RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 480.728452][ T6987] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 480.728518][ T6987] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 480.728572][ T6987] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 480.728651][ T6987] [ 481.012753][ T6987] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 482.181694][ T6993] loop0: detected capacity change from 0 to 32768 [ 482.215899][ T6993] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 482.224442][ T6993] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 482.258584][ T6993] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 482.271841][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 482.279265][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 482.410622][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms [ 482.419313][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 482.425172][ T6993] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 482.506836][ T6993] syz.0.104: attempt to access beyond end of device [ 482.506836][ T6993] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 482.551305][ T6993] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 482.567496][ T6993] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 482.595450][ T6993] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 482.605524][ T6993] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 482.613148][ T6993] gfs2: fsid=syz:syz.0: File system withdrawn [ 482.619514][ T6993] CPU: 0 UID: 0 PID: 6993 Comm: syz.0.104 Tainted: G W syzkaller #0 PREEMPT(none) [ 482.619735][ T6993] Tainted: [W]=WARN [ 482.619786][ T6993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.619874][ T6993] Call Trace: [ 482.619927][ T6993] [ 482.619975][ T6993] __dump_stack+0x26/0x30 [ 482.620148][ T6993] dump_stack_lvl+0x1df/0x270 [ 482.620325][ T6993] dump_stack+0x1e/0x25 [ 482.620480][ T6993] gfs2_withdraw+0x1ec1/0x2020 [ 482.620703][ T6993] gfs2_meta_check_ii+0xd7/0x100 [ 482.620868][ T6993] gfs2_quota_init+0x256f/0x2730 [ 482.621146][ T6993] gfs2_make_fs_rw+0x1d5/0x460 [ 482.621322][ T6993] gfs2_fill_super+0x3d31/0x3f50 [ 482.621482][ T6993] ? init_locking+0xed/0x500 [ 482.621682][ T6993] get_tree_bdev_flags+0x6e3/0x920 [ 482.621872][ T6993] ? __pfx_gfs2_fill_super+0x10/0x10 [ 482.622030][ T6993] ? __pfx_gfs2_fill_super+0x10/0x10 [ 482.622183][ T6993] ? __pfx_gfs2_get_tree+0x10/0x10 [ 482.622335][ T6993] get_tree_bdev+0x38/0x50 [ 482.622501][ T6993] gfs2_get_tree+0x57/0x350 [ 482.622665][ T6993] ? __pfx_gfs2_get_tree+0x10/0x10 [ 482.622816][ T6993] vfs_get_tree+0xb3/0x5c0 [ 482.622985][ T6993] ? mount_capable+0x99/0x100 [ 482.623143][ T6993] do_new_mount+0x733/0x14b0 [ 482.623310][ T6993] ? apparmor_capable+0x32d/0x410 [ 482.623490][ T6993] ? kmsan_get_metadata+0xfb/0x160 [ 482.623693][ T6993] path_mount+0x6db/0x1ea0 [ 482.623870][ T6993] ? user_path_at+0x32d/0x3d0 [ 482.624000][ T6993] __se_sys_mount+0x6eb/0x7d0 [ 482.624113][ T6993] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 482.624267][ T6993] __x64_sys_mount+0xe4/0x150 [ 482.624388][ T6993] x64_sys_call+0x3604/0x3e20 [ 482.624505][ T6993] do_syscall_64+0xd9/0x210 [ 482.624636][ T6993] ? irqentry_exit+0x16/0x60 [ 482.624751][ T6993] ? clear_bhb_loop+0x40/0x90 [ 482.624857][ T6993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.624958][ T6993] RIP: 0033:0x7f1c8b37ffba [ 482.625032][ T6993] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.625110][ T6993] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 482.625199][ T6993] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 482.625264][ T6993] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 482.625324][ T6993] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 482.625382][ T6993] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 482.625436][ T6993] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 482.625515][ T6993] [ 482.942848][ T6993] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:16:52 executed programs: 92 [ 484.110585][ T6999] loop0: detected capacity change from 0 to 32768 [ 484.138403][ T6999] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 484.147034][ T6999] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 484.196286][ T6999] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 484.211122][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 484.219171][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 484.346974][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 484.355678][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 484.361425][ T6999] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 484.459065][ T6999] syz.0.105: attempt to access beyond end of device [ 484.459065][ T6999] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 484.475529][ T6999] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 484.493091][ T6999] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 484.524710][ T6999] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 484.533813][ T6999] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 484.541042][ T6999] gfs2: fsid=syz:syz.0: File system withdrawn [ 484.548789][ T6999] CPU: 0 UID: 0 PID: 6999 Comm: syz.0.105 Tainted: G W syzkaller #0 PREEMPT(none) [ 484.548970][ T6999] Tainted: [W]=WARN [ 484.549024][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 484.549120][ T6999] Call Trace: [ 484.549174][ T6999] [ 484.549227][ T6999] __dump_stack+0x26/0x30 [ 484.549407][ T6999] dump_stack_lvl+0x1df/0x270 [ 484.549590][ T6999] dump_stack+0x1e/0x25 [ 484.549754][ T6999] gfs2_withdraw+0x1ec1/0x2020 [ 484.549968][ T6999] gfs2_metatype_check_ii+0x113/0x140 [ 484.550159][ T6999] gfs2_quota_init+0x25bf/0x2730 [ 484.550438][ T6999] gfs2_make_fs_rw+0x1d5/0x460 [ 484.550616][ T6999] gfs2_fill_super+0x3d31/0x3f50 [ 484.550782][ T6999] ? init_locking+0xed/0x500 [ 484.550977][ T6999] get_tree_bdev_flags+0x6e3/0x920 [ 484.551175][ T6999] ? __pfx_gfs2_fill_super+0x10/0x10 [ 484.551336][ T6999] ? __pfx_gfs2_fill_super+0x10/0x10 [ 484.551481][ T6999] ? __pfx_gfs2_get_tree+0x10/0x10 [ 484.551632][ T6999] get_tree_bdev+0x38/0x50 [ 484.551801][ T6999] gfs2_get_tree+0x57/0x350 [ 484.551974][ T6999] ? __pfx_gfs2_get_tree+0x10/0x10 [ 484.552175][ T6999] vfs_get_tree+0xb3/0x5c0 [ 484.552346][ T6999] ? mount_capable+0x99/0x100 [ 484.552559][ T6999] do_new_mount+0x733/0x14b0 [ 484.552736][ T6999] ? apparmor_capable+0x32d/0x410 [ 484.552918][ T6999] ? kmsan_get_metadata+0xfb/0x160 [ 484.553128][ T6999] path_mount+0x6db/0x1ea0 [ 484.553355][ T6999] ? user_path_at+0x32d/0x3d0 [ 484.553524][ T6999] __se_sys_mount+0x6eb/0x7d0 [ 484.553710][ T6999] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 484.553961][ T6999] __x64_sys_mount+0xe4/0x150 [ 484.554160][ T6999] x64_sys_call+0x3604/0x3e20 [ 484.554371][ T6999] do_syscall_64+0xd9/0x210 [ 484.554576][ T6999] ? irqentry_exit+0x16/0x60 [ 484.554761][ T6999] ? clear_bhb_loop+0x40/0x90 [ 484.554939][ T6999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.555102][ T6999] RIP: 0033:0x7f1c8b37ffba [ 484.555229][ T6999] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.555346][ T6999] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 484.555484][ T6999] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 484.555585][ T6999] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 484.555683][ T6999] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 484.555776][ T6999] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 484.555864][ T6999] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 484.555992][ T6999] [ 484.842621][ T6999] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 486.017199][ T7005] loop0: detected capacity change from 0 to 32768 [ 486.047111][ T7005] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 486.055733][ T7005] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 486.092919][ T7005] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 486.107777][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 486.115569][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 486.241538][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 486.250402][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 486.256196][ T7005] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 486.345089][ T7005] syz.0.106: attempt to access beyond end of device [ 486.345089][ T7005] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 486.360412][ T7005] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 486.377019][ T7005] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 486.410001][ T7005] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 486.419268][ T7005] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 486.427231][ T7005] gfs2: fsid=syz:syz.0: File system withdrawn [ 486.433954][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.0.106 Tainted: G W syzkaller #0 PREEMPT(none) [ 486.434135][ T7005] Tainted: [W]=WARN [ 486.434184][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.434276][ T7005] Call Trace: [ 486.434329][ T7005] [ 486.434379][ T7005] __dump_stack+0x26/0x30 [ 486.434652][ T7005] dump_stack_lvl+0x1df/0x270 [ 486.434846][ T7005] dump_stack+0x1e/0x25 [ 486.435021][ T7005] gfs2_withdraw+0x1ec1/0x2020 [ 486.435208][ T7005] gfs2_meta_check_ii+0xd7/0x100 [ 486.435327][ T7005] gfs2_quota_init+0x256f/0x2730 [ 486.435504][ T7005] gfs2_make_fs_rw+0x1d5/0x460 [ 486.435618][ T7005] gfs2_fill_super+0x3d31/0x3f50 [ 486.435723][ T7005] ? init_locking+0xed/0x500 [ 486.435848][ T7005] get_tree_bdev_flags+0x6e3/0x920 [ 486.436006][ T7005] ? __pfx_gfs2_fill_super+0x10/0x10 [ 486.436109][ T7005] ? __pfx_gfs2_fill_super+0x10/0x10 [ 486.436210][ T7005] ? __pfx_gfs2_get_tree+0x10/0x10 [ 486.436313][ T7005] get_tree_bdev+0x38/0x50 [ 486.436422][ T7005] gfs2_get_tree+0x57/0x350 [ 486.436522][ T7005] ? __pfx_gfs2_get_tree+0x10/0x10 [ 486.436623][ T7005] vfs_get_tree+0xb3/0x5c0 [ 486.436734][ T7005] ? mount_capable+0x99/0x100 [ 486.436835][ T7005] do_new_mount+0x733/0x14b0 [ 486.436944][ T7005] ? apparmor_capable+0x32d/0x410 [ 486.437066][ T7005] ? kmsan_get_metadata+0xfb/0x160 [ 486.437193][ T7005] path_mount+0x6db/0x1ea0 [ 486.437306][ T7005] ? user_path_at+0x32d/0x3d0 [ 486.437412][ T7005] __se_sys_mount+0x6eb/0x7d0 [ 486.437526][ T7005] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 486.437680][ T7005] __x64_sys_mount+0xe4/0x150 [ 486.437800][ T7005] x64_sys_call+0x3604/0x3e20 [ 486.437917][ T7005] do_syscall_64+0xd9/0x210 [ 486.438049][ T7005] ? irqentry_exit+0x16/0x60 [ 486.438163][ T7005] ? clear_bhb_loop+0x40/0x90 [ 486.438267][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.438368][ T7005] RIP: 0033:0x7f1c8b37ffba [ 486.438444][ T7005] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.438522][ T7005] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 486.438612][ T7005] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 486.438678][ T7005] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 486.438738][ T7005] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 486.438795][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 486.438852][ T7005] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 486.438939][ T7005] [ 486.732746][ T7005] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 487.903702][ T7011] loop0: detected capacity change from 0 to 32768 [ 487.931119][ T7011] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 487.939719][ T7011] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 487.989440][ T7011] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 488.004064][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 488.011025][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 488.148262][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 488.157191][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 488.164117][ T7011] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 488.258618][ T7011] syz.0.107: attempt to access beyond end of device [ 488.258618][ T7011] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 488.274515][ T7011] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 488.291223][ T7011] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 488.316905][ T7011] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 488.326297][ T7011] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 488.334103][ T7011] gfs2: fsid=syz:syz.0: File system withdrawn [ 488.341391][ T7011] CPU: 0 UID: 0 PID: 7011 Comm: syz.0.107 Tainted: G W syzkaller #0 PREEMPT(none) [ 488.341572][ T7011] Tainted: [W]=WARN [ 488.341622][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.341719][ T7011] Call Trace: [ 488.341773][ T7011] [ 488.341823][ T7011] __dump_stack+0x26/0x30 [ 488.342015][ T7011] dump_stack_lvl+0x1df/0x270 [ 488.342204][ T7011] dump_stack+0x1e/0x25 [ 488.342362][ T7011] gfs2_withdraw+0x1ec1/0x2020 [ 488.342576][ T7011] gfs2_meta_check_ii+0xd7/0x100 [ 488.342750][ T7011] gfs2_quota_init+0x256f/0x2730 [ 488.343026][ T7011] gfs2_make_fs_rw+0x1d5/0x460 [ 488.343204][ T7011] gfs2_fill_super+0x3d31/0x3f50 [ 488.343371][ T7011] ? init_locking+0xed/0x500 [ 488.343567][ T7011] get_tree_bdev_flags+0x6e3/0x920 [ 488.343756][ T7011] ? __pfx_gfs2_fill_super+0x10/0x10 [ 488.343915][ T7011] ? __pfx_gfs2_fill_super+0x10/0x10 [ 488.344065][ T7011] ? __pfx_gfs2_get_tree+0x10/0x10 [ 488.344221][ T7011] get_tree_bdev+0x38/0x50 [ 488.344399][ T7011] gfs2_get_tree+0x57/0x350 [ 488.344554][ T7011] ? __pfx_gfs2_get_tree+0x10/0x10 [ 488.344717][ T7011] vfs_get_tree+0xb3/0x5c0 [ 488.344892][ T7011] ? mount_capable+0x99/0x100 [ 488.345052][ T7011] do_new_mount+0x733/0x14b0 [ 488.345224][ T7011] ? apparmor_capable+0x32d/0x410 [ 488.345407][ T7011] ? kmsan_get_metadata+0xfb/0x160 [ 488.345611][ T7011] path_mount+0x6db/0x1ea0 [ 488.345795][ T7011] ? user_path_at+0x32d/0x3d0 [ 488.345961][ T7011] __se_sys_mount+0x6eb/0x7d0 [ 488.346132][ T7011] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 488.346369][ T7011] __x64_sys_mount+0xe4/0x150 [ 488.346560][ T7011] x64_sys_call+0x3604/0x3e20 [ 488.346757][ T7011] do_syscall_64+0xd9/0x210 [ 488.346958][ T7011] ? irqentry_exit+0x16/0x60 [ 488.347139][ T7011] ? clear_bhb_loop+0x40/0x90 [ 488.347308][ T7011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.347480][ T7011] RIP: 0033:0x7f1c8b37ffba [ 488.347600][ T7011] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.347730][ T7011] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 488.347877][ T7011] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 488.348036][ T7011] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 488.348133][ T7011] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 488.348226][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 488.348314][ T7011] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 488.348444][ T7011] [ 488.662866][ T7011] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:16:58 executed programs: 95 [ 489.831101][ T7017] loop0: detected capacity change from 0 to 32768 [ 489.862527][ T7017] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 489.871930][ T7017] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 489.901682][ T7017] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 489.915864][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 489.923078][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 490.047687][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms [ 490.056475][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 490.070838][ T7017] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 490.165835][ T7017] syz.0.108: attempt to access beyond end of device [ 490.165835][ T7017] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 490.182602][ T7017] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 490.199225][ T7017] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 490.227532][ T7017] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 490.236681][ T7017] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 490.244446][ T7017] gfs2: fsid=syz:syz.0: File system withdrawn [ 490.250736][ T7017] CPU: 0 UID: 0 PID: 7017 Comm: syz.0.108 Tainted: G W syzkaller #0 PREEMPT(none) [ 490.250927][ T7017] Tainted: [W]=WARN [ 490.250985][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.251076][ T7017] Call Trace: [ 490.251130][ T7017] [ 490.251193][ T7017] __dump_stack+0x26/0x30 [ 490.251391][ T7017] dump_stack_lvl+0x1df/0x270 [ 490.251585][ T7017] dump_stack+0x1e/0x25 [ 490.251748][ T7017] gfs2_withdraw+0x1ec1/0x2020 [ 490.251961][ T7017] gfs2_meta_check_ii+0xd7/0x100 [ 490.252123][ T7017] gfs2_quota_init+0x256f/0x2730 [ 490.252404][ T7017] gfs2_make_fs_rw+0x1d5/0x460 [ 490.252590][ T7017] gfs2_fill_super+0x3d31/0x3f50 [ 490.252757][ T7017] ? init_locking+0xed/0x500 [ 490.252953][ T7017] get_tree_bdev_flags+0x6e3/0x920 [ 490.253147][ T7017] ? __pfx_gfs2_fill_super+0x10/0x10 [ 490.253311][ T7017] ? __pfx_gfs2_fill_super+0x10/0x10 [ 490.253469][ T7017] ? __pfx_gfs2_get_tree+0x10/0x10 [ 490.253637][ T7017] get_tree_bdev+0x38/0x50 [ 490.253817][ T7017] gfs2_get_tree+0x57/0x350 [ 490.253981][ T7017] ? __pfx_gfs2_get_tree+0x10/0x10 [ 490.254133][ T7017] vfs_get_tree+0xb3/0x5c0 [ 490.254246][ T7017] ? mount_capable+0x99/0x100 [ 490.254350][ T7017] do_new_mount+0x733/0x14b0 [ 490.254460][ T7017] ? apparmor_capable+0x32d/0x410 [ 