64.378869][ T6668] path_mount+0x6db/0x1ea0 [ 364.379052][ T6668] ? user_path_at+0x32d/0x3d0 [ 364.379229][ T6668] __se_sys_mount+0x6eb/0x7d0 [ 364.379410][ T6668] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 364.379662][ T6668] __x64_sys_mount+0xe4/0x150 [ 364.379861][ T6668] x64_sys_call+0x3604/0x3e20 [ 364.380055][ T6668] do_syscall_64+0xd9/0x210 [ 364.380256][ T6668] ? irqentry_exit+0x16/0x60 [ 364.380438][ T6668] ? clear_bhb_loop+0x40/0x90 [ 364.380606][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.380780][ T6668] RIP: 0033:0x7fc8c257ffba [ 364.380904][ T6668] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.381031][ T6668] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.381173][ T6668] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 364.381280][ T6668] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 364.381377][ T6668] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 364.381472][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 364.381562][ T6668] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 364.381691][ T6668] [ 364.680162][ T6668] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 365.830200][ T6674] loop0: detected capacity change from 0 to 32768 [ 365.857232][ T6674] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 365.865796][ T6674] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 365.914872][ T6674] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 365.928356][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 365.936227][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 366.055748][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 119ms [ 366.064429][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 366.070183][ T6674] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 366.150166][ T6674] syz.0.44: attempt to access beyond end of device [ 366.150166][ T6674] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 366.165224][ T6674] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 366.183629][ T6674] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 366.215538][ T6674] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 366.224738][ T6674] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 366.232458][ T6674] gfs2: fsid=syz:syz.0: File system withdrawn [ 366.238806][ T6674] CPU: 1 UID: 0 PID: 6674 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(none) [ 366.238944][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.239029][ T6674] Call Trace: [ 366.239077][ T6674] [ 366.239128][ T6674] __dump_stack+0x26/0x30 [ 366.239304][ T6674] dump_stack_lvl+0x1df/0x270 [ 366.239486][ T6674] dump_stack+0x1e/0x25 [ 366.239645][ T6674] gfs2_withdraw+0x1ec1/0x2020 [ 366.239860][ T6674] gfs2_meta_check_ii+0xd7/0x100 [ 366.240024][ T6674] gfs2_quota_init+0x256f/0x2730 [ 366.240290][ T6674] gfs2_make_fs_rw+0x1d5/0x460 [ 366.240460][ T6674] gfs2_fill_super+0x3d31/0x3f50 [ 366.240623][ T6674] ? init_locking+0xed/0x500 [ 366.240821][ T6674] get_tree_bdev_flags+0x6e3/0x920 [ 366.241006][ T6674] ? __pfx_gfs2_fill_super+0x10/0x10 [ 366.241162][ T6674] ? __pfx_gfs2_fill_super+0x10/0x10 [ 366.241313][ T6674] ? __pfx_gfs2_get_tree+0x10/0x10 [ 366.241468][ T6674] get_tree_bdev+0x38/0x50 [ 366.241638][ T6674] gfs2_get_tree+0x57/0x350 [ 366.241801][ T6674] ? __pfx_gfs2_get_tree+0x10/0x10 [ 366.241956][ T6674] vfs_get_tree+0xb3/0x5c0 [ 366.242127][ T6674] ? mount_capable+0x99/0x100 [ 366.242285][ T6674] do_new_mount+0x733/0x14b0 [ 366.242450][ T6674] ? apparmor_capable+0x32d/0x410 [ 366.242636][ T6674] ? kmsan_get_metadata+0xfb/0x160 [ 366.242846][ T6674] path_mount+0x6db/0x1ea0 [ 366.243023][ T6674] ? user_path_at+0x32d/0x3d0 [ 366.243188][ T6674] __se_sys_mount+0x6eb/0x7d0 [ 366.243369][ T6674] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 366.243613][ T6674] __x64_sys_mount+0xe4/0x150 [ 366.243817][ T6674] x64_sys_call+0x3604/0x3e20 [ 366.244007][ T6674] do_syscall_64+0xd9/0x210 [ 366.244207][ T6674] ? irqentry_exit+0x16/0x60 [ 366.244383][ T6674] ? clear_bhb_loop+0x40/0x90 [ 366.244559][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.244724][ T6674] RIP: 0033:0x7fc8c257ffba [ 366.244841][ T6674] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.244963][ T6674] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.245104][ T6674] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 366.245208][ T6674] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 366.245306][ T6674] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 366.245394][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 366.245479][ T6674] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 366.245605][ T6674] [ 366.540079][ T6674] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:58:57 executed programs: 32 [ 367.704844][ T6680] loop0: detected capacity change from 0 to 32768 [ 367.731134][ T6680] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 367.739483][ T6680] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 367.774300][ T6680] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 367.786730][ T3365] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 367.794048][ T3365] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 367.989880][ T3365] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 195ms [ 367.998386][ T3365] gfs2: fsid=syz:syz.0: jid=0: Done [ 368.004095][ T6680] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 368.161299][ T6680] syz.0.45: attempt to access beyond end of device [ 368.161299][ T6680] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 368.176549][ T6680] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 368.194589][ T6680] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 368.245248][ T6680] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 368.254497][ T6680] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 368.262252][ T6680] gfs2: fsid=syz:syz.0: File system withdrawn [ 368.268503][ T6680] CPU: 0 UID: 0 PID: 6680 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(none) [ 368.268645][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.268735][ T6680] Call Trace: [ 368.268789][ T6680] [ 368.268839][ T6680] __dump_stack+0x26/0x30 [ 368.269014][ T6680] dump_stack_lvl+0x1df/0x270 [ 368.269198][ T6680] dump_stack+0x1e/0x25 [ 368.269367][ T6680] gfs2_withdraw+0x1ec1/0x2020 [ 368.269590][ T6680] gfs2_meta_check_ii+0xd7/0x100 [ 368.269757][ T6680] gfs2_quota_init+0x256f/0x2730 [ 368.270035][ T6680] gfs2_make_fs_rw+0x1d5/0x460 [ 368.270230][ T6680] gfs2_fill_super+0x3d31/0x3f50 [ 368.270404][ T6680] ? init_locking+0xed/0x500 [ 368.270606][ T6680] get_tree_bdev_flags+0x6e3/0x920 [ 368.270798][ T6680] ? __pfx_gfs2_fill_super+0x10/0x10 [ 368.270957][ T6680] ? __pfx_gfs2_fill_super+0x10/0x10 [ 368.271111][ T6680] ? __pfx_gfs2_get_tree+0x10/0x10 [ 368.271269][ T6680] get_tree_bdev+0x38/0x50 [ 368.271449][ T6680] gfs2_get_tree+0x57/0x350 [ 368.271609][ T6680] ? __pfx_gfs2_get_tree+0x10/0x10 [ 368.271767][ T6680] vfs_get_tree+0xb3/0x5c0 [ 368.271944][ T6680] ? mount_capable+0x99/0x100 [ 368.272103][ T6680] do_new_mount+0x733/0x14b0 [ 368.272271][ T6680] ? apparmor_capable+0x32d/0x410 [ 368.272464][ T6680] ? kmsan_get_metadata+0xfb/0x160 [ 368.272664][ T6680] path_mount+0x6db/0x1ea0 [ 368.272846][ T6680] ? user_path_at+0x32d/0x3d0 [ 368.273018][ T6680] __se_sys_mount+0x6eb/0x7d0 [ 368.273199][ T6680] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 368.273459][ T6680] __x64_sys_mount+0xe4/0x150 [ 368.273651][ T6680] x64_sys_call+0x3604/0x3e20 [ 368.273842][ T6680] do_syscall_64+0xd9/0x210 [ 368.274042][ T6680] ? irqentry_exit+0x16/0x60 [ 368.274220][ T6680] ? clear_bhb_loop+0x40/0x90 [ 368.274467][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.274631][ T6680] RIP: 0033:0x7fc8c257ffba [ 368.274749][ T6680] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.274872][ T6680] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.275016][ T6680] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 368.275120][ T6680] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 368.275215][ T6680] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 368.275310][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 368.275423][ T6680] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 368.275552][ T6680] [ 368.551944][ T6680] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 369.703570][ T6686] loop0: detected capacity change from 0 to 32768 [ 369.732953][ T6686] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 369.741665][ T6686] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 369.777409][ T6686] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 369.790700][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 369.797648][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 369.915935][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 118ms [ 369.924529][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 369.931737][ T6686] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 370.007674][ T6686] syz.0.46: attempt to access beyond end of device [ 370.007674][ T6686] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 370.047403][ T6686] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 370.063059][ T6686] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 370.096391][ T6686] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 370.108239][ T6686] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 370.120838][ T6686] gfs2: fsid=syz:syz.0: File system withdrawn [ 370.127088][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(none) [ 370.127181][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.127238][ T6686] Call Trace: [ 370.127270][ T6686] [ 370.127303][ T6686] __dump_stack+0x26/0x30 [ 370.127423][ T6686] dump_stack_lvl+0x1df/0x270 [ 370.127536][ T6686] dump_stack+0x1e/0x25 [ 370.127638][ T6686] gfs2_withdraw+0x1ec1/0x2020 [ 370.127769][ T6686] gfs2_meta_check_ii+0xd7/0x100 [ 370.127869][ T6686] gfs2_quota_init+0x256f/0x2730 [ 370.128038][ T6686] gfs2_make_fs_rw+0x1d5/0x460 [ 370.128149][ T6686] gfs2_fill_super+0x3d31/0x3f50 [ 370.128249][ T6686] ? init_locking+0xed/0x500 [ 370.128372][ T6686] get_tree_bdev_flags+0x6e3/0x920 [ 370.128486][ T6686] ? __pfx_gfs2_fill_super+0x10/0x10 [ 370.128584][ T6686] ? __pfx_gfs2_fill_super+0x10/0x10 [ 370.128680][ T6686] ? __pfx_gfs2_get_tree+0x10/0x10 [ 370.128776][ T6686] get_tree_bdev+0x38/0x50 [ 370.128885][ T6686] gfs2_get_tree+0x57/0x350 [ 370.128981][ T6686] ? __pfx_gfs2_get_tree+0x10/0x10 [ 370.129076][ T6686] vfs_get_tree+0xb3/0x5c0 [ 370.129182][ T6686] ? mount_capable+0x99/0x100 [ 370.129283][ T6686] do_new_mount+0x733/0x14b0 [ 370.129395][ T6686] ? apparmor_capable+0x32d/0x410 [ 370.129511][ T6686] ? kmsan_get_metadata+0xfb/0x160 [ 370.129693][ T6686] path_mount+0x6db/0x1ea0 [ 370.129866][ T6686] ? user_path_at+0x32d/0x3d0 [ 370.130035][ T6686] __se_sys_mount+0x6eb/0x7d0 [ 370.130228][ T6686] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 370.130484][ T6686] __x64_sys_mount+0xe4/0x150 [ 370.130674][ T6686] x64_sys_call+0x3604/0x3e20 [ 370.130865][ T6686] do_syscall_64+0xd9/0x210 [ 370.131071][ T6686] ? irqentry_exit+0x16/0x60 [ 370.131247][ T6686] ? clear_bhb_loop+0x40/0x90 [ 370.131412][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.131515][ T6686] RIP: 0033:0x7fc8c257ffba [ 370.131589][ T6686] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.131668][ T6686] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 370.131762][ T6686] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 370.131826][ T6686] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 370.131887][ T6686] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 370.131945][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 370.132000][ T6686] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 370.132081][ T6686] [ 370.410111][ T6686] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 371.558249][ T6692] loop0: detected capacity change from 0 to 32768 [ 371.587850][ T6692] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 371.596646][ T6692] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 371.635601][ T6692] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 371.655462][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 371.663355][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 371.785086][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 371.793827][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 371.802253][ T6692] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 371.893098][ T6692] syz.0.47: attempt to access beyond end of device [ 371.893098][ T6692] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 371.908295][ T6692] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 371.926788][ T6692] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 371.956543][ T6692] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 371.965626][ T6692] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 371.973119][ T6692] gfs2: fsid=syz:syz.0: File system withdrawn [ 371.979367][ T6692] CPU: 1 UID: 0 PID: 6692 Comm: syz.0.47 Not tainted syzkaller #0 PREEMPT(none) [ 371.979516][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.979605][ T6692] Call Trace: [ 371.979657][ T6692] [ 371.979704][ T6692] __dump_stack+0x26/0x30 [ 371.979881][ T6692] dump_stack_lvl+0x1df/0x270 [ 371.980061][ T6692] dump_stack+0x1e/0x25 [ 371.980224][ T6692] gfs2_withdraw+0x1ec1/0x2020 [ 371.980440][ T6692] gfs2_meta_check_ii+0xd7/0x100 [ 371.980606][ T6692] gfs2_quota_init+0x256f/0x2730 [ 371.980878][ T6692] gfs2_make_fs_rw+0x1d5/0x460 [ 371.981057][ T6692] gfs2_fill_super+0x3d31/0x3f50 [ 371.981217][ T6692] ? init_locking+0xed/0x500 [ 371.981413][ T6692] get_tree_bdev_flags+0x6e3/0x920 [ 371.981602][ T6692] ? __pfx_gfs2_fill_super+0x10/0x10 [ 371.981769][ T6692] ? __pfx_gfs2_fill_super+0x10/0x10 [ 371.981920][ T6692] ? __pfx_gfs2_get_tree+0x10/0x10 [ 371.982079][ T6692] get_tree_bdev+0x38/0x50 [ 371.982254][ T6692] gfs2_get_tree+0x57/0x350 [ 371.982416][ T6692] ? __pfx_gfs2_get_tree+0x10/0x10 [ 371.982574][ T6692] vfs_get_tree+0xb3/0x5c0 [ 371.982747][ T6692] ? mount_capable+0x99/0x100 [ 371.982910][ T6692] do_new_mount+0x733/0x14b0 [ 371.983082][ T6692] ? apparmor_capable+0x32d/0x410 [ 371.983265][ T6692] ? kmsan_get_metadata+0xfb/0x160 [ 371.983477][ T6692] path_mount+0x6db/0x1ea0 [ 371.983654][ T6692] ? user_path_at+0x32d/0x3d0 [ 371.983826][ T6692] __se_sys_mount+0x6eb/0x7d0 [ 371.984008][ T6692] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 371.984255][ T6692] __x64_sys_mount+0xe4/0x150 [ 371.984456][ T6692] x64_sys_call+0x3604/0x3e20 [ 371.984642][ T6692] do_syscall_64+0xd9/0x210 [ 371.984841][ T6692] ? irqentry_exit+0x16/0x60 [ 371.985025][ T6692] ? clear_bhb_loop+0x40/0x90 [ 371.985192][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.985351][ T6692] RIP: 0033:0x7fc8c257ffba [ 371.985479][ T6692] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.985604][ T6692] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 371.985748][ T6692] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 371.985849][ T6692] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 371.985939][ T6692] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 371.986031][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 371.986120][ T6692] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 371.986241][ T6692] [ 372.300063][ T6692] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:03 executed programs: 35 [ 373.448773][ T6698] loop0: detected capacity change from 0 to 32768 [ 373.478748][ T6698] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 373.487343][ T6698] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 373.515455][ T6698] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 373.528064][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 373.535723][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 373.663698][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 373.672569][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 373.680582][ T6698] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 373.770982][ T6698] syz.0.48: attempt to access beyond end of device [ 373.770982][ T6698] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 373.812222][ T6698] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 373.827868][ T6698] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 373.852088][ T6698] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 373.861173][ T6698] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 373.868307][ T6698] gfs2: fsid=syz:syz.0: File system withdrawn [ 373.874771][ T6698] CPU: 0 UID: 0 PID: 6698 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(none) [ 373.874915][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.875004][ T6698] Call Trace: [ 373.875055][ T6698] [ 373.875109][ T6698] __dump_stack+0x26/0x30 [ 373.875293][ T6698] dump_stack_lvl+0x1df/0x270 [ 373.875475][ T6698] dump_stack+0x1e/0x25 [ 373.875638][ T6698] gfs2_withdraw+0x1ec1/0x2020 [ 373.875848][ T6698] gfs2_meta_check_ii+0xd7/0x100 [ 373.876015][ T6698] gfs2_quota_init+0x256f/0x2730 [ 373.876296][ T6698] gfs2_make_fs_rw+0x1d5/0x460 [ 373.876476][ T6698] gfs2_fill_super+0x3d31/0x3f50 [ 373.876639][ T6698] ? init_locking+0xed/0x500 [ 373.876827][ T6698] get_tree_bdev_flags+0x6e3/0x920 [ 373.877017][ T6698] ? __pfx_gfs2_fill_super+0x10/0x10 [ 373.877180][ T6698] ? __pfx_gfs2_fill_super+0x10/0x10 [ 373.877341][ T6698] ? __pfx_gfs2_get_tree+0x10/0x10 [ 373.877498][ T6698] get_tree_bdev+0x38/0x50 [ 373.877670][ T6698] gfs2_get_tree+0x57/0x350 [ 373.877832][ T6698] ? __pfx_gfs2_get_tree+0x10/0x10 [ 373.877990][ T6698] vfs_get_tree+0xb3/0x5c0 [ 373.878167][ T6698] ? mount_capable+0x99/0x100 [ 373.878337][ T6698] do_new_mount+0x733/0x14b0 [ 373.878508][ T6698] ? apparmor_capable+0x32d/0x410 [ 373.878690][ T6698] ? kmsan_get_metadata+0xfb/0x160 [ 373.878889][ T6698] path_mount+0x6db/0x1ea0 [ 373.879070][ T6698] ? user_path_at+0x32d/0x3d0 [ 373.879245][ T6698] __se_sys_mount+0x6eb/0x7d0 [ 373.879427][ T6698] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 373.879675][ T6698] __x64_sys_mount+0xe4/0x150 [ 373.879864][ T6698] x64_sys_call+0x3604/0x3e20 [ 373.880053][ T6698] do_syscall_64+0xd9/0x210 [ 373.880264][ T6698] ? irqentry_exit+0x16/0x60 [ 373.880444][ T6698] ? clear_bhb_loop+0x40/0x90 [ 373.880612][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.880771][ T6698] RIP: 0033:0x7fc8c257ffba [ 373.880891][ T6698] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.881012][ T6698] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 373.881154][ T6698] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 373.881263][ T6698] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 373.881359][ T6698] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 373.881454][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 373.881542][ T6698] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 373.881670][ T6698] [ 374.190121][ T6698] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 375.346945][ T6704] loop0: detected capacity change from 0 to 32768 [ 375.381146][ T6704] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 375.389771][ T6704] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 375.419328][ T6704] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 375.434173][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 375.441939][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 375.572082][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 130ms [ 375.580782][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 375.586526][ T6704] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 375.688717][ T6704] syz.0.49: attempt to access beyond end of device [ 375.688717][ T6704] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 375.727029][ T6704] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 