ffff888093cd35f0: 00 00 00 04 00 00 7f be 00 00 7f be 00 00 00 00 ................ XFS (loop3): metadata I/O error: block 0x1 ("xfs_trans_read_buf_map") error 117 numblks 1 ===================================== WARNING: bad unlock balance detected! 4.14.302-syzkaller #0 Not tainted ------------------------------------- syz-executor.3/9587 is trying to release lock (&xfs_nondir_ilock_class) at: [] mrunlock_excl fs/xfs/mrlock.h:74 [inline] [] xfs_iunlock+0x29f/0x3b0 fs/xfs/xfs_inode.c:327 but there are no more locks to release! other info that might help us debug this: 2 locks held by syz-executor.3/9587: #0: (&type->s_umount_key#53/1){+.+.}, at: [] alloc_super fs/super.c:251 [inline] #0: (&type->s_umount_key#53/1){+.+.}, at: [] sget_userns+0x556/0xc10 fs/super.c:516 #1: (sb_internal#3){.+.+}, at: [] sb_start_intwrite include/linux/fs.h:1598 [inline] #1: (sb_internal#3){.+.+}, at: [] xfs_trans_alloc+0x259/0x320 fs/xfs/xfs_trans.c:242 stack backtrace: CPU: 0 PID: 9587 Comm: syz-executor.3 Not tainted 4.14.302-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0x1b2/0x281 lib/dump_stack.c:58 print_unlock_imbalance_bug include/trace/events/lock.h:58 [inline] __lock_release kernel/locking/lockdep.c:3769 [inline] lock_release.cold+0x70/0xbf kernel/locking/lockdep.c:4017 up_write+0x17/0x60 kernel/locking/rwsem.c:115 mrunlock_excl fs/xfs/mrlock.h:74 [inline] xfs_iunlock+0x29f/0x3b0 fs/xfs/xfs_inode.c:327 xfs_inode_item_unlock+0x83/0xa0 fs/xfs/xfs_inode_item.c:613 xfs_trans_free_items+0x172/0x230 fs/xfs/xfs_trans.c:768 xfs_trans_cancel+0x1ae/0x250 fs/xfs/xfs_trans.c:1025 xfs_qm_dqread+0x9c2/0xe50 fs/xfs/xfs_dquot.c:684 xfs_qm_dqget+0x4f4/0x19a0 fs/xfs/xfs_dquot.c:837 xfs_qm_quotacheck_dqadjust+0x96/0x5c0 fs/xfs/xfs_qm.c:1077 xfs_qm_dqusage_adjust+0x6f4/0xc20 fs/xfs/xfs_qm.c:1199 xfs_bulkstat_ag_ichunk fs/xfs/xfs_itable.c:313 [inline] xfs_bulkstat+0x72a/0xf60 fs/xfs/xfs_itable.c:498 xfs_qm_quotacheck+0x223/0x790 fs/xfs/xfs_qm.c:1338 xfs_qm_mount_quotas+0xe9/0x570 fs/xfs/xfs_qm.c:1457 xfs_mountfs+0x18be/0x1f40 fs/xfs/xfs_mount.c:979 xfs_fs_fill_super+0xb7a/0x1380 fs/xfs/xfs_super.c:1688 mount_bdev+0x2b3/0x360 fs/super.c:1134 mount_fs+0x92/0x2a0 fs/super.c:1237 vfs_kern_mount.part.0+0x5b/0x470 fs/namespace.c:1046 vfs_kern_mount fs/namespace.c:1036 [inline] do_new_mount fs/namespace.c:2572 [inline] do_mount+0xe65/0x2a30 fs/namespace.c:2905 SYSC_mount fs/namespace.c:3121 [inline] SyS_mount+0xa8/0x120 fs/namespace.c:3098 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x5e/0xd3 RIP: 0033:0x7f68031fd5fa RSP: 002b:00007f680176df88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 000000000000bc0e RCX: 00007f68031fd5fa RDX: 0000000020000040 RSI: 0000000020000000 RDI: 00007f680176dfe0 RBP: 00007f680176e020 R08: 00007f680176e020 R09: 0000000002008090 R10: 0000000002008090 R11: 0000000000000202 R12: 0000000020000040 R13: 0000000020000000 R14: 00007f680176dfe0 R15: 00000000200001c0 XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. XFS (loop2): Mounting V4 Filesystem XFS (loop3): Metadata corruption detected at xfs_agf_read_verify+0x248/0x2b0 fs/xfs/libxfs/xfs_alloc.c:2595, xfs_agf block 0x1 XFS (loop3): Unmount and run xfs_repair XFS (loop3): First 64 bytes of corrupted metadata buffer: XFS (loop2): Ending clean mount XFS (loop2): Quotacheck needed: Please wait. ffff8880ab990c80: 58 06 47 46 00 00 00 01 00 00 00 00 00 00 80 00 X.GF............ XFS (loop2): Metadata corruption detected at xfs_agf_read_verify+0x248/0x2b0 fs/xfs/libxfs/xfs_alloc.c:2595, xfs_agf block 0x1 ffff8880ab990c90: 00 00 00 04 00 00 00 05 00 00 00 00 00 00 00 01 ................ XFS (loop2): Unmount and run xfs_repair ffff8880ab990ca0: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ XFS (loop2): First 64 bytes of corrupted metadata buffer: ffff8880ab990cb0: 00 00 00 04 00 00 7f be 00 00 7f be 00 00 00 00 ................ ffff8880ab6fd000: 58 06 47 46 00 00 00 01 00 00 00 00 00 00 80 00 X.GF............ XFS (loop3): metadata I/O error: block 0x1 ("xfs_trans_read_buf_map") error 117 numblks 1 ffff8880ab6fd010: 00 00 00 04 00 00 00 05 00 00 00 00 00 00 00 01 ................ XFS (loop3): xfs_do_force_shutdown(0x1) called from line 315 of file fs/xfs/xfs_trans_buf.c. Return address = 0xffffffff82638ed2 ffff8880ab6fd020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ XFS (loop3): I/O Error Detected. Shutting down filesystem ffff8880ab6fd030: 00 00 00 04 00 00 7f be 00 00 7f be 00 00 00 00 ................ XFS (loop3): Please umount the filesystem and rectify the problem(s) XFS (loop2): metadata I/O error: block 0x1 ("xfs_trans_read_buf_map") error 117 numblks 1 syz-executor.3 (9587) used greatest stack depth: 24072 bytes left XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. XFS (loop3): Unmounting Filesystem XFS (loop2): Metadata corruption detected at xfs_agf_read_verify+0x248/0x2b0 fs/xfs/libxfs/xfs_alloc.c:2595, xfs_agf block 0x1 XFS (loop2): Unmount and run xfs_repair XFS (loop2): First 64 bytes of corrupted metadata buffer: ffff8880ab5e0300: 58 06 47 46 00 00 00 01 00 00 00 00 00 00 80 00 X.GF............ ffff8880ab5e0310: 00 00 00 04 00 00 00 05 00 00 00 00 00 00 00 01 ................ ffff8880ab5e0320: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ ffff8880ab5e0330: 00 00 00 04 00 00 7f be 00 00 7f be 00 00 00 00 ................ XFS (loop2): metadata I/O error: block 0x1 ("xfs_trans_read_buf_map") error 117 numblks 1 XFS (loop2): xfs_do_force_shutdown(0x8) called from line 235 of file fs/xfs/libxfs/xfs_defer.c. Return address = 0xffffffff824d1965 XFS (loop2): Corruption of in-memory data detected. Shutting down filesystem XFS (loop2): Please umount the filesystem and rectify the problem(s) XFS (loop2): Unmounting Filesystem XFS (loop4): Mounting V4 Filesystem XFS (loop4): Ending clean mount XFS (loop4): Quotacheck needed: Please wait. XFS (loop4): Metadata corruption detected at xfs_agf_read_verify+0x248/0x2b0 fs/xfs/libxfs/xfs_alloc.c:2595, xfs_agf block 0x1 XFS (loop4): Unmount and run xfs_repair XFS (loop4): First 64 bytes of corrupted metadata buffer: ffff88808f672c80: 58 06 47 46 00 00 00 01 00 00 00 00 00 00 80 00 X.GF............ ffff88808f672c90: 00 00 00 04 00 00 00 05 00 00 00 00 00 00 00 01 ................ ffff88808f672ca0: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ ffff88808f672cb0: 00 00 00 04 00 00 7f be 00 00 7f be 00 00 00 00 ................ XFS (loop4): metadata I/O error: block 0x1 ("xfs_trans_read_buf_map") error 117 numblks 1 XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. XFS (loop4): Metadata corruption detected at xfs_agf_read_verify+0x248/0x2b0 fs/xfs/libxfs/xfs_alloc.c:2595, xfs_agf block 0x1 XFS (loop4): Unmount and run xfs_repair XFS (loop4): First 64 bytes of corrupted metadata buffer: ffff8880932c4340: 58 06 47 46 00 00 00 01 00 00 00 00 00 00 80 00 X.GF............ ffff8880932c4350: 00 00 00 04 00 00 00 05 00 00 00 00 00 00 00 01 ................ ffff8880932c4360: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ ffff8880932c4370: 00 00 00 04 00 00 7f be 00 00 7f be 00 00 00 00 ................ XFS (loop4): metadata I/O error: block 0x1 ("xfs_trans_read_buf_map") error 117 numblks 1 XFS (loop4): xfs_do_force_shutdown(0x8) called from line 235 of file fs/xfs/libxfs/xfs_defer.c. Return address = 0xffffffff824d1965 XFS (loop4): Corruption of in-memory data detected. Shutting down filesystem XFS (loop4): Please umount the filesystem and rectify the problem(s) XFS (loop4): Unmounting Filesystem