490.254586][ T7017] ? kmsan_get_metadata+0xfb/0x160 [ 490.254715][ T7017] path_mount+0x6db/0x1ea0 [ 490.254832][ T7017] ? user_path_at+0x32d/0x3d0 [ 490.254945][ T7017] __se_sys_mount+0x6eb/0x7d0 [ 490.255060][ T7017] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 490.255223][ T7017] __x64_sys_mount+0xe4/0x150 [ 490.255347][ T7017] x64_sys_call+0x3604/0x3e20 [ 490.255469][ T7017] do_syscall_64+0xd9/0x210 [ 490.255610][ T7017] ? irqentry_exit+0x16/0x60 [ 490.255725][ T7017] ? clear_bhb_loop+0x40/0x90 [ 490.255833][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.255937][ T7017] RIP: 0033:0x7f1c8b37ffba [ 490.256014][ T7017] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.256095][ T7017] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 490.256188][ T7017] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 490.256255][ T7017] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 490.256318][ T7017] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 490.256378][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 490.256437][ T7017] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 490.256528][ T7017] [ 490.562606][ T7017] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 491.878691][ T7023] loop0: detected capacity change from 0 to 32768 [ 491.895675][ T7023] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 491.904466][ T7023] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 491.959892][ T7023] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 491.975120][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 491.982778][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 492.126317][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 143ms [ 492.135000][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 492.140887][ T7023] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 492.240663][ T7023] syz.0.109: attempt to access beyond end of device [ 492.240663][ T7023] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 492.256059][ T7023] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 492.273164][ T7023] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 492.298775][ T7023] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 492.307833][ T7023] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 492.315538][ T7023] gfs2: fsid=syz:syz.0: File system withdrawn [ 492.322092][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.0.109 Tainted: G W syzkaller #0 PREEMPT(none) [ 492.322273][ T7023] Tainted: [W]=WARN [ 492.322336][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.322429][ T7023] Call Trace: [ 492.322480][ T7023] [ 492.322538][ T7023] __dump_stack+0x26/0x30 [ 492.322719][ T7023] dump_stack_lvl+0x1df/0x270 [ 492.322903][ T7023] dump_stack+0x1e/0x25 [ 492.323011][ T7023] gfs2_withdraw+0x1ec1/0x2020 [ 492.323147][ T7023] gfs2_metatype_check_ii+0x113/0x140 [ 492.323257][ T7023] gfs2_quota_init+0x25bf/0x2730 [ 492.323440][ T7023] gfs2_make_fs_rw+0x1d5/0x460 [ 492.323552][ T7023] gfs2_fill_super+0x3d31/0x3f50 [ 492.323656][ T7023] ? init_locking+0xed/0x500 [ 492.323826][ T7023] get_tree_bdev_flags+0x6e3/0x920 [ 492.323948][ T7023] ? __pfx_gfs2_fill_super+0x10/0x10 [ 492.324051][ T7023] ? __pfx_gfs2_fill_super+0x10/0x10 [ 492.324149][ T7023] ? __pfx_gfs2_get_tree+0x10/0x10 [ 492.324248][ T7023] get_tree_bdev+0x38/0x50 [ 492.324364][ T7023] gfs2_get_tree+0x57/0x350 [ 492.324466][ T7023] ? __pfx_gfs2_get_tree+0x10/0x10 [ 492.324565][ T7023] vfs_get_tree+0xb3/0x5c0 [ 492.324678][ T7023] ? mount_capable+0x99/0x100 [ 492.324781][ T7023] do_new_mount+0x733/0x14b0 [ 492.324891][ T7023] ? apparmor_capable+0x32d/0x410 [ 492.325008][ T7023] ? kmsan_get_metadata+0xfb/0x160 [ 492.325134][ T7023] path_mount+0x6db/0x1ea0 [ 492.325247][ T7023] ? user_path_at+0x32d/0x3d0 [ 492.325358][ T7023] __se_sys_mount+0x6eb/0x7d0 [ 492.325473][ T7023] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 492.325629][ T7023] __x64_sys_mount+0xe4/0x150 [ 492.325753][ T7023] x64_sys_call+0x3604/0x3e20 [ 492.325873][ T7023] do_syscall_64+0xd9/0x210 [ 492.326003][ T7023] ? irqentry_exit+0x16/0x60 [ 492.326117][ T7023] ? clear_bhb_loop+0x40/0x90 [ 492.326225][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.326330][ T7023] RIP: 0033:0x7f1c8b37ffba [ 492.326409][ T7023] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.326491][ T7023] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 492.326586][ T7023] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 492.326654][ T7023] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 492.326716][ T7023] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 492.326777][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 492.326835][ T7023] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 492.326918][ T7023] [ 492.632508][ T7023] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 493.809815][ T7029] loop0: detected capacity change from 0 to 32768 [ 493.840120][ T7029] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 493.848828][ T7029] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 493.879541][ T7029] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 493.893857][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 493.901340][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 494.026977][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 494.035706][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 494.050906][ T7029] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 494.138975][ T7029] syz.0.110: attempt to access beyond end of device [ 494.138975][ T7029] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 494.155291][ T7029] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 494.173385][ T7029] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 494.203415][ T7029] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 494.212766][ T7029] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 494.220090][ T7029] gfs2: fsid=syz:syz.0: File system withdrawn [ 494.226583][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.0.110 Tainted: G W syzkaller #0 PREEMPT(none) [ 494.226767][ T7029] Tainted: [W]=WARN [ 494.226823][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 494.226920][ T7029] Call Trace: [ 494.226975][ T7029] [ 494.227033][ T7029] __dump_stack+0x26/0x30 [ 494.227218][ T7029] dump_stack_lvl+0x1df/0x270 [ 494.227419][ T7029] dump_stack+0x1e/0x25 [ 494.227584][ T7029] gfs2_withdraw+0x1ec1/0x2020 [ 494.227802][ T7029] gfs2_meta_check_ii+0xd7/0x100 [ 494.227971][ T7029] gfs2_quota_init+0x256f/0x2730 [ 494.228255][ T7029] gfs2_make_fs_rw+0x1d5/0x460 [ 494.228443][ T7029] gfs2_fill_super+0x3d31/0x3f50 [ 494.228606][ T7029] ? init_locking+0xed/0x500 [ 494.228801][ T7029] get_tree_bdev_flags+0x6e3/0x920 [ 494.228992][ T7029] ? __pfx_gfs2_fill_super+0x10/0x10 [ 494.229153][ T7029] ? __pfx_gfs2_fill_super+0x10/0x10 [ 494.229313][ T7029] ? __pfx_gfs2_get_tree+0x10/0x10 [ 494.229489][ T7029] get_tree_bdev+0x38/0x50 [ 494.229669][ T7029] gfs2_get_tree+0x57/0x350 [ 494.229849][ T7029] ? __pfx_gfs2_get_tree+0x10/0x10 [ 494.230007][ T7029] vfs_get_tree+0xb3/0x5c0 [ 494.230188][ T7029] ? mount_capable+0x99/0x100 [ 494.230362][ T7029] do_new_mount+0x733/0x14b0 [ 494.230541][ T7029] ? apparmor_capable+0x32d/0x410 [ 494.230731][ T7029] ? kmsan_get_metadata+0xfb/0x160 [ 494.230957][ T7029] path_mount+0x6db/0x1ea0 [ 494.231141][ T7029] ? user_path_at+0x32d/0x3d0 [ 494.231319][ T7029] __se_sys_mount+0x6eb/0x7d0 [ 494.231509][ T7029] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 494.231772][ T7029] __x64_sys_mount+0xe4/0x150 [ 494.231973][ T7029] x64_sys_call+0x3604/0x3e20 [ 494.232169][ T7029] do_syscall_64+0xd9/0x210 [ 494.232371][ T7029] ? irqentry_exit+0x16/0x60 [ 494.232561][ T7029] ? clear_bhb_loop+0x40/0x90 [ 494.232739][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.232902][ T7029] RIP: 0033:0x7f1c8b37ffba [ 494.233028][ T7029] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.233157][ T7029] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 494.233302][ T7029] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 494.233414][ T7029] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 494.233514][ T7029] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 494.233611][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 494.233706][ T7029] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 494.233845][ T7029] [ 494.522648][ T7029] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:04 executed programs: 98 [ 495.696856][ T7035] loop0: detected capacity change from 0 to 32768 [ 495.726953][ T7035] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 495.735867][ T7035] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 495.793665][ T7035] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 495.808250][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 495.816463][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 495.951091][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms [ 495.960000][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 495.965876][ T7035] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 496.057501][ T7035] syz.0.111: attempt to access beyond end of device [ 496.057501][ T7035] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 496.072764][ T7035] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 496.089402][ T7035] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 496.113980][ T7035] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 496.124060][ T7035] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 496.131324][ T7035] gfs2: fsid=syz:syz.0: File system withdrawn [ 496.137866][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.0.111 Tainted: G W syzkaller #0 PREEMPT(none) [ 496.138050][ T7035] Tainted: [W]=WARN [ 496.138108][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.138209][ T7035] Call Trace: [ 496.138266][ T7035] [ 496.138325][ T7035] __dump_stack+0x26/0x30 [ 496.138509][ T7035] dump_stack_lvl+0x1df/0x270 [ 496.138699][ T7035] dump_stack+0x1e/0x25 [ 496.138864][ T7035] gfs2_withdraw+0x1ec1/0x2020 [ 496.139082][ T7035] gfs2_meta_check_ii+0xd7/0x100 [ 496.139257][ T7035] gfs2_quota_init+0x256f/0x2730 [ 496.139539][ T7035] gfs2_make_fs_rw+0x1d5/0x460 [ 496.139723][ T7035] gfs2_fill_super+0x3d31/0x3f50 [ 496.139894][ T7035] ? init_locking+0xed/0x500 [ 496.140096][ T7035] get_tree_bdev_flags+0x6e3/0x920 [ 496.140287][ T7035] ? __pfx_gfs2_fill_super+0x10/0x10 [ 496.140448][ T7035] ? __pfx_gfs2_fill_super+0x10/0x10 [ 496.140600][ T7035] ? __pfx_gfs2_get_tree+0x10/0x10 [ 496.140756][ T7035] get_tree_bdev+0x38/0x50 [ 496.140927][ T7035] gfs2_get_tree+0x57/0x350 [ 496.141087][ T7035] ? __pfx_gfs2_get_tree+0x10/0x10 [ 496.141253][ T7035] vfs_get_tree+0xb3/0x5c0 [ 496.141426][ T7035] ? mount_capable+0x99/0x100 [ 496.141590][ T7035] do_new_mount+0x733/0x14b0 [ 496.141764][ T7035] ? apparmor_capable+0x32d/0x410 [ 496.141953][ T7035] ? kmsan_get_metadata+0xfb/0x160 [ 496.142163][ T7035] path_mount+0x6db/0x1ea0 [ 496.142342][ T7035] ? user_path_at+0x32d/0x3d0 [ 496.142512][ T7035] __se_sys_mount+0x6eb/0x7d0 [ 496.142689][ T7035] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 496.142933][ T7035] __x64_sys_mount+0xe4/0x150 [ 496.143128][ T7035] x64_sys_call+0x3604/0x3e20 [ 496.143331][ T7035] do_syscall_64+0xd9/0x210 [ 496.143537][ T7035] ? irqentry_exit+0x16/0x60 [ 496.143725][ T7035] ? clear_bhb_loop+0x40/0x90 [ 496.143894][ T7035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.144062][ T7035] RIP: 0033:0x7f1c8b37ffba [ 496.144191][ T7035] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.144323][ T7035] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 496.144470][ T7035] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 496.144577][ T7035] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 496.144678][ T7035] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 496.144776][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 496.144872][ T7035] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 496.145005][ T7035] [ 496.482613][ T7035] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 497.657966][ T7041] loop0: detected capacity change from 0 to 32768 [ 497.686636][ T7041] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 497.695386][ T7041] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 497.740703][ T7041] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 497.766023][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 497.773182][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 497.895711][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 122ms [ 497.904458][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 497.910232][ T7041] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 497.986864][ T7041] syz.0.112: attempt to access beyond end of device [ 497.986864][ T7041] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 498.003526][ T7041] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 498.020534][ T7041] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 498.055452][ T7041] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 498.066107][ T7041] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 498.073932][ T7041] gfs2: fsid=syz:syz.0: File system withdrawn [ 498.080219][ T7041] CPU: 1 UID: 0 PID: 7041 Comm: syz.0.112 Tainted: G W syzkaller #0 PREEMPT(none) [ 498.080404][ T7041] Tainted: [W]=WARN [ 498.080458][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 498.080549][ T7041] Call Trace: [ 498.080603][ T7041] [ 498.080658][ T7041] __dump_stack+0x26/0x30 [ 498.080845][ T7041] dump_stack_lvl+0x1df/0x270 [ 498.081034][ T7041] dump_stack+0x1e/0x25 [ 498.081177][ T7041] gfs2_withdraw+0x1ec1/0x2020 [ 498.081313][ T7041] gfs2_meta_check_ii+0xd7/0x100 [ 498.081419][ T7041] gfs2_quota_init+0x256f/0x2730 [ 498.081594][ T7041] gfs2_make_fs_rw+0x1d5/0x460 [ 498.081713][ T7041] gfs2_fill_super+0x3d31/0x3f50 [ 498.081818][ T7041] ? init_locking+0xed/0x500 [ 498.081943][ T7041] get_tree_bdev_flags+0x6e3/0x920 [ 498.082065][ T7041] ? __pfx_gfs2_fill_super+0x10/0x10 [ 498.082190][ T7041] ? __pfx_gfs2_fill_super+0x10/0x10 [ 498.082342][ T7041] ? __pfx_gfs2_get_tree+0x10/0x10 [ 498.082496][ T7041] get_tree_bdev+0x38/0x50 [ 498.082674][ T7041] gfs2_get_tree+0x57/0x350 [ 498.082845][ T7041] ? __pfx_gfs2_get_tree+0x10/0x10 [ 498.083001][ T7041] vfs_get_tree+0xb3/0x5c0 [ 498.083177][ T7041] ? mount_capable+0x99/0x100 [ 498.083339][ T7041] do_new_mount+0x733/0x14b0 [ 498.083513][ T7041] ? apparmor_capable+0x32d/0x410 [ 498.083710][ T7041] ? kmsan_get_metadata+0xfb/0x160 [ 498.083876][ T7041] path_mount+0x6db/0x1ea0 [ 498.083991][ T7041] ? user_path_at+0x32d/0x3d0 [ 498.084099][ T7041] __se_sys_mount+0x6eb/0x7d0 [ 498.084214][ T7041] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 498.084373][ T7041] __x64_sys_mount+0xe4/0x150 [ 498.084495][ T7041] x64_sys_call+0x3604/0x3e20 [ 498.084618][ T7041] do_syscall_64+0xd9/0x210 [ 498.084754][ T7041] ? irqentry_exit+0x16/0x60 [ 498.084871][ T7041] ? clear_bhb_loop+0x40/0x90 [ 498.084975][ T7041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.085081][ T7041] RIP: 0033:0x7f1c8b37ffba [ 498.085159][ T7041] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.085240][ T7041] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 498.085333][ T7041] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 498.085400][ T7041] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 498.085463][ T7041] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 498.085526][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 498.085584][ T7041] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 498.085664][ T7041] [ 498.402776][ T7041] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 499.570920][ T7047] loop0: detected capacity change from 0 to 32768 [ 499.595495][ T7047] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 499.605183][ T7047] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 499.632732][ T7047] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 499.651487][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 499.658749][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 499.788443][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 129ms [ 499.797420][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 499.807602][ T7047] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 499.898058][ T7047] syz.0.113: attempt to access beyond end of device [ 499.898058][ T7047] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 499.914283][ T7047] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 499.931130][ T7047] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 499.963240][ T7047] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 499.972746][ T7047] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 499.980506][ T7047] gfs2: fsid=syz:syz.0: File system withdrawn [ 499.987304][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.0.113 Tainted: G W syzkaller #0 PREEMPT(none) [ 499.987491][ T7047] Tainted: [W]=WARN [ 499.987554][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.987650][ T7047] Call Trace: [ 499.987705][ T7047] [ 499.987760][ T7047] __dump_stack+0x26/0x30 [ 499.987945][ T7047] dump_stack_lvl+0x1df/0x270 [ 499.988137][ T7047] dump_stack+0x1e/0x25 [ 499.988305][ T7047] gfs2_withdraw+0x1ec1/0x2020 [ 499.988525][ T7047] gfs2_meta_check_ii+0xd7/0x100 [ 499.988691][ T7047] gfs2_quota_init+0x256f/0x2730 [ 499.989038][ T7047] gfs2_make_fs_rw+0x1d5/0x460 [ 499.989248][ T7047] gfs2_fill_super+0x3d31/0x3f50 [ 499.989430][ T7047] ? init_locking+0xed/0x500 [ 499.989704][ T7047] get_tree_bdev_flags+0x6e3/0x920 [ 499.989905][ T7047] ? __pfx_gfs2_fill_super+0x10/0x10 [ 499.990077][ T7047] ? __pfx_gfs2_fill_super+0x10/0x10 [ 499.990238][ T7047] ? __pfx_gfs2_get_tree+0x10/0x10 [ 499.990416][ T7047] get_tree_bdev+0x38/0x50 [ 499.990603][ T7047] gfs2_get_tree+0x57/0x350 [ 499.990767][ T7047] ? __pfx_gfs2_get_tree+0x10/0x10 [ 499.990930][ T7047] vfs_get_tree+0xb3/0x5c0 [ 499.991112][ T7047] ? mount_capable+0x99/0x100 [ 499.991283][ T7047] do_new_mount+0x733/0x14b0 [ 499.991460][ T7047] ? apparmor_capable+0x32d/0x410 [ 499.991647][ T7047] ? kmsan_get_metadata+0xfb/0x160 [ 499.991850][ T7047] path_mount+0x6db/0x1ea0 [ 499.992042][ T7047] ? user_path_at+0x32d/0x3d0 [ 499.992213][ T7047] __se_sys_mount+0x6eb/0x7d0 [ 499.992391][ T7047] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 499.992651][ T7047] __x64_sys_mount+0xe4/0x150 [ 499.992852][ T7047] x64_sys_call+0x3604/0x3e20 [ 499.993048][ T7047] do_syscall_64+0xd9/0x210 [ 499.993256][ T7047] ? irqentry_exit+0x16/0x60 [ 499.993441][ T7047] ? clear_bhb_loop+0x40/0x90 [ 499.993613][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.993772][ T7047] RIP: 0033:0x7f1c8b37ffba [ 499.993894][ T7047] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.994020][ T7047] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 499.994166][ T7047] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 499.994272][ T7047] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 499.994371][ T7047] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 499.994466][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 499.994565][ T7047] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 499.994694][ T7047] [ 500.302813][ T7047] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:09 executed programs: 101 [ 501.497521][ T7053] loop0: detected capacity change from 0 to 32768 [ 501.527508][ T7053] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 501.536218][ T7053] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 501.584591][ T7053] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 501.597505][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 501.605432][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 501.739186][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 133ms [ 501.748058][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 501.756790][ T7053] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 501.852745][ T7053] syz.0.114: attempt to access beyond end of device [ 501.852745][ T7053] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 501.868793][ T7053] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 501.885727][ T7053] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 501.915353][ T7053] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 501.924621][ T7053] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 501.931842][ T7053] gfs2: fsid=syz:syz.0: File system withdrawn [ 501.938353][ T7053] CPU: 1 UID: 0 PID: 7053 Comm: syz.0.114 Tainted: G W syzkaller #0 PREEMPT(none) [ 501.938529][ T7053] Tainted: [W]=WARN [ 501.938586][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.938679][ T7053] Call Trace: [ 501.938733][ T7053] [ 501.938792][ T7053] __dump_stack+0x26/0x30 [ 501.938977][ T7053] dump_stack_lvl+0x1df/0x270 [ 501.939168][ T7053] dump_stack+0x1e/0x25 [ 501.939341][ T7053] gfs2_withdraw+0x1ec1/0x2020 [ 501.939564][ T7053] gfs2_meta_check_ii+0xd7/0x100 [ 501.939735][ T7053] gfs2_quota_init+0x256f/0x2730 [ 501.940027][ T7053] gfs2_make_fs_rw+0x1d5/0x460 [ 501.940209][ T7053] gfs2_fill_super+0x3d31/0x3f50 [ 501.940386][ T7053] ? init_locking+0xed/0x500 [ 501.940587][ T7053] get_tree_bdev_flags+0x6e3/0x920 [ 501.940781][ T7053] ? __pfx_gfs2_fill_super+0x10/0x10 [ 501.940947][ T7053] ? __pfx_gfs2_fill_super+0x10/0x10 [ 501.941099][ T7053] ? __pfx_gfs2_get_tree+0x10/0x10 [ 501.941259][ T7053] get_tree_bdev+0x38/0x50 [ 501.941436][ T7053] gfs2_get_tree+0x57/0x350 [ 501.941595][ T7053] ? __pfx_gfs2_get_tree+0x10/0x10 [ 501.941755][ T7053] vfs_get_tree+0xb3/0x5c0 [ 501.941935][ T7053] ? mount_capable+0x99/0x100 [ 501.942097][ T7053] do_new_mount+0x733/0x14b0 [ 501.942269][ T7053] ? apparmor_capable+0x32d/0x410 [ 501.942459][ T7053] ? kmsan_get_metadata+0xfb/0x160 [ 501.942663][ T7053] path_mount+0x6db/0x1ea0 [ 501.942854][ T7053] ? user_path_at+0x32d/0x3d0 [ 501.943028][ T7053] __se_sys_mount+0x6eb/0x7d0 [ 501.943209][ T7053] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 501.943468][ T7053] __x64_sys_mount+0xe4/0x150 [ 501.943669][ T7053] x64_sys_call+0x3604/0x3e20 [ 501.943861][ T7053] do_syscall_64+0xd9/0x210 [ 501.944064][ T7053] ? irqentry_exit+0x16/0x60 [ 501.944246][ T7053] ? clear_bhb_loop+0x40/0x90 [ 501.944424][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.944592][ T7053] RIP: 0033:0x7f1c8b37ffba [ 501.944715][ T7053] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.944845][ T7053] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 501.944994][ T7053] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 501.945102][ T7053] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 501.945202][ T7053] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 501.945305][ T7053] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 501.945395][ T7053] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 501.945527][ T7053] [ 502.262778][ T7053] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 503.429729][ T7059] loop0: detected capacity change from 0 to 32768 [ 503.460240][ T7059] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 503.468965][ T7059] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 503.520089][ T7059] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 503.537492][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 503.544816][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 503.681998][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 503.691039][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 503.697891][ T7059] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 503.790388][ T7059] syz.0.115: attempt to access beyond end of device [ 503.790388][ T7059] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 503.807345][ T7059] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 503.824816][ T7059] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 503.848969][ T7059] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 503.858025][ T7059] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 503.865768][ T7059] gfs2: fsid=syz:syz.0: File system withdrawn [ 503.872145][ T7059] CPU: 1 UID: 0 PID: 7059 Comm: syz.0.115 Tainted: G W syzkaller #0 PREEMPT(none) [ 503.872321][ T7059] Tainted: [W]=WARN [ 503.872379][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.872469][ T7059] Call Trace: [ 503.872527][ T7059] [ 503.872580][ T7059] __dump_stack+0x26/0x30 [ 503.872761][ T7059] dump_stack_lvl+0x1df/0x270 [ 503.872949][ T7059] dump_stack+0x1e/0x25 [ 503.873121][ T7059] gfs2_withdraw+0x1ec1/0x2020 [ 503.873343][ T7059] gfs2_metatype_check_ii+0x113/0x140 [ 503.873516][ T7059] gfs2_quota_init+0x25bf/0x2730 [ 503.873800][ T7059] gfs2_make_fs_rw+0x1d5/0x460 [ 503.873974][ T7059] gfs2_fill_super+0x3d31/0x3f50 [ 503.874129][ T7059] ? init_locking+0xed/0x500 [ 503.874253][ T7059] get_tree_bdev_flags+0x6e3/0x920 [ 503.874373][ T7059] ? __pfx_gfs2_fill_super+0x10/0x10 [ 503.874474][ T7059] ? __pfx_gfs2_fill_super+0x10/0x10 [ 503.874570][ T7059] ? __pfx_gfs2_get_tree+0x10/0x10 [ 503.874667][ T7059] get_tree_bdev+0x38/0x50 [ 503.874776][ T7059] gfs2_get_tree+0x57/0x350 [ 503.874877][ T7059] ? __pfx_gfs2_get_tree+0x10/0x10 [ 503.874975][ T7059] vfs_get_tree+0xb3/0x5c0 [ 503.875101][ T7059] ? mount_capable+0x99/0x100 [ 503.875204][ T7059] do_new_mount+0x733/0x14b0 [ 503.875314][ T7059] ? apparmor_capable+0x32d/0x410 [ 503.875431][ T7059] ? kmsan_get_metadata+0xfb/0x160 [ 503.875561][ T7059] path_mount+0x6db/0x1ea0 [ 503.875674][ T7059] ? user_path_at+0x32d/0x3d0 [ 503.875783][ T7059] __se_sys_mount+0x6eb/0x7d0 [ 503.875896][ T7059] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 503.876058][ T7059] __x64_sys_mount+0xe4/0x150 [ 503.876184][ T7059] x64_sys_call+0x3604/0x3e20 [ 503.876306][ T7059] do_syscall_64+0xd9/0x210 [ 503.876438][ T7059] ? irqentry_exit+0x16/0x60 [ 503.876553][ T7059] ? clear_bhb_loop+0x40/0x90 [ 503.876660][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.876764][ T7059] RIP: 0033:0x7f1c8b37ffba [ 503.876841][ T7059] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.876922][ T7059] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 503.877014][ T7059] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 503.877090][ T7059] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 503.877153][ T7059] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 503.877212][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 503.877269][ T7059] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 503.877349][ T7059] [ 504.182636][ T7059] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 505.355518][ T7065] loop0: detected capacity change from 0 to 32768 [ 505.384645][ T7065] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 505.393303][ T7065] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 505.424945][ T7065] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 505.439524][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 505.446953][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 505.580191][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 133ms [ 505.589061][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 505.596957][ T7065] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 505.689885][ T7065] syz.0.116: attempt to access beyond end of device [ 505.689885][ T7065] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 505.705346][ T7065] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 505.722638][ T7065] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 505.754904][ T7065] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 505.766140][ T7065] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 505.774805][ T7065] gfs2: fsid=syz:syz.0: File system withdrawn [ 505.781108][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.0.116 Tainted: G W syzkaller #0 PREEMPT(none) [ 505.781297][ T7065] Tainted: [W]=WARN [ 505.781355][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.781450][ T7065] Call Trace: [ 505.781506][ T7065] [ 505.781562][ T7065] __dump_stack+0x26/0x30 [ 505.781739][ T7065] dump_stack_lvl+0x1df/0x270 [ 505.781931][ T7065] dump_stack+0x1e/0x25 [ 505.782095][ T7065] gfs2_withdraw+0x1ec1/0x2020 [ 505.782308][ T7065] gfs2_metatype_check_ii+0x113/0x140 [ 505.782484][ T7065] gfs2_quota_init+0x25bf/0x2730 [ 505.782754][ T7065] gfs2_make_fs_rw+0x1d5/0x460 [ 505.782880][ T7065] gfs2_fill_super+0x3d31/0x3f50 [ 505.782987][ T7065] ? init_locking+0xed/0x500 [ 505.783110][ T7065] get_tree_bdev_flags+0x6e3/0x920 [ 505.783232][ T7065] ? __pfx_gfs2_fill_super+0x10/0x10 [ 505.783333][ T7065] ? __pfx_gfs2_fill_super+0x10/0x10 [ 505.783429][ T7065] ? __pfx_gfs2_get_tree+0x10/0x10 [ 505.783585][ T7065] get_tree_bdev+0x38/0x50 [ 505.783763][ T7065] gfs2_get_tree+0x57/0x350 [ 505.783864][ T7065] ? __pfx_gfs2_get_tree+0x10/0x10 [ 505.783973][ T7065] vfs_get_tree+0xb3/0x5c0 [ 505.784083][ T7065] ? mount_capable+0x99/0x100 [ 505.784189][ T7065] do_new_mount+0x733/0x14b0 [ 505.784297][ T7065] ? apparmor_capable+0x32d/0x410 [ 505.784417][ T7065] ? kmsan_get_metadata+0xfb/0x160 [ 505.784546][ T7065] path_mount+0x6db/0x1ea0 [ 505.784660][ T7065] ? user_path_at+0x32d/0x3d0 [ 505.784769][ T7065] __se_sys_mount+0x6eb/0x7d0 [ 505.784886][ T7065] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 505.785047][ T7065] __x64_sys_mount+0xe4/0x150 [ 505.785170][ T7065] x64_sys_call+0x3604/0x3e20 [ 505.785293][ T7065] do_syscall_64+0xd9/0x210 [ 505.785423][ T7065] ? irqentry_exit+0x16/0x60 [ 505.785537][ T7065] ? clear_bhb_loop+0x40/0x90 [ 505.785645][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.785747][ T7065] RIP: 0033:0x7f1c8b37ffba [ 505.785827][ T7065] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.785911][ T7065] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 505.786005][ T7065] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 505.786072][ T7065] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 505.786133][ T7065] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 505.786194][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 505.786249][ T7065] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 505.786331][ T7065] [ 506.092567][ T7065] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:15 executed programs: 104 [ 507.264776][ T7071] loop0: detected capacity change from 0 to 32768 [ 507.294327][ T7071] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 507.303218][ T7071] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 507.332522][ T7071] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 507.346510][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 507.353702][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 507.480657][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 507.490055][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 507.496307][ T7071] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 507.595758][ T7071] syz.0.117: attempt to access beyond end of device [ 507.595758][ T7071] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 507.611108][ T7071] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=4), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 507.628319][ T7071] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 507.659421][ T7071] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 507.669243][ T7071] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 507.677575][ T7071] gfs2: fsid=syz:syz.0: File system withdrawn [ 507.685566][ T7071] CPU: 0 UID: 0 PID: 7071 Comm: syz.0.117 Tainted: G W syzkaller #0 PREEMPT(none) [ 507.685753][ T7071] Tainted: [W]=WARN [ 507.685806][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.685902][ T7071] Call Trace: [ 507.685957][ T7071] [ 507.686013][ T7071] __dump_stack+0x26/0x30 [ 507.686194][ T7071] dump_stack_lvl+0x1df/0x270 [ 507.686379][ T7071] dump_stack+0x1e/0x25 [ 507.686490][ T7071] gfs2_withdraw+0x1ec1/0x2020 [ 507.686627][ T7071] gfs2_metatype_check_ii+0x113/0x140 [ 507.686743][ T7071] gfs2_quota_init+0x25bf/0x2730 [ 507.686920][ T7071] gfs2_make_fs_rw+0x1d5/0x460 [ 507.687034][ T7071] gfs2_fill_super+0x3d31/0x3f50 [ 507.687139][ T7071] ? init_locking+0xed/0x500 [ 507.687260][ T7071] get_tree_bdev_flags+0x6e3/0x920 [ 507.687377][ T7071] ? __pfx_gfs2_fill_super+0x10/0x10 [ 507.687478][ T7071] ? __pfx_gfs2_fill_super+0x10/0x10 [ 507.687576][ T7071] ? __pfx_gfs2_get_tree+0x10/0x10 [ 507.687673][ T7071] get_tree_bdev+0x38/0x50 [ 507.687789][ T7071] gfs2_get_tree+0x57/0x350 [ 507.687888][ T7071] ? __pfx_gfs2_get_tree+0x10/0x10 [ 507.687989][ T7071] vfs_get_tree+0xb3/0x5c0 [ 507.688150][ T7071] ? mount_capable+0x99/0x100 [ 507.688312][ T7071] do_new_mount+0x733/0x14b0 [ 507.688484][ T7071] ? apparmor_capable+0x32d/0x410 [ 507.688673][ T7071] ? kmsan_get_metadata+0xfb/0x160 [ 507.688879][ T7071] path_mount+0x6db/0x1ea0 [ 507.689058][ T7071] ? user_path_at+0x32d/0x3d0 [ 507.689228][ T7071] __se_sys_mount+0x6eb/0x7d0 [ 507.689414][ T7071] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 507.689684][ T7071] __x64_sys_mount+0xe4/0x150 [ 507.689819][ T7071] x64_sys_call+0x3604/0x3e20 [ 507.689941][ T7071] do_syscall_64+0xd9/0x210 [ 507.690073][ T7071] ? irqentry_exit+0x16/0x60 [ 507.690190][ T7071] ? clear_bhb_loop+0x40/0x90 [ 507.690295][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.690399][ T7071] RIP: 0033:0x7f1c8b37ffba [ 507.690478][ T7071] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.690559][ T7071] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 507.690652][ T7071] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 507.690722][ T7071] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 507.690785][ T7071] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 507.690844][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 507.690902][ T7071] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 507.690986][ T7071] [ 507.992748][ T7071] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 509.167252][ T7077] loop0: detected capacity change from 0 to 32768 [ 509.195698][ T7077] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 509.204271][ T7077] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 509.237636][ T7077] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 509.250130][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 509.257513][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 509.389325][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms [ 509.398245][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 509.406036][ T7077] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 509.510049][ T7077] syz.0.118: attempt to