375.742581][ T6704] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 375.770355][ T6704] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 375.779287][ T6704] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 375.786951][ T6704] gfs2: fsid=syz:syz.0: File system withdrawn [ 375.793346][ T6704] CPU: 0 UID: 0 PID: 6704 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(none) [ 375.793487][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.793575][ T6704] Call Trace: [ 375.793628][ T6704] [ 375.793676][ T6704] __dump_stack+0x26/0x30 [ 375.793853][ T6704] dump_stack_lvl+0x1df/0x270 [ 375.794048][ T6704] dump_stack+0x1e/0x25 [ 375.794209][ T6704] gfs2_withdraw+0x1ec1/0x2020 [ 375.794426][ T6704] gfs2_meta_check_ii+0xd7/0x100 [ 375.794589][ T6704] gfs2_quota_init+0x256f/0x2730 [ 375.794871][ T6704] gfs2_make_fs_rw+0x1d5/0x460 [ 375.795049][ T6704] gfs2_fill_super+0x3d31/0x3f50 [ 375.795215][ T6704] ? init_locking+0xed/0x500 [ 375.795408][ T6704] get_tree_bdev_flags+0x6e3/0x920 [ 375.795597][ T6704] ? __pfx_gfs2_fill_super+0x10/0x10 [ 375.795760][ T6704] ? __pfx_gfs2_fill_super+0x10/0x10 [ 375.795920][ T6704] ? __pfx_gfs2_get_tree+0x10/0x10 [ 375.796078][ T6704] get_tree_bdev+0x38/0x50 [ 375.796254][ T6704] gfs2_get_tree+0x57/0x350 [ 375.796411][ T6704] ? __pfx_gfs2_get_tree+0x10/0x10 [ 375.796569][ T6704] vfs_get_tree+0xb3/0x5c0 [ 375.796747][ T6704] ? mount_capable+0x99/0x100 [ 375.796912][ T6704] do_new_mount+0x733/0x14b0 [ 375.797082][ T6704] ? apparmor_capable+0x32d/0x410 [ 375.797270][ T6704] ? kmsan_get_metadata+0xfb/0x160 [ 375.797475][ T6704] path_mount+0x6db/0x1ea0 [ 375.797653][ T6704] ? user_path_at+0x32d/0x3d0 [ 375.797825][ T6704] __se_sys_mount+0x6eb/0x7d0 [ 375.798010][ T6704] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 375.798261][ T6704] __x64_sys_mount+0xe4/0x150 [ 375.798459][ T6704] x64_sys_call+0x3604/0x3e20 [ 375.798649][ T6704] do_syscall_64+0xd9/0x210 [ 375.798853][ T6704] ? irqentry_exit+0x16/0x60 [ 375.799044][ T6704] ? clear_bhb_loop+0x40/0x90 [ 375.799211][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.799376][ T6704] RIP: 0033:0x7fc8c257ffba [ 375.799498][ T6704] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.799624][ T6704] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 375.799762][ T6704] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 375.799874][ T6704] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 375.799970][ T6704] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 375.800065][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 375.800150][ T6704] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 375.800279][ T6704] [ 376.110041][ T6704] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 377.267654][ T6710] loop0: detected capacity change from 0 to 32768 [ 377.293121][ T6710] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 377.301728][ T6710] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 377.340862][ T6710] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 377.355057][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 377.362608][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 377.487985][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 377.497469][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 377.503142][ T6710] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 377.592736][ T6710] syz.0.50: attempt to access beyond end of device [ 377.592736][ T6710] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 377.643028][ T6710] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 377.658638][ T6710] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 377.683335][ T6710] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 377.692392][ T6710] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 377.699783][ T6710] gfs2: fsid=syz:syz.0: File system withdrawn [ 377.706026][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.0.50 Not tainted syzkaller #0 PREEMPT(none) [ 377.706168][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 377.706260][ T6710] Call Trace: [ 377.706311][ T6710] [ 377.706362][ T6710] __dump_stack+0x26/0x30 [ 377.706541][ T6710] dump_stack_lvl+0x1df/0x270 [ 377.706724][ T6710] dump_stack+0x1e/0x25 [ 377.706887][ T6710] gfs2_withdraw+0x1ec1/0x2020 [ 377.707104][ T6710] gfs2_meta_check_ii+0xd7/0x100 [ 377.707269][ T6710] gfs2_quota_init+0x256f/0x2730 [ 377.707546][ T6710] gfs2_make_fs_rw+0x1d5/0x460 [ 377.707719][ T6710] gfs2_fill_super+0x3d31/0x3f50 [ 377.707885][ T6710] ? init_locking+0xed/0x500 [ 377.708085][ T6710] get_tree_bdev_flags+0x6e3/0x920 [ 377.708275][ T6710] ? __pfx_gfs2_fill_super+0x10/0x10 [ 377.708432][ T6710] ? __pfx_gfs2_fill_super+0x10/0x10 [ 377.708581][ T6710] ? __pfx_gfs2_get_tree+0x10/0x10 [ 377.708735][ T6710] get_tree_bdev+0x38/0x50 [ 377.708904][ T6710] gfs2_get_tree+0x57/0x350 [ 377.709068][ T6710] ? __pfx_gfs2_get_tree+0x10/0x10 [ 377.709223][ T6710] vfs_get_tree+0xb3/0x5c0 [ 377.709394][ T6710] ? mount_capable+0x99/0x100 [ 377.709556][ T6710] do_new_mount+0x733/0x14b0 [ 377.709737][ T6710] ? apparmor_capable+0x32d/0x410 [ 377.709918][ T6710] ? kmsan_get_metadata+0xfb/0x160 [ 377.710098][ T6710] path_mount+0x6db/0x1ea0 [ 377.710211][ T6710] ? user_path_at+0x32d/0x3d0 [ 377.710317][ T6710] __se_sys_mount+0x6eb/0x7d0 [ 377.710430][ T6710] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 377.710586][ T6710] __x64_sys_mount+0xe4/0x150 [ 377.710705][ T6710] x64_sys_call+0x3604/0x3e20 [ 377.710826][ T6710] do_syscall_64+0xd9/0x210 [ 377.710956][ T6710] ? irqentry_exit+0x16/0x60 [ 377.711072][ T6710] ? clear_bhb_loop+0x40/0x90 [ 377.711175][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.711276][ T6710] RIP: 0033:0x7fc8c257ffba [ 377.711352][ T6710] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.711430][ T6710] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.711517][ T6710] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 377.711583][ T6710] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 377.711644][ T6710] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 377.711704][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 377.711762][ T6710] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 377.711841][ T6710] [ 378.020194][ T6710] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:08 executed programs: 38 [ 379.214054][ T6716] loop0: detected capacity change from 0 to 32768 [ 379.244046][ T6716] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 379.252663][ T6716] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 379.283867][ T6716] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 379.297084][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 379.304510][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 379.441108][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms [ 379.449497][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 379.455310][ T6716] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 379.550288][ T6716] syz.0.51: attempt to access beyond end of device [ 379.550288][ T6716] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 379.565285][ T6716] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=1), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 379.582254][ T6716] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 379.608346][ T6716] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 379.617401][ T6716] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 379.624967][ T6716] gfs2: fsid=syz:syz.0: File system withdrawn [ 379.631355][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.0.51 Not tainted syzkaller #0 PREEMPT(none) [ 379.631497][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.631584][ T6716] Call Trace: [ 379.631644][ T6716] [ 379.631693][ T6716] __dump_stack+0x26/0x30 [ 379.631869][ T6716] dump_stack_lvl+0x1df/0x270 [ 379.632055][ T6716] dump_stack+0x1e/0x25 [ 379.632213][ T6716] gfs2_withdraw+0x1ec1/0x2020 [ 379.632418][ T6716] gfs2_metatype_check_ii+0x113/0x140 [ 379.632586][ T6716] gfs2_quota_init+0x25bf/0x2730 [ 379.632869][ T6716] gfs2_make_fs_rw+0x1d5/0x460 [ 379.633042][ T6716] gfs2_fill_super+0x3d31/0x3f50 [ 379.633179][ T6716] ? init_locking+0xed/0x500 [ 379.633300][ T6716] get_tree_bdev_flags+0x6e3/0x920 [ 379.633420][ T6716] ? __pfx_gfs2_fill_super+0x10/0x10 [ 379.633517][ T6716] ? __pfx_gfs2_fill_super+0x10/0x10 [ 379.633613][ T6716] ? __pfx_gfs2_get_tree+0x10/0x10 [ 379.633716][ T6716] get_tree_bdev+0x38/0x50 [ 379.633825][ T6716] gfs2_get_tree+0x57/0x350 [ 379.633922][ T6716] ? __pfx_gfs2_get_tree+0x10/0x10 [ 379.634020][ T6716] vfs_get_tree+0xb3/0x5c0 [ 379.634129][ T6716] ? mount_capable+0x99/0x100 [ 379.634227][ T6716] do_new_mount+0x733/0x14b0 [ 379.634334][ T6716] ? apparmor_capable+0x32d/0x410 [ 379.634451][ T6716] ? kmsan_get_metadata+0xfb/0x160 [ 379.634573][ T6716] path_mount+0x6db/0x1ea0 [ 379.634690][ T6716] ? user_path_at+0x32d/0x3d0 [ 379.634794][ T6716] __se_sys_mount+0x6eb/0x7d0 [ 379.634907][ T6716] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 379.635064][ T6716] __x64_sys_mount+0xe4/0x150 [ 379.635182][ T6716] x64_sys_call+0x3604/0x3e20 [ 379.635304][ T6716] do_syscall_64+0xd9/0x210 [ 379.635428][ T6716] ? irqentry_exit+0x16/0x60 [ 379.635542][ T6716] ? clear_bhb_loop+0x40/0x90 [ 379.635652][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.635759][ T6716] RIP: 0033:0x7fc8c257ffba [ 379.635833][ T6716] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.635912][ T6716] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 379.636000][ T6716] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 379.636064][ T6716] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 379.636124][ T6716] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 379.636183][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 379.636238][ T6716] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 379.636317][ T6716] [ 379.920030][ T6716] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 381.091155][ T6722] loop0: detected capacity change from 0 to 32768 [ 381.116866][ T6722] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 381.125522][ T6722] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 381.164357][ T6722] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 381.177116][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 381.184416][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 381.325684][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 141ms [ 381.334400][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 381.342950][ T6722] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 381.434994][ T6722] syz.0.52: attempt to access beyond end of device [ 381.434994][ T6722] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 381.474005][ T6722] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 381.489727][ T6722] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 381.514180][ T6722] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 381.523368][ T6722] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 381.531094][ T6722] gfs2: fsid=syz:syz.0: File system withdrawn [ 381.538895][ T6722] CPU: 1 UID: 0 PID: 6722 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(none) [ 381.538988][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.539045][ T6722] Call Trace: [ 381.539079][ T6722] [ 381.539110][ T6722] __dump_stack+0x26/0x30 [ 381.539227][ T6722] dump_stack_lvl+0x1df/0x270 [ 381.539343][ T6722] dump_stack+0x1e/0x25 [ 381.539447][ T6722] gfs2_withdraw+0x1ec1/0x2020 [ 381.539613][ T6722] gfs2_meta_check_ii+0xd7/0x100 [ 381.539771][ T6722] gfs2_quota_init+0x256f/0x2730 [ 381.540043][ T6722] gfs2_make_fs_rw+0x1d5/0x460 [ 381.540216][ T6722] gfs2_fill_super+0x3d31/0x3f50 [ 381.540426][ T6722] ? init_locking+0xed/0x500 [ 381.540627][ T6722] get_tree_bdev_flags+0x6e3/0x920 [ 381.540811][ T6722] ? __pfx_gfs2_fill_super+0x10/0x10 [ 381.540974][ T6722] ? __pfx_gfs2_fill_super+0x10/0x10 [ 381.541127][ T6722] ? __pfx_gfs2_get_tree+0x10/0x10 [ 381.541282][ T6722] get_tree_bdev+0x38/0x50 [ 381.541432][ T6722] gfs2_get_tree+0x57/0x350 [ 381.541539][ T6722] ? __pfx_gfs2_get_tree+0x10/0x10 [ 381.541636][ T6722] vfs_get_tree+0xb3/0x5c0 [ 381.541746][ T6722] ? mount_capable+0x99/0x100 [ 381.541847][ T6722] do_new_mount+0x733/0x14b0 [ 381.541954][ T6722] ? apparmor_capable+0x32d/0x410 [ 381.542069][ T6722] ? kmsan_get_metadata+0xfb/0x160 [ 381.542196][ T6722] path_mount+0x6db/0x1ea0 [ 381.542308][ T6722] ? user_path_at+0x32d/0x3d0 [ 381.542413][ T6722] __se_sys_mount+0x6eb/0x7d0 [ 381.542532][ T6722] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 381.542688][ T6722] __x64_sys_mount+0xe4/0x150 [ 381.542808][ T6722] x64_sys_call+0x3604/0x3e20 [ 381.542929][ T6722] do_syscall_64+0xd9/0x210 [ 381.543056][ T6722] ? irqentry_exit+0x16/0x60 [ 381.543170][ T6722] ? clear_bhb_loop+0x40/0x90 [ 381.543275][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.543376][ T6722] RIP: 0033:0x7fc8c257ffba [ 381.543454][ T6722] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.543534][ T6722] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 381.543621][ T6722] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 381.543687][ T6722] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 381.543748][ T6722] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 381.543806][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 381.543861][ T6722] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 381.543942][ T6722] [ 381.851709][ T6722] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 383.009198][ T6729] loop0: detected capacity change from 0 to 32768 [ 383.031378][ T6729] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 383.039888][ T6729] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 383.074686][ T6729] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 5ms [ 383.087046][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 383.094380][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 383.218746][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms [ 383.227419][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 383.234363][ T6729] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 383.297963][ T6729] syz.0.53: attempt to access beyond end of device [ 383.297963][ T6729] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 383.312905][ T6729] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 383.329374][ T6729] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 383.353573][ T6729] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 383.362708][ T6729] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 383.370259][ T6729] gfs2: fsid=syz:syz.0: File system withdrawn [ 383.376547][ T6729] CPU: 1 UID: 0 PID: 6729 Comm: syz.0.53 Not tainted syzkaller #0 PREEMPT(none) [ 383.376695][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 383.376784][ T6729] Call Trace: [ 383.376837][ T6729] [ 383.376888][ T6729] __dump_stack+0x26/0x30 [ 383.377066][ T6729] dump_stack_lvl+0x1df/0x270 [ 383.377251][ T6729] dump_stack+0x1e/0x25 [ 383.377408][ T6729] gfs2_withdraw+0x1ec1/0x2020 [ 383.377628][ T6729] gfs2_meta_check_ii+0xd7/0x100 [ 383.377789][ T6729] gfs2_quota_init+0x256f/0x2730 [ 383.378059][ T6729] gfs2_make_fs_rw+0x1d5/0x460 [ 383.378259][ T6729] gfs2_fill_super+0x3d31/0x3f50 [ 383.378421][ T6729] ? init_locking+0xed/0x500 [ 383.378613][ T6729] get_tree_bdev_flags+0x6e3/0x920 [ 383.378796][ T6729] ? __pfx_gfs2_fill_super+0x10/0x10 [ 383.378955][ T6729] ? __pfx_gfs2_fill_super+0x10/0x10 [ 383.379088][ T6729] ? __pfx_gfs2_get_tree+0x10/0x10 [ 383.379190][ T6729] get_tree_bdev+0x38/0x50 [ 383.379313][ T6729] gfs2_get_tree+0x57/0x350 [ 383.379412][ T6729] ? __pfx_gfs2_get_tree+0x10/0x10 [ 383.379509][ T6729] vfs_get_tree+0xb3/0x5c0 [ 383.379684][ T6729] ? mount_capable+0x99/0x100 [ 383.379841][ T6729] do_new_mount+0x733/0x14b0 [ 383.379963][ T6729] ? apparmor_capable+0x32d/0x410 [ 383.380081][ T6729] ? kmsan_get_metadata+0xfb/0x160 [ 383.380205][ T6729] path_mount+0x6db/0x1ea0 [ 383.380318][ T6729] ? user_path_at+0x32d/0x3d0 [ 383.380425][ T6729] __se_sys_mount+0x6eb/0x7d0 [ 383.380543][ T6729] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 383.380706][ T6729] __x64_sys_mount+0xe4/0x150 [ 383.380825][ T6729] x64_sys_call+0x3604/0x3e20 [ 383.380945][ T6729] do_syscall_64+0xd9/0x210 [ 383.381070][ T6729] ? irqentry_exit+0x16/0x60 [ 383.381184][ T6729] ? clear_bhb_loop+0x40/0x90 [ 383.381290][ T6729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.381388][ T6729] RIP: 0033:0x7fc8c257ffba [ 383.381465][ T6729] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.381544][ T6729] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 383.381640][ T6729] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 383.381706][ T6729] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 383.381767][ T6729] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 383.381825][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 383.381881][ T6729] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 383.381961][ T6729] [ 383.689891][ T6729] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:14 executed programs: 41 [ 384.857059][ T6735] loop0: detected capacity change from 0 to 32768 [ 384.894086][ T6735] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 384.902795][ T6735] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 384.933171][ T6735] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 384.945787][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 384.953307][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 385.080783][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 385.089261][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 385.094946][ T6735] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 385.206164][ T6735] syz.0.54: attempt to access beyond end of device [ 385.206164][ T6735] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 385.246529][ T6735] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 385.262067][ T6735] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 385.287394][ T6735] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 385.296432][ T6735] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 385.303968][ T6735] gfs2: fsid=syz:syz.0: File system withdrawn [ 385.310618][ T6735] CPU: 1 UID: 0 PID: 6735 Comm: syz.0.54 Not tainted syzkaller #0 PREEMPT(none) [ 385.310753][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.310843][ T6735] Call Trace: [ 385.310894][ T6735] [ 385.310942][ T6735] __dump_stack+0x26/0x30 [ 385.311117][ T6735] dump_stack_lvl+0x1df/0x270 [ 385.311298][ T6735] dump_stack+0x1e/0x25 [ 385.311462][ T6735] gfs2_withdraw+0x1ec1/0x2020 [ 385.311680][ T6735] gfs2_meta_check_ii+0xd7/0x100 [ 385.311846][ T6735] gfs2_quota_init+0x256f/0x2730 [ 385.312124][ T6735] gfs2_make_fs_rw+0x1d5/0x460 [ 385.312298][ T6735] gfs2_fill_super+0x3d31/0x3f50 [ 385.312465][ T6735] ? init_locking+0xed/0x500 [ 385.312676][ T6735] get_tree_bdev_flags+0x6e3/0x920 [ 385.312866][ T6735] ? __pfx_gfs2_fill_super+0x10/0x10 [ 385.313029][ T6735] ? __pfx_gfs2_fill_super+0x10/0x10 [ 385.313185][ T6735] ? __pfx_gfs2_get_tree+0x10/0x10 [ 385.313338][ T6735] get_tree_bdev+0x38/0x50 [ 385.313522][ T6735] gfs2_get_tree+0x57/0x350 [ 385.313683][ T6735] ? __pfx_gfs2_get_tree+0x10/0x10 [ 385.313851][ T6735] vfs_get_tree+0xb3/0x5c0 [ 385.314026][ T6735] ? mount_capable+0x99/0x100 [ 385.314189][ T6735] do_new_mount+0x733/0x14b0 [ 385.314352][ T6735] ? apparmor_capable+0x32d/0x410 [ 385.314547][ T6735] ? kmsan_get_metadata+0xfb/0x160 [ 385.314748][ T6735] path_mount+0x6db/0x1ea0 [ 385.314929][ T6735] ? user_path_at+0x32d/0x3d0 [ 385.315102][ T6735] __se_sys_mount+0x6eb/0x7d0 [ 385.315278][ T6735] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 385.315533][ T6735] __x64_sys_mount+0xe4/0x150 [ 385.315717][ T6735] x64_sys_call+0x3604/0x3e20 [ 385.315851][ T6735] do_syscall_64+0xd9/0x210 [ 385.315979][ T6735] ? irqentry_exit+0x16/0x60 [ 385.316093][ T6735] ? clear_bhb_loop+0x40/0x90 [ 385.316198][ T6735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.316297][ T6735] RIP: 0033:0x7fc8c257ffba [ 385.316373][ T6735] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.316451][ T6735] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.316544][ T6735] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 385.316610][ T6735] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 385.316670][ T6735] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 385.316728][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 385.316783][ T6735] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 385.316863][ T6735] [ 385.600272][ T6735] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 386.757054][ T6741] loop0: detected capacity change from 0 to 32768 [ 386.782444][ T6741] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 386.791164][ T6741] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 386.829244][ T6741] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 386.843462][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 386.851232][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 386.979287][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 386.988111][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 386.995828][ T6741] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 387.092182][ T6741] syz.0.55: attempt to access beyond end of device [ 387.092182][ T6741] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 387.137523][ T6741] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 387.153489][ T6741] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 387.189416][ T6741] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 387.198679][ T6741] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 387.207394][ T6741] gfs2: fsid=syz:syz.0: File system withdrawn [ 387.214872][ T6741] CPU: 0 UID: 0 PID: 6741 Comm: syz.0.55 Not tainted syzkaller #0 PREEMPT(none) [ 387.215011][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.215101][ T6741] Call Trace: [ 387.215160][ T6741] [ 387.215211][ T6741] __dump_stack+0x26/0x30 [ 387.215392][ T6741] dump_stack_lvl+0x1df/0x270 [ 387.215585][ T6741] dump_stack+0x1e/0x25 [ 387.215746][ T6741] gfs2_withdraw+0x1ec1/0x2020 [ 387.215962][ T6741] gfs2_meta_check_ii+0xd7/0x100 [ 387.216133][ T6741] gfs2_quota_init+0x256f/0x2730 [ 387.216411][ T6741] gfs2_make_fs_rw+0x1d5/0x460 [ 387.216587][ T6741] gfs2_fill_super+0x3d31/0x3f50 [ 387.216754][ T6741] ? init_locking+0xed/0x500 [ 387.216948][ T6741] get_tree_bdev_flags+0x6e3/0x920 [ 387.217143][ T6741] ? __pfx_gfs2_fill_super+0x10/0x10 [ 387.217305][ T6741] ? __pfx_gfs2_fill_super+0x10/0x10 [ 387.217456][ T6741] ? __pfx_gfs2_get_tree+0x10/0x10 [ 387.217615][ T6741] get_tree_bdev+0x38/0x50 [ 387.217792][ T6741] gfs2_get_tree+0x57/0x350 [ 387.217950][ T6741] ? __pfx_gfs2_get_tree+0x10/0x10 [ 387.218114][ T6741] vfs_get_tree+0xb3/0x5c0 [ 387.218288][ T6741] ? mount_capable+0x99/0x100 [ 387.218452][ T6741] do_new_mount+0x733/0x14b0 [ 387.218621][ T6741] ? apparmor_capable+0x32d/0x410 [ 387.218809][ T6741] ? kmsan_get_metadata+0xfb/0x160 [ 387.219008][ T6741] path_mount+0x6db/0x1ea0 [ 387.219203][ T6741] ? user_path_at+0x32d/0x3d0 [ 387.219371][ T6741] __se_sys_mount+0x6eb/0x7d0 [ 387.219557][ T6741] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 387.219800][ T6741] __x64_sys_mount+0xe4/0x150 [ 387.219998][ T6741] x64_sys_call+0x3604/0x3e20 [ 387.220195][ T6741] do_syscall_64+0xd9/0x210 [ 387.220398][ T6741] ? irqentry_exit+0x16/0x60 [ 387.220580][ T6741] ? clear_bhb_loop+0x40/0x90 [ 387.220745][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.220903][ T6741] RIP: 0033:0x7fc8c257ffba [ 387.221021][ T6741] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.221152][ T6741] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 387.221293][ T6741] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 387.221398][ T6741] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 387.221496][ T6741] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 387.221590][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 387.221680][ T6741] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 387.221819][ T6741] [ 387.520437][ T6741] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 388.676274][ T6748] loop0: detected capacity change from 0 to 32768 [ 388.708648][ T6748] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 388.717403][ T6748] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 388.760888][ T6748] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 388.775304][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 388.782582][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 388.903850][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 388.914884][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 388.920570][ T6748] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 389.012104][ T6748] syz.0.56: attempt to access beyond end of device [ 389.012104][ T6748] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 389.028061][ T6748] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 389.045049][ T6748] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 389.075824][ T6748] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 389.084839][ T6748] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 389.092473][ T6748] gfs2: fsid=syz:syz.0: File system withdrawn [ 389.098797][ T6748] CPU: 1 UID: 0 PID: 6748 Comm: syz.0.56 Not tainted syzkaller #0 PREEMPT(none) [ 389.098940][ T6748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 389.099034][ T6748] Call Trace: [ 389.099088][ T6748] [ 389.099139][ T6748] __dump_stack+0x26/0x30 [ 389.099313][ T6748] dump_stack_lvl+0x1df/0x270 [ 389.099505][ T6748] dump_stack+0x1e/0x25 [ 389.099664][ T6748] gfs2_withdraw+0x1ec1/0x2020 [ 389.099875][ T6748] gfs2_metatype_check_ii+0x113/0x140 [ 389.100056][ T6748] gfs2_quota_init+0x25bf/0x2730 [ 389.100326][ T6748] gfs2_make_fs_rw+0x1d5/0x460 [ 389.100499][ T6748] gfs2_fill_super+0x3d31/0x3f50 [ 389.100659][ T6748] ? init_locking+0xed/0x500 [ 389.100855][ T6748] get_tree_bdev_flags+0x6e3/0x920 [ 389.101046][ T6748] ? __pfx_gfs2_fill_super+0x10/0x10 [ 389.101206][ T6748] ? __pfx_gfs2_fill_super+0x10/0x10 [ 389.101354][ T6748] ? __pfx_gfs2_get_tree+0x10/0x10 [ 389.101514][ T6748] get_tree_bdev+0x38/0x50 [ 389.101688][ T6748] gfs2_get_tree+0x57/0x350 [ 389.101843][ T6748] ? __pfx_gfs2_get_tree+0x10/0x10 [ 389.102027][ T6748] vfs_get_tree+0xb3/0x5c0 [ 389.102199][ T6748] ? mount_capable+0x99/0x100 [ 389.102361][ T6748] do_new_mount+0x733/0x14b0 [ 389.102527][ T6748] ? apparmor_capable+0x32d/0x410 [ 389.102707][ T6748] ? kmsan_get_metadata+0xfb/0x160 [ 389.102906][ T6748] path_mount+0x6db/0x1ea0 [ 389.103089][ T6748] ? user_path_at+0x32d/0x3d0 [ 389.103261][ T6748] __se_sys_mount+0x6eb/0x7d0 [ 389.103438][ T6748] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 389.103682][ T6748] __x64_sys_mount+0xe4/0x150 [ 389.103872][ T6748] x64_sys_call+0x3604/0x3e20 [ 389.104061][ T6748] do_syscall_64+0xd9/0x210 [ 389.104260][ T6748] ? irqentry_exit+0x16/0x60 [ 389.104454][ T6748] ? clear_bhb_loop+0x40/0x90 [ 389.104614][ T6748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.104773][ T6748] RIP: 0033:0x7fc8c257ffba [ 389.104890][ T6748] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.104996][ T6748] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.105086][ T6748] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 389.105150][ T6748] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 389.105210][ T6748] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 389.105269][ T6748] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 389.105324][ T6748] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 389.105404][ T6748] [ 389.381515][ T6748] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:20 executed programs: 44 [ 390.569451][ T6754] loop0: detected capacity change from 0 to 32768 [ 390.606867][ T6754] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 390.615756][ T6754] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 390.660836][ T6754] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 390.674391][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 390.682258][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 390.808585][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 390.817242][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 390.824544][ T6754] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 390.919202][ T6754] syz.0.57: attempt to access beyond end of device [ 390.919202][ T6754] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 390.934441][ T6754] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 390.951434][ T6754] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 390.975070][ T6754] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 390.984133][ T6754] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 390.991879][ T6754] gfs2: fsid=syz:syz.0: File system withdrawn [ 390.998132][ T6754] CPU: 0 UID: 0 PID: 6754 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT(none) [ 390.998269][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.998359][ T6754] Call Trace: [ 390.998409][ T6754] [ 390.998459][ T6754] __dump_stack+0x26/0x30 [ 390.998640][ T6754] dump_stack_lvl+0x1df/0x270 [ 390.998823][ T6754] dump_stack+0x1e/0x25 [ 390.998987][ T6754] gfs2_withdraw+0x1ec1/0x2020 [ 390.999202][ T6754] gfs2_metatype_check_ii+0x113/0x140 [ 390.999374][ T6754] gfs2_quota_init+0x25bf/0x2730 [ 390.999646][ T6754] gfs2_make_fs_rw+0x1d5/0x460 [ 390.999826][ T6754] gfs2_fill_super+0x3d31/0x3f50 [ 390.999988][ T6754] ? init_locking+0xed/0x500 [ 391.000189][ T6754] get_tree_bdev_flags+0x6e3/0x920 [ 391.000377][ T6754] ? __pfx_gfs2_fill_super+0x10/0x10 [ 391.000537][ T6754] ? __pfx_gfs2_fill_super+0x10/0x10 [ 391.000691][ T6754] ? __pfx_gfs2_get_tree+0x10/0x10 [ 391.000845][ T6754] get_tree_bdev+0x38/0x50 [ 391.001016][ T6754] gfs2_get_tree+0x57/0x350 [ 391.001176][ T6754] ? __pfx_gfs2_get_tree+0x10/0x10 [ 391.001331][ T6754] vfs_get_tree+0xb3/0x5c0 [ 391.001505][ T6754] ? mount_capable+0x99/0x100 [ 391.001659][ T6754] do_new_mount+0x733/0x14b0 [ 391.001827][ T6754] ? apparmor_capable+0x32d/0x410 [ 391.002004][ T6754] ? kmsan_get_metadata+0xfb/0x160 [ 391.002211][ T6754] path_mount+0x6db/0x1ea0 [ 391.002353][ T6754] ? user_path_at+0x32d/0x3d0 [ 391.002459][ T6754] __se_sys_mount+0x6eb/0x7d0 [ 391.002569][ T6754] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 391.002726][ T6754] __x64_sys_mount+0xe4/0x150 [ 391.002848][ T6754] x64_sys_call+0x3604/0x3e20 [ 391.002971][ T6754] do_syscall_64+0xd9/0x210 [ 391.003102][ T6754] ? irqentry_exit+0x16/0x60 [ 391.003222][ T6754] ? clear_bhb_loop+0x40/0x90 [ 391.003324][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.003425][ T6754] RIP: 0033:0x7fc8c257ffba [ 391.003501][ T6754] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.003578][ T6754] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 391.003669][ T6754] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 391.003733][ T6754] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 391.003795][ T6754] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 391.003853][ T6754] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 391.003909][ T6754] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 391.003989][ T6754] [ 391.300237][ T6754] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 392.483008][ T6764] loop0: detected capacity change from 0 to 32768 [ 392.513184][ T6764] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 392.521984][ T6764] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 392.544366][ T6764] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 392.559359][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 392.567317][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 392.702501][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 135ms [ 392.711190][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 392.718280][ T6764] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 392.811475][ T6764] syz.0.58: attempt to access beyond end of device [ 392.811475][ T6764] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 392.826692][ T6764] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 392.843257][ T6764] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 392.873975][ T6764] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 392.883117][ T6764] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 392.890833][ T6764] gfs2: fsid=syz:syz.0: File system withdrawn [ 392.897093][ T6764] CPU: 0 UID: 0 PID: 6764 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(none) [ 392.897231][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 392.897325][ T6764] Call Trace: [ 392.897376][ T6764] [ 392.897432][ T6764] __dump_stack+0x26/0x30 [ 392.897610][ T6764] dump_stack_lvl+0x1df/0x270 [ 392.897830][ T6764] dump_stack+0x1e/0x25 [ 392.898011][ T6764] gfs2_withdraw+0x1ec1/0x2020 [ 392.898230][ T6764] gfs2_meta_check_ii+0xd7/0x100 [ 392.898398][ T6764] gfs2_quota_init+0x256f/0x2730 [ 392.898675][ T6764] gfs2_make_fs_rw+0x1d5/0x460 [ 392.898854][ T6764] gfs2_fill_super+0x3d31/0x3f50 [ 392.899023][ T6764] ? init_locking+0xed/0x500 [ 392.899221][ T6764] get_tree_bdev_flags+0x6e3/0x920 [ 392.899411][ T6764] ? __pfx_gfs2_fill_super+0x10/0x10 [ 392.899569][ T6764] ? __pfx_gfs2_fill_super+0x10/0x10 [ 392.899716][ T6764] ? __pfx_gfs2_get_tree+0x10/0x10 [ 392.899869][ T6764] get_tree_bdev+0x38/0x50 [ 392.900052][ T6764] gfs2_get_tree+0x57/0x350 [ 392.900206][ T6764] ? __pfx_gfs2_get_tree+0x10/0x10 [ 392.900359][ T6764] vfs_get_tree+0xb3/0x5c0 [ 392.900531][ T6764] ? mount_capable+0x99/0x100 [ 392.900693][ T6764] do_new_mount+0x733/0x14b0 [ 392.900868][ T6764] ? apparmor_capable+0x32d/0x410 [ 392.901062][ T6764] ? kmsan_get_metadata+0xfb/0x160 [ 392.901262][ T6764] path_mount+0x6db/0x1ea0 [ 392.901445][ T6764] ? user_path_at+0x32d/0x3d0 [ 392.901620][ T6764] __se_sys_mount+0x6eb/0x7d0 [ 392.901803][ T6764] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 392.902063][ T6764] __x64_sys_mount+0xe4/0x150 [ 392.902249][ T6764] x64_sys_call+0x3604/0x3e20 [ 392.902439][ T6764] do_syscall_64+0xd9/0x210 [ 392.902641][ T6764] ? irqentry_exit+0x16/0x60 [ 392.902823][ T6764] ? clear_bhb_loop+0x40/0x90 [ 392.902992][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.903151][ T6764] RIP: 0033:0x7fc8c257ffba [ 392.903270][ T6764] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.903396][ T6764] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 392.903537][ T6764] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 392.903641][ T6764] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 392.903738][ T6764] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 392.903833][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 392.903924][ T6764] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 392.904065][ T6764] [ 393.169990][ T6764] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 394.348127][ T6770] loop0: detected capacity change from 0 to 32768 [ 394.384547][ T6770] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 394.393280][ T6770] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 394.430948][ T6770] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 394.448718][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 394.455940][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 394.597810][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 141ms [ 394.606455][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 394.612217][ T6770] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 394.696759][ T6770] syz.0.59: attempt to access beyond end of device [ 394.696759][ T6770] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 394.733356][ T6770] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 394.751686][ T6770] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 394.776856][ T6770] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 394.785938][ T6770] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 394.793913][ T6770] gfs2: fsid=syz:syz.0: File system withdrawn [ 394.800274][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.0.59 Not tainted syzkaller #0 PREEMPT(none) [ 394.800416][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.800503][ T6770] Call Trace: [ 394.800555][ T6770] [ 394.800613][ T6770] __dump_stack+0x26/0x30 [ 394.800795][ T6770] dump_stack_lvl+0x1df/0x270 [ 394.800976][ T6770] dump_stack+0x1e/0x25 [ 394.801134][ T6770] gfs2_withdraw+0x1ec1/0x2020 [ 394.801348][ T6770] gfs2_meta_check_ii+0xd7/0x100 [ 394.801511][ T6770] gfs2_quota_init+0x256f/0x2730 [ 394.801798][ T6770] gfs2_make_fs_rw+0x1d5/0x460 [ 394.801971][ T6770] gfs2_fill_super+0x3d31/0x3f50 [ 394.802105][ T6770] ? init_locking+0xed/0x500 [ 394.802226][ T6770] get_tree_bdev_flags+0x6e3/0x920 [ 394.802344][ T6770] ? __pfx_gfs2_fill_super+0x10/0x10 [ 394.802445][ T6770] ? __pfx_gfs2_fill_super+0x10/0x10 [ 394.802540][ T6770] ? __pfx_gfs2_get_tree+0x10/0x10 [ 394.802644][ T6770] get_tree_bdev+0x38/0x50 [ 394.802750][ T6770] gfs2_get_tree+0x57/0x350 [ 394.802849][ T6770] ? __pfx_gfs2_get_tree+0x10/0x10 [ 394.802944][ T6770] vfs_get_tree+0xb3/0x5c0 [ 394.803053][ T6770] ? mount_capable+0x99/0x100 [ 394.803151][ T6770] do_new_mount+0x733/0x14b0 [ 394.803259][ T6770] ? apparmor_capable+0x32d/0x410 [ 394.803374][ T6770] ? kmsan_get_metadata+0xfb/0x160 [ 394.803499][ T6770] path_mount+0x6db/0x1ea0 [ 394.803615][ T6770] ? user_path_at+0x32d/0x3d0 [ 394.803723][ T6770] __se_sys_mount+0x6eb/0x7d0 [ 394.803836][ T6770] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 394.803996][ T6770] __x64_sys_mount+0xe4/0x150 [ 394.804117][ T6770] x64_sys_call+0x3604/0x3e20 [ 394.804235][ T6770] do_syscall_64+0xd9/0x210 [ 394.804362][ T6770] ? irqentry_exit+0x16/0x60 [ 394.804473][ T6770] ? clear_bhb_loop+0x40/0x90 [ 394.804583][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.804685][ T6770] RIP: 0033:0x7fc8c257ffba [ 394.804760][ T6770] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.804838][ T6770] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 394.804928][ T6770] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 394.804995][ T6770] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 394.805054][ T6770] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 394.805112][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 394.805167][ T6770] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 394.805247][ T6770] [ 395.090015][ T6770] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:25 executed programs: 47 [ 396.245872][ T6777] loop0: detected capacity change from 0 to 32768 [ 396.275149][ T6777] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 396.283823][ T6777] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 396.322272][ T6777] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 396.334711][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 396.342789][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 396.464733][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 396.473346][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 396.484231][ T6777] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 396.580172][ T6777] syz.0.60: attempt to access beyond end of device [ 396.580172][ T6777] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 396.597247][ T6777] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 396.614436][ T6777] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 396.640781][ T6777] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 396.649954][ T6777] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 396.657134][ T6777] gfs2: fsid=syz:syz.0: File system