74c R15: 0000200000002240 [ 340.215767][ T7610] [ 340.215772][ T7610] gfs2: fsid=^..0: about to withdraw this file system [ 340.504122][ T7610] gfs2: fsid=^..0: can't make FS RW: -5 [ 340.516436][ T89] gfs2: fsid=^..0: file system withdrawn [ 340.916725][ T7616] loop0: detected capacity change from 0 to 32768 [ 340.940280][ T7616] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 340.949970][ T7616] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 340.976020][ T7616] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 340.987152][ T43] gfs2: fsid=^..0: jid=0, already locked for use [ 340.993745][ T43] gfs2: fsid=^..0: jid=0: Looking at journal... [ 341.028930][ T43] gfs2: fsid=^..0: jid=0: Journal head lookup took 35ms [ 341.036770][ T43] gfs2: fsid=^..0: jid=0: Done [ 341.042451][ T7616] gfs2: fsid=^..0: first mount done, others may mount [ 341.074554][ T7616] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 341.090159][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.0.277 Not tainted syzkaller #0 PREEMPT(full) [ 341.090181][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.090191][ T7616] Call Trace: [ 341.090199][ T7616] [ 341.090205][ T7616] dump_stack_lvl+0x189/0x250 [ 341.090226][ T7616] ? __pfx_gfs2_lm+0x10/0x10 [ 341.090241][ T7616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.090259][ T7616] ? folio_unlock+0x101/0x160 [ 341.090286][ T7616] gfs2_withdraw+0xc8/0x160 [ 341.090302][ T7616] gfs2_quota_init+0x1109/0x1200 [ 341.090325][ T7616] ? __lock_acquire+0xab9/0xd20 [ 341.090361][ T7616] ? __pfx_gfs2_quota_init+0x10/0x10 [ 341.090383][ T7616] ? __pfx_wake_up_bit+0x10/0x10 [ 341.090403][ T7616] ? inode_go_inval+0x2a0/0x360 [ 341.090420][ T7616] gfs2_make_fs_rw+0x143/0x220 [ 341.090440][ T7616] gfs2_fill_super+0x1bbf/0x2230 [ 341.090468][ T7616] ? __pfx_gfs2_fill_super+0x10/0x10 [ 341.090486][ T7616] ? init_locking+0xb8/0x210 [ 341.090500][ T7616] ? sb_set_blocksize+0x104/0x180 [ 341.090519][ T7616] ? setup_bdev_super+0x4c1/0x5b0 [ 341.090539][ T7616] get_tree_bdev_flags+0x40e/0x4d0 [ 341.090556][ T7616] ? __pfx_gfs2_fill_super+0x10/0x10 [ 341.090572][ T7616] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 341.090595][ T7616] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 341.090624][ T7616] gfs2_get_tree+0x51/0x1e0 [ 341.090642][ T7616] vfs_get_tree+0x92/0x2b0 [ 341.090661][ T7616] do_new_mount+0x302/0xa10 [ 341.090678][ T7616] ? apparmor_capable+0x137/0x1b0 [ 341.090704][ T7616] ? __pfx_do_new_mount+0x10/0x10 [ 341.090722][ T7616] ? ns_capable+0x8a/0xf0 [ 341.090745][ T7616] ? kmem_cache_free+0x19b/0x690 [ 341.090771][ T7616] __se_sys_mount+0x313/0x410 [ 341.090794][ T7616] ? __pfx___se_sys_mount+0x10/0x10 [ 341.090816][ T7616] ? do_syscall_64+0xbe/0xfa0 [ 341.090834][ T7616] ? __x64_sys_mount+0x20/0xc0 [ 341.090855][ T7616] do_syscall_64+0xfa/0xfa0 [ 341.090872][ T7616] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.090891][ T7616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.090905][ T7616] ? clear_bhb_loop+0x60/0xb0 [ 341.090924][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.090938][ T7616] RIP: 0033:0x7fa1d819066a [ 341.090952][ T7616] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.090964][ T7616] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 341.090981][ T7616] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 341.090992][ T7616] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 341.091003][ T7616] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 341.091013][ T7616] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 341.091023][ T7616] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 341.091048][ T7616] [ 341.091053][ T7616] gfs2: fsid=^..0: about to withdraw this file system [ 341.388682][ T43] gfs2: fsid=^..0: file system withdrawn [ 341.394150][ T7616] gfs2: fsid=^..0: can't make FS RW: -5 [ 341.801909][ T7622] loop0: detected capacity change from 0 to 32768 [ 341.824953][ T7622] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 341.832308][ T7622] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 341.847770][ T7622] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 341.856713][ T89] gfs2: fsid=^..0: jid=0, already locked for use [ 341.863179][ T89] gfs2: fsid=^..0: jid=0: Looking at journal... [ 341.923576][ T89] gfs2: fsid=^..0: jid=0: Journal head lookup took 60ms [ 341.933170][ T89] gfs2: fsid=^..0: jid=0: Done [ 341.938652][ T7622] gfs2: fsid=^..0: first mount done, others may mount [ 341.978172][ T7622] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 341.994204][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: syz.0.278 Not tainted syzkaller #0 PREEMPT(full) [ 341.994240][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.994250][ T7622] Call Trace: [ 341.994257][ T7622] [ 341.994263][ T7622] dump_stack_lvl+0x189/0x250 [ 341.994284][ T7622] ? __pfx_gfs2_lm+0x10/0x10 [ 341.994299][ T7622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.994329][ T7622] gfs2_withdraw+0xc8/0x160 [ 341.994345][ T7622] gfs2_quota_init+0x1109/0x1200 [ 341.994367][ T7622] ? __lock_acquire+0xab9/0xd20 [ 341.994401][ T7622] ? __pfx_gfs2_quota_init+0x10/0x10 [ 341.994423][ T7622] ? __pfx_wake_up_bit+0x10/0x10 [ 341.994443][ T7622] ? inode_go_inval+0x2a0/0x360 [ 341.994460][ T7622] gfs2_make_fs_rw+0x143/0x220 [ 341.994482][ T7622] gfs2_fill_super+0x1bbf/0x2230 [ 341.994509][ T7622] ? __pfx_gfs2_fill_super+0x10/0x10 [ 341.994528][ T7622] ? init_locking+0xb8/0x210 [ 341.994542][ T7622] ? sb_set_blocksize+0x104/0x180 [ 341.994561][ T7622] ? setup_bdev_super+0x4c1/0x5b0 [ 341.994581][ T7622] get_tree_bdev_flags+0x40e/0x4d0 [ 341.994599][ T7622] ? __pfx_gfs2_fill_super+0x10/0x10 [ 341.994614][ T7622] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 341.994630][ T7622] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 341.994659][ T7622] gfs2_get_tree+0x51/0x1e0 [ 341.994677][ T7622] vfs_get_tree+0x92/0x2b0 [ 341.994696][ T7622] do_new_mount+0x302/0xa10 [ 341.994713][ T7622] ? apparmor_capable+0x137/0x1b0 [ 341.994738][ T7622] ? __pfx_do_new_mount+0x10/0x10 [ 341.994756][ T7622] ? ns_capable+0x8a/0xf0 [ 341.994779][ T7622] ? kmem_cache_free+0x19b/0x690 [ 341.994805][ T7622] __se_sys_mount+0x313/0x410 [ 341.994828][ T7622] ? __pfx___se_sys_mount+0x10/0x10 [ 341.994850][ T7622] ? do_syscall_64+0xbe/0xfa0 [ 341.994868][ T7622] ? __x64_sys_mount+0x20/0xc0 [ 341.994888][ T7622] do_syscall_64+0xfa/0xfa0 [ 341.994906][ T7622] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.994924][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.994940][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 341.994958][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.994972][ T7622] RIP: 0033:0x7fa1d819066a [ 341.994986][ T7622] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.994999][ T7622] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 341.995016][ T7622] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 341.995027][ T7622] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 341.995038][ T7622] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 341.995051][ T7622] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 341.995063][ T7622] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 341.995087][ T7622] [ 341.995093][ T7622] gfs2: fsid=^..0: about to withdraw this file system [ 342.284008][ T7622] gfs2: fsid=^..0: can't make FS RW: -5 [ 342.290601][ T24] gfs2: fsid=^..0: file system withdrawn [ 342.694251][ T7628] loop0: detected capacity change from 0 to 32768 [ 342.709857][ T7628] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 342.718204][ T7628] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 342.739274][ T7628] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 342.749170][ T24] gfs2: fsid=^..0: jid=0, already locked for use [ 342.758050][ T24] gfs2: fsid=^..0: jid=0: Looking at journal... [ 342.807713][ T24] gfs2: fsid=^..0: jid=0: Journal head lookup took 49ms [ 342.816207][ T24] gfs2: fsid=^..0: jid=0: Done [ 342.821058][ T7628] gfs2: fsid=^..0: first mount done, others may mount [ 342.860209][ T7628] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 342.875683][ T7628] CPU: 1 UID: 0 PID: 7628 Comm: syz.0.279 Not tainted syzkaller #0 PREEMPT(full) [ 342.875713][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.875726][ T7628] Call Trace: [ 342.875738][ T7628] [ 342.875747][ T7628] dump_stack_lvl+0x189/0x250 [ 342.875774][ T7628] ? __pfx_gfs2_lm+0x10/0x10 [ 342.875793][ T7628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.875814][ T7628] ? folio_unlock+0x101/0x160 [ 342.875844][ T7628] gfs2_withdraw+0xc8/0x160 [ 342.875863][ T7628] gfs2_quota_init+0x1109/0x1200 [ 342.875889][ T7628] ? __lock_acquire+0xab9/0xd20 [ 342.875928][ T7628] ? __pfx_gfs2_quota_init+0x10/0x10 [ 342.875953][ T7628] ? __pfx_wake_up_bit+0x10/0x10 [ 342.875975][ T7628] ? inode_go_inval+0x2a0/0x360 [ 342.875994][ T7628] gfs2_make_fs_rw+0x143/0x220 [ 342.876017][ T7628] gfs2_fill_super+0x1bbf/0x2230 [ 342.876049][ T7628] ? __pfx_gfs2_fill_super+0x10/0x10 [ 342.876070][ T7628] ? init_locking+0xb8/0x210 [ 342.876086][ T7628] ? sb_set_blocksize+0x104/0x180 [ 342.876108][ T7628] ? setup_bdev_super+0x4c1/0x5b0 [ 342.876130][ T7628] get_tree_bdev_flags+0x40e/0x4d0 [ 342.876150][ T7628] ? __pfx_gfs2_fill_super+0x10/0x10 [ 342.876178][ T7628] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 342.876196][ T7628] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 342.876229][ T7628] gfs2_get_tree+0x51/0x1e0 [ 342.876250][ T7628] vfs_get_tree+0x92/0x2b0 [ 342.876271][ T7628] do_new_mount+0x302/0xa10 [ 342.876291][ T7628] ? apparmor_capable+0x137/0x1b0 [ 342.876319][ T7628] ? __pfx_do_new_mount+0x10/0x10 [ 342.876340][ T7628] ? ns_capable+0x8a/0xf0 [ 342.876366][ T7628] ? kmem_cache_free+0x19b/0x690 [ 342.876400][ T7628] __se_sys_mount+0x313/0x410 [ 342.876433][ T7628] ? __pfx___se_sys_mount+0x10/0x10 [ 342.876458][ T7628] ? do_syscall_64+0xbe/0xfa0 [ 342.876479][ T7628] ? __x64_sys_mount+0x20/0xc0 [ 342.876502][ T7628] do_syscall_64+0xfa/0xfa0 [ 342.876523][ T7628] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.876543][ T7628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.876560][ T7628] ? clear_bhb_loop+0x60/0xb0 [ 342.876581][ T7628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.876598][ T7628] RIP: 0033:0x7fa1d819066a [ 342.876614][ T7628] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.876628][ T7628] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 342.876647][ T7628] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 342.876660][ T7628] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 342.876672][ T7628] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 342.876683][ T7628] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 342.876694][ T7628] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 342.876722][ T7628] [ 342.876732][ T7628] gfs2: fsid=^..0: about to withdraw this file system [ 343.173697][ T7628] gfs2: fsid=^..0: can't make FS RW: -5 [ 343.181789][ T5825] gfs2: fsid=^..0: file system withdrawn [ 343.577712][ T7634] loop0: detected capacity change from 0 to 32768 [ 343.592477][ T7634] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 343.603120][ T7634] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 343.619859][ T7634] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 343.629686][ T5825] gfs2: fsid=^..0: jid=0, already locked for use [ 343.636564][ T5825] gfs2: fsid=^..0: jid=0: Looking at journal... [ 343.689129][ T5825] gfs2: fsid=^..0: jid=0: Journal head lookup took 52ms [ 343.696495][ T5825] gfs2: fsid=^..0: jid=0: Done [ 343.702283][ T7634] gfs2: fsid=^..0: first mount done, others may mount [ 343.743266][ T7634] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 343.759664][ T7634] CPU: 0 UID: 0 PID: 7634 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(full) [ 343.759685][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.759695][ T7634] Call Trace: [ 343.759701][ T7634] [ 343.759708][ T7634] dump_stack_lvl+0x189/0x250 [ 343.759728][ T7634] ? __pfx_gfs2_lm+0x10/0x10 [ 343.759744][ T7634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.759762][ T7634] ? folio_unlock+0x101/0x160 [ 343.759789][ T7634] gfs2_withdraw+0xc8/0x160 [ 343.759805][ T7634] gfs2_quota_init+0x1109/0x1200 [ 343.759827][ T7634] ? __lock_acquire+0xab9/0xd20 [ 343.759862][ T7634] ? __pfx_gfs2_quota_init+0x10/0x10 [ 343.759883][ T7634] ? __pfx_wake_up_bit+0x10/0x10 [ 343.759903][ T7634] ? inode_go_inval+0x2a0/0x360 [ 343.759920][ T7634] gfs2_make_fs_rw+0x143/0x220 [ 343.759939][ T7634] gfs2_fill_super+0x1bbf/0x2230 [ 343.759967][ T7634] ? __pfx_gfs2_fill_super+0x10/0x10 [ 343.759985][ T7634] ? init_locking+0xb8/0x210 [ 343.759999][ T7634] ? sb_set_blocksize+0x104/0x180 [ 343.760018][ T7634] ? setup_bdev_super+0x4c1/0x5b0 [ 343.760037][ T7634] get_tree_bdev_flags+0x40e/0x4d0 [ 343.760054][ T7634] ? __pfx_gfs2_fill_super+0x10/0x10 [ 343.760070][ T7634] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 343.760085][ T7634] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 343.760119][ T7634] gfs2_get_tree+0x51/0x1e0 [ 343.760137][ T7634] vfs_get_tree+0x92/0x2b0 [ 343.760156][ T7634] do_new_mount+0x302/0xa10 [ 343.760173][ T7634] ? apparmor_capable+0x137/0x1b0 [ 343.760198][ T7634] ? __pfx_do_new_mount+0x10/0x10 [ 343.760216][ T7634] ? ns_capable+0x8a/0xf0 [ 343.760239][ T7634] ? kmem_cache_free+0x19b/0x690 [ 343.760264][ T7634] __se_sys_mount+0x313/0x410 [ 343.760287][ T7634] ? __pfx___se_sys_mount+0x10/0x10 [ 343.760309][ T7634] ? do_syscall_64+0xbe/0xfa0 [ 343.760327][ T7634] ? __x64_sys_mount+0x20/0xc0 [ 343.760347][ T7634] do_syscall_64+0xfa/0xfa0 [ 343.760364][ T7634] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.760382][ T7634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.760397][ T7634] ? clear_bhb_loop+0x60/0xb0 [ 343.760415][ T7634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.760429][ T7634] RIP: 0033:0x7fa1d819066a [ 343.760442][ T7634] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.760455][ T7634] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.760472][ T7634] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 343.760483][ T7634] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 343.760493][ T7634] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 343.760504][ T7634] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 343.760513][ T7634] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 343.760538][ T7634] [ 343.760543][ T7634] gfs2: fsid=^..0: about to withdraw this file system [ 344.048780][ T7634] gfs2: fsid=^..0: can't make FS RW: -5 [ 344.055933][ T5825] gfs2: fsid=^..0: file system withdrawn [ 344.455124][ T7640] loop0: detected capacity change from 0 to 32768 [ 344.477884][ T7640] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 344.486470][ T7640] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 344.502285][ T7640] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 344.512291][ T24] gfs2: fsid=^..0: jid=0, already locked for use [ 344.521611][ T24] gfs2: fsid=^..0: jid=0: Looking at journal... [ 344.575377][ T24] gfs2: fsid=^..0: jid=0: Journal head lookup took 53ms [ 344.582959][ T24] gfs2: fsid=^..0: jid=0: Done [ 344.587932][ T7640] gfs2: fsid=^..0: first mount done, others may mount [ 344.617491][ T7640] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 344.633289][ T7640] CPU: 1 UID: 0 PID: 7640 Comm: syz.0.281 Not tainted syzkaller #0 PREEMPT(full) [ 344.633310][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.633321][ T7640] Call Trace: [ 344.633328][ T7640] [ 344.633334][ T7640] dump_stack_lvl+0x189/0x250 [ 344.633355][ T7640] ? __pfx_gfs2_lm+0x10/0x10 [ 344.633370][ T7640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.633388][ T7640] ? folio_unlock+0x101/0x160 [ 344.633415][ T7640] gfs2_withdraw+0xc8/0x160 [ 344.633431][ T7640] gfs2_quota_init+0x1109/0x1200 [ 344.633454][ T7640] ? __lock_acquire+0xab9/0xd20 [ 344.633488][ T7640] ? __pfx_gfs2_quota_init+0x10/0x10 [ 344.633510][ T7640] ? __pfx_wake_up_bit+0x10/0x10 [ 344.633529][ T7640] ? inode_go_inval+0x2a0/0x360 [ 344.633546][ T7640] gfs2_make_fs_rw+0x143/0x220 [ 344.633565][ T7640] gfs2_fill_super+0x1bbf/0x2230 [ 344.633593][ T7640] ? __pfx_gfs2_fill_super+0x10/0x10 [ 344.633618][ T7640] ? init_locking+0xb8/0x210 [ 344.633638][ T7640] ? sb_set_blocksize+0x104/0x180 [ 344.633665][ T7640] ? setup_bdev_super+0x4c1/0x5b0 [ 344.633693][ T7640] get_tree_bdev_flags+0x40e/0x4d0 [ 344.633716][ T7640] ? __pfx_gfs2_fill_super+0x10/0x10 [ 344.633738][ T7640] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 344.633759][ T7640] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 344.633788][ T7640] gfs2_get_tree+0x51/0x1e0 [ 344.633806][ T7640] vfs_get_tree+0x92/0x2b0 [ 344.633825][ T7640] do_new_mount+0x302/0xa10 [ 344.633842][ T7640] ? apparmor_capable+0x137/0x1b0 [ 344.633867][ T7640] ? __pfx_do_new_mount+0x10/0x10 [ 344.633885][ T7640] ? ns_capable+0x8a/0xf0 [ 344.633908][ T7640] ? kmem_cache_free+0x19b/0x690 [ 344.633934][ T7640] __se_sys_mount+0x313/0x410 [ 344.633957][ T7640] ? __pfx___se_sys_mount+0x10/0x10 [ 344.633978][ T7640] ? do_syscall_64+0xbe/0xfa0 [ 344.633996][ T7640] ? __x64_sys_mount+0x20/0xc0 [ 344.634023][ T7640] do_syscall_64+0xfa/0xfa0 [ 344.634041][ T7640] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.634059][ T7640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.634074][ T7640] ? clear_bhb_loop+0x60/0xb0 [ 344.634093][ T7640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.634107][ T7640] RIP: 0033:0x7fa1d819066a [ 344.634122][ T7640] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.634134][ T7640] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 344.634151][ T7640] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 344.634162][ T7640] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 344.634173][ T7640] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 344.634183][ T7640] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 344.634193][ T7640] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 344.634217][ T7640] [ 344.917339][ T7640] gfs2: fsid=^..0: about to withdraw this file system [ 344.932042][ T5825] gfs2: fsid=^..0: file system withdrawn [ 344.933804][ T7640] gfs2: fsid=^..0: can't make FS RW: -5 2025/10/14 07:44:18 executed programs: 267 [ 345.349459][ T7646] loop0: detected capacity change from 0 to 32768 [ 345.366893][ T7646] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 345.375484][ T7646] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 345.392326][ T7646] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 345.402281][ T43] gfs2: fsid=^..0: jid=0, already locked for use [ 345.408907][ T43] gfs2: fsid=^..0: jid=0: Looking at journal... [ 345.474505][ T43] gfs2: fsid=^..0: jid=0: Journal head lookup took 65ms [ 345.483809][ T43] gfs2: fsid=^..0: jid=0: Done [ 345.488802][ T7646] gfs2: fsid=^..0: first mount done, others may mount [ 345.522908][ T7646] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 345.538914][ T7646] CPU: 0 UID: 0 PID: 7646 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) [ 345.538936][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.538952][ T7646] Call Trace: [ 345.538959][ T7646] [ 345.538965][ T7646] dump_stack_lvl+0x189/0x250 [ 345.538986][ T7646] ? __pfx_gfs2_lm+0x10/0x10 [ 345.539002][ T7646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.539019][ T7646] ? folio_unlock+0x101/0x160 [ 345.539046][ T7646] gfs2_withdraw+0xc8/0x160 [ 345.539062][ T7646] gfs2_quota_init+0x1109/0x1200 [ 345.539085][ T7646] ? __lock_acquire+0xab9/0xd20 [ 345.539119][ T7646] ? __pfx_gfs2_quota_init+0x10/0x10 [ 345.539140][ T7646] ? __pfx_wake_up_bit+0x10/0x10 [ 345.539160][ T7646] ? inode_go_inval+0x2a0/0x360 [ 345.539177][ T7646] gfs2_make_fs_rw+0x143/0x220 [ 345.539198][ T7646] gfs2_fill_super+0x1bbf/0x2230 [ 345.539229][ T7646] ? __pfx_gfs2_fill_super+0x10/0x10 [ 345.539247][ T7646] ? init_locking+0xb8/0x210 [ 345.539261][ T7646] ? sb_set_blocksize+0x104/0x180 [ 345.539280][ T7646] ? setup_bdev_super+0x4c1/0x5b0 [ 345.539300][ T7646] get_tree_bdev_flags+0x40e/0x4d0 [ 345.539319][ T7646] ? __pfx_gfs2_fill_super+0x10/0x10 [ 345.539335][ T7646] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 345.539350][ T7646] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 345.539379][ T7646] gfs2_get_tree+0x51/0x1e0 [ 345.539397][ T7646] vfs_get_tree+0x92/0x2b0 [ 345.539415][ T7646] do_new_mount+0x302/0xa10 [ 345.539432][ T7646] ? apparmor_capable+0x137/0x1b0 [ 345.539457][ T7646] ? __pfx_do_new_mount+0x10/0x10 [ 345.539475][ T7646] ? ns_capable+0x8a/0xf0 [ 345.539498][ T7646] ? kmem_cache_free+0x19b/0x690 [ 345.539524][ T7646] __se_sys_mount+0x313/0x410 [ 345.539546][ T7646] ? __pfx___se_sys_mount+0x10/0x10 [ 345.539567][ T7646] ? do_syscall_64+0xbe/0xfa0 [ 345.539585][ T7646] ? __x64_sys_mount+0x20/0xc0 [ 345.539604][ T7646] do_syscall_64+0xfa/0xfa0 [ 345.539621][ T7646] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.539638][ T7646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.539653][ T7646] ? clear_bhb_loop+0x60/0xb0 [ 345.539671][ T7646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.539685][ T7646] RIP: 0033:0x7fa1d819066a [ 345.539698][ T7646] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.539711][ T7646] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.539726][ T7646] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 345.539737][ T7646] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 345.539748][ T7646] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 345.539758][ T7646] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 345.539767][ T7646] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 345.539791][ T7646] [ 345.539797][ T7646] gfs2: fsid=^..0: about to withdraw this file system [ 345.829316][ T7646] gfs2: fsid=^..0: can't make FS RW: -5 [ 345.837297][ T43] gfs2: fsid=^..0: file system withdrawn [ 346.244455][ T7652] loop0: detected capacity change from 0 to 32768 [ 346.263430][ T7652] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 346.271038][ T7652] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 346.287942][ T7652] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 346.297060][ T43] gfs2: fsid=^..0: jid=0, already locked for use [ 346.303459][ T43] gfs2: fsid=^..0: jid=0: Looking at journal... [ 346.363518][ T43] gfs2: fsid=^..0: jid=0: Journal head lookup took 60ms [ 346.372941][ T43] gfs2: fsid=^..0: jid=0: Done [ 346.378869][ T7652] gfs2: fsid=^..0: first mount done, others may mount [ 346.415926][ T7652] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 346.432130][ T7652] CPU: 1 UID: 0 PID: 7652 Comm: syz.0.283 Not tainted syzkaller #0 PREEMPT(full) [ 346.432152][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 346.432162][ T7652] Call Trace: [ 346.432169][ T7652] [ 346.432175][ T7652] dump_stack_lvl+0x189/0x250 [ 346.432196][ T7652] ? __pfx_gfs2_lm+0x10/0x10 [ 346.432212][ T7652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.432230][ T7652] ? folio_unlock+0x101/0x160 [ 346.432257][ T7652] gfs2_withdraw+0xc8/0x160 [ 346.432274][ T7652] gfs2_quota_init+0x1109/0x1200 [ 346.432297][ T7652] ? __lock_acquire+0xab9/0xd20 [ 346.432331][ T7652] ? __pfx_gfs2_quota_init+0x10/0x10 [ 346.432353][ T7652] ? __pfx_wake_up_bit+0x10/0x10 [ 346.432373][ T7652] ? inode_go_inval+0x2a0/0x360 [ 346.432389][ T7652] gfs2_make_fs_rw+0x143/0x220 [ 346.432409][ T7652] gfs2_fill_super+0x1bbf/0x2230 [ 346.432436][ T7652] ? __pfx_gfs2_fill_super+0x10/0x10 [ 346.432454][ T7652] ? init_locking+0xb8/0x210 [ 346.432468][ T7652] ? sb_set_blocksize+0x104/0x180 [ 346.432487][ T7652] ? setup_bdev_super+0x4c1/0x5b0 [ 346.432507][ T7652] get_tree_bdev_flags+0x40e/0x4d0 [ 346.432524][ T7652] ? __pfx_gfs2_fill_super+0x10/0x10 [ 346.432539][ T7652] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 346.432554][ T7652] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 346.432583][ T7652] gfs2_get_tree+0x51/0x1e0 [ 346.432600][ T7652] vfs_get_tree+0x92/0x2b0 [ 346.432619][ T7652] do_new_mount+0x302/0xa10 [ 346.432635][ T7652] ? apparmor_capable+0x137/0x1b0 [ 346.432660][ T7652] ? __pfx_do_new_mount+0x10/0x10 [ 346.432678][ T7652] ? ns_capable+0x8a/0xf0 [ 346.432701][ T7652] ? kmem_cache_free+0x19b/0x690 [ 346.432726][ T7652] __se_sys_mount+0x313/0x410 [ 346.432749][ T7652] ? __pfx___se_sys_mount+0x10/0x10 [ 346.432771][ T7652] ? do_syscall_64+0xbe/0xfa0 [ 346.432789][ T7652] ? __x64_sys_mount+0x20/0xc0 [ 346.432809][ T7652] do_syscall_64+0xfa/0xfa0 [ 346.432826][ T7652] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.432844][ T7652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.432858][ T7652] ? clear_bhb_loop+0x60/0xb0 [ 346.432883][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.432897][ T7652] RIP: 0033:0x7fa1d819066a [ 346.432911][ T7652] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.432924][ T7652] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 346.432940][ T7652] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 346.432951][ T7652] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 346.432962][ T7652] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 346.432972][ T7652] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 346.432982][ T7652] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 346.433007][ T7652] [ 346.433012][ T7652] gfs2: fsid=^..0: about to withdraw this file system [ 346.728547][ T5825] gfs2: fsid=^..0: file system withdrawn [ 346.734298][ T7652] gfs2: fsid=^..0: can't make FS RW: -5 [ 347.136847][ T7658] loop0: detected capacity change from 0 to 32768 [ 347.155037][ T7658] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 347.162396][ T7658] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 347.177698][ T7658] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 347.186780][ T5825] gfs2: fsid=^..0: jid=0, already locked for use [ 347.193173][ T5825] gfs2: fsid=^..0: jid=0: Looking at journal... [ 347.261408][ T5825] gfs2: fsid=^..0: jid=0: Journal head lookup took 68ms [ 347.269091][ T5825] gfs2: fsid=^..0: jid=0: Done [ 347.276468][ T7658] gfs2: fsid=^..0: first mount done, others may mount [ 347.311937][ T7658] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 347.327271][ T7658] CPU: 0 UID: 0 PID: 7658 Comm: syz.0.284 Not tainted syzkaller #0 PREEMPT(full) [ 347.327298][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.327312][ T7658] Call Trace: [ 347.327324][ T7658] [ 347.327337][ T7658] dump_stack_lvl+0x189/0x250 [ 347.327358][ T7658] ? __pfx_gfs2_lm+0x10/0x10 [ 347.327374][ T7658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.327392][ T7658] ? folio_unlock+0x101/0x160 [ 347.327420][ T7658] gfs2_withdraw+0xc8/0x160 [ 347.327436][ T7658] gfs2_quota_init+0x1109/0x1200 [ 347.327459][ T7658] ? __lock_acquire+0xab9/0xd20 [ 347.327495][ T7658] ? __pfx_gfs2_quota_init+0x10/0x10 [ 347.327517][ T7658] ? __pfx_wake_up_bit+0x10/0x10 [ 347.327537][ T7658] ? inode_go_inval+0x2a0/0x360 [ 347.327554][ T7658] gfs2_make_fs_rw+0x143/0x220 [ 347.327573][ T7658] gfs2_fill_super+0x1bbf/0x2230 [ 347.327601][ T7658] ? __pfx_gfs2_fill_super+0x10/0x10 [ 347.327619][ T7658] ? init_locking+0xb8/0x210 [ 347.327645][ T7658] ? sb_set_blocksize+0x104/0x180 [ 347.327665][ T7658] ? setup_bdev_super+0x4c1/0x5b0 [ 347.327690][ T7658] get_tree_bdev_flags+0x40e/0x4d0 [ 347.327708][ T7658] ? __pfx_gfs2_fill_super+0x10/0x10 [ 347.327724][ T7658] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 347.327740][ T7658] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 347.327768][ T7658] gfs2_get_tree+0x51/0x1e0 [ 347.327788][ T7658] vfs_get_tree+0x92/0x2b0 [ 347.327808][ T7658] do_new_mount+0x302/0xa10 [ 347.327825][ T7658] ? apparmor_capable+0x137/0x1b0 [ 347.327851][ T7658] ? __pfx_do_new_mount+0x10/0x10 [ 347.327869][ T7658] ? ns_capable+0x8a/0xf0 [ 347.327892][ T7658] ? kmem_cache_free+0x19b/0x690 [ 347.327924][ T7658] __se_sys_mount+0x313/0x410 [ 347.327948][ T7658] ? __pfx___se_sys_mount+0x10/0x10 [ 347.327974][ T7658] ? do_syscall_64+0xbe/0xfa0 [ 347.327992][ T7658] ? __x64_sys_mount+0x20/0xc0 [ 347.328017][ T7658] do_syscall_64+0xfa/0xfa0 [ 347.328039][ T7658] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.328058][ T7658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.328073][ T7658] ? clear_bhb_loop+0x60/0xb0 [ 347.328091][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.328106][ T7658] RIP: 0033:0x7fa1d819066a [ 347.328120][ T7658] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.328133][ T7658] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 347.328149][ T7658] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 347.328160][ T7658] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 347.328175][ T7658] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 347.328185][ T7658] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 347.328195][ T7658] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 347.328220][ T7658] [ 347.328226][ T7658] gfs2: fsid=^..0: about to withdraw this file system [ 347.616948][ T7658] gfs2: fsid=^..0: can't make FS RW: -5 [ 347.624992][ T5825] gfs2: fsid=^..0: file system withdrawn [ 348.023370][ T7664] loop0: detected capacity change from 0 to 32768 [ 348.040479][ T7664] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 348.048631][ T7664] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 348.063352][ T7664] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 348.072526][ T43] gfs2: fsid=^..0: jid=0, already locked for use [ 348.079611][ T43] gfs2: fsid=^..0: jid=0: Looking at journal... [ 348.152510][ T43] gfs2: fsid=^..0: jid=0: Journal head lookup took 72ms [ 348.161950][ T43] gfs2: fsid=^..0: jid=0: Done [ 348.167684][ T7664] gfs2: fsid=^..0: first mount done, others may mount [ 348.198218][ T7664] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 348.214665][ T7664] CPU: 1 UID: 0 PID: 7664 Comm: syz.0.285 Not tainted syzkaller #0 PREEMPT(full) [ 348.214695][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.214709][ T7664] Call Trace: [ 348.214718][ T7664] [ 348.214727][ T7664] dump_stack_lvl+0x189/0x250 [ 348.214766][ T7664] ? __pfx_gfs2_lm+0x10/0x10 [ 348.214783][ T7664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.214800][ T7664] ? folio_unlock+0x101/0x160 [ 348.214827][ T7664] gfs2_withdraw+0xc8/0x160 [ 348.214844][ T7664] gfs2_quota_init+0x1109/0x1200 [ 348.214866][ T7664] ? __lock_acquire+0xab9/0xd20 [ 348.214900][ T7664] ? __pfx_gfs2_quota_init+0x10/0x10 [ 348.214922][ T7664] ? __pfx_wake_up_bit+0x10/0x10 [ 348.214941][ T7664] ? inode_go_inval+0x2a0/0x360 [ 348.214958][ T7664] gfs2_make_fs_rw+0x143/0x220 [ 348.214977][ T7664] gfs2_fill_super+0x1bbf/0x2230 [ 348.215007][ T7664] ? __pfx_gfs2_fill_super+0x10/0x10 [ 348.215025][ T7664] ? init_locking+0xb8/0x210 [ 348.215039][ T7664] ? sb_set_blocksize+0x104/0x180 [ 348.215058][ T7664] ? setup_bdev_super+0x4c1/0x5b0 [ 348.215079][ T7664] get_tree_bdev_flags+0x40e/0x4d0 [ 348.215096][ T7664] ? __pfx_gfs2_fill_super+0x10/0x10 [ 348.215112][ T7664] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 348.215127][ T7664] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 348.215156][ T7664] gfs2_get_tree+0x51/0x1e0 [ 348.215174][ T7664] vfs_get_tree+0x92/0x2b0 [ 348.215193][ T7664] do_new_mount+0x302/0xa10 [ 348.215210][ T7664] ? apparmor_capable+0x137/0x1b0 [ 348.215236][ T7664] ? __pfx_do_new_mount+0x10/0x10 [ 348.215254][ T7664] ? ns_capable+0x8a/0xf0 [ 348.215277][ T7664] ? kmem_cache_free+0x19b/0x690 [ 348.215303][ T7664] __se_sys_mount+0x313/0x410 [ 348.215326][ T7664] ? __pfx___se_sys_mount+0x10/0x10 [ 348.215348][ T7664] ? do_syscall_64+0xbe/0xfa0 [ 348.215366][ T7664] ? __x64_sys_mount+0x20/0xc0 [ 348.215387][ T7664] do_syscall_64+0xfa/0xfa0 [ 348.215404][ T7664] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.215422][ T7664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.215437][ T7664] ? clear_bhb_loop+0x60/0xb0 [ 348.215456][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.215470][ T7664] RIP: 0033:0x7fa1d819066a [ 348.215484][ T7664] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.215497][ T7664] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.215513][ T7664] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 348.215524][ T7664] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 348.215535][ T7664] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 348.215546][ T7664] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 348.215556][ T7664] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 348.215580][ T7664] [ 348.215586][ T7664] gfs2: fsid=^..0: about to withdraw this file system [ 348.510748][ T5825] gfs2: fsid=^..0: file system withdrawn [ 348.516710][ T7664] gfs2: fsid=^..0: can't make FS RW: -5 [ 348.927388][ T7670] loop0: detected capacity change from 0 to 32768 [ 348.944126][ T7670] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 348.951475][ T7670] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 348.975472][ T7670] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 348.985522][ T5825] gfs2: fsid=^..0: jid=0, already locked for use [ 348.991912][ T5825] gfs2: fsid=^..0: jid=0: Looking at journal... [ 349.074849][ T5825] gfs2: fsid=^..0: jid=0: Journal head lookup took 82ms [ 349.082989][ T5825] gfs2: fsid=^..0: jid=0: Done [ 349.088221][ T7670] gfs2: fsid=^..0: first mount done, others may mount [ 349.119886][ T7670] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 349.135291][ T7670] CPU: 0 UID: 0 PID: 7670 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full) [ 349.135318][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.135328][ T7670] Call Trace: [ 349.135336][ T7670] [ 349.135343][ T7670] dump_stack_lvl+0x189/0x250 [ 349.135364][ T7670] ? __pfx_gfs2_lm+0x10/0x10 [ 349.135380][ T7670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.135398][ T7670] ? folio_unlock+0x101/0x160 [ 349.135425][ T7670] gfs2_withdraw+0xc8/0x160 [ 349.135442][ T7670] gfs2_quota_init+0x1109/0x1200 [ 349.135465][ T7670] ? __lock_acquire+0xab9/0xd20 [ 349.135500][ T7670] ? __pfx_gfs2_quota_init+0x10/0x10 [ 349.135522][ T7670] ? __pfx_wake_up_bit+0x10/0x10 [ 349.135543][ T7670] ? inode_go_inval+0x2a0/0x360 [ 349.135560][ T7670] gfs2_make_fs_rw+0x143/0x220 [ 349.135579][ T7670] gfs2_fill_super+0x1bbf/0x2230 [ 349.135607][ T7670] ? __pfx_gfs2_fill_super+0x10/0x10 [ 349.135625][ T7670] ? init_locking+0xb8/0x210 [ 349.135639][ T7670] ? sb_set_blocksize+0x104/0x180 [ 349.135658][ T7670] ? setup_bdev_super+0x4c1/0x5b0 [ 349.135677][ T7670] get_tree_bdev_flags+0x40e/0x4d0 [ 349.135703][ T7670] ? __pfx_gfs2_fill_super+0x10/0x10 [ 349.135719][ T7670] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 349.135735][ T7670] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 349.135763][ T7670] gfs2_get_tree+0x51/0x1e0 [ 349.135782][ T7670] vfs_get_tree+0x92/0x2b0 [ 349.135801][ T7670] do_new_mount+0x302/0xa10 [ 349.135818][ T7670] ? apparmor_capable+0x137/0x1b0 [ 349.135843][ T7670] ? __pfx_do_new_mount+0x10/0x10 [ 349.135861][ T7670] ? ns_capable+0x8a/0xf0 [ 349.135884][ T7670] ? kmem_cache_free+0x19b/0x690 [ 349.135910][ T7670] __se_sys_mount+0x313/0x410 [ 349.135933][ T7670] ? __pfx___se_sys_mount+0x10/0x10 [ 349.135955][ T7670] ? do_syscall_64+0xbe/0xfa0 [ 349.135973][ T7670] ? __x64_sys_mount+0x20/0xc0 [ 349.135993][ T7670] do_syscall_64+0xfa/0xfa0 [ 349.136010][ T7670] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.136028][ T7670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.136042][ T7670] ? clear_bhb_loop+0x60/0xb0 [ 349.136060][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.136075][ T7670] RIP: 0033:0x7fa1d819066a [ 349.136089][ T7670] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.136101][ T7670] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 349.136118][ T7670] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 349.136129][ T7670] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 349.136139][ T7670] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 349.136149][ T7670] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 349.136159][ T7670] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 349.136187][ T7670] [ 349.136193][ T7670] gfs2: fsid=^..0: about to withdraw this file system [ 349.428879][ T5927] gfs2: fsid=^..0: file system withdrawn [ 349.434108][ T7670] gfs2: fsid=^..0: can't make FS RW: -5 [ 349.834045][ T7676] loop0: detected capacity change from 0 to 32768 [ 349.855595][ T7676] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 349.863938][ T7676] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 349.880502][ T7676] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 349.889855][ T9] gfs2: fsid=^..0: jid=0, already locked for use [ 349.897454][ T9] gfs2: fsid=^..0: jid=0: Looking at journal... [ 349.945189][ T9] gfs2: fsid=^..0: jid=0: Journal head lookup took 47ms [ 349.952464][ T9] gfs2: fsid=^..0: jid=0: Done [ 349.959871][ T7676] gfs2: fsid=^..0: first mount done, others may mount [ 350.001657][ T7676] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 350.017070][ T7676] CPU: 0 UID: 0 PID: 7676 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT(full) [ 350.017098][ T7676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.017112][ T7676] Call Trace: [ 350.017124][ T7676] [ 350.017133][ T7676] dump_stack_lvl+0x189/0x250 [ 350.017160][ T7676] ? __pfx_gfs2_lm+0x10/0x10 [ 350.017193][ T7676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.017213][ T7676] ? folio_unlock+0x101/0x160 [ 350.017244][ T7676] gfs2_withdraw+0xc8/0x160 [ 350.017262][ T7676] gfs2_quota_init+0x1109/0x1200 [ 350.017288][ T7676] ? __lock_acquire+0xab9/0xd20 [ 350.017327][ T7676] ? __pfx_gfs2_quota_init+0x10/0x10 [ 350.017351][ T7676] ? __pfx_wake_up_bit+0x10/0x10 [ 350.017374][ T7676] ? inode_go_inval+0x2a0/0x360 [ 350.017393][ T7676] gfs2_make_fs_rw+0x143/0x220 [ 350.017415][ T7676] gfs2_fill_super+0x1bbf/0x2230 [ 350.017446][ T7676] ? __pfx_gfs2_fill_super+0x10/0x10 [ 350.017466][ T7676] ? init_locking+0xb8/0x210 [ 350.017482][ T7676] ? sb_set_blocksize+0x104/0x180 [ 350.017504][ T7676] ? setup_bdev_super+0x4c1/0x5b0 [ 350.017526][ T7676] get_tree_bdev_flags+0x40e/0x4d0 [ 350.017546][ T7676] ? __pfx_gfs2_fill_super+0x10/0x10 [ 350.017572][ T7676] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 350.017589][ T7676] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 350.017622][ T7676] gfs2_get_tree+0x51/0x1e0 [ 350.017642][ T7676] vfs_get_tree+0x92/0x2b0 [ 350.017665][ T7676] do_new_mount+0x302/0xa10 [ 350.017684][ T7676] ? apparmor_capable+0x137/0x1b0 [ 350.017713][ T7676] ? __pfx_do_new_mount+0x10/0x10 [ 350.017734][ T7676] ? ns_capable+0x8a/0xf0 [ 350.017760][ T7676] ? kmem_cache_free+0x19b/0x690 [ 350.017789][ T7676] __se_sys_mount+0x313/0x410 [ 350.017817][ T7676] ? __pfx___se_sys_mount+0x10/0x10 [ 350.017842][ T7676] ? do_syscall_64+0xbe/0xfa0 [ 350.017863][ T7676] ? __x64_sys_mount+0x20/0xc0 [ 350.017885][ T7676] do_syscall_64+0xfa/0xfa0 [ 350.017906][ T7676] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.017926][ T7676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.017943][ T7676] ? clear_bhb_loop+0x60/0xb0 [ 350.017964][ T7676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.017981][ T7676] RIP: 0033:0x7fa1d819066a [ 350.017999][ T7676] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.018013][ T7676] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.018032][ T7676] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 350.018045][ T7676] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 350.018057][ T7676] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 350.018068][ T7676] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 350.018080][ T7676] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 350.018107][ T7676] [ 350.018117][ T7676] gfs2: fsid=^..0: about to withdraw this file system [ 350.308127][ T7676] gfs2: fsid=^..0: can't make FS RW: -5 [ 350.314899][ T9] gfs2: fsid=^..0: file system withdrawn 2025/10/14 07:44:24 executed programs: 273 [ 350.723087][ T7682] loop0: detected capacity change from 0 to 32768 [ 350.745371][ T7682] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 350.752811][ T7682] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 350.771304][ T7682] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 350.780498][ T9] gfs2: fsid=^..0: jid=0, already locked for use [ 350.788728][ T9] gfs2: fsid=^..0: jid=0: Looking at journal... [ 350.850516][ T9] gfs2: fsid=^..0: jid=0: Journal head lookup took 61ms [ 350.857983][ T9] gfs2: fsid=^..0: jid=0: Done [ 350.865767][ T7682] gfs2: fsid=^..0: first mount done, others may mount [ 350.901057][ T7682] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 350.918603][ T7682] CPU: 1 UID: 0 PID: 7682 Comm: syz.0.288 Not tainted syzkaller #0 PREEMPT(full) [ 350.918625][ T7682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 350.918635][ T7682] Call Trace: [ 350.918642][ T7682] [ 350.918648][ T7682] dump_stack_lvl+0x189/0x250 [ 350.918670][ T7682] ? __pfx_gfs2_lm+0x10/0x10 [ 350.918686][ T7682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.918703][ T7682] ? folio_unlock+0x101/0x160 [ 350.918730][ T7682] gfs2_withdraw+0xc8/0x160 [ 350.918746][ T7682] gfs2_quota_init+0x1109/0x1200 [ 350.918768][ T7682] ? __lock_acquire+0xab9/0xd20 [ 350.918803][ T7682] ? __pfx_gfs2_quota_init+0x10/0x10 [ 350.918824][ T7682] ? __pfx_wake_up_bit+0x10/0x10 [ 350.918844][ T7682] ? inode_go_inval+0x2a0/0x360 [ 350.918860][ T7682] gfs2_make_fs_rw+0x143/0x220 [ 350.918880][ T7682] gfs2_fill_super+0x1bbf/0x2230 [ 350.918908][ T7682] ? __pfx_gfs2_fill_super+0x10/0x10 [ 350.918926][ T7682] ? init_locking+0xb8/0x210 [ 350.918940][ T7682] ? sb_set_blocksize+0x104/0x180 [ 350.918959][ T7682] ? setup_bdev_super+0x4c1/0x5b0 [ 350.918979][ T7682] get_tree_bdev_flags+0x40e/0x4d0 [ 350.918995][ T7682] ? __pfx_gfs2_fill_super+0x10/0x10 [ 350.919011][ T7682] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 350.919026][ T7682] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 350.919055][ T7682] gfs2_get_tree+0x51/0x1e0 [ 350.919072][ T7682] vfs_get_tree+0x92/0x2b0 [ 350.919091][ T7682] do_new_mount+0x302/0xa10 [ 350.919108][ T7682] ? apparmor_capable+0x137/0x1b0 [ 350.919133][ T7682] ? __pfx_do_new_mount+0x10/0x10 [ 350.919151][ T7682] ? ns_capable+0x8a/0xf0 [ 350.919174][ T7682] ? kmem_cache_free+0x19b/0x690 [ 350.919199][ T7682] __se_sys_mount+0x313/0x410 [ 350.919222][ T7682] ? __pfx___se_sys_mount+0x10/0x10 [ 350.919244][ T7682] ? do_syscall_64+0xbe/0xfa0 [ 350.919262][ T7682] ? __x64_sys_mount+0x20/0xc0 [ 350.919282][ T7682] do_syscall_64+0xfa/0xfa0 [ 350.919299][ T7682] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.919317][ T7682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.919332][ T7682] ? clear_bhb_loop+0x60/0xb0 [ 350.919350][ T7682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.919364][ T7682] RIP: 0033:0x7fa1d819066a [ 350.919378][ T7682] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.919390][ T7682] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.919407][ T7682] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 350.919418][ T7682] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 350.919429][ T7682] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 350.919440][ T7682] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 350.919450][ T7682] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 350.919480][ T7682] [ 350.919486][ T7682] gfs2: fsid=^..0: about to withdraw this file system [ 351.216001][ T7682] gfs2: fsid=^..0: can't make FS RW: -5 [ 351.227556][ T9] gfs2: fsid=^..0: file system withdrawn [ 351.622983][ T7688] loop0: detected capacity change from 0 to 32768 [ 351.639243][ T7688] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 351.653332][ T7688] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 351.670592][ T7688] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 351.679681][ T9] gfs2: fsid=^..0: jid=0, already locked for use [ 351.686976][ T9] gfs2: fsid=^..0: jid=0: Looking at journal... [ 351.749686][ T9] gfs2: fsid=^..0: jid=0: Journal head lookup took 62ms [ 351.757001][ T9] gfs2: fsid=^..0: jid=0: Done [ 351.764260][ T7688] gfs2: fsid=^..0: first mount done, others may mount [ 351.797671][ T7688] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 351.815480][ T7688] CPU: 1 UID: 0 PID: 7688 Comm: syz.0.289 Not tainted syzkaller #0 PREEMPT(full) [ 351.815501][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.815512][ T7688] Call Trace: [ 351.815518][ T7688] [ 351.815525][ T7688] dump_stack_lvl+0x189/0x250 [ 351.815545][ T7688] ? __pfx_gfs2_lm+0x10/0x10 [ 351.815568][ T7688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.815593][ T7688] ? folio_unlock+0x101/0x160 [ 351.815631][ T7688] gfs2_withdraw+0xc8/0x160 [ 351.815654][ T7688] gfs2_quota_init+0x1109/0x1200 [ 351.815690][ T7688] ? __lock_acquire+0xab9/0xd20 [ 351.815725][ T7688] ? __pfx_gfs2_quota_init+0x10/0x10 [ 351.815747][ T7688] ? __pfx_wake_up_bit+0x10/0x10 [ 351.815767][ T7688] ? inode_go_inval+0x2a0/0x360 [ 351.815784][ T7688] gfs2_make_fs_rw+0x143/0x220 [ 351.815803][ T7688] gfs2_fill_super+0x1bbf/0x2230 [ 351.815831][ T7688] ? __pfx_gfs2_fill_super+0x10/0x10 [ 351.815849][ T7688] ? init_locking+0xb8/0x210 [ 351.815862][ T7688] ? sb_set_blocksize+0x104/0x180 [ 351.815882][ T7688] ? setup_bdev_super+0x4c1/0x5b0 [ 351.815902][ T7688] get_tree_bdev_flags+0x40e/0x4d0 [ 351.815919][ T7688] ? __pfx_gfs2_fill_super+0x10/0x10 [ 351.815934][ T7688] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 351.815950][ T7688] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 351.815978][ T7688] gfs2_get_tree+0x51/0x1e0 [ 351.815996][ T7688] vfs_get_tree+0x92/0x2b0 [ 351.816014][ T7688] do_new_mount+0x302/0xa10 [ 351.816031][ T7688] ? apparmor_capable+0x137/0x1b0 [ 351.816056][ T7688] ? __pfx_do_new_mount+0x10/0x10 [ 351.816074][ T7688] ? ns_capable+0x8a/0xf0 [ 351.816097][ T7688] ? kmem_cache_free+0x19b/0x690 [ 351.816122][ T7688] __se_sys_mount+0x313/0x410 [ 351.816145][ T7688] ? __pfx___se_sys_mount+0x10/0x10 [ 351.816166][ T7688] ? do_syscall_64+0xbe/0xfa0 [ 351.816187][ T7688] ? __x64_sys_mount+0x20/0xc0 [ 351.816207][ T7688] do_syscall_64+0xfa/0xfa0 [ 351.816224][ T7688] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.816242][ T7688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.816257][ T7688] ? clear_bhb_loop+0x60/0xb0 [ 351.816276][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.816290][ T7688] RIP: 0033:0x7fa1d819066a [ 351.816304][ T7688] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.816317][ T7688] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.816334][ T7688] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 351.816345][ T7688] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 351.816356][ T7688] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 351.816366][ T7688] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 351.816376][ T7688] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 351.816401][ T7688] [ 351.816407][ T7688] gfs2: fsid=^..0: about to withdraw this file system [ 352.108041][ T7688] gfs2: fsid=^..0: can't make FS RW: -5 [ 352.120901][ T9] gfs2: fsid=^..0: file system withdrawn [ 352.519724][ T7694] loop0: detected capacity change from 0 to 32768 [ 352.544654][ T7694] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 352.552487][ T7694] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 352.568912][ T7694] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 352.578797][ T5927] gfs2: fsid=^..0: jid=0, already locked for use [ 352.588040][ T5927] gfs2: fsid=^..0: jid=0: Looking at journal... [ 352.644712][ T5927] gfs2: fsid=^..0: jid=0: Journal head lookup took 56ms [ 352.653081][ T5927] gfs2: fsid=^..0: jid=0: Done [ 352.660113][ T7694] gfs2: fsid=^..0: first mount done, others may mount [ 352.694435][ T7694] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 352.709928][ T7694] CPU: 1 UID: 0 PID: 7694 Comm: syz.0.290 Not tainted syzkaller #0 PREEMPT(full) [ 352.709956][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.709969][ T7694] Call Trace: [ 352.709978][ T7694] [ 352.709987][ T7694] dump_stack_lvl+0x189/0x250 [ 352.710014][ T7694] ? __pfx_gfs2_lm+0x10/0x10 [ 352.710037][ T7694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.710062][ T7694] ? folio_unlock+0x101/0x160 [ 352.710100][ T7694] gfs2_withdraw+0xc8/0x160 [ 352.710124][ T7694] gfs2_quota_init+0x1109/0x1200 [ 352.710155][ T7694] ? __lock_acquire+0xab9/0xd20 [ 352.710204][ T7694] ? __pfx_gfs2_quota_init+0x10/0x10 [ 352.710234][ T7694] ? __pfx_wake_up_bit+0x10/0x10 [ 352.710263][ T7694] ? inode_go_inval+0x2a0/0x360 [ 352.710287][ T7694] gfs2_make_fs_rw+0x143/0x220 [ 352.710315][ T7694] gfs2_fill_super+0x1bbf/0x2230 [ 352.710355][ T7694] ? __pfx_gfs2_fill_super+0x10/0x10 [ 352.710381][ T7694] ? init_locking+0xb8/0x210 [ 352.710401][ T7694] ? sb_set_blocksize+0x104/0x180 [ 352.710437][ T7694] ? setup_bdev_super+0x4c1/0x5b0 [ 352.710465][ T7694] get_tree_bdev_flags+0x40e/0x4d0 [ 352.710489][ T7694] ? __pfx_gfs2_fill_super+0x10/0x10 [ 352.710512][ T7694] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 352.710534][ T7694] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 352.710575][ T7694] gfs2_get_tree+0x51/0x1e0 [ 352.710601][ T7694] vfs_get_tree+0x92/0x2b0 [ 352.710628][ T7694] do_new_mount+0x302/0xa10 [ 352.710652][ T7694] ? apparmor_capable+0x137/0x1b0 [ 352.710688][ T7694] ? __pfx_do_new_mount+0x10/0x10 [ 352.710713][ T7694] ? ns_capable+0x8a/0xf0 [ 352.710746][ T7694] ? kmem_cache_free+0x19b/0x690 [ 352.710783][ T7694] __se_sys_mount+0x313/0x410 [ 352.710817][ T7694] ? __pfx___se_sys_mount+0x10/0x10 [ 352.710848][ T7694] ? do_syscall_64+0xbe/0xfa0 [ 352.710872][ T7694] ? __x64_sys_mount+0x20/0xc0 [ 352.710900][ T7694] do_syscall_64+0xfa/0xfa0 [ 352.710917][ T7694] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.710936][ T7694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.710951][ T7694] ? clear_bhb_loop+0x60/0xb0 [ 352.710969][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.710984][ T7694] RIP: 0033:0x7fa1d819066a [ 352.710998][ T7694] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.711011][ T7694] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.711028][ T7694] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 352.711039][ T7694] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 352.711049][ T7694] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 352.711059][ T7694] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 352.711069][ T7694] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 352.711093][ T7694] [ 352.711099][ T7694] gfs2: fsid=^..0: about to withdraw this file system [ 353.001446][ T7694] gfs2: fsid=^..0: can't make FS RW: -5 [ 353.009226][ T5927] gfs2: fsid=^..0: file system withdrawn [ 353.404660][ T7700] loop0: detected capacity change from 0 to 32768 [ 353.420108][ T7700] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 353.435800][ T7700] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 353.452933][ T7700] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 353.462124][ T43] gfs2: fsid=^..0: jid=0, already locked for use [ 353.469802][ T43] gfs2: fsid=^..0: jid=0: Looking at journal... [ 353.526622][ T43] gfs2: fsid=^..0: jid=0: Journal head lookup took 56ms [ 353.534850][ T43] gfs2: fsid=^..0: jid=0: Done [ 353.540337][ T7700] gfs2: fsid=^..0: first mount done, others may mount [ 353.575966][ T7700] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 353.591451][ T7700] CPU: 1 UID: 0 PID: 7700 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full) [ 353.591479][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 353.591504][ T7700] Call Trace: [ 353.591514][ T7700] [ 353.591525][ T7700] dump_stack_lvl+0x189/0x250 [ 353.591554][ T7700] ? __pfx_gfs2_lm+0x10/0x10 [ 353.591577][ T7700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.591600][ T7700] ? folio_unlock+0x101/0x160 [ 353.591635][ T7700] gfs2_withdraw+0xc8/0x160 [ 353.591652][ T7700] gfs2_quota_init+0x1109/0x1200 [ 353.591675][ T7700] ? __lock_acquire+0xab9/0xd20 [ 353.591710][ T7700] ? __pfx_gfs2_quota_init+0x10/0x10 [ 353.591732][ T7700] ? __pfx_wake_up_bit+0x10/0x10 [ 353.591753][ T7700] ? inode_go_inval+0x2a0/0x360 [ 353.591769][ T7700] gfs2_make_fs_rw+0x143/0x220 [ 353.591789][ T7700] gfs2_fill_super+0x1bbf/0x2230 [ 353.591817][ T7700] ? __pfx_gfs2_fill_super+0x10/0x10 [ 353.591835][ T7700] ? init_locking+0xb8/0x210 [ 353.591848][ T7700] ? sb_set_blocksize+0x104/0x180 [ 353.591868][ T7700] ? setup_bdev_super+0x4c1/0x5b0 [ 353.591888][ T7700] get_tree_bdev_flags+0x40e/0x4d0 [ 353.591906][ T7700] ? __pfx_gfs2_fill_super+0x10/0x10 [ 353.591922][ T7700] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 353.591937][ T7700] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 353.591965][ T7700] gfs2_get_tree+0x51/0x1e0 [ 353.591984][ T7700] vfs_get_tree+0x92/0x2b0 [ 353.592002][ T7700] do_new_mount+0x302/0xa10 [ 353.592019][ T7700] ? apparmor_capable+0x137/0x1b0 [ 353.592044][ T7700] ? __pfx_do_new_mount+0x10/0x10 [ 353.592061][ T7700] ? ns_capable+0x8a/0xf0 [ 353.592085][ T7700] ? kmem_cache_free+0x19b/0x690 [ 353.592110][ T7700] __se_sys_mount+0x313/0x410 [ 353.592133][ T7700] ? __pfx___se_sys_mount+0x10/0x10 [ 353.592155][ T7700] ? do_syscall_64+0xbe/0xfa0 [ 353.592173][ T7700] ? __x64_sys_mount+0x20/0xc0 [ 353.592193][ T7700] do_syscall_64+0xfa/0xfa0 [ 353.592210][ T7700] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.592228][ T7700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.592243][ T7700] ? clear_bhb_loop+0x60/0xb0 [ 353.592263][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.592277][ T7700] RIP: 0033:0x7fa1d819066a [ 353.592291][ T7700] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.592304][ T7700] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 353.592320][ T7700] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 353.592331][ T7700] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 353.592342][ T7700] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 353.592353][ T7700] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 353.592363][ T7700] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 353.592387][ T7700] [ 353.592392][ T7700] gfs2: fsid=^..0: about to withdraw this file system [ 353.884527][ T7700] gfs2: fsid=^..0: can't make FS RW: -5 [ 353.891693][ T43] gfs2: fsid=^..0: file system withdrawn [ 354.283124][ T7706] loop0: detected capacity change from 0 to 32768 [ 354.304376][ T7706] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 354.311727][ T7706] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 354.332382][ T7706] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 354.343461][ T43] gfs2: fsid=^..0: jid=0, already locked for use [ 354.349981][ T43] gfs2: fsid=^..0: jid=0: Looking at journal... [ 354.405431][ T43] gfs2: fsid=^..0: jid=0: Journal head lookup took 55ms [ 354.414865][ T43] gfs2: fsid=^..0: jid=0: Done [ 354.419709][ T7706] gfs2: fsid=^..0: first mount done, others may mount [ 354.451331][ T7706] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 354.467664][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.0.292 Not tainted syzkaller #0 PREEMPT(full) [ 354.467693][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.467706][ T7706] Call Trace: [ 354.467716][ T7706] [ 354.467725][ T7706] dump_stack_lvl+0x189/0x250 [ 354.467753][ T7706] ? __pfx_gfs2_lm+0x10/0x10 [ 354.467773][ T7706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.467791][ T7706] ? folio_unlock+0x101/0x160 [ 354.467818][ T7706] gfs2_withdraw+0xc8/0x160 [ 354.467835][ T7706] gfs2_quota_init+0x1109/0x1200 [ 354.467857][ T7706] ? __lock_acquire+0xab9/0xd20 [ 354.467892][ T7706] ? __pfx_gfs2_quota_init+0x10/0x10 [ 354.467914][ T7706] ? __pfx_wake_up_bit+0x10/0x10 [ 354.467934][ T7706] ? inode_go_inval+0x2a0/0x360 [ 354.467950][ T7706] gfs2_make_fs_rw+0x143/0x220 [ 354.467970][ T7706] gfs2_fill_super+0x1bbf/0x2230 [ 354.467997][ T7706] ? __pfx_gfs2_fill_super+0x10/0x10 [ 354.468015][ T7706] ? init_locking+0xb8/0x210 [ 354.468029][ T7706] ? sb_set_blocksize+0x104/0x180 [ 354.468048][ T7706] ? setup_bdev_super+0x4c1/0x5b0 [ 354.468068][ T7706] get_tree_bdev_flags+0x40e/0x4d0 [ 354.468084][ T7706] ? __pfx_gfs2_fill_super+0x10/0x10 [ 354.468100][ T7706] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 354.468115][ T7706] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 354.468144][ T7706] gfs2_get_tree+0x51/0x1e0 [ 354.468162][ T7706] vfs_get_tree+0x92/0x2b0 [ 354.468182][ T7706] do_new_mount+0x302/0xa10 [ 354.468199][ T7706] ? apparmor_capable+0x137/0x1b0 [ 354.468224][ T7706] ? __pfx_do_new_mount+0x10/0x10 [ 354.468242][ T7706] ? ns_capable+0x8a/0xf0 [ 354.468266][ T7706] ? kmem_cache_free+0x19b/0x690 [ 354.468291][ T7706] __se_sys_mount+0x313/0x410 [ 354.468314][ T7706] ? __pfx___se_sys_mount+0x10/0x10 [ 354.468336][ T7706] ? do_syscall_64+0xbe/0xfa0 [ 354.468354][ T7706] ? __x64_sys_mount+0x20/0xc0 [ 354.468375][ T7706] do_syscall_64+0xfa/0xfa0 [ 354.468392][ T7706] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.468410][ T7706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.468433][ T7706] ? clear_bhb_loop+0x60/0xb0 [ 354.468451][ T7706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.468466][ T7706] RIP: 0033:0x7fa1d819066a [ 354.468480][ T7706] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.468493][ T7706] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 354.468509][ T7706] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 354.468520][ T7706] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 354.468531][ T7706] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 354.468541][ T7706] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 354.468552][ T7706] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 354.468576][ T7706] [ 354.468582][ T7706] gfs2: fsid=^..0: about to withdraw this file system [ 354.763703][ T7706] gfs2: fsid=^..0: can't make FS RW: -5 [ 354.775970][ T9] gfs2: fsid=^..0: file system withdrawn [ 355.179391][ T7712] loop0: detected capacity change from 0 to 32768 [ 355.195045][ T7712] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 355.202394][ T7712] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 355.218538][ T7712] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 355.228133][ T9] gfs2: fsid=^..0: jid=0, already locked for use [ 355.234863][ T9] gfs2: fsid=^..0: jid=0: Looking at journal... [ 355.303361][ T9] gfs2: fsid=^..0: jid=0: Journal head lookup took 68ms [ 355.311556][ T9] gfs2: fsid=^..0: jid=0: Done [ 355.317396][ T7712] gfs2: fsid=^..0: first mount done, others may mount [ 355.352851][ T7712] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 355.368366][ T7712] CPU: 0 UID: 0 PID: 7712 Comm: syz.0.293 Not tainted syzkaller #0 PREEMPT(full) [ 355.368403][ T7712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 355.368417][ T7712] Call Trace: [ 355.368427][ T7712] [ 355.368437][ T7712] dump_stack_lvl+0x189/0x250 [ 355.368465][ T7712] ? __pfx_gfs2_lm+0x10/0x10 [ 355.368487][ T7712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.368512][ T7712] ? folio_unlock+0x101/0x160 [ 355.368550][ T7712] gfs2_withdraw+0xc8/0x160 [ 355.368574][ T7712] gfs2_quota_init+0x1109/0x1200 [ 355.368605][ T7712] ? __lock_acquire+0xab9/0xd20 [ 355.368654][ T7712] ? __pfx_gfs2_quota_init+0x10/0x10 [ 355.368683][ T7712] ? __pfx_wake_up_bit+0x10/0x10 [ 355.368712][ T7712] ? inode_go_inval+0x2a0/0x360 [ 355.368735][ T7712] gfs2_make_fs_rw+0x143/0x220 [ 355.368763][ T7712] gfs2_fill_super+0x1bbf/0x2230 [ 355.368802][ T7712] ? __pfx_gfs2_fill_super+0x10/0x10 [ 355.368828][ T7712] ? init_locking+0xb8/0x210 [ 355.368847][ T7712] ? sb_set_blocksize+0x104/0x180 [ 355.368874][ T7712] ? setup_bdev_super+0x4c1/0x5b0 [ 355.368902][ T7712] get_tree_bdev_flags+0x40e/0x4d0 [ 355.368926][ T7712] ? __pfx_gfs2_fill_super+0x10/0x10 [ 355.368948][ T7712] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 