access beyond end of device [ 509.510049][ T7077] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 509.525636][ T7077] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 509.543754][ T7077] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 509.568777][ T7077] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 509.577889][ T7077] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 509.585777][ T7077] gfs2: fsid=syz:syz.0: File system withdrawn [ 509.592045][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.0.118 Tainted: G W syzkaller #0 PREEMPT(none) [ 509.592240][ T7077] Tainted: [W]=WARN [ 509.592299][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 509.592396][ T7077] Call Trace: [ 509.592455][ T7077] [ 509.592523][ T7077] __dump_stack+0x26/0x30 [ 509.592704][ T7077] dump_stack_lvl+0x1df/0x270 [ 509.592889][ T7077] dump_stack+0x1e/0x25 [ 509.593054][ T7077] gfs2_withdraw+0x1ec1/0x2020 [ 509.593267][ T7077] gfs2_metatype_check_ii+0x113/0x140 [ 509.593453][ T7077] gfs2_quota_init+0x25bf/0x2730 [ 509.593747][ T7077] gfs2_make_fs_rw+0x1d5/0x460 [ 509.593926][ T7077] gfs2_fill_super+0x3d31/0x3f50 [ 509.594095][ T7077] ? init_locking+0xed/0x500 [ 509.594292][ T7077] get_tree_bdev_flags+0x6e3/0x920 [ 509.594484][ T7077] ? __pfx_gfs2_fill_super+0x10/0x10 [ 509.594660][ T7077] ? __pfx_gfs2_fill_super+0x10/0x10 [ 509.594815][ T7077] ? __pfx_gfs2_get_tree+0x10/0x10 [ 509.594977][ T7077] get_tree_bdev+0x38/0x50 [ 509.595154][ T7077] gfs2_get_tree+0x57/0x350 [ 509.595326][ T7077] ? __pfx_gfs2_get_tree+0x10/0x10 [ 509.595485][ T7077] vfs_get_tree+0xb3/0x5c0 [ 509.595671][ T7077] ? mount_capable+0x99/0x100 [ 509.595841][ T7077] do_new_mount+0x733/0x14b0 [ 509.596016][ T7077] ? apparmor_capable+0x32d/0x410 [ 509.596205][ T7077] ? kmsan_get_metadata+0xfb/0x160 [ 509.596414][ T7077] path_mount+0x6db/0x1ea0 [ 509.596605][ T7077] ? user_path_at+0x32d/0x3d0 [ 509.596779][ T7077] __se_sys_mount+0x6eb/0x7d0 [ 509.596966][ T7077] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 509.597220][ T7077] __x64_sys_mount+0xe4/0x150 [ 509.597420][ T7077] x64_sys_call+0x3604/0x3e20 [ 509.597619][ T7077] do_syscall_64+0xd9/0x210 [ 509.597829][ T7077] ? irqentry_exit+0x16/0x60 [ 509.598017][ T7077] ? clear_bhb_loop+0x40/0x90 [ 509.598184][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.598350][ T7077] RIP: 0033:0x7f1c8b37ffba [ 509.598475][ T7077] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.598611][ T7077] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 509.598755][ T7077] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 509.598862][ T7077] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 509.598961][ T7077] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 509.599055][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 509.599148][ T7077] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 509.599289][ T7077] [ 509.932604][ T7077] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 511.094935][ T7083] loop0: detected capacity change from 0 to 32768 [ 511.126357][ T7083] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 511.135016][ T7083] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 511.167930][ T7083] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 511.184635][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 511.191730][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 511.322802][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms [ 511.331302][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 511.337333][ T7083] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 511.445998][ T7083] syz.0.119: attempt to access beyond end of device [ 511.445998][ T7083] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 511.488936][ T7083] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 511.504671][ T7083] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 511.529616][ T7083] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 511.538697][ T7083] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 511.546619][ T7083] gfs2: fsid=syz:syz.0: File system withdrawn [ 511.553133][ T7083] CPU: 0 UID: 0 PID: 7083 Comm: syz.0.119 Tainted: G W syzkaller #0 PREEMPT(none) [ 511.553314][ T7083] Tainted: [W]=WARN [ 511.553381][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 511.553472][ T7083] Call Trace: [ 511.553529][ T7083] [ 511.553583][ T7083] __dump_stack+0x26/0x30 [ 511.553761][ T7083] dump_stack_lvl+0x1df/0x270 [ 511.553948][ T7083] dump_stack+0x1e/0x25 [ 511.554072][ T7083] gfs2_withdraw+0x1ec1/0x2020 [ 511.554209][ T7083] gfs2_meta_check_ii+0xd7/0x100 [ 511.554317][ T7083] gfs2_quota_init+0x256f/0x2730 [ 511.554509][ T7083] gfs2_make_fs_rw+0x1d5/0x460 [ 511.554624][ T7083] gfs2_fill_super+0x3d31/0x3f50 [ 511.554734][ T7083] ? init_locking+0xed/0x500 [ 511.554858][ T7083] get_tree_bdev_flags+0x6e3/0x920 [ 511.554978][ T7083] ? __pfx_gfs2_fill_super+0x10/0x10 [ 511.555080][ T7083] ? __pfx_gfs2_fill_super+0x10/0x10 [ 511.555179][ T7083] ? __pfx_gfs2_get_tree+0x10/0x10 [ 511.555276][ T7083] get_tree_bdev+0x38/0x50 [ 511.555391][ T7083] gfs2_get_tree+0x57/0x350 [ 511.555491][ T7083] ? __pfx_gfs2_get_tree+0x10/0x10 [ 511.555593][ T7083] vfs_get_tree+0xb3/0x5c0 [ 511.555714][ T7083] ? mount_capable+0x99/0x100 [ 511.555822][ T7083] do_new_mount+0x733/0x14b0 [ 511.555932][ T7083] ? apparmor_capable+0x32d/0x410 [ 511.556051][ T7083] ? kmsan_get_metadata+0xfb/0x160 [ 511.556178][ T7083] path_mount+0x6db/0x1ea0 [ 511.556294][ T7083] ? user_path_at+0x32d/0x3d0 [ 511.556407][ T7083] __se_sys_mount+0x6eb/0x7d0 [ 511.556560][ T7083] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 511.556800][ T7083] __x64_sys_mount+0xe4/0x150 [ 511.556924][ T7083] x64_sys_call+0x3604/0x3e20 [ 511.557046][ T7083] do_syscall_64+0xd9/0x210 [ 511.557179][ T7083] ? irqentry_exit+0x16/0x60 [ 511.557294][ T7083] ? clear_bhb_loop+0x40/0x90 [ 511.557411][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.557517][ T7083] RIP: 0033:0x7f1c8b37ffba [ 511.557594][ T7083] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.557678][ T7083] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 511.557767][ T7083] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 511.557834][ T7083] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 511.557895][ T7083] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 511.557955][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 511.558013][ T7083] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 511.558095][ T7083] [ 511.852808][ T7083] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:21 executed programs: 107 [ 513.037308][ T7090] loop0: detected capacity change from 0 to 32768 [ 513.068859][ T7090] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 513.077474][ T7090] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 513.101961][ T7090] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 513.126681][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 513.134022][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 513.261150][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 513.269950][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 513.278301][ T7090] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 513.376816][ T7090] syz.0.120: attempt to access beyond end of device [ 513.376816][ T7090] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 513.417446][ T7090] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 513.434623][ T7090] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 513.460116][ T7090] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 513.469192][ T7090] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 513.476837][ T7090] gfs2: fsid=syz:syz.0: File system withdrawn [ 513.483283][ T7090] CPU: 0 UID: 0 PID: 7090 Comm: syz.0.120 Tainted: G W syzkaller #0 PREEMPT(none) [ 513.483459][ T7090] Tainted: [W]=WARN [ 513.483516][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 513.483609][ T7090] Call Trace: [ 513.483664][ T7090] [ 513.483721][ T7090] __dump_stack+0x26/0x30 [ 513.483865][ T7090] dump_stack_lvl+0x1df/0x270 [ 513.483981][ T7090] dump_stack+0x1e/0x25 [ 513.484086][ T7090] gfs2_withdraw+0x1ec1/0x2020 [ 513.484230][ T7090] gfs2_meta_check_ii+0xd7/0x100 [ 513.484334][ T7090] gfs2_quota_init+0x256f/0x2730 [ 513.484506][ T7090] gfs2_make_fs_rw+0x1d5/0x460 [ 513.484617][ T7090] gfs2_fill_super+0x3d31/0x3f50 [ 513.484721][ T7090] ? init_locking+0xed/0x500 [ 513.484845][ T7090] get_tree_bdev_flags+0x6e3/0x920 [ 513.484962][ T7090] ? __pfx_gfs2_fill_super+0x10/0x10 [ 513.485064][ T7090] ? __pfx_gfs2_fill_super+0x10/0x10 [ 513.485165][ T7090] ? __pfx_gfs2_get_tree+0x10/0x10 [ 513.485264][ T7090] get_tree_bdev+0x38/0x50 [ 513.485373][ T7090] gfs2_get_tree+0x57/0x350 [ 513.485474][ T7090] ? __pfx_gfs2_get_tree+0x10/0x10 [ 513.485572][ T7090] vfs_get_tree+0xb3/0x5c0 [ 513.485684][ T7090] ? mount_capable+0x99/0x100 [ 513.485785][ T7090] do_new_mount+0x733/0x14b0 [ 513.485894][ T7090] ? apparmor_capable+0x32d/0x410 [ 513.486012][ T7090] ? kmsan_get_metadata+0xfb/0x160 [ 513.486145][ T7090] path_mount+0x6db/0x1ea0 [ 513.486260][ T7090] ? user_path_at+0x32d/0x3d0 [ 513.486367][ T7090] __se_sys_mount+0x6eb/0x7d0 [ 513.486483][ T7090] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 513.486641][ T7090] __x64_sys_mount+0xe4/0x150 [ 513.486762][ T7090] x64_sys_call+0x3604/0x3e20 [ 513.486883][ T7090] do_syscall_64+0xd9/0x210 [ 513.487011][ T7090] ? irqentry_exit+0x16/0x60 [ 513.487130][ T7090] ? clear_bhb_loop+0x40/0x90 [ 513.487238][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.487339][ T7090] RIP: 0033:0x7f1c8b37ffba [ 513.487418][ T7090] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.487499][ T7090] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 513.487590][ T7090] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 513.487655][ T7090] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 513.487717][ T7090] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 513.487778][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 513.487835][ T7090] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 513.487917][ T7090] [ 513.792863][ T7090] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 514.963716][ T7096] loop0: detected capacity change from 0 to 32768 [ 514.986981][ T7096] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 514.995783][ T7096] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 515.049364][ T7096] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 515.064756][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 515.071837][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 515.191027][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 119ms [ 515.201032][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 515.206918][ T7096] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 515.285675][ T7096] syz.0.121: attempt to access beyond end of device [ 515.285675][ T7096] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 515.302524][ T7096] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 515.320381][ T7096] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 515.352540][ T7096] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 515.361512][ T7096] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 515.371369][ T7096] gfs2: fsid=syz:syz.0: File system withdrawn [ 515.377825][ T7096] CPU: 1 UID: 0 PID: 7096 Comm: syz.0.121 Tainted: G W syzkaller #0 PREEMPT(none) [ 515.378016][ T7096] Tainted: [W]=WARN [ 515.378074][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.378170][ T7096] Call Trace: [ 515.378228][ T7096] [ 515.378282][ T7096] __dump_stack+0x26/0x30 [ 515.378467][ T7096] dump_stack_lvl+0x1df/0x270 [ 515.378659][ T7096] dump_stack+0x1e/0x25 [ 515.378823][ T7096] gfs2_withdraw+0x1ec1/0x2020 [ 515.379042][ T7096] gfs2_metatype_check_ii+0x113/0x140 [ 515.379217][ T7096] gfs2_quota_init+0x25bf/0x2730 [ 515.379493][ T7096] gfs2_make_fs_rw+0x1d5/0x460 [ 515.379670][ T7096] gfs2_fill_super+0x3d31/0x3f50 [ 515.379829][ T7096] ? init_locking+0xed/0x500 [ 515.380034][ T7096] get_tree_bdev_flags+0x6e3/0x920 [ 515.380227][ T7096] ? __pfx_gfs2_fill_super+0x10/0x10 [ 515.380393][ T7096] ? __pfx_gfs2_fill_super+0x10/0x10 [ 515.380548][ T7096] ? __pfx_gfs2_get_tree+0x10/0x10 [ 515.380709][ T7096] get_tree_bdev+0x38/0x50 [ 515.380889][ T7096] gfs2_get_tree+0x57/0x350 [ 515.381054][ T7096] ? __pfx_gfs2_get_tree+0x10/0x10 [ 515.381215][ T7096] vfs_get_tree+0xb3/0x5c0 [ 515.381391][ T7096] ? mount_capable+0x99/0x100 [ 515.381546][ T7096] do_new_mount+0x733/0x14b0 [ 515.381712][ T7096] ? apparmor_capable+0x32d/0x410 [ 515.381906][ T7096] ? kmsan_get_metadata+0xfb/0x160 [ 515.382105][ T7096] path_mount+0x6db/0x1ea0 [ 515.382288][ T7096] ? user_path_at+0x32d/0x3d0 [ 515.382459][ T7096] __se_sys_mount+0x6eb/0x7d0 [ 515.382644][ T7096] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 515.382898][ T7096] __x64_sys_mount+0xe4/0x150 [ 515.383087][ T7096] x64_sys_call+0x3604/0x3e20 [ 515.383274][ T7096] do_syscall_64+0xd9/0x210 [ 515.383477][ T7096] ? irqentry_exit+0x16/0x60 [ 515.383657][ T7096] ? clear_bhb_loop+0x40/0x90 [ 515.383829][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.384048][ T7096] RIP: 0033:0x7f1c8b37ffba [ 515.384168][ T7096] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.384294][ T7096] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 515.384433][ T7096] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 515.384541][ T7096] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 515.384637][ T7096] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 515.384739][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 515.384828][ T7096] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 515.384966][ T7096] [ 515.692703][ T7096] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 516.887625][ T7102] loop0: detected capacity change from 0 to 32768 [ 516.919510][ T7102] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 516.928286][ T7102] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 516.972544][ T7102] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 516.985690][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 516.993542][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 517.112303][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 118ms [ 517.120904][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 517.126574][ T7102] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 517.232546][ T7102] syz.0.122: attempt to access beyond end of device [ 517.232546][ T7102] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 517.248042][ T7102] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=1), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 517.265240][ T7102] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 517.293509][ T7102] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 517.302882][ T7102] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 517.310115][ T7102] gfs2: fsid=syz:syz.0: File system withdrawn [ 517.317901][ T7102] CPU: 0 UID: 0 PID: 7102 Comm: syz.0.122 Tainted: G W syzkaller #0 PREEMPT(none) [ 517.318081][ T7102] Tainted: [W]=WARN [ 517.318138][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 517.318231][ T7102] Call Trace: [ 517.318285][ T7102] [ 517.318340][ T7102] __dump_stack+0x26/0x30 [ 517.318521][ T7102] dump_stack_lvl+0x1df/0x270 [ 517.318708][ T7102] dump_stack+0x1e/0x25 [ 517.318881][ T7102] gfs2_withdraw+0x1ec1/0x2020 [ 517.319099][ T7102] gfs2_metatype_check_ii+0x113/0x140 [ 517.319279][ T7102] gfs2_quota_init+0x25bf/0x2730 [ 517.319558][ T7102] gfs2_make_fs_rw+0x1d5/0x460 [ 517.319743][ T7102] gfs2_fill_super+0x3d31/0x3f50 [ 517.319913][ T7102] ? init_locking+0xed/0x500 [ 517.320121][ T7102] get_tree_bdev_flags+0x6e3/0x920 [ 517.320314][ T7102] ? __pfx_gfs2_fill_super+0x10/0x10 [ 517.320480][ T7102] ? __pfx_gfs2_fill_super+0x10/0x10 [ 517.320637][ T7102] ? __pfx_gfs2_get_tree+0x10/0x10 [ 517.320800][ T7102] get_tree_bdev+0x38/0x50 [ 517.320973][ T7102] gfs2_get_tree+0x57/0x350 [ 517.321136][ T7102] ? __pfx_gfs2_get_tree+0x10/0x10 [ 517.321293][ T7102] vfs_get_tree+0xb3/0x5c0 [ 517.321471][ T7102] ? mount_capable+0x99/0x100 [ 517.321635][ T7102] do_new_mount+0x733/0x14b0 [ 517.321817][ T7102] ? apparmor_capable+0x32d/0x410 [ 517.322007][ T7102] ? kmsan_get_metadata+0xfb/0x160 [ 517.322211][ T7102] path_mount+0x6db/0x1ea0 [ 517.322396][ T7102] ? user_path_at+0x32d/0x3d0 [ 517.322572][ T7102] __se_sys_mount+0x6eb/0x7d0 [ 517.322760][ T7102] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 517.323016][ T7102] __x64_sys_mount+0xe4/0x150 [ 517.323210][ T7102] x64_sys_call+0x3604/0x3e20 [ 517.323391][ T7102] do_syscall_64+0xd9/0x210 [ 517.323596][ T7102] ? irqentry_exit+0x16/0x60 [ 517.323787][ T7102] ? clear_bhb_loop+0x40/0x90 [ 517.323959][ T7102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.324123][ T7102] RIP: 0033:0x7f1c8b37ffba [ 517.324246][ T7102] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.324369][ T7102] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 517.324512][ T7102] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 517.324618][ T7102] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 517.324726][ T7102] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 