gfs2: fsid=syz:syz.0: first mount done, others may mount gfs2: fsid=syz:syz.0: can't make FS RW: -5 list_del corruption, ffff0000d781a810->prev is LIST_POISON2 (dead000000000122) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:61! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 UID: 0 PID: 6538 Comm: syz.0.15 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __list_del_entry_valid_or_report+0x124/0x158 lib/list_debug.c:59 lr : __list_del_entry_valid_or_report+0x124/0x158 lib/list_debug.c:59 sp : ffff80009b757680 x29: ffff80009b757680 x28: ffff7000136eaf04 x27: ffff0000d781a800 x26: dfff800000000000 x25: ffff0000c9c70a58 x24: 1fffe00019e64480 x23: ffff0000cf322468 x22: dfff800000000000 x21: dead000000000122 x20: ffff0000d7819410 x19: ffff0000d781a810 x18: 0000000000000008 x17: 6165642820324e4f x16: ffff80008a222334 x15: 0000000000000001 x14: 1ffff000136eae24 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000001 x10: 0000000000ff0100 x9 : 42434663dcfe4a00 x8 : 42434663dcfe4a00 x7 : ffff80008a2e6730 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff800082c4a208 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000004e Call trace: __list_del_entry_valid_or_report+0x124/0x158 lib/list_debug.c:59 __list_del_entry_valid include/linux/list.h:124 [inline] __list_del_entry include/linux/list.h:215 [inline] list_del_rcu include/linux/rculist.h:157 [inline] destroy_workqueue+0x6e4/0xdc0 kernel/workqueue.c:5823 gfs2_fill_super+0xe78/0x1f98 fs/gfs2/ops_fstype.c:1310 get_tree_bdev+0x320/0x470 fs/super.c:1635 gfs2_get_tree+0x54/0x1b4 fs/gfs2/ops_fstype.c:1329 vfs_get_tree+0x90/0x288 fs/super.c:1800 do_new_mount+0x278/0x900 fs/namespace.c:3472 path_mount+0x590/0xe04 fs/namespace.c:3799 do_mount fs/namespace.c:3812 [inline] __do_sys_mount fs/namespace.c:4020 [inline] __se_sys_mount fs/namespace.c:3997 [inline] __arm64_sys_mount+0x45c/0x5a8 fs/namespace.c:3997 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Code: f003de40 91088000 aa1303e1 95d50be8 (d4210000) ---[ end trace 0000000000000000 ]---