[ 465.878836][ T1222] gfs2: fsid=syz:syz.0: file system withdrawn [ 466.209891][ T7171] loop0: detected capacity change from 0 to 32768 [ 466.228716][ T7171] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 466.241307][ T7171] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 466.277854][ T7171] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 466.288646][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 466.295474][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 466.353166][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 57ms [ 466.360982][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 466.366898][ T7171] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 466.611696][ T29] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 466.628049][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 466.644953][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 466.661865][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 466.661889][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.661900][ T29] Workqueue: gfs2-delete/syz:syz delete_work_func [ 466.661926][ T29] Call Trace: [ 466.661934][ T29] [ 466.661942][ T29] dump_stack_lvl+0xe8/0x150 [ 466.661968][ T29] gfs2_withdraw+0xc3/0x1b0 [ 466.661988][ T29] gfs2_meta_buffer+0x225/0x2e0 [ 466.662016][ T29] inode_go_instantiate+0xea/0x1220 [ 466.662035][ T29] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.662058][ T29] ? __pfx_inode_go_instantiate+0x10/0x10 [ 466.662079][ T29] ? do_raw_spin_unlock+0xf5/0x210 [ 466.662102][ T29] gfs2_instantiate+0x168/0x220 [ 466.662123][ T29] gfs2_inode_lookup+0x727/0xc50 [ 466.662150][ T29] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 466.662175][ T29] ? gfs2_lookup_by_inum+0x52/0x100 [ 466.662193][ T29] ? trace_hrtimer_start+0x82/0x230 [ 466.662215][ T29] ? __lock_acquire+0x6b5/0x2cf0 [ 466.662244][ T29] gfs2_lookup_by_inum+0x52/0x100 [ 466.662266][ T29] delete_work_func+0x311/0x4d0 [ 466.662284][ T29] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.662306][ T29] ? __pfx_delete_work_func+0x10/0x10 [ 466.662337][ T29] ? process_one_work+0x8bb/0x1780 [ 466.662358][ T29] process_one_work+0x9ab/0x1780 [ 466.662398][ T29] ? __pfx_process_one_work+0x10/0x10 [ 466.662417][ T29] ? do_raw_spin_lock+0x12b/0x2f0 [ 466.662449][ T29] worker_thread+0xba8/0x11e0 [ 466.662489][ T29] kthread+0x388/0x470 [ 466.662508][ T29] ? __pfx_worker_thread+0x10/0x10 [ 466.662522][ T29] ? __pfx_kthread+0x10/0x10 [ 466.662541][ T29] ret_from_fork+0x51e/0xb90 [ 466.662566][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 466.662586][ T29] ? __switch_to+0xc7d/0x1450 [ 466.662609][ T29] ? __pfx_kthread+0x10/0x10 [ 466.662628][ T29] ret_from_fork_asm+0x1a/0x30 [ 466.662660][ T29] [ 466.662666][ T29] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 466.730751][ T9] loop0: writeback error on inode 9394, offset 1152000, sector 21060 [ 466.741251][ T5888] gfs2: fsid=syz:syz.0: file system withdrawn [ 467.440923][ T7178] loop0: detected capacity change from 0 to 32768 [ 467.469044][ T7178] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 467.481600][ T7178] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 467.540503][ T7178] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 467.558260][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 467.574030][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 467.666817][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 92ms [ 467.674382][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 467.679715][ T7178] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 467.929006][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 467.944525][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 467.960906][ T29] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 467.977644][ T1222] CPU: 1 UID: 0 PID: 1222 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 467.977663][ T7183] gfs2: fsid=syz:syz.0: GFS2:adding buf while withdrawn! 0x3cd1 [ 467.977667][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.977678][ T1222] Workqueue: gfs2-delete/syz:syz delete_work_func [ 467.977701][ T1222] Call Trace: [ 467.977706][ T1222] [ 467.977726][ T1222] dump_stack_lvl+0xe8/0x150 [ 467.977751][ T1222] gfs2_withdraw+0xc3/0x1b0 [ 467.977771][ T1222] gfs2_meta_buffer+0x225/0x2e0 [ 467.977797][ T1222] inode_go_instantiate+0xea/0x1220 [ 467.977818][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 467.977839][ T1222] ? __pfx_inode_go_instantiate+0x10/0x10 [ 467.977858][ T1222] ? do_raw_spin_unlock+0xf5/0x210 [ 467.977883][ T1222] gfs2_instantiate+0x168/0x220 [ 467.977903][ T1222] gfs2_inode_lookup+0x727/0xc50 [ 467.977930][ T1222] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 467.977953][ T1222] ? gfs2_lookup_by_inum+0x52/0x100 [ 467.977970][ T1222] ? trace_hrtimer_start+0x82/0x230 [ 467.977991][ T1222] ? __lock_acquire+0x6b5/0x2cf0 [ 467.978019][ T1222] gfs2_lookup_by_inum+0x52/0x100 [ 467.978040][ T1222] delete_work_func+0x311/0x4d0 [ 467.978057][ T1222] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 467.978079][ T1222] ? __pfx_delete_work_func+0x10/0x10 [ 467.978110][ T1222] ? process_one_work+0x8bb/0x1780 [ 467.978131][ T1222] process_one_work+0x9ab/0x1780 [ 467.978170][ T1222] ? __pfx_process_one_work+0x10/0x10 [ 467.978189][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 467.978222][ T1222] worker_thread+0xba8/0x11e0 [ 467.978245][ T1222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 467.978263][ T1222] ? __kthread_parkme+0x7a/0x1f0 [ 467.978279][ T1222] ? __kthread_parkme+0x19c/0x1f0 [ 467.978301][ T1222] kthread+0x388/0x470 [ 467.978319][ T1222] ? __pfx_worker_thread+0x10/0x10 [ 467.978332][ T1222] ? __pfx_kthread+0x10/0x10 [ 467.978350][ T1222] ret_from_fork+0x51e/0xb90 [ 467.978373][ T1222] ? __pfx_ret_from_fork+0x10/0x10 [ 467.978392][ T1222] ? __switch_to+0xc7d/0x1450 [ 467.978415][ T1222] ? __pfx_kthread+0x10/0x10 [ 467.978435][ T1222] ret_from_fork_asm+0x1a/0x30 [ 467.978464][ T1222] [ 467.978912][ T1222] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 467.987676][ T7183] gfs2: fsid=syz:syz.0: gfs2_create_inode: -5 [ 468.210469][ T6391] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 468.239321][ T6391] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program [ 472.998597][ T29] gfs2: fsid=syz:syz.0: file system withdrawn [ 473.243988][ T7201] loop0: detected capacity change from 0 to 32768 [ 473.259138][ T7201] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 473.267536][ T7201] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 473.307539][ T7201] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 473.316718][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 473.323510][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 473.370818][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 473.378398][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 473.383734][ T7201] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 473.626309][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 473.652304][ T29] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 473.673272][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 473.689504][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 473.689526][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.689536][ T5935] Workqueue: gfs2-delete/syz:syz delete_work_func [ 473.689563][ T5935] Call Trace: [ 473.689569][ T5935] [ 473.689577][ T5935] dump_stack_lvl+0xe8/0x150 [ 473.689602][ T5935] gfs2_withdraw+0xc3/0x1b0 [ 473.689622][ T5935] gfs2_meta_buffer+0x225/0x2e0 [ 473.689648][ T5935] inode_go_instantiate+0xea/0x1220 [ 473.689676][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.689697][ T5935] ? __pfx_inode_go_instantiate+0x10/0x10 [ 473.689716][ T5935] ? do_raw_spin_unlock+0xf5/0x210 [ 473.689737][ T5935] gfs2_instantiate+0x168/0x220 [ 473.689757][ T5935] gfs2_inode_lookup+0x727/0xc50 [ 473.689782][ T5935] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 473.689801][ T5935] ? check_path+0x21/0x40 [ 473.689819][ T5935] ? gfs2_lookup_by_inum+0x52/0x100 [ 473.689835][ T5935] ? add_lock_to_list+0xc7/0x100 [ 473.689850][ T5935] ? lockdep_unlock+0x5d/0xd0 [ 473.689865][ T5935] ? __lock_acquire+0x146e/0x2cf0 [ 473.689887][ T5935] gfs2_lookup_by_inum+0x52/0x100 [ 473.689903][ T5935] delete_work_func+0x311/0x4d0 [ 473.689922][ T5935] ? __pfx_delete_work_func+0x10/0x10 [ 473.689947][ T5935] ? process_one_work+0x8bb/0x1780 [ 473.689964][ T5935] process_one_work+0x9ab/0x1780 [ 473.689996][ T5935] ? __pfx_process_one_work+0x10/0x10 [ 473.690011][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.690037][ T5935] worker_thread+0xba8/0x11e0 [ 473.690055][ T5935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 473.690071][ T5935] ? __kthread_parkme+0x7a/0x1f0 [ 473.690084][ T5935] ? __kthread_parkme+0x19c/0x1f0 [ 473.690101][ T5935] kthread+0x388/0x470 [ 473.690115][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 473.690125][ T5935] ? __pfx_kthread+0x10/0x10 [ 473.690140][ T5935] ret_from_fork+0x51e/0xb90 [ 473.690160][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 473.690177][ T5935] ? __switch_to+0xc7d/0x1450 [ 473.690195][ T5935] ? __pfx_kthread+0x10/0x10 [ 473.690210][ T5935] ret_from_fork_asm+0x1a/0x30 [ 473.690234][ T5935] [ 473.690243][ T5935] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 473.706261][ T9] loop0: writeback error on inode 9394, offset 6400000, sector 31392 [ 473.721498][ T29] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 474.228911][ T7210] loop0: detected capacity change from 0 to 32768 [ 474.246481][ T7210] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 474.254994][ T7210] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 474.287721][ T7210] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 474.298977][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 474.305828][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 474.381306][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 75ms [ 474.390274][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 474.395568][ T7210] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 474.645033][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 474.660686][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 474.678399][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 474.694268][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 474.710061][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 474.710083][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.710093][ T10] Workqueue: gfs2-delete/syz:syz delete_work_func [ 474.710122][ T10] Call Trace: [ 474.710128][ T10] [ 474.710135][ T10] dump_stack_lvl+0xe8/0x150 [ 474.710162][ T10] gfs2_withdraw+0xc3/0x1b0 [ 474.710182][ T10] gfs2_meta_buffer+0x225/0x2e0 [ 474.710208][ T10] inode_go_instantiate+0xea/0x1220 [ 474.710227][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 474.710251][ T10] ? __pfx_inode_go_instantiate+0x10/0x10 [ 474.710272][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 474.710296][ T10] gfs2_instantiate+0x168/0x220 [ 474.710317][ T10] gfs2_inode_lookup+0x727/0xc50 [ 474.710344][ T10] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 474.710368][ T10] ? gfs2_lookup_by_inum+0x52/0x100 [ 474.710385][ T10] ? trace_hrtimer_start+0x82/0x230 [ 474.710416][ T10] ? __lock_acquire+0x6b5/0x2cf0 [ 474.710442][ T10] gfs2_lookup_by_inum+0x52/0x100 [ 474.710462][ T10] delete_work_func+0x311/0x4d0 [ 474.710480][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 474.710501][ T10] ? __pfx_delete_work_func+0x10/0x10 [ 474.710531][ T10] ? process_one_work+0x8bb/0x1780 [ 474.710551][ T10] process_one_work+0x9ab/0x1780 [ 474.710591][ T10] ? __pfx_process_one_work+0x10/0x10 [ 474.710611][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 474.710664][ T10] worker_thread+0xba8/0x11e0 [ 474.710687][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 474.710706][ T10] ? __kthread_parkme+0x7a/0x1f0 [ 474.710723][ T10] ? __kthread_parkme+0x19c/0x1f0 [ 474.710743][ T10] kthread+0x388/0x470 [ 474.710761][ T10] ? __pfx_worker_thread+0x10/0x10 [ 474.710774][ T10] ? __pfx_kthread+0x10/0x10 [ 474.710792][ T10] ret_from_fork+0x51e/0xb90 [ 474.710815][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 474.710834][ T10] ? __switch_to+0xc7d/0x1450 [ 474.710858][ T10] ? __pfx_kthread+0x10/0x10 [ 474.710877][ T10] ret_from_fork_asm+0x1a/0x30 [ 474.710907][ T10] [ 474.710914][ T10] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 474.764329][ T29] loop0: writeback error on inode 9394, offset 2432000, sector 23580 [ 474.781125][ T6488] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 475.253479][ T7217] loop0: detected capacity change from 0 to 32768 [ 475.271084][ T7217] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 475.279728][ T7217] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 475.311708][ T7217] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 475.321737][ T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 475.329103][ T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 475.404902][ T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 75ms [ 475.412540][ T29] gfs2: fsid=syz:syz.0: jid=0: Done [ 475.417835][ T7217] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 475.664177][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 475.686752][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 475.702391][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 475.718362][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 475.734048][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 475.734070][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.734079][ T9] Workqueue: gfs2-delete/syz:syz delete_work_func [ 475.734106][ T9] Call Trace: [ 475.734113][ T9] [ 475.734120][ T9] dump_stack_lvl+0xe8/0x150 [ 475.734147][ T9] gfs2_withdraw+0xc3/0x1b0 [ 475.734166][ T9] gfs2_meta_buffer+0x225/0x2e0 [ 475.734192][ T9] inode_go_instantiate+0xea/0x1220 [ 475.734213][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 475.734236][ T9] ? __pfx_inode_go_instantiate+0x10/0x10 [ 475.734257][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 475.734280][ T9] gfs2_instantiate+0x168/0x220 [ 475.734302][ T9] gfs2_inode_lookup+0x727/0xc50 [ 475.734337][ T9] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 475.734361][ T9] ? gfs2_lookup_by_inum+0x52/0x100 [ 475.734377][ T9] ? trace_hrtimer_start+0x82/0x230 [ 475.734397][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 475.734426][ T9] gfs2_lookup_by_inum+0x52/0x100 [ 475.734448][ T9] delete_work_func+0x311/0x4d0 [ 475.734466][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 475.734489][ T9] ? __pfx_delete_work_func+0x10/0x10 [ 475.734519][ T9] ? process_one_work+0x8bb/0x1780 [ 475.734541][ T9] process_one_work+0x9ab/0x1780 [ 475.734583][ T9] ? __pfx_process_one_work+0x10/0x10 [ 475.734604][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 475.734637][ T9] worker_thread+0xba8/0x11e0 [ 475.734677][ T9] kthread+0x388/0x470 [ 475.734696][ T9] ? __pfx_worker_thread+0x10/0x10 [ 475.734709][ T9] ? __pfx_kthread+0x10/0x10 [ 475.734729][ T9] ret_from_fork+0x51e/0xb90 [ 475.734753][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 475.734772][ T9] ? __switch_to+0xc7d/0x1450 [ 475.734793][ T9] ? __pfx_kthread+0x10/0x10 [ 475.734811][ T9] ret_from_fork_asm+0x1a/0x30 [ 475.734841][ T9] [ 475.734847][ T9] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 475.771303][ T5935] loop0: writeback error on inode 9394, offset 5248000, sector 29124 [ 475.791210][ T6488] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 476.260084][ T7224] loop0: detected capacity change from 0 to 32768 [ 476.281642][ T7224] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 476.290328][ T7224] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 476.320540][ T7224] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 476.341460][ T6488] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 476.348380][ T6488] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 476.389407][ T6488] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 476.397053][ T6488] gfs2: fsid=syz:syz.0: jid=0: Done [ 476.402319][ T7224] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 476.647812][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 476.663324][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 476.679598][ T29] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 476.696437][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 476.712163][ T1222] CPU: 1 UID: 0 PID: 1222 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 476.712186][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 476.712196][ T1222] Workqueue: gfs2-delete/syz:syz delete_work_func [ 476.712223][ T1222] Call Trace: [ 476.712229][ T1222] [ 476.712237][ T1222] dump_stack_lvl+0xe8/0x150 [ 476.712263][ T1222] gfs2_withdraw+0xc3/0x1b0 [ 476.712283][ T1222] gfs2_meta_buffer+0x225/0x2e0 [ 476.712310][ T1222] inode_go_instantiate+0xea/0x1220 [ 476.712330][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 476.712351][ T1222] ? __pfx_inode_go_instantiate+0x10/0x10 [ 476.712371][ T1222] ? do_raw_spin_unlock+0xf5/0x210 [ 476.712403][ T1222] gfs2_instantiate+0x168/0x220 [ 476.712425][ T1222] gfs2_inode_lookup+0x727/0xc50 [ 476.712452][ T1222] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 476.712477][ T1222] ? gfs2_lookup_by_inum+0x52/0x100 [ 476.712495][ T1222] ? trace_hrtimer_start+0x82/0x230 [ 476.712517][ T1222] ? __lock_acquire+0x6b5/0x2cf0 [ 476.712545][ T1222] gfs2_lookup_by_inum+0x52/0x100 [ 476.712567][ T1222] delete_work_func+0x311/0x4d0 [ 476.712586][ T1222] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 476.712608][ T1222] ? __pfx_delete_work_func+0x10/0x10 [ 476.712640][ T1222] ? process_one_work+0x8bb/0x1780 [ 476.712661][ T1222] process_one_work+0x9ab/0x1780 [ 476.712703][ T1222] ? __pfx_process_one_work+0x10/0x10 [ 476.712723][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 476.712757][ T1222] worker_thread+0xba8/0x11e0 [ 476.712782][ T1222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 476.712802][ T1222] ? __kthread_parkme+0x7a/0x1f0 [ 476.712818][ T1222] ? __kthread_parkme+0x19c/0x1f0 [ 476.712840][ T1222] kthread+0x388/0x470 [ 476.712857][ T1222] ? __pfx_worker_thread+0x10/0x10 [ 476.712869][ T1222] ? __pfx_kthread+0x10/0x10 [ 476.712887][ T1222] ret_from_fork+0x51e/0xb90 [ 476.712911][ T1222] ? __pfx_ret_from_fork+0x10/0x10 [ 476.712928][ T1222] ? __switch_to+0xc7d/0x1450 [ 476.712952][ T1222] ? __pfx_kthread+0x10/0x10 [ 476.712970][ T1222] ret_from_fork_asm+0x1a/0x30 [ 476.712995][ T1222] [ 476.713004][ T1222] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 476.755580][ T6488] loop0: writeback error on inode 9394, offset 3456000, sector 25596 [ 476.770731][ T5935] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 477.255054][ T7231] loop0: detected capacity change from 0 to 32768 [ 477.271887][ T7231] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 477.282277][ T7231] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 477.309714][ T7231] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 477.319884][ T5935] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 477.328869][ T5935] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 477.413447][ T5935] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 84ms [ 477.421037][ T5935] gfs2: fsid=syz:syz.0: jid=0: Done [ 477.426370][ T7231] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 