517.324825][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 517.324918][ T7102] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 517.325051][ T7102] [ 517.642619][ T7102] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:27 executed programs: 110 [ 518.885977][ T7110] loop0: detected capacity change from 0 to 32768 [ 518.916086][ T7110] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 518.924914][ T7110] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 518.961975][ T7110] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 518.977379][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 518.985256][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 519.108910][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms [ 519.117795][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 519.125304][ T7110] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 519.215613][ T7110] syz.0.123: attempt to access beyond end of device [ 519.215613][ T7110] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 519.230920][ T7110] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 519.248110][ T7110] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 519.281934][ T7110] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 519.291762][ T7110] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 519.300264][ T7110] gfs2: fsid=syz:syz.0: File system withdrawn [ 519.306772][ T7110] CPU: 0 UID: 0 PID: 7110 Comm: syz.0.123 Tainted: G W syzkaller #0 PREEMPT(none) [ 519.306958][ T7110] Tainted: [W]=WARN [ 519.307014][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.307107][ T7110] Call Trace: [ 519.307162][ T7110] [ 519.307217][ T7110] __dump_stack+0x26/0x30 [ 519.307399][ T7110] dump_stack_lvl+0x1df/0x270 [ 519.307593][ T7110] dump_stack+0x1e/0x25 [ 519.307757][ T7110] gfs2_withdraw+0x1ec1/0x2020 [ 519.307974][ T7110] gfs2_metatype_check_ii+0x113/0x140 [ 519.308150][ T7110] gfs2_quota_init+0x25bf/0x2730 [ 519.308441][ T7110] gfs2_make_fs_rw+0x1d5/0x460 [ 519.308619][ T7110] gfs2_fill_super+0x3d31/0x3f50 [ 519.308782][ T7110] ? init_locking+0xed/0x500 [ 519.308975][ T7110] get_tree_bdev_flags+0x6e3/0x920 [ 519.309163][ T7110] ? __pfx_gfs2_fill_super+0x10/0x10 [ 519.309325][ T7110] ? __pfx_gfs2_fill_super+0x10/0x10 [ 519.309471][ T7110] ? __pfx_gfs2_get_tree+0x10/0x10 [ 519.309634][ T7110] get_tree_bdev+0x38/0x50 [ 519.309806][ T7110] gfs2_get_tree+0x57/0x350 [ 519.309967][ T7110] ? __pfx_gfs2_get_tree+0x10/0x10 [ 519.310120][ T7110] vfs_get_tree+0xb3/0x5c0 [ 519.310254][ T7110] ? mount_capable+0x99/0x100 [ 519.310358][ T7110] do_new_mount+0x733/0x14b0 [ 519.310466][ T7110] ? apparmor_capable+0x32d/0x410 [ 519.310592][ T7110] ? kmsan_get_metadata+0xfb/0x160 [ 519.310721][ T7110] path_mount+0x6db/0x1ea0 [ 519.310836][ T7110] ? user_path_at+0x32d/0x3d0 [ 519.310945][ T7110] __se_sys_mount+0x6eb/0x7d0 [ 519.311059][ T7110] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 519.311222][ T7110] __x64_sys_mount+0xe4/0x150 [ 519.311346][ T7110] x64_sys_call+0x3604/0x3e20 [ 519.311466][ T7110] do_syscall_64+0xd9/0x210 [ 519.311604][ T7110] ? irqentry_exit+0x16/0x60 [ 519.311720][ T7110] ? clear_bhb_loop+0x40/0x90 [ 519.311825][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.311930][ T7110] RIP: 0033:0x7f1c8b37ffba [ 519.312007][ T7110] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.312086][ T7110] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 519.312212][ T7110] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 519.312311][ T7110] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 519.312411][ T7110] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 519.312506][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 519.312604][ T7110] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 519.312735][ T7110] [ 519.602726][ T7110] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 520.810395][ T7118] loop0: detected capacity change from 0 to 32768 [ 520.833747][ T7118] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 520.842114][ T7118] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 520.871900][ T7118] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 520.886505][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 520.893760][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 521.030538][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms [ 521.039237][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 521.045230][ T7118] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 521.105735][ T7118] syz.0.124: attempt to access beyond end of device [ 521.105735][ T7118] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 521.120986][ T7118] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 521.137679][ T7118] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 521.163953][ T7118] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 521.173094][ T7118] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 521.180281][ T7118] gfs2: fsid=syz:syz.0: File system withdrawn [ 521.186822][ T7118] CPU: 1 UID: 0 PID: 7118 Comm: syz.0.124 Tainted: G W syzkaller #0 PREEMPT(none) [ 521.187018][ T7118] Tainted: [W]=WARN [ 521.187077][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 521.187167][ T7118] Call Trace: [ 521.187223][ T7118] [ 521.187279][ T7118] __dump_stack+0x26/0x30 [ 521.187462][ T7118] dump_stack_lvl+0x1df/0x270 [ 521.187655][ T7118] dump_stack+0x1e/0x25 [ 521.187816][ T7118] gfs2_withdraw+0x1ec1/0x2020 [ 521.188032][ T7118] gfs2_meta_check_ii+0xd7/0x100 [ 521.188220][ T7118] gfs2_quota_init+0x256f/0x2730 [ 521.188507][ T7118] gfs2_make_fs_rw+0x1d5/0x460 [ 521.188688][ T7118] gfs2_fill_super+0x3d31/0x3f50 [ 521.188859][ T7118] ? init_locking+0xed/0x500 [ 521.189057][ T7118] get_tree_bdev_flags+0x6e3/0x920 [ 521.189253][ T7118] ? __pfx_gfs2_fill_super+0x10/0x10 [ 521.189417][ T7118] ? __pfx_gfs2_fill_super+0x10/0x10 [ 521.189583][ T7118] ? __pfx_gfs2_get_tree+0x10/0x10 [ 521.189744][ T7118] get_tree_bdev+0x38/0x50 [ 521.189923][ T7118] gfs2_get_tree+0x57/0x350 [ 521.190089][ T7118] ? __pfx_gfs2_get_tree+0x10/0x10 [ 521.190247][ T7118] vfs_get_tree+0xb3/0x5c0 [ 521.190427][ T7118] ? mount_capable+0x99/0x100 [ 521.190598][ T7118] do_new_mount+0x733/0x14b0 [ 521.190774][ T7118] ? apparmor_capable+0x32d/0x410 [ 521.190966][ T7118] ? kmsan_get_metadata+0xfb/0x160 [ 521.191173][ T7118] path_mount+0x6db/0x1ea0 [ 521.191357][ T7118] ? user_path_at+0x32d/0x3d0 [ 521.191538][ T7118] __se_sys_mount+0x6eb/0x7d0 [ 521.191722][ T7118] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 521.191979][ T7118] __x64_sys_mount+0xe4/0x150 [ 521.192183][ T7118] x64_sys_call+0x3604/0x3e20 [ 521.192367][ T7118] do_syscall_64+0xd9/0x210 [ 521.192586][ T7118] ? irqentry_exit+0x16/0x60 [ 521.192775][ T7118] ? clear_bhb_loop+0x40/0x90 [ 521.192943][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.193107][ T7118] RIP: 0033:0x7f1c8b37ffba [ 521.193234][ T7118] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.193357][ T7118] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 521.193508][ T7118] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 521.193617][ T7118] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 521.193717][ T7118] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 521.193816][ T7118] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 521.193907][ T7118] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 521.194045][ T7118] [ 521.492702][ T7118] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 522.701463][ T7126] loop0: detected capacity change from 0 to 32768 [ 522.740445][ T7126] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 522.749948][ T7126] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 522.773526][ T7126] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 522.786227][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 522.793493][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 522.910689][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 117ms [ 522.919303][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 522.925074][ T7126] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 523.019914][ T7126] syz.0.125: attempt to access beyond end of device [ 523.019914][ T7126] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 523.059050][ T7126] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 523.075367][ T7126] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 523.103231][ T7126] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 523.112596][ T7126] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 523.119797][ T7126] gfs2: fsid=syz:syz.0: File system withdrawn [ 523.126279][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz.0.125 Tainted: G W syzkaller #0 PREEMPT(none) [ 523.126467][ T7126] Tainted: [W]=WARN [ 523.126521][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 523.126613][ T7126] Call Trace: [ 523.126669][ T7126] [ 523.126732][ T7126] __dump_stack+0x26/0x30 [ 523.126934][ T7126] dump_stack_lvl+0x1df/0x270 [ 523.127119][ T7126] dump_stack+0x1e/0x25 [ 523.127281][ T7126] gfs2_withdraw+0x1ec1/0x2020 [ 523.127514][ T7126] gfs2_meta_check_ii+0xd7/0x100 [ 523.127685][ T7126] gfs2_quota_init+0x256f/0x2730 [ 523.127981][ T7126] gfs2_make_fs_rw+0x1d5/0x460 [ 523.128171][ T7126] gfs2_fill_super+0x3d31/0x3f50 [ 523.128345][ T7126] ? init_locking+0xed/0x500 [ 523.128546][ T7126] get_tree_bdev_flags+0x6e3/0x920 [ 523.128736][ T7126] ? __pfx_gfs2_fill_super+0x10/0x10 [ 523.128902][ T7126] ? __pfx_gfs2_fill_super+0x10/0x10 [ 523.129059][ T7126] ? __pfx_gfs2_get_tree+0x10/0x10 [ 523.129221][ T7126] get_tree_bdev+0x38/0x50 [ 523.129405][ T7126] gfs2_get_tree+0x57/0x350 [ 523.129568][ T7126] ? __pfx_gfs2_get_tree+0x10/0x10 [ 523.129730][ T7126] vfs_get_tree+0xb3/0x5c0 [ 523.129911][ T7126] ? mount_capable+0x99/0x100 [ 523.130074][ T7126] do_new_mount+0x733/0x14b0 [ 523.130250][ T7126] ? apparmor_capable+0x32d/0x410 [ 523.130445][ T7126] ? kmsan_get_metadata+0xfb/0x160 [ 523.130654][ T7126] path_mount+0x6db/0x1ea0 [ 523.130840][ T7126] ? user_path_at+0x32d/0x3d0 [ 523.131014][ T7126] __se_sys_mount+0x6eb/0x7d0 [ 523.131200][ T7126] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 523.131472][ T7126] __x64_sys_mount+0xe4/0x150 [ 523.131673][ T7126] x64_sys_call+0x3604/0x3e20 [ 523.131859][ T7126] do_syscall_64+0xd9/0x210 [ 523.132062][ T7126] ? irqentry_exit+0x16/0x60 [ 523.132244][ T7126] ? clear_bhb_loop+0x40/0x90 [ 523.132419][ T7126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.132588][ T7126] RIP: 0033:0x7f1c8b37ffba [ 523.132711][ T7126] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.132838][ T7126] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 523.132984][ T7126] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 523.133093][ T7126] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 523.133191][ T7126] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 523.133289][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 523.133393][ T7126] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 523.133527][ T7126] [ 523.452749][ T7126] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:32 executed programs: 113 [ 524.622420][ T7132] loop0: detected capacity change from 0 to 32768 [ 524.669143][ T7132] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 524.678195][ T7132] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 524.707928][ T7132] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 524.721719][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 524.729707][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 524.853577][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms [ 524.862397][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 524.868302][ T7132] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 524.961979][ T7132] syz.0.126: attempt to access beyond end of device [ 524.961979][ T7132] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 524.977581][ T7132] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 524.995537][ T7132] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 525.029573][ T7132] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 525.038782][ T7132] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 525.046450][ T7132] gfs2: fsid=syz:syz.0: File system withdrawn [ 525.053087][ T7132] CPU: 1 UID: 0 PID: 7132 Comm: syz.0.126 Tainted: G W syzkaller #0 PREEMPT(none) [ 525.053290][ T7132] Tainted: [W]=WARN [ 525.053344][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 525.053434][ T7132] Call Trace: [ 525.053488][ T7132] [ 525.053542][ T7132] __dump_stack+0x26/0x30 [ 525.053724][ T7132] dump_stack_lvl+0x1df/0x270 [ 525.053906][ T7132] dump_stack+0x1e/0x25 [ 525.054069][ T7132] gfs2_withdraw+0x1ec1/0x2020 [ 525.054281][ T7132] gfs2_metatype_check_ii+0x113/0x140 [ 525.054458][ T7132] gfs2_quota_init+0x25bf/0x2730 [ 525.054676][ T7132] gfs2_make_fs_rw+0x1d5/0x460 [ 525.054790][ T7132] gfs2_fill_super+0x3d31/0x3f50 [ 525.054895][ T7132] ? init_locking+0xed/0x500 [ 525.055018][ T7132] get_tree_bdev_flags+0x6e3/0x920 [ 525.055136][ T7132] ? __pfx_gfs2_fill_super+0x10/0x10 [ 525.055245][ T7132] ? __pfx_gfs2_fill_super+0x10/0x10 [ 525.055343][ T7132] ? __pfx_gfs2_get_tree+0x10/0x10 [ 525.055440][ T7132] get_tree_bdev+0x38/0x50 [ 525.055551][ T7132] gfs2_get_tree+0x57/0x350 [ 525.055651][ T7132] ? __pfx_gfs2_get_tree+0x10/0x10 [ 525.055749][ T7132] vfs_get_tree+0xb3/0x5c0 [ 525.055861][ T7132] ? mount_capable+0x99/0x100 [ 525.055962][ T7132] do_new_mount+0x733/0x14b0 [ 525.056072][ T7132] ? apparmor_capable+0x32d/0x410 [ 525.056196][ T7132] ? kmsan_get_metadata+0xfb/0x160 [ 525.056323][ T7132] path_mount+0x6db/0x1ea0 [ 525.056438][ T7132] ? user_path_at+0x32d/0x3d0 [ 525.056547][ T7132] __se_sys_mount+0x6eb/0x7d0 [ 525.056660][ T7132] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 525.056819][ T7132] __x64_sys_mount+0xe4/0x150 [ 525.056942][ T7132] x64_sys_call+0x3604/0x3e20 [ 525.057062][ T7132] do_syscall_64+0xd9/0x210 [ 525.057218][ T7132] ? irqentry_exit+0x16/0x60 [ 525.057336][ T7132] ? clear_bhb_loop+0x40/0x90 [ 525.057442][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.057544][ T7132] RIP: 0033:0x7f1c8b37ffba [ 525.057621][ T7132] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.057702][ T7132] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 525.057793][ T7132] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 525.057859][ T7132] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 525.057923][ T7132] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 525.057985][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 525.058044][ T7132] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 525.058142][ T7132] [ 525.346662][ T7132] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 526.514297][ T7138] loop0: detected capacity change from 0 to 32768 [ 526.544568][ T7138] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 526.553331][ T7138] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 526.591543][ T7138] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 526.606571][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 526.613899][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 526.736399][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 122ms [ 526.747627][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 526.753415][ T7138] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 526.857025][ T7138] syz.0.127: attempt to access beyond end of device [ 526.857025][ T7138] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 526.901935][ T7138] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 526.917931][ T7138] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 526.946596][ T7138] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 526.955699][ T7138] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 526.963345][ T7138] gfs2: fsid=syz:syz.0: File system withdrawn [ 526.969621][ T7138] CPU: 0 UID: 0 PID: 7138 Comm: syz.0.127 Tainted: G W syzkaller #0 PREEMPT(none) [ 526.969804][ T7138] Tainted: [W]=WARN [ 526.969859][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.969957][ T7138] Call Trace: [ 526.970016][ T7138] [ 526.970072][ T7138] __dump_stack+0x26/0x30 [ 526.970255][ T7138] dump_stack_lvl+0x1df/0x270 [ 526.970445][ T7138] dump_stack+0x1e/0x25 [ 526.970609][ T7138] gfs2_withdraw+0x1ec1/0x2020 [ 526.970829][ T7138] gfs2_meta_check_ii+0xd7/0x100 [ 526.971002][ T7138] gfs2_quota_init+0x256f/0x2730 [ 526.971288][ T7138] gfs2_make_fs_rw+0x1d5/0x460 [ 526.971467][ T7138] gfs2_fill_super+0x3d31/0x3f50 [ 526.971630][ T7138] ? init_locking+0xed/0x500 [ 526.971828][ T7138] get_tree_bdev_flags+0x6e3/0x920 [ 526.972029][ T7138] ? __pfx_gfs2_fill_super+0x10/0x10 [ 526.972188][ T7138] ? __pfx_gfs2_fill_super+0x10/0x10 [ 526.972342][ T7138] ? __pfx_gfs2_get_tree+0x10/0x10 [ 526.972500][ T7138] get_tree_bdev+0x38/0x50 [ 526.972677][ T7138] gfs2_get_tree+0x57/0x350 [ 526.972843][ T7138] ? __pfx_gfs2_get_tree+0x10/0x10 [ 526.973011][ T7138] vfs_get_tree+0xb3/0x5c0 [ 526.973189][ T7138] ? mount_capable+0x99/0x100 [ 526.973357][ T7138] do_new_mount+0x733/0x14b0 [ 526.973520][ T7138] ? apparmor_capable+0x32d/0x410 [ 526.973703][ T7138] ? kmsan_get_metadata+0xfb/0x160 [ 526.973905][ T7138] path_mount+0x6db/0x1ea0 [ 526.974095][ T7138] ? user_path_at+0x32d/0x3d0 [ 526.974272][ T7138] __se_sys_mount+0x6eb/0x7d0 [ 526.974456][ T7138] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 526.974710][ T7138] __x64_sys_mount+0xe4/0x150 [ 526.974906][ T7138] x64_sys_call+0x3604/0x3e20 [ 526.975105][ T7138] do_syscall_64+0xd9/0x210 [ 526.975311][ T7138] ? irqentry_exit+0x16/0x60 [ 526.975499][ T7138] ? clear_bhb_loop+0x40/0x90 [ 526.975668][ T7138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.975823][ T7138] RIP: 0033:0x7f1c8b37ffba [ 526.975951][ T7138] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.976077][ T7138] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 526.976215][ T7138] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 526.976321][ T7138] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 526.976419][ T7138] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 526.976513][ T7138] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 526.976606][ T7138] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 526.976738][ T7138] [ 527.282853][ T7138] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 528.696805][ T7144] loop0: detected capacity change from 0 to 32768 [ 528.727451][ T7144] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 528.736595][ T7144] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 528.850269][ T7144] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 528.865594][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 528.872885][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 529.048600][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 175ms [ 529.057413][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 529.063379][ T7144] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 529.153016][ T7144] syz.0.128: attempt to access beyond end of device [ 529.153016][ T7144] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 529.168876][ T7144] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 529.186255][ T7144] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 529.213819][ T7144] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 529.223451][ T7144] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 529.230637][ T7144] gfs2: fsid=syz:syz.0: File system withdrawn [ 529.237154][ T7144] CPU: 1 UID: 0 PID: 7144 Comm: syz.0.128 Tainted: G W syzkaller #0 PREEMPT(none) [ 529.237328][ T7144] Tainted: [W]=WARN [ 529.237382][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 529.237472][ T7144] Call Trace: [ 529.237552][ T7144] [ 529.237608][ T7144] __dump_stack+0x26/0x30 [ 529.237784][ T7144] dump_stack_lvl+0x1df/0x270 [ 529.237974][ T7144] dump_stack+0x1e/0x25 [ 529.238140][ T7144] gfs2_withdraw+0x1ec1/0x2020 [ 529.238359][ T7144] gfs2_meta_check_ii+0xd7/0x100 [ 529.238535][ T7144] gfs2_quota_init+0x256f/0x2730 [ 529.238818][ T7144] gfs2_make_fs_rw+0x1d5/0x460 [ 529.238996][ T7144] gfs2_fill_super+0x3d31/0x3f50 [ 529.239167][ T7144] ? init_locking+0xed/0x500 [ 529.239369][ T7144] get_tree_bdev_flags+0x6e3/0x920 [ 529.239570][ T7144] ? __pfx_gfs2_fill_super+0x10/0x10 [ 529.239737][ T7144] ? __pfx_gfs2_fill_super+0x10/0x10 [ 529.239892][ T7144] ? __pfx_gfs2_get_tree+0x10/0x10 [ 529.240053][ T7144] get_tree_bdev+0x38/0x50 [ 529.240229][ T7144] gfs2_get_tree+0x57/0x350 [ 529.240393][ T7144] ? __pfx_gfs2_get_tree+0x10/0x10 [ 529.240562][ T7144] vfs_get_tree+0xb3/0x5c0 [ 529.240740][ T7144] ? mount_capable+0x99/0x100 [ 529.240907][ T7144] do_new_mount+0x733/0x14b0 [ 529.241085][ T7144] ? apparmor_capable+0x32d/0x410 [ 529.241274][ T7144] ? kmsan_get_metadata+0xfb/0x160 [ 529.241483][ T7144] path_mount+0x6db/0x1ea0 [ 529.241677][ T7144] ? user_path_at+0x32d/0x3d0 [ 529.241850][ T7144] __se_sys_mount+0x6eb/0x7d0 [ 529.242037][ T7144] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 529.242285][ T7144] __x64_sys_mount+0xe4/0x150 [ 529.242481][ T7144] x64_sys_call+0x3604/0x3e20 [ 529.242682][ T7144] do_syscall_64+0xd9/0x210 [ 529.242890][ T7144] ? irqentry_exit+0x16/0x60 [ 529.243075][ T7144] ? clear_bhb_loop+0x40/0x90 [ 529.243243][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.243412][ T7144] RIP: 0033:0x7f1c8b37ffba [ 529.243545][ T7144] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.243675][ T7144] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 529.243828][ T7144] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 529.243933][ T7144] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 529.244038][ T7144] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 529.244138][ T7144] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 529.244233][ T7144] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 529.244368][ T7144] [ 529.542855][ T7144] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:39 executed programs: 116 [ 530.727518][ T7150] loop0: detected capacity change from 0 to 32768 [ 530.765251][ T7150] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 530.773888][ T7150] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 530.816783][ T7150] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 530.839400][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 530.846602][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 530.987443][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms [ 530.996148][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 531.001794][ T7150] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 531.094234][ T7150] syz.0.129: attempt to access beyond end of device [ 531.094234][ T7150] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 531.128803][ T7150] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 531.145407][ T7150] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 531.170457][ T7150] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 531.179509][ T7150] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 531.187141][ T7150] gfs2: fsid=syz:syz.0: File system withdrawn [ 531.193589][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.0.129 Tainted: G W syzkaller #0 PREEMPT(none) [ 531.193775][ T7150] Tainted: [W]=WARN [ 531.193842][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.193936][ T7150] Call Trace: [ 531.193992][ T7150] [ 531.194047][ T7150] __dump_stack+0x26/0x30 [ 531.194238][ T7150] dump_stack_lvl+0x1df/0x270 [ 531.194426][ T7150] dump_stack+0x1e/0x25 [ 531.194592][ T7150] gfs2_withdraw+0x1ec1/0x2020 [ 531.194811][ T7150] gfs2_meta_check_ii+0xd7/0x100 [ 531.194983][ T7150] gfs2_quota_init+0x256f/0x2730 [ 531.195262][ T7150] gfs2_make_fs_rw+0x1d5/0x460 [ 531.195451][ T7150] gfs2_fill_super+0x3d31/0x3f50 [ 531.195619][ T7150] ? init_locking+0xed/0x500 [ 531.195820][ T7150] get_tree_bdev_flags+0x6e3/0x920 [ 531.196012][ T7150] ? __pfx_gfs2_fill_super+0x10/0x10 [ 531.196176][ T7150] ? __pfx_gfs2_fill_super+0x10/0x10 [ 531.196342][ T7150] ? __pfx_gfs2_get_tree+0x10/0x10 [ 531.196504][ T7150] get_tree_bdev+0x38/0x50 [ 531.196681][ T7150] gfs2_get_tree+0x57/0x350 [ 531.196846][ T7150] ? __pfx_gfs2_get_tree+0x10/0x10 [ 531.197011][ T7150] vfs_get_tree+0xb3/0x5c0 [ 531.197190][ T7150] ? mount_capable+0x99/0x100 [ 531.197361][ T7150] do_new_mount+0x733/0x14b0 [ 531.197534][ T7150] ? apparmor_capable+0x32d/0x410 [ 531.197726][ T7150] ? kmsan_get_metadata+0xfb/0x160 [ 531.197935][ T7150] path_mount+0x6db/0x1ea0 [ 531.198121][ T7150] ? user_path_at+0x32d/0x3d0 [ 531.198299][ T7150] __se_sys_mount+0x6eb/0x7d0 [ 531.198481][ T7150] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 531.198737][ T7150] __x64_sys_mount+0xe4/0x150 [ 531.198935][ T7150] x64_sys_call+0x3604/0x3e20 [ 531.199126][ T7150] do_syscall_64+0xd9/0x210 [ 531.199338][ T7150] ? irqentry_exit+0x16/0x60 [ 531.199522][ T7150] ? clear_bhb_loop+0x40/0x90 [ 531.199688][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.199854][ T7150] RIP: 0033:0x7f1c8b37ffba [ 531.199974][ T7150] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.200100][ T7150] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 531.200207][ T7150] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 531.200276][ T7150] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 531.200341][ T7150] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 531.200402][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 531.200464][ T7150] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 531.200552][ T7150] [ 531.512627][ T7150] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 531.741361][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.748341][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.707396][ T7156] loop0: detected capacity change from 0 to 32768 [ 532.735235][ T7156] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 532.744117][ T7156] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 532.794736][ T7156] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 532.807965][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 532.816079][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 532.946071][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 129ms [ 532.954809][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 532.960442][ T7156] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 533.054391][ T7156] syz.0.130: attempt to access beyond end of device [ 533.054391][ T7156] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 533.099567][ T7156] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 533.115066][ T7156] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 533.140603][ T7156] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 533.149783][ T7156] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 533.157374][ T7156] gfs2: fsid=syz:syz.0: File system withdrawn [ 533.163779][ T7156] CPU: 1 UID: 0 PID: 7156 Comm: syz.0.130 Tainted: G W syzkaller #0 PREEMPT(none) [ 533.163958][ T7156] Tainted: [W]=WARN [ 533.164012][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.164104][ T7156] Call Trace: [ 533.164159][ T7156] [ 533.164212][ T7156] __dump_stack+0x26/0x30 [ 533.164399][ T7156] dump_stack_lvl+0x1df/0x270 [ 533.164582][ T7156] dump_stack+0x1e/0x25 [ 533.164746][ T7156] gfs2_withdraw+0x1ec1/0x2020 [ 533.164959][ T7156] gfs2_meta_check_ii+0xd7/0x100 [ 533.165068][ T7156] gfs2_quota_init+0x256f/0x2730 [ 533.165239][ T7156] gfs2_make_fs_rw+0x1d5/0x460 [ 533.165357][ T7156] gfs2_fill_super+0x3d31/0x3f50 [ 533.165461][ T7156] ? init_locking+0xed/0x500 [ 533.165584][ T7156] get_tree_bdev_flags+0x6e3/0x920 [ 533.165704][ T7156] ? __pfx_gfs2_fill_super+0x10/0x10 [ 533.165805][ T7156] ? __pfx_gfs2_fill_super+0x10/0x10 [ 533.165903][ T7156] ? __pfx_gfs2_get_tree+0x10/0x10 [ 533.166002][ T7156] get_tree_bdev+0x38/0x50 [ 533.166113][ T7156] gfs2_get_tree+0x57/0x350 [ 533.166212][ T7156] ? __pfx_gfs2_get_tree+0x10/0x10 [ 533.166311][ T7156] vfs_get_tree+0xb3/0x5c0 [ 533.166426][ T7156] ? mount_capable+0x99/0x100 [ 533.166527][ T7156] do_new_mount+0x733/0x14b0 [ 533.166635][ T7156] ? apparmor_capable+0x32d/0x410 [ 533.166752][ T7156] ? kmsan_get_metadata+0xfb/0x160 [ 533.166893][ T7156] path_mount+0x6db/0x1ea0 [ 533.167007][ T7156] ? user_path_at+0x32d/0x3d0 [ 533.167115][ T7156] __se_sys_mount+0x6eb/0x7d0 [ 533.167227][ T7156] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 533.167389][ T7156] __x64_sys_mount+0xe4/0x150 [ 533.167513][ T7156] x64_sys_call+0x3604/0x3e20 [ 533.167635][ T7156] do_syscall_64+0xd9/0x210 [ 533.167764][ T7156] ? irqentry_exit+0x16/0x60 [ 533.167879][ T7156] ? clear_bhb_loop+0x40/0x90 [ 533.167986][ T7156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.168090][ T7156] RIP: 0033:0x7f1c8b37ffba [ 533.168168][ T7156] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.168249][ T7156] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 533.168345][ T7156] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 533.168415][ T7156] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 533.168479][ T7156] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 533.168541][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 533.168598][ T7156] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 533.168682][ T7156] [ 533.482622][ T7156] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 534.673691][ T7162] loop0: detected capacity change from 0 to 32768 [ 534.694741][ T7162] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 534.703268][ T7162] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 534.737551][ T7162] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 534.751399][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 534.759538][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 534.879300][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 119ms [ 534.888120][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 534.899373][ T7162] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 534.966927][ T7162] syz.0.131: attempt to access beyond end of device [ 534.966927][ T7162] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 534.982253][ T7162] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=5), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 534.999255][ T7162] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 535.024163][ T7162] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 535.034682][ T7162] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 535.042083][ T7162] gfs2: fsid=syz:syz.0: File system withdrawn [ 535.048686][ T7162] CPU: 1 UID: 0 PID: 7162 Comm: syz.0.131 Tainted: G W syzkaller #0 PREEMPT(none) [ 535.048870][ T7162] Tainted: [W]=WARN [ 535.048933][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 535.049027][ T7162] Call Trace: [ 535.049080][ T7162] [ 535.049134][ T7162] __dump_stack+0x26/0x30 [ 535.049317][ T7162] dump_stack_lvl+0x1df/0x270 [ 535.049501][ T7162] dump_stack+0x1e/0x25 [ 535.049661][ T7162] gfs2_withdraw+0x1ec1/0x2020 [ 535.049874][ T7162] gfs2_metatype_check_ii+0x113/0x140 [ 535.050099][ T7162] gfs2_quota_init+0x25bf/0x2730 [ 535.050367][ T7162] gfs2_make_fs_rw+0x1d5/0x460 [ 535.050541][ T7162] gfs2_fill_super+0x3d31/0x3f50 [ 535.050706][ T7162] ? init_locking+0xed/0x500 [ 535.050891][ T7162] get_tree_bdev_flags+0x6e3/0x920 [ 535.051022][ T7162] ? __pfx_gfs2_fill_super+0x10/0x10 [ 535.051124][ T7162] ? __pfx_gfs2_fill_super+0x10/0x10 [ 535.051224][ T7162] ? __pfx_gfs2_get_tree+0x10/0x10 [ 535.051324][ T7162] get_tree_bdev+0x38/0x50 [ 535.051435][ T7162] gfs2_get_tree+0x57/0x350 [ 535.051536][ T7162] ? __pfx_gfs2_get_tree+0x10/0x10 [ 535.051633][ T7162] vfs_get_tree+0xb3/0x5c0 [ 535.051745][ T7162] ? mount_capable+0x99/0x100 [ 535.051846][ T7162] do_new_mount+0x733/0x14b0 [ 535.051960][ T7162] ? apparmor_capable+0x32d/0x410 [ 535.052079][ T7162] ? kmsan_get_metadata+0xfb/0x160 [ 535.052256][ T7162] path_mount+0x6db/0x1ea0 [ 535.052432][ T7162] ? user_path_at+0x32d/0x3d0 [ 535.052602][ T7162] __se_sys_mount+0x6eb/0x7d0 [ 535.052785][ T7162] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 535.053045][ T7162] __x64_sys_mount+0xe4/0x150 [ 535.053240][ T7162] x64_sys_call+0x3604/0x3e20 [ 535.053435][ T7162] do_syscall_64+0xd9/0x210 [ 535.053644][ T7162] ? irqentry_exit+0x16/0x60 [ 535.053830][ T7162] ? clear_bhb_loop+0x40/0x90 [ 535.054000][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.054113][ T7162] RIP: 0033:0x7f1c8b37ffba [ 535.054197][ T7162] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.054280][ T7162] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 535.054375][ T7162] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 535.054443][ T7162] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 535.054508][ T7162] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 535.054568][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 535.054627][ T7162] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 535.054710][ T7162] [ 535.352687][ T7162] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:44 executed programs: 119 [ 536.527113][ T7168] loop0: detected capacity change from 0 to 32768 [ 536.548907][ T7168] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 536.557417][ T7168] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 536.615107][ T7168] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 536.630015][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 536.637362][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 536.767597][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 130ms [ 536.776944][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 536.784851][ T7168] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 536.873447][ T7168] syz.0.132: attempt to access beyond end of device [ 536.873447][ T7168] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 536.890484][ T7168] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=4), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 536.907759][ T7168] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 536.935695][ T7168] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 536.944968][ T7168] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 536.952439][ T7168] gfs2: fsid=syz:syz.0: File system withdrawn [ 536.958797][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.0.132 Tainted: G W syzkaller #0 PREEMPT(none) [ 536.958976][ T7168] Tainted: [W]=WARN [ 536.959032][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 536.959127][ T7168] Call Trace: [ 536.959185][ T7168] [ 536.959240][ T7168] __dump_stack+0x26/0x30 [ 536.959424][ T7168] dump_stack_lvl+0x1df/0x270 [ 536.959612][ T7168] dump_stack+0x1e/0x25 [ 536.959794][ T7168] gfs2_withdraw+0x1ec1/0x2020 [ 536.960049][ T7168] gfs2_metatype_check_ii+0x113/0x140 [ 536.960241][ T7168] gfs2_quota_init+0x25bf/0x2730 [ 536.960532][ T7168] gfs2_make_fs_rw+0x1d5/0x460 [ 536.960781][ T7168] gfs2_fill_super+0x3d31/0x3f50 [ 536.960946][ T7168] ? init_locking+0xed/0x500 [ 536.961159][ T7168] get_tree_bdev_flags+0x6e3/0x920 [ 536.961353][ T7168] ? __pfx_gfs2_fill_super+0x10/0x10 [ 536.961517][ T7168] ? __pfx_gfs2_fill_super+0x10/0x10 [ 536.961685][ T7168] ? __pfx_gfs2_get_tree+0x10/0x10 [ 536.961845][ T7168] get_tree_bdev+0x38/0x50 [ 536.962013][ T7168] gfs2_get_tree+0x57/0x350 [ 536.962178][ T7168] ? __pfx_gfs2_get_tree+0x10/0x10 [ 536.962337][ T7168] vfs_get_tree+0xb3/0x5c0 [ 536.962513][ T7168] ? mount_capable+0x99/0x100 [ 536.962679][ T7168] do_new_mount+0x733/0x14b0 [ 536.962854][ T7168] ? apparmor_capable+0x32d/0x410 [ 536.963050][ T7168] ? kmsan_get_metadata+0xfb/0x160 [ 536.963268][ T7168] path_mount+0x6db/0x1ea0 [ 536.963461][ T7168] ? user_path_at+0x32d/0x3d0 [ 536.963643][ T7168] __se_sys_mount+0x6eb/0x7d0 [ 536.963827][ T7168] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 536.964078][ T7168] __x64_sys_mount+0xe4/0x150 [ 536.964276][ T7168] x64_sys_call+0x3604/0x3e20 [ 536.964472][ T7168] do_syscall_64+0xd9/0x210 [ 536.964684][ T7168] ? irqentry_exit+0x16/0x60 [ 536.964870][ T7168] ? clear_bhb_loop+0x40/0x90 [ 536.965035][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.965195][ T7168] RIP: 0033:0x7f1c8b37ffba [ 536.965313][ T7168] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.965445][ T7168] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 536.965601][ T7168] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 536.965710][ T7168] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 536.965809][ T7168] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 536.965905][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 536.965998][ T7168] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 536.966129][ T7168] [ 537.262755][ T7168] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 538.407596][ T7174] loop0: detected capacity change from 0 to 32768 [ 538.436940][ T7174] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 538.446163][ T7174] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 538.491770][ T7174] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 538.508457][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 538.516458][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 538.640579][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms [ 538.649236][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 538.655013][ T7174] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 538.754987][ T7174] syz.0.133: attempt to access beyond end of device [ 538.754987][ T7174] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 538.800121][ T7174] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 538.815785][ T7174] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 538.843419][ T7174] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 538.852613][ T7174] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 538.859804][ T7174] gfs2: fsid=syz:syz.0: File system withdrawn [ 538.866332][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.0.133 Tainted: G W syzkaller #0 PREEMPT(none) [ 538.866518][ T7174] Tainted: [W]=WARN [ 538.866572][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 538.866666][ T7174] Call Trace: [ 538.866723][ T7174] [ 538.866779][ T7174] __dump_stack+0x26/0x30 [ 538.866962][ T7174] dump_stack_lvl+0x1df/0x270 [ 538.867151][ T7174] dump_stack+0x1e/0x25 [ 538.867319][ T7174] gfs2_withdraw+0x1ec1/0x2020 [ 538.867533][ T7174] gfs2_meta_check_ii+0xd7/0x100 [ 538.867703][ T7174] gfs2_quota_init+0x256f/0x2730 [ 538.867982][ T7174] gfs2_make_fs_rw+0x1d5/0x460 [ 538.868163][ T7174] gfs2_fill_super+0x3d31/0x3f50 [ 538.868334][ T7174] ? init_locking+0xed/0x500 [ 538.868535][ T7174] get_tree_bdev_flags+0x6e3/0x920 [ 538.868727][ T7174] ? __pfx_gfs2_fill_super+0x10/0x10 [ 538.868885][ T7174] ? __pfx_gfs2_fill_super+0x10/0x10 [ 538.869039][ T7174] ? __pfx_gfs2_get_tree+0x10/0x10 [ 538.869197][ T7174] get_tree_bdev+0x38/0x50 [ 538.869377][ T7174] gfs2_get_tree+0x57/0x350 [ 538.869546][ T7174] ? __pfx_gfs2_get_tree+0x10/0x10 [ 538.869703][ T7174] vfs_get_tree+0xb3/0x5c0 [ 538.869883][ T7174] ? mount_capable+0x99/0x100 [ 538.870048][ T7174] do_new_mount+0x733/0x14b0 [ 538.870213][ T7174] ? apparmor_capable+0x32d/0x410 [ 538.870406][ T7174] ? kmsan_get_metadata+0xfb/0x160 [ 538.870622][ T7174] path_mount+0x6db/0x1ea0 [ 538.870806][ T7174] ? user_path_at+0x32d/0x3d0 [ 538.870978][ T7174] __se_sys_mount+0x6eb/0x7d0 [ 538.871166][ T7174] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 538.871427][ T7174] __x64_sys_mount+0xe4/0x150 [ 538.871628][ T7174] x64_sys_call+0x3604/0x3e20 [ 538.871826][ T7174] do_syscall_64+0xd9/0x210 [ 538.872039][ T7174] ? irqentry_exit+0x16/0x60 [ 538.872225][ T7174] ? clear_bhb_loop+0x40/0x90 [ 538.872392][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.872641][ T7174] RIP: 0033:0x7f1c8b37ffba [ 538.872768][ T7174] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.872902][ T7174] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 538.873048][ T7174] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 538.873165][ T7174] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 538.873266][ T7174] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 538.873362][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 538.873462][ T7174] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 538.873594][ T7174] [ 539.172587][ T7174] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 540.341215][ T7180] loop0: detected capacity change from 0 to 32768 [ 540.364310][ T7180] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 540.372829][ T7180] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 540.400402][ T7180] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 540.414817][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 540.421890][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 540.560728][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 138ms [ 540.569112][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 540.574978][ T7180] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 540.636640][ T7180] syz.0.134: attempt to access beyond end of device [ 540.636640][ T7180] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 540.672836][ T7180] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 540.688646][ T7180] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 540.714928][ T7180] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 540.723996][ T7180] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 540.731204][ T7180] gfs2: fsid=syz:syz.0: File system withdrawn [ 540.737760][ T7180] CPU: 0 UID: 0 PID: 7180 Comm: syz.0.134 Tainted: G W syzkaller #0 PREEMPT(none) [ 540.737943][ T7180] Tainted: [W]=WARN [ 540.738003][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 540.738098][ T7180] Call Trace: [ 540.738156][ T7180] [ 540.738212][ T7180] __dump_stack+0x26/0x30 [ 540.738389][ T7180] dump_stack_lvl+0x1df/0x270 [ 540.738580][ T7180] dump_stack+0x1e/0x25 [ 540.738750][ T7180] gfs2_withdraw+0x1ec1/0x2020 [ 540.738969][ T7180] gfs2_meta_check_ii+0xd7/0x100 [ 540.739140][ T7180] gfs2_quota_init+0x256f/0x2730 [ 540.739427][ T7180] gfs2_make_fs_rw+0x1d5/0x460 [ 540.739614][ T7180] gfs2_fill_super+0x3d31/0x3f50 [ 540.739785][ T7180] ? init_locking+0xed/0x500 [ 540.739982][ T7180] get_tree_bdev_flags+0x6e3/0x920 [ 540.740178][ T7180] ? __pfx_gfs2_fill_super+0x10/0x10 [ 540.740347][ T7180] ? __pfx_gfs2_fill_super+0x10/0x10 [ 540.740501][ T7180] ? __pfx_gfs2_get_tree+0x10/0x10 [ 540.740666][ T7180] get_tree_bdev+0x38/0x50 [ 540.740838][ T7180] gfs2_get_tree+0x57/0x350 [ 540.740995][ T7180] ? __pfx_gfs2_get_tree+0x10/0x10 [ 540.741156][ T7180] vfs_get_tree+0xb3/0x5c0 [ 540.741335][ T7180] ? mount_capable+0x99/0x100 [ 540.741499][ T7180] do_new_mount+0x733/0x14b0 [ 540.741679][ T7180] ? apparmor_capable+0x32d/0x410 [ 540.741872][ T7180] ? kmsan_get_metadata+0xfb/0x160 [ 540.742079][ T7180] path_mount+0x6db/0x1ea0 [ 540.742260][ T7180] ? user_path_at+0x32d/0x3d0 [ 540.742430][ T7180] __se_sys_mount+0x6eb/0x7d0 [ 540.742615][ T7180] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 540.742863][ T7180] __x64_sys_mount+0xe4/0x150 [ 540.743053][ T7180] x64_sys_call+0x3604/0x3e20 [ 540.743243][ T7180] do_syscall_64+0xd9/0x210 [ 540.743450][ T7180] ? irqentry_exit+0x16/0x60 [ 540.743635][ T7180] ? clear_bhb_loop+0x40/0x90 [ 540.743802][ T7180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.743974][ T7180] RIP: 0033:0x7f1c8b37ffba [ 540.744101][ T7180] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.744234][ T7180] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 540.744382][ T7180] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 540.744491][ T7180] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 540.744601][ T7180] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 540.744701][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 540.744796][ T7180] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 540.744931][ T7180] [ 541.052807][ T7180] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:50 executed programs: 122 [ 542.228676][ T7186] loop0: detected capacity change from 0 to 32768 [ 542.248444][ T7186] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 542.256986][ T7186] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 542.314108][ T7186] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 542.326894][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 542.334065][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 542.475727][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 141ms [ 542.484406][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 542.497858][ T7186] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 542.590081][ T7186] syz.0.135: attempt to access beyond end of device [ 542.590081][ T7186] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 542.625694][ T7186] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 542.641610][ T7186] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 542.666314][ T7186] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 542.675348][ T7186] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 542.682855][ T7186] gfs2: fsid=syz:syz.0: File system withdrawn [ 542.689188][ T7186] CPU: 1 UID: 0 PID: 7186 Comm: syz.0.135 Tainted: G W syzkaller #0 PREEMPT(none) [ 542.689370][ T7186] Tainted: [W]=WARN [ 542.689429][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 542.689522][ T7186] Call Trace: [ 542.689578][ T7186] [ 542.689637][ T7186] __dump_stack+0x26/0x30 [ 542.689820][ T7186] dump_stack_lvl+0x1df/0x270 [ 542.690011][ T7186] dump_stack+0x1e/0x25 [ 542.690184][ T7186] gfs2_withdraw+0x1ec1/0x2020 [ 542.690403][ T7186] gfs2_meta_check_ii+0xd7/0x100 [ 542.690576][ T7186] gfs2_quota_init+0x256f/0x2730 [ 542.690857][ T7186] gfs2_make_fs_rw+0x1d5/0x460 [ 542.691038][ T7186] gfs2_fill_super+0x3d31/0x3f50 [ 542.691215][ T7186] ? init_locking+0xed/0x500 [ 542.691415][ T7186] get_tree_bdev_flags+0x6e3/0x920 [ 542.691602][ T7186] ? __pfx_gfs2_fill_super+0x10/0x10 [ 542.691763][ T7186] ? __pfx_gfs2_fill_super+0x10/0x10 [ 542.691919][ T7186] ? __pfx_gfs2_get_tree+0x10/0x10 [ 542.692084][ T7186] get_tree_bdev+0x38/0x50 [ 542.692257][ T7186] gfs2_get_tree+0x57/0x350 [ 542.692421][ T7186] ? __pfx_gfs2_get_tree+0x10/0x10 [ 542.692578][ T7186] vfs_get_tree+0xb3/0x5c0 [ 542.692753][ T7186] ? mount_capable+0x99/0x100 [ 542.692921][ T7186] do_new_mount+0x733/0x14b0 [ 542.693098][ T7186] ? apparmor_capable+0x32d/0x410 [ 542.693288][ T7186] ? kmsan_get_metadata+0xfb/0x160 [ 542.693491][ T7186] path_mount+0x6db/0x1ea0 [ 542.693676][ T7186] ? user_path_at+0x32d/0x3d0 [ 542.693851][ T7186] __se_sys_mount+0x6eb/0x7d0 [ 542.694028][ T7186] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 542.694289][ T7186] __x64_sys_mount+0xe4/0x150 [ 542.694489][ T7186] x64_sys_call+0x3604/0x3e20 [ 542.694686][ T7186] do_syscall_64+0xd9/0x210 [ 542.694897][ T7186] ? irqentry_exit+0x16/0x60 [ 542.695090][ T7186] ? clear_bhb_loop+0x40/0x90 [ 542.695264][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.695435][ T7186] RIP: 0033:0x7f1c8b37ffba [ 542.695559][ T7186] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.695693][ T7186] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 542.695843][ T7186] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 542.695951][ T7186] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 542.696049][ T7186] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 542.696146][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 542.696239][ T7186] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 542.696370][ T7186] [ 542.992711][ T7186] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 544.162855][ T7192] loop0: detected capacity change from 0 to 32768 [ 544.190623][ T7192] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 544.199613][ T7192] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 544.244623][ T7192] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 544.259342][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 544.267235][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 544.387554][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 120ms [ 544.397034][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 544.402804][ T7192] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 544.487633][ T7192] syz.0.136: attempt to access beyond end of device [ 544.487633][ T7192] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 544.528201][ T7192] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 544.543844][ T7192] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 544.574057][ T7192] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 544.583253][ T7192] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 544.590462][ T7192] gfs2: fsid=syz:syz.0: File system withdrawn [ 544.597005][ T7192] CPU: 0 UID: 0 PID: 7192 Comm: syz.0.136 Tainted: G W syzkaller #0 PREEMPT(none) [ 544.597187][ T7192] Tainted: [W]=WARN [ 544.597244][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 544.597340][ T7192] Call Trace: [ 544.597393][ T7192] [ 544.597450][ T7192] __dump_stack+0x26/0x30 [ 544.597628][ T7192] dump_stack_lvl+0x1df/0x270 [ 544.597819][ T7192] dump_stack+0x1e/0x25 [ 544.597986][ T7192] gfs2_withdraw+0x1ec1/0x2020 [ 544.598198][ T7192] gfs2_meta_check_ii+0xd7/0x100 [ 544.598361][ T7192] gfs2_quota_init+0x256f/0x2730 [ 544.598639][ T7192] gfs2_make_fs_rw+0x1d5/0x460 [ 544.598825][ T7192] gfs2_fill_super+0x3d31/0x3f50 [ 544.598996][ T7192] ? init_locking+0xed/0x500 [ 544.599200][ T7192] get_tree_bdev_flags+0x6e3/0x920 [ 544.599436][ T7192] ? __pfx_gfs2_fill_super+0x10/0x10 [ 544.599601][ T7192] ? __pfx_gfs2_fill_super+0x10/0x10 [ 544.599755][ T7192] ? __pfx_gfs2_get_tree+0x10/0x10 [ 544.599930][ T7192] get_tree_bdev+0x38/0x50 [ 544.600107][ T7192] gfs2_get_tree+0x57/0x350 [ 544.600273][ T7192] ? __pfx_gfs2_get_tree+0x10/0x10 [ 544.600436][ T7192] vfs_get_tree+0xb3/0x5c0 [ 544.600615][ T7192] ? mount_capable+0x99/0x100 [ 544.600783][ T7192] do_new_mount+0x733/0x14b0 [ 544.600969][ T7192] ? apparmor_capable+0x32d/0x410 [ 544.601157][ T7192] ? kmsan_get_metadata+0xfb/0x160 [ 544.601380][ T7192] path_mount+0x6db/0x1ea0 [ 544.601567][ T7192] ? user_path_at+0x32d/0x3d0 [ 544.601742][ T7192] __se_sys_mount+0x6eb/0x7d0 [ 544.602014][ T7192] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 544.602263][ T7192] __x64_sys_mount+0xe4/0x150 [ 544.602456][ T7192] x64_sys_call+0x3604/0x3e20 [ 544.602660][ T7192] do_syscall_64+0xd9/0x210 [ 544.602871][ T7192] ? irqentry_exit+0x16/0x60 [ 544.603058][ T7192] ? clear_bhb_loop+0x40/0x90 [ 544.603225][ T7192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.603387][ T7192] RIP: 0033:0x7f1c8b37ffba [ 544.603511][ T7192] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.603640][ T7192] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 544.603784][ T7192] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 544.603896][ T7192] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 544.603997][ T7192] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 544.604086][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 544.604179][ T7192] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 544.604312][ T7192] [ 544.922702][ T7192] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 546.093868][ T7198] loop0: detected capacity change from 0 to 32768 [ 546.125547][ T7198] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 546.134376][ T7198] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 546.179025][ T7198] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 546.208516][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 546.215928][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 546.340030][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms [ 546.348742][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 546.355904][ T7198] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 