Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. executing program [ 85.207435][ T5826] loop0: detected capacity change from 0 to 32768 [ 85.239943][ T5826] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.248250][ T5826] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.275465][ T5826] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 85.370365][ T5826] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 85.384121][ T5826] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 85.393949][ T5826] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 85.408395][ T5826] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 85.417733][ T5826] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5826 [syz-executor110] iterate_dir+0x5af/0x770 [ 85.427827][ T5826] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 85.436519][ T5826] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 85.443922][ T5826] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 85.452743][ T5826] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 85.460058][ T5826] gfs2: fsid=syz:syz.s: File system withdrawn [ 85.466153][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 85.466169][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.466176][ T5826] Call Trace: [ 85.466182][ T5826] [ 85.466187][ T5826] dump_stack_lvl+0x189/0x250 [ 85.466209][ T5826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.466224][ T5826] ? __pfx__printk+0x10/0x10 [ 85.466236][ T5826] ? kobject_uevent_env+0x36b/0x8c0 [ 85.466268][ T5826] gfs2_withdraw+0x111e/0x14f0 [ 85.466292][ T5826] ? __pfx_gfs2_withdraw+0x10/0x10 [ 85.466306][ T5826] ? __pfx__printk+0x10/0x10 [ 85.466321][ T5826] ? gfs2_consist_inode_i+0xf5/0x110 [ 85.466336][ T5826] gfs2_dirent_scan+0x545/0x690 [ 85.466352][ T5826] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 85.466368][ T5826] gfs2_dir_read+0x806/0x1780 [ 85.466391][ T5826] ? __pfx_inode_dio_wait+0x10/0x10 [ 85.466420][ T5826] ? __pfx___might_resched+0x10/0x10 [ 85.466445][ T5826] ? __pfx_gfs2_dir_read+0x10/0x10 [ 85.466466][ T5826] ? gfs2_glock_nq+0x10bb/0x1900 [ 85.466491][ T5826] ? gfs2_glock_wait+0x20f/0x2a0 [ 85.466506][ T5826] gfs2_readdir+0x14c/0x1b0 [ 85.466518][ T5826] ? iterate_dir+0x49f/0x770 [ 85.466532][ T5826] ? __pfx_gfs2_readdir+0x10/0x10 [ 85.466546][ T5826] ? iterate_dir+0x5af/0x770 [ 85.466559][ T5826] ? iterate_dir+0x49f/0x770 [ 85.466571][ T5826] ? down_read_killable+0x1d1/0x350 [ 85.466588][ T5826] iterate_dir+0x5af/0x770 [ 85.466606][ T5826] __se_sys_getdents64+0xe4/0x260 [ 85.466621][ T5826] ? __pfx___se_sys_getdents64+0x10/0x10 [ 85.466634][ T5826] ? __pfx_filldir64+0x10/0x10 [ 85.466654][ T5826] ? do_syscall_64+0xbe/0x3b0 [ 85.466672][ T5826] do_syscall_64+0xfa/0x3b0 [ 85.466687][ T5826] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.466705][ T5826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.466716][ T5826] ? clear_bhb_loop+0x60/0xb0 [ 85.466729][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.466738][ T5826] RIP: 0033:0x7f461d7a8c99 [ 85.466749][ T5826] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 85.466758][ T5826] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 85.466772][ T5826] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 85.466779][ T5826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 85.466786][ T5826] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 85.466792][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 85.466799][ T5826] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 85.466817][ T5826] executing program [ 86.074502][ T5833] loop0: detected capacity change from 0 to 32768 [ 86.089463][ T5833] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 86.097850][ T5833] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 86.114463][ T5833] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 86.181883][ T5833] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 86.194049][ T5833] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 86.203732][ T5833] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 86.218282][ T5833] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 86.227512][ T5833] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5833 [syz-executor110] iterate_dir+0x5af/0x770 [ 86.237604][ T5833] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 86.246148][ T5833] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 86.253870][ T5833] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 86.262784][ T5833] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 86.269685][ T5833] gfs2: fsid=syz:syz.s: File system withdrawn [ 86.275786][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 86.275803][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.275810][ T5833] Call Trace: [ 86.275815][ T5833] [ 86.275820][ T5833] dump_stack_lvl+0x189/0x250 [ 86.275842][ T5833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.275857][ T5833] ? __pfx__printk+0x10/0x10 [ 86.275869][ T5833] ? kobject_uevent_env+0x36b/0x8c0 [ 86.275891][ T5833] gfs2_withdraw+0x111e/0x14f0 [ 86.275924][ T5833] ? __pfx_gfs2_withdraw+0x10/0x10 [ 86.275939][ T5833] ? __pfx__printk+0x10/0x10 [ 86.275954][ T5833] ? gfs2_consist_inode_i+0xf5/0x110 [ 86.275970][ T5833] gfs2_dirent_scan+0x545/0x690 [ 86.275985][ T5833] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 86.276000][ T5833] gfs2_dir_read+0x806/0x1780 [ 86.276019][ T5833] ? __pfx_inode_dio_wait+0x10/0x10 [ 86.276034][ T5833] ? __pfx___might_resched+0x10/0x10 [ 86.276050][ T5833] ? __pfx_gfs2_dir_read+0x10/0x10 [ 86.276062][ T5833] ? gfs2_glock_nq+0x10bb/0x1900 [ 86.276083][ T5833] ? gfs2_glock_wait+0x20f/0x2a0 [ 86.276104][ T5833] gfs2_readdir+0x14c/0x1b0 [ 86.276124][ T5833] ? iterate_dir+0x49f/0x770 [ 86.276147][ T5833] ? __pfx_gfs2_readdir+0x10/0x10 [ 86.276173][ T5833] ? iterate_dir+0x5af/0x770 [ 86.276191][ T5833] ? iterate_dir+0x49f/0x770 [ 86.276204][ T5833] ? down_read_killable+0x1d1/0x350 [ 86.276221][ T5833] iterate_dir+0x5af/0x770 [ 86.276238][ T5833] __se_sys_getdents64+0xe4/0x260 [ 86.276254][ T5833] ? __pfx___se_sys_getdents64+0x10/0x10 [ 86.276267][ T5833] ? __pfx_filldir64+0x10/0x10 [ 86.276282][ T5833] ? rcu_is_watching+0x15/0xb0 [ 86.276299][ T5833] ? do_syscall_64+0xbe/0x3b0 [ 86.276315][ T5833] do_syscall_64+0xfa/0x3b0 [ 