withdrawn [ 396.663579][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.0.60 Not tainted syzkaller #0 PREEMPT(none) [ 396.663723][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 396.663819][ T6777] Call Trace: [ 396.663874][ T6777] [ 396.663925][ T6777] __dump_stack+0x26/0x30 [ 396.664107][ T6777] dump_stack_lvl+0x1df/0x270 [ 396.664293][ T6777] dump_stack+0x1e/0x25 [ 396.664454][ T6777] gfs2_withdraw+0x1ec1/0x2020 [ 396.664664][ T6777] gfs2_meta_check_ii+0xd7/0x100 [ 396.664837][ T6777] gfs2_quota_init+0x256f/0x2730 [ 396.665115][ T6777] gfs2_make_fs_rw+0x1d5/0x460 [ 396.665290][ T6777] gfs2_fill_super+0x3d31/0x3f50 [ 396.665452][ T6777] ? init_locking+0xed/0x500 [ 396.665640][ T6777] get_tree_bdev_flags+0x6e3/0x920 [ 396.665829][ T6777] ? __pfx_gfs2_fill_super+0x10/0x10 [ 396.665986][ T6777] ? __pfx_gfs2_fill_super+0x10/0x10 [ 396.666143][ T6777] ? __pfx_gfs2_get_tree+0x10/0x10 [ 396.666300][ T6777] get_tree_bdev+0x38/0x50 [ 396.666471][ T6777] gfs2_get_tree+0x57/0x350 [ 396.666633][ T6777] ? __pfx_gfs2_get_tree+0x10/0x10 [ 396.666797][ T6777] vfs_get_tree+0xb3/0x5c0 [ 396.666975][ T6777] ? mount_capable+0x99/0x100 [ 396.667138][ T6777] do_new_mount+0x733/0x14b0 [ 396.667306][ T6777] ? apparmor_capable+0x32d/0x410 [ 396.667495][ T6777] ? kmsan_get_metadata+0xfb/0x160 [ 396.667700][ T6777] path_mount+0x6db/0x1ea0 [ 396.667884][ T6777] ? user_path_at+0x32d/0x3d0 [ 396.668058][ T6777] __se_sys_mount+0x6eb/0x7d0 [ 396.668236][ T6777] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 396.668506][ T6777] __x64_sys_mount+0xe4/0x150 [ 396.668698][ T6777] x64_sys_call+0x3604/0x3e20 [ 396.668896][ T6777] do_syscall_64+0xd9/0x210 [ 396.669101][ T6777] ? irqentry_exit+0x16/0x60 [ 396.669281][ T6777] ? clear_bhb_loop+0x40/0x90 [ 396.669448][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.669612][ T6777] RIP: 0033:0x7fc8c257ffba [ 396.669730][ T6777] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.669862][ T6777] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 396.670003][ T6777] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 396.670107][ T6777] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 396.670203][ T6777] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 396.670291][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 396.670381][ T6777] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 396.670515][ T6777] [ 396.970019][ T6777] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 398.110856][ T6783] loop0: detected capacity change from 0 to 32768 [ 398.140956][ T6783] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 398.149310][ T6783] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 398.192671][ T6783] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 398.205455][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 398.213487][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 398.331945][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 118ms [ 398.340575][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 398.346273][ T6783] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 398.447642][ T6783] syz.0.61: attempt to access beyond end of device [ 398.447642][ T6783] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 398.464309][ T6783] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 398.481845][ T6783] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 398.508647][ T6783] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 398.517707][ T6783] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 398.525331][ T6783] gfs2: fsid=syz:syz.0: File system withdrawn [ 398.531754][ T6783] CPU: 0 UID: 0 PID: 6783 Comm: syz.0.61 Not tainted syzkaller #0 PREEMPT(none) [ 398.531900][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.531989][ T6783] Call Trace: [ 398.532040][ T6783] [ 398.532091][ T6783] __dump_stack+0x26/0x30 [ 398.532272][ T6783] dump_stack_lvl+0x1df/0x270 [ 398.532459][ T6783] dump_stack+0x1e/0x25 [ 398.532614][ T6783] gfs2_withdraw+0x1ec1/0x2020 [ 398.532820][ T6783] gfs2_meta_check_ii+0xd7/0x100 [ 398.532985][ T6783] gfs2_quota_init+0x256f/0x2730 [ 398.533261][ T6783] gfs2_make_fs_rw+0x1d5/0x460 [ 398.533449][ T6783] gfs2_fill_super+0x3d31/0x3f50 [ 398.533616][ T6783] ? init_locking+0xed/0x500 [ 398.533812][ T6783] get_tree_bdev_flags+0x6e3/0x920 [ 398.533996][ T6783] ? __pfx_gfs2_fill_super+0x10/0x10 [ 398.534154][ T6783] ? __pfx_gfs2_fill_super+0x10/0x10 [ 398.534303][ T6783] ? __pfx_gfs2_get_tree+0x10/0x10 [ 398.534464][ T6783] get_tree_bdev+0x38/0x50 [ 398.534636][ T6783] gfs2_get_tree+0x57/0x350 [ 398.534790][ T6783] ? __pfx_gfs2_get_tree+0x10/0x10 [ 398.534948][ T6783] vfs_get_tree+0xb3/0x5c0 [ 398.535120][ T6783] ? mount_capable+0x99/0x100 [ 398.535283][ T6783] do_new_mount+0x733/0x14b0 [ 398.535457][ T6783] ? apparmor_capable+0x32d/0x410 [ 398.535633][ T6783] ? kmsan_get_metadata+0xfb/0x160 [ 398.535832][ T6783] path_mount+0x6db/0x1ea0 [ 398.536008][ T6783] ? user_path_at+0x32d/0x3d0 [ 398.536178][ T6783] __se_sys_mount+0x6eb/0x7d0 [ 398.536367][ T6783] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 398.536616][ T6783] __x64_sys_mount+0xe4/0x150 [ 398.536814][ T6783] x64_sys_call+0x3604/0x3e20 [ 398.537005][ T6783] do_syscall_64+0xd9/0x210 [ 398.537205][ T6783] ? irqentry_exit+0x16/0x60 [ 398.537393][ T6783] ? clear_bhb_loop+0x40/0x90 [ 398.537562][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.537725][ T6783] RIP: 0033:0x7fc8c257ffba [ 398.537843][ T6783] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.537969][ T6783] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 398.538112][ T6783] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 398.538215][ T6783] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 398.538312][ T6783] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 398.538412][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 398.538501][ T6783] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 398.538629][ T6783] [ 398.820105][ T6783] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 399.975738][ T6789] loop0: detected capacity change from 0 to 32768 [ 399.992827][ T6789] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 400.001444][ T6789] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 400.030079][ T6789] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 400.048989][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 400.056866][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 400.167713][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 110ms [ 400.176559][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 400.182206][ T6789] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 400.271127][ T6789] syz.0.62: attempt to access beyond end of device [ 400.271127][ T6789] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 400.288285][ T6789] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 400.305569][ T6789] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 400.337132][ T6789] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 400.346447][ T6789] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 400.354082][ T6789] gfs2: fsid=syz:syz.0: File system withdrawn [ 400.360512][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.0.62 Not tainted syzkaller #0 PREEMPT(none) [ 400.360655][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 400.360747][ T6789] Call Trace: [ 400.360798][ T6789] [ 400.360853][ T6789] __dump_stack+0x26/0x30 [ 400.361031][ T6789] dump_stack_lvl+0x1df/0x270 [ 400.361220][ T6789] dump_stack+0x1e/0x25 [ 400.361391][ T6789] gfs2_withdraw+0x1ec1/0x2020 [ 400.361607][ T6789] gfs2_meta_check_ii+0xd7/0x100 [ 400.361779][ T6789] gfs2_quota_init+0x256f/0x2730 [ 400.362054][ T6789] gfs2_make_fs_rw+0x1d5/0x460 [ 400.362239][ T6789] gfs2_fill_super+0x3d31/0x3f50 [ 400.362403][ T6789] ? init_locking+0xed/0x500 [ 400.362596][ T6789] get_tree_bdev_flags+0x6e3/0x920 [ 400.362786][ T6789] ? __pfx_gfs2_fill_super+0x10/0x10 [ 400.362945][ T6789] ? __pfx_gfs2_fill_super+0x10/0x10 [ 400.363092][ T6789] ? __pfx_gfs2_get_tree+0x10/0x10 [ 400.363254][ T6789] get_tree_bdev+0x38/0x50 [ 400.363430][ T6789] gfs2_get_tree+0x57/0x350 [ 400.363591][ T6789] ? __pfx_gfs2_get_tree+0x10/0x10 [ 400.363748][ T6789] vfs_get_tree+0xb3/0x5c0 [ 400.363950][ T6789] ? mount_capable+0x99/0x100 [ 400.364109][ T6789] do_new_mount+0x733/0x14b0 [ 400.364287][ T6789] ? apparmor_capable+0x32d/0x410 [ 400.364476][ T6789] ? kmsan_get_metadata+0xfb/0x160 [ 400.364675][ T6789] path_mount+0x6db/0x1ea0 [ 400.364843][ T6789] ? user_path_at+0x32d/0x3d0 [ 400.365011][ T6789] __se_sys_mount+0x6eb/0x7d0 [ 400.365182][ T6789] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 400.365436][ T6789] __x64_sys_mount+0xe4/0x150 [ 400.365619][ T6789] x64_sys_call+0x3604/0x3e20 [ 400.365807][ T6789] do_syscall_64+0xd9/0x210 [ 400.366005][ T6789] ? irqentry_exit+0x16/0x60 [ 400.366182][ T6789] ? clear_bhb_loop+0x40/0x90 [ 400.366354][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.366516][ T6789] RIP: 0033:0x7fc8c257ffba [ 400.366635][ T6789] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.366760][ T6789] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 400.366902][ T6789] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 400.367005][ T6789] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 400.367105][ T6789] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 400.367201][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 400.367297][ T6789] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 400.367427][ T6789] [ 400.650149][ T6789] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:31 executed programs: 50 [ 401.794083][ T6795] loop0: detected capacity change from 0 to 32768 [ 401.835039][ T6795] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 401.843710][ T6795] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 401.867994][ T6795] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 401.883937][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 401.891165][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 402.012860][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 402.021626][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 402.027156][ T6795] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 402.125148][ T6795] syz.0.63: attempt to access beyond end of device [ 402.125148][ T6795] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 402.140367][ T6795] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 402.156956][ T6795] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 402.186974][ T6795] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 402.196094][ T6795] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 402.203854][ T6795] gfs2: fsid=syz:syz.0: File system withdrawn [ 402.210207][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz.0.63 Not tainted syzkaller #0 PREEMPT(none) [ 402.210300][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 402.210359][ T6795] Call Trace: [ 402.210390][ T6795] [ 402.210422][ T6795] __dump_stack+0x26/0x30 [ 402.210540][ T6795] dump_stack_lvl+0x1df/0x270 [ 402.210655][ T6795] dump_stack+0x1e/0x25 [ 402.210755][ T6795] gfs2_withdraw+0x1ec1/0x2020 [ 402.210887][ T6795] gfs2_meta_check_ii+0xd7/0x100 [ 402.210990][ T6795] gfs2_quota_init+0x256f/0x2730 [ 402.211167][ T6795] gfs2_make_fs_rw+0x1d5/0x460 [ 402.211277][ T6795] gfs2_fill_super+0x3d31/0x3f50 [ 402.211380][ T6795] ? init_locking+0xed/0x500 [ 402.211501][ T6795] get_tree_bdev_flags+0x6e3/0x920 [ 402.211674][ T6795] ? __pfx_gfs2_fill_super+0x10/0x10 [ 402.211836][ T6795] ? __pfx_gfs2_fill_super+0x10/0x10 [ 402.211931][ T6795] ? __pfx_gfs2_get_tree+0x10/0x10 [ 402.212028][ T6795] get_tree_bdev+0x38/0x50 [ 402.212140][ T6795] gfs2_get_tree+0x57/0x350 [ 402.212239][ T6795] ? __pfx_gfs2_get_tree+0x10/0x10 [ 402.212336][ T6795] vfs_get_tree+0xb3/0x5c0 [ 402.212444][ T6795] ? mount_capable+0x99/0x100 [ 402.212544][ T6795] do_new_mount+0x733/0x14b0 [ 402.212652][ T6795] ? apparmor_capable+0x32d/0x410 [ 402.212768][ T6795] ? kmsan_get_metadata+0xfb/0x160 [ 402.212894][ T6795] path_mount+0x6db/0x1ea0 [ 402.213007][ T6795] ? user_path_at+0x32d/0x3d0 [ 402.213116][ T6795] __se_sys_mount+0x6eb/0x7d0 [ 402.213229][ T6795] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 402.213384][ T6795] __x64_sys_mount+0xe4/0x150 [ 402.213506][ T6795] x64_sys_call+0x3604/0x3e20 [ 402.213623][ T6795] do_syscall_64+0xd9/0x210 [ 402.213752][ T6795] ? irqentry_exit+0x16/0x60 [ 402.213863][ T6795] ? clear_bhb_loop+0x40/0x90 [ 402.213967][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.214072][ T6795] RIP: 0033:0x7fc8c257ffba [ 402.214146][ T6795] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.214227][ T6795] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 402.214315][ T6795] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 402.214377][ T6795] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 402.214438][ T6795] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 402.214497][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 402.214552][ T6795] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 402.214633][ T6795] [ 402.490076][ T6795] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 403.627444][ T6801] loop0: detected capacity change from 0 to 32768 [ 403.659356][ T6801] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 403.667972][ T6801] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 403.715690][ T6801] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 403.728683][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 403.736686][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 403.873897][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 403.882562][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 403.888097][ T6801] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 403.981819][ T6801] syz.0.64: attempt to access beyond end of device [ 403.981819][ T6801] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 404.019085][ T6801] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 404.034538][ T6801] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 404.059731][ T6801] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 404.068677][ T6801] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 404.076458][ T6801] gfs2: fsid=syz:syz.0: File system withdrawn [ 404.082925][ T6801] CPU: 0 UID: 0 PID: 6801 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(none) [ 404.083076][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.083162][ T6801] Call Trace: [ 404.083212][ T6801] [ 404.083265][ T6801] __dump_stack+0x26/0x30 [ 404.083438][ T6801] dump_stack_lvl+0x1df/0x270 [ 404.083616][ T6801] dump_stack+0x1e/0x25 [ 404.083773][ T6801] gfs2_withdraw+0x1ec1/0x2020 [ 404.083973][ T6801] gfs2_meta_check_ii+0xd7/0x100 [ 404.084084][ T6801] gfs2_quota_init+0x256f/0x2730 [ 404.084253][ T6801] gfs2_make_fs_rw+0x1d5/0x460 [ 404.084366][ T6801] gfs2_fill_super+0x3d31/0x3f50 [ 404.084468][ T6801] ? init_locking+0xed/0x500 [ 404.084589][ T6801] get_tree_bdev_flags+0x6e3/0x920 [ 404.084708][ T6801] ? __pfx_gfs2_fill_super+0x10/0x10 [ 404.084808][ T6801] ? __pfx_gfs2_fill_super+0x10/0x10 [ 404.084904][ T6801] ? __pfx_gfs2_get_tree+0x10/0x10 [ 404.084999][ T6801] get_tree_bdev+0x38/0x50 [ 404.085112][ T6801] gfs2_get_tree+0x57/0x350 [ 404.085208][ T6801] ? __pfx_gfs2_get_tree+0x10/0x10 [ 404.085308][ T6801] vfs_get_tree+0xb3/0x5c0 [ 404.085415][ T6801] ? mount_capable+0x99/0x100 [ 404.085515][ T6801] do_new_mount+0x733/0x14b0 [ 404.085620][ T6801] ? apparmor_capable+0x32d/0x410 [ 404.085736][ T6801] ? kmsan_get_metadata+0xfb/0x160 [ 404.085863][ T6801] path_mount+0x6db/0x1ea0 [ 404.085975][ T6801] ? user_path_at+0x32d/0x3d0 [ 404.086085][ T6801] __se_sys_mount+0x6eb/0x7d0 [ 404.086198][ T6801] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 404.086352][ T6801] __x64_sys_mount+0xe4/0x150 [ 404.086473][ T6801] x64_sys_call+0x3604/0x3e20 [ 404.086589][ T6801] do_syscall_64+0xd9/0x210 [ 404.086716][ T6801] ? irqentry_exit+0x16/0x60 [ 404.086828][ T6801] ? clear_bhb_loop+0x40/0x90 [ 404.086933][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.087036][ T6801] RIP: 0033:0x7fc8c257ffba [ 404.087113][ T6801] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.087191][ T6801] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 404.087280][ T6801] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 404.087347][ T6801] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 404.087407][ T6801] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 404.087462][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 404.087518][ T6801] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 404.087599][ T6801] [ 404.372094][ T6801] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 405.539215][ T6807] loop0: detected capacity change from 0 to 32768 [ 405.563494][ T6807] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 405.572212][ T6807] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 405.611041][ T6807] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 405.626281][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 405.634200][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 405.760408][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 405.768867][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 405.774793][ T6807] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 405.869932][ T6807] syz.0.65: attempt to access beyond end of device [ 405.869932][ T6807] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 405.885033][ T6807] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 405.901503][ T6807] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 405.931524][ T6807] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 405.940608][ T6807] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 405.947799][ T6807] gfs2: fsid=syz:syz.0: File system withdrawn [ 405.954320][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(none) [ 405.954464][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 405.954554][ T6807] Call Trace: [ 405.954606][ T6807] [ 405.954655][ T6807] __dump_stack+0x26/0x30 [ 405.954832][ T6807] dump_stack_lvl+0x1df/0x270 [ 405.955017][ T6807] dump_stack+0x1e/0x25 [ 405.955181][ T6807] gfs2_withdraw+0x1ec1/0x2020 [ 405.955395][ T6807] gfs2_meta_check_ii+0xd7/0x100 [ 405.955556][ T6807] gfs2_quota_init+0x256f/0x2730 [ 405.955830][ T6807] gfs2_make_fs_rw+0x1d5/0x460 [ 405.956005][ T6807] gfs2_fill_super+0x3d31/0x3f50 [ 405.956169][ T6807] ? init_locking+0xed/0x500 [ 405.956368][ T6807] get_tree_bdev_flags+0x6e3/0x920 [ 405.956557][ T6807] ? __pfx_gfs2_fill_super+0x10/0x10 [ 405.956721][ T6807] ? __pfx_gfs2_fill_super+0x10/0x10 [ 405.956877][ T6807] ? __pfx_gfs2_get_tree+0x10/0x10 [ 405.957035][ T6807] get_tree_bdev+0x38/0x50 [ 405.957212][ T6807] gfs2_get_tree+0x57/0x350 [ 405.957365][ T6807] ? __pfx_gfs2_get_tree+0x10/0x10 [ 405.957520][ T6807] vfs_get_tree+0xb3/0x5c0 [ 405.957688][ T6807] ? mount_capable+0x99/0x100 [ 405.957844][ T6807] do_new_mount+0x733/0x14b0 [ 405.958011][ T6807] ? apparmor_capable+0x32d/0x410 [ 405.958207][ T6807] ? kmsan_get_metadata+0xfb/0x160 [ 405.958407][ T6807] path_mount+0x6db/0x1ea0 [ 405.958591][ T6807] ? user_path_at+0x32d/0x3d0 [ 405.958766][ T6807] __se_sys_mount+0x6eb/0x7d0 [ 405.958945][ T6807] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 405.959214][ T6807] __x64_sys_mount+0xe4/0x150 [ 405.959412][ T6807] x64_sys_call+0x3604/0x3e20 [ 405.959609][ T6807] do_syscall_64+0xd9/0x210 [ 405.959810][ T6807] ? irqentry_exit+0x16/0x60 [ 405.959995][ T6807] ? clear_bhb_loop+0x40/0x90 [ 405.960165][ T6807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.960328][ T6807] RIP: 0033:0x7fc8c257ffba [ 405.960445][ T6807] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.960569][ T6807] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.960710][ T6807] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 405.960815][ T6807] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 405.960913][ T6807] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 405.961007][ T6807] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 405.961097][ T6807] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 405.961233][ T6807] [ 406.260180][ T6807] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:37 executed programs: 53 [ 407.407561][ T6813] loop0: detected capacity change from 0 to 32768 [ 407.433300][ T6813] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 407.443802][ T6813] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 407.494099][ T6813] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 407.506874][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 407.514719][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 407.637998][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms [ 407.648926][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 407.657254][ T6813] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 407.744115][ T6813] syz.0.66: attempt to access beyond end of device [ 407.744115][ T6813] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 407.759217][ T6813] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 407.775798][ T6813] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 407.805601][ T6813] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 407.814621][ T6813] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 407.822229][ T6813] gfs2: fsid=syz:syz.0: File system withdrawn [ 407.828474][ T6813] CPU: 0 UID: 0 PID: 6813 Comm: syz.0.66 Not tainted syzkaller #0 PREEMPT(none) [ 407.828616][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.828708][ T6813] Call Trace: [ 407.828761][ T6813] [ 407.828812][ T6813] __dump_stack+0x26/0x30 [ 407.828998][ T6813] dump_stack_lvl+0x1df/0x270 [ 407.829182][ T6813] dump_stack+0x1e/0x25 [ 407.829339][ T6813] gfs2_withdraw+0x1ec1/0x2020 [ 407.829552][ T6813] gfs2_meta_check_ii+0xd7/0x100 [ 407.829709][ T6813] gfs2_quota_init+0x256f/0x2730 [ 407.829977][ T6813] gfs2_make_fs_rw+0x1d5/0x460 [ 407.830154][ T6813] gfs2_fill_super+0x3d31/0x3f50 [ 407.830316][ T6813] ? init_locking+0xed/0x500 [ 407.830501][ T6813] get_tree_bdev_flags+0x6e3/0x920 [ 407.830688][ T6813] ? __pfx_gfs2_fill_super+0x10/0x10 [ 407.830843][ T6813] ? __pfx_gfs2_fill_super+0x10/0x10 [ 407.831001][ T6813] ? __pfx_gfs2_get_tree+0x10/0x10 [ 407.831154][ T6813] get_tree_bdev+0x38/0x50 [ 407.831323][ T6813] gfs2_get_tree+0x57/0x350 [ 407.831484][ T6813] ? __pfx_gfs2_get_tree+0x10/0x10 [ 407.831641][ T6813] vfs_get_tree+0xb3/0x5c0 [ 407.831812][ T6813] ? mount_capable+0x99/0x100 [ 407.831971][ T6813] do_new_mount+0x733/0x14b0 [ 407.832148][ T6813] ? apparmor_capable+0x32d/0x410 [ 407.832332][ T6813] ? kmsan_get_metadata+0xfb/0x160 [ 407.832536][ T6813] path_mount+0x6db/0x1ea0 [ 407.832712][ T6813] ? user_path_at+0x32d/0x3d0 [ 407.832883][ T6813] __se_sys_mount+0x6eb/0x7d0 [ 407.833066][ T6813] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 407.833317][ T6813] __x64_sys_mount+0xe4/0x150 [ 407.833504][ T6813] x64_sys_call+0x3604/0x3e20 [ 407.833688][ T6813] do_syscall_64+0xd9/0x210 [ 407.833839][ T6813] ? irqentry_exit+0x16/0x60 [ 407.833954][ T6813] ? clear_bhb_loop+0x40/0x90 [ 407.834068][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.834170][ T6813] RIP: 0033:0x7fc8c257ffba [ 407.834245][ T6813] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.834322][ T6813] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 407.834411][ T6813] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 407.834475][ T6813] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 407.834536][ T6813] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 407.834596][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 407.834652][ T6813] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 407.834732][ T6813] [ 408.131468][ T6813] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 408.804595][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.811538][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.304440][ T6819] loop0: detected capacity change from 0 to 32768 [ 409.343065][ T6819] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 409.351854][ T6819] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 409.393296][ T6819] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 409.407669][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 409.415291][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 409.536548][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 409.545109][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 409.550863][ T6819] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 409.649692][ T6819] syz.0.67: attempt to access beyond end of device [ 409.649692][ T6819] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 409.688565][ T6819] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 409.704237][ T6819] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 409.728671][ T6819] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 409.737723][ T6819] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 409.745281][ T6819] gfs2: fsid=syz:syz.0: File system withdrawn [ 409.751751][ T6819] CPU: 0 UID: 0 PID: 6819 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(none) [ 409.751894][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.751984][ T6819] Call Trace: [ 409.752038][ T6819] [ 409.752088][ T6819] __dump_stack+0x26/0x30 [ 409.752269][ T6819] dump_stack_lvl+0x1df/0x270 [ 409.752455][ T6819] dump_stack+0x1e/0x25 [ 409.752619][ T6819] gfs2_withdraw+0x1ec1/0x2020 [ 409.752834][ T6819] gfs2_meta_check_ii+0xd7/0x100 [ 409.752996][ T6819] gfs2_quota_init+0x256f/0x2730 [ 409.753265][ T6819] gfs2_make_fs_rw+0x1d5/0x460 [ 409.753442][ T6819] gfs2_fill_super+0x3d31/0x3f50 [ 409.753605][ T6819] ? init_locking+0xed/0x500 [ 409.753795][ T6819] get_tree_bdev_flags+0x6e3/0x920 [ 409.753980][ T6819] ? __pfx_gfs2_fill_super+0x10/0x10 [ 409.754139][ T6819] ? __pfx_gfs2_fill_super+0x10/0x10 [ 409.754289][ T6819] ? __pfx_gfs2_get_tree+0x10/0x10 [ 409.754432][ T6819] get_tree_bdev+0x38/0x50 [ 409.754542][ T6819] gfs2_get_tree+0x57/0x350 [ 409.754647][ T6819] ? __pfx_gfs2_get_tree+0x10/0x10 [ 409.754744][ T6819] vfs_get_tree+0xb3/0x5c0 [ 409.754854][ T6819] ? mount_capable+0x99/0x100 [ 409.754959][ T6819] do_new_mount+0x733/0x14b0 [ 409.755067][ T6819] ? apparmor_capable+0x32d/0x410 [ 409.755185][ T6819] ? kmsan_get_metadata+0xfb/0x160 [ 409.755313][ T6819] path_mount+0x6db/0x1ea0 [ 409.755426][ T6819] ? user_path_at+0x32d/0x3d0 [ 409.755533][ T6819] __se_sys_mount+0x6eb/0x7d0 [ 409.755649][ T6819] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 409.755805][ T6819] __x64_sys_mount+0xe4/0x150 [ 409.755927][ T6819] x64_sys_call+0x3604/0x3e20 [ 409.756048][ T6819] do_syscall_64+0xd9/0x210 [ 409.756176][ T6819] ? irqentry_exit+0x16/0x60 [ 409.756290][ T6819] ? clear_bhb_loop+0x40/0x90 [ 409.756395][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.756496][ T6819] RIP: 0033:0x7fc8c257ffba [ 409.756572][ T6819] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.756655][ T6819] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 409.756746][ T6819] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 409.756810][ T6819] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 409.756871][ T6819] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 409.756930][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 409.756985][ T6819] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 409.757065][ T6819] [ 410.039974][ T6819] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 411.185549][ T6825] loop0: detected capacity change from 0 to 32768 [ 411.214478][ T6825] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 411.223161][ T6825] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 411.269231][ T6825] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 411.284058][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 411.291515][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 411.410437][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 118ms [ 411.418895][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 411.424631][ T6825] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 411.504065][ T6825] syz.0.68: attempt to access beyond end of device [ 411.504065][ T6825] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 411.519219][ T6825] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 411.536280][ T6825] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 411.571200][ T6825] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 411.580352][ T6825] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 411.587636][ T6825] gfs2: fsid=syz:syz.0: File system withdrawn [ 411.594244][ T6825] CPU: 1 UID: 0 PID: 6825 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(none) [ 411.594390][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.594489][ T6825] Call Trace: [ 411.594540][ T6825] [ 411.594594][ T6825] __dump_stack+0x26/0x30 [ 411.594770][ T6825] dump_stack_lvl+0x1df/0x270 [ 411.594953][ T6825] dump_stack+0x1e/0x25 [ 411.595117][ T6825] gfs2_withdraw+0x1ec1/0x2020 [ 411.595328][ T6825] gfs2_metatype_check_ii+0x113/0x140 [ 411.595510][ T6825] gfs2_quota_init+0x25bf/0x2730 [ 411.595787][ T6825] gfs2_make_fs_rw+0x1d5/0x460 [ 411.595961][ T6825] gfs2_fill_super+0x3d31/0x3f50 [ 411.596135][ T6825] ? init_locking+0xed/0x500 [ 411.596331][ T6825] get_tree_bdev_flags+0x6e3/0x920 [ 411.596520][ T6825] ? __pfx_gfs2_fill_super+0x10/0x10 [ 411.596681][ T6825] ? __pfx_gfs2_fill_super+0x10/0x10 [ 411.596832][ T6825] ? __pfx_gfs2_get_tree+0x10/0x10 [ 411.596988][ T6825] get_tree_bdev+0x38/0x50 [ 411.597158][ T6825] gfs2_get_tree+0x57/0x350 [ 411.597319][ T6825] ? __pfx_gfs2_get_tree+0x10/0x10 [ 411.597483][ T6825] vfs_get_tree+0xb3/0x5c0 [ 411.597650][ T6825] ? mount_capable+0x99/0x100 [ 411.597804][ T6825] do_new_mount+0x733/0x14b0 [ 411.597974][ T6825] ? apparmor_capable+0x32d/0x410 [ 411.598154][ T6825] ? kmsan_get_metadata+0xfb/0x160 [ 411.598359][ T6825] path_mount+0x6db/0x1ea0 [ 411.598543][ T6825] ? user_path_at+0x32d/0x3d0 [ 411.598713][ T6825] __se_sys_mount+0x6eb/0x7d0 [ 411.598887][ T6825] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 411.599139][ T6825] __x64_sys_mount+0xe4/0x150 [ 411.599333][ T6825] x64_sys_call+0x3604/0x3e20 [ 411.599529][ T6825] do_syscall_64+0xd9/0x210 [ 411.599728][ T6825] ? irqentry_exit+0x16/0x60 [ 411.599907][ T6825] ? clear_bhb_loop+0x40/0x90 [ 411.600070][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.600232][ T6825] RIP: 0033:0x7fc8c257ffba [ 411.600353][ T6825] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.600482][ T6825] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 411.600622][ T6825] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 411.600726][ T6825] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 411.600822][ T6825] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 411.600915][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 411.601003][ T6825] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 411.601132][ T6825] [ 411.900173][ T6825] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:42 executed programs: 56 [ 413.048992][ T6831] loop0: detected capacity change from 0 to 32768 [ 413.076486][ T6831] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 413.085126][ T6831] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 413.120630][ T6831] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 1ms [ 413.138980][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 413.146896][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 413.286731][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 139ms [ 413.295557][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 413.301458][ T6831] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 413.395466][ T6831] syz.0.69: attempt to access beyond end of device [ 413.395466][ T6831] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 413.431384][ T6831] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 413.446878][ T6831] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 413.471224][ T6831] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 413.480314][ T6831] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 413.487784][ T6831] gfs2: fsid=syz:syz.0: File system withdrawn [ 413.494239][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.0.69 Not tainted syzkaller #0 PREEMPT(none) [ 413.494384][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.494476][ T6831] Call Trace: [ 413.494528][ T6831] [ 413.494579][ T6831] __dump_stack+0x26/0x30 [ 413.494761][ T6831] dump_stack_lvl+0x1df/0x270 [ 413.494940][ T6831] dump_stack+0x1e/0x25 [ 413.495100][ T6831] gfs2_withdraw+0x1ec1/0x2020 [ 413.495302][ T6831] gfs2_meta_check_ii+0xd7/0x100 [ 413.495463][ T6831] gfs2_quota_init+0x256f/0x2730 [ 413.495739][ T6831] gfs2_make_fs_rw+0x1d5/0x460 [ 413.495914][ T6831] gfs2_fill_super+0x3d31/0x3f50 [ 413.496076][ T6831] ? init_locking+0xed/0x500 [ 413.496263][ T6831] get_tree_bdev_flags+0x6e3/0x920 [ 413.496448][ T6831] ? __pfx_gfs2_fill_super+0x10/0x10 [ 413.496612][ T6831] ? __pfx_gfs2_fill_super+0x10/0x10 [ 413.496766][ T6831] ? __pfx_gfs2_get_tree+0x10/0x10 [ 413.496923][ T6831] get_tree_bdev+0x38/0x50 [ 413.497097][ T6831] gfs2_get_tree+0x57/0x350 [ 413.497259][ T6831] ? __pfx_gfs2_get_tree+0x10/0x10 [ 413.497416][ T6831] vfs_get_tree+0xb3/0x5c0 [ 413.497596][ T6831] ? mount_capable+0x99/0x100 [ 413.497761][ T6831] do_new_mount+0x733/0x14b0 [ 413.497932][ T6831] ? apparmor_capable+0x32d/0x410 [ 413.498117][ T6831] ? kmsan_get_metadata+0xfb/0x160 [ 413.498320][ T6831] path_mount+0x6db/0x1ea0 [ 413.498498][ T6831] ? user_path_at+0x32d/0x3d0 [ 413.498684][ T6831] __se_sys_mount+0x6eb/0x7d0 [ 413.498861][ T6831] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 413.499122][ T6831] __x64_sys_mount+0xe4/0x150 [ 413.499318][ T6831] x64_sys_call+0x3604/0x3e20 [ 413.499513][ T6831] do_syscall_64+0xd9/0x210 [ 413.499718][ T6831] ? irqentry_exit+0x16/0x60 [ 413.499903][ T6831] ? clear_bhb_loop+0x40/0x90 [ 413.500070][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.500235][ T6831] RIP: 0033:0x7fc8c257ffba [ 413.500357][ T6831] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.500482][ T6831] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 413.500633][ T6831] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 413.500737][ T6831] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 413.500834][ T6831] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 413.500927][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 413.501017][ T6831] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 413.501146][ T6831] [ 413.790121][ T6831] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 414.934368][ T6837] loop0: detected capacity change from 0 to 32768 [ 414.972963][ T6837] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 414.981588][ T6837] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 415.012994][ T6837] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 415.027753][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 415.035435][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 415.179220][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 143ms [ 415.188014][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 415.196484][ T6837] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 415.287179][ T6837] syz.0.70: attempt to access beyond end of device [ 415.287179][ T6837] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 415.320547][ T6837] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 415.336139][ T6837] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 415.360714][ T6837] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 415.369742][ T6837] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 415.376911][ T6837] gfs2: fsid=syz:syz.0: File system withdrawn [ 415.383415][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz.0.70 Not tainted syzkaller #0 PREEMPT(none) [ 415.383575][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.383669][ T6837] Call Trace: [ 415.383723][ T6837] [ 415.383772][ T6837] __dump_stack+0x26/0x30 [ 415.383948][ T6837] dump_stack_lvl+0x1df/0x270 [ 415.384128][ T6837] dump_stack+0x1e/0x25 [ 415.384287][ T6837] gfs2_withdraw+0x1ec1/0x2020 [ 415.384499][ T6837] gfs2_meta_check_ii+0xd7/0x100 [ 415.384661][ T6837] gfs2_quota_init+0x256f/0x2730 [ 415.384933][ T6837] gfs2_make_fs_rw+0x1d5/0x460 [ 415.385116][ T6837] gfs2_fill_super+0x3d31/0x3f50 [ 415.385284][ T6837] ? init_locking+0xed/0x500 [ 415.385478][ T6837] get_tree_bdev_flags+0x6e3/0x920 [ 415.385674][ T6837] ? __pfx_gfs2_fill_super+0x10/0x10 [ 415.385833][ T6837] ? __pfx_gfs2_fill_super+0x10/0x10 [ 415.385984][ T6837] ? __pfx_gfs2_get_tree+0x10/0x10 [ 415.386139][ T6837] get_tree_bdev+0x38/0x50 [ 415.386310][ T6837] gfs2_get_tree+0x57/0x350 [ 415.386468][ T6837] ? __pfx_gfs2_get_tree+0x10/0x10 [ 415.386626][ T6837] vfs_get_tree+0xb3/0x5c0 [ 415.386804][ T6837] ? mount_capable+0x99/0x100 [ 415.386967][ T6837] do_new_mount+0x733/0x14b0 [ 415.387151][ T6837] ? apparmor_capable+0x32d/0x410 [ 415.387337][ T6837] ? kmsan_get_metadata+0xfb/0x160 [ 415.387557][ T6837] path_mount+0x6db/0x1ea0 [ 415.387737][ T6837] ? user_path_at+0x32d/0x3d0 [ 415.387911][ T6837] __se_sys_mount+0x6eb/0x7d0 [ 415.388101][ T6837] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 415.388353][ T6837] __x64_sys_mount+0xe4/0x150 [ 415.388552][ T6837] x64_sys_call+0x3604/0x3e20 [ 415.388746][ T6837] do_syscall_64+0xd9/0x210 [ 415.388950][ T6837] ? irqentry_exit+0x16/0x60 [ 415.389131][ T6837] ? clear_bhb_loop+0x40/0x90 [ 415.389294][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.389459][ T6837] RIP: 0033:0x7fc8c257ffba [ 415.389582][ T6837] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.389704][ T6837] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 415.389844][ T6837] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 415.389945][ T6837] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 415.390042][ T6837] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 415.390136][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 415.390226][ T6837] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 415.390354][ T6837] [ 415.690134][ T6837] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 416.833790][ T6843] loop0: detected capacity change from 0 to 32768 [ 416.865013][ T6843] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 416.873635][ T6843] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 416.916084][ T6843] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 416.933512][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 416.941391][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 417.090210][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 148ms [ 417.098673][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 417.104462][ T6843] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 417.194554][ T6843] syz.0.71: attempt to access beyond end of device [ 417.194554][ T6843] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 417.209488][ T6843] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 417.226289][ T6843] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 417.251903][ T6843] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 417.260940][ T6843] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 417.268100][ T6843] gfs2: fsid=syz:syz.0: File system withdrawn [ 417.274596][ T6843] CPU: 0 UID: 0 PID: 6843 Comm: syz.0.71 Not tainted syzkaller #0 PREEMPT(none) [ 417.274739][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.274829][ T6843] Call Trace: [ 417.274879][ T6843] [ 417.274928][ T6843] __dump_stack+0x26/0x30 [ 417.275108][ T6843] dump_stack_lvl+0x1df/0x270 [ 417.275301][ T6843] dump_stack+0x1e/0x25 [ 417.275462][ T6843] gfs2_withdraw+0x1ec1/0x2020 [ 417.275668][ T6843] gfs2_meta_check_ii+0xd7/0x100 [ 417.275831][ T6843] gfs2_quota_init+0x256f/0x2730 [ 417.276099][ T6843] gfs2_make_fs_rw+0x1d5/0x460 [ 417.276275][ T6843] gfs2_fill_super+0x3d31/0x3f50 [ 417.276441][ T6843] ? init_locking+0xed/0x500 [ 417.276636][ T6843] get_tree_bdev_flags+0x6e3/0x920 [ 417.276820][ T6843] ? __pfx_gfs2_fill_super+0x10/0x10 [ 417.276981][ T6843] ? __pfx_gfs2_fill_super+0x10/0x10 [ 417.277143][ T6843] ? __pfx_gfs2_get_tree+0x10/0x10 [ 417.277296][ T6843] get_tree_bdev+0x38/0x50 [ 417.277470][ T6843] gfs2_get_tree+0x57/0x350 [ 417.277620][ T6843] ? __pfx_gfs2_get_tree+0x10/0x10 [ 417.277772][ T6843] vfs_get_tree+0xb3/0x5c0 [ 417.277947][ T6843] ? mount_capable+0x99/0x100 [ 417.278110][ T6843] do_new_mount+0x733/0x14b0 [ 417.278285][ T6843] ? apparmor_capable+0x32d/0x410 [ 417.278461][ T6843] ? kmsan_get_metadata+0xfb/0x160 [ 417.278658][ T6843] path_mount+0x6db/0x1ea0 [ 417.278828][ T6843] ? user_path_at+0x32d/0x3d0 [ 417.278999][ T6843] __se_sys_mount+0x6eb/0x7d0 [ 417.279183][ T6843] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 417.279432][ T6843] __x64_sys_mount+0xe4/0x150 [ 417.279626][ T6843] x64_sys_call+0x3604/0x3e20 [ 417.279819][ T6843] do_syscall_64+0xd9/0x210 [ 417.280020][ T6843] ? irqentry_exit+0x16/0x60 [ 417.280204][ T6843] ? clear_bhb_loop+0x40/0x90 [ 417.280370][ T6843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.280529][ T6843] RIP: 0033:0x7fc8c257ffba [ 417.280641][ T6843] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.280764][ T6843] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 417.280901][ T6843] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 417.280997][ T6843] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 417.281092][ T6843] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 417.281192][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 417.281281][ T6843] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 417.281408][ T6843] [ 417.600264][ T6843] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:48 executed programs: 59 [ 418.745734][ T6849] loop0: detected capacity change from 0 to 32768 [ 418.774078][ T6849] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 418.782687][ T6849] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 418.823478][ T6849] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 418.836201][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 418.844076][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 418.970506][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 418.979016][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 418.984845][ T6849] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 419.066577][ T6849] syz.0.72: attempt to access beyond end of device [ 419.066577][ T6849] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 419.105620][ T6849] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 419.121252][ T6849] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 419.151937][ T6849] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 419.160996][ T6849] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 419.168227][ T6849] gfs2: fsid=syz:syz.0: File system withdrawn [ 419.174845][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(none) [ 419.174990][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.175076][ T6849] Call Trace: [ 419.175123][ T6849] [ 419.175176][ T6849] __dump_stack+0x26/0x30 [ 419.175357][ T6849] dump_stack_lvl+0x1df/0x270 [ 419.175540][ T6849] dump_stack+0x1e/0x25 [ 419.175696][ T6849] gfs2_withdraw+0x1ec1/0x2020 [ 419.175912][ T6849] gfs2_meta_check_ii+0xd7/0x100 [ 419.176075][ T6849] gfs2_quota_init+0x256f/0x2730 [ 419.176356][ T6849] gfs2_make_fs_rw+0x1d5/0x460 [ 419.176530][ T6849] gfs2_fill_super+0x3d31/0x3f50 [ 419.176697][ T6849] ? init_locking+0xed/0x500 [ 419.176890][ T6849] get_tree_bdev_flags+0x6e3/0x920 [ 419.177080][ T6849] ? __pfx_gfs2_fill_super+0x10/0x10 [ 419.177240][ T6849] ? __pfx_gfs2_fill_super+0x10/0x10 [ 419.177397][ T6849] ? __pfx_gfs2_get_tree+0x10/0x10 [ 419.177550][ T6849] get_tree_bdev+0x38/0x50 [ 419.177727][ T6849] gfs2_get_tree+0x57/0x350 [ 419.177886][ T6849] ? __pfx_gfs2_get_tree+0x10/0x10 [ 419.178044][ T6849] vfs_get_tree+0xb3/0x5c0 [ 419.178221][ T6849] ? mount_capable+0x99/0x100 [ 419.178379][ T6849] do_new_mount+0x733/0x14b0 [ 419.178545][ T6849] ? apparmor_capable+0x32d/0x410 [ 419.178730][ T6849] ? kmsan_get_metadata+0xfb/0x160 [ 419.178936][ T6849] path_mount+0x6db/0x1ea0 [ 419.179113][ T6849] ? user_path_at+0x32d/0x3d0 [ 419.179290][ T6849] __se_sys_mount+0x6eb/0x7d0 [ 419.179482][ T6849] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 419.179732][ T6849] __x64_sys_mount+0xe4/0x150 [ 419.179929][ T6849] x64_sys_call+0x3604/0x3e20 [ 419.180116][ T6849] do_syscall_64+0xd9/0x210 [ 419.180327][ T6849] ? irqentry_exit+0x16/0x60 [ 419.180500][ T6849] ? clear_bhb_loop+0x40/0x90 [ 419.180659][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.180812][ T6849] RIP: 0033:0x7fc8c257ffba [ 419.180934][ T6849] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.181060][ T6849] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 419.181201][ T6849] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 419.181313][ T6849] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 419.181404][ T6849] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 419.181495][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 419.181584][ T6849] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 419.181712][ T6849] [ 419.480211][ T6849] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 420.635045][ T6855] loop0: detected capacity change from 0 to 32768 [ 420.664814][ T6855] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 420.673482][ T6855] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 420.712662][ T6855] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 420.726842][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 420.734021][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 420.859093][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 420.867729][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 420.874901][ T6855] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 420.978305][ T6855] syz.0.73: attempt to access beyond end of device [ 420.978305][ T6855] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 420.993444][ T6855] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=4), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 421.010446][ T6855] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 421.034336][ T6855] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 421.043433][ T6855] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 421.051040][ T6855] gfs2: fsid=syz:syz.0: File system withdrawn [ 421.057287][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.0.73 Not tainted syzkaller #0 PREEMPT(none) [ 421.057432][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 421.057522][ T6855] Call Trace: [ 421.057577][ T6855] [ 421.057627][ T6855] __dump_stack+0x26/0x30 [ 421.057810][ T6855] dump_stack_lvl+0x1df/0x270 [ 421.057992][ T6855] dump_stack+0x1e/0x25 [ 421.058164][ T6855] gfs2_withdraw+0x1ec1/0x2020 [ 421.058375][ T6855] gfs2_metatype_check_ii+0x113/0x140 [ 421.058551][ T6855] gfs2_quota_init+0x25bf/0x2730 [ 421.058824][ T6855] gfs2_make_fs_rw+0x1d5/0x460 [ 421.058998][ T6855] gfs2_fill_super+0x3d31/0x3f50 [ 421.059169][ T6855] ? init_locking+0xed/0x500 [ 421.059363][ T6855] get_tree_bdev_flags+0x6e3/0x920 [ 421.059548][ T6855] ? __pfx_gfs2_fill_super+0x10/0x10 [ 421.059704][ T6855] ? __pfx_gfs2_fill_super+0x10/0x10 [ 421.059856][ T6855] ? __pfx_gfs2_get_tree+0x10/0x10 [ 421.060006][ T6855] get_tree_bdev+0x38/0x50 [ 421.060181][ T6855] gfs2_get_tree+0x57/0x350 [ 421.060337][ T6855] ? __pfx_gfs2_get_tree+0x10/0x10 [ 421.060493][ T6855] vfs_get_tree+0xb3/0x5c0 [ 421.060665][ T6855] ? mount_capable+0x99/0x100 [ 421.060828][ T6855] do_new_mount+0x733/0x14b0 [ 421.060999][ T6855] ? apparmor_capable+0x32d/0x410 [ 421.061189][ T6855] ? kmsan_get_metadata+0xfb/0x160 [ 421.061394][ T6855] path_mount+0x6db/0x1ea0 [ 421.061572][ T6855] ? user_path_at+0x32d/0x3d0 [ 421.061746][ T6855] __se_sys_mount+0x6eb/0x7d0 [ 421.061925][ T6855] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 421.062183][ T6855] __x64_sys_mount+0xe4/0x150 [ 421.062374][ T6855] x64_sys_call+0x3604/0x3e20 [ 421.062563][ T6855] do_syscall_64+0xd9/0x210 [ 421.062766][ T6855] ? irqentry_exit+0x16/0x60 [ 421.062944][ T6855] ? clear_bhb_loop+0x40/0x90 [ 421.063113][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.063284][ T6855] RIP: 0033:0x7fc8c257ffba [ 421.063402][ T6855] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.063527][ T6855] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 421.063668][ T6855] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 421.063772][ T6855] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 421.063865][ T6855] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 421.063959][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 421.064048][ T6855] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 421.064187][ T6855] [ 421.360282][ T6855] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 422.503151][ T6861] loop0: detected capacity change from 0 to 32768 [ 422.529259][ T6861] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 422.537908][ T6861] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 422.576438][ T6861] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 422.589440][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 422.598732][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 422.718719][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 119ms [ 422.727392][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 422.734619][ T6861] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 422.829945][ T6861] syz.0.74: attempt to access beyond end of device [ 422.829945][ T6861] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 422.866220][ T6861] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 422.881840][ T6861] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 422.913323][ T6861] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 422.922349][ T6861] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 422.929783][ T6861] gfs2: fsid=syz:syz.0: File system withdrawn [ 422.936033][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.0.74 Not tainted syzkaller #0 PREEMPT(none) [ 422.936177][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.936266][ T6861] Call Trace: [ 422.936317][ T6861] [ 422.936372][ T6861] __dump_stack+0x26/0x30 [ 422.936549][ T6861] dump_stack_lvl+0x1df/0x270 [ 422.936745][ T6861] dump_stack+0x1e/0x25 [ 422.936910][ T6861] gfs2_withdraw+0x1ec1/0x2020 [ 422.937131][ T6861] gfs2_meta_check_ii+0xd7/0x100 [ 422.937294][ T6861] gfs2_quota_init+0x256f/0x2730 [ 422.937572][ T6861] gfs2_make_fs_rw+0x1d5/0x460 [ 422.937749][ T6861] gfs2_fill_super+0x3d31/0x3f50 [ 422.937911][ T6861] ? init_locking+0xed/0x500 [ 422.938113][ T6861] get_tree_bdev_flags+0x6e3/0x920 [ 422.938302][ T6861] ? __pfx_gfs2_fill_super+0x10/0x10 [ 422.938468][ T6861] ? __pfx_gfs2_fill_super+0x10/0x10 [ 422.938623][ T6861] ? __pfx_gfs2_get_tree+0x10/0x10 [ 422.938777][ T6861] get_tree_bdev+0x38/0x50 [ 422.938949][ T6861] gfs2_get_tree+0x57/0x350 [ 422.939116][ T6861] ? __pfx_gfs2_get_tree+0x10/0x10 [ 422.939274][ T6861] vfs_get_tree+0xb3/0x5c0 [ 422.939447][ T6861] ? mount_capable+0x99/0x100 [ 422.939611][ T6861] do_new_mount+0x733/0x14b0 [ 422.939779][ T6861] ? apparmor_capable+0x32d/0x410 [ 422.939972][ T6861] ? kmsan_get_metadata+0xfb/0x160 [ 422.940171][ T6861] path_mount+0x6db/0x1ea0 [ 422.940337][ T6861] ? user_path_at+0x32d/0x3d0 [ 422.940504][ T6861] __se_sys_mount+0x6eb/0x7d0 [ 422.940678][ T6861] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 422.940919][ T6861] __x64_sys_mount+0xe4/0x150 [ 422.941117][ T6861] x64_sys_call+0x3604/0x3e20 [ 422.941301][ T6861] do_syscall_64+0xd9/0x210 [ 422.941501][ T6861] ? irqentry_exit+0x16/0x60 [ 422.941673][ T6861] ? clear_bhb_loop+0x40/0x90 [ 422.941842][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.942010][ T6861] RIP: 0033:0x7fc8c257ffba [ 422.942125][ T6861] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.942247][ T6861] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 422.942388][ T6861] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 422.942491][ T6861] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 422.942588][ T6861] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 422.942686][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 422.942774][ T6861] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 422.942905][ T6861] [ 423.250163][ T6861] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:54 executed programs: 62 [ 424.428466][ T6867] loop0: detected capacity change from 0 to 32768 [ 424.456361][ T6867] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 424.465000][ T6867] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 424.498459][ T6867] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 424.511901][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 424.518958][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 424.640704][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 424.649280][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 424.662689][ T6867] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 424.741333][ T6867] syz.0.75: attempt to access beyond end of device [ 424.741333][ T6867] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 424.785429][ T6867] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 424.801151][ T6867] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 424.832444][ T6867] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 424.841602][ T6867] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 424.848881][ T6867] gfs2: fsid=syz:syz.0: File system withdrawn [ 424.855387][ T6867] CPU: 0 UID: 0 PID: 6867 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT(none) [ 424.855530][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.855619][ T6867] Call Trace: [ 424.855667][ T6867] [ 424.855717][ T6867] __dump_stack+0x26/0x30 [ 424.855904][ T6867] dump_stack_lvl+0x1df/0x270 [ 424.856092][ T6867] dump_stack+0x1e/0x25 [ 424.856252][ T6867] gfs2_withdraw+0x1ec1/0x2020 [ 424.856458][ T6867] gfs2_meta_check_ii+0xd7/0x100 [ 424.856617][ T6867] gfs2_quota_init+0x256f/0x2730 [ 424.856895][ T6867] gfs2_make_fs_rw+0x1d5/0x460 [ 424.857070][ T6867] gfs2_fill_super+0x3d31/0x3f50 [ 424.857245][ T6867] ? init_locking+0xed/0x500 [ 424.857438][ T6867] get_tree_bdev_flags+0x6e3/0x920 [ 424.857633][ T6867] ? __pfx_gfs2_fill_super+0x10/0x10 [ 424.857795][ T6867] ? __pfx_gfs2_fill_super+0x10/0x10 [ 424.857953][ T6867] ? __pfx_gfs2_get_tree+0x10/0x10 [ 424.858111][ T6867] get_tree_bdev+0x38/0x50 [ 424.858287][ T6867] gfs2_get_tree+0x57/0x350 [ 424.858445][ T6867] ? __pfx_gfs2_get_tree+0x10/0x10 [ 424.858602][ T6867] vfs_get_tree+0xb3/0x5c0 [ 424.858780][ T6867] ? mount_capable+0x99/0x100 [ 424.858944][ T6867] do_new_mount+0x733/0x14b0 [ 424.859112][ T6867] ? apparmor_capable+0x32d/0x410 [ 424.859300][ T6867] ? kmsan_get_metadata+0xfb/0x160 [ 424.859501][ T6867] path_mount+0x6db/0x1ea0 [ 424.859680][ T6867] ? user_path_at+0x32d/0x3d0 [ 424.859871][ T6867] __se_sys_mount+0x6eb/0x7d0 [ 424.860043][ T6867] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 424.860291][ T6867] __x64_sys_mount+0xe4/0x150 [ 424.860479][ T6867] x64_sys_call+0x3604/0x3e20 [ 424.860670][ T6867] do_syscall_64+0xd9/0x210 [ 424.860878][ T6867] ? irqentry_exit+0x16/0x60 [ 424.861062][ T6867] ? clear_bhb_loop+0x40/0x90 [ 424.861224][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.861387][ T6867] RIP: 0033:0x7fc8c257ffba [ 424.861508][ T6867] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.861624][ T6867] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 424.861763][ T6867] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 424.861873][ T6867] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 424.861970][ T6867] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 424.862064][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 424.862152][ T6867] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 424.862278][ T6867] [ 425.169947][ T6867] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 426.229875][ T5088] Bluetooth: hci0: command 0x0406 tx timeout [ 426.401313][ T6873] loop0: detected capacity change from 0 to 32768 [ 426.423402][ T6873] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 426.431979][ T6873] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 426.461928][ T6873] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 426.475766][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 426.483213][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 426.606676][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms [ 426.616256][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 426.624552][ T6873] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 426.684964][ T6873] syz.0.76: attempt to access beyond end of device [ 426.684964][ T6873] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 426.700038][ T6873] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=5), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 426.717052][ T6873] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 426.742456][ T6873] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 426.751585][ T6873] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 426.758777][ T6873] gfs2: fsid=syz:syz.0: File system withdrawn [ 426.765284][ T6873] CPU: 0 UID: 0 PID: 6873 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(none) [ 426.765426][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 426.765512][ T6873] Call Trace: [ 426.765562][ T6873] [ 426.765613][ T6873] __dump_stack+0x26/0x30 [ 426.765796][ T6873] dump_stack_lvl+0x1df/0x270 [ 426.765977][ T6873] dump_stack+0x1e/0x25 [ 426.766132][ T6873] gfs2_withdraw+0x1ec1/0x2020 [ 426.766357][ T6873] gfs2_metatype_check_ii+0x113/0x140 [ 426.766533][ T6873] gfs2_quota_init+0x25bf/0x2730 [ 426.766813][ T6873] gfs2_make_fs_rw+0x1d5/0x460 [ 426.766993][ T6873] gfs2_fill_super+0x3d31/0x3f50 [ 426.767159][ T6873] ? init_locking+0xed/0x500 [ 426.767346][ T6873] get_tree_bdev_flags+0x6e3/0x920 [ 426.767532][ T6873] ? __pfx_gfs2_fill_super+0x10/0x10 [ 426.767690][ T6873] ? __pfx_gfs2_fill_super+0x10/0x10 [ 426.767854][ T6873] ? __pfx_gfs2_get_tree+0x10/0x10 [ 426.768011][ T6873] get_tree_bdev+0x38/0x50 [ 426.768185][ T6873] gfs2_get_tree+0x57/0x350 [ 426.768347][ T6873] ? __pfx_gfs2_get_tree+0x10/0x10 [ 426.768504][ T6873] vfs_get_tree+0xb3/0x5c0 [ 426.768679][ T6873] ? mount_capable+0x99/0x100 [ 426.768847][ T6873] do_new_mount+0x733/0x14b0 [ 426.769015][ T6873] ? apparmor_capable+0x32d/0x410 [ 426.769199][ T6873] ? kmsan_get_metadata+0xfb/0x160 [ 426.769400][ T6873] path_mount+0x6db/0x1ea0 [ 426.769575][ T6873] ? user_path_at+0x32d/0x3d0 [ 426.769763][ T6873] __se_sys_mount+0x6eb/0x7d0 [ 426.769935][ T6873] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 426.770178][ T6873] __x64_sys_mount+0xe4/0x150 [ 426.770365][ T6873] x64_sys_call+0x3604/0x3e20 [ 426.770555][ T6873] do_syscall_64+0xd9/0x210 [ 426.770763][ T6873] ? irqentry_exit+0x16/0x60 [ 426.770948][ T6873] ? clear_bhb_loop+0x40/0x90 [ 426.771112][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.771277][ T6873] RIP: 0033:0x7fc8c257ffba [ 426.771398][ T6873] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.771522][ T6873] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 426.771667][ T6873] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 