355.368969][ T7712] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 355.369009][ T7712] gfs2_get_tree+0x51/0x1e0 [ 355.369035][ T7712] vfs_get_tree+0x92/0x2b0 [ 355.369061][ T7712] do_new_mount+0x302/0xa10 [ 355.369084][ T7712] ? apparmor_capable+0x137/0x1b0 [ 355.369119][ T7712] ? __pfx_do_new_mount+0x10/0x10 [ 355.369144][ T7712] ? ns_capable+0x8a/0xf0 [ 355.369175][ T7712] ? kmem_cache_free+0x19b/0x690 [ 355.369212][ T7712] __se_sys_mount+0x313/0x410 [ 355.369244][ T7712] ? __pfx___se_sys_mount+0x10/0x10 [ 355.369274][ T7712] ? do_syscall_64+0xbe/0xfa0 [ 355.369298][ T7712] ? __x64_sys_mount+0x20/0xc0 [ 355.369327][ T7712] do_syscall_64+0xfa/0xfa0 [ 355.369350][ T7712] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.369375][ T7712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.369403][ T7712] ? clear_bhb_loop+0x60/0xb0 [ 355.369428][ T7712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.369448][ T7712] RIP: 0033:0x7fa1d819066a [ 355.369467][ T7712] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.369484][ T7712] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 355.369506][ T7712] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 355.369522][ T7712] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 355.369537][ T7712] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 355.369551][ T7712] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 355.369565][ T7712] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 355.369601][ T7712] [ 355.369609][ T7712] gfs2: fsid=^..0: about to withdraw this file system [ 355.663463][ T7712] gfs2: fsid=^..0: can't make FS RW: -5 [ 355.671165][ T5927] gfs2: fsid=^..0: file system withdrawn 2025/10/14 07:44:29 executed programs: 279 [ 356.071482][ T7718] loop0: detected capacity change from 0 to 32768 [ 356.087696][ T7718] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 356.097322][ T7718] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 356.113124][ T7718] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 356.124740][ T5927] gfs2: fsid=^..0: jid=0, already locked for use [ 356.131225][ T5927] gfs2: fsid=^..0: jid=0: Looking at journal... [ 356.216788][ T5927] gfs2: fsid=^..0: jid=0: Journal head lookup took 85ms [ 356.225449][ T5927] gfs2: fsid=^..0: jid=0: Done [ 356.230300][ T7718] gfs2: fsid=^..0: first mount done, others may mount [ 356.259957][ T7718] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 356.275884][ T7718] CPU: 1 UID: 0 PID: 7718 Comm: syz.0.294 Not tainted syzkaller #0 PREEMPT(full) [ 356.275906][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 356.275916][ T7718] Call Trace: [ 356.275923][ T7718] [ 356.275929][ T7718] dump_stack_lvl+0x189/0x250 [ 356.275950][ T7718] ? __pfx_gfs2_lm+0x10/0x10 [ 356.275967][ T7718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.275985][ T7718] ? folio_unlock+0x101/0x160 [ 356.276012][ T7718] gfs2_withdraw+0xc8/0x160 [ 356.276028][ T7718] gfs2_quota_init+0x1109/0x1200 [ 356.276058][ T7718] ? __lock_acquire+0xab9/0xd20 [ 356.276093][ T7718] ? __pfx_gfs2_quota_init+0x10/0x10 [ 356.276115][ T7718] ? __pfx_wake_up_bit+0x10/0x10 [ 356.276135][ T7718] ? inode_go_inval+0x2a0/0x360 [ 356.276151][ T7718] gfs2_make_fs_rw+0x143/0x220 [ 356.276171][ T7718] gfs2_fill_super+0x1bbf/0x2230 [ 356.276201][ T7718] ? __pfx_gfs2_fill_super+0x10/0x10 [ 356.276219][ T7718] ? init_locking+0xb8/0x210 [ 356.276232][ T7718] ? sb_set_blocksize+0x104/0x180 [ 356.276252][ T7718] ? setup_bdev_super+0x4c1/0x5b0 [ 356.276272][ T7718] get_tree_bdev_flags+0x40e/0x4d0 [ 356.276289][ T7718] ? __pfx_gfs2_fill_super+0x10/0x10 [ 356.276304][ T7718] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 356.276320][ T7718] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 356.276348][ T7718] gfs2_get_tree+0x51/0x1e0 [ 356.276366][ T7718] vfs_get_tree+0x92/0x2b0 [ 356.276385][ T7718] do_new_mount+0x302/0xa10 [ 356.276401][ T7718] ? apparmor_capable+0x137/0x1b0 [ 356.276427][ T7718] ? __pfx_do_new_mount+0x10/0x10 [ 356.276445][ T7718] ? ns_capable+0x8a/0xf0 [ 356.276468][ T7718] ? kmem_cache_free+0x19b/0x690 [ 356.276494][ T7718] __se_sys_mount+0x313/0x410 [ 356.276517][ T7718] ? __pfx___se_sys_mount+0x10/0x10 [ 356.276538][ T7718] ? do_syscall_64+0xbe/0xfa0 [ 356.276556][ T7718] ? __x64_sys_mount+0x20/0xc0 [ 356.276576][ T7718] do_syscall_64+0xfa/0xfa0 [ 356.276593][ T7718] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.276611][ T7718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.276625][ T7718] ? clear_bhb_loop+0x60/0xb0 [ 356.276643][ T7718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.276657][ T7718] RIP: 0033:0x7fa1d819066a [ 356.276671][ T7718] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.276683][ T7718] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.276699][ T7718] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 356.276710][ T7718] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 356.276721][ T7718] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 356.276731][ T7718] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 356.276741][ T7718] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 356.276765][ T7718] [ 356.276770][ T7718] gfs2: fsid=^..0: about to withdraw this file system [ 356.570334][ T7718] gfs2: fsid=^..0: can't make FS RW: -5 [ 356.580426][ T9] gfs2: fsid=^..0: file system withdrawn [ 356.987983][ T7724] loop0: detected capacity change from 0 to 32768 [ 357.007280][ T7724] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 357.015199][ T7724] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 357.030644][ T7724] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 357.040641][ T9] gfs2: fsid=^..0: jid=0, already locked for use [ 357.047537][ T9] gfs2: fsid=^..0: jid=0: Looking at journal... [ 357.097612][ T9] gfs2: fsid=^..0: jid=0: Journal head lookup took 50ms [ 357.104866][ T9] gfs2: fsid=^..0: jid=0: Done [ 357.110458][ T7724] gfs2: fsid=^..0: first mount done, others may mount [ 357.146584][ T7724] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 357.164200][ T7724] CPU: 0 UID: 0 PID: 7724 Comm: syz.0.295 Not tainted syzkaller #0 PREEMPT(full) [ 357.164228][ T7724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.164239][ T7724] Call Trace: [ 357.164247][ T7724] [ 357.164254][ T7724] dump_stack_lvl+0x189/0x250 [ 357.164278][ T7724] ? __pfx_gfs2_lm+0x10/0x10 [ 357.164296][ T7724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.164316][ T7724] ? folio_unlock+0x101/0x160 [ 357.164347][ T7724] gfs2_withdraw+0xc8/0x160 [ 357.164365][ T7724] gfs2_quota_init+0x1109/0x1200 [ 357.164391][ T7724] ? __lock_acquire+0xab9/0xd20 [ 357.164429][ T7724] ? __pfx_gfs2_quota_init+0x10/0x10 [ 357.164454][ T7724] ? __pfx_wake_up_bit+0x10/0x10 [ 357.164476][ T7724] ? inode_go_inval+0x2a0/0x360 [ 357.164495][ T7724] gfs2_make_fs_rw+0x143/0x220 [ 357.164517][ T7724] gfs2_fill_super+0x1bbf/0x2230 [ 357.164548][ T7724] ? __pfx_gfs2_fill_super+0x10/0x10 [ 357.164568][ T7724] ? init_locking+0xb8/0x210 [ 357.164584][ T7724] ? sb_set_blocksize+0x104/0x180 [ 357.164606][ T7724] ? setup_bdev_super+0x4c1/0x5b0 [ 357.164628][ T7724] get_tree_bdev_flags+0x40e/0x4d0 [ 357.164647][ T7724] ? __pfx_gfs2_fill_super+0x10/0x10 [ 357.164665][ T7724] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 357.164683][ T7724] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 357.164715][ T7724] gfs2_get_tree+0x51/0x1e0 [ 357.164736][ T7724] vfs_get_tree+0x92/0x2b0 [ 357.164757][ T7724] do_new_mount+0x302/0xa10 [ 357.164776][ T7724] ? apparmor_capable+0x137/0x1b0 [ 357.164805][ T7724] ? __pfx_do_new_mount+0x10/0x10 [ 357.164825][ T7724] ? ns_capable+0x8a/0xf0 [ 357.164851][ T7724] ? kmem_cache_free+0x19b/0x690 [ 357.164880][ T7724] __se_sys_mount+0x313/0x410 [ 357.164906][ T7724] ? __pfx___se_sys_mount+0x10/0x10 [ 357.164931][ T7724] ? do_syscall_64+0xbe/0xfa0 [ 357.164959][ T7724] ? __x64_sys_mount+0x20/0xc0 [ 357.164981][ T7724] do_syscall_64+0xfa/0xfa0 [ 357.165001][ T7724] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.165021][ T7724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.165038][ T7724] ? clear_bhb_loop+0x60/0xb0 [ 357.165059][ T7724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.165075][ T7724] RIP: 0033:0x7fa1d819066a [ 357.165091][ T7724] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.165105][ T7724] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 357.165124][ T7724] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 357.165137][ T7724] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 357.165149][ T7724] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 357.165161][ T7724] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 357.165172][ T7724] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 357.165199][ T7724] [ 357.165211][ T7724] gfs2: fsid=^..0: about to withdraw this file system [ 357.455502][ T7724] gfs2: fsid=^..0: can't make FS RW: -5 [ 357.462729][ T43] gfs2: fsid=^..0: file system withdrawn [ 357.870959][ T7730] loop0: detected capacity change from 0 to 32768 [ 357.886943][ T7730] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 357.895475][ T7730] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 357.912340][ T7730] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 357.921629][ T43] gfs2: fsid=^..0: jid=0, already locked for use [ 357.928973][ T43] gfs2: fsid=^..0: jid=0: Looking at journal... [ 357.992674][ T43] gfs2: fsid=^..0: jid=0: Journal head lookup took 63ms [ 358.002073][ T43] gfs2: fsid=^..0: jid=0: Done [ 358.007383][ T7730] gfs2: fsid=^..0: first mount done, others may mount [ 358.047611][ T7730] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 358.062994][ T7730] CPU: 1 UID: 0 PID: 7730 Comm: syz.0.296 Not tainted syzkaller #0 PREEMPT(full) [ 358.063023][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.063036][ T7730] Call Trace: [ 358.063046][ T7730] [ 358.063055][ T7730] dump_stack_lvl+0x189/0x250 [ 358.063085][ T7730] ? __pfx_gfs2_lm+0x10/0x10 [ 358.063102][ T7730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.063132][ T7730] gfs2_withdraw+0xc8/0x160 [ 358.063148][ T7730] gfs2_quota_init+0x1109/0x1200 [ 358.063171][ T7730] ? __lock_acquire+0xab9/0xd20 [ 358.063206][ T7730] ? __pfx_gfs2_quota_init+0x10/0x10 [ 358.063227][ T7730] ? __pfx_wake_up_bit+0x10/0x10 [ 358.063248][ T7730] ? inode_go_inval+0x2a0/0x360 [ 358.063264][ T7730] gfs2_make_fs_rw+0x143/0x220 [ 358.063284][ T7730] gfs2_fill_super+0x1bbf/0x2230 [ 358.063312][ T7730] ? __pfx_gfs2_fill_super+0x10/0x10 [ 358.063330][ T7730] ? init_locking+0xb8/0x210 [ 358.063344][ T7730] ? sb_set_blocksize+0x104/0x180 [ 358.063363][ T7730] ? setup_bdev_super+0x4c1/0x5b0 [ 358.063383][ T7730] get_tree_bdev_flags+0x40e/0x4d0 [ 358.063400][ T7730] ? __pfx_gfs2_fill_super+0x10/0x10 [ 358.063416][ T7730] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 358.063431][ T7730] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 358.063460][ T7730] gfs2_get_tree+0x51/0x1e0 [ 358.063478][ T7730] vfs_get_tree+0x92/0x2b0 [ 358.063497][ T7730] do_new_mount+0x302/0xa10 [ 358.063514][ T7730] ? apparmor_capable+0x137/0x1b0 [ 358.063539][ T7730] ? __pfx_do_new_mount+0x10/0x10 [ 358.063557][ T7730] ? ns_capable+0x8a/0xf0 [ 358.063581][ T7730] ? kmem_cache_free+0x19b/0x690 [ 358.063614][ T7730] __se_sys_mount+0x313/0x410 [ 358.063647][ T7730] ? __pfx___se_sys_mount+0x10/0x10 [ 358.063677][ T7730] ? do_syscall_64+0xbe/0xfa0 [ 358.063701][ T7730] ? __x64_sys_mount+0x20/0xc0 [ 358.063728][ T7730] do_syscall_64+0xfa/0xfa0 [ 358.063753][ T7730] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.063772][ T7730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.063787][ T7730] ? clear_bhb_loop+0x60/0xb0 [ 358.063805][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.063833][ T7730] RIP: 0033:0x7fa1d819066a [ 358.063848][ T7730] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.063861][ T7730] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.063877][ T7730] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 358.063889][ T7730] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 358.063900][ T7730] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 358.063910][ T7730] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 358.063920][ T7730] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 358.063944][ T7730] [ 358.342087][ T7730] gfs2: fsid=^..0: about to withdraw this file system [ 358.350237][ T7730] gfs2: fsid=^..0: can't make FS RW: -5 [ 358.357588][ T43] gfs2: fsid=^..0: file system withdrawn [ 358.757382][ T7736] loop0: detected capacity change from 0 to 32768 [ 358.773197][ T7736] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 358.781232][ T7736] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 358.797501][ T7736] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 358.806835][ T9] gfs2: fsid=^..0: jid=0, already locked for use [ 358.813224][ T9] gfs2: fsid=^..0: jid=0: Looking at journal... [ 358.861489][ T9] gfs2: fsid=^..0: jid=0: Journal head lookup took 48ms [ 358.868986][ T9] gfs2: fsid=^..0: jid=0: Done [ 358.874639][ T7736] gfs2: fsid=^..0: first mount done, others may mount [ 358.915549][ T7736] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 358.930963][ T7736] CPU: 0 UID: 0 PID: 7736 Comm: syz.0.297 Not tainted syzkaller #0 PREEMPT(full) [ 358.930990][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.931004][ T7736] Call Trace: [ 358.931015][ T7736] [ 358.931027][ T7736] dump_stack_lvl+0x189/0x250 [ 358.931052][ T7736] ? __pfx_gfs2_lm+0x10/0x10 [ 358.931069][ T7736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.931086][ T7736] ? folio_unlock+0x101/0x160 [ 358.931114][ T7736] gfs2_withdraw+0xc8/0x160 [ 358.931130][ T7736] gfs2_quota_init+0x1109/0x1200 [ 358.931154][ T7736] ? __lock_acquire+0xab9/0xd20 [ 358.931189][ T7736] ? __pfx_gfs2_quota_init+0x10/0x10 [ 358.931211][ T7736] ? __pfx_wake_up_bit+0x10/0x10 [ 358.931231][ T7736] ? inode_go_inval+0x2a0/0x360 [ 358.931248][ T7736] gfs2_make_fs_rw+0x143/0x220 [ 358.931268][ T7736] gfs2_fill_super+0x1bbf/0x2230 [ 358.931297][ T7736] ? __pfx_gfs2_fill_super+0x10/0x10 [ 358.931315][ T7736] ? init_locking+0xb8/0x210 [ 358.931329][ T7736] ? sb_set_blocksize+0x104/0x180 [ 358.931349][ T7736] ? setup_bdev_super+0x4c1/0x5b0 [ 358.931369][ T7736] get_tree_bdev_flags+0x40e/0x4d0 [ 358.931387][ T7736] ? __pfx_gfs2_fill_super+0x10/0x10 [ 358.931403][ T7736] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 358.931419][ T7736] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 358.931448][ T7736] gfs2_get_tree+0x51/0x1e0 [ 358.931467][ T7736] vfs_get_tree+0x92/0x2b0 [ 358.931486][ T7736] do_new_mount+0x302/0xa10 [ 358.931503][ T7736] ? apparmor_capable+0x137/0x1b0 [ 358.931528][ T7736] ? __pfx_do_new_mount+0x10/0x10 [ 358.931546][ T7736] ? ns_capable+0x8a/0xf0 [ 358.931569][ T7736] ? kmem_cache_free+0x19b/0x690 [ 358.931594][ T7736] __se_sys_mount+0x313/0x410 [ 358.931618][ T7736] ? __pfx___se_sys_mount+0x10/0x10 [ 358.931639][ T7736] ? do_syscall_64+0xbe/0xfa0 [ 358.931658][ T7736] ? __x64_sys_mount+0x20/0xc0 [ 358.931677][ T7736] do_syscall_64+0xfa/0xfa0 [ 358.931695][ T7736] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.931713][ T7736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.931728][ T7736] ? clear_bhb_loop+0x60/0xb0 [ 358.931746][ T7736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.931761][ T7736] RIP: 0033:0x7fa1d819066a [ 358.931782][ T7736] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.931795][ T7736] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.931811][ T7736] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 358.931822][ T7736] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 358.931833][ T7736] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 358.931843][ T7736] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 358.931853][ T7736] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 358.931877][ T7736] [ 358.931883][ T7736] gfs2: fsid=^..0: about to withdraw this file system [ 359.227290][ T7736] gfs2: fsid=^..0: can't make FS RW: -5 [ 359.235644][ T43] gfs2: fsid=^..0: file system withdrawn [ 359.635264][ T7742] loop0: detected capacity change from 0 to 32768 [ 359.657736][ T7742] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 359.667883][ T7742] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 359.690799][ T7742] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 359.701405][ T89] gfs2: fsid=^..0: jid=0, already locked for use [ 359.708264][ T89] gfs2: fsid=^..0: jid=0: Looking at journal... [ 359.760272][ T89] gfs2: fsid=^..0: jid=0: Journal head lookup took 52ms [ 359.768297][ T89] gfs2: fsid=^..0: jid=0: Done [ 359.773535][ T7742] gfs2: fsid=^..0: first mount done, others may mount [ 359.807543][ T7742] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 359.823644][ T7742] CPU: 0 UID: 0 PID: 7742 Comm: syz.0.298 Not tainted syzkaller #0 PREEMPT(full) [ 359.823674][ T7742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 359.823689][ T7742] Call Trace: [ 359.823698][ T7742] [ 359.823707][ T7742] dump_stack_lvl+0x189/0x250 [ 359.823735][ T7742] ? __pfx_gfs2_lm+0x10/0x10 [ 359.823758][ T7742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.823792][ T7742] ? folio_unlock+0x101/0x160 [ 359.823830][ T7742] gfs2_withdraw+0xc8/0x160 [ 359.823854][ T7742] gfs2_quota_init+0x1109/0x1200 [ 359.823885][ T7742] ? __lock_acquire+0xab9/0xd20 [ 359.823934][ T7742] ? __pfx_gfs2_quota_init+0x10/0x10 [ 359.823965][ T7742] ? __pfx_wake_up_bit+0x10/0x10 [ 359.823995][ T7742] ? inode_go_inval+0x2a0/0x360 [ 359.824018][ T7742] gfs2_make_fs_rw+0x143/0x220 [ 359.824046][ T7742] gfs2_fill_super+0x1bbf/0x2230 [ 359.824086][ T7742] ? __pfx_gfs2_fill_super+0x10/0x10 [ 359.824112][ T7742] ? init_locking+0xb8/0x210 [ 359.824131][ T7742] ? sb_set_blocksize+0x104/0x180 [ 359.824159][ T7742] ? setup_bdev_super+0x4c1/0x5b0 [ 359.824187][ T7742] get_tree_bdev_flags+0x40e/0x4d0 [ 359.824211][ T7742] ? __pfx_gfs2_fill_super+0x10/0x10 [ 359.824234][ T7742] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 359.824256][ T7742] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 359.824297][ T7742] gfs2_get_tree+0x51/0x1e0 [ 359.824323][ T7742] vfs_get_tree+0x92/0x2b0 [ 359.824350][ T7742] do_new_mount+0x302/0xa10 [ 359.824373][ T7742] ? apparmor_capable+0x137/0x1b0 [ 359.824409][ T7742] ? __pfx_do_new_mount+0x10/0x10 [ 359.824435][ T7742] ? ns_capable+0x8a/0xf0 [ 359.824467][ T7742] ? kmem_cache_free+0x19b/0x690 [ 359.824503][ T7742] __se_sys_mount+0x313/0x410 [ 359.824536][ T7742] ? __pfx___se_sys_mount+0x10/0x10 [ 359.824567][ T7742] ? do_syscall_64+0xbe/0xfa0 [ 359.824593][ T7742] ? __x64_sys_mount+0x20/0xc0 [ 359.824621][ T7742] do_syscall_64+0xfa/0xfa0 [ 359.824646][ T7742] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.824671][ T7742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.824691][ T7742] ? clear_bhb_loop+0x60/0xb0 [ 359.824717][ T7742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.824737][ T7742] RIP: 0033:0x7fa1d819066a [ 359.824757][ T7742] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.824782][ T7742] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 359.824805][ T7742] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 359.824820][ T7742] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 359.824836][ T7742] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 359.824850][ T7742] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 359.824864][ T7742] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 359.824900][ T7742] [ 359.824909][ T7742] gfs2: fsid=^..0: about to withdraw this file system [ 360.118674][ T5927] gfs2: fsid=^..0: file system withdrawn [ 360.124100][ T7742] gfs2: fsid=^..0: can't make FS RW: -5 [ 360.528349][ T7748] loop0: detected capacity change from 0 to 32768 [ 360.543469][ T7748] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 360.552820][ T7748] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 360.570730][ T7748] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 360.580666][ T5927] gfs2: fsid=^..0: jid=0, already locked for use [ 360.587453][ T5927] gfs2: fsid=^..0: jid=0: Looking at journal... [ 360.639607][ T5927] gfs2: fsid=^..0: jid=0: Journal head lookup took 52ms [ 360.646921][ T5927] gfs2: fsid=^..0: jid=0: Done [ 360.653925][ T7748] gfs2: fsid=^..0: first mount done, others may mount [ 360.687484][ T7748] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 360.703736][ T7748] CPU: 0 UID: 0 PID: 7748 Comm: syz.0.299 Not tainted syzkaller #0 PREEMPT(full) [ 360.703766][ T7748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.703780][ T7748] Call Trace: [ 360.703788][ T7748] [ 360.703798][ T7748] dump_stack_lvl+0x189/0x250 [ 360.703828][ T7748] ? __pfx_gfs2_lm+0x10/0x10 [ 360.703851][ T7748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.703877][ T7748] ? folio_unlock+0x101/0x160 [ 360.703916][ T7748] gfs2_withdraw+0xc8/0x160 [ 360.703939][ T7748] gfs2_quota_init+0x1109/0x1200 [ 360.703971][ T7748] ? __lock_acquire+0xab9/0xd20 [ 360.704019][ T7748] ? __pfx_gfs2_quota_init+0x10/0x10 [ 360.704050][ T7748] ? __pfx_wake_up_bit+0x10/0x10 [ 360.704079][ T7748] ? inode_go_inval+0x2a0/0x360 [ 360.704104][ T7748] gfs2_make_fs_rw+0x143/0x220 [ 360.704132][ T7748] gfs2_fill_super+0x1bbf/0x2230 [ 360.704172][ T7748] ? __pfx_gfs2_fill_super+0x10/0x10 [ 360.704198][ T7748] ? init_locking+0xb8/0x210 [ 360.704216][ T7748] ? sb_set_blocksize+0x104/0x180 [ 360.704243][ T7748] ? setup_bdev_super+0x4c1/0x5b0 [ 360.704271][ T7748] get_tree_bdev_flags+0x40e/0x4d0 [ 360.704295][ T7748] ? __pfx_gfs2_fill_super+0x10/0x10 [ 360.704318][ T7748] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 360.704339][ T7748] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 360.704380][ T7748] gfs2_get_tree+0x51/0x1e0 [ 360.704406][ T7748] vfs_get_tree+0x92/0x2b0 [ 360.704432][ T7748] do_new_mount+0x302/0xa10 [ 360.704456][ T7748] ? apparmor_capable+0x137/0x1b0 [ 360.704491][ T7748] ? __pfx_do_new_mount+0x10/0x10 [ 360.704516][ T7748] ? ns_capable+0x8a/0xf0 [ 360.704549][ T7748] ? kmem_cache_free+0x19b/0x690 [ 360.704586][ T7748] __se_sys_mount+0x313/0x410 [ 360.704619][ T7748] ? __pfx___se_sys_mount+0x10/0x10 [ 360.704657][ T7748] ? do_syscall_64+0xbe/0xfa0 [ 360.704682][ T7748] ? __x64_sys_mount+0x20/0xc0 [ 360.704711][ T7748] do_syscall_64+0xfa/0xfa0 [ 360.704735][ T7748] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.704759][ T7748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.704778][ T7748] ? clear_bhb_loop+0x60/0xb0 [ 360.704803][ T7748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.704823][ T7748] RIP: 0033:0x7fa1d819066a [ 360.704842][ T7748] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.704856][ T7748] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.704872][ T7748] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 360.704884][ T7748] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 360.704895][ T7748] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 360.704906][ T7748] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 360.704916][ T7748] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 360.704940][ T7748] [ 360.704946][ T7748] gfs2: fsid=^..0: about to withdraw this file system [ 360.996140][ T7748] gfs2: fsid=^..0: can't make FS RW: -5 [ 361.005414][ T5927] gfs2: fsid=^..0: file system withdrawn 2025/10/14 07:44:34 executed programs: 285 [ 361.408693][ T7754] loop0: detected capacity change from 0 to 32768 [ 361.431091][ T7754] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 361.441279][ T7754] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 361.459418][ T7754] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 361.469201][ T89] gfs2: fsid=^..0: jid=0, already locked for use [ 361.477755][ T89] gfs2: fsid=^..0: jid=0: Looking at journal... [ 361.527098][ T89] gfs2: fsid=^..0: jid=0: Journal head lookup took 49ms [ 361.535103][ T89] gfs2: fsid=^..0: jid=0: Done [ 361.540409][ T7754] gfs2: fsid=^..0: first mount done, others may mount [ 361.569589][ T7754] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 361.585576][ T7754] CPU: 1 UID: 0 PID: 7754 Comm: syz.0.300 Not tainted syzkaller #0 PREEMPT(full) [ 361.585598][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.585608][ T7754] Call Trace: [ 361.585615][ T7754] [ 361.585621][ T7754] dump_stack_lvl+0x189/0x250 [ 361.585643][ T7754] ? __pfx_gfs2_lm+0x10/0x10 [ 361.585659][ T7754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.585676][ T7754] ? folio_unlock+0x101/0x160 [ 361.585704][ T7754] gfs2_withdraw+0xc8/0x160 [ 361.585720][ T7754] gfs2_quota_init+0x1109/0x1200 [ 361.585743][ T7754] ? __lock_acquire+0xab9/0xd20 [ 361.585777][ T7754] ? __pfx_gfs2_quota_init+0x10/0x10 [ 361.585798][ T7754] ? __pfx_wake_up_bit+0x10/0x10 [ 361.585820][ T7754] ? inode_go_inval+0x2a0/0x360 [ 361.585837][ T7754] gfs2_make_fs_rw+0x143/0x220 [ 361.585856][ T7754] gfs2_fill_super+0x1bbf/0x2230 [ 361.585884][ T7754] ? __pfx_gfs2_fill_super+0x10/0x10 [ 361.585902][ T7754] ? init_locking+0xb8/0x210 [ 361.585915][ T7754] ? sb_set_blocksize+0x104/0x180 [ 361.585935][ T7754] ? setup_bdev_super+0x4c1/0x5b0 [ 361.585954][ T7754] get_tree_bdev_flags+0x40e/0x4d0 [ 361.585971][ T7754] ? __pfx_gfs2_fill_super+0x10/0x10 [ 361.585987][ T7754] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 361.586002][ T7754] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 361.586031][ T7754] gfs2_get_tree+0x51/0x1e0 [ 361.586049][ T7754] vfs_get_tree+0x92/0x2b0 [ 361.586067][ T7754] do_new_mount+0x302/0xa10 [ 361.586084][ T7754] ? apparmor_capable+0x137/0x1b0 [ 361.586110][ T7754] ? __pfx_do_new_mount+0x10/0x10 [ 361.586128][ T7754] ? ns_capable+0x8a/0xf0 [ 361.586151][ T7754] ? kmem_cache_free+0x19b/0x690 [ 361.586181][ T7754] __se_sys_mount+0x313/0x410 [ 361.586204][ T7754] ? __pfx___se_sys_mount+0x10/0x10 [ 361.586226][ T7754] ? do_syscall_64+0xbe/0xfa0 [ 361.586244][ T7754] ? __x64_sys_mount+0x20/0xc0 [ 361.586264][ T7754] do_syscall_64+0xfa/0xfa0 [ 361.586281][ T7754] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.586300][ T7754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.586314][ T7754] ? clear_bhb_loop+0x60/0xb0 [ 361.586333][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.586347][ T7754] RIP: 0033:0x7fa1d819066a [ 361.586361][ T7754] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.586374][ T7754] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 361.586390][ T7754] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 361.586417][ T7754] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 361.586428][ T7754] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 361.586438][ T7754] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 361.586448][ T7754] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 361.586473][ T7754] [ 361.586478][ T7754] gfs2: fsid=^..0: about to withdraw this file system [ 361.882141][ T7754] gfs2: fsid=^..0: can't make FS RW: -5 [ 361.890235][ T89] gfs2: fsid=^..0: file system withdrawn [ 362.290276][ T7760] loop0: detected capacity change from 0 to 32768 [ 362.307529][ T7760] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 362.315153][ T7760] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 362.330802][ T7760] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 362.341401][ T89] gfs2: fsid=^..0: jid=0, already locked for use [ 362.348603][ T89] gfs2: fsid=^..0: jid=0: Looking at journal... [ 362.420386][ T89] gfs2: fsid=^..0: jid=0: Journal head lookup took 71ms [ 362.428398][ T89] gfs2: fsid=^..0: jid=0: Done [ 362.433435][ T7760] gfs2: fsid=^..0: first mount done, others may mount [ 362.471066][ T7760] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 362.488076][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.0.301 Not tainted syzkaller #0 PREEMPT(full) [ 362.488098][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.488108][ T7760] Call Trace: [ 362.488114][ T7760] [ 362.488121][ T7760] dump_stack_lvl+0x189/0x250 [ 362.488142][ T7760] ? __pfx_gfs2_lm+0x10/0x10 [ 362.488158][ T7760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.488187][ T7760] gfs2_withdraw+0xc8/0x160 [ 362.488203][ T7760] gfs2_quota_init+0x1109/0x1200 [ 362.488226][ T7760] ? __lock_acquire+0xab9/0xd20 [ 362.488260][ T7760] ? __pfx_gfs2_quota_init+0x10/0x10 [ 362.488281][ T7760] ? __pfx_wake_up_bit+0x10/0x10 [ 362.488302][ T7760] ? inode_go_inval+0x2a0/0x360 [ 362.488318][ T7760] gfs2_make_fs_rw+0x143/0x220 [ 362.488337][ T7760] gfs2_fill_super+0x1bbf/0x2230 [ 362.488364][ T7760] ? __pfx_gfs2_fill_super+0x10/0x10 [ 362.488382][ T7760] ? init_locking+0xb8/0x210 [ 362.488396][ T7760] ? sb_set_blocksize+0x104/0x180 [ 362.488415][ T7760] ? setup_bdev_super+0x4c1/0x5b0 [ 362.488435][ T7760] get_tree_bdev_flags+0x40e/0x4d0 [ 362.488452][ T7760] ? __pfx_gfs2_fill_super+0x10/0x10 [ 362.488467][ T7760] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 362.488488][ T7760] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 362.488517][ T7760] gfs2_get_tree+0x51/0x1e0 [ 362.488535][ T7760] vfs_get_tree+0x92/0x2b0 [ 362.488554][ T7760] do_new_mount+0x302/0xa10 [ 362.488571][ T7760] ? apparmor_capable+0x137/0x1b0 [ 362.488597][ T7760] ? __pfx_do_new_mount+0x10/0x10 [ 362.488615][ T7760] ? ns_capable+0x8a/0xf0 [ 362.488638][ T7760] ? kmem_cache_free+0x19b/0x690 [ 362.488664][ T7760] __se_sys_mount+0x313/0x410 [ 362.488687][ T7760] ? __pfx___se_sys_mount+0x10/0x10 [ 362.488708][ T7760] ? do_syscall_64+0xbe/0xfa0 [ 362.488726][ T7760] ? __x64_sys_mount+0x20/0xc0 [ 362.488746][ T7760] do_syscall_64+0xfa/0xfa0 [ 362.488763][ T7760] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.488780][ T7760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.488795][ T7760] ? clear_bhb_loop+0x60/0xb0 [ 362.488814][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.488827][ T7760] RIP: 0033:0x7fa1d819066a [ 362.488842][ T7760] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.488854][ T7760] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 