86.276326][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.276338][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.276349][ T5833] ? clear_bhb_loop+0x60/0xb0 [ 86.276362][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.276372][ T5833] RIP: 0033:0x7f461d7a8c99 [ 86.276383][ T5833] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 86.276392][ T5833] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 86.276406][ T5833] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 86.276413][ T5833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 86.276420][ T5833] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 86.276426][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 86.276433][ T5833] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 86.276451][ T5833] executing program [ 86.878036][ T5838] loop0: detected capacity change from 0 to 32768 [ 86.899161][ T5838] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 86.912152][ T5838] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 86.925784][ T5838] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 87.063529][ T5838] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 87.092862][ T5838] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 87.119183][ T5838] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 87.134983][ T5838] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 87.145160][ T5838] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5838 [syz-executor110] iterate_dir+0x5af/0x770 [ 87.149192][ T5841] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 87.155952][ T5838] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5841 [syz-executor110] iterate_dir+0x5af/0x770 [ 87.174792][ T5838] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 87.178831][ T5841] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 87.183401][ T5838] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 87.205121][ T5838] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 87.214023][ T5838] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 87.217970][ T5841] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 87.225715][ T5838] gfs2: fsid=syz:syz.s: File system withdrawn [ 87.237032][ T5838] CPU: 1 UID: 0 PID: 5838 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 87.237068][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.237078][ T5838] Call Trace: [ 87.237086][ T5838] [ 87.237094][ T5838] dump_stack_lvl+0x189/0x250 [ 87.237131][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.237158][ T5838] ? __pfx__printk+0x10/0x10 [ 87.237179][ T5838] ? kobject_uevent_env+0x36b/0x8c0 [ 87.237218][ T5838] gfs2_withdraw+0x111e/0x14f0 [ 87.237261][ T5838] ? __pfx_gfs2_withdraw+0x10/0x10 [ 87.237288][ T5838] ? __pfx__printk+0x10/0x10 [ 87.237316][ T5838] ? gfs2_consist_inode_i+0xf5/0x110 [ 87.237344][ T5838] gfs2_dirent_scan+0x545/0x690 [ 87.237372][ T5838] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 87.237401][ T5838] gfs2_dir_read+0x806/0x1780 [ 87.237434][ T5838] ? __pfx_inode_dio_wait+0x10/0x10 [ 87.237462][ T5838] ? __pfx___might_resched+0x10/0x10 [ 87.237488][ T5838] ? __pfx_gfs2_dir_read+0x10/0x10 [ 87.237511][ T5838] ? gfs2_glock_nq+0x10bb/0x1900 [ 87.237550][ T5838] ? gfs2_glock_wait+0x20f/0x2a0 [ 87.237577][ T5838] gfs2_readdir+0x14c/0x1b0 [ 87.237598][ T5838] ? iterate_dir+0x49f/0x770 [ 87.237631][ T5838] ? __pfx_gfs2_readdir+0x10/0x10 [ 87.237663][ T5838] ? iterate_dir+0x5af/0x770 [ 87.237688][ T5838] ? iterate_dir+0x49f/0x770 [ 87.237710][ T5838] ? down_read_killable+0x1d1/0x350 [ 87.237740][ T5838] iterate_dir+0x5af/0x770 [ 87.237773][ T5838] __se_sys_getdents64+0xe4/0x260 [ 87.237802][ T5838] ? __pfx___se_sys_getdents64+0x10/0x10 [ 87.237825][ T5838] ? __pfx_filldir64+0x10/0x10 [ 87.237853][ T5838] ? rcu_is_watching+0x15/0xb0 [ 87.237883][ T5838] ? do_syscall_64+0xbe/0x3b0 [ 87.237910][ T5838] do_syscall_64+0xfa/0x3b0 [ 87.237933][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.237951][ T5838] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 87.237969][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 87.237992][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.238009][ T5838] RIP: 0033:0x7f461d7a8c99 [ 87.238026][ T5838] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.238040][ T5838] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 87.238060][ T5838] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 87.238073][ T5838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 87.238083][ T5838] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 87.238094][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 87.238105][ T5838] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 87.238138][ T5838] [ 87.248804][ T5841] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5841 [syz-executor110] iterate_dir+0x5af/0x770 [ 87.518099][ T5841] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 executing program [ 87.909387][ T5843] loop0: detected capacity change from 0 to 32768 [ 87.925819][ T5843] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 87.934564][ T5843] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 87.949672][ T5843] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 88.021558][ T5843] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 88.034460][ T5843] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 88.044346][ T5843] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 88.058709][ T5843] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 88.067868][ T5843] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5843 [syz-executor110] iterate_dir+0x5af/0x770 [ 88.077807][ T5843] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 88.086271][ T5843] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 88.093543][ T5843] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 88.102346][ T5843] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 88.109014][ T5843] gfs2: fsid=syz:syz.s: File system withdrawn [ 88.115101][ T5843] CPU: 0 UID: 0 PID: 5843 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 88.115122][ T5843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.115132][ T5843] Call Trace: [ 88.115138][ T5843] [ 88.115145][ T5843] dump_stack_lvl+0x189/0x250 [ 88.115178][ T5843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.115202][ T5843] ? __pfx__printk+0x10/0x10 [ 88.115223][ T5843] ? kobject_uevent_env+0x36b/0x8c0 [ 88.115265][ T5843] gfs2_withdraw+0x111e/0x14f0 [ 88.115303][ T5843] ? __pfx_gfs2_withdraw+0x10/0x10 [ 88.115329][ T5843] ? __pfx__printk+0x10/0x10 [ 88.115357][ T5843] ? gfs2_consist_inode_i+0xf5/0x110 [ 88.115382][ T5843] gfs2_dirent_scan+0x545/0x690 [ 88.115408][ T5843] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 88.115436][ T5843] gfs2_dir_read+0x806/0x1780 [ 88.115469][ T5843] ? __pfx_inode_dio_wait+0x10/0x10 [ 88.115496][ T5843] ? __pfx___might_resched+0x10/0x10 [ 88.115521][ T5843] ? __pfx_gfs2_dir_read+0x10/0x10 [ 88.115543][ T5843] ? gfs2_glock_nq+0x10bb/0x1900 [ 88.115578][ T5843] ? gfs2_glock_wait+0x20f/0x2a0 [ 88.115606][ T5843] gfs2_readdir+0x14c/0x1b0 [ 88.115625][ T5843] ? iterate_dir+0x49f/0x770 [ 88.115648][ T5843] ? __pfx_gfs2_readdir+0x10/0x10 [ 88.115672][ T5843] ? iterate_dir+0x5af/0x770 [ 88.115695][ T5843] ? iterate_dir+0x49f/0x770 [ 88.115716][ T5843] ? down_read_killable+0x1d1/0x350 [ 88.115745][ T5843] iterate_dir+0x5af/0x770 [ 88.115774][ T5843] __se_sys_getdents64+0xe4/0x260 [ 88.115801][ T5843] ? __pfx___se_sys_getdents64+0x10/0x10 [ 88.115823][ T5843] ? __pfx_filldir64+0x10/0x10 [ 88.115848][ T5843] ? rcu_is_watching+0x15/0xb0 [ 88.115876][ T5843] ? do_syscall_64+0xbe/0x3b0 [ 88.115912][ T5843] do_syscall_64+0xfa/0x3b0 [ 88.115932][ T5843] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.115953][ T5843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.115968][ T5843] ? clear_bhb_loop+0x60/0xb0 [ 88.115990][ T5843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.116005][ T5843] RIP: 0033:0x7f461d7a8c99 [ 88.116022][ T5843] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 88.116037][ T5843] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 88.116057][ T5843] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 88.116068][ T5843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 88.116078][ T5843] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 88.116088][ T5843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 88.116098][ T5843] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 88.116127][ T5843] executing program [ 88.705972][ T5848] loop0: detected capacity change from 0 to 32768 [ 88.720381][ T5848] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 88.728648][ T5848] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 88.742068][ T5848] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 88.826122][ T5848] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 88.837876][ T5848] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 88.848499][ T5848] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 88.863784][ T5848] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 88.872944][ T5848] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5848 [syz-executor110] iterate_dir+0x5af/0x770 [ 88.882886][ T5848] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 88.889949][ T5851] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 88.891388][ T5848] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 88.901546][ T5851] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 88.908114][ T5848] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 88.918168][ T5851] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5848 [syz-executor110] iterate_dir+0x5af/0x770 [ 88.936527][ T5848] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 88.936879][ T5851] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5851 [syz-executor110] iterate_dir+0x5af/0x770 [ 88.949779][ T5848] gfs2: fsid=syz:syz.s: File system withdrawn [ 88.955605][ T5851] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 88.960025][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 88.960046][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.960056][ T5848] Call Trace: [ 88.960062][ T5848] [ 88.960069][ T5848] dump_stack_lvl+0x189/0x250 [ 88.960101][ T5848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.960123][ T5848] ? __pfx__printk+0x10/0x10 [ 88.960142][ T5848] ? kobject_uevent_env+0x36b/0x8c0 [ 88.960175][ T5848] gfs2_withdraw+0x111e/0x14f0 [ 88.960213][ T5848] ? __pfx_gfs2_withdraw+0x10/0x10 [ 88.960236][ T5848] ? __pfx__printk+0x10/0x10 [ 88.960260][ T5848] ? gfs2_consist_inode_i+0xf5/0x110 [ 88.960284][ T5848] gfs2_dirent_scan+0x545/0x690 [ 88.960308][ T5848] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 88.960332][ T5848] gfs2_dir_read+0x806/0x1780 [ 88.960361][ T5848] ? __pfx_inode_dio_wait+0x10/0x10 [ 88.960386][ T5848] ? __pfx___might_resched+0x10/0x10 [ 88.960409][ T5848] ? __pfx_gfs2_dir_read+0x10/0x10 [ 88.960428][ T5848] ? gfs2_glock_nq+0x10bb/0x1900 [ 88.960461][ T5848] ? gfs2_glock_wait+0x20f/0x2a0 [ 88.960485][ T5848] gfs2_readdir+0x14c/0x1b0 [ 88.960503][ T5848] ? iterate_dir+0x49f/0x770 [ 88.960524][ T5848] ? __pfx_gfs2_readdir+0x10/0x10 [ 88.960546][ T5848] ? iterate_dir+0x5af/0x770 [ 88.960567][ T5848] ? iterate_dir+0x49f/0x770 [ 88.960586][ T5848] ? down_read_killable+0x1d1/0x350 [ 88.960613][ T5848] iterate_dir+0x5af/0x770 [ 88.960640][ T5848] __se_sys_getdents64+0xe4/0x260 [ 88.960665][ T5848] ? __pfx___se_sys_getdents64+0x10/0x10 [ 88.960685][ T5848] ? __pfx_filldir64+0x10/0x10 [ 88.960716][ T5848] ? do_syscall_64+0xbe/0x3b0 [ 88.960740][ T5848] do_syscall_64+0xfa/0x3b0 [ 88.960757][ T5848] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.960775][ T5848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.960791][ T5848] ? clear_bhb_loop+0x60/0xb0 [ 88.960818][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.960833][ T5848] RIP: 0033:0x7f461d7a8c99 [ 88.960847][ T5848] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 88.960860][ T5848] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 88.960878][ T5848] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 88.960890][ T5848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 88.960899][ T5848] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 88.960909][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 88.960919][ T5848] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 88.960948][ T5848] executing program [ 89.598548][ T5856] loop0: detected capacity change from 0 to 32768 [ 89.617788][ T5856] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 89.626782][ T5856] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 89.640066][ T5856] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 89.738104][ T5856] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 89.757958][ T5856] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 89.767700][ T5856] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 89.782530][ T5856] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 89.791852][ T5856] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5856 [syz-executor110] iterate_dir+0x5af/0x770 [ 89.801842][ T5856] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 89.810575][ T5856] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 89.817818][ T5856] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 89.826916][ T5856] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 89.833599][ T5856] gfs2: fsid=syz:syz.s: File system withdrawn [ 89.839790][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 89.839815][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.839825][ T5856] Call Trace: [ 89.839832][ T5856] [ 89.839840][ T5856] dump_stack_lvl+0x189/0x250 [ 89.839875][ T5856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.839901][ T5856] ? __pfx__printk+0x10/0x10 [ 89.839920][ T5856] ? kobject_uevent_env+0x36b/0x8c0 [ 89.839959][ T5856] gfs2_withdraw+0x111e/0x14f0 [ 89.840002][ T5856] ? __pfx_gfs2_withdraw+0x10/0x10 [ 89.840026][ T5856] ? __pfx__printk+0x10/0x10 [ 89.840053][ T5856] ? gfs2_consist_inode_i+0xf5/0x110 [ 89.840077][ T5856] gfs2_dirent_scan+0x545/0x690 [ 89.840102][ T5856] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 89.840131][ T5856] gfs2_dir_read+0x806/0x1780 [ 89.840165][ T5856] ? __pfx_inode_dio_wait+0x10/0x10 [ 89.840194][ T5856] ? __pfx___might_resched+0x10/0x10 [ 89.840221][ T5856] ? __pfx_gfs2_dir_read+0x10/0x10 [ 89.840243][ T5856] ? gfs2_glock_nq+0x10bb/0x1900 [ 89.840282][ T5856] ? gfs2_glock_wait+0x20f/0x2a0 [ 89.840309][ T5856] gfs2_readdir+0x14c/0x1b0 [ 89.840331][ T5856] ? iterate_dir+0x49f/0x770 [ 89.840356][ T5856] ? __pfx_gfs2_readdir+0x10/0x10 [ 89.840382][ T5856] ? iterate_dir+0x5af/0x770 [ 89.840407][ T5856] ? iterate_dir+0x49f/0x770 [ 89.840427][ T5856] ? down_read_killable+0x1d1/0x350 [ 89.840457][ T5856] iterate_dir+0x5af/0x770 [ 89.840490][ T5856] __se_sys_getdents64+0xe4/0x260 [ 89.840516][ T5856] ? __pfx___se_sys_getdents64+0x10/0x10 [ 89.840538][ T5856] ? __pfx_filldir64+0x10/0x10 [ 89.840565][ T5856] ? rcu_is_watching+0x15/0xb0 [ 89.840594][ T5856] ? do_syscall_64+0xbe/0x3b0 [ 89.840620][ T5856] do_syscall_64+0xfa/0x3b0 [ 89.840650][ T5856] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.840671][ T5856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.840688][ T5856] ? clear_bhb_loop+0x60/0xb0 [ 89.840711][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.840728][ T5856] RIP: 0033:0x7f461d7a8c99 [ 89.840744][ T5856] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 89.840759][ T5856] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 89.840779][ T5856] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 89.840791][ T5856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 89.840801][ T5856] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 89.840812][ T5856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 89.840823][ T5856] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 89.840853][ T5856] executing program [ 90.442283][ T5864] loop0: detected capacity change from 0 to 32768 [ 90.467071][ T5864] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 90.476847][ T5864] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 90.495343][ T5864] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 90.600108][ T5864] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 90.617116][ T5864] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 90.626742][ T5864] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 90.641648][ T5864] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 90.651216][ T5864] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5864 [syz-executor110] iterate_dir+0x5af/0x770 [ 90.661215][ T5864] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 90.668895][ T5867] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 90.669693][ T5864] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 90.679702][ T5867] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 90.686476][ T5864] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 90.695934][ T5867] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5864 [syz-executor110] iterate_dir+0x5af/0x770 [ 90.714600][ T5864] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 90.714644][ T5867] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5867 [syz-executor110] iterate_dir+0x5af/0x770 [ 90.721363][ T5864] gfs2: fsid=syz:syz.s: File system withdrawn [ 90.733712][ T5867] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 90.737088][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 90.737109][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.737120][ T5864] Call Trace: [ 90.737126][ T5864] [ 90.737133][ T5864] dump_stack_lvl+0x189/0x250 [ 90.737165][ T5864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.737188][ T5864] ? __pfx__printk+0x10/0x10 [ 90.737207][ T5864] ? kobject_uevent_env+0x36b/0x8c0 [ 90.737240][ T5864] gfs2_withdraw+0x111e/0x14f0 [ 90.737278][ T5864] ? __pfx_gfs2_withdraw+0x10/0x10 [ 90.737301][ T5864] ? __pfx__printk+0x10/0x10 [ 90.737325][ T5864] ? gfs2_consist_inode_i+0xf5/0x110 [ 90.737349][ T5864] gfs2_dirent_scan+0x545/0x690 [ 90.737372][ T5864] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 90.737396][ T5864] gfs2_dir_read+0x806/0x1780 [ 90.737425][ T5864] ? __pfx_inode_dio_wait+0x10/0x10 [ 90.737449][ T5864] ? __pfx___might_resched+0x10/0x10 [ 90.737472][ T5864] ? __pfx_gfs2_dir_read+0x10/0x10 [ 90.737491][ T5864] ? gfs2_glock_nq+0x10bb/0x1900 [ 90.737524][ T5864] ? gfs2_glock_wait+0x20f/0x2a0 [ 90.737547][ T5864] gfs2_readdir+0x14c/0x1b0 [ 90.737566][ T5864] ? iterate_dir+0x49f/0x770 [ 90.737587][ T5864] ? __pfx_gfs2_readdir+0x10/0x10 [ 90.737609][ T5864] ? iterate_dir+0x5af/0x770 [ 90.737629][ T5864] ? iterate_dir+0x49f/0x770 [ 90.737648][ T5864] ? down_read_killable+0x1d1/0x350 [ 90.737674][ T5864] iterate_dir+0x5af/0x770 [ 90.737701][ T5864] __se_sys_getdents64+0xe4/0x260 [ 90.737726][ T5864] ? __pfx___se_sys_getdents64+0x10/0x10 [ 90.737746][ T5864] ? __pfx_filldir64+0x10/0x10 [ 90.737777][ T5864] ? do_syscall_64+0xbe/0x3b0 [ 90.737812][ T5864] do_syscall_64+0xfa/0x3b0 [ 90.737830][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.737847][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.737863][ T5864] ? clear_bhb_loop+0x60/0xb0 [ 90.737883][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.737897][ T5864] RIP: 0033:0x7f461d7a8c99 [ 90.737912][ T5864] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 90.737924][ T5864] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 90.737942][ T5864] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 90.737953][ T5864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 90.737962][ T5864] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 90.737972][ T5864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 90.737981][ T5864] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 90.738010][ T5864] executing program [ 91.336456][ T5869] loop0: detected capacity change from 0 to 32768 [ 91.348006][ T5869] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 91.356323][ T5869] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 91.369289][ T5869] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 91.451258][ T5869] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 91.463461][ T5869] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 91.473143][ T5869] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 91.487856][ T5869] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 91.497149][ T5869] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5869 [syz-executor110] iterate_dir+0x5af/0x770 [ 91.507135][ T5869] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 91.515750][ T5869] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 91.523419][ T5869] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 91.532713][ T5869] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 91.539454][ T5869] gfs2: fsid=syz:syz.s: File system withdrawn [ 91.545629][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 91.545653][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.545659][ T5869] Call Trace: [ 91.545664][ T5869] [ 91.545669][ T5869] dump_stack_lvl+0x189/0x250 [ 91.545691][ T5869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.545706][ T5869] ? __pfx__printk+0x10/0x10 [ 91.545718][ T5869] ? kobject_uevent_env+0x36b/0x8c0 [ 91.545740][ T5869] gfs2_withdraw+0x111e/0x14f0 [ 91.545763][ T5869] ? __pfx_gfs2_withdraw+0x10/0x10 [ 91.545778][ T5869] ? __pfx__printk+0x10/0x10 [ 91.545793][ T5869] ? gfs2_consist_inode_i+0xf5/0x110 [ 91.545808][ T5869] gfs2_dirent_scan+0x545/0x690 [ 91.545824][ T5869] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 91.545839][ T5869] gfs2_dir_read+0x806/0x1780 [ 91.545858][ T5869] ? __pfx_inode_dio_wait+0x10/0x10 [ 91.545873][ T5869] ? __pfx___might_resched+0x10/0x10 [ 91.545891][ T5869] ? __pfx_gfs2_dir_read+0x10/0x10 [ 91.545903][ T5869] ? gfs2_glock_nq+0x10bb/0x1900 [ 91.545924][ T5869] ? gfs2_glock_wait+0x20f/0x2a0 [ 91.545939][ T5869] gfs2_readdir+0x14c/0x1b0 [ 91.545951][ T5869] ? iterate_dir+0x49f/0x770 [ 91.545965][ T5869] ? __pfx_gfs2_readdir+0x10/0x10 [ 91.545979][ T5869] ? iterate_dir+0x5af/0x770 [ 91.545992][ T5869] ? iterate_dir+0x49f/0x770 [ 91.546004][ T5869] ? down_read_killable+0x1d1/0x350 [ 91.546021][ T5869] iterate_dir+0x5af/0x770 [ 91.546040][ T5869] __se_sys_getdents64+0xe4/0x260 [ 91.546066][ T5869] ? __pfx___se_sys_getdents64+0x10/0x10 [ 91.546089][ T5869] ? __pfx_filldir64+0x10/0x10 [ 91.546116][ T5869] ? rcu_is_watching+0x15/0xb0 [ 91.546141][ T5869] ? do_syscall_64+0xbe/0x3b0 [ 91.546156][ T5869] do_syscall_64+0xfa/0x3b0 [ 91.546168][ T5869] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.546179][ T5869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.546190][ T5869] ? clear_bhb_loop+0x60/0xb0 [ 91.546202][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.546212][ T5869] RIP: 0033:0x7f461d7a8c99 [ 91.546223][ T5869] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 91.546232][ T5869] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 91.546245][ T5869] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 91.546253][ T5869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 91.546259][ T5869] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 91.546265][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 91.546272][ T5869] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 91.546290][ T5869] executing program [ 92.020267][ T48] cfg80211: failed to load regulatory.db [ 92.148517][ T5874] loop0: detected capacity change from 0 to 32768 [ 92.164324][ T5874] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 92.173724][ T5874] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 92.187150][ T5874] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 92.257587][ T5874] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 92.268495][ T5874] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 92.278599][ T5874] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 92.293583][ T5874] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 92.303031][ T5874] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5874 [syz-executor110] iterate_dir+0x5af/0x770 [ 92.313338][ T5874] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 92.319847][ T5877] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 92.322713][ T5874] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 92.331446][ T5877] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 92.339000][ T5874] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 92.347835][ T5877] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5874 [syz-executor110] iterate_dir+0x5af/0x770 [ 92.357276][ T5874] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 92.367038][ T5877] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5877 [syz-executor110] iterate_dir+0x5af/0x770 [ 92.376041][ T5874] gfs2: fsid=syz:syz.s: File system withdrawn [ 92.383627][ T5877] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 92.390042][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 92.390063][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.390072][ T5874] Call Trace: [ 92.390078][ T5874] [ 92.390085][ T5874] dump_stack_lvl+0x189/0x250 [ 92.390117][ T5874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.390140][ T5874] ? __pfx__printk+0x10/0x10 [ 92.390159][ T5874] ? kobject_uevent_env+0x36b/0x8c0 [ 92.390193][ T5874] gfs2_withdraw+0x111e/0x14f0 [ 92.390231][ T5874] ? __pfx_gfs2_withdraw+0x10/0x10 [ 92.390254][ T5874] ? __pfx__printk+0x10/0x10 [ 92.390279][ T5874] ? gfs2_consist_inode_i+0xf5/0x110 [ 92.390302][ T5874] gfs2_dirent_scan+0x545/0x690 [ 92.390326][ T5874] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 92.390350][ T5874] gfs2_dir_read+0x806/0x1780 [ 92.390379][ T5874] ? __pfx_inode_dio_wait+0x10/0x10 [ 92.390403][ T5874] ? __pfx___might_resched+0x10/0x10 [ 92.390426][ T5874] ? __pfx_gfs2_dir_read+0x10/0x10 [ 92.390445][ T5874] ? gfs2_glock_nq+0x10bb/0x1900 [ 92.390478][ T5874] ? gfs2_glock_wait+0x20f/0x2a0 [ 92.390501][ T5874] gfs2_readdir+0x14c/0x1b0 [ 92.390519][ T5874] ? iterate_dir+0x49f/0x770 [ 92.390541][ T5874] ? __pfx_gfs2_readdir+0x10/0x10 [ 92.390563][ T5874] ? iterate_dir+0x5af/0x770 [ 92.390583][ T5874] ? iterate_dir+0x49f/0x770 [ 92.390602][ T5874] ? down_read_killable+0x1d1/0x350 [ 92.390641][ T5874] iterate_dir+0x5af/0x770 [ 92.390669][ T5874] __se_sys_getdents64+0xe4/0x260 [ 92.390693][ T5874] ? __pfx___se_sys_getdents64+0x10/0x10 [ 92.390714][ T5874] ? __pfx_filldir64+0x10/0x10 [ 92.390737][ T5874] ? rcu_is_watching+0x15/0xb0 [ 92.390765][ T5874] ? do_syscall_64+0xbe/0x3b0 [ 92.390789][ T5874] do_syscall_64+0xfa/0x3b0 [ 92.390806][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 92.390824][ T5874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.390839][ T5874] ? clear_bhb_loop+0x60/0xb0 [ 92.390860][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.390875][ T5874] RIP: 0033:0x7f461d7a8c99 [ 92.390889][ T5874] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 92.390903][ T5874] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 92.390921][ T5874] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 92.390932][ T5874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 92.390941][ T5874] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 92.390951][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 92.390961][ T5874] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 92.390990][ T5874] executing program [ 92.990725][ T5879] loop0: detected capacity change from 0 to 32768 [ 93.004961][ T5879] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 93.013277][ T5879] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 93.027542][ T5879] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 93.096208][ T5879] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 93.110406][ T5879] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 93.120429][ T5879] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 93.135060][ T5879] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 93.144224][ T5879] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5879 [syz-executor110] iterate_dir+0x5af/0x770 [ 93.154242][ T5879] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 93.162715][ T5879] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 93.170020][ T5879] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 93.178891][ T5879] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 93.185709][ T5879] gfs2: fsid=syz:syz.s: File system withdrawn [ 93.192024][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 93.192049][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.192059][ T5879] Call Trace: [ 93.192066][ T5879] [ 93.192074][ T5879] dump_stack_lvl+0x189/0x250 [ 93.192108][ T5879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.192134][ T5879] ? __pfx__printk+0x10/0x10 [ 93.192154][ T5879] ? kobject_uevent_env+0x36b/0x8c0 [ 93.192188][ T5879] gfs2_withdraw+0x111e/0x14f0 [ 93.192230][ T5879] ? __pfx_gfs2_withdraw+0x10/0x10 [ 93.192257][ T5879] ? __pfx__printk+0x10/0x10 [ 93.192285][ T5879] ? gfs2_consist_inode_i+0xf5/0x110 [ 93.192312][ T5879] gfs2_dirent_scan+0x545/0x690 [ 93.192337][ T5879] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 93.192366][ T5879] gfs2_dir_read+0x806/0x1780 [ 93.192400][ T5879] ? __pfx_inode_dio_wait+0x10/0x10 [ 93.192428][ T5879] ? __pfx___might_resched+0x10/0x10 [ 93.192456][ T5879] ? __pfx_gfs2_dir_read+0x10/0x10 [ 93.192479][ T5879] ? gfs2_glock_nq+0x10bb/0x1900 [ 93.192515][ T5879] ? gfs2_glock_wait+0x20f/0x2a0 [ 93.192541][ T5879] gfs2_readdir+0x14c/0x1b0 [ 93.192561][ T5879] ? iterate_dir+0x49f/0x770 [ 93.192587][ T5879] ? __pfx_gfs2_readdir+0x10/0x10 [ 93.192612][ T5879] ? iterate_dir+0x5af/0x770 [ 93.192634][ T5879] ? iterate_dir+0x49f/0x770 [ 93.192657][ T5879] ? down_read_killable+0x1d1/0x350 [ 93.192688][ T5879] iterate_dir+0x5af/0x770 [ 93.192719][ T5879] __se_sys_getdents64+0xe4/0x260 [ 93.192746][ T5879] ? __pfx___se_sys_getdents64+0x10/0x10 [ 93.192769][ T5879] ? __pfx_filldir64+0x10/0x10 [ 93.192809][ T5879] ? rcu_is_watching+0x15/0xb0 [ 93.192840][ T5879] ? do_syscall_64+0xbe/0x3b0 [ 93.192867][ T5879] do_syscall_64+0xfa/0x3b0 [ 93.192886][ T5879] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.192906][ T5879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.192922][ T5879] ? clear_bhb_loop+0x60/0xb0 [ 93.192944][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.192961][ T5879] RIP: 0033:0x7f461d7a8c99 [ 93.192978][ T5879] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 93.192993][ T5879] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 93.193013][ T5879] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 93.193026][ T5879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 93.193035][ T5879] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 93.193046][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 93.193056][ T5879] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 93.193088][ T5879] executing program [ 93.799023][ T5884] loop0: detected capacity change from 0 to 32768 [ 93.817346][ T5884] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 93.833445][ T5884] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 93.848082][ T5884] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 93.937400][ T5884] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 93.954076][ T5884] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 93.965195][ T5884] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 93.979942][ T5884] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 