477.672671][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 477.688245][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 477.704629][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 477.722472][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 477.739251][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 477.739273][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.739282][ T10] Workqueue: gfs2-delete/syz:syz delete_work_func [ 477.739307][ T10] Call Trace: [ 477.739313][ T10] [ 477.739320][ T10] dump_stack_lvl+0xe8/0x150 [ 477.739344][ T10] gfs2_withdraw+0xc3/0x1b0 [ 477.739363][ T10] gfs2_meta_buffer+0x225/0x2e0 [ 477.739390][ T10] inode_go_instantiate+0xea/0x1220 [ 477.739411][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.739437][ T10] ? __pfx_inode_go_instantiate+0x10/0x10 [ 477.739458][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 477.739480][ T10] gfs2_instantiate+0x168/0x220 [ 477.739500][ T10] gfs2_inode_lookup+0x727/0xc50 [ 477.739528][ T10] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 477.739553][ T10] ? gfs2_lookup_by_inum+0x52/0x100 [ 477.739570][ T10] ? trace_hrtimer_start+0x82/0x230 [ 477.739591][ T10] ? __lock_acquire+0x6b5/0x2cf0 [ 477.739619][ T10] gfs2_lookup_by_inum+0x52/0x100 [ 477.739641][ T10] delete_work_func+0x311/0x4d0 [ 477.739660][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 477.739682][ T10] ? __pfx_delete_work_func+0x10/0x10 [ 477.739714][ T10] ? process_one_work+0x8bb/0x1780 [ 477.739744][ T10] process_one_work+0x9ab/0x1780 [ 477.739785][ T10] ? __pfx_process_one_work+0x10/0x10 [ 477.739805][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 477.739839][ T10] worker_thread+0xba8/0x11e0 [ 477.739864][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 477.739883][ T10] ? __kthread_parkme+0x7a/0x1f0 [ 477.739900][ T10] ? __kthread_parkme+0x19c/0x1f0 [ 477.739920][ T10] kthread+0x388/0x470 [ 477.739937][ T10] ? __pfx_worker_thread+0x10/0x10 [ 477.739951][ T10] ? __pfx_kthread+0x10/0x10 [ 477.739970][ T10] ret_from_fork+0x51e/0xb90 [ 477.739994][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 477.740014][ T10] ? __switch_to+0xc7d/0x1450 [ 477.740037][ T10] ? __pfx_kthread+0x10/0x10 [ 477.740057][ T10] ret_from_fork_asm+0x1a/0x30 [ 477.740088][ T10] [ 477.740106][ T10] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 477.750484][ T1222] loop0: writeback error on inode 9394, offset 5632000, sector 29880 [ 477.781108][ T6488] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 478.320132][ T7238] loop0: detected capacity change from 0 to 32768 [ 478.343343][ T7238] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 478.351958][ T7238] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 478.383396][ T7238] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 478.394069][ T6488] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 478.404729][ T6488] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 478.472380][ T6488] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 478.479935][ T6488] gfs2: fsid=syz:syz.0: jid=0: Done [ 478.485163][ T7238] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 478.730604][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 478.730689][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 478.748047][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 478.764796][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 478.764819][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.764829][ T5935] Workqueue: gfs2-delete/syz:syz delete_work_func [ 478.764859][ T5935] Call Trace: [ 478.764867][ T5935] [ 478.764875][ T5935] dump_stack_lvl+0xe8/0x150 [ 478.764901][ T5935] gfs2_withdraw+0xc3/0x1b0 [ 478.764920][ T5935] gfs2_meta_buffer+0x225/0x2e0 [ 478.764947][ T5935] inode_go_instantiate+0xea/0x1220 [ 478.764967][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 478.764989][ T5935] ? __pfx_inode_go_instantiate+0x10/0x10 [ 478.765009][ T5935] ? do_raw_spin_unlock+0xf5/0x210 [ 478.765031][ T5935] gfs2_instantiate+0x168/0x220 [ 478.765051][ T5935] gfs2_inode_lookup+0x727/0xc50 [ 478.765077][ T5935] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 478.765100][ T5935] ? gfs2_lookup_by_inum+0x52/0x100 [ 478.765117][ T5935] ? trace_hrtimer_start+0x82/0x230 [ 478.765138][ T5935] ? __lock_acquire+0x6b5/0x2cf0 [ 478.765165][ T5935] gfs2_lookup_by_inum+0x52/0x100 [ 478.765194][ T5935] delete_work_func+0x311/0x4d0 [ 478.765212][ T5935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 478.765233][ T5935] ? __pfx_delete_work_func+0x10/0x10 [ 478.765264][ T5935] ? process_one_work+0x8bb/0x1780 [ 478.765285][ T5935] process_one_work+0x9ab/0x1780 [ 478.765325][ T5935] ? __pfx_process_one_work+0x10/0x10 [ 478.765344][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 478.765377][ T5935] worker_thread+0xba8/0x11e0 [ 478.765400][ T5935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 478.765419][ T5935] ? __kthread_parkme+0x7a/0x1f0 [ 478.765435][ T5935] ? __kthread_parkme+0x19c/0x1f0 [ 478.765456][ T5935] kthread+0x388/0x470 [ 478.765474][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 478.765487][ T5935] ? __pfx_kthread+0x10/0x10 [ 478.765506][ T5935] ret_from_fork+0x51e/0xb90 [ 478.765530][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 478.765549][ T5935] ? __switch_to+0xc7d/0x1450 [ 478.765573][ T5935] ? __pfx_kthread+0x10/0x10 [ 478.765592][ T5935] ret_from_fork_asm+0x1a/0x30 [ 478.765622][ T5935] [ 478.765641][ T5935] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 478.985765][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 479.014463][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 484.038633][ T29] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 484.357405][ T7246] loop0: detected capacity change from 0 to 32768 [ 484.383766][ T7246] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 484.392509][ T7246] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 484.423419][ T7246] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 484.434221][ T6488] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 484.441634][ T6488] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 484.508630][ T6488] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 66ms [ 484.516744][ T6488] gfs2: fsid=syz:syz.0: jid=0: Done [ 484.522009][ T7246] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 484.762488][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 484.785944][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 484.801321][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 484.818598][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 484.835860][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 484.835885][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 484.835895][ T5906] Workqueue: gfs2-delete/syz:syz delete_work_func [ 484.835922][ T5906] Call Trace: [ 484.835928][ T5906] [ 484.835935][ T5906] dump_stack_lvl+0xe8/0x150 [ 484.835960][ T5906] gfs2_withdraw+0xc3/0x1b0 [ 484.835978][ T5906] gfs2_meta_buffer+0x225/0x2e0 [ 484.836004][ T5906] inode_go_instantiate+0xea/0x1220 [ 484.836022][ T5906] ? do_raw_spin_lock+0x12b/0x2f0 [ 484.836043][ T5906] ? __pfx_inode_go_instantiate+0x10/0x10 [ 484.836063][ T5906] ? do_raw_spin_unlock+0xf5/0x210 [ 484.836085][ T5906] gfs2_instantiate+0x168/0x220 [ 484.836106][ T5906] gfs2_inode_lookup+0x727/0xc50 [ 484.836133][ T5906] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 484.836158][ T5906] ? gfs2_lookup_by_inum+0x52/0x100 [ 484.836176][ T5906] ? trace_hrtimer_start+0x82/0x230 [ 484.836197][ T5906] ? __lock_acquire+0x6b5/0x2cf0 [ 484.836226][ T5906] gfs2_lookup_by_inum+0x52/0x100 [ 484.836246][ T5906] delete_work_func+0x311/0x4d0 [ 484.836263][ T5906] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 484.836285][ T5906] ? __pfx_delete_work_func+0x10/0x10 [ 484.836318][ T5906] ? process_one_work+0x8bb/0x1780 [ 484.836339][ T5906] process_one_work+0x9ab/0x1780 [ 484.836380][ T5906] ? __pfx_process_one_work+0x10/0x10 [ 484.836399][ T5906] ? do_raw_spin_lock+0x12b/0x2f0 [ 484.836434][ T5906] worker_thread+0xba8/0x11e0 [ 484.836482][ T5906] kthread+0x388/0x470 [ 484.836501][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 484.836514][ T5906] ? __pfx_kthread+0x10/0x10 [ 484.836533][ T5906] ret_from_fork+0x51e/0xb90 [ 484.836556][ T5906] ? __pfx_ret_from_fork+0x10/0x10 [ 484.836576][ T5906] ? __switch_to+0xc7d/0x1450 [ 484.836599][ T5906] ? __pfx_kthread+0x10/0x10 [ 484.836619][ T5906] ret_from_fork_asm+0x1a/0x30 [ 484.836650][ T5906] [ 485.030155][ T5935] loop0: writeback error on inode 9394, offset 4608000, sector 27864 [ 485.037611][ T5906] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 485.054443][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 485.059287][ T6506] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 485.426234][ T7254] loop0: detected capacity change from 0 to 32768 [ 485.452416][ T7254] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 485.460796][ T7254] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 485.493742][ T7254] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 485.509746][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 485.517044][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 485.578687][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 61ms [ 485.586312][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 485.593044][ T7254] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 485.836706][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 485.853583][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 485.869258][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 485.885486][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 485.885509][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.885518][ T5888] Workqueue: gfs2-delete/syz:syz delete_work_func [ 485.885543][ T5888] Call Trace: [ 485.885549][ T5888] [ 485.885557][ T5888] dump_stack_lvl+0xe8/0x150 [ 485.885582][ T5888] gfs2_withdraw+0xc3/0x1b0 [ 485.885600][ T5888] gfs2_meta_buffer+0x225/0x2e0 [ 485.885625][ T5888] inode_go_instantiate+0xea/0x1220 [ 485.885644][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 485.885665][ T5888] ? __pfx_inode_go_instantiate+0x10/0x10 [ 485.885684][ T5888] ? do_raw_spin_unlock+0xf5/0x210 [ 485.885705][ T5888] gfs2_instantiate+0x168/0x220 [ 485.885722][ T5888] gfs2_inode_lookup+0x727/0xc50 [ 485.885747][ T5888] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 485.885772][ T5888] ? gfs2_lookup_by_inum+0x52/0x100 [ 485.885794][ T5888] ? __lock_acquire+0x6b5/0x2cf0 [ 485.885823][ T5888] gfs2_lookup_by_inum+0x52/0x100 [ 485.885846][ T5888] delete_work_func+0x311/0x4d0 [ 485.885864][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 485.885890][ T5888] ? __pfx_delete_work_func+0x10/0x10 [ 485.885929][ T5888] ? process_one_work+0x8bb/0x1780 [ 485.885949][ T5888] process_one_work+0x9ab/0x1780 [ 485.885989][ T5888] ? __pfx_process_one_work+0x10/0x10 [ 485.886008][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 485.886042][ T5888] worker_thread+0xba8/0x11e0 [ 485.886081][ T5888] kthread+0x388/0x470 [ 485.886100][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 485.886114][ T5888] ? __pfx_kthread+0x10/0x10 [ 485.886133][ T5888] ret_from_fork+0x51e/0xb90 [ 485.886158][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 485.886178][ T5888] ? __switch_to+0xc7d/0x1450 [ 485.886202][ T5888] ? __pfx_kthread+0x10/0x10 [ 485.886221][ T5888] ret_from_fork_asm+0x1a/0x30 [ 485.886260][ T5888] [ 486.068291][ T5888] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 486.085713][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 486.092031][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 486.121876][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 491.158549][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 491.486142][ T7263] loop0: detected capacity change from 0 to 32768 [ 491.507816][ T7263] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 491.517485][ T7263] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 491.551869][ T7263] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 491.561728][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 491.570350][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 491.613708][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 491.622165][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 491.628105][ T7263] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 491.872209][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 491.888708][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 491.904331][ T29] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 491.922546][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 491.938228][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 491.938251][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.938262][ T5935] Workqueue: gfs2-delete/syz:syz delete_work_func [ 491.938295][ T5935] Call Trace: [ 491.938302][ T5935] [ 491.938308][ T5935] dump_stack_lvl+0xe8/0x150 [ 491.938333][ T5935] gfs2_withdraw+0xc3/0x1b0 [ 491.938352][ T5935] gfs2_meta_buffer+0x225/0x2e0 [ 491.938379][ T5935] inode_go_instantiate+0xea/0x1220 [ 491.938399][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.938421][ T5935] ? __pfx_inode_go_instantiate+0x10/0x10 [ 491.938443][ T5935] ? do_raw_spin_unlock+0xf5/0x210 [ 491.938466][ T5935] gfs2_instantiate+0x168/0x220 [ 491.938486][ T5935] gfs2_inode_lookup+0x727/0xc50 [ 491.938513][ T5935] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 491.938538][ T5935] ? gfs2_lookup_by_inum+0x52/0x100 [ 491.938555][ T5935] ? trace_hrtimer_start+0x82/0x230 [ 491.938576][ T5935] ? __lock_acquire+0x6b5/0x2cf0 [ 491.938604][ T5935] gfs2_lookup_by_inum+0x52/0x100 [ 491.938625][ T5935] delete_work_func+0x311/0x4d0 [ 491.938643][ T5935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 491.938665][ T5935] ? __pfx_delete_work_func+0x10/0x10 [ 491.938695][ T5935] ? process_one_work+0x8bb/0x1780 [ 491.938716][ T5935] process_one_work+0x9ab/0x1780 [ 491.938756][ T5935] ? __pfx_process_one_work+0x10/0x10 [ 491.938775][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.938808][ T5935] worker_thread+0xba8/0x11e0 [ 491.938833][ T5935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 491.938854][ T5935] ? __kthread_parkme+0x7a/0x1f0 [ 491.938871][ T5935] ? __kthread_parkme+0x19c/0x1f0 [ 491.938892][ T5935] kthread+0x388/0x470 [ 491.938911][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 491.938924][ T5935] ? __pfx_kthread+0x10/0x10 [ 491.938943][ T5935] ret_from_fork+0x51e/0xb90 [ 491.938968][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 491.938987][ T5935] ? __switch_to+0xc7d/0x1450 [ 491.939010][ T5935] ? __pfx_kthread+0x10/0x10 [ 491.939029][ T5935] ret_from_fork_asm+0x1a/0x30 [ 491.939060][ T5935] [ 491.939067][ T5935] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 492.009243][ T5906] loop0: writeback error on inode 9394, offset 1280000, sector 21312 [ 492.031274][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 492.488419][ T7272] loop0: detected capacity change from 0 to 32768 [ 492.518175][ T7272] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 492.527036][ T7272] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 492.559024][ T7272] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 492.569452][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 492.576713][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 492.651652][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 74ms [ 492.659307][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 492.664551][ T7272] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 492.908743][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 492.926428][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 492.942319][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 492.942343][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.942353][ T9] Workqueue: gfs2-delete/syz:syz delete_work_func [ 492.942380][ T9] Call Trace: [ 492.942387][ T9] [ 492.942395][ T9] dump_stack_lvl+0xe8/0x150 [ 492.942421][ T9] gfs2_withdraw+0xc3/0x1b0 [ 492.942440][ T9] gfs2_meta_buffer+0x225/0x2e0 [ 492.942467][ T9] inode_go_instantiate+0xea/0x1220 [ 492.942488][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 492.942510][ T9] ? __pfx_inode_go_instantiate+0x10/0x10 [ 492.942531][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 492.942554][ T9] gfs2_instantiate+0x168/0x220 [ 492.942574][ T9] gfs2_inode_lookup+0x727/0xc50 [ 492.942601][ T9] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 492.942626][ T9] ? gfs2_lookup_by_inum+0x52/0x100 [ 492.942644][ T9] ? trace_hrtimer_start+0x82/0x230 [ 492.942664][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 492.942693][ T9] gfs2_lookup_by_inum+0x52/0x100 [ 492.942714][ T9] delete_work_func+0x311/0x4d0 [ 492.942731][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 492.942761][ T9] ? __pfx_delete_work_func+0x10/0x10 [ 492.942789][ T9] ? process_one_work+0x8bb/0x1780 [ 492.942809][ T9] process_one_work+0x9ab/0x1780 [ 492.942847][ T9] ? __pfx_process_one_work+0x10/0x10 [ 492.942866][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 492.942895][ T9] worker_thread+0xba8/0x11e0 [ 492.942925][ T9] kthread+0x388/0x470 [ 492.942940][ T9] ? __pfx_worker_thread+0x10/0x10 [ 492.942950][ T9] ? __pfx_kthread+0x10/0x10 [ 492.942965][ T9] ret_from_fork+0x51e/0xb90 [ 492.942984][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 492.943004][ T9] ? __switch_to+0xc7d/0x1450 [ 492.943022][ T9] ? __pfx_kthread+0x10/0x10 [ 492.943037][ T9] ret_from_fork_asm+0x1a/0x30 [ 492.943060][ T9] [ 492.943080][ T9] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 493.137763][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 493.144109][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 493.176247][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 498.198615][ T10] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 498.514929][ T7285] loop0: detected capacity change from 0 to 32768 [ 498.530282][ T7285] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 498.548901][ T7285] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 498.588753][ T7285] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 498.599051][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 498.606276][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 498.671603][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 65ms [ 498.680031][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 498.685323][ T7285] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 498.935291][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 498.956040][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 498.956063][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.956072][ T6496] Workqueue: gfs2-delete/syz:syz delete_work_func [ 498.956099][ T6496] Call Trace: [ 498.956105][ T6496] [ 498.956114][ T6496] dump_stack_lvl+0xe8/0x150 [ 498.956139][ T6496] gfs2_withdraw+0xc3/0x1b0 [ 498.956159][ T6496] gfs2_meta_buffer+0x225/0x2e0 [ 498.956187][ T6496] inode_go_instantiate+0xea/0x1220 [ 498.956206][ T6496] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.956228][ T6496] ? __pfx_inode_go_instantiate+0x10/0x10 [ 498.956248][ T6496] ? do_raw_spin_unlock+0xf5/0x210 [ 498.956270][ T6496] gfs2_instantiate+0x168/0x220 [ 498.956291][ T6496] gfs2_inode_lookup+0x727/0xc50 [ 498.956317][ T6496] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 498.956336][ T6496] ? check_path+0x21/0x40 [ 498.956354][ T6496] ? gfs2_lookup_by_inum+0x52/0x100 [ 498.956372][ T6496] ? add_lock_to_list+0xc7/0x100 [ 498.956390][ T6496] ? lockdep_unlock+0x5d/0xd0 [ 498.956408][ T6496] ? __lock_acquire+0x146e/0x2cf0 [ 498.956436][ T6496] gfs2_lookup_by_inum+0x52/0x100 [ 498.956471][ T6496] delete_work_func+0x311/0x4d0 [ 498.956494][ T6496] ? __pfx_delete_work_func+0x10/0x10 [ 498.956519][ T6496] ? lock_acquire+0x20b/0x2e0 [ 498.956544][ T6496] ? process_one_work+0x8bb/0x1780 [ 498.956565][ T6496] process_one_work+0x9ab/0x1780 [ 498.956605][ T6496] ? __pfx_process_one_work+0x10/0x10 [ 498.956624][ T6496] ? do_raw_spin_lock+0x12b/0x2f0 [ 498.956658][ T6496] worker_thread+0xba8/0x11e0 [ 498.956681][ T6496] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 498.956701][ T6496] ? __kthread_parkme+0x7a/0x1f0 [ 498.956718][ T6496] ? __kthread_parkme+0x19c/0x1f0 [ 498.956739][ T6496] kthread+0x388/0x470 [ 498.956758][ T6496] ? __pfx_worker_thread+0x10/0x10 [ 498.956771][ T6496] ? __pfx_kthread+0x10/0x10 [ 498.956789][ T6496] ret_from_fork+0x51e/0xb90 [ 498.956814][ T6496] ? __pfx_ret_from_fork+0x10/0x10 [ 498.956833][ T6496] ? __switch_to+0xc7d/0x1450 [ 498.956856][ T6496] ? __pfx_kthread+0x10/0x10 [ 498.956874][ T6496] ret_from_fork_asm+0x1a/0x30 [ 498.956905][ T6496] [ 498.956913][ T6496] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 499.026886][ T10] loop0: writeback error on inode 9394, offset 2048000, sector 22824 [ 499.041137][ T29] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 499.501755][ T7293] loop0: detected capacity change from 0 to 32768 [ 499.516701][ T7293] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 499.527286][ T7293] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 499.559588][ T7293] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 499.571951][ T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 499.580948][ T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 499.653544][ T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 499.661349][ T29] gfs2: fsid=syz:syz.0: jid=0: Done [ 499.666798][ T7293] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 499.911759][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 499.931886][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 499.948436][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 499.965378][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 499.965413][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.965423][ T5935] Workqueue: gfs2-delete/syz:syz delete_work_func [ 499.965450][ T5935] Call Trace: [ 499.965456][ T5935] [ 499.965464][ T5935] dump_stack_lvl+0xe8/0x150 [ 499.965489][ T5935] gfs2_withdraw+0xc3/0x1b0 [ 499.965507][ T5935] gfs2_meta_buffer+0x225/0x2e0 [ 499.965535][ T5935] inode_go_instantiate+0xea/0x1220 [ 499.965556][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.965579][ T5935] ? __pfx_inode_go_instantiate+0x10/0x10 [ 499.965601][ T5935] ? do_raw_spin_unlock+0xf5/0x210 [ 499.965622][ T5935] gfs2_instantiate+0x168/0x220 [ 499.965642][ T5935] gfs2_inode_lookup+0x727/0xc50 [ 499.965669][ T5935] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 499.965692][ T5935] ? gfs2_lookup_by_inum+0x52/0x100 [ 499.965709][ T5935] ? trace_hrtimer_start+0x82/0x230 [ 499.965730][ T5935] ? __lock_acquire+0x6b5/0x2cf0 [ 499.965758][ T5935] gfs2_lookup_by_inum+0x52/0x100 [ 499.965779][ T5935] delete_work_func+0x311/0x4d0 [ 499.965797][ T5935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 499.965818][ T5935] ? __pfx_delete_work_func+0x10/0x10 [ 499.965849][ T5935] ? process_one_work+0x8bb/0x1780 [ 499.965871][ T5935] process_one_work+0x9ab/0x1780 [ 499.965912][ T5935] ? __pfx_process_one_work+0x10/0x10 [ 499.965930][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.965963][ T5935] worker_thread+0xba8/0x11e0 [ 499.965989][ T5935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 499.966009][ T5935] ? __kthread_parkme+0x7a/0x1f0 [ 499.966026][ T5935] ? __kthread_parkme+0x19c/0x1f0 [ 499.966048][ T5935] kthread+0x388/0x470 [ 499.966067][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 499.966081][ T5935] ? __pfx_kthread+0x10/0x10 [ 499.966100][ T5935] ret_from_fork+0x51e/0xb90 [ 499.966125][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 499.966145][ T5935] ? __switch_to+0xc7d/0x1450 [ 499.966168][ T5935] ? __pfx_kthread+0x10/0x10 [ 499.966188][ T5935] ret_from_fork_asm+0x1a/0x30 [ 499.966219][ T5935] [ 499.984783][ T10] loop0: writeback error on inode 9394, offset 4736000, sector 28116 [ 499.987304][ T5935] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 500.185009][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 500.189827][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 500.543491][ T7300] loop0: detected capacity change from 0 to 32768 [ 500.558152][ T7300] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 500.566917][ T7300] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 500.594880][ T7300] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 500.608687][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 500.615589][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 500.693157][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 77ms [ 500.701514][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 500.706837][ T7300] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 500.945530][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 500.961595][ T6506] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 500.978433][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 500.995755][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 500.995778][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.995788][ T6506] Workqueue: gfs2-delete/syz:syz delete_work_func [ 500.995822][ T6506] Call Trace: [ 500.995830][ T6506] [ 500.995837][ T6506] dump_stack_lvl+0xe8/0x150 [ 500.995865][ T6506] gfs2_withdraw+0xc3/0x1b0 [ 500.995885][ T6506] gfs2_meta_buffer+0x225/0x2e0 [ 500.995910][ T6506] inode_go_instantiate+0xea/0x1220 [ 500.995931][ T6506] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.995954][ T6506] ? __pfx_inode_go_instantiate+0x10/0x10 [ 500.995975][ T6506] ? do_raw_spin_unlock+0xf5/0x210 [ 500.995999][ T6506] gfs2_instantiate+0x168/0x220 [ 500.996020][ T6506] gfs2_inode_lookup+0x727/0xc50 [ 500.996047][ T6506] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 500.996072][ T6506] ? gfs2_lookup_by_inum+0x52/0x100 [ 500.996089][ T6506] ? trace_hrtimer_start+0x82/0x230 [ 500.996111][ T6506] ? __lock_acquire+0x6b5/0x2cf0 [ 500.996139][ T6506] gfs2_lookup_by_inum+0x52/0x100 [ 500.996161][ T6506] delete_work_func+0x311/0x4d0 [ 500.996179][ T6506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 500.996202][ T6506] ? __pfx_delete_work_func+0x10/0x10 [ 500.996234][ T6506] ? process_one_work+0x8bb/0x1780 [ 500.996256][ T6506] process_one_work+0x9ab/0x1780 [ 500.996308][ T6506] ? __pfx_process_one_work+0x10/0x10 [ 500.996328][ T6506] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.996362][ T6506] worker_thread+0xba8/0x11e0 [ 500.996386][ T6506] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 500.996406][ T6506] ? __kthread_parkme+0x7a/0x1f0 [ 500.996423][ T6506] ? __kthread_parkme+0x19c/0x1f0 [ 500.996445][ T6506] kthread+0x388/0x470 [ 500.996464][ T6506] ? __pfx_worker_thread+0x10/0x10 [ 500.996478][ T6506] ? __pfx_kthread+0x10/0x10 [ 500.996497][ T6506] ret_from_fork+0x51e/0xb90 [ 500.996521][ T6506] ? __pfx_ret_from_fork+0x10/0x10 [ 500.996541][ T6506] ? __switch_to+0xc7d/0x1450 [ 500.996572][ T6506] ? __pfx_kthread+0x10/0x10 [ 500.996592][ T6506] ret_from_fork_asm+0x1a/0x30 [ 500.996622][ T6506] [ 501.042387][ T5935] loop0: writeback error on inode 9394, offset 1152000, sector 21060 [ 501.053246][ T6506] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 501.214520][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 501.219890][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 501.479564][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.487185][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.582352][ T7307] loop0: detected capacity change from 0 to 32768 [ 501.598333][ T7307] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 501.608211][ T7307] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 501.639737][ T7307] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 501.650163][ T5935] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 501.658153][ T5935] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 501.703122][ T5935] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 501.711465][ T5935] gfs2: fsid=syz:syz.0: jid=0: Done [ 501.716852][ T7307] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 501.955645][ T6506] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 501.976346][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 501.993780][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 502.009382][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 502.025786][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 502.025823][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.025833][ T5906] Workqueue: gfs2-delete/syz:syz delete_work_func [ 502.025860][ T5906] Call Trace: [ 502.025867][ T5906] [ 502.025874][ T5906] dump_stack_lvl+0xe8/0x150 [ 502.025902][ T5906] gfs2_withdraw+0xc3/0x1b0 [ 502.025921][ T5906] gfs2_meta_buffer+0x225/0x2e0 [ 502.025946][ T5906] inode_go_instantiate+0xea/0x1220 [ 502.025966][ T5906] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.025988][ T5906] ? __pfx_inode_go_instantiate+0x10/0x10 [ 502.026008][ T5906] ? do_raw_spin_unlock+0xf5/0x210 [ 502.026031][ T5906] gfs2_instantiate+0x168/0x220 [ 502.026051][ T5906] gfs2_inode_lookup+0x727/0xc50 [ 502.026078][ T5906] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 502.026102][ T5906] ? gfs2_lookup_by_inum+0x52/0x100 [ 502.026119][ T5906] ? trace_hrtimer_start+0x82/0x230 [ 502.026140][ T5906] ? __lock_acquire+0x6b5/0x2cf0 [ 502.026178][ T5906] gfs2_lookup_by_inum+0x52/0x100 [ 502.026199][ T5906] delete_work_func+0x311/0x4d0 [ 502.026217][ T5906] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 502.026239][ T5906] ? __pfx_delete_work_func+0x10/0x10 [ 502.026268][ T5906] ? process_one_work+0x8bb/0x1780 [ 502.026290][ T5906] process_one_work+0x9ab/0x1780 [ 502.026331][ T5906] ? __pfx_process_one_work+0x10/0x10 [ 502.026351][ T5906] ? do_raw_spin_lock+0x12b/0x2f0 [ 502.026385][ T5906] worker_thread+0xba8/0x11e0 [ 502.026424][ T5906] kthread+0x388/0x470 [ 502.026443][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 502.026456][ T5906] ? __pfx_kthread+0x10/0x10 [ 502.026474][ T5906] ret_from_fork+0x51e/0xb90 [ 502.026495][ T5906] ? __pfx_ret_from_fork+0x10/0x10 [ 502.026513][ T5906] ? __switch_to+0xc7d/0x1450 [ 502.026534][ T5906] ? __pfx_kthread+0x10/0x10 [ 502.026553][ T5906] ret_from_fork_asm+0x1a/0x30 [ 502.026583][ T5906] [ 502.044359][ T5935] loop0: writeback error on inode 9394, offset 4736000, sector 28116 [ 502.046994][ T5906] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 502.229720][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 502.234870][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 502.588962][ T7314] loop0: detected capacity change from 0 to 32768 [ 502.603707][ T7314] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 502.612049][ T7314] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 502.646284][ T7314] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 502.657392][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 502.664393][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 502.732224][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 502.740388][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 502.745661][ T7314] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 502.995025][ T29] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 503.012824][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 503.028429][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 503.043830][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 503.059321][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 503.059342][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.059352][ T29] Workqueue: gfs2-delete/syz:syz delete_work_func [ 503.059377][ T29] Call Trace: [ 503.059384][ T29] [ 503.059392][ T29] dump_stack_lvl+0xe8/0x150 [ 503.059417][ T29] gfs2_withdraw+0xc3/0x1b0 [ 503.059436][ T29] gfs2_meta_buffer+0x225/0x2e0 [ 503.059463][ T29] inode_go_instantiate+0xea/0x1220 [ 503.059484][ T29] ? do_raw_spin_lock+0x12b/0x2f0 [ 503.059507][ T29] ? __pfx_inode_go_instantiate+0x10/0x10 [ 503.059528][ T29] ? do_raw_spin_unlock+0xf5/0x210 [ 503.059550][ T29] gfs2_instantiate+0x168/0x220 [ 503.059572][ T29] gfs2_inode_lookup+0x727/0xc50 [ 503.059597][ T29] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 503.059622][ T29] ? gfs2_lookup_by_inum+0x52/0x100 [ 503.059644][ T29] ? __lock_acquire+0x6b5/0x2cf0 [ 503.059673][ T29] gfs2_lookup_by_inum+0x52/0x100 [ 503.059694][ T29] delete_work_func+0x311/0x4d0 [ 503.059713][ T29] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 503.059735][ T29] ? __pfx_delete_work_func+0x10/0x10 [ 503.059767][ T29] ? process_one_work+0x8bb/0x1780 [ 503.059787][ T29] process_one_work+0x9ab/0x1780 [ 503.059828][ T29] ? __pfx_process_one_work+0x10/0x10 [ 503.059847][ T29] ? do_raw_spin_lock+0x12b/0x2f0 [ 503.059882][ T29] worker_thread+0xba8/0x11e0 [ 503.059921][ T29] kthread+0x388/0x470 [ 503.059939][ T29] ? __pfx_worker_thread+0x10/0x10 [ 503.059953][ T29] ? __pfx_kthread+0x10/0x10 [ 503.059972][ T29] ret_from_fork+0x51e/0xb90 [ 503.059995][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 503.060015][ T29] ? __switch_to+0xc7d/0x1450 [ 503.060038][ T29] ? __pfx_kthread+0x10/0x10 [ 503.060058][ T29] ret_from_fork_asm+0x1a/0x30 [ 503.060089][ T29] [ 503.060096][ T29] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 503.248594][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 503.279314][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 508.278625][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 508.596479][ T7323] loop0: detected capacity change from 0 to 32768 [ 508.609469][ T7323] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 508.617833][ T7323] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 508.647005][ T7323] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 508.660513][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 508.669327][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 508.721420][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 52ms [ 508.729043][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 508.734322][ T7323] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 508.983243][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 508.999435][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 509.015991][ T6506] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 509.032928][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 509.049402][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 509.049427][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.049438][ T10] Workqueue: gfs2-delete/syz:syz delete_work_func [ 509.049465][ T10] Call Trace: [ 509.049471][ T10] [ 509.049479][ T10] dump_stack_lvl+0xe8/0x150 [ 509.049505][ T10] gfs2_withdraw+0xc3/0x1b0 [ 509.049535][ T10] gfs2_meta_buffer+0x225/0x2e0 [ 509.049566][ T10] inode_go_instantiate+0xea/0x1220 [ 509.049594][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 509.049616][ T10] ? __pfx_inode_go_instantiate+0x10/0x10 [ 509.049637][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 509.049660][ T10] gfs2_instantiate+0x168/0x220 [ 509.049682][ T10] gfs2_inode_lookup+0x727/0xc50 [ 509.049710][ T10] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 509.049734][ T10] ? gfs2_lookup_by_inum+0x52/0x100 [ 509.049752][ T10] ? trace_hrtimer_start+0x82/0x230 [ 509.049774][ T10] ? __lock_acquire+0x6b5/0x2cf0 [ 509.049804][ T10] gfs2_lookup_by_inum+0x52/0x100 [ 509.049826][ T10] delete_work_func+0x311/0x4d0 [ 509.049844][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 509.049865][ T10] ? __pfx_delete_work_func+0x10/0x10 [ 509.049897][ T10] ? process_one_work+0x8bb/0x1780 [ 509.049917][ T10] process_one_work+0x9ab/0x1780 [ 509.049958][ T10] ? __pfx_process_one_work+0x10/0x10 [ 509.049978][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 509.050013][ T10] worker_thread+0xba8/0x11e0 [ 509.050037][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 509.050058][ T10] ? __kthread_parkme+0x7a/0x1f0 [ 509.050074][ T10] ? __kthread_parkme+0x19c/0x1f0 [ 509.050096][ T10] kthread+0x388/0x470 [ 509.050114][ T10] ? __pfx_worker_thread+0x10/0x10 [ 509.050128][ T10] ? __pfx_kthread+0x10/0x10 [ 509.050147][ T10] ret_from_fork+0x51e/0xb90 [ 509.050172][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 509.050192][ T10] ? __switch_to+0xc7d/0x1450 [ 509.050215][ T10] ? __pfx_kthread+0x10/0x10 [ 509.050235][ T10] ret_from_fork_asm+0x1a/0x30 [ 509.050274][ T10] [ 509.050311][ T10] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 509.064711][ T6496] loop0: writeback error on inode 9394, offset 5632000, sector 29880 [ 509.082009][ T5906] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 509.588294][ T7330] loop0: detected capacity change from 0 to 32768 [ 509.620042][ T7330] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 509.628410][ T7330] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 509.663803][ T7330] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 509.683821][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 509.690946][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 509.758203][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 509.766512][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 509.771775][ T7330] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 510.014739][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 510.032250][ T6506] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 510.047894][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 510.064333][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 510.064356][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.064366][ T6506] Workqueue: gfs2-delete/syz:syz delete_work_func [ 510.064390][ T6506] Call Trace: [ 510.064397][ T6506] [ 510.064405][ T6506] dump_stack_lvl+0xe8/0x150 [ 510.064430][ T6506] gfs2_withdraw+0xc3/0x1b0 [ 510.064448][ T6506] gfs2_meta_buffer+0x225/0x2e0 [ 510.064473][ T6506] inode_go_instantiate+0xea/0x1220 [ 510.064493][ T6506] ? do_raw_spin_lock+0x12b/0x2f0 [ 510.064512][ T6506] ? __pfx_inode_go_instantiate+0x10/0x10 [ 510.064530][ T6506] ? do_raw_spin_unlock+0xf5/0x210 [ 510.064550][ T6506] gfs2_instantiate+0x168/0x220 [ 510.064568][ T6506] gfs2_inode_lookup+0x727/0xc50 [ 510.064583][ T6506] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 510.064609][ T6506] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 510.064631][ T6506] ? gfs2_lookup_by_inum+0x52/0x100 [ 510.064648][ T6506] ? tick_program_event+0x8f/0x120 [ 510.064669][ T6506] ? __lock_acquire+0x6b5/0x2cf0 [ 510.064695][ T6506] gfs2_lookup_by_inum+0x52/0x100 [ 510.064714][ T6506] delete_work_func+0x311/0x4d0 [ 510.064731][ T6506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 510.064751][ T6506] ? __pfx_delete_work_func+0x10/0x10 [ 510.064780][ T6506] ? process_one_work+0x8bb/0x1780 [ 510.064799][ T6506] process_one_work+0x9ab/0x1780 [ 510.064838][ T6506] ? __pfx_process_one_work+0x10/0x10 [ 510.064857][ T6506] ? do_raw_spin_lock+0x12b/0x2f0 [ 510.064889][ T6506] worker_thread+0xba8/0x11e0 [ 510.064922][ T6506] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 510.064942][ T6506] ? __kthread_parkme+0x7a/0x1f0 [ 510.064958][ T6506] ? __kthread_parkme+0x19c/0x1f0 [ 510.064978][ T6506] kthread+0x388/0x470 [ 510.064995][ T6506] ? __pfx_worker_thread+0x10/0x10 [ 510.065007][ T6506] ? __pfx_kthread+0x10/0x10 [ 510.065022][ T6506] ret_from_fork+0x51e/0xb90 [ 510.065042][ T6506] ? __pfx_ret_from_fork+0x10/0x10 [ 510.065057][ T6506] ? __switch_to+0xc7d/0x1450 [ 510.065076][ T6506] ? __pfx_kthread+0x10/0x10 [ 510.065091][ T6506] ret_from_fork_asm+0x1a/0x30 [ 510.065115][ T6506] [ 510.065136][ T6506] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 510.283318][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 510.289877][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 510.326048][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 515.318868][ T5906] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 515.636677][ T7338] loop0: detected capacity change from 0 to 32768 [ 515.651089][ T7338] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 515.671322][ T7338] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 515.699246][ T7338] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 515.711548][ T29] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 515.718870][ T29] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 515.783746][ T29] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 515.792234][ T29] gfs2: fsid=syz:syz.0: jid=0: Done [ 515.797615][ T7338] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 516.044285][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 516.060642][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 516.077779][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 516.093900][ T6506] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 516.109426][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 516.109448][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.109459][ T9] Workqueue: gfs2-delete/syz:syz delete_work_func [ 516.109485][ T9] Call Trace: [ 516.109492][ T9] [ 516.109499][ T9] dump_stack_lvl+0xe8/0x150 [ 516.109525][ T9] gfs2_withdraw+0xc3/0x1b0 [ 516.109546][ T9] gfs2_meta_buffer+0x225/0x2e0 [ 516.109572][ T9] inode_go_instantiate+0xea/0x1220 [ 516.109593][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 516.109615][ T9] ? __pfx_inode_go_instantiate+0x10/0x10 [ 516.109637][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 516.109660][ T9] gfs2_instantiate+0x168/0x220 [ 516.109680][ T9] gfs2_inode_lookup+0x727/0xc50 [ 516.109708][ T9] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 516.109733][ T9] ? gfs2_lookup_by_inum+0x52/0x100 [ 516.109750][ T9] ? trace_hrtimer_start+0x82/0x230 [ 516.109772][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 516.109801][ T9] gfs2_lookup_by_inum+0x52/0x100 [ 516.109823][ T9] delete_work_func+0x311/0x4d0 [ 516.109841][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 516.109863][ T9] ? __pfx_delete_work_func+0x10/0x10 [ 516.109906][ T9] ? process_one_work+0x8bb/0x1780 [ 516.109928][ T9] process_one_work+0x9ab/0x1780 [ 516.109968][ T9] ? __pfx_process_one_work+0x10/0x10 [ 516.109987][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 516.110021][ T9] worker_thread+0xba8/0x11e0 [ 516.110061][ T9] kthread+0x388/0x470 [ 516.110080][ T9] ? __pfx_worker_thread+0x10/0x10 [ 516.110094][ T9] ? __pfx_kthread+0x10/0x10 [ 516.110113][ T9] ret_from_fork+0x51e/0xb90 [ 516.110137][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 516.110157][ T9] ? __switch_to+0xc7d/0x1450 [ 516.110181][ T9] ? __pfx_kthread+0x10/0x10 [ 516.110200][ T9] ret_from_fork_asm+0x1a/0x30 [ 516.110232][ T9] [ 516.110238][ T9] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 516.143303][ T29] loop0: writeback error on inode 9394, offset 2688000, sector 24084 [ 516.158135][ T6506] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 516.636785][ T7347] loop0: detected capacity change from 0 to 32768 [ 516.659692][ T7347] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 516.670096][ T7347] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 516.698450][ T7347] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 516.709703][ T6506] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 516.719327][ T6506] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 516.787256][ T6506] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 516.794851][ T6506] gfs2: fsid=syz:syz.0: jid=0: Done [ 516.800171][ T7347] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 517.076349][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 517.091861][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 517.109599][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 517.126443][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 517.126467][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.126478][ T5888] Workqueue: gfs2-delete/syz:syz delete_work_func [ 517.126505][ T5888] Call Trace: [ 517.126512][ T5888] [ 517.126520][ T5888] dump_stack_lvl+0xe8/0x150 [ 517.126545][ T5888] gfs2_withdraw+0xc3/0x1b0 [ 517.126564][ T5888] gfs2_meta_buffer+0x225/0x2e0 [ 517.126598][ T5888] inode_go_instantiate+0xea/0x1220 [ 517.126618][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 517.126647][ T5888] ? __pfx_inode_go_instantiate+0x10/0x10 [ 517.126668][ T5888] ? do_raw_spin_unlock+0xf5/0x210 [ 517.126688][ T5888] gfs2_instantiate+0x168/0x220 [ 517.126707][ T5888] gfs2_inode_lookup+0x727/0xc50 [ 517.126731][ T5888] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 517.126756][ T5888] ? gfs2_lookup_by_inum+0x52/0x100 [ 517.126774][ T5888] ? trace_hrtimer_start+0x82/0x230 [ 517.126795][ T5888] ? __lock_acquire+0x6b5/0x2cf0 [ 517.126824][ T5888] gfs2_lookup_by_inum+0x52/0x100 [ 517.126845][ T5888] delete_work_func+0x311/0x4d0 [ 517.126863][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 517.126886][ T5888] ? __pfx_delete_work_func+0x10/0x10 [ 517.126918][ T5888] ? process_one_work+0x8bb/0x1780 [ 517.126940][ T5888] process_one_work+0x9ab/0x1780 [ 517.126983][ T5888] ? __pfx_process_one_work+0x10/0x10 [ 517.127003][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 517.127037][ T5888] worker_thread+0xba8/0x11e0 [ 517.127078][ T5888] kthread+0x388/0x470 [ 517.127095][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 517.127109][ T5888] ? __pfx_kthread+0x10/0x10 [ 517.127126][ T5888] ret_from_fork+0x51e/0xb90 [ 517.127149][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 517.127169][ T5888] ? __switch_to+0xc7d/0x1450 [ 517.127201][ T5888] ? __pfx_kthread+0x10/0x10 [ 517.127220][ T5888] ret_from_fork_asm+0x1a/0x30 [ 517.127252][ T5888] [ 517.127268][ T5888] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 517.321604][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 517.327900][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 517.349715][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 522.359259][ T1222] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 522.676792][ T7356] loop0: detected capacity change from 0 to 32768 [ 522.701787][ T7356] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 522.711010][ T7356] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 522.741568][ T7356] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 522.754429][ T6506] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 522.761761][ T6506] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 522.827073][ T6506] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 65ms [ 522.834660][ T6506] gfs2: fsid=syz:syz.0: jid=0: Done [ 522.840018][ T7356] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 523.083736][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 523.109793][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 523.125321][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 523.141482][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 523.157060][ T1222] CPU: 1 UID: 0 PID: 1222 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 523.157083][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 523.157093][ T1222] Workqueue: gfs2-delete/syz:syz delete_work_func [ 523.157119][ T1222] Call Trace: [ 523.157127][ T1222] [ 523.157134][ T1222] dump_stack_lvl+0xe8/0x150 [ 523.157159][ T1222] gfs2_withdraw+0xc3/0x1b0 [ 523.157178][ T1222] gfs2_meta_buffer+0x225/0x2e0 [ 523.157204][ T1222] inode_go_instantiate+0xea/0x1220 [ 523.157225][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 523.157247][ T1222] ? __pfx_inode_go_instantiate+0x10/0x10 [ 523.157269][ T1222] ? do_raw_spin_unlock+0xf5/0x210 [ 523.157293][ T1222] gfs2_instantiate+0x168/0x220 [ 523.157314][ T1222] gfs2_inode_lookup+0x727/0xc50 [ 523.157341][ T1222] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 523.157361][ T1222] ? check_path+0x21/0x40 [ 523.157380][ T1222] ? gfs2_lookup_by_inum+0x52/0x100 [ 523.157398][ T1222] ? add_lock_to_list+0xc7/0x100 [ 523.157417][ T1222] ? lockdep_unlock+0x5d/0xd0 [ 523.157436][ T1222] ? __lock_acquire+0x146e/0x2cf0 [ 523.157465][ T1222] gfs2_lookup_by_inum+0x52/0x100 [ 523.157487][ T1222] delete_work_func+0x311/0x4d0 [ 523.157511][ T1222] ? __pfx_delete_work_func+0x10/0x10 [ 523.157544][ T1222] ? process_one_work+0x8bb/0x1780 [ 523.157564][ T1222] process_one_work+0x9ab/0x1780 [ 523.157605][ T1222] ? __pfx_process_one_work+0x10/0x10 [ 523.157625][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 523.157659][ T1222] worker_thread+0xba8/0x11e0 [ 523.157683][ T1222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 523.157713][ T1222] ? __kthread_parkme+0x7a/0x1f0 [ 523.157729][ T1222] ? __kthread_parkme+0x19c/0x1f0 [ 523.157752][ T1222] kthread+0x388/0x470 [ 523.157770][ T1222] ? __pfx_worker_thread+0x10/0x10 [ 523.157784][ T1222] ? __pfx_kthread+0x10/0x10 [ 523.157803][ T1222] ret_from_fork+0x51e/0xb90 [ 523.157828][ T1222] ? __pfx_ret_from_fork+0x10/0x10 [ 523.157848][ T1222] ? __switch_to+0xc7d/0x1450 [ 523.157877][ T1222] ? __pfx_kthread+0x10/0x10 [ 523.157897][ T1222] ret_from_fork_asm+0x1a/0x30 [ 523.157929][ T1222] [ 523.157936][ T1222] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 523.169947][ T6506] loop0: writeback error on inode 9394, offset 6784000, sector 32150 [ 523.187743][ T5888] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 523.735578][ T7363] loop0: detected capacity change from 0 to 32768 [ 523.752142][ T7363] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 523.766328][ T7363] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 523.802821][ T7363] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 523.812429][ T5888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 523.819870][ T5888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 523.889095][ T5888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 69ms [ 523.896929][ T5888] gfs2: fsid=syz:syz.0: jid=0: Done [ 523.902339][ T7363] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 524.146456][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 524.162800][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 524.179348][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 524.179373][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.179384][ T6488] Workqueue: gfs2-delete/syz:syz delete_work_func [ 524.179410][ T6488] Call Trace: [ 524.179416][ T6488] [ 524.179424][ T6488] dump_stack_lvl+0xe8/0x150 [ 524.179451][ T6488] gfs2_withdraw+0xc3/0x1b0 [ 524.179471][ T6488] gfs2_meta_buffer+0x225/0x2e0 [ 524.179498][ T6488] inode_go_instantiate+0xea/0x1220 [ 524.179519][ T6488] ? do_raw_spin_lock+0x12b/0x2f0 [ 524.179542][ T6488] ? __pfx_inode_go_instantiate+0x10/0x10 [ 524.179571][ T6488] ? do_raw_spin_unlock+0xf5/0x210 [ 524.179597][ T6488] gfs2_instantiate+0x168/0x220 [ 524.179618][ T6488] gfs2_inode_lookup+0x727/0xc50 [ 524.179644][ T6488] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 524.179666][ T6488] ? gfs2_lookup_by_inum+0x52/0x100 [ 524.179682][ T6488] ? trace_hrtimer_start+0x82/0x230 [ 524.179701][ T6488] ? __lock_acquire+0x6b5/0x2cf0 [ 524.179727][ T6488] gfs2_lookup_by_inum+0x52/0x100 [ 524.179749][ T6488] delete_work_func+0x311/0x4d0 [ 524.179767][ T6488] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 524.179790][ T6488] ? __pfx_delete_work_func+0x10/0x10 [ 524.179822][ T6488] ? process_one_work+0x8bb/0x1780 [ 524.179843][ T6488] process_one_work+0x9ab/0x1780 [ 524.179884][ T6488] ? __pfx_process_one_work+0x10/0x10 [ 524.179903][ T6488] ? do_raw_spin_lock+0x12b/0x2f0 [ 524.179936][ T6488] worker_thread+0xba8/0x11e0 [ 524.179974][ T6488] kthread+0x388/0x470 [ 524.179992][ T6488] ? __pfx_worker_thread+0x10/0x10 [ 524.180004][ T6488] ? __pfx_kthread+0x10/0x10 [ 524.180023][ T6488] ret_from_fork+0x51e/0xb90 [ 524.180048][ T6488] ? __pfx_ret_from_fork+0x10/0x10 [ 524.180067][ T6488] ? __switch_to+0xc7d/0x1450 [ 524.180091][ T6488] ? __pfx_kthread+0x10/0x10 [ 524.180110][ T6488] ret_from_fork_asm+0x1a/0x30 [ 524.180141][ T6488] [ 524.180281][ T6488] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 524.376132][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 524.381202][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 524.737253][ T7370] loop0: detected capacity change from 0 to 32768 [ 524.753050][ T7370] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 524.763684][ T7370] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 524.792320][ T7370] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 524.802511][ T5888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 524.812713][ T5888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 524.894069][ T5888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 81ms [ 524.903038][ T5888] gfs2: fsid=syz:syz.0: jid=0: Done [ 524.908534][ T7370] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 525.146854][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 525.163436][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 525.179834][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 525.195242][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 525.210727][ T1222] CPU: 1 UID: 0 PID: 1222 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 525.210750][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.210760][ T1222] Workqueue: gfs2-delete/syz:syz delete_work_func [ 525.210785][ T1222] Call Trace: [ 525.210792][ T1222] [ 525.210799][ T1222] dump_stack_lvl+0xe8/0x150 [ 525.210825][ T1222] gfs2_withdraw+0xc3/0x1b0 [ 525.210844][ T1222] gfs2_meta_buffer+0x225/0x2e0 [ 525.210872][ T1222] inode_go_instantiate+0xea/0x1220 [ 525.210893][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.210915][ T1222] ? __pfx_inode_go_instantiate+0x10/0x10 [ 525.210935][ T1222] ? do_raw_spin_unlock+0xf5/0x210 [ 525.210958][ T1222] gfs2_instantiate+0x168/0x220 [ 525.210978][ T1222] gfs2_inode_lookup+0x727/0xc50 [ 525.211003][ T1222] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 525.211025][ T1222] ? gfs2_lookup_by_inum+0x52/0x100 [ 525.211041][ T1222] ? trace_hrtimer_start+0x82/0x230 [ 525.211060][ T1222] ? __lock_acquire+0x6b5/0x2cf0 [ 525.211089][ T1222] gfs2_lookup_by_inum+0x52/0x100 [ 525.211110][ T1222] delete_work_func+0x311/0x4d0 [ 525.211128][ T1222] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 525.211150][ T1222] ? __pfx_delete_work_func+0x10/0x10 [ 525.211181][ T1222] ? process_one_work+0x8bb/0x1780 [ 525.211201][ T1222] process_one_work+0x9ab/0x1780 [ 525.211242][ T1222] ? __pfx_process_one_work+0x10/0x10 [ 525.211263][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.211297][ T1222] worker_thread+0xba8/0x11e0 [ 525.211320][ T1222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 525.211340][ T1222] ? __kthread_parkme+0x7a/0x1f0 [ 525.211364][ T1222] ? __kthread_parkme+0x19c/0x1f0 [ 525.211387][ T1222] kthread+0x388/0x470 [ 525.211405][ T1222] ? __pfx_worker_thread+0x10/0x10 [ 525.211419][ T1222] ? __pfx_kthread+0x10/0x10 [ 525.211438][ T1222] ret_from_fork+0x51e/0xb90 [ 525.211463][ T1222] ? __pfx_ret_from_fork+0x10/0x10 [ 525.211483][ T1222] ? __switch_to+0xc7d/0x1450 [ 525.211507][ T1222] ? __pfx_kthread+0x10/0x10 [ 525.211527][ T1222] ret_from_fork_asm+0x1a/0x30 [ 525.211558][ T1222] [ 525.211565][ T1222] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 525.279305][ T6488] loop0: writeback error on inode 9394, offset 1792000, sector 22320 [ 525.291229][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 525.752234][ T7377] loop0: detected capacity change from 0 to 32768 [ 525.767779][ T7377] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 525.781551][ T7377] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 525.817394][ T7377] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 525.828074][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 525.835038][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 525.895040][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 59ms [ 525.902799][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 525.908088][ T7377] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 526.150350][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 526.150377][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 526.150409][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 526.150425][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.150435][ T6488] Workqueue: gfs2-delete/syz:syz delete_work_func [ 526.150457][ T6488] Call Trace: [ 526.150463][ T6488] [ 526.150470][ T6488] dump_stack_lvl+0xe8/0x150 [ 526.150494][ T6488] gfs2_withdraw+0xc3/0x1b0 [ 526.150514][ T6488] gfs2_meta_buffer+0x225/0x2e0 [ 526.150543][ T6488] inode_go_instantiate+0xea/0x1220 [ 526.150564][ T6488] ? do_raw_spin_lock+0x12b/0x2f0 [ 526.150585][ T6488] ? __pfx_inode_go_instantiate+0x10/0x10 [ 526.150611][ T6488] ? do_raw_spin_unlock+0xf5/0x210 [ 526.150633][ T6488] gfs2_instantiate+0x168/0x220 [ 526.150653][ T6488] gfs2_inode_lookup+0x727/0xc50 [ 526.150679][ T6488] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 526.150703][ T6488] ? gfs2_lookup_by_inum+0x52/0x100 [ 526.150719][ T6488] ? trace_hrtimer_start+0x82/0x230 [ 526.150748][ T6488] ? __lock_acquire+0x6b5/0x2cf0 [ 526.150776][ T6488] gfs2_lookup_by_inum+0x52/0x100 [ 526.150797][ T6488] delete_work_func+0x311/0x4d0 [ 526.150814][ T6488] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 526.150835][ T6488] ? __pfx_delete_work_func+0x10/0x10 [ 526.150865][ T6488] ? process_one_work+0x8bb/0x1780 [ 526.150887][ T6488] process_one_work+0x9ab/0x1780 [ 526.150927][ T6488] ? __pfx_process_one_work+0x10/0x10 [ 526.150946][ T6488] ? do_raw_spin_lock+0x12b/0x2f0 [ 526.150979][ T6488] worker_thread+0xba8/0x11e0 [ 526.151016][ T6488] kthread+0x388/0x470 [ 526.151034][ T6488] ? __pfx_worker_thread+0x10/0x10 [ 526.151047][ T6488] ? __pfx_kthread+0x10/0x10 [ 526.151065][ T6488] ret_from_fork+0x51e/0xb90 [ 526.151089][ T6488] ? __pfx_ret_from_fork+0x10/0x10 [ 526.151108][ T6488] ? __switch_to+0xc7d/0x1450 [ 526.151130][ T6488] ? __pfx_kthread+0x10/0x10 [ 526.151148][ T6488] ret_from_fork_asm+0x1a/0x30 [ 526.151178][ T6488] [ 526.151195][ T6488] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 526.166022][ T7377] gfs2: fsid=syz:syz.0: dirty_inode: gfs2_trans_begin -30 [ 526.383053][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 526.417756][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 531.398572][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 531.718790][ T7385] loop0: detected capacity change from 0 to 32768 [ 531.731875][ T7385] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 531.743712][ T7385] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 531.773858][ T7385] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 531.784266][ T1222] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 531.792349][ T1222] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 531.837166][ T1222] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 531.844706][ T1222] gfs2: fsid=syz:syz.0: jid=0: Done [ 531.850271][ T7385] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 532.092288][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 532.117560][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 532.136385][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 532.154309][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 532.154335][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.154346][ T5935] Workqueue: gfs2-delete/syz:syz delete_work_func [ 532.154374][ T5935] Call Trace: [ 532.154381][ T5935] [ 532.154388][ T5935] dump_stack_lvl+0xe8/0x150 [ 532.154415][ T5935] gfs2_withdraw+0xc3/0x1b0 [ 532.154435][ T5935] gfs2_meta_buffer+0x225/0x2e0 [ 532.154462][ T5935] inode_go_instantiate+0xea/0x1220 [ 532.154483][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 532.154506][ T5935] ? __pfx_inode_go_instantiate+0x10/0x10 [ 532.154527][ T5935] ? do_raw_spin_unlock+0xf5/0x210 [ 532.154550][ T5935] gfs2_instantiate+0x168/0x220 [ 532.154571][ T5935] gfs2_inode_lookup+0x727/0xc50 [ 532.154597][ T5935] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 532.154621][ T5935] ? gfs2_lookup_by_inum+0x52/0x100 [ 532.154639][ T5935] ? trace_hrtimer_start+0x82/0x230 [ 532.154660][ T5935] ? __lock_acquire+0x6b5/0x2cf0 [ 532.154688][ T5935] gfs2_lookup_by_inum+0x52/0x100 [ 532.154709][ T5935] delete_work_func+0x311/0x4d0 [ 532.154728][ T5935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 532.154750][ T5935] ? __pfx_delete_work_func+0x10/0x10 [ 532.154780][ T5935] ? process_one_work+0x8bb/0x1780 [ 532.154802][ T5935] process_one_work+0x9ab/0x1780 [ 532.154844][ T5935] ? __pfx_process_one_work+0x10/0x10 [ 532.154863][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 532.154897][ T5935] worker_thread+0xba8/0x11e0 [ 532.154922][ T5935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 532.154941][ T5935] ? __kthread_parkme+0x7a/0x1f0 [ 532.154957][ T5935] ? __kthread_parkme+0x19c/0x1f0 [ 532.154976][ T5935] kthread+0x388/0x470 [ 532.154994][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 532.155007][ T5935] ? __pfx_kthread+0x10/0x10 [ 532.155026][ T5935] ret_from_fork+0x51e/0xb90 [ 532.155049][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 532.155067][ T5935] ? __switch_to+0xc7d/0x1450 [ 532.155090][ T5935] ? __pfx_kthread+0x10/0x10 [ 532.155108][ T5935] ret_from_fork_asm+0x1a/0x30 [ 532.155140][ T5935] [ 532.155147][ T5935] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 532.177404][ T9] loop0: writeback error on inode 9394, offset 4736000, sector 28116 [ 532.200005][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 532.694650][ T7393] loop0: detected capacity change from 0 to 32768 [ 532.714765][ T7393] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 532.723924][ T7393] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 532.753203][ T7393] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 532.766355][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 532.773198][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 532.835417][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 62ms [ 532.843086][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 532.848508][ T7393] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 533.091930][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 533.108137][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 533.124574][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 533.140858][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 533.140879][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.140889][ T5888] Workqueue: gfs2-delete/syz:syz delete_work_func [ 533.140914][ T5888] Call Trace: [ 533.140920][ T5888] [ 533.140927][ T5888] dump_stack_lvl+0xe8/0x150 [ 533.140950][ T5888] gfs2_withdraw+0xc3/0x1b0 [ 533.140968][ T5888] gfs2_meta_buffer+0x225/0x2e0 [ 533.140992][ T5888] inode_go_instantiate+0xea/0x1220 [ 533.141010][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.141033][ T5888] ? __pfx_inode_go_instantiate+0x10/0x10 [ 533.141064][ T5888] ? do_raw_spin_unlock+0xf5/0x210 [ 533.141087][ T5888] gfs2_instantiate+0x168/0x220 [ 533.141108][ T5888] gfs2_inode_lookup+0x727/0xc50 [ 533.141136][ T5888] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 533.141161][ T5888] ? gfs2_lookup_by_inum+0x52/0x100 [ 533.141179][ T5888] ? trace_hrtimer_start+0x82/0x230 [ 533.141201][ T5888] ? __lock_acquire+0x6b5/0x2cf0 [ 533.141229][ T5888] gfs2_lookup_by_inum+0x52/0x100 [ 533.141250][ T5888] delete_work_func+0x311/0x4d0 [ 533.141268][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 533.141290][ T5888] ? __pfx_delete_work_func+0x10/0x10 [ 533.141323][ T5888] ? process_one_work+0x8bb/0x1780 [ 533.141344][ T5888] process_one_work+0x9ab/0x1780 [ 533.141386][ T5888] ? __pfx_process_one_work+0x10/0x10 [ 533.141406][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.141440][ T5888] worker_thread+0xba8/0x11e0 [ 533.141483][ T5888] kthread+0x388/0x470 [ 533.141502][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 533.141515][ T5888] ? __pfx_kthread+0x10/0x10 [ 533.141535][ T5888] ret_from_fork+0x51e/0xb90 [ 533.141559][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 533.141578][ T5888] ? __switch_to+0xc7d/0x1450 [ 533.141602][ T5888] ? __pfx_kthread+0x10/0x10 [ 533.141621][ T5888] ret_from_fork_asm+0x1a/0x30 [ 533.141652][ T5888] [ 533.141670][ T5888] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 533.336680][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 533.342882][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 533.373843][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 538.358707][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 538.671710][ T7401] loop0: detected capacity change from 0 to 32768 [ 538.686799][ T7401] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 538.706200][ T7401] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 538.741429][ T7401] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 538.751426][ T5888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 538.760103][ T5888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 538.827946][ T5888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 538.835475][ T5888] gfs2: fsid=syz:syz.0: jid=0: Done [ 538.840803][ T7401] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 539.089429][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 539.108465][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 539.125262][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 539.140997][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 539.158823][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 539.158848][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.158859][ T5935] Workqueue: gfs2-delete/syz:syz delete_work_func [ 539.158886][ T5935] Call Trace: [ 539.158893][ T5935] [ 539.158900][ T5935] dump_stack_lvl+0xe8/0x150 [ 539.158924][ T5935] gfs2_withdraw+0xc3/0x1b0 [ 539.158945][ T5935] gfs2_meta_buffer+0x225/0x2e0 [ 539.158973][ T5935] inode_go_instantiate+0xea/0x1220 [ 539.158994][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 539.159021][ T5935] ? __pfx_inode_go_instantiate+0x10/0x10 [ 539.159041][ T5935] ? do_raw_spin_unlock+0xf5/0x210 [ 539.159062][ T5935] gfs2_instantiate+0x168/0x220 [ 539.159083][ T5935] gfs2_inode_lookup+0x727/0xc50 [ 539.159110][ T5935] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 539.159135][ T5935] ? gfs2_lookup_by_inum+0x52/0x100 [ 539.159153][ T5935] ? trace_hrtimer_start+0x82/0x230 [ 539.159175][ T5935] ? __lock_acquire+0x6b5/0x2cf0 [ 539.159204][ T5935] gfs2_lookup_by_inum+0x52/0x100 [ 539.159225][ T5935] delete_work_func+0x311/0x4d0 [ 539.159243][ T5935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 539.159263][ T5935] ? __pfx_delete_work_func+0x10/0x10 [ 539.159292][ T5935] ? process_one_work+0x8bb/0x1780 [ 539.159314][ T5935] process_one_work+0x9ab/0x1780 [ 539.159363][ T5935] ? __pfx_process_one_work+0x10/0x10 [ 539.159381][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 539.159413][ T5935] worker_thread+0xba8/0x11e0 [ 539.159439][ T5935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 539.159455][ T5935] ? __kthread_parkme+0x7a/0x1f0 [ 539.159469][ T5935] ? __kthread_parkme+0x19c/0x1f0 [ 539.159485][ T5935] kthread+0x388/0x470 [ 539.159499][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 539.159510][ T5935] ? __pfx_kthread+0x10/0x10 [ 539.159526][ T5935] ret_from_fork+0x51e/0xb90 [ 539.159546][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 539.159562][ T5935] ? __switch_to+0xc7d/0x1450 [ 539.159581][ T5935] ? __pfx_kthread+0x10/0x10 [ 539.159597][ T5935] ret_from_fork_asm+0x1a/0x30 [ 539.159621][ T5935] [ 539.159641][ T5935] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 539.194327][ T6488] loop0: writeback error on inode 9394, offset 5120000, sector 28872 [ 539.207544][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 539.697852][ T7409] loop0: detected capacity change from 0 to 32768 [ 539.716584][ T7409] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 539.725640][ T7409] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 539.767548][ T7409] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 539.781165][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 539.788290][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 539.848582][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 60ms [ 539.856176][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 539.861547][ T7409] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 540.108067][ T6506] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 540.123809][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 540.140510][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 540.140533][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 540.140544][ T6506] Workqueue: gfs2-delete/syz:syz delete_work_func [ 540.140570][ T6506] Call Trace: [ 540.140577][ T6506] [ 540.140584][ T6506] dump_stack_lvl+0xe8/0x150 [ 540.140610][ T6506] gfs2_withdraw+0xc3/0x1b0 [ 540.140628][ T6506] gfs2_meta_buffer+0x225/0x2e0 [ 540.140657][ T6506] inode_go_instantiate+0xea/0x1220 [ 540.140674][ T6506] ? do_raw_spin_lock+0x12b/0x2f0 [ 540.140696][ T6506] ? __pfx_inode_go_instantiate+0x10/0x10 [ 540.140716][ T6506] ? do_raw_spin_unlock+0xf5/0x210 [ 540.140740][ T6506] gfs2_instantiate+0x168/0x220 [ 540.140757][ T6506] gfs2_inode_lookup+0x727/0xc50 [ 540.140774][ T6506] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 540.140788][ T6506] ? gfs2_lookup_by_inum+0x52/0x100 [ 540.140807][ T6506] ? __lock_acquire+0x6b5/0x2cf0 [ 540.140836][ T6506] gfs2_lookup_by_inum+0x52/0x100 [ 540.140857][ T6506] delete_work_func+0x311/0x4d0 [ 540.140875][ T6506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 540.140896][ T6506] ? __pfx_delete_work_func+0x10/0x10 [ 540.140922][ T6506] ? process_one_work+0x8bb/0x1780 [ 540.140942][ T6506] process_one_work+0x9ab/0x1780 [ 540.140978][ T6506] ? __pfx_process_one_work+0x10/0x10 [ 540.141005][ T6506] ? do_raw_spin_lock+0x12b/0x2f0 [ 540.141035][ T6506] worker_thread+0xba8/0x11e0 [ 540.141058][ T6506] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 540.141076][ T6506] ? __kthread_parkme+0x7a/0x1f0 [ 540.141093][ T6506] ? __kthread_parkme+0x19c/0x1f0 [ 540.141112][ T6506] kthread+0x388/0x470 [ 540.141128][ T6506] ? __pfx_worker_thread+0x10/0x10 [ 540.141140][ T6506] ? __pfx_kthread+0x10/0x10 [ 540.141157][ T6506] ret_from_fork+0x51e/0xb90 [ 540.141181][ T6506] ? __pfx_ret_from_fork+0x10/0x10 [ 540.141200][ T6506] ? __switch_to+0xc7d/0x1450 [ 540.141223][ T6506] ? __pfx_kthread+0x10/0x10 [ 540.141242][ T6506] ret_from_fork_asm+0x1a/0x30 [ 540.141273][ T6506] [ 540.141293][ T6506] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 540.347211][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 540.353694][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 540.392100][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 545.398558][ T6488] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 545.722581][ T7417] loop0: detected capacity change from 0 to 32768 [ 545.742368][ T7417] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 545.751190][ T7417] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 545.793156][ T7417] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 545.803017][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 545.810173][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 545.879072][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms [ 545.886695][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 545.891966][ T7417] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 546.133963][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 546.150379][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 546.150403][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.150413][ T6496] Workqueue: gfs2-delete/syz:syz delete_work_func [ 546.150439][ T6496] Call Trace: [ 546.150446][ T6496] [ 546.150455][ T6496] dump_stack_lvl+0xe8/0x150 [ 546.150479][ T6496] gfs2_withdraw+0xc3/0x1b0 [ 546.150499][ T6496] gfs2_meta_buffer+0x225/0x2e0 [ 546.150525][ T6496] inode_go_instantiate+0xea/0x1220 [ 546.150546][ T6496] ? do_raw_spin_lock+0x12b/0x2f0 [ 546.150569][ T6496] ? __pfx_inode_go_instantiate+0x10/0x10 [ 546.150590][ T6496] ? do_raw_spin_unlock+0xf5/0x210 [ 546.150619][ T6496] gfs2_instantiate+0x168/0x220 [ 546.150639][ T6496] gfs2_inode_lookup+0x727/0xc50 [ 546.150656][ T6496] ? ktime_get+0x45/0x220 [ 546.150682][ T6496] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 546.150698][ T6496] ? clockevents_program_event+0x3ba/0x4b0 [ 546.150719][ T6496] ? gfs2_lookup_by_inum+0x52/0x100 [ 546.150749][ T6496] gfs2_lookup_by_inum+0x52/0x100 [ 546.150771][ T6496] delete_work_func+0x311/0x4d0 [ 546.150797][ T6496] ? __pfx_delete_work_func+0x10/0x10 [ 546.150830][ T6496] ? lock_acquire+0x20b/0x2e0 [ 546.150857][ T6496] ? process_one_work+0x8bb/0x1780 [ 546.150880][ T6496] process_one_work+0x9ab/0x1780 [ 546.150920][ T6496] ? __pfx_process_one_work+0x10/0x10 [ 546.150941][ T6496] ? do_raw_spin_lock+0x12b/0x2f0 [ 546.150979][ T6496] worker_thread+0xba8/0x11e0 [ 546.151005][ T6496] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 546.151026][ T6496] ? __kthread_parkme+0x7a/0x1f0 [ 546.151043][ T6496] ? __kthread_parkme+0x19c/0x1f0 [ 546.151066][ T6496] kthread+0x388/0x470 [ 546.151085][ T6496] ? __pfx_worker_thread+0x10/0x10 [ 546.151099][ T6496] ? __pfx_kthread+0x10/0x10 [ 546.151119][ T6496] ret_from_fork+0x51e/0xb90 [ 546.151144][ T6496] ? __pfx_ret_from_fork+0x10/0x10 [ 546.151165][ T6496] ? __switch_to+0xc7d/0x1450 [ 546.151188][ T6496] ? __pfx_kthread+0x10/0x10 [ 546.151207][ T6496] ret_from_fork_asm+0x1a/0x30 [ 546.151239][ T6496] [ 546.151257][ T6496] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 546.360300][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 546.366861][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 546.398386][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 551.400029][ T5888] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 551.723657][ T7426] loop0: detected capacity change from 0 to 32768 [ 551.740078][ T7426] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 551.757498][ T7426] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 551.795139][ T7426] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 551.810830][ T5888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 551.817797][ T5888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 551.878634][ T5888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 60ms [ 551.886269][ T5888] gfs2: fsid=syz:syz.0: jid=0: Done [ 551.891626][ T7426] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 552.131795][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 552.148803][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 552.164399][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 552.164422][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.164433][ T5888] Workqueue: gfs2-delete/syz:syz delete_work_func [ 552.164458][ T5888] Call Trace: [ 552.164465][ T5888] [ 552.164473][ T5888] dump_stack_lvl+0xe8/0x150 [ 552.164499][ T5888] gfs2_withdraw+0xc3/0x1b0 [ 552.164521][ T5888] gfs2_meta_buffer+0x225/0x2e0 [ 552.164550][ T5888] inode_go_instantiate+0xea/0x1220 [ 552.164572][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 552.164595][ T5888] ? __pfx_inode_go_instantiate+0x10/0x10 [ 552.164616][ T5888] ? do_raw_spin_unlock+0xf5/0x210 [ 552.164640][ T5888] gfs2_instantiate+0x168/0x220 [ 552.164662][ T5888] gfs2_inode_lookup+0x727/0xc50 [ 552.164690][ T5888] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 552.164710][ T5888] ? check_path+0x21/0x40 [ 552.164730][ T5888] ? gfs2_lookup_by_inum+0x52/0x100 [ 552.164749][ T5888] ? add_lock_to_list+0xc7/0x100 [ 552.164768][ T5888] ? lockdep_unlock+0x5d/0xd0 [ 552.164788][ T5888] ? __lock_acquire+0x146e/0x2cf0 [ 552.164818][ T5888] gfs2_lookup_by_inum+0x52/0x100 [ 552.164841][ T5888] delete_work_func+0x311/0x4d0 [ 552.164865][ T5888] ? __pfx_delete_work_func+0x10/0x10 [ 552.164899][ T5888] ? process_one_work+0x8bb/0x1780 [ 552.164920][ T5888] process_one_work+0x9ab/0x1780 [ 552.164963][ T5888] ? __pfx_process_one_work+0x10/0x10 [ 552.164984][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 552.165019][ T5888] worker_thread+0xba8/0x11e0 [ 552.165059][ T5888] kthread+0x388/0x470 [ 552.165079][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 552.165093][ T5888] ? __pfx_kthread+0x10/0x10 [ 552.165120][ T5888] ret_from_fork+0x51e/0xb90 [ 552.165146][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 552.165167][ T5888] ? __switch_to+0xc7d/0x1450 [ 552.165190][ T5888] ? __pfx_kthread+0x10/0x10 [ 552.165209][ T5888] ret_from_fork_asm+0x1a/0x30 [ 552.165237][ T5888] [ 552.165503][ T5888] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 552.213059][ T9] loop0: writeback error on inode 9394, offset 768000, sector 20304 [ 552.364996][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 552.370049][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 552.730483][ T7434] loop0: detected capacity change from 0 to 32768 [ 552.754258][ T7434] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 552.762726][ T7434] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 552.794827][ T7434] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 552.804556][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 552.812343][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 552.857181][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 552.864768][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 552.870120][ T7434] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 553.120981][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 553.138321][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 553.141839][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 553.141863][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.141874][ T9] Workqueue: gfs2-delete/syz:syz delete_work_func [ 553.141902][ T9] Call Trace: [ 553.141909][ T9] [ 