573394][ T6008] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6008, name: syz-executor.0 [ 115.573410][ T6008] preempt_count: 1, expected: 0 [ 115.573418][ T6008] RCU nest depth: 1, expected: 1 [ 115.573427][ T6008] 4 locks held by syz-executor.0/6008: [ 115.573437][ T6008] #0: ffff8880368500d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 115.573494][ T6008] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 115.573539][ T6008] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 115.573577][ T6008] #3: ffff8880466cf7f8 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 115.573622][ T6008] Preemption disabled at: [ 115.573626][ T6008] [] spin_lock_bucket+0x3b/0x150 [ 115.573677][ T6008] CPU: 1 UID: 0 PID: 6008 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 115.573700][ T6008] Tainted: [W]=WARN [ 115.573704][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.573714][ T6008] Call Trace: [ 115.573721][ T6008] [ 115.573728][ T6008] dump_stack_lvl+0xe8/0x150 [ 115.573751][ T6008] __might_resched+0x329/0x480 [ 115.573771][ T6008] ? spin_lock_bucket+0x3b/0x150 [ 115.573798][ T6008] rt_spin_lock+0xc2/0x400 [ 115.573818][ T6008] ? __pfx_rt_spin_lock+0x10/0x10 [ 115.573836][ T6008] ? preempt_count_add+0x91/0x190 [ 115.573855][ T6008] ? rt_spin_lock+0x2ce/0x400 [ 115.573876][ T6008] lockref_get_not_dead+0x28/0xd0 [ 115.573898][ T6008] gfs2_qd_search_bucket+0x139/0x210 [ 115.573927][ T6008] gfs2_quota_init+0x86c/0x1220 [ 115.573958][ T6008] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.574000][ T6008] ? __pfx_gfs2_quota_init+0x10/0x10 [ 115.574024][ T6008] ? __pfx_wake_up_bit+0x10/0x10 [ 115.574043][ T6008] ? rt_spin_unlock+0x160/0x200 [ 115.574065][ T6008] ? inode_go_inval+0x2a0/0x360 [ 115.574087][ T6008] gfs2_make_fs_rw+0x143/0x230 [ 115.574110][ T6008] gfs2_fill_super+0x1bfd/0x2220 [ 115.574146][ T6008] ? __pfx_gfs2_fill_super+0x10/0x10 [ 115.574167][ T6008] ? rt_spin_unlock+0x14f/0x200 [ 115.574184][ T6008] ? init_locking+0xb8/0x210 [ 115.574200][ T6008] ? sb_set_blocksize+0x11b/0x210 [ 115.574224][ T6008] ? setup_bdev_super+0x4c1/0x5b0 [ 115.574245][ T6008] get_tree_bdev_flags+0x431/0x4f0 [ 115.574271][ T6008] ? __pfx_gfs2_fill_super+0x10/0x10 [ 115.574289][ T6008] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 115.574305][ T6008] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 115.574327][ T6008] ? rcu_is_watching+0x15/0xb0 [ 115.574351][ T6008] ? cap_capable+0x123/0x460 [ 115.574374][ T6008] gfs2_get_tree+0x51/0x1e0 [ 115.574396][ T6008] vfs_get_tree+0x92/0x2a0 [ 115.574417][ T6008] do_new_mount+0x341/0xd30 [ 115.574440][ T6008] ? safesetid_security_capable+0xa9/0x1a0 [ 115.574468][ T6008] ? __pfx_do_new_mount+0x10/0x10 [ 115.574491][ T6008] ? ns_capable+0x89/0xe0 [ 115.574513][ T6008] ? user_path_at+0xd4/0x160 [ 115.574533][ T6008] ? user_path_at+0xd4/0x160 [ 115.574553][ T6008] __se_sys_mount+0x31d/0x420 [ 115.574583][ T6008] ? __pfx___se_sys_mount+0x10/0x10 [ 115.574613][ T6008] ? __x64_sys_mount+0x20/0xc0 [ 115.574635][ T6008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.574654][ T6008] do_syscall_64+0x15f/0xf80 [ 115.574674][ T6008] ? trace_irq_disable+0x3b/0x140 [ 115.574694][ T6008] ? clear_bhb_loop+0x40/0x90 [ 115.574715][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.574732][ T6008] RIP: 0033:0x7f9000e4ea4a [ 115.574749][ T6008] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 115.574763][ T6008] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.574780][ T6008] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 115.574791][ T6008] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 115.574803][ T6008] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 115.574814][ T6008] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 115.574825][ T6008] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 115.574853][ T6008] [ 115.574886][ T6008] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 26671 [ 115.575028][ T6008] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 115.575052][ T6008] CPU: 1 UID: 0 PID: 6008 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 115.575075][ T6008] Tainted: [W]=WARN [ 115.575081][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.575090][ T6008] Call Trace: [ 115.575097][ T6008] [ 115.575103][ T6008] dump_stack_lvl+0xe8/0x150 [ 115.575126][ T6008] gfs2_assert_warn_i+0x194/0x2c0 [ 115.575154][ T6008] gfs2_qd_dispose+0x466/0x570 [ 115.575176][ T6008] gfs2_quota_init+0xcda/0x1220 [ 115.575200][ T6008] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.575241][ T6008] ? __pfx_gfs2_quota_init+0x10/0x10 [ 115.575265][ T6008] ? __pfx_wake_up_bit+0x10/0x10 [ 115.575283][ T6008] ? rt_spin_unlock+0x160/0x200 [ 115.575306][ T6008] ? inode_go_inval+0x2a0/0x360 [ 115.575326][ T6008] gfs2_make_fs_rw+0x143/0x230 [ 115.575349][ T6008] gfs2_fill_super+0x1bfd/0x2220 [ 115.575385][ T6008] ? __pfx_gfs2_fill_super+0x10/0x10 [ 115.575401][ T6008] ? rt_spin_unlock+0x14f/0x200 [ 115.575420][ T6008] ? init_locking+0xb8/0x210 [ 115.575437][ T6008] ? sb_set_blocksize+0x11b/0x210 [ 115.575462][ T6008] ? setup_bdev_super+0x4c1/0x5b0 [ 115.575485][ T6008] get_tree_bdev_flags+0x431/0x4f0 [ 115.575506][ T6008] ? __pfx_gfs2_fill_super+0x10/0x10 [ 115.575524][ T6008] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 