93.989481][ T5884] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5884 [syz-executor110] iterate_dir+0x5af/0x770 [ 93.999910][ T5884] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 94.005752][ T5887] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 94.008328][ T5884] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 94.018384][ T5887] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 94.025330][ T5884] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 94.034810][ T5887] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5884 [syz-executor110] iterate_dir+0x5af/0x770 [ 94.053265][ T5884] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 94.053533][ T5884] gfs2: fsid=syz:syz.s: File system withdrawn [ 94.063046][ T5887] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5887 [syz-executor110] iterate_dir+0x5af/0x770 [ 94.076390][ T5884] CPU: 1 UID: 0 PID: 5884 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 94.076413][ T5884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.076423][ T5884] Call Trace: [ 94.076429][ T5884] [ 94.076436][ T5884] dump_stack_lvl+0x189/0x250 [ 94.076464][ T5884] ? kobject_uevent_env+0x36b/0x8c0 [ 94.076488][ T5884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.076515][ T5884] ? __pfx__printk+0x10/0x10 [ 94.076536][ T5884] ? kobject_uevent_env+0x36b/0x8c0 [ 94.076572][ T5884] gfs2_withdraw+0x111e/0x14f0 [ 94.076588][ T5887] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 94.076625][ T5884] ? __pfx_gfs2_withdraw+0x10/0x10 [ 94.076649][ T5884] ? __pfx__printk+0x10/0x10 [ 94.076673][ T5884] ? gfs2_consist_inode_i+0xf5/0x110 [ 94.076698][ T5884] gfs2_dirent_scan+0x545/0x690 [ 94.076722][ T5884] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 94.076746][ T5884] gfs2_dir_read+0x806/0x1780 [ 94.076775][ T5884] ? __pfx_inode_dio_wait+0x10/0x10 [ 94.076799][ T5884] ? __pfx___might_resched+0x10/0x10 [ 94.076821][ T5884] ? __pfx_gfs2_dir_read+0x10/0x10 [ 94.076841][ T5884] ? gfs2_glock_nq+0x10bb/0x1900 [ 94.076873][ T5884] ? gfs2_glock_wait+0x20f/0x2a0 [ 94.076897][ T5884] gfs2_readdir+0x14c/0x1b0 [ 94.076916][ T5884] ? iterate_dir+0x49f/0x770 [ 94.076938][ T5884] ? __pfx_gfs2_readdir+0x10/0x10 [ 94.076960][ T5884] ? iterate_dir+0x5af/0x770 [ 94.076981][ T5884] ? iterate_dir+0x49f/0x770 [ 94.077000][ T5884] ? down_read_killable+0x1d1/0x350 [ 94.077026][ T5884] iterate_dir+0x5af/0x770 [ 94.077054][ T5884] __se_sys_getdents64+0xe4/0x260 [ 94.077084][ T5884] ? __pfx___se_sys_getdents64+0x10/0x10 [ 94.077104][ T5884] ? __pfx_filldir64+0x10/0x10 [ 94.077135][ T5884] ? do_syscall_64+0xbe/0x3b0 [ 94.077159][ T5884] do_syscall_64+0xfa/0x3b0 [ 94.077176][ T5884] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.077194][ T5884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.077210][ T5884] ? clear_bhb_loop+0x60/0xb0 [ 94.077230][ T5884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.077245][ T5884] RIP: 0033:0x7f461d7a8c99 [ 94.077259][ T5884] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 94.077272][ T5884] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 94.077290][ T5884] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 94.077302][ T5884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 94.077311][ T5884] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 94.077321][ T5884] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 94.077331][ T5884] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 94.077359][ T5884] executing program [ 94.682565][ T5889] loop0: detected capacity change from 0 to 32768 [ 94.706337][ T5889] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 94.715050][ T5889] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 94.728736][ T5889] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 94.820312][ T5889] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 94.836833][ T5889] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 94.846701][ T5889] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 94.861408][ T5889] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 94.870565][ T5889] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5889 [syz-executor110] iterate_dir+0x5af/0x770 [ 94.880514][ T5889] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 94.887865][ T5892] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 94.888967][ T5889] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 94.888983][ T5889] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 94.898607][ T5892] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 94.905781][ T5889] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 94.915211][ T5892] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:5889 [syz-executor110] iterate_dir+0x5af/0x770 [ 94.930749][ T5889] gfs2: fsid=syz:syz.s: File system withdrawn [ 94.930767][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 94.930788][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.930799][ T5889] Call Trace: [ 94.930806][ T5889] [ 94.930814][ T5889] dump_stack_lvl+0x189/0x250 [ 94.930845][ T5889] ? kobject_uevent_env+0x36b/0x8c0 [ 94.930873][ T5889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.930900][ T5889] ? __pfx__printk+0x10/0x10 [ 94.930921][ T5889] ? kobject_uevent_env+0x36b/0x8c0 [ 94.930958][ T5889] gfs2_withdraw+0x111e/0x14f0 [ 94.931000][ T5889] ? __pfx_gfs2_withdraw+0x10/0x10 [ 94.931025][ T5889] ? __pfx__printk+0x10/0x10 [ 94.931049][ T5889] ? gfs2_consist_inode_i+0xf5/0x110 [ 94.931073][ T5889] gfs2_dirent_scan+0x545/0x690 [ 94.931096][ T5889] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 94.931120][ T5889] gfs2_dir_read+0x806/0x1780 [ 94.931149][ T5889] ? __pfx_inode_dio_wait+0x10/0x10 [ 94.931173][ T5889] ? __pfx___might_resched+0x10/0x10 [ 94.931197][ T5889] ? __pfx_gfs2_dir_read+0x10/0x10 [ 94.931216][ T5889] ? gfs2_glock_nq+0x10bb/0x1900 [ 94.931249][ T5889] ? gfs2_glock_wait+0x20f/0x2a0 [ 94.931272][ T5889] gfs2_readdir+0x14c/0x1b0 [ 94.931291][ T5889] ? iterate_dir+0x49f/0x770 [ 94.931312][ T5889] ? __pfx_gfs2_readdir+0x10/0x10 [ 94.931334][ T5889] ? iterate_dir+0x5af/0x770 [ 94.931355][ T5889] ? iterate_dir+0x49f/0x770 [ 94.931374][ T5889] ? down_read_killable+0x1d1/0x350 [ 94.931400][ T5889] iterate_dir+0x5af/0x770 [ 94.931427][ T5889] __se_sys_getdents64+0xe4/0x260 [ 94.931452][ T5889] ? __pfx___se_sys_getdents64+0x10/0x10 [ 94.931472][ T5889] ? __pfx_filldir64+0x10/0x10 [ 94.931495][ T5889] ? rcu_is_watching+0x15/0xb0 [ 94.931532][ T5889] ? do_syscall_64+0xbe/0x3b0 [ 94.931555][ T5889] do_syscall_64+0xfa/0x3b0 [ 94.931572][ T5889] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.931590][ T5889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.931606][ T5889] ? clear_bhb_loop+0x60/0xb0 [ 94.931626][ T5889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.931641][ T5889] RIP: 0033:0x7f461d7a8c99 [ 94.931656][ T5889] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 94.931670][ T5889] RSP: 002b:00007f461d75d218 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 94.931688][ T5889] RAX: ffffffffffffffda RBX: 00007f461d8436c8 RCX: 00007f461d7a8c99 [ 94.931699][ T5889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 94.931708][ T5889] RBP: 00007f461d8436c0 R08: 0000000000000000 R09: 0000000000000000 [ 94.931718][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 94.931727][ T5889] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 94.931755][ T5889] [ 95.220750][ T5892] gfs2: fsid=syz:syz.s: H: s:UN f: e:0 p:0 [(ended)] 0xffff888029fa0e50 [ 95.231274][ T5892] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 95.243190][ T5892] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 95.251857][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz-executor110 Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 95.263826][ T5892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.273904][ T5892] RIP: 0010:gfs2_dump_glock+0x1033/0x1c50 [ 95.279625][ T5892] Code: 60 8d d0 8b be 4b 03 00 00 48 c7 c2 a0 8d d0 8b e8 22 66 a9 fd 49 8d 5d 20 49 89 de 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 28 06 00 00 48 89 5c 24 28 0f b7 1b 89 [ 95.299480][ T5892] RSP: 0018:ffffc900042af700 EFLAGS: 00010202 [ 95.305537][ T5892] RAX: dffffc0000000000 RBX: 0000000000000020 RCX: ffff88802ff01e00 [ 95.313607][ T5892] RDX: 0000000000000000 RSI: ffffffff8be322a0 RDI: ffffffff8be32260 [ 95.321663][ T5892] RBP: ffffc900042af9f0 R08: 0000000000000000 R09: ffffffff83f46f43 [ 95.329630][ T5892] R10: dffffc0000000000 R11: fffffbfff1f4319f R12: ffffffff83f46f43 [ 95.337616][ T5892] R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000000 [ 95.345581][ T5892] FS: 00007f461d73c6c0(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 [ 95.354532][ T5892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.361134][ T5892] CR2: 00007f461d73cd58 CR3: 0000000024870000 CR4: 00000000003526f0 [ 95.369204][ T5892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.377179][ T5892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.385150][ T5892] Call Trace: [ 95.388429][ T5892] [ 95.391486][ T5892] ? gfs2_dump_glock+0xf83/0x1c50 [ 95.396529][ T5892] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 95.402019][ T5892] ? vprintk_emit+0x444/0x7a0 [ 95.406709][ T5892] ? __pfx__printk+0x10/0x10 [ 95.411300][ T5892] gfs2_consist_inode_i+0xf5/0x110 [ 95.416417][ T5892] gfs2_dirent_scan+0x545/0x690 [ 95.421271][ T5892] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 95.426832][ T5892] gfs2_dir_read+0x806/0x1780 [ 95.431517][ T5892] ? __pfx_inode_dio_wait+0x10/0x10 [ 95.436718][ T5892] ? __pfx___might_resched+0x10/0x10 [ 95.442007][ T5892] ? __pfx_gfs2_dir_read+0x10/0x10 [ 95.447115][ T5892] ? gfs2_glock_nq+0x10bb/0x1900 [ 95.452057][ T5892] ? gfs2_glock_wait+0x20f/0x2a0 [ 95.456996][ T5892] gfs2_readdir+0x14c/0x1b0 [ 95.461499][ T5892] ? iterate_dir+0x49f/0x770 [ 95.466094][ T5892] ? __pfx_gfs2_readdir+0x10/0x10 [ 95.471118][ T5892] ? iterate_dir+0x5af/0x770 [ 95.475711][ T5892] ? iterate_dir+0x49f/0x770 [ 95.480297][ T5892] ? down_read_killable+0x1d1/0x350 [ 95.485516][ T5892] iterate_dir+0x5af/0x770 [ 95.489935][ T5892] __se_sys_getdents+0xe4/0x250 [ 95.495059][ T5892] ? __pfx___se_sys_getdents+0x10/0x10 [ 95.500521][ T5892] ? __pfx_filldir+0x10/0x10 [ 95.505113][ T5892] ? rcu_is_watching+0x15/0xb0 [ 95.509883][ T5892] ? do_syscall_64+0xbe/0x3b0 [ 95.514587][ T5892] do_syscall_64+0xfa/0x3b0 [ 95.519092][ T5892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.525154][ T5892] ? __switch_to_asm+0x39/0x70 [ 95.529941][ T5892] ? clear_bhb_loop+0x60/0xb0 [ 95.534618][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.540505][ T5892] RIP: 0033:0x7f461d7a8c99 [ 95.545032][ T5892] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 95.565090][ T5892] RSP: 002b:00007f461d73c218 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 95.573605][ T5892] RAX: ffffffffffffffda RBX: 00007f461d8436d8 RCX: 00007f461d7a8c99 [ 95.581616][ T5892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 95.589595][ T5892] RBP: 00007f461d8436d0 R08: 0000000000000000 R09: 0000000000000000 [ 95.597648][ T5892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f461d80f814 [ 95.605623][ T5892] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500 [ 95.613689][ T5892] [ 95.616712][ T5892] Modules linked in: [ 95.620698][ T5892] ---[ end trace 0000000000000000 ]--- [ 95.626327][ T5892] RIP: 0010:gfs2_dump_glock+0x1033/0x1c50 [ 95.632126][ T5892] Code: 60 8d d0 8b be 4b 03 00 00 48 c7 c2 a0 8d d0 8b e8 22 66 a9 fd 49 8d 5d 20 49 89 de 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 28 06 00 00 48 89 5c 24 28 0f b7 1b 89 [ 95.651847][ T5892] RSP: 0018:ffffc900042af700 EFLAGS: 00010202 [ 95.657942][ T5892] RAX: dffffc0000000000 RBX: 0000000000000020 RCX: ffff88802ff01e00 [ 95.665934][ T5892] RDX: 0000000000000000 RSI: ffffffff8be322a0 RDI: ffffffff8be32260 [ 95.673964][ T5892] RBP: ffffc900042af9f0 R08: 0000000000000000 R09: ffffffff83f46f43 [ 95.681973][ T5892] R10: dffffc0000000000 R11: fffffbfff1f4319f R12: ffffffff83f46f43 [ 95.689982][ T5892] R13: 0000000000000000 R14: 0000000000000004 R15: 0000000000000000 [ 95.697946][ T5892] FS: 00007f461d73c6c0(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 95.707078][ T5892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.713710][ T5892] CR2: 00007f461d7fc798 CR3: 0000000024870000 CR4: 00000000003526f0 [ 95.721742][ T5892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.729744][ T5892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.737808][ T5892] Kernel panic - not syncing: Fatal exception [ 95.744152][ T5892] Kernel Offset: disabled [ 95.748467][ T5892] Rebooting in 86400 seconds..