syzbot

  bh = 2073 (magic number)
  function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 492
gfs2: fsid=syz:syz.s: about to withdraw this file system
------------[ cut here ]------------
kernel BUG at fs/gfs2/util.c:343!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4559 Comm: syz.2.28 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : gfs2_withdraw+0x1120/0x127c fs/gfs2/util.c:343
lr : gfs2_withdraw+0x1120/0x127c fs/gfs2/util.c:343
sp : ffff8000216b7000
x29: ffff8000216b7110 x28: ffff7000042d6e0c x27: dfff800000000000
x26: ffff800011fcd820 x25: ffff8000216b7060 x24: 1fffe00019fa8857
x23: 000000000001a687 x22: ffff0000cfd44340 x21: ffff0000cfd440a8
x20: ffff0000cfd442bc x19: ffff0000cfd44000 x18: ffff800011b9bf60
x17: 1fffe00033ea637e x16: ffff8000082d92bc x15: 0000000040000000
x14: 0000000000000001 x13: 1ffff000042d6d68 x12: 0000000000ff0100
x11: ff0080000a2466ac x10: 0000000000000000 x9 : ffff80000a2466ac
x8 : ffff0000d4acd340 x7 : ffff800008257984 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000a891730
x2 : ffff00019f531d10 x1 : 0000000000000004 x0 : 0000000000000000
Call trace:
 gfs2_withdraw+0x1120/0x127c fs/gfs2/util.c:343
 gfs2_meta_check_ii+0x80/0x9c fs/gfs2/util.c:502
 gfs2_metatype_check_i fs/gfs2/util.h:126 [inline]
 gfs2_meta_buffer+0x228/0x2ec fs/gfs2/meta_io.c:492
 gfs2_meta_inode_buffer fs/gfs2/meta_io.h:72 [inline]
 gfs2_inode_refresh+0xb0/0xd64 fs/gfs2/glops.c:480
 inode_go_instantiate+0x4c/0x68 fs/gfs2/glops.c:503
 gfs2_instantiate+0x178/0x2b4 fs/gfs2/glock.c:520
 gfs2_glock_holder_ready fs/gfs2/glock.c:1333 [inline]
 gfs2_glock_wait+0x1b4/0x298 fs/gfs2/glock.c:1353
 gfs2_glock_nq+0x8bc/0x11c4 fs/gfs2/glock.c:1596
 gfs2_glock_nq_init fs/gfs2/glock.h:255 [inline]
 gfs2_lookupi+0x37c/0x5b0 fs/gfs2/inode.c:312
 gfs2_lookup_simple+0xb0/0x104 fs/gfs2/inode.c:264
 init_journal+0x18c/0x1e94 fs/gfs2/ops_fstype.c:745
 init_inodes+0xe0/0x2d4 fs/gfs2/ops_fstype.c:889
 gfs2_fill_super+0x11c0/0x194c fs/gfs2/ops_fstype.c:1246
 get_tree_bdev+0x358/0x544 fs/super.c:1366
 gfs2_get_tree+0x54/0x1b4 fs/gfs2/ops_fstype.c:1327
 vfs_get_tree+0x90/0x274 fs/super.c:1573
 do_new_mount+0x228/0x810 fs/namespace.c:3078
 path_mount+0x5bc/0xe80 fs/namespace.c:3408
 do_mount fs/namespace.c:3421 [inline]
 __do_sys_mount fs/namespace.c:3629 [inline]
 __se_sys_mount fs/namespace.c:3606 [inline]
 __arm64_sys_mount+0x49c/0x59c fs/namespace.c:3606
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b4 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:140
 do_el0_svc+0x58/0x130 arch/arm64/kernel/syscall.c:204
 el0_svc+0x58/0x128 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: f9400be0 979a83e6 17ffff02 978993dc (d4210000) 
---[ end trace 0000000000000000 ]---