115.575541][ T6008] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 115.575562][ T6008] ? rcu_is_watching+0x15/0xb0 [ 115.575586][ T6008] ? cap_capable+0x123/0x460 [ 115.575608][ T6008] gfs2_get_tree+0x51/0x1e0 [ 115.575630][ T6008] vfs_get_tree+0x92/0x2a0 [ 115.575652][ T6008] do_new_mount+0x341/0xd30 [ 115.575674][ T6008] ? safesetid_security_capable+0xa9/0x1a0 [ 115.575699][ T6008] ? __pfx_do_new_mount+0x10/0x10 [ 115.575721][ T6008] ? ns_capable+0x89/0xe0 [ 115.575744][ T6008] ? user_path_at+0xd4/0x160 [ 115.575766][ T6008] ? user_path_at+0xd4/0x160 [ 115.575785][ T6008] __se_sys_mount+0x31d/0x420 [ 115.575814][ T6008] ? __pfx___se_sys_mount+0x10/0x10 [ 115.575842][ T6008] ? __x64_sys_mount+0x20/0xc0 [ 115.575863][ T6008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.575881][ T6008] do_syscall_64+0x15f/0xf80 [ 115.575899][ T6008] ? trace_irq_disable+0x3b/0x140 [ 115.575918][ T6008] ? clear_bhb_loop+0x40/0x90 [ 115.575939][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.575961][ T6008] RIP: 0033:0x7f9000e4ea4a [ 115.575977][ T6008] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 115.575990][ T6008] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.576007][ T6008] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 115.576018][ T6008] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 115.576028][ T6008] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 115.576039][ T6008] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 115.576050][ T6008] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 115.576078][ T6008] [ 116.379925][ T6008] gfs2: fsid=syz:syz.0: found 1 quota changes [ 116.969177][ T6045] loop0: detected capacity change from 0 to 32768 [ 117.010739][ T6045] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 117.010759][ T6045] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 117.103475][ T6045] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 117.107781][ T5651] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 117.107806][ T5651] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 117.297253][ T5651] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 189ms [ 117.297417][ T5651] gfs2: fsid=syz:syz.0: jid=0: Done [ 117.297523][ T6045] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 117.361225][ T6045] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 117.361241][ T6045] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6045, name: syz-executor.0 [ 117.361249][ T6045] preempt_count: 1, expected: 0 [ 117.361254][ T6045] RCU nest depth: 1, expected: 1 [ 117.361259][ T6045] 4 locks held by syz-executor.0/6045: [ 117.361265][ T6045] #0: ffff888033b7c0d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 117.361299][ T6045] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 117.361327][ T6045] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 117.361371][ T6045] #3: ffff8880465e4858 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 117.361398][ T6045] Preemption disabled at: [ 117.361400][ T6045] [] spin_lock_bucket+0x3b/0x150 [ 117.361423][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 117.361436][ T6045] Tainted: [W]=WARN [ 117.361439][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.361445][ T6045] Call Trace: [ 117.361450][ T6045] [ 117.361455][ T6045] dump_stack_lvl+0xe8/0x150 [ 117.361468][ T6045] __might_resched+0x329/0x480 [ 117.361480][ T6045] ? spin_lock_bucket+0x3b/0x150 [ 117.361496][ T6045] rt_spin_lock+0xc2/0x400 [ 117.361543][ T6045] ? __pfx_rt_spin_lock+0x10/0x10 [ 117.361555][ T6045] ? preempt_count_add+0x91/0x190 [ 117.361574][ T6045] ? rt_spin_lock+0x2ce/0x400 [ 117.361584][ T6045] lockref_get_not_dead+0x28/0xd0 [ 117.361596][ T6045] gfs2_qd_search_bucket+0x139/0x210 [ 117.361613][ T6045] gfs2_quota_init+0x86c/0x1220 [ 117.361627][ T6045] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.361649][ T6045] ? __pfx_gfs2_quota_init+0x10/0x10 [ 117.361663][ T6045] ? __pfx_wake_up_bit+0x10/0x10 [ 117.361674][ T6045] ? rt_spin_unlock+0x160/0x200 [ 117.361687][ T6045] ? inode_go_inval+0x2a0/0x360 [ 117.361700][ T6045] gfs2_make_fs_rw+0x143/0x230 [ 117.361714][ T6045] gfs2_fill_super+0x1bfd/0x2220 [ 117.361733][ T6045] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.361743][ T6045] ? rt_spin_unlock+0x14f/0x200 [ 117.361754][ T6045] ? init_locking+0xb8/0x210 [ 117.361763][ T6045] ? sb_set_blocksize+0x11b/0x210 [ 117.361778][ T6045] ? setup_bdev_super+0x4c1/0x5b0 [ 117.361791][ T6045] get_tree_bdev_flags+0x431/0x4f0 [ 117.361802][ T6045] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.361815][ T6045] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.361825][ T6045] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 117.361837][ T6045] ? rcu_is_watching+0x15/0xb0 [ 117.361852][ T6045] ? cap_capable+0x123/0x460 [ 117.361866][ T6045] gfs2_get_tree+0x51/0x1e0 [ 117.361879][ T6045] vfs_get_tree+0x92/0x2a0 [ 117.361892][ T6045] do_new_mount+0x341/0xd30 [ 117.361906][ T6045] ? safesetid_security_capable+0xa9/0x1a0 [ 117.361921][ T6045] ? __pfx_do_new_mount+0x10/0x10 [ 117.361935][ T6045] ? ns_capable+0x89/0xe0 [ 117.361948][ T6045] ? user_path_at+0xd4/0x160 [ 117.361959][ T6045] ? user_path_at+0xd4/0x160 [ 117.361970][ T6045] __se_sys_mount+0x31d/0x420 [ 117.361987][ T6045] ? __pfx___se_sys_mount+0x10/0x10 [ 117.362004][ T6045] ? __x64_sys_mount+0x20/0xc0 [ 117.362017][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.362028][ T6045] do_syscall_64+0x15f/0xf80 [ 117.362040][ T6045] ? trace_irq_disable+0x3b/0x140 [ 117.362052][ T6045] ? clear_bhb_loop+0x40/0x90 [ 117.362064][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.362074][ T6045] RIP: 0033:0x7f9000e4ea4a [ 117.362084][ T6045] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 117.362092][ T6045] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.362102][ T6045] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 117.362109][ T6045] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 117.362115][ T6045] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 117.362121][ T6045] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 117.362127][ T6045] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 117.362142][ T6045] [ 117.362155][ T6045] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 26671 [ 117.362935][ T6045] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 117.362952][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 117.362965][ T6045] Tainted: [W]=WARN [ 117.362968][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.362974][ T6045] Call Trace: [ 117.362978][ T6045] [ 117.362982][ T6045] dump_stack_lvl+0xe8/0x150 [ 117.362997][ T6045] gfs2_assert_warn_i+0x194/0x2c0 [ 117.363013][ T6045] gfs2_qd_dispose+0x466/0x570 [ 117.363025][ T6045] gfs2_quota_init+0xcda/0x1220 [ 117.363039][ T6045] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 117.363062][ T6045] ? __pfx_gfs2_quota_init+0x10/0x10 [ 117.363076][ T6045] ? __pfx_wake_up_bit+0x10/0x10 [ 117.363087][ T6045] ? rt_spin_unlock+0x160/0x200 [ 117.363099][ T6045] ? inode_go_inval+0x2a0/0x360 [ 117.363110][ T6045] gfs2_make_fs_rw+0x143/0x230 [ 117.363123][ T6045] gfs2_fill_super+0x1bfd/0x2220 [ 117.363141][ T6045] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.363151][ T6045] ? rt_spin_unlock+0x14f/0x200 [ 117.363161][ T6045] ? init_locking+0xb8/0x210 [ 117.363170][ T6045] ? sb_set_blocksize+0x11b/0x210 [ 117.363185][ T6045] ? setup_bdev_super+0x4c1/0x5b0 [ 117.363198][ T6045] get_tree_bdev_flags+0x431/0x4f0 [ 117.363210][ T6045] ? __pfx_gfs2_fill_super+0x10/0x10 [ 117.363220][ T6045] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 117.363230][ T6045] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 117.363242][ T6045] ? rcu_is_watching+0x15/0xb0 [ 117.363256][ T6045] ? cap_capable+0x123/0x460 [ 117.363269][ T6045] gfs2_get_tree+0x51/0x1e0 [ 117.363281][ T6045] vfs_get_tree+0x92/0x2a0 [ 117.363294][ T6045] do_new_mount+0x341/0xd30 [ 117.363308][ T6045] ? safesetid_security_capable+0xa9/0x1a0 [ 117.363323][ T6045] ? __pfx_do_new_mount+0x10/0x10 [ 117.363336][ T6045] ? ns_capable+0x89/0xe0 [ 117.363349][ T6045] ? user_path_at+0xd4/0x160 [ 117.363360][ T6045] ? user_path_at+0xd4/0x160 [ 117.363371][ T6045] __se_sys_mount+0x31d/0x420 [ 117.363388][ T6045] ? __pfx___se_sys_mount+0x10/0x10 [ 117.363405][ T6045] ? __x64_sys_mount+0x20/0xc0 [ 117.363418][ T6045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.363428][ T6045] do_syscall_64+0x15f/0xf80 [ 117.363440][ T6045] ? trace_irq_disable+0x3b/0x140 [ 117.363451][ T6045] ? clear_bhb_loop+0x40/0x90 [ 117.363463][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.363472][ T6045] RIP: 0033:0x7f9000e4ea4a [ 117.363482][ T6045] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 117.363489][ T6045] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.363499][ T6045] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 117.363506][ T6045] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 117.363512][ T6045] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 117.363518][ T6045] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 117.363524][ T6045] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 117.363538][ T6045] [ 117.740687][ T6045] gfs2: fsid=syz:syz.0: found 1 quota changes [ 118.474804][ T6055] loop0: detected capacity change from 0 to 32768 [ 118.502777][ T6055] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 118.502805][ T6055] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 118.561947][ T6055] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 4ms [ 118.575947][ T5651] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 118.575980][ T5651] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 118.683235][ T5651] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms [ 118.687442][ T5651] gfs2: fsid=syz:syz.0: jid=0: Done [ 118.699905][ T6055] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 118.761360][ T6055] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 118.761444][ T6055] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6055, name: syz-executor.0 [ 118.761459][ T6055] preempt_count: 1, expected: 0 [ 118.761467][ T6055] RCU nest depth: 1, expected: 1 [ 118.761475][ T6055] 4 locks held by syz-executor.0/6055: [ 118.761485][ T6055] #0: ffff8880380240d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 118.761522][ T6055] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 118.761550][ T6055] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 118.761573][ T6055] #3: ffff8880466cf4d8 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 