362.488871][ T7760] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 362.488882][ T7760] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 362.488893][ T7760] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 362.488903][ T7760] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 362.488913][ T7760] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 362.488937][ T7760] [ 362.488943][ T7760] gfs2: fsid=^..0: about to withdraw this file system [ 362.777867][ T5927] gfs2: fsid=^..0: file system withdrawn [ 362.783562][ T7760] gfs2: fsid=^..0: can't make FS RW: -5 [ 363.190747][ T7766] loop0: detected capacity change from 0 to 32768 [ 363.211919][ T7766] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 363.221602][ T7766] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 363.238559][ T7766] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 363.249719][ T9] gfs2: fsid=^..0: jid=0, already locked for use [ 363.256612][ T9] gfs2: fsid=^..0: jid=0: Looking at journal... [ 363.337991][ T9] gfs2: fsid=^..0: jid=0: Journal head lookup took 81ms [ 363.345267][ T9] gfs2: fsid=^..0: jid=0: Done [ 363.350086][ T7766] gfs2: fsid=^..0: first mount done, others may mount [ 363.381969][ T7766] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 363.397392][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(full) [ 363.397421][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.397440][ T7766] Call Trace: [ 363.397452][ T7766] [ 363.397471][ T7766] dump_stack_lvl+0x189/0x250 [ 363.397494][ T7766] ? __pfx_gfs2_lm+0x10/0x10 [ 363.397510][ T7766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.397527][ T7766] ? folio_unlock+0x101/0x160 [ 363.397555][ T7766] gfs2_withdraw+0xc8/0x160 [ 363.397571][ T7766] gfs2_quota_init+0x1109/0x1200 [ 363.397594][ T7766] ? __lock_acquire+0xab9/0xd20 [ 363.397628][ T7766] ? __pfx_gfs2_quota_init+0x10/0x10 [ 363.397649][ T7766] ? __pfx_wake_up_bit+0x10/0x10 [ 363.397670][ T7766] ? inode_go_inval+0x2a0/0x360 [ 363.397687][ T7766] gfs2_make_fs_rw+0x143/0x220 [ 363.397706][ T7766] gfs2_fill_super+0x1bbf/0x2230 [ 363.397734][ T7766] ? __pfx_gfs2_fill_super+0x10/0x10 [ 363.397752][ T7766] ? init_locking+0xb8/0x210 [ 363.397766][ T7766] ? sb_set_blocksize+0x104/0x180 [ 363.397785][ T7766] ? setup_bdev_super+0x4c1/0x5b0 [ 363.397805][ T7766] get_tree_bdev_flags+0x40e/0x4d0 [ 363.397823][ T7766] ? __pfx_gfs2_fill_super+0x10/0x10 [ 363.397838][ T7766] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 363.397854][ T7766] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 363.397883][ T7766] gfs2_get_tree+0x51/0x1e0 [ 363.397901][ T7766] vfs_get_tree+0x92/0x2b0 [ 363.397919][ T7766] do_new_mount+0x302/0xa10 [ 363.397937][ T7766] ? apparmor_capable+0x137/0x1b0 [ 363.397962][ T7766] ? __pfx_do_new_mount+0x10/0x10 [ 363.397979][ T7766] ? ns_capable+0x8a/0xf0 [ 363.398003][ T7766] ? kmem_cache_free+0x19b/0x690 [ 363.398029][ T7766] __se_sys_mount+0x313/0x410 [ 363.398052][ T7766] ? __pfx___se_sys_mount+0x10/0x10 [ 363.398074][ T7766] ? do_syscall_64+0xbe/0xfa0 [ 363.398092][ T7766] ? __x64_sys_mount+0x20/0xc0 [ 363.398112][ T7766] do_syscall_64+0xfa/0xfa0 [ 363.398130][ T7766] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.398148][ T7766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.398162][ T7766] ? clear_bhb_loop+0x60/0xb0 [ 363.398181][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.398199][ T7766] RIP: 0033:0x7fa1d819066a [ 363.398213][ T7766] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.398226][ T7766] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 363.398243][ T7766] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 363.398254][ T7766] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 363.398264][ T7766] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 363.398275][ T7766] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 363.398285][ T7766] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 363.398309][ T7766] [ 363.398315][ T7766] gfs2: fsid=^..0: about to withdraw this file system [ 363.688600][ T7766] gfs2: fsid=^..0: can't make FS RW: -5 [ 363.695800][ T5927] gfs2: fsid=^..0: file system withdrawn [ 364.102283][ T7772] loop0: detected capacity change from 0 to 32768 [ 364.121679][ T7772] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 364.129153][ T7772] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 364.145745][ T7772] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 364.156023][ T9] gfs2: fsid=^..0: jid=0, already locked for use [ 364.162414][ T9] gfs2: fsid=^..0: jid=0: Looking at journal... [ 364.218717][ T9] gfs2: fsid=^..0: jid=0: Journal head lookup took 56ms [ 364.226138][ T9] gfs2: fsid=^..0: jid=0: Done [ 364.231682][ T7772] gfs2: fsid=^..0: first mount done, others may mount [ 364.268306][ T7772] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 364.285343][ T7772] CPU: 0 UID: 0 PID: 7772 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT(full) [ 364.285374][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 364.285388][ T7772] Call Trace: [ 364.285398][ T7772] [ 364.285407][ T7772] dump_stack_lvl+0x189/0x250 [ 364.285436][ T7772] ? __pfx_gfs2_lm+0x10/0x10 [ 364.285458][ T7772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.285483][ T7772] ? folio_unlock+0x101/0x160 [ 364.285522][ T7772] gfs2_withdraw+0xc8/0x160 [ 364.285546][ T7772] gfs2_quota_init+0x1109/0x1200 [ 364.285578][ T7772] ? __lock_acquire+0xab9/0xd20 [ 364.285628][ T7772] ? __pfx_gfs2_quota_init+0x10/0x10 [ 364.285658][ T7772] ? __pfx_wake_up_bit+0x10/0x10 [ 364.285688][ T7772] ? inode_go_inval+0x2a0/0x360 [ 364.285711][ T7772] gfs2_make_fs_rw+0x143/0x220 [ 364.285739][ T7772] gfs2_fill_super+0x1bbf/0x2230 [ 364.285779][ T7772] ? __pfx_gfs2_fill_super+0x10/0x10 [ 364.285804][ T7772] ? init_locking+0xb8/0x210 [ 364.285824][ T7772] ? sb_set_blocksize+0x104/0x180 [ 364.285851][ T7772] ? setup_bdev_super+0x4c1/0x5b0 [ 364.285879][ T7772] get_tree_bdev_flags+0x40e/0x4d0 [ 364.285903][ T7772] ? __pfx_gfs2_fill_super+0x10/0x10 [ 364.285925][ T7772] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 364.285947][ T7772] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 364.285988][ T7772] gfs2_get_tree+0x51/0x1e0 [ 364.286015][ T7772] vfs_get_tree+0x92/0x2b0 [ 364.286042][ T7772] do_new_mount+0x302/0xa10 [ 364.286065][ T7772] ? apparmor_capable+0x137/0x1b0 [ 364.286101][ T7772] ? __pfx_do_new_mount+0x10/0x10 [ 364.286127][ T7772] ? ns_capable+0x8a/0xf0 [ 364.286159][ T7772] ? kmem_cache_free+0x19b/0x690 [ 364.286216][ T7772] __se_sys_mount+0x313/0x410 [ 364.286249][ T7772] ? __pfx___se_sys_mount+0x10/0x10 [ 364.286280][ T7772] ? do_syscall_64+0xbe/0xfa0 [ 364.286313][ T7772] ? __x64_sys_mount+0x20/0xc0 [ 364.286342][ T7772] do_syscall_64+0xfa/0xfa0 [ 364.286366][ T7772] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.286391][ T7772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.286411][ T7772] ? clear_bhb_loop+0x60/0xb0 [ 364.286438][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.286457][ T7772] RIP: 0033:0x7fa1d819066a [ 364.286478][ T7772] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.286495][ T7772] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.286518][ T7772] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 364.286534][ T7772] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 364.286549][ T7772] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 364.286564][ T7772] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 364.286578][ T7772] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 364.286613][ T7772] [ 364.286622][ T7772] gfs2: fsid=^..0: about to withdraw this file system [ 364.575420][ T7772] gfs2: fsid=^..0: can't make FS RW: -5 [ 364.582085][ T9] gfs2: fsid=^..0: file system withdrawn [ 364.989295][ T7778] loop0: detected capacity change from 0 to 32768 [ 365.013100][ T7778] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 365.020644][ T7778] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 365.037742][ T7778] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 365.048395][ T5927] gfs2: fsid=^..0: jid=0, already locked for use [ 365.054855][ T5927] gfs2: fsid=^..0: jid=0: Looking at journal... [ 365.104805][ T5927] gfs2: fsid=^..0: jid=0: Journal head lookup took 49ms [ 365.112873][ T5927] gfs2: fsid=^..0: jid=0: Done [ 365.118546][ T7778] gfs2: fsid=^..0: first mount done, others may mount [ 365.157693][ T7778] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 365.174201][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.0.304 Not tainted syzkaller #0 PREEMPT(full) [ 365.174232][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 365.174247][ T7778] Call Trace: [ 365.174256][ T7778] [ 365.174266][ T7778] dump_stack_lvl+0x189/0x250 [ 365.174295][ T7778] ? __pfx_gfs2_lm+0x10/0x10 [ 365.174317][ T7778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.174351][ T7778] ? folio_unlock+0x101/0x160 [ 365.174390][ T7778] gfs2_withdraw+0xc8/0x160 [ 365.174414][ T7778] gfs2_quota_init+0x1109/0x1200 [ 365.174445][ T7778] ? __lock_acquire+0xab9/0xd20 [ 365.174493][ T7778] ? __pfx_gfs2_quota_init+0x10/0x10 [ 365.174524][ T7778] ? __pfx_wake_up_bit+0x10/0x10 [ 365.174553][ T7778] ? inode_go_inval+0x2a0/0x360 [ 365.174577][ T7778] gfs2_make_fs_rw+0x143/0x220 [ 365.174605][ T7778] gfs2_fill_super+0x1bbf/0x2230 [ 365.174644][ T7778] ? __pfx_gfs2_fill_super+0x10/0x10 [ 365.174670][ T7778] ? init_locking+0xb8/0x210 [ 365.174690][ T7778] ? sb_set_blocksize+0x104/0x180 [ 365.174717][ T7778] ? setup_bdev_super+0x4c1/0x5b0 [ 365.174745][ T7778] get_tree_bdev_flags+0x40e/0x4d0 [ 365.174769][ T7778] ? __pfx_gfs2_fill_super+0x10/0x10 [ 365.174792][ T7778] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 365.174814][ T7778] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 365.174855][ T7778] gfs2_get_tree+0x51/0x1e0 [ 365.174880][ T7778] vfs_get_tree+0x92/0x2b0 [ 365.174907][ T7778] do_new_mount+0x302/0xa10 [ 365.174931][ T7778] ? apparmor_capable+0x137/0x1b0 [ 365.174966][ T7778] ? __pfx_do_new_mount+0x10/0x10 [ 365.174992][ T7778] ? ns_capable+0x8a/0xf0 [ 365.175024][ T7778] ? kmem_cache_free+0x19b/0x690 [ 365.175061][ T7778] __se_sys_mount+0x313/0x410 [ 365.175094][ T7778] ? __pfx___se_sys_mount+0x10/0x10 [ 365.175125][ T7778] ? do_syscall_64+0xbe/0xfa0 [ 365.175149][ T7778] ? __x64_sys_mount+0x20/0xc0 [ 365.175177][ T7778] do_syscall_64+0xfa/0xfa0 [ 365.175201][ T7778] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.175226][ T7778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.175247][ T7778] ? clear_bhb_loop+0x60/0xb0 [ 365.175274][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.175294][ T7778] RIP: 0033:0x7fa1d819066a [ 365.175313][ T7778] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.175338][ T7778] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 365.175361][ T7778] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 365.175377][ T7778] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 365.175392][ T7778] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 365.175407][ T7778] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 365.175421][ T7778] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 365.175456][ T7778] [ 365.175464][ T7778] gfs2: fsid=^..0: about to withdraw this file system [ 365.473384][ T7778] gfs2: fsid=^..0: can't make FS RW: -5 [ 365.490187][ T9] gfs2: fsid=^..0: file system withdrawn [ 365.886277][ T7784] loop0: detected capacity change from 0 to 32768 [ 365.906474][ T7784] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 365.916268][ T7784] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 365.933049][ T7784] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 365.945069][ T43] gfs2: fsid=^..0: jid=0, already locked for use [ 365.952316][ T43] gfs2: fsid=^..0: jid=0: Looking at journal... [ 366.011896][ T43] gfs2: fsid=^..0: jid=0: Journal head lookup took 59ms [ 366.021225][ T43] gfs2: fsid=^..0: jid=0: Done [ 366.027231][ T7784] gfs2: fsid=^..0: first mount done, others may mount [ 366.060739][ T7784] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 366.076598][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.0.305 Not tainted syzkaller #0 PREEMPT(full) [ 366.076620][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.076631][ T7784] Call Trace: [ 366.076638][ T7784] [ 366.076644][ T7784] dump_stack_lvl+0x189/0x250 [ 366.076665][ T7784] ? __pfx_gfs2_lm+0x10/0x10 [ 366.076682][ T7784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.076700][ T7784] ? folio_unlock+0x101/0x160 [ 366.076727][ T7784] gfs2_withdraw+0xc8/0x160 [ 366.076749][ T7784] gfs2_quota_init+0x1109/0x1200 [ 366.076772][ T7784] ? __lock_acquire+0xab9/0xd20 [ 366.076807][ T7784] ? __pfx_gfs2_quota_init+0x10/0x10 [ 366.076829][ T7784] ? __pfx_wake_up_bit+0x10/0x10 [ 366.076849][ T7784] ? inode_go_inval+0x2a0/0x360 [ 366.076866][ T7784] gfs2_make_fs_rw+0x143/0x220 [ 366.076886][ T7784] gfs2_fill_super+0x1bbf/0x2230 [ 366.076913][ T7784] ? __pfx_gfs2_fill_super+0x10/0x10 [ 366.076932][ T7784] ? init_locking+0xb8/0x210 [ 366.076946][ T7784] ? sb_set_blocksize+0x104/0x180 [ 366.076966][ T7784] ? setup_bdev_super+0x4c1/0x5b0 [ 366.076987][ T7784] get_tree_bdev_flags+0x40e/0x4d0 [ 366.077004][ T7784] ? __pfx_gfs2_fill_super+0x10/0x10 [ 366.077020][ T7784] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 366.077035][ T7784] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 366.077065][ T7784] gfs2_get_tree+0x51/0x1e0 [ 366.077083][ T7784] vfs_get_tree+0x92/0x2b0 [ 366.077101][ T7784] do_new_mount+0x302/0xa10 [ 366.077118][ T7784] ? apparmor_capable+0x137/0x1b0 [ 366.077144][ T7784] ? __pfx_do_new_mount+0x10/0x10 [ 366.077161][ T7784] ? ns_capable+0x8a/0xf0 [ 366.077185][ T7784] ? kmem_cache_free+0x19b/0x690 [ 366.077213][ T7784] __se_sys_mount+0x313/0x410 [ 366.077236][ T7784] ? __pfx___se_sys_mount+0x10/0x10 [ 366.077258][ T7784] ? do_syscall_64+0xbe/0xfa0 [ 366.077276][ T7784] ? __x64_sys_mount+0x20/0xc0 [ 366.077297][ T7784] do_syscall_64+0xfa/0xfa0 [ 366.077314][ T7784] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.077332][ T7784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.077347][ T7784] ? clear_bhb_loop+0x60/0xb0 [ 366.077365][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.077380][ T7784] RIP: 0033:0x7fa1d819066a [ 366.077394][ T7784] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.077406][ T7784] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.077423][ T7784] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 366.077434][ T7784] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 366.077452][ T7784] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 366.077462][ T7784] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 366.077472][ T7784] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 366.077516][ T7784] [ 366.077522][ T7784] gfs2: fsid=^..0: about to withdraw this file system [ 366.374028][ T7784] gfs2: fsid=^..0: can't make FS RW: -5 [ 366.381977][ T43] gfs2: fsid=^..0: file system withdrawn 2025/10/14 07:44:40 executed programs: 291 [ 366.781050][ T7790] loop0: detected capacity change from 0 to 32768 [ 366.799149][ T7790] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 366.807025][ T7790] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 366.822982][ T7790] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 366.833137][ T43] gfs2: fsid=^..0: jid=0, already locked for use [ 366.839678][ T43] gfs2: fsid=^..0: jid=0: Looking at journal... [ 366.901996][ T43] gfs2: fsid=^..0: jid=0: Journal head lookup took 62ms [ 366.909452][ T43] gfs2: fsid=^..0: jid=0: Done [ 366.916730][ T7790] gfs2: fsid=^..0: first mount done, others may mount [ 366.955272][ T7790] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 366.970662][ T7790] CPU: 1 UID: 0 PID: 7790 Comm: syz.0.306 Not tainted syzkaller #0 PREEMPT(full) [ 366.970696][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.970712][ T7790] Call Trace: [ 366.970721][ T7790] [ 366.970728][ T7790] dump_stack_lvl+0x189/0x250 [ 366.970749][ T7790] ? __pfx_gfs2_lm+0x10/0x10 [ 366.970765][ T7790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.970783][ T7790] ? folio_unlock+0x101/0x160 [ 366.970810][ T7790] gfs2_withdraw+0xc8/0x160 [ 366.970826][ T7790] gfs2_quota_init+0x1109/0x1200 [ 366.970849][ T7790] ? __lock_acquire+0xab9/0xd20 [ 366.970884][ T7790] ? __pfx_gfs2_quota_init+0x10/0x10 [ 366.970905][ T7790] ? __pfx_wake_up_bit+0x10/0x10 [ 366.970929][ T7790] ? inode_go_inval+0x2a0/0x360 [ 366.970947][ T7790] gfs2_make_fs_rw+0x143/0x220 [ 366.970966][ T7790] gfs2_fill_super+0x1bbf/0x2230 [ 366.970994][ T7790] ? __pfx_gfs2_fill_super+0x10/0x10 [ 366.971012][ T7790] ? init_locking+0xb8/0x210 [ 366.971026][ T7790] ? sb_set_blocksize+0x104/0x180 [ 366.971046][ T7790] ? setup_bdev_super+0x4c1/0x5b0 [ 366.971066][ T7790] get_tree_bdev_flags+0x40e/0x4d0 [ 366.971083][ T7790] ? __pfx_gfs2_fill_super+0x10/0x10 [ 366.971101][ T7790] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 366.971116][ T7790] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 366.971145][ T7790] gfs2_get_tree+0x51/0x1e0 [ 366.971164][ T7790] vfs_get_tree+0x92/0x2b0 [ 366.971182][ T7790] do_new_mount+0x302/0xa10 [ 366.971199][ T7790] ? apparmor_capable+0x137/0x1b0 [ 366.971229][ T7790] ? __pfx_do_new_mount+0x10/0x10 [ 366.971248][ T7790] ? ns_capable+0x8a/0xf0 [ 366.971271][ T7790] ? kmem_cache_free+0x19b/0x690 [ 366.971298][ T7790] __se_sys_mount+0x313/0x410 [ 366.971321][ T7790] ? __pfx___se_sys_mount+0x10/0x10 [ 366.971349][ T7790] ? do_syscall_64+0xbe/0xfa0 [ 366.971367][ T7790] ? __x64_sys_mount+0x20/0xc0 [ 366.971386][ T7790] do_syscall_64+0xfa/0xfa0 [ 366.971404][ T7790] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.971421][ T7790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.971436][ T7790] ? clear_bhb_loop+0x60/0xb0 [ 366.971455][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.971469][ T7790] RIP: 0033:0x7fa1d819066a [ 366.971483][ T7790] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.971496][ T7790] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.971512][ T7790] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 366.971523][ T7790] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 366.971534][ T7790] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 366.971545][ T7790] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 366.971554][ T7790] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 366.971579][ T7790] [ 366.971585][ T7790] gfs2: fsid=^..0: about to withdraw this file system [ 367.269561][ T9] gfs2: fsid=^..0: file system withdrawn [ 367.275716][ T7790] gfs2: fsid=^..0: can't make FS RW: -5 [ 367.681918][ T7796] loop0: detected capacity change from 0 to 32768 [ 367.707783][ T7796] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 367.715449][ T7796] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 367.737242][ T7796] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 367.746730][ T9] gfs2: fsid=^..0: jid=0, already locked for use [ 367.753117][ T9] gfs2: fsid=^..0: jid=0: Looking at journal... [ 367.808466][ T9] gfs2: fsid=^..0: jid=0: Journal head lookup took 55ms [ 367.817012][ T9] gfs2: fsid=^..0: jid=0: Done [ 367.822271][ T7796] gfs2: fsid=^..0: first mount done, others may mount [ 367.857991][ T7796] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 367.874640][ T7796] CPU: 1 UID: 0 PID: 7796 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT(full) [ 367.874662][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.874672][ T7796] Call Trace: [ 367.874679][ T7796] [ 367.874685][ T7796] dump_stack_lvl+0x189/0x250 [ 367.874706][ T7796] ? __pfx_gfs2_lm+0x10/0x10 [ 367.874722][ T7796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.874739][ T7796] ? folio_unlock+0x101/0x160 [ 367.874766][ T7796] gfs2_withdraw+0xc8/0x160 [ 367.874782][ T7796] gfs2_quota_init+0x1109/0x1200 [ 367.874805][ T7796] ? __lock_acquire+0xab9/0xd20 [ 367.874839][ T7796] ? __pfx_gfs2_quota_init+0x10/0x10 [ 367.874861][ T7796] ? __pfx_wake_up_bit+0x10/0x10 [ 367.874881][ T7796] ? inode_go_inval+0x2a0/0x360 [ 367.874898][ T7796] gfs2_make_fs_rw+0x143/0x220 [ 367.874916][ T7796] gfs2_fill_super+0x1bbf/0x2230 [ 367.874944][ T7796] ? __pfx_gfs2_fill_super+0x10/0x10 [ 367.874962][ T7796] ? init_locking+0xb8/0x210 [ 367.874975][ T7796] ? sb_set_blocksize+0x104/0x180 [ 367.874994][ T7796] ? setup_bdev_super+0x4c1/0x5b0 [ 367.875014][ T7796] get_tree_bdev_flags+0x40e/0x4d0 [ 367.875032][ T7796] ? __pfx_gfs2_fill_super+0x10/0x10 [ 367.875047][ T7796] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 367.875063][ T7796] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 367.875092][ T7796] gfs2_get_tree+0x51/0x1e0 [ 367.875109][ T7796] vfs_get_tree+0x92/0x2b0 [ 367.875128][ T7796] do_new_mount+0x302/0xa10 [ 367.875145][ T7796] ? apparmor_capable+0x137/0x1b0 [ 367.875170][ T7796] ? __pfx_do_new_mount+0x10/0x10 [ 367.875188][ T7796] ? ns_capable+0x8a/0xf0 [ 367.875211][ T7796] ? kmem_cache_free+0x19b/0x690 [ 367.875237][ T7796] __se_sys_mount+0x313/0x410 [ 367.875259][ T7796] ? __pfx___se_sys_mount+0x10/0x10 [ 367.875281][ T7796] ? do_syscall_64+0xbe/0xfa0 [ 367.875306][ T7796] ? __x64_sys_mount+0x20/0xc0 [ 367.875326][ T7796] do_syscall_64+0xfa/0xfa0 [ 367.875343][ T7796] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.875361][ T7796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.875376][ T7796] ? clear_bhb_loop+0x60/0xb0 [ 367.875395][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.875409][ T7796] RIP: 0033:0x7fa1d819066a [ 367.875423][ T7796] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.875436][ T7796] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 367.875452][ T7796] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 367.875463][ T7796] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 367.875474][ T7796] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 367.875485][ T7796] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 367.875495][ T7796] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 367.875519][ T7796] [ 367.875525][ T7796] gfs2: fsid=^..0: about to withdraw this file system [ 368.167037][ T7796] gfs2: fsid=^..0: can't make FS RW: -5 [ 368.179549][ T9] gfs2: fsid=^..0: file system withdrawn [ 368.576349][ T7802] loop0: detected capacity change from 0 to 32768 [ 368.598829][ T7802] gfs2: fsid=^.: Trying to join cluster "lock_nolock", "^." [ 368.606477][ T7802] gfs2: fsid=^.: Now mounting FS (format 1801)... [ 368.621838][ T7802] gfs2: fsid=^..0: journal 0 mapped with 3 extents in 0ms [ 368.633551][ T5825] gfs2: fsid=^..0: jid=0, already locked for use [ 368.640377][ T5825] gfs2: fsid=^..0: jid=0: Looking at journal... [ 368.690400][ T5825] gfs2: fsid=^..0: jid=0: Journal head lookup took 50ms [ 368.699731][ T5825] gfs2: fsid=^..0: jid=0: Done [ 368.705083][ T7802] gfs2: fsid=^..0: first mount done, others may mount [ 368.743025][ T7802] gfs2: fsid=^..0: fatal: invalid metadata block - bh = 4255 (type: exp=14, found=13), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 368.761247][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.0.308 Not tainted syzkaller #0 PREEMPT(full) [ 368.761269][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.761279][ T7802] Call Trace: [ 368.761286][ T7802] [ 368.761293][ T7802] dump_stack_lvl+0x189/0x250 [ 368.761313][ T7802] ? __pfx_gfs2_lm+0x10/0x10 [ 368.761329][ T7802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.761346][ T7802] ? folio_unlock+0x101/0x160 [ 368.761374][ T7802] gfs2_withdraw+0xc8/0x160 [ 368.761390][ T7802] gfs2_quota_init+0x1109/0x1200 [ 368.761412][ T7802] ? __lock_acquire+0xab9/0xd20 [ 368.761446][ T7802] ? __pfx_gfs2_quota_init+0x10/0x10 [ 368.761467][ T7802] ? __pfx_wake_up_bit+0x10/0x10 [ 368.761488][ T7802] ? inode_go_inval+0x2a0/0x360 [ 368.761504][ T7802] gfs2_make_fs_rw+0x143/0x220 [ 368.761523][ T7802] gfs2_fill_super+0x1bbf/0x2230 [ 368.761557][ T7802] ? __pfx_gfs2_fill_super+0x10/0x10 [ 368.761576][ T7802] ? init_locking+0xb8/0x210 [ 368.761590][ T7802] ? sb_set_blocksize+0x104/0x180 [ 368.761610][ T7802] ? setup_bdev_super+0x4c1/0x5b0 [ 368.761630][ T7802] get_tree_bdev_flags+0x40e/0x4d0 [ 368.761647][ T7802] ? __pfx_gfs2_fill_super+0x10/0x10 [ 368.761663][ T7802] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 368.761678][ T7802] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 368.761707][ T7802] gfs2_get_tree+0x51/0x1e0 [ 368.761725][ T7802] vfs_get_tree+0x92/0x2b0 [ 368.761743][ T7802] do_new_mount+0x302/0xa10 [ 368.761760][ T7802] ? apparmor_capable+0x137/0x1b0 [ 368.761785][ T7802] ? __pfx_do_new_mount+0x10/0x10 [ 368.761804][ T7802] ? ns_capable+0x8a/0xf0 [ 368.761827][ T7802] ? kmem_cache_free+0x19b/0x690 [ 368.761852][ T7802] __se_sys_mount+0x313/0x410 [ 368.761875][ T7802] ? __pfx___se_sys_mount+0x10/0x10 [ 368.761897][ T7802] ? do_syscall_64+0xbe/0xfa0 [ 368.761915][ T7802] ? __x64_sys_mount+0x20/0xc0 [ 368.761934][ T7802] do_syscall_64+0xfa/0xfa0 [ 368.761951][ T7802] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.761969][ T7802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.761984][ T7802] ? clear_bhb_loop+0x60/0xb0 [ 368.762002][ T7802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.762017][ T7802] RIP: 0033:0x7fa1d819066a [ 368.762031][ T7802] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.762044][ T7802] RSP: 002b:00007fa1d9077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.762059][ T7802] RAX: ffffffffffffffda RBX: 00007fa1d9077ef0 RCX: 00007fa1d819066a [ 368.762071][ T7802] RDX: 000020000001f680 RSI: 000020000001f6c0 RDI: 00007fa1d9077eb0 [ 368.762082][ T7802] RBP: 000020000001f680 R08: 00007fa1d9077ef0 R09: 0000000000000084 [ 368.762092][ T7802] R10: 0000000000000084 R11: 0000000000000246 R12: 000020000001f6c0 [ 368.762102][ T7802] R13: 00007fa1d9077eb0 R14: 000000000001f74c R15: 0000200000002240 [ 368.762126][ T7802] [ 368.762132][ T7802] gfs2: fsid=^..0: about to withdraw this file system [ 369.053588][ T7802] gfs2: fsid=^..0: can't make FS RW: -5 [ 369.060449][ T5825] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000011: 0000 [#1] SMP KASAN PTI [ 369.072394][ T5825] KASAN: null-ptr-deref in range [0x0000000000000088-0x000000000000008f] [ 369.080831][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 369.090217][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.100366][ T5825] Workqueue: events gfs2_withdraw_func [ 369.105927][ T5825] RIP: 0010:gfs2_log_is_empty+0x73/0xd0 [ 369.111476][ T5825] Code: f0 09 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd f9 28 fe 41 be 8c 00 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 34 41 8b 1e 89 ef 89 de e8 c8 51 c3 fd 39 [ 369.131111][ T5825] RSP: 0018:ffffc9000407f8d8 EFLAGS: 00010207 [ 369.137194][ T5825] RAX: 0000000000000011 RBX: ffff88806848c9f0 RCX: ffffffff83fcf3b0 [ 369.145174][ T5825] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88806848cd70 [ 369.153152][ T5825] RBP: 0000000000001000 R08: ffff88806848cd73 R09: 1ffff1100d0919ae [ 369.161314][ T5825] R10: dffffc0000000000 R11: ffffed100d0919af R12: 1ffff9200080ff24 [ 369.169307][ T5825] R13: 1ffff1100d091800 R14: 000000000000008c R15: dffffc0000000000 [ 369.177309][ T5825] FS: 0000000000000000(0000) GS:ffff888125d08000(0000) knlGS:0000000000000000 [ 369.186416][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.193029][ T5825] CR2: 00007ff340164000 CR3: 000000007a948000 CR4: 00000000003526f0 [ 369.201059][ T5825] Call Trace: [ 369.204368][ T5825] [ 369.207301][ T5825] do_withdraw+0x15f/0x320 [ 369.211732][ T5825] ? __pfx_do_withdraw+0x10/0x10 [ 369.216682][ T5825] ? process_scheduled_works+0x9ef/0x17b0 [ 369.222629][ T5825] gfs2_withdraw_func+0x2f3/0x430 [ 369.227670][ T5825] ? process_scheduled_works+0x9ef/0x17b0 [ 369.233399][ T5825] process_scheduled_works+0xae1/0x17b0 [ 369.239048][ T5825] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.245149][ T5825] worker_thread+0x8a0/0xda0 [ 369.249856][ T5825] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.256274][ T5825] ? __kthread_parkme+0x7b/0x200 [ 369.261237][ T5825] kthread+0x711/0x8a0 [ 369.265315][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 369.270442][ T5825] ? __pfx_kthread+0x10/0x10 [ 369.275032][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.280233][ T5825] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.285432][ T5825] ? __pfx_kthread+0x10/0x10 [ 369.290026][ T5825] ret_from_fork+0x4bc/0x870 [ 369.294619][ T5825] ? __pfx_ret_from_fork+0x10/0x10 [ 369.299746][ T5825] ? __switch_to_asm+0x39/0x70 [ 369.304548][ T5825] ? __switch_to_asm+0x33/0x70 [ 369.309336][ T5825] ? __pfx_kthread+0x10/0x10 [ 369.313941][ T5825] ret_from_fork_asm+0x1a/0x30 [ 369.318716][ T5825] [ 369.321741][ T5825] Modules linked in: [ 369.325929][ T5825] ---[ end trace 0000000000000000 ]--- [ 369.331499][ T5825] RIP: 0010:gfs2_log_is_empty+0x73/0xd0 [ 369.337276][ T5825] Code: f0 09 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 cd f9 28 fe 41 be 8c 00 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 34 41 8b 1e 89 ef 89 de e8 c8 51 c3 fd 39 [ 369.357112][ T5825] RSP: 0018:ffffc9000407f8d8 EFLAGS: 00010207 [ 369.363213][ T5825] RAX: 0000000000000011 RBX: ffff88806848c9f0 RCX: ffffffff83fcf3b0 [ 369.371361][ T5825] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88806848cd70 [ 369.379428][ T5825] RBP: 0000000000001000 R08: ffff88806848cd73 R09: 1ffff1100d0919ae [ 369.387488][ T5825] R10: dffffc0000000000 R11: ffffed100d0919af R12: 1ffff9200080ff24 [ 369.395514][ T5825] R13: 1ffff1100d091800 R14: 000000000000008c R15: dffffc0000000000 [ 369.403496][ T5825] FS: 0000000000000000(0000) GS:ffff888125d08000(0000) knlGS:0000000000000000 [ 369.412479][ T5825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.419114][ T5825] CR2: 00007ff340164000 CR3: 0000000029b98000 CR4: 00000000003526f0 [ 369.427137][ T5825] Kernel panic - not syncing: Fatal exception [ 369.433645][ T5825] Kernel Offset: disabled [ 369.437990][ T5825] Rebooting in 86400 seconds..