Warning: Permanently added '10.128.0.223' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 28.059406] XFS (loop0): Mounting V4 Filesystem [ 28.076548] XFS (loop0): Ending clean mount [ 28.081920] XFS (loop0): Quotacheck needed: Please wait. [ 28.088172] XFS (loop0): Metadata corruption detected at xfs_allocbt_read_verify+0xb4/0x350, xfs_allocbt block 0x5 [ 28.099379] XFS (loop0): Unmount and run xfs_repair [ 28.104931] XFS (loop0): First 64 bytes of corrupted metadata buffer: [ 28.111575] ffff8880a1aef340: 41 07 00 00 00 00 00 01 ff ff ff ff ff ff ff ff A............... [ 28.120444] ffff8880a1aef350: 00 00 00 42 00 00 7f be 00 00 00 42 00 00 7f be ...B.......B.... [ 28.129266] ffff8880a1aef360: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 28.138164] ffff8880a1aef370: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 28.147074] XFS (loop0): metadata I/O error: block 0x5 ("xfs_trans_read_buf_map") error 117 numblks 1 [ 28.156567] [ 28.158169] ===================================== [ 28.162978] WARNING: bad unlock balance detected! [ 28.167787] 4.14.300-syzkaller #0 Not tainted [ 28.172249] ------------------------------------- [ 28.177056] syz-executor163/7965 is trying to release lock (&xfs_nondir_ilock_class) at: [ 28.185259] [] xfs_iunlock+0x29f/0x3b0 [ 28.190677] but there are no more locks to release! [ 28.195658] [ 28.195658] other info that might help us debug this: [ 28.202296] 2 locks held by syz-executor163/7965: [ 28.207103] #0: (&type->s_umount_key#46/1){+.+.}, at: [] sget_userns+0x556/0xc10 [ 28.216349] #1: (sb_internal#2){.+.+}, at: [] xfs_trans_alloc+0x259/0x320 [ 28.224985] [ 28.224985] stack backtrace: [ 28.229449] CPU: 1 PID: 7965 Comm: syz-executor163 Not tainted 4.14.300-syzkaller #0 [ 28.237295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 28.246616] Call Trace: [ 28.249174] dump_stack+0x1b2/0x281 [ 28.252772] ? xfs_iunlock+0x29f/0x3b0 [ 28.256629] lock_release.cold+0x70/0xbf [ 28.260662] ? lock_downgrade+0x740/0x740 [ 28.264780] ? xfs_log_done+0x358/0x720 [ 28.268723] up_write+0x17/0x60 [ 28.271973] xfs_iunlock+0x29f/0x3b0 [ 28.275654] xfs_inode_item_unlock+0x83/0xa0 [ 28.280032] xfs_trans_free_items+0x172/0x230 [ 28.284498] xfs_trans_cancel+0x1ae/0x250 [ 28.288616] xfs_qm_dqread+0x9c2/0xe50 [ 28.292475] ? xfs_dquot_set_prealloc_limits+0x1f0/0x1f0 [ 28.297894] ? xfs_qm_dqget+0x4d5/0x19a0 [ 28.301925] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 28.307343] ? xfs_iunlock+0x21a/0x3b0 [ 28.311199] xfs_qm_dqget+0x4f4/0x19a0 [ 28.315056] ? xfs_qm_dqput+0x7a0/0x7a0 [ 28.318998] xfs_qm_quotacheck_dqadjust+0x96/0x5c0 [ 28.323896] ? xfs_qm_flush_one+0x2b0/0x2b0 [ 28.328186] ? lock_downgrade+0x740/0x740 [ 28.332303] xfs_qm_dqusage_adjust+0x428/0xc20 [ 28.336853] ? xfs_qm_quotacheck_dqadjust+0x5c0/0x5c0 [ 28.342012] ? xfs_buf_rele+0x731/0x12a0 [ 28.346041] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 28.351460] xfs_bulkstat+0x72a/0xf60 [ 28.355232] ? xfs_qm_quotacheck_dqadjust+0x5c0/0x5c0 [ 28.360391] ? xfs_bulkstat_one+0x50/0x50 [ 28.364507] ? xfs_qm_dqiter_bufs+0x5c0/0x5c0 [ 28.368971] ? lock_downgrade+0x740/0x740 [ 28.373090] xfs_qm_quotacheck+0x223/0x790 [ 28.377293] ? xfs_qm_dquot_walk.isra.0+0x2e0/0x2e0 [ 28.382280] ? xfs_qm_init_quotainfo+0xd9/0xc20 [ 28.386918] ? xfs_qm_set_defquota+0x360/0x360 [ 28.391468] xfs_qm_mount_quotas+0xe9/0x570 [ 28.395762] xfs_mountfs+0x18be/0x1f40 [ 28.399619] ? xfs_filestream_get_parent+0xd0/0xd0 [ 28.404519] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 28.409939] ? xfs_default_resblks+0x60/0x60 [ 28.414316] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 28.419305] ? xfs_mru_cache_create+0x426/0x540 [ 28.423941] xfs_fs_fill_super+0xb7a/0x1380 [ 28.428236] mount_bdev+0x2b3/0x360 [ 28.431833] ? xfs_parseargs+0x1130/0x1130 [ 28.436038] mount_fs+0x92/0x2a0 [ 28.439380] vfs_kern_mount.part.0+0x5b/0x470 [ 28.443847] do_mount+0xe65/0x2a30 [ 28.447358] ? copy_mount_string+0x40/0x40 [ 28.451562] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 28.456546] ? copy_mnt_ns+0xa30/0xa30 [ 28.46