gfs2: fsid=syz:syz.0: first mount done, others may mount gfs2: fsid=syz:syz.0: can't create logd thread: -4 list_del corruption, ffff0000d4354c10->prev is LIST_POISON2 (dead000000000122) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:61! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 UID: 0 PID: 6852 Comm: syz.1.16 Not tainted 6.11.0-rc3-syzkaller-g5c43d43bad35 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del_entry_valid_or_report+0x124/0x158 lib/list_debug.c:59 lr : __list_del_entry_valid_or_report+0x124/0x158 lib/list_debug.c:59 sp : ffff80009e017680 x29: ffff80009e017680 x28: ffff700013c02f04 x27: ffff0000d4354c00 x26: dfff800000000000 x25: ffff0000df200a58 x24: 1fffe0001b427f00 x23: ffff0000da13f868 x22: dfff800000000000 x21: dead000000000122 x20: ffff0000d4355810 x19: ffff0000d4354c10 x18: 0000000000000008 x17: 6165642820324e4f x16: ffff800083014574 x15: 0000000000000001 x14: 1ffff00013c02e24 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000001 x10: 0000000000ff0100 x9 : 5a6d7d8eb24dcc00 x8 : 5a6d7d8eb24dcc00 x7 : 0000000000000001 x6 : 0000000000000001 x5 : ffff80009e016df8 x4 : ffff80008f5fb220 x3 : ffff800082f9efc4 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000004e Call trace: __list_del_entry_valid_or_report+0x124/0x158 lib/list_debug.c:59 __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del_rcu include/linux/rculist.h:157 [inline] destroy_workqueue+0x6e4/0xdc0 kernel/workqueue.c:5823 gfs2_fill_super+0xe78/0x1f98 fs/gfs2/ops_fstype.c:1310 get_tree_bdev+0x320/0x470 fs/super.c:1635 gfs2_get_tree+0x54/0x1b4 fs/gfs2/ops_fstype.c:1329 vfs_get_tree+0x90/0x288 fs/super.c:1800 do_new_mount+0x278/0x900 fs/namespace.c:3472 path_mount+0x590/0xe04 fs/namespace.c:3799 do_mount fs/namespace.c:3812 [inline] __do_sys_mount fs/namespace.c:4020 [inline] __se_sys_mount fs/namespace.c:3997 [inline] __arm64_sys_mount+0x45c/0x5a8 fs/namespace.c:3997 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Code: d0044ca0 913c8000 aa1303e1 953c558b (d4210000) ---[ end trace 0000000000000000 ]---