553.141918][ T9] dump_stack_lvl+0xe8/0x150 [ 553.141944][ T9] gfs2_withdraw+0xc3/0x1b0 [ 553.141965][ T9] gfs2_meta_buffer+0x225/0x2e0 [ 553.141999][ T9] inode_go_instantiate+0xea/0x1220 [ 553.142021][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 553.142044][ T9] ? __pfx_inode_go_instantiate+0x10/0x10 [ 553.142065][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 553.142088][ T9] gfs2_instantiate+0x168/0x220 [ 553.142109][ T9] gfs2_inode_lookup+0x727/0xc50 [ 553.142137][ T9] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 553.142156][ T9] ? check_path+0x21/0x40 [ 553.142175][ T9] ? gfs2_lookup_by_inum+0x52/0x100 [ 553.142193][ T9] ? add_lock_to_list+0xc7/0x100 [ 553.142216][ T9] ? lockdep_unlock+0x5d/0xd0 [ 553.142235][ T9] ? __lock_acquire+0x146e/0x2cf0 [ 553.142263][ T9] gfs2_lookup_by_inum+0x52/0x100 [ 553.142285][ T9] delete_work_func+0x311/0x4d0 [ 553.142308][ T9] ? __pfx_delete_work_func+0x10/0x10 [ 553.142340][ T9] ? process_one_work+0x8bb/0x1780 [ 553.142361][ T9] process_one_work+0x9ab/0x1780 [ 553.142402][ T9] ? __pfx_process_one_work+0x10/0x10 [ 553.142421][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 553.142454][ T9] worker_thread+0xba8/0x11e0 [ 553.142492][ T9] kthread+0x388/0x470 [ 553.142510][ T9] ? __pfx_worker_thread+0x10/0x10 [ 553.142524][ T9] ? __pfx_kthread+0x10/0x10 [ 553.142544][ T9] ret_from_fork+0x51e/0xb90 [ 553.142568][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 553.142588][ T9] ? __switch_to+0xc7d/0x1450 [ 553.142610][ T9] ? __pfx_kthread+0x10/0x10 [ 553.142629][ T9] ret_from_fork_asm+0x1a/0x30 [ 553.142660][ T9] [ 553.142692][ T9] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 553.196986][ T1222] loop0: writeback error on inode 9394, offset 1792000, sector 22320 [ 553.222202][ T6506] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 553.676784][ T7441] loop0: detected capacity change from 0 to 32768 [ 553.699219][ T7441] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 553.708059][ T7441] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 553.744502][ T7441] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 553.753443][ T6506] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 553.761987][ T6506] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 553.803559][ T6506] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 41ms [ 553.811312][ T6506] gfs2: fsid=syz:syz.0: jid=0: Done [ 553.816682][ T7441] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 554.066716][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 554.087047][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 554.102756][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 554.118325][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 554.134039][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 554.134074][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.134084][ T5935] Workqueue: gfs2-delete/syz:syz delete_work_func [ 554.134111][ T5935] Call Trace: [ 554.134117][ T5935] [ 554.134123][ T5935] dump_stack_lvl+0xe8/0x150 [ 554.134145][ T5935] gfs2_withdraw+0xc3/0x1b0 [ 554.134166][ T5935] gfs2_meta_buffer+0x225/0x2e0 [ 554.134187][ T5935] inode_go_instantiate+0xea/0x1220 [ 554.134203][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 554.134220][ T5935] ? __pfx_inode_go_instantiate+0x10/0x10 [ 554.134237][ T5935] ? do_raw_spin_unlock+0xf5/0x210 [ 554.134257][ T5935] gfs2_instantiate+0x168/0x220 [ 554.134278][ T5935] gfs2_inode_lookup+0x727/0xc50 [ 554.134303][ T5935] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 554.134326][ T5935] ? gfs2_lookup_by_inum+0x52/0x100 [ 554.134343][ T5935] ? trace_hrtimer_start+0x82/0x230 [ 554.134364][ T5935] ? __lock_acquire+0x6b5/0x2cf0 [ 554.134391][ T5935] gfs2_lookup_by_inum+0x52/0x100 [ 554.134412][ T5935] delete_work_func+0x311/0x4d0 [ 554.134430][ T5935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 554.134452][ T5935] ? __pfx_delete_work_func+0x10/0x10 [ 554.134483][ T5935] ? process_one_work+0x8bb/0x1780 [ 554.134503][ T5935] process_one_work+0x9ab/0x1780 [ 554.134542][ T5935] ? __pfx_process_one_work+0x10/0x10 [ 554.134561][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 554.134596][ T5935] worker_thread+0xba8/0x11e0 [ 554.134621][ T5935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 554.134642][ T5935] ? __kthread_parkme+0x7a/0x1f0 [ 554.134660][ T5935] ? __kthread_parkme+0x19c/0x1f0 [ 554.134681][ T5935] kthread+0x388/0x470 [ 554.134700][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 554.134714][ T5935] ? __pfx_kthread+0x10/0x10 [ 554.134732][ T5935] ret_from_fork+0x51e/0xb90 [ 554.134757][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 554.134776][ T5935] ? __switch_to+0xc7d/0x1450 [ 554.134801][ T5935] ? __pfx_kthread+0x10/0x10 [ 554.134820][ T5935] ret_from_fork_asm+0x1a/0x30 [ 554.134852][ T5935] [ 554.134860][ T5935] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 554.155217][ T6506] loop0: writeback error on inode 9394, offset 4736000, sector 28116 [ 554.171237][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 554.672707][ T7448] loop0: detected capacity change from 0 to 32768 [ 554.693527][ T7448] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 554.702664][ T7448] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 554.732765][ T7448] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 554.744398][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 554.751721][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 554.797749][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 554.805463][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 554.810767][ T7448] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 555.098885][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 555.116399][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 555.132921][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 555.148934][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 555.148967][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.148978][ T5906] Workqueue: gfs2-delete/syz:syz delete_work_func [ 555.149005][ T5906] Call Trace: [ 555.149013][ T5906] [ 555.149021][ T5906] dump_stack_lvl+0xe8/0x150 [ 555.149048][ T5906] gfs2_withdraw+0xc3/0x1b0 [ 555.149068][ T5906] gfs2_meta_buffer+0x225/0x2e0 [ 555.149096][ T5906] inode_go_instantiate+0xea/0x1220 [ 555.149117][ T5906] ? do_raw_spin_lock+0x12b/0x2f0 [ 555.149140][ T5906] ? __pfx_inode_go_instantiate+0x10/0x10 [ 555.149162][ T5906] ? do_raw_spin_unlock+0xf5/0x210 [ 555.149185][ T5906] gfs2_instantiate+0x168/0x220 [ 555.149207][ T5906] gfs2_inode_lookup+0x727/0xc50 [ 555.149234][ T5906] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 555.149259][ T5906] ? gfs2_lookup_by_inum+0x52/0x100 [ 555.149277][ T5906] ? trace_hrtimer_start+0x82/0x230 [ 555.149299][ T5906] ? __lock_acquire+0x6b5/0x2cf0 [ 555.149326][ T5906] gfs2_lookup_by_inum+0x52/0x100 [ 555.149348][ T5906] delete_work_func+0x311/0x4d0 [ 555.149366][ T5906] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.149389][ T5906] ? __pfx_delete_work_func+0x10/0x10 [ 555.149416][ T5906] ? process_one_work+0x8bb/0x1780 [ 555.149437][ T5906] process_one_work+0x9ab/0x1780 [ 555.149475][ T5906] ? __pfx_process_one_work+0x10/0x10 [ 555.149494][ T5906] ? do_raw_spin_lock+0x12b/0x2f0 [ 555.149526][ T5906] worker_thread+0xba8/0x11e0 [ 555.149563][ T5906] kthread+0x388/0x470 [ 555.149581][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 555.149594][ T5906] ? __pfx_kthread+0x10/0x10 [ 555.149612][ T5906] ret_from_fork+0x51e/0xb90 [ 555.149635][ T5906] ? __pfx_ret_from_fork+0x10/0x10 [ 555.149652][ T5906] ? __switch_to+0xc7d/0x1450 [ 555.149671][ T5906] ? __pfx_kthread+0x10/0x10 [ 555.149690][ T5906] ret_from_fork_asm+0x1a/0x30 [ 555.149722][ T5906] [ 555.149730][ T5906] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 555.343771][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 555.350087][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 555.392791][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 560.359164][ T808] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 560.678105][ T7462] loop0: detected capacity change from 0 to 32768 [ 560.689695][ T7462] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 560.700478][ T7462] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 560.728836][ T7462] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 560.738890][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 560.745820][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 560.789504][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 560.797075][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 560.802322][ T7462] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 561.052414][ T808] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 561.068190][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 561.084885][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 561.084910][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.084922][ T808] Workqueue: gfs2-delete/syz:syz delete_work_func [ 561.084948][ T808] Call Trace: [ 561.084956][ T808] [ 561.084963][ T808] dump_stack_lvl+0xe8/0x150 [ 561.084993][ T808] gfs2_withdraw+0xc3/0x1b0 [ 561.085014][ T808] gfs2_meta_buffer+0x225/0x2e0 [ 561.085038][ T808] inode_go_instantiate+0xea/0x1220 [ 561.085058][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 561.085081][ T808] ? __pfx_inode_go_instantiate+0x10/0x10 [ 561.085101][ T808] ? do_raw_spin_unlock+0xf5/0x210 [ 561.085124][ T808] gfs2_instantiate+0x168/0x220 [ 561.085144][ T808] gfs2_inode_lookup+0x727/0xc50 [ 561.085161][ T808] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 561.085190][ T808] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 561.085215][ T808] ? gfs2_lookup_by_inum+0x52/0x100 [ 561.085233][ T808] ? tick_program_event+0x8f/0x120 [ 561.085255][ T808] ? __lock_acquire+0x6b5/0x2cf0 [ 561.085284][ T808] gfs2_lookup_by_inum+0x52/0x100 [ 561.085306][ T808] delete_work_func+0x311/0x4d0 [ 561.085325][ T808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 561.085348][ T808] ? __pfx_delete_work_func+0x10/0x10 [ 561.085382][ T808] ? process_one_work+0x8bb/0x1780 [ 561.085404][ T808] process_one_work+0x9ab/0x1780 [ 561.085453][ T808] ? __pfx_process_one_work+0x10/0x10 [ 561.085474][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 561.085508][ T808] worker_thread+0xba8/0x11e0 [ 561.085534][ T808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 561.085556][ T808] ? __kthread_parkme+0x7a/0x1f0 [ 561.085573][ T808] ? __kthread_parkme+0x19c/0x1f0 [ 561.085596][ T808] kthread+0x388/0x470 [ 561.085616][ T808] ? __pfx_worker_thread+0x10/0x10 [ 561.085630][ T808] ? __pfx_kthread+0x10/0x10 [ 561.085650][ T808] ret_from_fork+0x51e/0xb90 [ 561.085676][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 561.085695][ T808] ? __switch_to+0xc7d/0x1450 [ 561.085720][ T808] ? __pfx_kthread+0x10/0x10 [ 561.085747][ T808] ret_from_fork_asm+0x1a/0x30 [ 561.085779][ T808] [ 561.114962][ T6496] loop0: writeback error on inode 9394, offset 3328000, sector 25344 [ 561.116518][ T808] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 561.313561][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 561.318460][ T6488] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 561.681188][ T7470] loop0: detected capacity change from 0 to 32768 [ 561.694184][ T7470] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 561.703051][ T7470] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 561.732108][ T7470] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 561.745009][ T6496] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 561.752231][ T6496] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 561.794670][ T6496] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 42ms [ 561.802720][ T6496] gfs2: fsid=syz:syz.0: jid=0: Done [ 561.808232][ T7470] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 562.053028][ T808] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 562.056873][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 562.068945][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 562.068966][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.068977][ T808] Workqueue: gfs2-delete/syz:syz delete_work_func [ 562.069007][ T808] Call Trace: [ 562.069015][ T808] [ 562.069023][ T808] dump_stack_lvl+0xe8/0x150 [ 562.069049][ T808] gfs2_withdraw+0xc3/0x1b0 [ 562.069069][ T808] gfs2_meta_buffer+0x225/0x2e0 [ 562.069096][ T808] inode_go_instantiate+0xea/0x1220 [ 562.069117][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 562.069140][ T808] ? __pfx_inode_go_instantiate+0x10/0x10 [ 562.069161][ T808] ? do_raw_spin_unlock+0xf5/0x210 [ 562.069183][ T808] gfs2_instantiate+0x168/0x220 [ 562.069205][ T808] gfs2_inode_lookup+0x727/0xc50 [ 562.069233][ T808] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 562.069253][ T808] ? check_path+0x21/0x40 [ 562.069271][ T808] ? gfs2_lookup_by_inum+0x52/0x100 [ 562.069289][ T808] ? add_lock_to_list+0xc7/0x100 [ 562.069308][ T808] ? lockdep_unlock+0x5d/0xd0 [ 562.069326][ T808] ? __lock_acquire+0x146e/0x2cf0 [ 562.069356][ T808] gfs2_lookup_by_inum+0x52/0x100 [ 562.069377][ T808] delete_work_func+0x311/0x4d0 [ 562.069401][ T808] ? __pfx_delete_work_func+0x10/0x10 [ 562.069433][ T808] ? process_one_work+0x8bb/0x1780 [ 562.069454][ T808] process_one_work+0x9ab/0x1780 [ 562.069494][ T808] ? __pfx_process_one_work+0x10/0x10 [ 562.069514][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 562.069548][ T808] worker_thread+0xba8/0x11e0 [ 562.069571][ T808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 562.069591][ T808] ? __kthread_parkme+0x7a/0x1f0 [ 562.069608][ T808] ? __kthread_parkme+0x19c/0x1f0 [ 562.069630][ T808] kthread+0x388/0x470 [ 562.069649][ T808] ? __pfx_worker_thread+0x10/0x10 [ 562.069663][ T808] ? __pfx_kthread+0x10/0x10 [ 562.069682][ T808] ret_from_fork+0x51e/0xb90 [ 562.069707][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 562.069727][ T808] ? __switch_to+0xc7d/0x1450 [ 562.069750][ T808] ? __pfx_kthread+0x10/0x10 [ 562.069770][ T808] ret_from_fork_asm+0x1a/0x30 [ 562.069800][ T808] [ 562.069814][ T808] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 562.142388][ T1222] loop0: writeback error on inode 9394, offset 101376, sector 18990 [ 562.161390][ T6488] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 562.624346][ T7477] loop0: detected capacity change from 0 to 32768 [ 562.643210][ T7477] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 562.653419][ T7477] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 562.683300][ T7477] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 562.697779][ T1222] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 562.704651][ T1222] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 562.770126][ T1222] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 65ms [ 562.777963][ T1222] gfs2: fsid=syz:syz.0: jid=0: Done [ 562.783253][ T7477] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 562.919652][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.926381][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.033883][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 563.060134][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 563.076275][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 563.076298][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.076308][ T5935] Workqueue: gfs2-delete/syz:syz delete_work_func [ 563.076335][ T5935] Call Trace: [ 563.076343][ T5935] [ 563.076350][ T5935] dump_stack_lvl+0xe8/0x150 [ 563.076375][ T5935] gfs2_withdraw+0xc3/0x1b0 [ 563.076393][ T5935] gfs2_meta_buffer+0x225/0x2e0 [ 563.076419][ T5935] inode_go_instantiate+0xea/0x1220 [ 563.076439][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 563.076461][ T5935] ? __pfx_inode_go_instantiate+0x10/0x10 [ 563.076483][ T5935] ? do_raw_spin_unlock+0xf5/0x210 [ 563.076505][ T5935] gfs2_instantiate+0x168/0x220 [ 563.076526][ T5935] gfs2_inode_lookup+0x727/0xc50 [ 563.076553][ T5935] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 563.076589][ T5935] ? gfs2_lookup_by_inum+0x52/0x100 [ 563.076606][ T5935] ? trace_hrtimer_start+0x82/0x230 [ 563.076628][ T5935] ? __lock_acquire+0x6b5/0x2cf0 [ 563.076656][ T5935] gfs2_lookup_by_inum+0x52/0x100 [ 563.076678][ T5935] delete_work_func+0x311/0x4d0 [ 563.076696][ T5935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 563.076719][ T5935] ? __pfx_delete_work_func+0x10/0x10 [ 563.076750][ T5935] ? process_one_work+0x8bb/0x1780 [ 563.076772][ T5935] process_one_work+0x9ab/0x1780 [ 563.076812][ T5935] ? __pfx_process_one_work+0x10/0x10 [ 563.076831][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 563.076864][ T5935] worker_thread+0xba8/0x11e0 [ 563.076889][ T5935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.076913][ T5935] ? __kthread_parkme+0x7a/0x1f0 [ 563.076929][ T5935] ? __kthread_parkme+0x19c/0x1f0 [ 563.076950][ T5935] kthread+0x388/0x470 [ 563.076969][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 563.076983][ T5935] ? __pfx_kthread+0x10/0x10 [ 563.077001][ T5935] ret_from_fork+0x51e/0xb90 [ 563.077026][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 563.077046][ T5935] ? __switch_to+0xc7d/0x1450 [ 563.077070][ T5935] ? __pfx_kthread+0x10/0x10 [ 563.077087][ T5935] ret_from_fork_asm+0x1a/0x30 [ 563.077118][ T5935] [ 563.079882][ T5935] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 563.102833][ T6488] loop0: writeback error on inode 9394, offset 4608000, sector 27864 [ 563.121200][ T1222] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 563.624838][ T7484] loop0: detected capacity change from 0 to 32768 [ 563.639355][ T7484] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 563.648269][ T7484] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 563.678452][ T7484] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 563.688509][ T1222] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 563.695367][ T1222] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 563.773859][ T1222] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 563.781758][ T1222] gfs2: fsid=syz:syz.0: jid=0: Done [ 563.787245][ T7484] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 564.030194][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 564.046853][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 564.047899][ T1222] CPU: 1 UID: 0 PID: 1222 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 564.047920][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.047930][ T1222] Workqueue: gfs2-delete/syz:syz delete_work_func [ 564.047957][ T1222] Call Trace: [ 564.047965][ T1222] [ 564.047972][ T1222] dump_stack_lvl+0xe8/0x150 [ 564.047998][ T1222] gfs2_withdraw+0xc3/0x1b0 [ 564.048019][ T1222] gfs2_meta_buffer+0x225/0x2e0 [ 564.048054][ T1222] inode_go_instantiate+0xea/0x1220 [ 564.048075][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.048097][ T1222] ? __pfx_inode_go_instantiate+0x10/0x10 [ 564.048119][ T1222] ? do_raw_spin_unlock+0xf5/0x210 [ 564.048141][ T1222] gfs2_instantiate+0x168/0x220 [ 564.048162][ T1222] gfs2_inode_lookup+0x727/0xc50 [ 564.048188][ T1222] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 564.048208][ T1222] ? check_path+0x21/0x40 [ 564.048227][ T1222] ? gfs2_lookup_by_inum+0x52/0x100 [ 564.048248][ T1222] ? add_lock_to_list+0xc7/0x100 [ 564.048267][ T1222] ? lockdep_unlock+0x5d/0xd0 [ 564.048286][ T1222] ? __lock_acquire+0x146e/0x2cf0 [ 564.048315][ T1222] gfs2_lookup_by_inum+0x52/0x100 [ 564.048336][ T1222] delete_work_func+0x311/0x4d0 [ 564.048360][ T1222] ? __pfx_delete_work_func+0x10/0x10 [ 564.048392][ T1222] ? process_one_work+0x8bb/0x1780 [ 564.048413][ T1222] process_one_work+0x9ab/0x1780 [ 564.048455][ T1222] ? __pfx_process_one_work+0x10/0x10 [ 564.048474][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.048507][ T1222] worker_thread+0xba8/0x11e0 [ 564.048531][ T1222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.048552][ T1222] ? __kthread_parkme+0x7a/0x1f0 [ 564.048568][ T1222] ? __kthread_parkme+0x19c/0x1f0 [ 564.048590][ T1222] kthread+0x388/0x470 [ 564.048608][ T1222] ? __pfx_worker_thread+0x10/0x10 [ 564.048622][ T1222] ? __pfx_kthread+0x10/0x10 [ 564.048642][ T1222] ret_from_fork+0x51e/0xb90 [ 564.048667][ T1222] ? __pfx_ret_from_fork+0x10/0x10 [ 564.048685][ T1222] ? __switch_to+0xc7d/0x1450 [ 564.048708][ T1222] ? __pfx_kthread+0x10/0x10 [ 564.048728][ T1222] ret_from_fork_asm+0x1a/0x30 [ 564.048758][ T1222] [ 564.048775][ T1222] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 564.114218][ T5906] loop0: writeback error on inode 9394, offset 384000, sector 19548 [ 564.126162][ T6496] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 564.597153][ T7491] loop0: detected capacity change from 0 to 32768 [ 564.613095][ T7491] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 564.629314][ T7491] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 564.659603][ T7491] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 564.673722][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 564.681086][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 564.749508][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms [ 564.757188][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 564.762463][ T7491] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 565.009664][ T6496] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 565.026529][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 565.026553][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.026564][ T6496] Workqueue: gfs2-delete/syz:syz delete_work_func [ 565.026592][ T6496] Call Trace: [ 565.026599][ T6496] [ 565.026607][ T6496] dump_stack_lvl+0xe8/0x150 [ 565.026634][ T6496] gfs2_withdraw+0xc3/0x1b0 [ 565.026655][ T6496] gfs2_meta_buffer+0x225/0x2e0 [ 565.026692][ T6496] inode_go_instantiate+0xea/0x1220 [ 565.026714][ T6496] ? do_raw_spin_lock+0x12b/0x2f0 [ 565.026737][ T6496] ? __pfx_inode_go_instantiate+0x10/0x10 [ 565.026759][ T6496] ? do_raw_spin_unlock+0xf5/0x210 [ 565.026782][ T6496] gfs2_instantiate+0x168/0x220 [ 565.026804][ T6496] gfs2_inode_lookup+0x727/0xc50 [ 565.026841][ T6496] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 565.026862][ T6496] ? check_path+0x21/0x40 [ 565.026882][ T6496] ? gfs2_lookup_by_inum+0x52/0x100 [ 565.026907][ T6496] ? add_lock_to_list+0xc7/0x100 [ 565.026927][ T6496] ? lockdep_unlock+0x5d/0xd0 [ 565.026950][ T6496] ? __lock_acquire+0x146e/0x2cf0 [ 565.026978][ T6496] gfs2_lookup_by_inum+0x52/0x100 [ 565.026999][ T6496] delete_work_func+0x311/0x4d0 [ 565.027020][ T6496] ? __pfx_delete_work_func+0x10/0x10 [ 565.027041][ T6496] ? lock_acquire+0x20b/0x2e0 [ 565.027065][ T6496] ? process_one_work+0x8bb/0x1780 [ 565.027087][ T6496] process_one_work+0x9ab/0x1780 [ 565.027129][ T6496] ? __pfx_process_one_work+0x10/0x10 [ 565.027148][ T6496] ? do_raw_spin_lock+0x12b/0x2f0 [ 565.027181][ T6496] worker_thread+0xba8/0x11e0 [ 565.027203][ T6496] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 565.027222][ T6496] ? __kthread_parkme+0x7a/0x1f0 [ 565.027238][ T6496] ? __kthread_parkme+0x19c/0x1f0 [ 565.027259][ T6496] kthread+0x388/0x470 [ 565.027275][ T6496] ? __pfx_worker_thread+0x10/0x10 [ 565.027289][ T6496] ? __pfx_kthread+0x10/0x10 [ 565.027306][ T6496] ret_from_fork+0x51e/0xb90 [ 565.027329][ T6496] ? __pfx_ret_from_fork+0x10/0x10 [ 565.027344][ T6496] ? __switch_to+0xc7d/0x1450 [ 565.027359][ T6496] ? __pfx_kthread+0x10/0x10 [ 565.027370][ T6496] ret_from_fork_asm+0x1a/0x30 [ 565.027389][ T6496] [ 565.028560][ T6496] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 565.247488][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 565.254754][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 565.284984][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 570.278636][ T5935] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 570.604315][ T7500] loop0: detected capacity change from 0 to 32768 [ 570.625471][ T7500] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 570.634304][ T7500] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 570.672241][ T7500] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 570.683817][ T5935] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 570.692121][ T5935] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 570.736395][ T5935] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 44ms [ 570.744616][ T5935] gfs2: fsid=syz:syz.0: jid=0: Done [ 570.750355][ T7500] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 570.997265][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 571.014144][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 571.029692][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 571.045356][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 571.045379][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 571.045388][ T5888] Workqueue: gfs2-delete/syz:syz delete_work_func [ 571.045414][ T5888] Call Trace: [ 571.045421][ T5888] [ 571.045429][ T5888] dump_stack_lvl+0xe8/0x150 [ 571.045454][ T5888] gfs2_withdraw+0xc3/0x1b0 [ 571.045472][ T5888] gfs2_meta_buffer+0x225/0x2e0 [ 571.045498][ T5888] inode_go_instantiate+0xea/0x1220 [ 571.045519][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 571.045541][ T5888] ? __pfx_inode_go_instantiate+0x10/0x10 [ 571.045562][ T5888] ? do_raw_spin_unlock+0xf5/0x210 [ 571.045579][ T5888] gfs2_instantiate+0x168/0x220 [ 571.045591][ T5888] gfs2_inode_lookup+0x727/0xc50 [ 571.045607][ T5888] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 571.045622][ T5888] ? gfs2_lookup_by_inum+0x52/0x100 [ 571.045635][ T5888] ? __lock_acquire+0x6b5/0x2cf0 [ 571.045654][ T5888] gfs2_lookup_by_inum+0x52/0x100 [ 571.045667][ T5888] delete_work_func+0x311/0x4d0 [ 571.045687][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 571.045701][ T5888] ? __pfx_delete_work_func+0x10/0x10 [ 571.045720][ T5888] ? process_one_work+0x8bb/0x1780 [ 571.045734][ T5888] process_one_work+0x9ab/0x1780 [ 571.045759][ T5888] ? __pfx_process_one_work+0x10/0x10 [ 571.045772][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 571.045792][ T5888] worker_thread+0xba8/0x11e0 [ 571.045813][ T5888] kthread+0x388/0x470 [ 571.045830][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 571.045838][ T5888] ? __pfx_kthread+0x10/0x10 [ 571.045850][ T5888] ret_from_fork+0x51e/0xb90 [ 571.045866][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 571.045884][ T5888] ? __switch_to+0xc7d/0x1450 [ 571.045906][ T5888] ? __pfx_kthread+0x10/0x10 [ 571.045934][ T5888] ret_from_fork_asm+0x1a/0x30 [ 571.045962][ T5888] [ 571.226755][ T5888] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 571.237363][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 571.244079][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 571.275148][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 576.278546][ T24] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 576.608628][ T7508] loop0: detected capacity change from 0 to 32768 [ 576.622731][ T7508] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 576.631556][ T7508] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 576.665763][ T7508] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 576.677627][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 576.684609][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 576.729954][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms [ 576.738325][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 576.743598][ T7508] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 576.987969][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 577.003739][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 577.020758][ T808] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 577.038188][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 577.038213][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 577.038224][ T9] Workqueue: gfs2-delete/syz:syz delete_work_func [ 577.038251][ T9] Call Trace: [ 577.038259][ T9] [ 577.038267][ T9] dump_stack_lvl+0xe8/0x150 [ 577.038293][ T9] gfs2_withdraw+0xc3/0x1b0 [ 577.038323][ T9] gfs2_meta_buffer+0x225/0x2e0 [ 577.038351][ T9] inode_go_instantiate+0xea/0x1220 [ 577.038373][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 577.038397][ T9] ? __pfx_inode_go_instantiate+0x10/0x10 [ 577.038419][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 577.038443][ T9] gfs2_instantiate+0x168/0x220 [ 577.038465][ T9] gfs2_inode_lookup+0x727/0xc50 [ 577.038492][ T9] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 577.038517][ T9] ? gfs2_lookup_by_inum+0x52/0x100 [ 577.038535][ T9] ? trace_hrtimer_start+0x82/0x230 [ 577.038558][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 577.038588][ T9] gfs2_lookup_by_inum+0x52/0x100 [ 577.038611][ T9] delete_work_func+0x311/0x4d0 [ 577.038630][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 577.038653][ T9] ? __pfx_delete_work_func+0x10/0x10 [ 577.038686][ T9] ? process_one_work+0x8bb/0x1780 [ 577.038708][ T9] process_one_work+0x9ab/0x1780 [ 577.038751][ T9] ? __pfx_process_one_work+0x10/0x10 [ 577.038772][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 577.038805][ T9] worker_thread+0xba8/0x11e0 [ 577.038846][ T9] kthread+0x388/0x470 [ 577.038866][ T9] ? __pfx_worker_thread+0x10/0x10 [ 577.038880][ T9] ? __pfx_kthread+0x10/0x10 [ 577.038901][ T9] ret_from_fork+0x51e/0xb90 [ 577.038926][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 577.038946][ T9] ? __switch_to+0xc7d/0x1450 [ 577.038969][ T9] ? __pfx_kthread+0x10/0x10 [ 577.038988][ T9] ret_from_fork_asm+0x1a/0x30 [ 577.039017][ T9] [ 577.039024][ T9] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 577.062060][ T5888] loop0: writeback error on inode 9394, offset 4096000, sector 26856 [ 577.081620][ T808] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 577.578717][ T7516] loop0: detected capacity change from 0 to 32768 [ 577.593449][ T7516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 577.604246][ T7516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 577.635276][ T7516] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 577.645108][ T808] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 577.652094][ T808] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 577.722390][ T808] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 70ms [ 577.730381][ T808] gfs2: fsid=syz:syz.0: jid=0: Done [ 577.735728][ T7516] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 577.979109][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 577.994626][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 578.010889][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 578.026376][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 578.026391][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.026398][ T9] Workqueue: gfs2-delete/syz:syz delete_work_func [ 578.026417][ T9] Call Trace: [ 578.026422][ T9] [ 578.026427][ T9] dump_stack_lvl+0xe8/0x150 [ 578.026445][ T9] gfs2_withdraw+0xc3/0x1b0 [ 578.026457][ T9] gfs2_meta_buffer+0x225/0x2e0 [ 578.026475][ T9] inode_go_instantiate+0xea/0x1220 [ 578.026487][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.026501][ T9] ? __pfx_inode_go_instantiate+0x10/0x10 [ 578.026513][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 578.026528][ T9] gfs2_instantiate+0x168/0x220 [ 578.026540][ T9] gfs2_inode_lookup+0x727/0xc50 [ 578.026556][ T9] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 578.026570][ T9] ? gfs2_lookup_by_inum+0x52/0x100 [ 578.026581][ T9] ? trace_hrtimer_start+0x82/0x230 [ 578.026595][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 578.026613][ T9] gfs2_lookup_by_inum+0x52/0x100 [ 578.026626][ T9] delete_work_func+0x311/0x4d0 [ 578.026637][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 578.026650][ T9] ? __pfx_delete_work_func+0x10/0x10 [ 578.026672][ T9] ? process_one_work+0x8bb/0x1780 [ 578.026686][ T9] process_one_work+0x9ab/0x1780 [ 578.026711][ T9] ? __pfx_process_one_work+0x10/0x10 [ 578.026723][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.026743][ T9] worker_thread+0xba8/0x11e0 [ 578.026764][ T9] kthread+0x388/0x470 [ 578.026781][ T9] ? __pfx_worker_thread+0x10/0x10 [ 578.026794][ T9] ? __pfx_kthread+0x10/0x10 [ 578.026813][ T9] ret_from_fork+0x51e/0xb90 [ 578.026837][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 578.026856][ T9] ? __switch_to+0xc7d/0x1450 [ 578.026880][ T9] ? __pfx_kthread+0x10/0x10 [ 578.026899][ T9] ret_from_fork_asm+0x1a/0x30 [ 578.026923][ T9] [ 578.026928][ T9] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 578.232939][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 578.239282][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 578.268807][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 583.238658][ T808] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 583.556178][ T7525] loop0: detected capacity change from 0 to 32768 [ 583.581244][ T7525] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 583.590398][ T7525] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 583.625006][ T7525] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 583.641105][ T808] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 583.648168][ T808] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 583.711347][ T808] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms [ 583.719054][ T808] gfs2: fsid=syz:syz.0: jid=0: Done [ 583.724307][ T7525] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 583.968463][ T808] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 583.991229][ T6488] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 584.010784][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 584.028275][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 584.028300][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.028312][ T6488] Workqueue: gfs2-delete/syz:syz delete_work_func [ 584.028341][ T6488] Call Trace: [ 584.028349][ T6488] [ 584.028357][ T6488] dump_stack_lvl+0xe8/0x150 [ 584.028383][ T6488] gfs2_withdraw+0xc3/0x1b0 [ 584.028404][ T6488] gfs2_meta_buffer+0x225/0x2e0 [ 584.028438][ T6488] inode_go_instantiate+0xea/0x1220 [ 584.028460][ T6488] ? do_raw_spin_lock+0x12b/0x2f0 [ 584.028485][ T6488] ? __pfx_inode_go_instantiate+0x10/0x10 [ 584.028506][ T6488] ? do_raw_spin_unlock+0xf5/0x210 [ 584.028530][ T6488] gfs2_instantiate+0x168/0x220 [ 584.028561][ T6488] gfs2_inode_lookup+0x727/0xc50 [ 584.028590][ T6488] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 584.028615][ T6488] ? gfs2_lookup_by_inum+0x52/0x100 [ 584.028634][ T6488] ? trace_hrtimer_start+0x82/0x230 [ 584.028657][ T6488] ? __lock_acquire+0x6b5/0x2cf0 [ 584.028687][ T6488] gfs2_lookup_by_inum+0x52/0x100 [ 584.028709][ T6488] delete_work_func+0x311/0x4d0 [ 584.028728][ T6488] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 584.028751][ T6488] ? __pfx_delete_work_func+0x10/0x10 [ 584.028782][ T6488] ? process_one_work+0x8bb/0x1780 [ 584.028803][ T6488] process_one_work+0x9ab/0x1780 [ 584.028846][ T6488] ? __pfx_process_one_work+0x10/0x10 [ 584.028865][ T6488] ? do_raw_spin_lock+0x12b/0x2f0 [ 584.028896][ T6488] worker_thread+0xba8/0x11e0 [ 584.028935][ T6488] kthread+0x388/0x470 [ 584.028955][ T6488] ? __pfx_worker_thread+0x10/0x10 [ 584.028969][ T6488] ? __pfx_kthread+0x10/0x10 [ 584.028989][ T6488] ret_from_fork+0x51e/0xb90 [ 584.029014][ T6488] ? __pfx_ret_from_fork+0x10/0x10 [ 584.029034][ T6488] ? __switch_to+0xc7d/0x1450 [ 584.029057][ T6488] ? __pfx_kthread+0x10/0x10 [ 584.029078][ T6488] ret_from_fork_asm+0x1a/0x30 [ 584.029110][ T6488] [ 584.029117][ T6488] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 584.034275][ T24] loop0: writeback error on inode 9394, offset 6272000, sector 31140 [ 584.045671][ T5906] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 584.553915][ T7532] loop0: detected capacity change from 0 to 32768 [ 584.569124][ T7532] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 584.577957][ T7532] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 584.604633][ T7532] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 584.614620][ T5888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 584.621840][ T5888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 584.693346][ T5888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 71ms [ 584.702298][ T5888] gfs2: fsid=syz:syz.0: jid=0: Done [ 584.707610][ T7532] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 584.955385][ T5888] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 584.971722][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 584.987100][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 585.003262][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 585.003285][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.003295][ T5935] Workqueue: gfs2-delete/syz:syz delete_work_func [ 585.003321][ T5935] Call Trace: [ 585.003328][ T5935] [ 585.003336][ T5935] dump_stack_lvl+0xe8/0x150 [ 585.003362][ T5935] gfs2_withdraw+0xc3/0x1b0 [ 585.003381][ T5935] gfs2_meta_buffer+0x225/0x2e0 [ 585.003406][ T5935] inode_go_instantiate+0xea/0x1220 [ 585.003425][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 585.003447][ T5935] ? __pfx_inode_go_instantiate+0x10/0x10 [ 585.003464][ T5935] ? do_raw_spin_unlock+0xf5/0x210 [ 585.003485][ T5935] gfs2_instantiate+0x168/0x220 [ 585.003507][ T5935] gfs2_inode_lookup+0x727/0xc50 [ 585.003536][ T5935] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 585.003561][ T5935] ? gfs2_lookup_by_inum+0x52/0x100 [ 585.003579][ T5935] ? trace_hrtimer_start+0x82/0x230 [ 585.003602][ T5935] ? __lock_acquire+0x6b5/0x2cf0 [ 585.003631][ T5935] gfs2_lookup_by_inum+0x52/0x100 [ 585.003653][ T5935] delete_work_func+0x311/0x4d0 [ 585.003672][ T5935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 585.003695][ T5935] ? __pfx_delete_work_func+0x10/0x10 [ 585.003728][ T5935] ? process_one_work+0x8bb/0x1780 [ 585.003750][ T5935] process_one_work+0x9ab/0x1780 [ 585.003793][ T5935] ? __pfx_process_one_work+0x10/0x10 [ 585.003813][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 585.003848][ T5935] worker_thread+0xba8/0x11e0 [ 585.003885][ T5935] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 585.003906][ T5935] ? __kthread_parkme+0x7a/0x1f0 [ 585.003924][ T5935] ? __kthread_parkme+0x19c/0x1f0 [ 585.003947][ T5935] kthread+0x388/0x470 [ 585.003967][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 585.003981][ T5935] ? __pfx_kthread+0x10/0x10 [ 585.004001][ T5935] ret_from_fork+0x51e/0xb90 [ 585.004026][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 585.004047][ T5935] ? __switch_to+0xc7d/0x1450 [ 585.004071][ T5935] ? __pfx_kthread+0x10/0x10 [ 585.004090][ T5935] ret_from_fork_asm+0x1a/0x30 [ 585.004120][ T5935] [ 585.004928][ T5935] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 585.215517][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 585.221901][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 585.253359][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 590.278732][ T5888] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 590.598764][ T7540] loop0: detected capacity change from 0 to 32768 [ 590.609807][ T7540] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 590.619650][ T7540] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 590.648942][ T7540] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 590.658868][ T5888] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 590.665817][ T5888] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 590.717738][ T5888] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 51ms [ 590.725348][ T5888] gfs2: fsid=syz:syz.0: jid=0: Done [ 590.730664][ T7540] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 590.972921][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 590.989681][ T24] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 591.005422][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 591.022113][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 591.022136][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.022146][ T24] Workqueue: gfs2-delete/syz:syz delete_work_func [ 591.022173][ T24] Call Trace: [ 591.022179][ T24] [ 591.022187][ T24] dump_stack_lvl+0xe8/0x150 [ 591.022212][ T24] gfs2_withdraw+0xc3/0x1b0 [ 591.022232][ T24] gfs2_meta_buffer+0x225/0x2e0 [ 591.022255][ T24] inode_go_instantiate+0xea/0x1220 [ 591.022278][ T24] ? do_raw_spin_lock+0x12b/0x2f0 [ 591.022300][ T24] ? __pfx_inode_go_instantiate+0x10/0x10 [ 591.022322][ T24] ? do_raw_spin_unlock+0xf5/0x210 [ 591.022357][ T24] gfs2_instantiate+0x168/0x220 [ 591.022379][ T24] gfs2_inode_lookup+0x727/0xc50 [ 591.022408][ T24] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 591.022433][ T24] ? gfs2_lookup_by_inum+0x52/0x100 [ 591.022451][ T24] ? trace_hrtimer_start+0x82/0x230 [ 591.022473][ T24] ? __lock_acquire+0x6b5/0x2cf0 [ 591.022501][ T24] gfs2_lookup_by_inum+0x52/0x100 [ 591.022521][ T24] delete_work_func+0x311/0x4d0 [ 591.022539][ T24] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 591.022561][ T24] ? __pfx_delete_work_func+0x10/0x10 [ 591.022590][ T24] ? process_one_work+0x8bb/0x1780 [ 591.022612][ T24] process_one_work+0x9ab/0x1780 [ 591.022655][ T24] ? __pfx_process_one_work+0x10/0x10 [ 591.022676][ T24] ? do_raw_spin_lock+0x12b/0x2f0 [ 591.022711][ T24] worker_thread+0xba8/0x11e0 [ 591.022751][ T24] kthread+0x388/0x470 [ 591.022771][ T24] ? __pfx_worker_thread+0x10/0x10 [ 591.022785][ T24] ? __pfx_kthread+0x10/0x10 [ 591.022805][ T24] ret_from_fork+0x51e/0xb90 [ 591.022831][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 591.022851][ T24] ? __switch_to+0xc7d/0x1450 [ 591.022875][ T24] ? __pfx_kthread+0x10/0x10 [ 591.022896][ T24] ret_from_fork_asm+0x1a/0x30 [ 591.022928][ T24] [ 591.022946][ T24] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 591.216350][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 591.222572][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 591.253105][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 596.278578][ T5935] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 596.601141][ T7550] loop0: detected capacity change from 0 to 32768 [ 596.614527][ T7550] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 596.623265][ T7550] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 596.653031][ T7550] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 596.670308][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 596.679147][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 596.722603][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 43ms [ 596.730194][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 596.735554][ T7550] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 596.981228][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 596.982129][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 596.998405][ T24] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 597.028036][ T5935] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 597.043414][ T1222] CPU: 1 UID: 0 PID: 1222 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 597.043438][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.043449][ T1222] Workqueue: gfs2-delete/syz:syz delete_work_func [ 597.043478][ T1222] Call Trace: [ 597.043486][ T1222] [ 597.043494][ T1222] dump_stack_lvl+0xe8/0x150 [ 597.043522][ T1222] gfs2_withdraw+0xc3/0x1b0 [ 597.043543][ T1222] gfs2_meta_buffer+0x225/0x2e0 [ 597.043570][ T1222] inode_go_instantiate+0xea/0x1220 [ 597.043592][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 597.043615][ T1222] ? __pfx_inode_go_instantiate+0x10/0x10 [ 597.043638][ T1222] ? do_raw_spin_unlock+0xf5/0x210 [ 597.043661][ T1222] gfs2_instantiate+0x168/0x220 [ 597.043683][ T1222] gfs2_inode_lookup+0x727/0xc50 [ 597.043712][ T1222] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 597.043815][ T1222] ? gfs2_lookup_by_inum+0x52/0x100 [ 597.043834][ T1222] ? trace_hrtimer_start+0x82/0x230 [ 597.043856][ T1222] ? __lock_acquire+0x6b5/0x2cf0 [ 597.043882][ T1222] gfs2_lookup_by_inum+0x52/0x100 [ 597.043904][ T1222] delete_work_func+0x311/0x4d0 [ 597.043922][ T1222] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 597.043940][ T1222] ? __pfx_delete_work_func+0x10/0x10 [ 597.043965][ T1222] ? process_one_work+0x8bb/0x1780 [ 597.043983][ T1222] process_one_work+0x9ab/0x1780 [ 597.044016][ T1222] ? __pfx_process_one_work+0x10/0x10 [ 597.044031][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 597.044058][ T1222] worker_thread+0xba8/0x11e0 [ 597.044077][ T1222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.044094][ T1222] ? __kthread_parkme+0x7a/0x1f0 [ 597.044112][ T1222] ? __kthread_parkme+0x19c/0x1f0 [ 597.044129][ T1222] kthread+0x388/0x470 [ 597.044144][ T1222] ? __pfx_worker_thread+0x10/0x10 [ 597.044155][ T1222] ? __pfx_kthread+0x10/0x10 [ 597.044171][ T1222] ret_from_fork+0x51e/0xb90 [ 597.044192][ T1222] ? __pfx_ret_from_fork+0x10/0x10 [ 597.044208][ T1222] ? __switch_to+0xc7d/0x1450 [ 597.044227][ T1222] ? __pfx_kthread+0x10/0x10 [ 597.044243][ T1222] ret_from_fork_asm+0x1a/0x30 [ 597.044269][ T1222] [ 597.044280][ T1222] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 597.113186][ T5906] loop0: writeback error on inode 9394, offset 2048000, sector 22824 [ 597.128535][ T24] gfs2: fsid=syz:syz.0: file system withdrawn [ 597.270396][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x1f8000 len 0x1000 error -5 [ 597.270459][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x1f9000 len 0x1000 error -5 [ 597.280508][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x1fa000 len 0x1000 error -5 [ 597.290550][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x1fb000 len 0x1000 error -5 [ 597.301308][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x1fc000 len 0x1000 error -5 [ 597.311338][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x1fd000 len 0x1000 error -5 [ 597.321376][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x1fe000 len 0x1000 error -5 [ 597.331332][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x1ff000 len 0x1000 error -5 [ 597.341299][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x200000 len 0x1000 error -5 executing program [ 597.351345][ T5906] loop0: lost file I/O error report for ino 9394 type 1 pos 0x201000 len 0x1000 error -5 [ 597.669464][ T7557] loop0: detected capacity change from 0 to 32768 [ 597.691542][ T7557] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 597.700133][ T7557] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 597.730486][ T7557] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 597.740192][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 597.748974][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 597.794792][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms [ 597.805986][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 597.811236][ T7557] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 598.050789][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 598.066951][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 598.082876][ T808] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 598.100093][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 598.100117][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.100126][ T9] Workqueue: gfs2-delete/syz:syz delete_work_func [ 598.100151][ T9] Call Trace: [ 598.100158][ T9] [ 598.100174][ T9] dump_stack_lvl+0xe8/0x150 [ 598.100199][ T9] gfs2_withdraw+0xc3/0x1b0 [ 598.100218][ T9] gfs2_meta_buffer+0x225/0x2e0 [ 598.100247][ T9] inode_go_instantiate+0xea/0x1220 [ 598.100268][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 598.100289][ T9] ? __pfx_inode_go_instantiate+0x10/0x10 [ 598.100309][ T9] ? do_raw_spin_unlock+0xf5/0x210 [ 598.100327][ T9] gfs2_instantiate+0x168/0x220 [ 598.100347][ T9] gfs2_inode_lookup+0x727/0xc50 [ 598.100376][ T9] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 598.100399][ T9] ? gfs2_lookup_by_inum+0x52/0x100 [ 598.100417][ T9] ? trace_hrtimer_start+0x82/0x230 [ 598.100440][ T9] ? __lock_acquire+0x6b5/0x2cf0 [ 598.100470][ T9] gfs2_lookup_by_inum+0x52/0x100 [ 598.100502][ T9] delete_work_func+0x311/0x4d0 [ 598.100521][ T9] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 598.100544][ T9] ? __pfx_delete_work_func+0x10/0x10 [ 598.100577][ T9] ? process_one_work+0x8bb/0x1780 [ 598.100605][ T9] process_one_work+0x9ab/0x1780 [ 598.100653][ T9] ? __pfx_process_one_work+0x10/0x10 [ 598.100673][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 598.100709][ T9] worker_thread+0xba8/0x11e0 [ 598.100750][ T9] kthread+0x388/0x470 [ 598.100769][ T9] ? __pfx_worker_thread+0x10/0x10 [ 598.100789][ T9] ? __pfx_kthread+0x10/0x10 [ 598.100809][ T9] ret_from_fork+0x51e/0xb90 [ 598.100835][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 598.100855][ T9] ? __switch_to+0xc7d/0x1450 [ 598.100880][ T9] ? __pfx_kthread+0x10/0x10 [ 598.100900][ T9] ret_from_fork_asm+0x1a/0x30 [ 598.100933][ T9] [ 598.100951][ T9] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 598.294666][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 598.301437][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 598.332400][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 603.318741][ T5906] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 603.634084][ T7565] loop0: detected capacity change from 0 to 32768 [ 603.652857][ T7565] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 603.670997][ T7565] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 603.701221][ T7565] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 603.713246][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 603.722603][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 603.784519][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 61ms [ 603.792457][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 603.798108][ T7565] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 604.044787][ T1222] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 604.062050][ T24] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 604.079260][ T1222] CPU: 1 UID: 0 PID: 1222 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 604.079285][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.079296][ T1222] Workqueue: gfs2-delete/syz:syz delete_work_func [ 604.079323][ T1222] Call Trace: [ 604.079330][ T1222] [ 604.079339][ T1222] dump_stack_lvl+0xe8/0x150 [ 604.079365][ T1222] gfs2_withdraw+0xc3/0x1b0 [ 604.079385][ T1222] gfs2_meta_buffer+0x225/0x2e0 [ 604.079414][ T1222] inode_go_instantiate+0xea/0x1220 [ 604.079435][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 604.079458][ T1222] ? __pfx_inode_go_instantiate+0x10/0x10 [ 604.079479][ T1222] ? do_raw_spin_unlock+0xf5/0x210 [ 604.079502][ T1222] gfs2_instantiate+0x168/0x220 [ 604.079523][ T1222] gfs2_inode_lookup+0x727/0xc50 [ 604.079550][ T1222] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 604.079574][ T1222] ? gfs2_lookup_by_inum+0x52/0x100 [ 604.079591][ T1222] ? trace_hrtimer_start+0x82/0x230 [ 604.079612][ T1222] ? __lock_acquire+0x6b5/0x2cf0 [ 604.079639][ T1222] gfs2_lookup_by_inum+0x52/0x100 [ 604.079660][ T1222] delete_work_func+0x311/0x4d0 [ 604.079677][ T1222] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.079698][ T1222] ? __pfx_delete_work_func+0x10/0x10 [ 604.079729][ T1222] ? process_one_work+0x8bb/0x1780 [ 604.079751][ T1222] process_one_work+0x9ab/0x1780 [ 604.079791][ T1222] ? __pfx_process_one_work+0x10/0x10 [ 604.079812][ T1222] ? do_raw_spin_lock+0x12b/0x2f0 [ 604.079847][ T1222] worker_thread+0xba8/0x11e0 [ 604.079872][ T1222] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 604.079893][ T1222] ? __kthread_parkme+0x7a/0x1f0 [ 604.079910][ T1222] ? __kthread_parkme+0x19c/0x1f0 [ 604.079931][ T1222] kthread+0x388/0x470 [ 604.079950][ T1222] ? __pfx_worker_thread+0x10/0x10 [ 604.079963][ T1222] ? __pfx_kthread+0x10/0x10 [ 604.079982][ T1222] ret_from_fork+0x51e/0xb90 [ 604.080007][ T1222] ? __pfx_ret_from_fork+0x10/0x10 [ 604.080027][ T1222] ? __switch_to+0xc7d/0x1450 [ 604.080050][ T1222] ? __pfx_kthread+0x10/0x10 [ 604.080070][ T1222] ret_from_fork_asm+0x1a/0x30 [ 604.080110][ T1222] [ 604.080117][ T1222] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 604.152275][ T5906] loop0: writeback error on inode 9394, offset 2048000, sector 22824 [ 604.163764][ T24] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 604.615483][ T7573] loop0: detected capacity change from 0 to 32768 [ 604.635073][ T7573] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 604.648191][ T7573] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 604.680628][ T7573] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 604.690930][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 604.697803][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 604.761140][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms [ 604.769018][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done [ 604.774300][ T7573] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 605.012788][ T808] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 605.029173][ T6506] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 605.045372][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 605.045397][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 605.045409][ T808] Workqueue: gfs2-delete/syz:syz delete_work_func [ 605.045436][ T808] Call Trace: [ 605.045443][ T808] [ 605.045453][ T808] dump_stack_lvl+0xe8/0x150 [ 605.045478][ T808] gfs2_withdraw+0xc3/0x1b0 [ 605.045498][ T808] gfs2_meta_buffer+0x225/0x2e0 [ 605.045527][ T808] inode_go_instantiate+0xea/0x1220 [ 605.045548][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 605.045571][ T808] ? __pfx_inode_go_instantiate+0x10/0x10 [ 605.045592][ T808] ? do_raw_spin_unlock+0xf5/0x210 [ 605.045614][ T808] gfs2_instantiate+0x168/0x220 [ 605.045635][ T808] gfs2_inode_lookup+0x727/0xc50 [ 605.045651][ T808] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 605.045666][ T808] ? gfs2_lookup_by_inum+0x52/0x100 [ 605.045677][ T808] ? trace_hrtimer_start+0x82/0x230 [ 605.045691][ T808] ? __lock_acquire+0x6b5/0x2cf0 [ 605.045709][ T808] gfs2_lookup_by_inum+0x52/0x100 [ 605.045723][ T808] delete_work_func+0x311/0x4d0 [ 605.045734][ T808] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 605.045747][ T808] ? __pfx_delete_work_func+0x10/0x10 [ 605.045779][ T808] ? process_one_work+0x8bb/0x1780 [ 605.045794][ T808] process_one_work+0x9ab/0x1780 [ 605.045818][ T808] ? __pfx_process_one_work+0x10/0x10 [ 605.045831][ T808] ? do_raw_spin_lock+0x12b/0x2f0 [ 605.045851][ T808] worker_thread+0xba8/0x11e0 [ 605.045864][ T808] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 605.045882][ T808] ? __kthread_parkme+0x7a/0x1f0 [ 605.045904][ T808] ? __kthread_parkme+0x19c/0x1f0 [ 605.045923][ T808] kthread+0x388/0x470 [ 605.045941][ T808] ? __pfx_worker_thread+0x10/0x10 [ 605.045954][ T808] ? __pfx_kthread+0x10/0x10 [ 605.045972][ T808] ret_from_fork+0x51e/0xb90 [ 605.045998][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 605.046018][ T808] ? __switch_to+0xc7d/0x1450 [ 605.046042][ T808] ? __pfx_kthread+0x10/0x10 [ 605.046062][ T808] ret_from_fork_asm+0x1a/0x30 [ 605.046092][ T808] [ 605.251857][ T808] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 605.271825][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 605.300247][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 610.278806][ T6488] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 610.602747][ T7581] loop0: detected capacity change from 0 to 32768 [ 610.616527][ T7581] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 610.625847][ T7581] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 610.666957][ T7581] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 610.676818][ T6488] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 610.683662][ T6488] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 610.758473][ T6488] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 74ms [ 610.766415][ T6488] gfs2: fsid=syz:syz.0: jid=0: Done [ 610.772177][ T7581] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 611.017429][ T5906] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 611.033291][ T6506] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 611.048781][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 611.048800][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 611.048807][ T6506] Workqueue: gfs2-delete/syz:syz delete_work_func [ 611.048826][ T6506] Call Trace: [ 611.048832][ T6506] [ 611.048838][ T6506] dump_stack_lvl+0xe8/0x150 [ 611.048855][ T6506] gfs2_withdraw+0xc3/0x1b0 [ 611.048868][ T6506] gfs2_meta_buffer+0x225/0x2e0 [ 611.048885][ T6506] inode_go_instantiate+0xea/0x1220 [ 611.048897][ T6506] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.048912][ T6506] ? __pfx_inode_go_instantiate+0x10/0x10 [ 611.048924][ T6506] ? do_raw_spin_unlock+0xf5/0x210 [ 611.048938][ T6506] gfs2_instantiate+0x168/0x220 [ 611.048951][ T6506] gfs2_inode_lookup+0x727/0xc50 [ 611.048968][ T6506] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 611.048982][ T6506] ? gfs2_lookup_by_inum+0x52/0x100 [ 611.048993][ T6506] ? trace_hrtimer_start+0x82/0x230 [ 611.049006][ T6506] ? __lock_acquire+0x6b5/0x2cf0 [ 611.049025][ T6506] gfs2_lookup_by_inum+0x52/0x100 [ 611.049038][ T6506] delete_work_func+0x311/0x4d0 [ 611.049049][ T6506] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 611.049063][ T6506] ? __pfx_delete_work_func+0x10/0x10 [ 611.049081][ T6506] ? process_one_work+0x8bb/0x1780 [ 611.049096][ T6506] process_one_work+0x9ab/0x1780 [ 611.049121][ T6506] ? __pfx_process_one_work+0x10/0x10 [ 611.049134][ T6506] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.049153][ T6506] worker_thread+0xba8/0x11e0 [ 611.049167][ T6506] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 611.049179][ T6506] ? __kthread_parkme+0x7a/0x1f0 [ 611.049189][ T6506] ? __kthread_parkme+0x19c/0x1f0 [ 611.049212][ T6506] kthread+0x388/0x470 [ 611.049224][ T6506] ? __pfx_worker_thread+0x10/0x10 [ 611.049232][ T6506] ? __pfx_kthread+0x10/0x10 [ 611.049244][ T6506] ret_from_fork+0x51e/0xb90 [ 611.049260][ T6506] ? __pfx_ret_from_fork+0x10/0x10 [ 611.049273][ T6506] ? __switch_to+0xc7d/0x1450 [ 611.049288][ T6506] ? __pfx_kthread+0x10/0x10 [ 611.049299][ T6506] ret_from_fork_asm+0x1a/0x30 [ 611.049317][ T6506] [ 611.049322][ T6506] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 611.267518][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5 [ 611.298126][ T7187] gfs2: fsid=syz:syz.0: gfs2_evict_inode: -5