426.771778][ T6873] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 426.771875][ T6873] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 426.771969][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 426.772058][ T6873] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 426.772187][ T6873] [ 427.070157][ T6873] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 428.208840][ T6879] loop0: detected capacity change from 0 to 32768 [ 428.238355][ T6879] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 428.247041][ T6879] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 428.283766][ T6879] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 428.298213][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 428.305537][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 428.429363][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms [ 428.440461][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 428.445990][ T6879] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 428.547944][ T6879] syz.0.77: attempt to access beyond end of device [ 428.547944][ T6879] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 428.590066][ T6879] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 428.605643][ T6879] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 428.630746][ T6879] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 428.639913][ T6879] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 428.647096][ T6879] gfs2: fsid=syz:syz.0: File system withdrawn [ 428.653581][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.0.77 Not tainted syzkaller #0 PREEMPT(none) [ 428.653722][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 428.653812][ T6879] Call Trace: [ 428.653867][ T6879] [ 428.653917][ T6879] __dump_stack+0x26/0x30 [ 428.654099][ T6879] dump_stack_lvl+0x1df/0x270 [ 428.654276][ T6879] dump_stack+0x1e/0x25 [ 428.654444][ T6879] gfs2_withdraw+0x1ec1/0x2020 [ 428.654652][ T6879] gfs2_meta_check_ii+0xd7/0x100 [ 428.654810][ T6879] gfs2_quota_init+0x256f/0x2730 [ 428.655088][ T6879] gfs2_make_fs_rw+0x1d5/0x460 [ 428.655262][ T6879] gfs2_fill_super+0x3d31/0x3f50 [ 428.655436][ T6879] ? init_locking+0xed/0x500 [ 428.655629][ T6879] get_tree_bdev_flags+0x6e3/0x920 [ 428.655819][ T6879] ? __pfx_gfs2_fill_super+0x10/0x10 [ 428.655978][ T6879] ? __pfx_gfs2_fill_super+0x10/0x10 [ 428.656133][ T6879] ? __pfx_gfs2_get_tree+0x10/0x10 [ 428.656286][ T6879] get_tree_bdev+0x38/0x50 [ 428.656469][ T6879] gfs2_get_tree+0x57/0x350 [ 428.656629][ T6879] ? __pfx_gfs2_get_tree+0x10/0x10 [ 428.656782][ T6879] vfs_get_tree+0xb3/0x5c0 [ 428.656959][ T6879] ? mount_capable+0x99/0x100 [ 428.657118][ T6879] do_new_mount+0x733/0x14b0 [ 428.657283][ T6879] ? apparmor_capable+0x32d/0x410 [ 428.657466][ T6879] ? kmsan_get_metadata+0xfb/0x160 [ 428.657664][ T6879] path_mount+0x6db/0x1ea0 [ 428.657834][ T6879] ? user_path_at+0x32d/0x3d0 [ 428.658005][ T6879] __se_sys_mount+0x6eb/0x7d0 [ 428.658183][ T6879] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 428.658434][ T6879] __x64_sys_mount+0xe4/0x150 [ 428.658622][ T6879] x64_sys_call+0x3604/0x3e20 [ 428.658816][ T6879] do_syscall_64+0xd9/0x210 [ 428.659014][ T6879] ? irqentry_exit+0x16/0x60 [ 428.659199][ T6879] ? clear_bhb_loop+0x40/0x90 [ 428.659374][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.659537][ T6879] RIP: 0033:0x7fc8c257ffba [ 428.659651][ T6879] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.659771][ T6879] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.659915][ T6879] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 428.660017][ T6879] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 428.660112][ T6879] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 428.660202][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 428.660293][ T6879] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 428.660423][ T6879] [ 428.960161][ T6879] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 15:59:59 executed programs: 65 [ 430.273479][ T6885] loop0: detected capacity change from 0 to 32768 [ 430.302193][ T6885] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 430.310880][ T6885] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 430.345156][ T6885] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 430.357192][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 430.364829][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 430.492587][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 430.501109][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 430.506752][ T6885] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 430.588196][ T6885] syz.0.78: attempt to access beyond end of device [ 430.588196][ T6885] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 430.603425][ T6885] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 430.620464][ T6885] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 430.652698][ T6885] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 430.661837][ T6885] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 430.669100][ T6885] gfs2: fsid=syz:syz.0: File system withdrawn [ 430.675663][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.0.78 Not tainted syzkaller #0 PREEMPT(none) [ 430.675809][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 430.675893][ T6885] Call Trace: [ 430.675947][ T6885] [ 430.675995][ T6885] __dump_stack+0x26/0x30 [ 430.676175][ T6885] dump_stack_lvl+0x1df/0x270 [ 430.676367][ T6885] dump_stack+0x1e/0x25 [ 430.676527][ T6885] gfs2_withdraw+0x1ec1/0x2020 [ 430.676744][ T6885] gfs2_metatype_check_ii+0x113/0x140 [ 430.676916][ T6885] gfs2_quota_init+0x25bf/0x2730 [ 430.677194][ T6885] gfs2_make_fs_rw+0x1d5/0x460 [ 430.677379][ T6885] gfs2_fill_super+0x3d31/0x3f50 [ 430.677541][ T6885] ? init_locking+0xed/0x500 [ 430.677737][ T6885] get_tree_bdev_flags+0x6e3/0x920 [ 430.677925][ T6885] ? __pfx_gfs2_fill_super+0x10/0x10 [ 430.678087][ T6885] ? __pfx_gfs2_fill_super+0x10/0x10 [ 430.678241][ T6885] ? __pfx_gfs2_get_tree+0x10/0x10 [ 430.678401][ T6885] get_tree_bdev+0x38/0x50 [ 430.678568][ T6885] gfs2_get_tree+0x57/0x350 [ 430.678721][ T6885] ? __pfx_gfs2_get_tree+0x10/0x10 [ 430.678878][ T6885] vfs_get_tree+0xb3/0x5c0 [ 430.679055][ T6885] ? mount_capable+0x99/0x100 [ 430.679214][ T6885] do_new_mount+0x733/0x14b0 [ 430.679387][ T6885] ? apparmor_capable+0x32d/0x410 [ 430.679575][ T6885] ? kmsan_get_metadata+0xfb/0x160 [ 430.679772][ T6885] path_mount+0x6db/0x1ea0 [ 430.679954][ T6885] ? user_path_at+0x32d/0x3d0 [ 430.680127][ T6885] __se_sys_mount+0x6eb/0x7d0 [ 430.680309][ T6885] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 430.680551][ T6885] __x64_sys_mount+0xe4/0x150 [ 430.680741][ T6885] x64_sys_call+0x3604/0x3e20 [ 430.680928][ T6885] do_syscall_64+0xd9/0x210 [ 430.681131][ T6885] ? irqentry_exit+0x16/0x60 [ 430.681319][ T6885] ? clear_bhb_loop+0x40/0x90 [ 430.681482][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.681646][ T6885] RIP: 0033:0x7fc8c257ffba [ 430.681772][ T6885] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.681896][ T6885] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.682036][ T6885] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 430.682136][ T6885] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 430.682230][ T6885] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 430.682327][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 430.682416][ T6885] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 430.682543][ T6885] [ 430.969970][ T6885] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 432.125615][ T6891] loop0: detected capacity change from 0 to 32768 [ 432.146887][ T6891] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 432.155609][ T6891] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 432.179064][ T6891] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 432.197424][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 432.205206][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 432.321870][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 116ms [ 432.330605][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 432.336157][ T6891] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 432.403385][ T6891] syz.0.79: attempt to access beyond end of device [ 432.403385][ T6891] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 432.437025][ T6891] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 432.452500][ T6891] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 432.476263][ T6891] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 432.485299][ T6891] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 432.492840][ T6891] gfs2: fsid=syz:syz.0: File system withdrawn [ 432.499096][ T6891] CPU: 1 UID: 0 PID: 6891 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(none) [ 432.499240][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.499331][ T6891] Call Trace: [ 432.499390][ T6891] [ 432.499440][ T6891] __dump_stack+0x26/0x30 [ 432.499621][ T6891] dump_stack_lvl+0x1df/0x270 [ 432.499804][ T6891] dump_stack+0x1e/0x25 [ 432.499961][ T6891] gfs2_withdraw+0x1ec1/0x2020 [ 432.500171][ T6891] gfs2_meta_check_ii+0xd7/0x100 [ 432.500331][ T6891] gfs2_quota_init+0x256f/0x2730 [ 432.500595][ T6891] gfs2_make_fs_rw+0x1d5/0x460 [ 432.500707][ T6891] gfs2_fill_super+0x3d31/0x3f50 [ 432.500811][ T6891] ? init_locking+0xed/0x500 [ 432.500932][ T6891] get_tree_bdev_flags+0x6e3/0x920 [ 432.501049][ T6891] ? __pfx_gfs2_fill_super+0x10/0x10 [ 432.501149][ T6891] ? __pfx_gfs2_fill_super+0x10/0x10 [ 432.501245][ T6891] ? __pfx_gfs2_get_tree+0x10/0x10 [ 432.501347][ T6891] get_tree_bdev+0x38/0x50 [ 432.501454][ T6891] gfs2_get_tree+0x57/0x350 [ 432.501553][ T6891] ? __pfx_gfs2_get_tree+0x10/0x10 [ 432.501650][ T6891] vfs_get_tree+0xb3/0x5c0 [ 432.501762][ T6891] ? mount_capable+0x99/0x100 [ 432.501862][ T6891] do_new_mount+0x733/0x14b0 [ 432.501969][ T6891] ? apparmor_capable+0x32d/0x410 [ 432.502084][ T6891] ? kmsan_get_metadata+0xfb/0x160 [ 432.502211][ T6891] path_mount+0x6db/0x1ea0 [ 432.502320][ T6891] ? user_path_at+0x32d/0x3d0 [ 432.502430][ T6891] __se_sys_mount+0x6eb/0x7d0 [ 432.502545][ T6891] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 432.502699][ T6891] __x64_sys_mount+0xe4/0x150 [ 432.502820][ T6891] x64_sys_call+0x3604/0x3e20 [ 432.502941][ T6891] do_syscall_64+0xd9/0x210 [ 432.503070][ T6891] ? irqentry_exit+0x16/0x60 [ 432.503182][ T6891] ? clear_bhb_loop+0x40/0x90 [ 432.503287][ T6891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.503392][ T6891] RIP: 0033:0x7fc8c257ffba [ 432.503468][ T6891] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.503548][ T6891] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 432.503639][ T6891] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 432.503704][ T6891] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 432.503765][ T6891] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 432.503823][ T6891] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 432.503880][ T6891] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 432.503959][ T6891] [ 432.809955][ T6891] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 433.961426][ T6897] loop0: detected capacity change from 0 to 32768 [ 433.985482][ T6897] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 433.994758][ T6897] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 434.026151][ T6897] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 434.040973][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 434.048010][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 434.176190][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 434.184510][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 434.190595][ T6897] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 434.254645][ T6897] syz.0.80: attempt to access beyond end of device [ 434.254645][ T6897] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 434.288873][ T6897] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 434.304547][ T6897] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 434.328998][ T6897] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 434.337994][ T6897] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 434.345734][ T6897] gfs2: fsid=syz:syz.0: File system withdrawn [ 434.352493][ T6897] CPU: 1 UID: 0 PID: 6897 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT(none) [ 434.352634][ T6897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.352725][ T6897] Call Trace: [ 434.352779][ T6897] [ 434.352829][ T6897] __dump_stack+0x26/0x30 [ 434.353010][ T6897] dump_stack_lvl+0x1df/0x270 [ 434.353200][ T6897] dump_stack+0x1e/0x25 [ 434.353362][ T6897] gfs2_withdraw+0x1ec1/0x2020 [ 434.353571][ T6897] gfs2_meta_check_ii+0xd7/0x100 [ 434.353734][ T6897] gfs2_quota_init+0x256f/0x2730 [ 434.354004][ T6897] gfs2_make_fs_rw+0x1d5/0x460 [ 434.354170][ T6897] gfs2_fill_super+0x3d31/0x3f50 [ 434.354336][ T6897] ? init_locking+0xed/0x500 [ 434.354526][ T6897] get_tree_bdev_flags+0x6e3/0x920 [ 434.354708][ T6897] ? __pfx_gfs2_fill_super+0x10/0x10 [ 434.354823][ T6897] ? __pfx_gfs2_fill_super+0x10/0x10 [ 434.354919][ T6897] ? __pfx_gfs2_get_tree+0x10/0x10 [ 434.355018][ T6897] get_tree_bdev+0x38/0x50 [ 434.355126][ T6897] gfs2_get_tree+0x57/0x350 [ 434.355229][ T6897] ? __pfx_gfs2_get_tree+0x10/0x10 [ 434.355326][ T6897] vfs_get_tree+0xb3/0x5c0 [ 434.355433][ T6897] ? mount_capable+0x99/0x100 [ 434.355534][ T6897] do_new_mount+0x733/0x14b0 [ 434.355641][ T6897] ? apparmor_capable+0x32d/0x410 [ 434.355756][ T6897] ? kmsan_get_metadata+0xfb/0x160 [ 434.355883][ T6897] path_mount+0x6db/0x1ea0 [ 434.355992][ T6897] ? user_path_at+0x32d/0x3d0 [ 434.356099][ T6897] __se_sys_mount+0x6eb/0x7d0 [ 434.356216][ T6897] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 434.356373][ T6897] __x64_sys_mount+0xe4/0x150 [ 434.356494][ T6897] x64_sys_call+0x3604/0x3e20 [ 434.356614][ T6897] do_syscall_64+0xd9/0x210 [ 434.356742][ T6897] ? irqentry_exit+0x16/0x60 [ 434.356857][ T6897] ? clear_bhb_loop+0x40/0x90 [ 434.356959][ T6897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.357065][ T6897] RIP: 0033:0x7fc8c257ffba [ 434.357140][ T6897] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.357222][ T6897] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.357313][ T6897] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 434.357378][ T6897] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 434.357438][ T6897] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 434.357498][ T6897] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 434.357554][ T6897] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 434.357634][ T6897] [ 434.641175][ T6897] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:00:05 executed programs: 68 [ 435.780143][ T6903] loop0: detected capacity change from 0 to 32768 [ 435.813694][ T6903] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 435.822341][ T6903] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 435.857065][ T6903] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 435.872726][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 435.880486][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 436.003316][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 122ms [ 436.012052][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 436.019268][ T6903] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 436.118507][ T6903] syz.0.81: attempt to access beyond end of device [ 436.118507][ T6903] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 436.157716][ T6903] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 436.173336][ T6903] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 436.199716][ T6903] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 436.208732][ T6903] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 436.216417][ T6903] gfs2: fsid=syz:syz.0: File system withdrawn [ 436.222855][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT(none) [ 436.222995][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 436.223087][ T6903] Call Trace: [ 436.223145][ T6903] [ 436.223197][ T6903] __dump_stack+0x26/0x30 [ 436.223379][ T6903] dump_stack_lvl+0x1df/0x270 [ 436.223562][ T6903] dump_stack+0x1e/0x25 [ 436.223723][ T6903] gfs2_withdraw+0x1ec1/0x2020 [ 436.223928][ T6903] gfs2_meta_check_ii+0xd7/0x100 [ 436.224103][ T6903] gfs2_quota_init+0x256f/0x2730 [ 436.224376][ T6903] gfs2_make_fs_rw+0x1d5/0x460 [ 436.224550][ T6903] gfs2_fill_super+0x3d31/0x3f50 [ 436.224706][ T6903] ? init_locking+0xed/0x500 [ 436.224903][ T6903] get_tree_bdev_flags+0x6e3/0x920 [ 436.225093][ T6903] ? __pfx_gfs2_fill_super+0x10/0x10 [ 436.225252][ T6903] ? __pfx_gfs2_fill_super+0x10/0x10 [ 436.225407][ T6903] ? __pfx_gfs2_get_tree+0x10/0x10 [ 436.225567][ T6903] get_tree_bdev+0x38/0x50 [ 436.225755][ T6903] gfs2_get_tree+0x57/0x350 [ 436.225911][ T6903] ? __pfx_gfs2_get_tree+0x10/0x10 [ 436.226076][ T6903] vfs_get_tree+0xb3/0x5c0 [ 436.226250][ T6903] ? mount_capable+0x99/0x100 [ 436.226412][ T6903] do_new_mount+0x733/0x14b0 [ 436.226582][ T6903] ? apparmor_capable+0x32d/0x410 [ 436.226773][ T6903] ? kmsan_get_metadata+0xfb/0x160 [ 436.226977][ T6903] path_mount+0x6db/0x1ea0 [ 436.227178][ T6903] ? user_path_at+0x32d/0x3d0 [ 436.227370][ T6903] __se_sys_mount+0x6eb/0x7d0 [ 436.227546][ T6903] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 436.227794][ T6903] __x64_sys_mount+0xe4/0x150 [ 436.227987][ T6903] x64_sys_call+0x3604/0x3e20 [ 436.228182][ T6903] do_syscall_64+0xd9/0x210 [ 436.228375][ T6903] ? irqentry_exit+0x16/0x60 [ 436.228562][ T6903] ? clear_bhb_loop+0x40/0x90 [ 436.228692][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.228796][ T6903] RIP: 0033:0x7fc8c257ffba [ 436.228872][ T6903] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.228953][ T6903] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 436.229049][ T6903] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 436.229114][ T6903] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 436.229175][ T6903] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 436.229234][ T6903] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 436.229289][ T6903] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 436.229366][ T6903] [ 436.510109][ T6903] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 437.664541][ T6909] loop0: detected capacity change from 0 to 32768 [ 437.686367][ T6909] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 437.695080][ T6909] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 437.736817][ T6909] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 437.749896][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 437.758930][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 437.880285][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 437.888777][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 437.895797][ T6909] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 437.976495][ T6909] syz.0.82: attempt to access beyond end of device [ 437.976495][ T6909] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 437.991809][ T6909] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 438.008335][ T6909] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 438.040007][ T6909] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 438.048981][ T6909] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 438.057387][ T6909] gfs2: fsid=syz:syz.0: File system withdrawn [ 438.066574][ T6909] CPU: 1 UID: 0 PID: 6909 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(none) [ 438.066725][ T6909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 438.066813][ T6909] Call Trace: [ 438.066860][ T6909] [ 438.066909][ T6909] __dump_stack+0x26/0x30 [ 438.067079][ T6909] dump_stack_lvl+0x1df/0x270 [ 438.067258][ T6909] dump_stack+0x1e/0x25 [ 438.067416][ T6909] gfs2_withdraw+0x1ec1/0x2020 [ 438.067627][ T6909] gfs2_meta_check_ii+0xd7/0x100 [ 438.067846][ T6909] gfs2_quota_init+0x256f/0x2730 [ 438.068122][ T6909] gfs2_make_fs_rw+0x1d5/0x460 [ 438.068294][ T6909] gfs2_fill_super+0x3d31/0x3f50 [ 438.068456][ T6909] ? init_locking+0xed/0x500 [ 438.068651][ T6909] get_tree_bdev_flags+0x6e3/0x920 [ 438.068845][ T6909] ? __pfx_gfs2_fill_super+0x10/0x10 [ 438.069002][ T6909] ? __pfx_gfs2_fill_super+0x10/0x10 [ 438.069153][ T6909] ? __pfx_gfs2_get_tree+0x10/0x10 [ 438.069306][ T6909] get_tree_bdev+0x38/0x50 [ 438.069477][ T6909] gfs2_get_tree+0x57/0x350 [ 438.069632][ T6909] ? __pfx_gfs2_get_tree+0x10/0x10 [ 438.069792][ T6909] vfs_get_tree+0xb3/0x5c0 [ 438.069969][ T6909] ? mount_capable+0x99/0x100 [ 438.070121][ T6909] do_new_mount+0x733/0x14b0 [ 438.070283][ T6909] ? apparmor_capable+0x32d/0x410 [ 438.070466][ T6909] ? kmsan_get_metadata+0xfb/0x160 [ 438.070666][ T6909] path_mount+0x6db/0x1ea0 [ 438.070851][ T6909] ? user_path_at+0x32d/0x3d0 [ 438.071018][ T6909] __se_sys_mount+0x6eb/0x7d0 [ 438.071195][ T6909] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 438.071443][ T6909] __x64_sys_mount+0xe4/0x150 [ 438.071634][ T6909] x64_sys_call+0x3604/0x3e20 [ 438.071827][ T6909] do_syscall_64+0xd9/0x210 [ 438.072029][ T6909] ? irqentry_exit+0x16/0x60 [ 438.072207][ T6909] ? clear_bhb_loop+0x40/0x90 [ 438.072374][ T6909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.072536][ T6909] RIP: 0033:0x7fc8c257ffba [ 438.072652][ T6909] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.072782][ T6909] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 438.072926][ T6909] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 438.073033][ T6909] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 438.073132][ T6909] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 438.073226][ T6909] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 438.073314][ T6909] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 438.073444][ T6909] [ 438.380114][ T6909] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 439.519978][ T6915] loop0: detected capacity change from 0 to 32768 [ 439.555613][ T6915] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 439.564215][ T6915] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 439.614381][ T6915] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 439.626503][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 439.634288][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 439.771250][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms [ 439.780158][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 439.788278][ T6915] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 439.873621][ T6915] syz.0.83: attempt to access beyond end of device [ 439.873621][ T6915] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 439.888715][ T6915] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=4), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 439.907511][ T6915] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 439.932837][ T6915] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 439.941834][ T6915] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 439.949015][ T6915] gfs2: fsid=syz:syz.0: File system withdrawn [ 439.955442][ T6915] CPU: 1 UID: 0 PID: 6915 Comm: syz.0.83 Not tainted syzkaller #0 PREEMPT(none) [ 439.955585][ T6915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.955675][ T6915] Call Trace: [ 439.955730][ T6915] [ 439.955781][ T6915] __dump_stack+0x26/0x30 [ 439.955967][ T6915] dump_stack_lvl+0x1df/0x270 [ 439.956149][ T6915] dump_stack+0x1e/0x25 [ 439.956311][ T6915] gfs2_withdraw+0x1ec1/0x2020 [ 439.956518][ T6915] gfs2_metatype_check_ii+0x113/0x140 [ 439.956693][ T6915] gfs2_quota_init+0x25bf/0x2730 [ 439.956976][ T6915] gfs2_make_fs_rw+0x1d5/0x460 [ 439.957152][ T6915] gfs2_fill_super+0x3d31/0x3f50 [ 439.957321][ T6915] ? init_locking+0xed/0x500 [ 439.957514][ T6915] get_tree_bdev_flags+0x6e3/0x920 [ 439.957702][ T6915] ? __pfx_gfs2_fill_super+0x10/0x10 [ 439.957861][ T6915] ? __pfx_gfs2_fill_super+0x10/0x10 [ 439.958013][ T6915] ? __pfx_gfs2_get_tree+0x10/0x10 [ 439.958170][ T6915] get_tree_bdev+0x38/0x50 [ 439.958346][ T6915] gfs2_get_tree+0x57/0x350 [ 439.958508][ T6915] ? __pfx_gfs2_get_tree+0x10/0x10 [ 439.958661][ T6915] vfs_get_tree+0xb3/0x5c0 [ 439.958844][ T6915] ? mount_capable+0x99/0x100 [ 439.959007][ T6915] do_new_mount+0x733/0x14b0 [ 439.959175][ T6915] ? apparmor_capable+0x32d/0x410 [ 439.959363][ T6915] ? kmsan_get_metadata+0xfb/0x160 [ 439.959564][ T6915] path_mount+0x6db/0x1ea0 [ 439.959742][ T6915] ? user_path_at+0x32d/0x3d0 [ 439.959915][ T6915] __se_sys_mount+0x6eb/0x7d0 [ 439.960093][ T6915] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 439.960338][ T6915] __x64_sys_mount+0xe4/0x150 [ 439.960527][ T6915] x64_sys_call+0x3604/0x3e20 [ 439.960709][ T6915] do_syscall_64+0xd9/0x210 [ 439.960918][ T6915] ? irqentry_exit+0x16/0x60 [ 439.961095][ T6915] ? clear_bhb_loop+0x40/0x90 [ 439.961263][ T6915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.961428][ T6915] RIP: 0033:0x7fc8c257ffba [ 439.961550][ T6915] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.961674][ T6915] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 439.961821][ T6915] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 439.961926][ T6915] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 439.962023][ T6915] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 439.962116][ T6915] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 439.962206][ T6915] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 439.962335][ T6915] [ 440.270144][ T6915] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:00:11 executed programs: 71 [ 441.428395][ T6921] loop0: detected capacity change from 0 to 32768 [ 441.459247][ T6921] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 441.467953][ T6921] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 441.494319][ T6921] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 441.507692][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 441.514962][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 441.639790][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms [ 441.650431][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 441.657615][ T6921] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 441.747341][ T6921] syz.0.84: attempt to access beyond end of device [ 441.747341][ T6921] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 441.762527][ T6921] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 441.779692][ T6921] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 441.810861][ T6921] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 441.819945][ T6921] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 441.827131][ T6921] gfs2: fsid=syz:syz.0: File system withdrawn [ 441.833652][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.0.84 Not tainted syzkaller #0 PREEMPT(none) [ 441.833803][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 441.833895][ T6921] Call Trace: [ 441.833944][ T6921] [ 441.834009][ T6921] __dump_stack+0x26/0x30 [ 441.834189][ T6921] dump_stack_lvl+0x1df/0x270 [ 441.834376][ T6921] dump_stack+0x1e/0x25 [ 441.834542][ T6921] gfs2_withdraw+0x1ec1/0x2020 [ 441.834766][ T6921] gfs2_metatype_check_ii+0x113/0x140 [ 441.834939][ T6921] gfs2_quota_init+0x25bf/0x2730 [ 441.835219][ T6921] gfs2_make_fs_rw+0x1d5/0x460 [ 441.835385][ T6921] gfs2_fill_super+0x3d31/0x3f50 [ 441.835546][ T6921] ? init_locking+0xed/0x500 [ 441.835749][ T6921] get_tree_bdev_flags+0x6e3/0x920 [ 441.835935][ T6921] ? __pfx_gfs2_fill_super+0x10/0x10 [ 441.836098][ T6921] ? __pfx_gfs2_fill_super+0x10/0x10 [ 441.836255][ T6921] ? __pfx_gfs2_get_tree+0x10/0x10 [ 441.836413][ T6921] get_tree_bdev+0x38/0x50 [ 441.836588][ T6921] gfs2_get_tree+0x57/0x350 [ 441.836755][ T6921] ? __pfx_gfs2_get_tree+0x10/0x10 [ 441.836913][ T6921] vfs_get_tree+0xb3/0x5c0 [ 441.837084][ T6921] ? mount_capable+0x99/0x100 [ 441.837240][ T6921] do_new_mount+0x733/0x14b0 [ 441.837400][ T6921] ? apparmor_capable+0x32d/0x410 [ 441.837582][ T6921] ? kmsan_get_metadata+0xfb/0x160 [ 441.837780][ T6921] path_mount+0x6db/0x1ea0 [ 441.837961][ T6921] ? user_path_at+0x32d/0x3d0 [ 441.838126][ T6921] __se_sys_mount+0x6eb/0x7d0 [ 441.838300][ T6921] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 441.838538][ T6921] __x64_sys_mount+0xe4/0x150 [ 441.838729][ T6921] x64_sys_call+0x3604/0x3e20 [ 441.838925][ T6921] do_syscall_64+0xd9/0x210 [ 441.839129][ T6921] ? irqentry_exit+0x16/0x60 [ 441.839312][ T6921] ? clear_bhb_loop+0x40/0x90 [ 441.839477][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.839637][ T6921] RIP: 0033:0x7fc8c257ffba [ 441.839764][ T6921] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.839882][ T6921] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.840022][ T6921] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 441.840120][ T6921] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 441.840216][ T6921] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 441.840310][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 441.840396][ T6921] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 441.840518][ T6921] [ 442.130040][ T6921] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 443.268292][ T6927] loop0: detected capacity change from 0 to 32768 [ 443.307682][ T6927] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 443.316369][ T6927] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 443.337290][ T6927] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 443.350807][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 443.357856][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 443.474586][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 116ms [ 443.483323][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 443.488953][ T6927] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 443.583563][ T6927] syz.0.85: attempt to access beyond end of device [ 443.583563][ T6927] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 443.599903][ T6927] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 443.616998][ T6927] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 443.650027][ T6927] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 443.658994][ T6927] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 443.666684][ T6927] gfs2: fsid=syz:syz.0: File system withdrawn [ 443.673417][ T6927] CPU: 0 UID: 0 PID: 6927 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT(none) [ 443.673560][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 443.673653][ T6927] Call Trace: [ 443.673702][ T6927] [ 443.673749][ T6927] __dump_stack+0x26/0x30 [ 443.673928][ T6927] dump_stack_lvl+0x1df/0x270 [ 443.674114][ T6927] dump_stack+0x1e/0x25 [ 443.674275][ T6927] gfs2_withdraw+0x1ec1/0x2020 [ 443.674496][ T6927] gfs2_metatype_check_ii+0x113/0x140 [ 443.674666][ T6927] gfs2_quota_init+0x25bf/0x2730 [ 443.674945][ T6927] gfs2_make_fs_rw+0x1d5/0x460 [ 443.675123][ T6927] gfs2_fill_super+0x3d31/0x3f50 [ 443.675286][ T6927] ? init_locking+0xed/0x500 [ 443.675488][ T6927] get_tree_bdev_flags+0x6e3/0x920 [ 443.675673][ T6927] ? __pfx_gfs2_fill_super+0x10/0x10 [ 443.675835][ T6927] ? __pfx_gfs2_fill_super+0x10/0x10 [ 443.675990][ T6927] ? __pfx_gfs2_get_tree+0x10/0x10 [ 443.676140][ T6927] get_tree_bdev+0x38/0x50 [ 443.676321][ T6927] gfs2_get_tree+0x57/0x350 [ 443.676481][ T6927] ? __pfx_gfs2_get_tree+0x10/0x10 [ 443.676633][ T6927] vfs_get_tree+0xb3/0x5c0 [ 443.676808][ T6927] ? mount_capable+0x99/0x100 [ 443.676971][ T6927] do_new_mount+0x733/0x14b0 [ 443.677139][ T6927] ? apparmor_capable+0x32d/0x410 [ 443.677330][ T6927] ? kmsan_get_metadata+0xfb/0x160 [ 443.677530][ T6927] path_mount+0x6db/0x1ea0 [ 443.677701][ T6927] ? user_path_at+0x32d/0x3d0 [ 443.677871][ T6927] __se_sys_mount+0x6eb/0x7d0 [ 443.678051][ T6927] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 443.678294][ T6927] __x64_sys_mount+0xe4/0x150 [ 443.678492][ T6927] x64_sys_call+0x3604/0x3e20 [ 443.678675][ T6927] do_syscall_64+0xd9/0x210 [ 443.678875][ T6927] ? irqentry_exit+0x16/0x60 [ 443.679050][ T6927] ? clear_bhb_loop+0x40/0x90 [ 443.679214][ T6927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.679383][ T6927] RIP: 0033:0x7fc8c257ffba [ 443.679504][ T6927] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.679622][ T6927] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 443.679757][ T6927] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 443.679859][ T6927] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 443.679954][ T6927] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 443.680047][ T6927] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 443.680134][ T6927] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 443.680259][ T6927] [ 443.980151][ T6927] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 445.145592][ T6933] loop0: detected capacity change from 0 to 32768 [ 445.166029][ T6933] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 445.174618][ T6933] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 445.200081][ T6933] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 445.212392][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 445.219360][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 445.328816][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 109ms [ 445.337687][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 445.343662][ T6933] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 445.434817][ T6933] syz.0.86: attempt to access beyond end of device [ 445.434817][ T6933] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 445.450556][ T6933] ===================================================== [ 445.457736][ T6933] BUG: KMSAN: uninit-value in gfs2_quota_init+0x219f/0x2730 [ 445.465515][ T6933] gfs2_quota_init+0x219f/0x2730 [ 445.470819][ T6933] gfs2_make_fs_rw+0x1d5/0x460 [ 445.475756][ T6933] gfs2_fill_super+0x3d31/0x3f50 [ 445.481041][ T6933] get_tree_bdev_flags+0x6e3/0x920 [ 445.486343][ T6933] get_tree_bdev+0x38/0x50 [ 445.491094][ T6933] gfs2_get_tree+0x57/0x350 [ 445.495748][ T6933] vfs_get_tree+0xb3/0x5c0 [ 445.500493][ T6933] do_new_mount+0x733/0x14b0 [ 445.505246][ T6933] path_mount+0x6db/0x1ea0 [ 445.510170][ T6933] __se_sys_mount+0x6eb/0x7d0 [ 445.515022][ T6933] __x64_sys_mount+0xe4/0x150 [ 445.520324][ T6933] x64_sys_call+0x3604/0x3e20 [ 445.525458][ T6933] do_syscall_64+0xd9/0x210 [ 445.530372][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.538332][ T6933] [ 445.541663][ T6933] Uninit was created at: [ 445.546148][ T6933] __alloc_frozen_pages_noprof+0x689/0xf00 [ 445.552347][ T6933] alloc_pages_mpol+0x328/0x860 [ 445.557359][ T6933] folio_alloc_noprof+0x109/0x360 [ 445.562812][ T6933] filemap_alloc_folio_noprof+0x9d/0x420 [ 445.568638][ T6933] __filemap_get_folio+0xb45/0x1930 [ 445.574619][ T6933] gfs2_getbuf+0x246/0xce0 [ 445.579204][ T6933] gfs2_meta_ra+0x13c/0x720 [ 445.584119][ T6933] gfs2_quota_init+0x759/0x2730 [ 445.589155][ T6933] gfs2_make_fs_rw+0x1d5/0x460 [ 445.594193][ T6933] gfs2_fill_super+0x3d31/0x3f50 [ 445.599281][ T6933] get_tree_bdev_flags+0x6e3/0x920 [ 445.604699][ T6933] get_tree_bdev+0x38/0x50 [ 445.609267][ T6933] gfs2_get_tree+0x57/0x350 [ 445.613990][ T6933] vfs_get_tree+0xb3/0x5c0 [ 445.618563][ T6933] do_new_mount+0x733/0x14b0 [ 445.623402][ T6933] path_mount+0x6db/0x1ea0 [ 445.627976][ T6933] __se_sys_mount+0x6eb/0x7d0 [ 445.632918][ T6933] __x64_sys_mount+0xe4/0x150 [ 445.639115][ T6933] x64_sys_call+0x3604/0x3e20 [ 445.644974][ T6933] do_syscall_64+0xd9/0x210 [ 445.649866][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.655910][ T6933] [ 445.658280][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(none) [ 445.667889][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.678176][ T6933] ===================================================== [ 445.685348][ T6933] Disabling lock debugging due to kernel taint [ 445.691690][ T6933] Kernel panic - not syncing: kmsan.panic set ... [ 445.698270][ T6933] CPU: 1 UID: 0 PID: 6933 Comm: syz.0.86 Tainted: G B syzkaller #0 PREEMPT(none) [ 445.709057][ T6933] Tainted: [B]=BAD_PAGE [ 445.713264][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.723382][ T6933] Call Trace: [ 445.726713][ T6933] [ 445.729677][ T6933] __dump_stack+0x26/0x30 [ 445.734093][ T6933] dump_stack_lvl+0x53/0x270 [ 445.738770][ T6933] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 445.744669][ T6933] dump_stack+0x1e/0x25 [ 445.748921][ T6933] vpanic+0x361/0xc50 [ 445.753019][ T6933] panic+0x15d/0x160 [ 445.757105][ T6933] kmsan_report+0x31c/0x320 [ 445.761690][ T6933] ? __msan_warning+0x1b/0x30 [ 445.766434][ T6933] ? gfs2_quota_init+0x219f/0x2730 [ 445.771642][ T6933] ? gfs2_make_fs_rw+0x1d5/0x460 [ 445.776664][ T6933] ? gfs2_fill_super+0x3d31/0x3f50 [ 445.781849][ T6933] ? get_tree_bdev_flags+0x6e3/0x920 [ 445.787228][ T6933] ? get_tree_bdev+0x38/0x50 [ 445.791910][ T6933] ? gfs2_get_tree+0x57/0x350 [ 445.796654][ T6933] ? vfs_get_tree+0xb3/0x5c0 [ 445.801338][ T6933] ? do_new_mount+0x733/0x14b0 [ 445.806205][ T6933] ? path_mount+0x6db/0x1ea0 [ 445.810881][ T6933] ? __se_sys_mount+0x6eb/0x7d0 [ 445.815816][ T6933] ? __x64_sys_mount+0xe4/0x150 [ 445.820748][ T6933] ? x64_sys_call+0x3604/0x3e20 [ 445.825698][ T6933] ? do_syscall_64+0xd9/0x210 [ 445.830692][ T6933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.836861][ T6933] ? submit_bio+0x57c/0x630 [ 445.841571][ T6933] ? submit_bh_wbc+0x7e0/0x870 [ 445.846454][ T6933] ? kmsan_get_metadata+0xfb/0x160 [ 445.851672][ T6933] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 445.857589][ T6933] ? gfs2_meta_ra+0x68b/0x720 [ 445.862470][ T6933] ? kmsan_get_metadata+0xfb/0x160 [ 445.867687][ T6933] __msan_warning+0x1b/0x30 [ 445.872283][ T6933] gfs2_quota_init+0x219f/0x2730 [ 445.877457][ T6933] gfs2_make_fs_rw+0x1d5/0x460 [ 445.882316][ T6933] gfs2_fill_super+0x3d31/0x3f50 [ 445.887349][ T6933] ? init_locking+0xed/0x500 [ 445.892256][ T6933] get_tree_bdev_flags+0x6e3/0x920 [ 445.897480][ T6933] ? __pfx_gfs2_fill_super+0x10/0x10 [ 445.902923][ T6933] ? __pfx_gfs2_fill_super+0x10/0x10 [ 445.908354][ T6933] ? __pfx_gfs2_get_tree+0x10/0x10 [ 445.913543][ T6933] get_tree_bdev+0x38/0x50 [ 445.918064][ T6933] gfs2_get_tree+0x57/0x350 [ 445.922684][ T6933] ? __pfx_gfs2_get_tree+0x10/0x10 [ 445.927866][ T6933] vfs_get_tree+0xb3/0x5c0 [ 445.932378][ T6933] ? mount_capable+0x99/0x100 [ 445.937134][ T6933] do_new_mount+0x733/0x14b0 [ 445.941813][ T6933] ? apparmor_capable+0x32d/0x410 [ 445.946930][ T6933] ? kmsan_get_metadata+0xfb/0x160 [ 445.952148][ T6933] path_mount+0x6db/0x1ea0 [ 445.956665][ T6933] ? user_path_at+0x32d/0x3d0 [ 445.961423][ T6933] __se_sys_mount+0x6eb/0x7d0 [ 445.966198][ T6933] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 445.972399][ T6933] __x64_sys_mount+0xe4/0x150 [ 445.977179][ T6933] x64_sys_call+0x3604/0x3e20 [ 445.981955][ T6933] do_syscall_64+0xd9/0x210 [ 445.986568][ T6933] ? irqentry_exit+0x16/0x60 [ 445.991246][ T6933] ? clear_bhb_loop+0x40/0x90 [ 445.996007][ T6933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.001978][ T6933] RIP: 0033:0x7fc8c257ffba [ 446.006449][ T6933] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.026173][ T6933] RSP: 002b:00007fc8c342de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 446.034686][ T6933] RAX: ffffffffffffffda RBX: 00007fc8c342def0 RCX: 00007fc8c257ffba [ 446.042722][ T6933] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fc8c342deb0 [ 446.050766][ T6933] RBP: 0000000020000080 R08: 00007fc8c342def0 R09: 0000000000000000 [ 446.058846][ T6933] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 446.066874][ T6933] R13: 00007fc8c342deb0 R14: 0000000000012551 R15: 0000000020000000 [ 446.074927][ T6933] [ 446.078294][ T6933] Kernel Offset: disabled [ 446.082671][ T6933] Rebooting in 86400 seconds..