118.761603][ T6055] Preemption disabled at: [ 118.761607][ T6055] [] spin_lock_bucket+0x3b/0x150 [ 118.761640][ T6055] CPU: 1 UID: 0 PID: 6055 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 118.761662][ T6055] Tainted: [W]=WARN [ 118.761667][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.761676][ T6055] Call Trace: [ 118.761683][ T6055] [ 118.761690][ T6055] dump_stack_lvl+0xe8/0x150 [ 118.761713][ T6055] __might_resched+0x329/0x480 [ 118.761734][ T6055] ? spin_lock_bucket+0x3b/0x150 [ 118.761760][ T6055] rt_spin_lock+0xc2/0x400 [ 118.761776][ T6055] ? __pfx_rt_spin_lock+0x10/0x10 [ 118.761786][ T6055] ? preempt_count_add+0x91/0x190 [ 118.761797][ T6055] ? rt_spin_lock+0x2ce/0x400 [ 118.761808][ T6055] lockref_get_not_dead+0x28/0xd0 [ 118.761820][ T6055] gfs2_qd_search_bucket+0x139/0x210 [ 118.761837][ T6055] gfs2_quota_init+0x86c/0x1220 [ 118.761851][ T6055] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.761873][ T6055] ? __pfx_gfs2_quota_init+0x10/0x10 [ 118.761887][ T6055] ? __pfx_wake_up_bit+0x10/0x10 [ 118.761900][ T6055] ? rt_spin_unlock+0x160/0x200 [ 118.761914][ T6055] ? inode_go_inval+0x2a0/0x360 [ 118.761926][ T6055] gfs2_make_fs_rw+0x143/0x230 [ 118.761939][ T6055] gfs2_fill_super+0x1bfd/0x2220 [ 118.761958][ T6055] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.761968][ T6055] ? rt_spin_unlock+0x14f/0x200 [ 118.761978][ T6055] ? init_locking+0xb8/0x210 [ 118.761988][ T6055] ? sb_set_blocksize+0x11b/0x210 [ 118.762003][ T6055] ? setup_bdev_super+0x4c1/0x5b0 [ 118.762016][ T6055] get_tree_bdev_flags+0x431/0x4f0 [ 118.762027][ T6055] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.762037][ T6055] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 118.762047][ T6055] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 118.762060][ T6055] ? rcu_is_watching+0x15/0xb0 [ 118.762075][ T6055] ? cap_capable+0x123/0x460 [ 118.762089][ T6055] gfs2_get_tree+0x51/0x1e0 [ 118.762101][ T6055] vfs_get_tree+0x92/0x2a0 [ 118.762113][ T6055] do_new_mount+0x341/0xd30 [ 118.762127][ T6055] ? safesetid_security_capable+0xa9/0x1a0 [ 118.762142][ T6055] ? __pfx_do_new_mount+0x10/0x10 [ 118.762156][ T6055] ? ns_capable+0x89/0xe0 [ 118.762168][ T6055] ? user_path_at+0xd4/0x160 [ 118.762180][ T6055] ? user_path_at+0xd4/0x160 [ 118.762191][ T6055] __se_sys_mount+0x31d/0x420 [ 118.762207][ T6055] ? __pfx___se_sys_mount+0x10/0x10 [ 118.762224][ T6055] ? __x64_sys_mount+0x20/0xc0 [ 118.762238][ T6055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.762248][ T6055] do_syscall_64+0x15f/0xf80 [ 118.762259][ T6055] ? trace_irq_disable+0x3b/0x140 [ 118.762271][ T6055] ? clear_bhb_loop+0x40/0x90 [ 118.762283][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.762292][ T6055] RIP: 0033:0x7f9000e4ea4a [ 118.762302][ T6055] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 118.762310][ T6055] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.762320][ T6055] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 118.762327][ T6055] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 118.762333][ T6055] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 118.762339][ T6055] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 118.762345][ T6055] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 118.762360][ T6055] [ 118.762378][ T6055] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 26671 [ 118.762395][ T6055] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 118.762408][ T6055] CPU: 1 UID: 0 PID: 6055 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 118.762420][ T6055] Tainted: [W]=WARN [ 118.762423][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.762428][ T6055] Call Trace: [ 118.762431][ T6055] [ 118.762435][ T6055] dump_stack_lvl+0xe8/0x150 [ 118.762447][ T6055] gfs2_assert_warn_i+0x194/0x2c0 [ 118.762462][ T6055] gfs2_qd_dispose+0x466/0x570 [ 118.762474][ T6055] gfs2_quota_init+0xcda/0x1220 [ 118.762487][ T6055] ? _raw_spin_unlock_irqrestore+0x30/0x80 2026/05/10 15:53:39 executed programs: 4 [ 118.762508][ T6055] ? __pfx_gfs2_quota_init+0x10/0x10 [ 118.762522][ T6055] ? __pfx_wake_up_bit+0x10/0x10 [ 118.762532][ T6055] ? rt_spin_unlock+0x160/0x200 [ 118.762544][ T6055] ? inode_go_inval+0x2a0/0x360 [ 118.762554][ T6055] gfs2_make_fs_rw+0x143/0x230 [ 118.762567][ T6055] gfs2_fill_super+0x1bfd/0x2220 [ 118.762585][ T6055] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.762595][ T6055] ? rt_spin_unlock+0x14f/0x200 [ 118.762605][ T6055] ? init_locking+0xb8/0x210 [ 118.762617][ T6055] ? sb_set_blocksize+0x11b/0x210 [ 118.762630][ T6055] ? setup_bdev_super+0x4c1/0x5b0 [ 118.762643][ T6055] get_tree_bdev_flags+0x431/0x4f0 [ 118.762654][ T6055] ? __pfx_gfs2_fill_super+0x10/0x10 [ 118.762664][ T6055] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 118.762675][ T6055] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 118.762686][ T6055] ? rcu_is_watching+0x15/0xb0 [ 118.762700][ T6055] ? cap_capable+0x123/0x460 [ 118.762713][ T6055] gfs2_get_tree+0x51/0x1e0 [ 118.762725][ T6055] vfs_get_tree+0x92/0x2a0 [ 118.762737][ T6055] do_new_mount+0x341/0xd30 [ 118.762753][ T6055] ? safesetid_security_capable+0xa9/0x1a0 [ 118.762777][ T6055] ? __pfx_do_new_mount+0x10/0x10 [ 118.762799][ T6055] ? ns_capable+0x89/0xe0 [ 118.762820][ T6055] ? user_path_at+0xd4/0x160 [ 118.762841][ T6055] ? user_path_at+0xd4/0x160 [ 118.762859][ T6055] __se_sys_mount+0x31d/0x420 [ 118.762878][ T6055] ? __pfx___se_sys_mount+0x10/0x10 [ 118.762895][ T6055] ? __x64_sys_mount+0x20/0xc0 [ 118.762908][ T6055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.762918][ T6055] do_syscall_64+0x15f/0xf80 [ 118.762929][ T6055] ? trace_irq_disable+0x3b/0x140 [ 118.762940][ T6055] ? clear_bhb_loop+0x40/0x90 [ 118.762952][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.762961][ T6055] RIP: 0033:0x7f9000e4ea4a [ 118.762969][ T6055] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 118.762977][ T6055] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.762986][ T6055] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 118.762993][ T6055] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 118.762999][ T6055] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 118.763005][ T6055] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 118.763010][ T6055] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 118.763025][ T6055] [ 119.255558][ T6055] gfs2: fsid=syz:syz.0: found 1 quota changes [ 119.864003][ T6064] loop0: detected capacity change from 0 to 32768 [ 119.893387][ T6064] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 119.893404][ T6064] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 119.927213][ T6064] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 119.953717][ T5651] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 119.953735][ T5651] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 120.118881][ T5651] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 165ms [ 120.119064][ T5651] gfs2: fsid=syz:syz.0: jid=0: Done [ 120.119180][ T6064] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 120.181994][ T6064] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 120.182022][ T6064] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6064, name: syz-executor.0 [ 120.182041][ T6064] preempt_count: 1, expected: 0 [ 120.182049][ T6064] RCU nest depth: 1, expected: 1 [ 120.182058][ T6064] 4 locks held by syz-executor.0/6064: [ 120.182068][ T6064] #0: ffff88803de200d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 120.182145][ T6064] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 120.182192][ T6064] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 120.182233][ T6064] #3: ffff8880466cf1b8 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 120.182270][ T6064] Preemption disabled at: [ 120.182272][ T6064] [] spin_lock_bucket+0x3b/0x150 [ 120.182298][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 120.182311][ T6064] Tainted: [W]=WARN [ 120.182314][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.182322][ T6064] Call Trace: [ 120.182328][ T6064] [ 120.182334][ T6064] dump_stack_lvl+0xe8/0x150 [ 120.182352][ T6064] __might_resched+0x329/0x480 [ 120.182368][ T6064] ? spin_lock_bucket+0x3b/0x150 [ 120.182383][ T6064] rt_spin_lock+0xc2/0x400 [ 120.182394][ T6064] ? __pfx_rt_spin_lock+0x10/0x10 [ 120.182404][ T6064] ? preempt_count_add+0x91/0x190 [ 120.182415][ T6064] ? rt_spin_lock+0x2ce/0x400 [ 120.182426][ T6064] lockref_get_not_dead+0x28/0xd0 [ 120.182438][ T6064] gfs2_qd_search_bucket+0x139/0x210 [ 120.182455][ T6064] gfs2_quota_init+0x86c/0x1220 [ 120.182469][ T6064] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.182491][ T6064] ? __pfx_gfs2_quota_init+0x10/0x10 [ 120.182506][ T6064] ? __pfx_wake_up_bit+0x10/0x10 [ 120.182516][ T6064] ? rt_spin_unlock+0x160/0x200 [ 120.182528][ T6064] ? inode_go_inval+0x2a0/0x360 [ 120.182540][ T6064] gfs2_make_fs_rw+0x143/0x230 [ 120.182554][ T6064] gfs2_fill_super+0x1bfd/0x2220 [ 120.182580][ T6064] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.182590][ T6064] ? rt_spin_unlock+0x14f/0x200 [ 120.182600][ T6064] ? init_locking+0xb8/0x210 [ 120.182610][ T6064] ? sb_set_blocksize+0x11b/0x210 [ 120.182625][ T6064] ? setup_bdev_super+0x4c1/0x5b0 [ 120.182638][ T6064] get_tree_bdev_flags+0x431/0x4f0 [ 120.182650][ T6064] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.182660][ T6064] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 120.182670][ T6064] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 120.182683][ T6064] ? rcu_is_watching+0x15/0xb0 [ 120.182698][ T6064] ? cap_capable+0x123/0x460 [ 120.182712][ T6064] gfs2_get_tree+0x51/0x1e0 [ 120.182724][ T6064] vfs_get_tree+0x92/0x2a0 [ 120.182737][ T6064] do_new_mount+0x341/0xd30 [ 120.182751][ T6064] ? safesetid_security_capable+0xa9/0x1a0 [ 120.182767][ T6064] ? __pfx_do_new_mount+0x10/0x10 [ 120.182781][ T6064] ? ns_capable+0x89/0xe0 [ 120.182794][ T6064] ? user_path_at+0xd4/0x160 [ 120.182806][ T6064] ? user_path_at+0xd4/0x160 [ 120.182817][ T6064] __se_sys_mount+0x31d/0x420 [ 120.182834][ T6064] ? __pfx___se_sys_mount+0x10/0x10 [ 120.182851][ T6064] ? __x64_sys_mount+0x20/0xc0 [ 120.182864][ T6064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.182875][ T6064] do_syscall_64+0x15f/0xf80 [ 120.182887][ T6064] ? trace_irq_disable+0x3b/0x140 [ 120.182898][ T6064] ? clear_bhb_loop+0x40/0x90 [ 120.182911][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.182920][ T6064] RIP: 0033:0x7f9000e4ea4a [ 120.182934][ T6064] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 120.182942][ T6064] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.182952][ T6064] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 120.182959][ T6064] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 120.182965][ T6064] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 120.182971][ T6064] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 120.182977][ T6064] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 120.182992][ T6064] [ 120.183004][ T6064] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 26671 [ 120.183021][ T6064] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 120.183033][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 120.183045][ T6064] Tainted: [W]=WARN [ 120.183048][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.183053][ T6064] Call Trace: [ 120.183056][ T6064] [ 120.183060][ T6064] dump_stack_lvl+0xe8/0x150 [ 120.183071][ T6064] gfs2_assert_warn_i+0x194/0x2c0 [ 120.183087][ T6064] gfs2_qd_dispose+0x466/0x570 [ 120.183099][ T6064] gfs2_quota_init+0xcda/0x1220 [ 120.183113][ T6064] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 120.183134][ T6064] ? __pfx_gfs2_quota_init+0x10/0x10 [ 120.183147][ T6064] ? __pfx_wake_up_bit+0x10/0x10 [ 120.183158][ T6064] ? rt_spin_unlock+0x160/0x200 [ 120.183169][ T6064] ? inode_go_inval+0x2a0/0x360 [ 120.183180][ T6064] gfs2_make_fs_rw+0x143/0x230 [ 120.183193][ T6064] gfs2_fill_super+0x1bfd/0x2220 [ 120.183212][ T6064] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.183221][ T6064] ? rt_spin_unlock+0x14f/0x200 [ 120.183234][ T6064] ? init_locking+0xb8/0x210 [ 120.183250][ T6064] ? sb_set_blocksize+0x11b/0x210 [ 120.183271][ T6064] ? setup_bdev_super+0x4c1/0x5b0 [ 120.183291][ T6064] get_tree_bdev_flags+0x431/0x4f0 [ 120.183310][ T6064] ? __pfx_gfs2_fill_super+0x10/0x10 [ 120.183328][ T6064] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 120.183345][ T6064] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 120.183364][ T6064] ? rcu_is_watching+0x15/0xb0 [ 120.183381][ T6064] ? cap_capable+0x123/0x460 [ 120.183394][ T6064] gfs2_get_tree+0x51/0x1e0 [ 120.183406][ T6064] vfs_get_tree+0x92/0x2a0 [ 120.183419][ T6064] do_new_mount+0x341/0xd30 [ 120.183432][ T6064] ? safesetid_security_capable+0xa9/0x1a0 [ 120.183447][ T6064] ? __pfx_do_new_mount+0x10/0x10 [ 120.183460][ T6064] ? ns_capable+0x89/0xe0 [ 120.183472][ T6064] ? user_path_at+0xd4/0x160 [ 120.183484][ T6064] ? user_path_at+0xd4/0x160 [ 120.183495][ T6064] __se_sys_mount+0x31d/0x420 [ 120.183511][ T6064] ? __pfx___se_sys_mount+0x10/0x10 [ 120.183528][ T6064] ? __x64_sys_mount+0x20/0xc0 [ 120.183542][ T6064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.183552][ T6064] do_syscall_64+0x15f/0xf80 [ 120.183563][ T6064] ? trace_irq_disable+0x3b/0x140 [ 120.183580][ T6064] ? clear_bhb_loop+0x40/0x90 [ 120.183591][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.183601][ T6064] RIP: 0033:0x7f9000e4ea4a [ 120.183609][ T6064] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 120.183617][ T6064] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 120.183626][ T6064] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 120.183633][ T6064] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 120.183639][ T6064] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 120.183645][ T6064] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 120.183651][ T6064] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 120.183665][ T6064] [ 120.572040][ T6064] gfs2: fsid=syz:syz.0: found 1 quota changes [ 121.238007][ T6070] loop0: detected capacity change from 0 to 32768 [ 121.278554][ T6070] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 121.278571][ T6070] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 121.314992][ T6070] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 121.324719][ T5651] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 121.324737][ T5651] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 121.488775][ T5651] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 164ms [ 121.488961][ T5651] gfs2: fsid=syz:syz.0: jid=0: Done [ 121.489061][ T6070] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 121.577173][ T6070] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 121.577193][ T6070] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6070, name: syz-executor.0 [ 121.577209][ T6070] preempt_count: 1, expected: 0 [ 121.577217][ T6070] RCU nest depth: 1, expected: 1 [ 121.577226][ T6070] 4 locks held by syz-executor.0/6070: [ 121.577235][ T6070] #0: ffff88801120c0d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 121.577293][ T6070] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 121.577333][ T6070] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 121.577355][ T6070] #3: ffff8880465e4538 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 121.577386][ T6070] Preemption disabled at: [ 121.577389][ T6070] [] spin_lock_bucket+0x3b/0x150 [ 121.577412][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 121.577425][ T6070] Tainted: [W]=WARN [ 121.577428][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.577434][ T6070] Call Trace: [ 121.577438][ T6070] [ 121.577443][ T6070] dump_stack_lvl+0xe8/0x150 [ 121.577455][ T6070] __might_resched+0x329/0x480 [ 121.577467][ T6070] ? spin_lock_bucket+0x3b/0x150 [ 121.577483][ T6070] rt_spin_lock+0xc2/0x400 [ 121.577493][ T6070] ? __pfx_rt_spin_lock+0x10/0x10 [ 121.577503][ T6070] ? preempt_count_add+0x91/0x190 [ 121.577514][ T6070] ? rt_spin_lock+0x2ce/0x400 [ 121.577525][ T6070] lockref_get_not_dead+0x28/0xd0 [ 121.577537][ T6070] gfs2_qd_search_bucket+0x139/0x210 [ 121.577554][ T6070] gfs2_quota_init+0x86c/0x1220 [ 121.577570][ T6070] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.577592][ T6070] ? __pfx_gfs2_quota_init+0x10/0x10 [ 121.577606][ T6070] ? __pfx_wake_up_bit+0x10/0x10 [ 121.577617][ T6070] ? rt_spin_unlock+0x160/0x200 [ 121.577629][ T6070] ? inode_go_inval+0x2a0/0x360 [ 121.577640][ T6070] gfs2_make_fs_rw+0x143/0x230 [ 121.577654][ T6070] gfs2_fill_super+0x1bfd/0x2220 [ 121.577673][ T6070] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.577682][ T6070] ? rt_spin_unlock+0x14f/0x200 [ 121.577693][ T6070] ? init_locking+0xb8/0x210 [ 121.577702][ T6070] ? sb_set_blocksize+0x11b/0x210 [ 121.577717][ T6070] ? setup_bdev_super+0x4c1/0x5b0 [ 121.577730][ T6070] get_tree_bdev_flags+0x431/0x4f0 [ 121.577741][ T6070] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.577752][ T6070] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 121.577762][ T6070] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 121.577774][ T6070] ? rcu_is_watching+0x15/0xb0 [ 121.577789][ T6070] ? cap_capable+0x123/0x460 [ 121.577802][ T6070] gfs2_get_tree+0x51/0x1e0 [ 121.577815][ T6070] vfs_get_tree+0x92/0x2a0 [ 121.577827][ T6070] do_new_mount+0x341/0xd30 [ 121.577841][ T6070] ? safesetid_security_capable+0xa9/0x1a0 [ 121.577856][ T6070] ? __pfx_do_new_mount+0x10/0x10 [ 121.577869][ T6070] ? ns_capable+0x89/0xe0 [ 121.577883][ T6070] ? user_path_at+0xd4/0x160 [ 121.577894][ T6070] ? user_path_at+0xd4/0x160 [ 121.577905][ T6070] __se_sys_mount+0x31d/0x420 [ 121.577922][ T6070] ? __pfx___se_sys_mount+0x10/0x10 [ 121.577939][ T6070] ? __x64_sys_mount+0x20/0xc0 [ 121.577952][ T6070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.577963][ T6070] do_syscall_64+0x15f/0xf80 [ 121.577974][ T6070] ? trace_irq_disable+0x3b/0x140 [ 121.577986][ T6070] ? clear_bhb_loop+0x40/0x90 [ 121.577998][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.578007][ T6070] RIP: 0033:0x7f9000e4ea4a [ 121.578017][ T6070] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 121.578025][ T6070] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.578035][ T6070] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 121.578042][ T6070] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 121.578048][ T6070] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 121.578054][ T6070] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 121.578059][ T6070] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 121.578074][ T6070] [ 121.578085][ T6070] gfs2: fsid=syz:syz.0: Corruption found in quota_change0file: duplicate identifier in slot 26671 [ 121.578102][ T6070] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed - function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129 [ 121.578127][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 121.578147][ T6070] Tainted: [W]=WARN [ 121.578152][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.578159][ T6070] Call Trace: [ 121.578165][ T6070] [ 121.578171][ T6070] dump_stack_lvl+0xe8/0x150 [ 121.578191][ T6070] gfs2_assert_warn_i+0x194/0x2c0 [ 121.578217][ T6070] gfs2_qd_dispose+0x466/0x570 [ 121.578238][ T6070] gfs2_quota_init+0xcda/0x1220 [ 121.578255][ T6070] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 121.578276][ T6070] ? __pfx_gfs2_quota_init+0x10/0x10 [ 121.578290][ T6070] ? __pfx_wake_up_bit+0x10/0x10 [ 121.578300][ T6070] ? rt_spin_unlock+0x160/0x200 [ 121.578312][ T6070] ? inode_go_inval+0x2a0/0x360 [ 121.578324][ T6070] gfs2_make_fs_rw+0x143/0x230 [ 121.578346][ T6070] gfs2_fill_super+0x1bfd/0x2220 [ 121.578367][ T6070] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.578377][ T6070] ? rt_spin_unlock+0x14f/0x200 [ 121.578387][ T6070] ? init_locking+0xb8/0x210 [ 121.578397][ T6070] ? sb_set_blocksize+0x11b/0x210 [ 121.578410][ T6070] ? setup_bdev_super+0x4c1/0x5b0 [ 121.578423][ T6070] get_tree_bdev_flags+0x431/0x4f0 [ 121.578435][ T6070] ? __pfx_gfs2_fill_super+0x10/0x10 [ 121.578445][ T6070] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 121.578455][ T6070] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 121.578467][ T6070] ? rcu_is_watching+0x15/0xb0 [ 121.578481][ T6070] ? cap_capable+0x123/0x460 [ 121.578494][ T6070] gfs2_get_tree+0x51/0x1e0 [ 121.578507][ T6070] vfs_get_tree+0x92/0x2a0 [ 121.578519][ T6070] do_new_mount+0x341/0xd30 [ 121.578532][ T6070] ? safesetid_security_capable+0xa9/0x1a0 [ 121.578547][ T6070] ? __pfx_do_new_mount+0x10/0x10 [ 121.578561][ T6070] ? ns_capable+0x89/0xe0 [ 121.578572][ T6070] ? user_path_at+0xd4/0x160 [ 121.578584][ T6070] ? user_path_at+0xd4/0x160 [ 121.578595][ T6070] __se_sys_mount+0x31d/0x420 [ 121.578611][ T6070] ? __pfx___se_sys_mount+0x10/0x10 [ 121.578629][ T6070] ? __x64_sys_mount+0x20/0xc0 [ 121.578642][ T6070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.578652][ T6070] do_syscall_64+0x15f/0xf80 [ 121.578663][ T6070] ? trace_irq_disable+0x3b/0x140 [ 121.578674][ T6070] ? clear_bhb_loop+0x40/0x90 [ 121.578686][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.578695][ T6070] RIP: 0033:0x7f9000e4ea4a [ 121.578704][ T6070] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 121.578711][ T6070] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.578721][ T6070] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 121.578728][ T6070] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 121.578734][ T6070] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000 [ 121.578740][ T6070] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000020013440 [ 121.578745][ T6070] R13: 00007f90001ddef0 R14: 000000000001343f R15: 0000000020002380 [ 121.578760][ T6070] [ 121.949973][ T6070] gfs2: fsid=syz:syz.0: found 1 quota changes [ 122.638502][ T6076] loop0: detected capacity change from 0 to 32768 [ 122.663130][ T6076] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 122.663146][ T6076] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 122.693799][ T6076] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 122.701348][ T5651] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 122.701367][ T5651] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 122.871830][ T5651] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 170ms [ 122.872061][ T5651] gfs2: fsid=syz:syz.0: jid=0: Done [ 122.872171][ T6076] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 122.938294][ T6076] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 122.938315][ T6076] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6076, name: syz-executor.0 [ 122.938330][ T6076] preempt_count: 1, expected: 0 [ 122.938338][ T6076] RCU nest depth: 1, expected: 1 [ 122.938346][ T6076] 4 locks held by syz-executor.0/6076: [ 122.938357][ T6076] #0: ffff88803b7320d0 (&type->s_umount_key#52/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xac0 [ 122.938413][ T6076] #1: ffffffff8e620578 (qd_lock){+.+.}-{3:3}, at: gfs2_quota_init+0x854/0x1220 [ 122.938441][ T6076] #2: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 122.938464][ T6076] #3: ffff8880466cee98 (&lockref->lock#3){+.+.}-{3:3}, at: lockref_get_not_dead+0x28/0xd0 [ 122.938489][ T6076] Preemption disabled at: [ 122.938492][ T6076] [] spin_lock_bucket+0x3b/0x150 [ 122.938514][ T6076] CPU: 1 UID: 0 PID: 6076 Comm: syz-executor.0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 122.938527][ T6076] Tainted: [W]=WARN [ 122.938530][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 122.938536][ T6076] Call Trace: [ 122.938540][ T6076] [ 122.938545][ T6076] dump_stack_lvl+0xe8/0x150 [ 122.938558][ T6076] __might_resched+0x329/0x480 [ 122.938570][ T6076] ? spin_lock_bucket+0x3b/0x150 [ 122.938586][ T6076] rt_spin_lock+0xc2/0x400 [ 122.938596][ T6076] ? __pfx_rt_spin_lock+0x10/0x10 [ 122.938606][ T6076] ? preempt_count_add+0x91/0x190 [ 122.938617][ T6076] ? rt_spin_lock+0x2ce/0x400 [ 122.938628][ T6076] lockref_get_not_dead+0x28/0xd0 [ 122.938648][ T6076] gfs2_qd_search_bucket+0x139/0x210 [ 122.938675][ T6076] gfs2_quota_init+0x86c/0x1220 [ 122.938698][ T6076] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 122.938735][ T6076] ? __pfx_gfs2_quota_init+0x10/0x10 [ 122.938758][ T6076] ? __pfx_wake_up_bit+0x10/0x10 [ 122.938769][ T6076] ? rt_spin_unlock+0x160/0x200 [ 122.938781][ T6076] ? inode_go_inval+0x2a0/0x360 [ 122.938793][ T6076] gfs2_make_fs_rw+0x143/0x230 [ 122.938807][ T6076] gfs2_fill_super+0x1bfd/0x2220 [ 122.938825][ T6076] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.938835][ T6076] ? rt_spin_unlock+0x14f/0x200 [ 122.938845][ T6076] ? init_locking+0xb8/0x210 [ 122.938855][ T6076] ? sb_set_blocksize+0x11b/0x210 [ 122.938869][ T6076] ? setup_bdev_super+0x4c1/0x5b0 [ 122.938882][ T6076] get_tree_bdev_flags+0x431/0x4f0 [ 122.938894][ T6076] ? __pfx_gfs2_fill_super+0x10/0x10 [ 122.938905][ T6076] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 122.938915][ T6076] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 122.938927][ T6076] ? rcu_is_watching+0x15/0xb0 [ 122.938941][ T6076] ? cap_capable+0x123/0x460 [ 122.938955][ T6076] gfs2_get_tree+0x51/0x1e0 [ 122.939005][ T6076] vfs_get_tree+0x92/0x2a0 [ 122.939018][ T6076] do_new_mount+0x341/0xd30 [ 122.939031][ T6076] ? safesetid_security_capable+0xa9/0x1a0 [ 122.939047][ T6076] ? __pfx_do_new_mount+0x10/0x10 [ 122.939061][ T6076] ? ns_capable+0x89/0xe0 [ 122.939073][ T6076] ? user_path_at+0xd4/0x160 [ 122.939085][ T6076] ? user_path_at+0xd4/0x160 [ 122.939096][ T6076] __se_sys_mount+0x31d/0x420 [ 122.939113][ T6076] ? __pfx___se_sys_mount+0x10/0x10 [ 122.939130][ T6076] ? __x64_sys_mount+0x20/0xc0 [ 122.939143][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.939154][ T6076] do_syscall_64+0x15f/0xf80 [ 122.939166][ T6076] ? trace_irq_disable+0x3b/0x140 [ 122.939202][ T6076] ? clear_bhb_loop+0x40/0x90 [ 122.939217][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.939226][ T6076] RIP: 0033:0x7f9000e4ea4a [ 122.939236][ T6076] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 122.939244][ T6076] RSP: 002b:00007f90001ddea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 122.939254][ T6076] RAX: ffffffffffffffda RBX: 00007f90001ddf30 RCX: 00007f9000e4ea4a [ 122.939261][ T6076] RDX: 0000000020000100 RSI: 0000000020013440 RDI: 00007f90001ddef0 [ 122.939267][ T6076] RBP: 0000000020000100 R08: 00007f90001ddf30 R09: 0000000001000000