546.440785][ T7198] syz.0.137: attempt to access beyond end of device [ 546.440785][ T7198] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 546.486354][ T7198] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 546.503276][ T7198] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 546.528651][ T7198] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 546.537713][ T7198] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 546.545694][ T7198] gfs2: fsid=syz:syz.0: File system withdrawn [ 546.552471][ T7198] CPU: 0 UID: 0 PID: 7198 Comm: syz.0.137 Tainted: G W syzkaller #0 PREEMPT(none) [ 546.552651][ T7198] Tainted: [W]=WARN [ 546.552715][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 546.552807][ T7198] Call Trace: [ 546.552863][ T7198] [ 546.552916][ T7198] __dump_stack+0x26/0x30 [ 546.553076][ T7198] dump_stack_lvl+0x1df/0x270 [ 546.553195][ T7198] dump_stack+0x1e/0x25 [ 546.553299][ T7198] gfs2_withdraw+0x1ec1/0x2020 [ 546.553434][ T7198] gfs2_meta_check_ii+0xd7/0x100 [ 546.553540][ T7198] gfs2_quota_init+0x256f/0x2730 [ 546.553718][ T7198] gfs2_make_fs_rw+0x1d5/0x460 [ 546.553828][ T7198] gfs2_fill_super+0x3d31/0x3f50 [ 546.553940][ T7198] ? init_locking+0xed/0x500 [ 546.554062][ T7198] get_tree_bdev_flags+0x6e3/0x920 [ 546.554184][ T7198] ? __pfx_gfs2_fill_super+0x10/0x10 [ 546.554284][ T7198] ? __pfx_gfs2_fill_super+0x10/0x10 [ 546.554383][ T7198] ? __pfx_gfs2_get_tree+0x10/0x10 [ 546.554480][ T7198] get_tree_bdev+0x38/0x50 [ 546.554591][ T7198] gfs2_get_tree+0x57/0x350 [ 546.554695][ T7198] ? __pfx_gfs2_get_tree+0x10/0x10 [ 546.554795][ T7198] vfs_get_tree+0xb3/0x5c0 [ 546.554905][ T7198] ? mount_capable+0x99/0x100 [ 546.555009][ T7198] do_new_mount+0x733/0x14b0 [ 546.555115][ T7198] ? apparmor_capable+0x32d/0x410 [ 546.555240][ T7198] ? kmsan_get_metadata+0xfb/0x160 [ 546.555368][ T7198] path_mount+0x6db/0x1ea0 [ 546.555485][ T7198] ? user_path_at+0x32d/0x3d0 [ 546.555657][ T7198] __se_sys_mount+0x6eb/0x7d0 [ 546.555835][ T7198] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 546.556000][ T7198] __x64_sys_mount+0xe4/0x150 [ 546.556122][ T7198] x64_sys_call+0x3604/0x3e20 [ 546.556244][ T7198] do_syscall_64+0xd9/0x210 [ 546.556377][ T7198] ? irqentry_exit+0x16/0x60 [ 546.556493][ T7198] ? clear_bhb_loop+0x40/0x90 [ 546.556600][ T7198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.556710][ T7198] RIP: 0033:0x7f1c8b37ffba [ 546.556787][ T7198] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.556869][ T7198] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 546.556957][ T7198] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 546.557024][ T7198] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 546.557085][ T7198] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 546.557146][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 546.557203][ T7198] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 546.557285][ T7198] [ 546.852543][ T7198] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 11:17:56 executed programs: 125 [ 548.044513][ T7204] loop0: detected capacity change from 0 to 32768 [ 548.077174][ T7204] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 548.085871][ T7204] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 548.130463][ T7204] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 548.144958][ T5911] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 548.151945][ T5911] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 548.277083][ T5911] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 548.285921][ T5911] gfs2: fsid=syz:syz.0: jid=0: Done [ 548.293803][ T7204] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 548.389287][ T7204] syz.0.138: attempt to access beyond end of device [ 548.389287][ T7204] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 548.427376][ T7204] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 548.443126][ T7204] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 548.470800][ T7204] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 548.480057][ T7204] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 548.487824][ T7204] gfs2: fsid=syz:syz.0: File system withdrawn [ 548.494258][ T7204] CPU: 0 UID: 0 PID: 7204 Comm: syz.0.138 Tainted: G W syzkaller #0 PREEMPT(none) [ 548.494439][ T7204] Tainted: [W]=WARN [ 548.494502][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.494600][ T7204] Call Trace: [ 548.494656][ T7204] [ 548.494714][ T7204] __dump_stack+0x26/0x30 [ 548.494894][ T7204] dump_stack_lvl+0x1df/0x270 [ 548.495077][ T7204] dump_stack+0x1e/0x25 [ 548.495239][ T7204] gfs2_withdraw+0x1ec1/0x2020 [ 548.495446][ T7204] gfs2_meta_check_ii+0xd7/0x100 [ 548.495618][ T7204] gfs2_quota_init+0x256f/0x2730 [ 548.495886][ T7204] gfs2_make_fs_rw+0x1d5/0x460 [ 548.496061][ T7204] gfs2_fill_super+0x3d31/0x3f50 [ 548.496221][ T7204] ? init_locking+0xed/0x500 [ 548.496417][ T7204] get_tree_bdev_flags+0x6e3/0x920 [ 548.496591][ T7204] ? __pfx_gfs2_fill_super+0x10/0x10 [ 548.496695][ T7204] ? __pfx_gfs2_fill_super+0x10/0x10 [ 548.496791][ T7204] ? __pfx_gfs2_get_tree+0x10/0x10 [ 548.496891][ T7204] get_tree_bdev+0x38/0x50 [ 548.497001][ T7204] gfs2_get_tree+0x57/0x350 [ 548.497102][ T7204] ? __pfx_gfs2_get_tree+0x10/0x10 [ 548.497202][ T7204] vfs_get_tree+0xb3/0x5c0 [ 548.497312][ T7204] ? mount_capable+0x99/0x100 [ 548.497415][ T7204] do_new_mount+0x733/0x14b0 [ 548.497528][ T7204] ? apparmor_capable+0x32d/0x410 [ 548.497648][ T7204] ? kmsan_get_metadata+0xfb/0x160 [ 548.497777][ T7204] path_mount+0x6db/0x1ea0 [ 548.497891][ T7204] ? user_path_at+0x32d/0x3d0 [ 548.497999][ T7204] __se_sys_mount+0x6eb/0x7d0 [ 548.498114][ T7204] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 548.498273][ T7204] __x64_sys_mount+0xe4/0x150 [ 548.498394][ T7204] x64_sys_call+0x3604/0x3e20 [ 548.498521][ T7204] do_syscall_64+0xd9/0x210 [ 548.498650][ T7204] ? irqentry_exit+0x16/0x60 [ 548.498766][ T7204] ? clear_bhb_loop+0x40/0x90 [ 548.498874][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.498978][ T7204] RIP: 0033:0x7f1c8b37ffba [ 548.499055][ T7204] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.499136][ T7204] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 548.499228][ T7204] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 548.499293][ T7204] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 548.499355][ T7204] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 548.499416][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 548.499477][ T7204] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 548.499560][ T7204] [ 548.792793][ T7204] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 549.950735][ T7210] loop0: detected capacity change from 0 to 32768 [ 549.980836][ T7210] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 549.989913][ T7210] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 550.026356][ T7210] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 550.038926][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 550.046940][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 550.173871][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 550.182616][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 550.188942][ T7210] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 550.294065][ T7210] syz.0.139: attempt to access beyond end of device [ 550.294065][ T7210] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 550.339436][ T7210] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 550.355036][ T7210] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 550.379240][ T7210] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 550.388342][ T7210] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 550.397196][ T7210] gfs2: fsid=syz:syz.0: File system withdrawn [ 550.403777][ T7210] CPU: 0 UID: 0 PID: 7210 Comm: syz.0.139 Tainted: G W syzkaller #0 PREEMPT(none) [ 550.403975][ T7210] Tainted: [W]=WARN [ 550.404031][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.404126][ T7210] Call Trace: [ 550.404183][ T7210] [ 550.404237][ T7210] __dump_stack+0x26/0x30 [ 550.404430][ T7210] dump_stack_lvl+0x1df/0x270 [ 550.404621][ T7210] dump_stack+0x1e/0x25 [ 550.404781][ T7210] gfs2_withdraw+0x1ec1/0x2020 [ 550.404991][ T7210] gfs2_meta_check_ii+0xd7/0x100 [ 550.405174][ T7210] gfs2_quota_init+0x256f/0x2730 [ 550.405459][ T7210] gfs2_make_fs_rw+0x1d5/0x460 [ 550.405638][ T7210] gfs2_fill_super+0x3d31/0x3f50 [ 550.405809][ T7210] ? init_locking+0xed/0x500 [ 550.406005][ T7210] get_tree_bdev_flags+0x6e3/0x920 [ 550.406197][ T7210] ? __pfx_gfs2_fill_super+0x10/0x10 [ 550.406368][ T7210] ? __pfx_gfs2_fill_super+0x10/0x10 [ 550.406528][ T7210] ? __pfx_gfs2_get_tree+0x10/0x10 [ 550.406689][ T7210] get_tree_bdev+0x38/0x50 [ 550.406866][ T7210] gfs2_get_tree+0x57/0x350 [ 550.407030][ T7210] ? __pfx_gfs2_get_tree+0x10/0x10 [ 550.407189][ T7210] vfs_get_tree+0xb3/0x5c0 [ 550.407373][ T7210] ? mount_capable+0x99/0x100 [ 550.407531][ T7210] do_new_mount+0x733/0x14b0 [ 550.407697][ T7210] ? apparmor_capable+0x32d/0x410 [ 550.407881][ T7210] ? kmsan_get_metadata+0xfb/0x160 [ 550.408089][ T7210] path_mount+0x6db/0x1ea0 [ 550.408274][ T7210] ? user_path_at+0x32d/0x3d0 [ 550.408458][ T7210] __se_sys_mount+0x6eb/0x7d0 [ 550.408643][ T7210] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 550.408899][ T7210] __x64_sys_mount+0xe4/0x150 [ 550.409093][ T7210] x64_sys_call+0x3604/0x3e20 [ 550.409293][ T7210] do_syscall_64+0xd9/0x210 [ 550.409498][ T7210] ? irqentry_exit+0x16/0x60 [ 550.409687][ T7210] ? clear_bhb_loop+0x40/0x90 [ 550.409855][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.410021][ T7210] RIP: 0033:0x7f1c8b37ffba [ 550.410149][ T7210] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.410281][ T7210] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 550.410428][ T7210] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 550.410533][ T7210] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 550.410635][ T7210] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 550.410732][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 550.410825][ T7210] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 550.410960][ T7210] [ 550.702605][ T7210] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 551.858017][ T7216] loop0: detected capacity change from 0 to 32768 [ 551.888774][ T7216] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 551.897519][ T7216] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 551.932825][ T7216] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 551.948211][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 551.956499][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 552.094532][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 138ms [ 552.103187][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 552.108777][ T7216] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 552.198765][ T7216] syz.0.140: attempt to access beyond end of device [ 552.198765][ T7216] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 552.213945][ T7216] ===================================================== [ 552.221116][ T7216] BUG: KMSAN: uninit-value in gfs2_quota_init+0x219f/0x2730 [ 552.228884][ T7216] gfs2_quota_init+0x219f/0x2730 [ 552.235142][ T7216] gfs2_make_fs_rw+0x1d5/0x460 [ 552.240128][ T7216] gfs2_fill_super+0x3d31/0x3f50 [ 552.245764][ T7216] get_tree_bdev_flags+0x6e3/0x920 [ 552.251066][ T7216] get_tree_bdev+0x38/0x50 [ 552.255798][ T7216] gfs2_get_tree+0x57/0x350 [ 552.260647][ T7216] vfs_get_tree+0xb3/0x5c0 [ 552.266473][ T7216] do_new_mount+0x733/0x14b0 [ 552.271296][ T7216] path_mount+0x6db/0x1ea0 [ 552.277313][ T7216] __se_sys_mount+0x6eb/0x7d0 [ 552.283554][ T7216] __x64_sys_mount+0xe4/0x150 [ 552.288440][ T7216] x64_sys_call+0x3604/0x3e20 [ 552.293746][ T7216] do_syscall_64+0xd9/0x210 [ 552.298543][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.304798][ T7216] [ 552.307209][ T7216] Uninit was created at: [ 552.311771][ T7216] __alloc_frozen_pages_noprof+0x689/0xf00 [ 552.318010][ T7216] alloc_pages_mpol+0x328/0x860 [ 552.323225][ T7216] folio_alloc_noprof+0x109/0x360 [ 552.328438][ T7216] filemap_alloc_folio_noprof+0x9d/0x420 [ 552.335612][ T7216] __filemap_get_folio+0xb45/0x1930 [ 552.341036][ T7216] gfs2_getbuf+0x246/0xce0 [ 552.346347][ T7216] gfs2_meta_ra+0x13c/0x720 [ 552.351057][ T7216] gfs2_quota_init+0x759/0x2730 [ 552.356485][ T7216] gfs2_make_fs_rw+0x1d5/0x460 [ 552.361425][ T7216] gfs2_fill_super+0x3d31/0x3f50 [ 552.366841][ T7216] get_tree_bdev_flags+0x6e3/0x920 [ 552.372367][ T7216] get_tree_bdev+0x38/0x50 [ 552.376967][ T7216] gfs2_get_tree+0x57/0x350 [ 552.381636][ T7216] vfs_get_tree+0xb3/0x5c0 [ 552.386451][ T7216] do_new_mount+0x733/0x14b0 [ 552.391415][ T7216] path_mount+0x6db/0x1ea0 [ 552.396229][ T7216] __se_sys_mount+0x6eb/0x7d0 [ 552.401201][ T7216] __x64_sys_mount+0xe4/0x150 [ 552.406402][ T7216] x64_sys_call+0x3604/0x3e20 [ 552.411312][ T7216] do_syscall_64+0xd9/0x210 [ 552.416560][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.422943][ T7216] [ 552.425557][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.0.140 Tainted: G W syzkaller #0 PREEMPT(none) [ 552.436924][ T7216] Tainted: [W]=WARN [ 552.441157][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 552.452601][ T7216] ===================================================== [ 552.459633][ T7216] Disabling lock debugging due to kernel taint [ 552.466581][ T7216] Kernel panic - not syncing: kmsan.panic set ... [ 552.473120][ T7216] CPU: 1 UID: 0 PID: 7216 Comm: syz.0.140 Tainted: G B W syzkaller #0 PREEMPT(none) [ 552.484097][ T7216] Tainted: [B]=BAD_PAGE, [W]=WARN [ 552.489216][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 552.499397][ T7216] Call Trace: [ 552.502772][ T7216] [ 552.505793][ T7216] __dump_stack+0x26/0x30 [ 552.510314][ T7216] dump_stack_lvl+0x53/0x270 [ 552.515081][ T7216] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.521114][ T7216] dump_stack+0x1e/0x25 [ 552.525445][ T7216] vpanic+0x361/0xc50 [ 552.529614][ T7216] panic+0x15d/0x160 [ 552.533735][ T7216] kmsan_report+0x31c/0x320 [ 552.538416][ T7216] ? __msan_warning+0x1b/0x30 [ 552.543247][ T7216] ? gfs2_quota_init+0x219f/0x2730 [ 552.548572][ T7216] ? gfs2_make_fs_rw+0x1d5/0x460 [ 552.553768][ T7216] ? gfs2_fill_super+0x3d31/0x3f50 [ 552.559048][ T7216] ? get_tree_bdev_flags+0x6e3/0x920 [ 552.564537][ T7216] ? get_tree_bdev+0x38/0x50 [ 552.569337][ T7216] ? gfs2_get_tree+0x57/0x350 [ 552.574204][ T7216] ? vfs_get_tree+0xb3/0x5c0 [ 552.579185][ T7216] ? do_new_mount+0x733/0x14b0 [ 552.584154][ T7216] ? path_mount+0x6db/0x1ea0 [ 552.588950][ T7216] ? __se_sys_mount+0x6eb/0x7d0 [ 552.594089][ T7216] ? __x64_sys_mount+0xe4/0x150 [ 552.599136][ T7216] ? x64_sys_call+0x3604/0x3e20 [ 552.604188][ T7216] ? do_syscall_64+0xd9/0x210 [ 552.609072][ T7216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.615334][ T7216] ? submit_bio+0x57c/0x630 [ 552.620020][ T7216] ? submit_bh_wbc+0x7e0/0x870 [ 552.625328][ T7216] ? kmsan_get_metadata+0xfb/0x160 [ 552.630635][ T7216] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.636642][ T7216] ? gfs2_meta_ra+0x68b/0x720 [ 552.641600][ T7216] ? kmsan_get_metadata+0xfb/0x160 [ 552.646913][ T7216] __msan_warning+0x1b/0x30 [ 552.651591][ T7216] gfs2_quota_init+0x219f/0x2730 [ 552.656822][ T7216] gfs2_make_fs_rw+0x1d5/0x460 [ 552.661787][ T7216] gfs2_fill_super+0x3d31/0x3f50 [ 552.666903][ T7216] ? init_locking+0xed/0x500 [ 552.671695][ T7216] get_tree_bdev_flags+0x6e3/0x920 [ 552.676973][ T7216] ? __pfx_gfs2_fill_super+0x10/0x10 [ 552.682486][ T7216] ? __pfx_gfs2_fill_super+0x10/0x10 [ 552.687940][ T7216] ? __pfx_gfs2_get_tree+0x10/0x10 [ 552.693163][ T7216] get_tree_bdev+0x38/0x50 [ 552.697837][ T7216] gfs2_get_tree+0x57/0x350 [ 552.702472][ T7216] ? __pfx_gfs2_get_tree+0x10/0x10 [ 552.707924][ T7216] vfs_get_tree+0xb3/0x5c0 [ 552.712466][ T7216] ? mount_capable+0x99/0x100 [ 552.717324][ T7216] do_new_mount+0x733/0x14b0 [ 552.722060][ T7216] ? apparmor_capable+0x32d/0x410 [ 552.727287][ T7216] ? kmsan_get_metadata+0xfb/0x160 [ 552.732565][ T7216] path_mount+0x6db/0x1ea0 [ 552.737164][ T7216] ? user_path_at+0x32d/0x3d0 [ 552.741940][ T7216] __se_sys_mount+0x6eb/0x7d0 [ 552.746729][ T7216] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 552.752981][ T7216] __x64_sys_mount+0xe4/0x150 [ 552.757851][ T7216] x64_sys_call+0x3604/0x3e20 [ 552.762727][ T7216] do_syscall_64+0xd9/0x210 [ 552.767469][ T7216] ? irqentry_exit+0x16/0x60 [ 552.772185][ T7216] ? clear_bhb_loop+0x40/0x90 [ 552.777027][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.783096][ T7216] RIP: 0033:0x7f1c8b37ffba [ 552.787566][ T7216] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.807281][ T7216] RSP: 002b:00007f1c8c1f1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 552.816062][ T7216] RAX: ffffffffffffffda RBX: 00007f1c8c1f1ef0 RCX: 00007f1c8b37ffba [ 552.824171][ T7216] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007f1c8c1f1eb0 [ 552.832224][ T7216] RBP: 0000000020000080 R08: 00007f1c8c1f1ef0 R09: 0000000000000000 [ 552.840319][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 552.848367][ T7216] R13: 00007f1c8c1f1eb0 R14: 0000000000012551 R15: 0000000020000000 [ 552.856439][ T7216] [ 552.859904][ T7216] Kernel Offset: disabled [ 552.864299][ T7216] Rebooting in 86400 seconds..